<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.78.79.169" dst_port="53" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="42.78.79.169" dst_port="53" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="42.78.79.169" dst_port="21" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="42.78.79.169" dst_port="21" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="200.116.40.118" dst_port="53" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="200.116.40.118" dst_port="53" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="200.116.40.118" dst_port="21" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="200.116.40.118" dst_port="21" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="41.134.144.174" dst_port="53" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="41.134.144.174" dst_port="53" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="41.134.144.174" dst_port="21" proto="tcp" src_ip="131.19.9.43" src_port="80"/>
      <filter dst_ip="41.134.144.174" dst_port="21" proto="udp" src_ip="131.19.9.43" src_port="80"/>
      <from sec="1292130105" usec="0"/>
      <to sec="1292130395" usec="0"/>
    </slice>
    <from sec="1292130105" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.162.109.60" dst_port="80" proto="tcp" src_ip="9.53.50.53" src_port="49818"/>
      <from sec="1292130872" usec="0"/>
      <to sec="1292130876" usec="0"/>
    </slice>
    <from sec="1292130872" usec="0"/>
    <to sec="1292130876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="19.197.156.44" dst_port="80" proto="tcp" src_ip="213.240.196.56" src_port="80"/>
      <filter dst_ip="19.197.156.44" dst_port="80" proto="udp" src_ip="213.240.196.56" src_port="80"/>
      <filter dst_ip="9.46.46.48" dst_port="80" proto="tcp" src_ip="213.240.196.56" src_port="80"/>
      <filter dst_ip="9.46.46.48" dst_port="80" proto="udp" src_ip="213.240.196.56" src_port="80"/>
      <from sec="1292130048" usec="0"/>
      <to sec="1292130879" usec="0"/>
    </slice>
    <from sec="1292130048" usec="0"/>
    <to sec="1292130879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="179.115.39.247" dst_port="80" proto="tcp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="80" proto="udp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="53" proto="tcp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="53" proto="udp" src_ip="213.240.196.57" src_port="3127"/>
      <from sec="1292130027" usec="0"/>
      <to sec="1292130877" usec="0"/>
    </slice>
    <from sec="1292130027" usec="0"/>
    <to sec="1292130877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.38.1" dst_port="80" proto="tcp" src_ip="0.120.244.79" src_port="45209"/>
      <from sec="1292130729" usec="0"/>
      <to sec="1292130731" usec="0"/>
    </slice>
    <from sec="1292130728" usec="0"/>
    <to sec="1292130731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_5{
style=filled;
color=gray75;
8036[label="131.19.2.202;82pkt 82fpkt", shape=pentagon, color=darkviolet];
stat5[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.2.202:*, *:80}[54.878%]&lt;BR/&gt;{131.19.2.202:32335, *:*}[45.122%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.439%)&lt;BR/&gt; 32335: (22.561%)&lt;BR/&gt; 63140: (0.609756%)&lt;BR/&gt; 63013: (0.609756%)&lt;BR/&gt; 62589: (0.609756%)&gt;];
}
</description>
    <slice>
      <filter src_ip="131.19.2.202" src_port="32335"/>
      <filter dst_port="80" src_ip="131.19.2.202"/>
    </slice>
    <from sec="1292130023" usec="0"/>
    <to sec="1292130884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.216" dst_port="80" proto="tcp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.216" dst_port="80" proto="udp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.216" dst_port="53" proto="tcp" src_ip="195.68.79.120"/>
      <filter dst_ip="173.46.150.216" dst_port="53" proto="udp" src_ip="195.68.79.120"/>
      <from sec="1292130889" usec="0"/>
      <to sec="1292130892" usec="0"/>
    </slice>
    <from sec="1292130889" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_ip="173.46.150.165" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="173.46.150.165" src_port="80"/>
      <from sec="1292130002" usec="0"/>
      <to sec="1292130850" usec="0"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.101.227.31" dst_port="53" proto="tcp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="44.101.227.31" dst_port="53" proto="udp" src_ip="173.46.150.169" src_port="80"/>
      <from sec="1292130103" usec="0"/>
      <to sec="1292130787" usec="0"/>
    </slice>
    <from sec="1292130103" usec="0"/>
    <to sec="1292130787" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="53" proto="tcp" src_ip="173.46.150.172" src_port="80"/>
      <filter dst_port="53" proto="udp" src_ip="173.46.150.172" src_port="80"/>
      <from sec="1292130105" usec="0"/>
      <to sec="1292130834" usec="0"/>
    </slice>
    <from sec="1292130105" usec="0"/>
    <to sec="1292130834" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.6.222.118" dst_port="443" proto="tcp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="443" proto="udp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="21" proto="tcp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="21" proto="udp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="80" proto="tcp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="80" proto="udp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="53" proto="tcp" src_ip="131.19.145.203" src_port="1521"/>
      <filter dst_ip="3.6.222.118" dst_port="53" proto="udp" src_ip="131.19.145.203" src_port="1521"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130896" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="173.46.150.218" src_port="80"/>
      <filter dst_port="80" proto="udp" src_ip="173.46.150.218" src_port="80"/>
      <filter dst_port="80" proto="icmp" src_ip="173.46.150.218" src_port="80"/>
      <filter dst_port="80" proto="tcp" src_ip="173.46.150.218" src_port="3124"/>
      <filter dst_port="80" proto="udp" src_ip="173.46.150.218" src_port="3124"/>
      <filter dst_port="80" proto="icmp" src_ip="173.46.150.218" src_port="3124"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130896" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="16.217.162.141" dst_port="80" proto="tcp" src_ip="212.68.6.224" src_port="33525"/>
      <filter dst_ip="16.217.162.141" dst_port="80" proto="icmp" src_ip="212.68.6.224" src_port="33525"/>
      <filter dst_ip="16.217.162.141" dst_port="80" proto="tcp" src_ip="212.68.6.224" src_port="80"/>
      <filter dst_ip="16.217.162.141" dst_port="80" proto="icmp" src_ip="212.68.6.224" src_port="80"/>
      <from sec="1292130217" usec="0"/>
      <to sec="1292130879" usec="0"/>
    </slice>
    <from sec="1292130217" usec="0"/>
    <to sec="1292130879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,503,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="218.84.223.23" dst_port="80" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="218.84.223.23" dst_port="80" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="218.84.223.23" dst_port="53" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="218.84.223.23" dst_port="53" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="218.84.223.23" dst_port="21" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="218.84.223.23" dst_port="21" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="80" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="80" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="53" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="53" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="21" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.68.146.229" dst_port="21" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="tcp" src_ip="131.19.44.234" src_port="3315"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="udp" src_ip="131.19.44.234" src_port="3315"/>
      <from sec="1292130140" usec="0"/>
      <to sec="1292130143" usec="0"/>
    </slice>
    <from sec="1292130140" usec="0"/>
    <to sec="1292130143" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <from sec="1292130029" usec="0"/>
      <to sec="1292130034" usec="0"/>
    </slice>
    <from sec="1292130029" usec="0"/>
    <to sec="1292130034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="46952"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="46952"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="46952"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="46952"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="38680"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="38680"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="38680"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="38680"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="53423"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="53423"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="53423"/>
      <filter dst_ip="213.240.205.19" proto="tcp" src_ip="213.240.205.19" src_port="53423"/>
      <from sec="1292130069" usec="0"/>
      <to sec="1292130896" usec="0"/>
    </slice>
    <from sec="1292130069" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="80" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="udp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="tcp" src_ip="213.240.196.57"/>
      <filter dst_ip="213.240.196.57" dst_port="53" proto="udp" src_ip="213.240.196.57"/>
      <from sec="1292130056" usec="0"/>
      <to sec="1292130894" usec="0"/>
    </slice>
    <from sec="1292130056" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.141.131.81" dst_port="25" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="25" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="25" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="25" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="133.141.131.81" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <from sec="1292130514" usec="0"/>
      <to sec="1292130852" usec="0"/>
    </slice>
    <from sec="1292130514" usec="0"/>
    <to sec="1292130852" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="40952"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="40952"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="40952"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="40952"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="42367"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="42367"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="42367"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="42367"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="35903"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="35903"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="35903"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="35903"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="36930"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="36930"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="36930"/>
      <filter dst_ip="213.240.198.89" proto="tcp" src_ip="213.240.198.89" src_port="36930"/>
      <from sec="1292130107" usec="0"/>
      <to sec="1292130818" usec="0"/>
    </slice>
    <from sec="1292130107" usec="0"/>
    <to sec="1292130818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="3.140.192.103" dst_port="80" proto="tcp" src_ip="212.68.150.190"/>
      <filter dst_ip="3.140.192.103" dst_port="80" proto="tcp" src_ip="212.68.150.190"/>
      <filter dst_ip="3.140.192.103" dst_port="80" proto="tcp" src_ip="212.68.150.190"/>
      <filter dst_ip="3.140.192.103" dst_port="80" proto="tcp" src_ip="212.68.150.190"/>
      <from sec="1292130477" usec="0"/>
      <to sec="1292130479" usec="0"/>
    </slice>
    <from sec="1292130477" usec="0"/>
    <to sec="1292130479" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.193.144" dst_port="80" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="80" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="80" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="80" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="21" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="21" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="21" proto="tcp" src_ip="213.240.193.144"/>
      <filter dst_ip="213.240.193.144" dst_port="21" proto="tcp" src_ip="213.240.193.144"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130875" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="21" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="21" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="21" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="21" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="53" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="53" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="53" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="53" proto="tcp" src_ip="213.240.193.145"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130875" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="12.192.65.204" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="21" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <filter dst_ip="173.46.18.148" dst_port="80" proto="tcp" src_ip="216.83.190.73" src_port="80"/>
      <from sec="1292130270" usec="0"/>
      <to sec="1292130377" usec="0"/>
    </slice>
    <from sec="1292130270" usec="0"/>
    <to sec="1292130377" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.164" dst_port="21" proto="tcp" src_ip="173.46.150.164" src_port="2733"/>
      <filter dst_ip="173.46.150.164" dst_port="21" proto="tcp" src_ip="173.46.150.164" src_port="2733"/>
      <filter dst_ip="173.46.150.164" dst_port="21" proto="tcp" src_ip="173.46.150.164" src_port="2733"/>
      <filter dst_ip="173.46.150.164" dst_port="21" proto="tcp" src_ip="173.46.150.164" src_port="2733"/>
      <from sec="1292130266" usec="0"/>
      <to sec="1292130873" usec="0"/>
    </slice>
    <from sec="1292130266" usec="0"/>
    <to sec="1292130873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="udp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="tcp" src_ip="173.46.150.172"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="udp" src_ip="173.46.150.172"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130877" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130877" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <from sec="1292130120" usec="0"/>
      <to sec="1292130869" usec="0"/>
    </slice>
    <from sec="1292130120" usec="0"/>
    <to sec="1292130869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,999,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.8.119.47" dst_port="1051" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="44.8.119.47" dst_port="1051" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="44.8.119.47" dst_port="53" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="44.8.119.47" dst_port="53" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="44.8.119.47" dst_port="80" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="44.8.119.47" dst_port="80" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="1051" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="1051" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="53" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="53" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="80" proto="tcp" src_ip="133.17.21.2" src_port="8080"/>
      <filter dst_ip="213.240.205.84" dst_port="80" proto="udp" src_ip="133.17.21.2" src_port="8080"/>
      <from sec="1292130847" usec="0"/>
      <to sec="1292130875" usec="0"/>
    </slice>
    <from sec="1292130847" usec="0"/>
    <to sec="1292130875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="100.64.192.221" dst_port="80" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="80" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="21" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="21" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="53" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="53" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="80" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="80" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="21" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="21" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="53" proto="tcp" src_ip="133.17.164.101" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="53" proto="udp" src_ip="133.17.164.101" src_port="80"/>
      <from sec="1292130392" usec="0"/>
      <to sec="1292130901" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="100.64.192.221" dst_port="80" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="80" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="21" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="21" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="53" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="100.64.192.221" dst_port="53" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="80" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="80" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="21" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="21" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="53" proto="tcp" src_ip="213.240.197.22" src_port="80"/>
      <filter dst_ip="204.139.146.177" dst_port="53" proto="udp" src_ip="213.240.197.22" src_port="80"/>
      <from sec="1292130898" usec="0"/>
      <to sec="1292130901" usec="0"/>
    </slice>
    <from sec="1292130392" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="216.83.190.73" proto="icmp" src_ip="213.240.201.224"/>
      <from sec="1292130031" usec="0"/>
      <to sec="1292130335" usec="0"/>
    </slice>
    <from sec="1292130030" usec="0"/>
    <to sec="1292130335" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="131.19.118.72" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="16.208.90.154" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="80" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <filter dst_ip="193.57.83.81" dst_port="21" proto="tcp" src_ip="193.57.83.81" src_port="31208"/>
      <from sec="1292130347" usec="0"/>
      <to sec="1292130711" usec="0"/>
    </slice>
    <from sec="1292130347" usec="0"/>
    <to sec="1292130711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="53" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="udp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="tcp" src_ip="191.100.102.225"/>
      <filter dst_ip="191.100.102.225" dst_port="21" proto="udp" src_ip="191.100.102.225"/>
      <from sec="1292130354" usec="0"/>
      <to sec="1292130875" usec="0"/>
    </slice>
    <from sec="1292130353" usec="0"/>
    <to sec="1292130875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="173.46.150.216" src_port="80"/>
      <filter dst_port="80" proto="icmp" src_ip="173.46.150.216" src_port="80"/>
      <from sec="1292130022" usec="0"/>
      <to sec="1292130893" usec="0"/>
    </slice>
    <from sec="1292130022" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,010,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="23" proto="tcp" src_ip="6.136.143.36"/>
      <filter dst_port="23" proto="udp" src_ip="6.136.143.36"/>
      <filter dst_port="53" proto="tcp" src_ip="6.136.143.36"/>
      <filter dst_port="53" proto="udp" src_ip="6.136.143.36"/>
      <from sec="1292130110" usec="0"/>
      <to sec="1292130115" usec="0"/>
    </slice>
    <from sec="1292130110" usec="0"/>
    <to sec="1292130115" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,504,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="67.115.53.104" dst_port="53" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="53" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="443" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="443" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="21" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="21" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="80" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="67.115.53.104" dst_port="80" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="53" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="53" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="443" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="443" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="21" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="21" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="80" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="212.68.6.17" dst_port="80" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="53" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="53" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="443" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="443" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="21" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="21" proto="udp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="80" proto="tcp" src_ip="131.19.136.114"/>
      <filter dst_ip="163.150.206.8" dst_port="80" proto="udp" src_ip="131.19.136.114"/>
      <from sec="1292130879" usec="0"/>
      <to sec="1292130881" usec="0"/>
    </slice>
    <slice>
      <filter dst_ip="67.115.53.104" dst_port="53" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="53" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="443" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="443" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="21" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="21" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="80" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="67.115.53.104" dst_port="80" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="53" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="53" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="443" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="443" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="21" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="21" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="80" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="212.68.6.17" dst_port="80" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="53" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="53" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="443" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="443" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="21" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="21" proto="udp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="80" proto="tcp" src_ip="213.240.204.88"/>
      <filter dst_ip="163.150.206.8" dst_port="80" proto="udp" src_ip="213.240.204.88"/>
      <from sec="1292130878" usec="0"/>
      <to sec="1292130881" usec="0"/>
    </slice>
    <from sec="1292130878" usec="0"/>
    <to sec="1292130881" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="66.50.119.235"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="443" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="21" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="53" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="tcp" src_ip="107.64.90.195"/>
      <filter dst_ip="107.64.90.195" dst_port="80" proto="udp" src_ip="107.64.90.195"/>
      <from sec="1292130543" usec="0"/>
      <to sec="1292130666" usec="0"/>
    </slice>
    <from sec="1292130543" usec="0"/>
    <to sec="1292130666" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.68.146.229" dst_port="80" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="212.68.146.229" dst_port="80" proto="udp" src_ip="173.46.19.70"/>
      <filter dst_ip="212.68.146.229" dst_port="53" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="212.68.146.229" dst_port="53" proto="udp" src_ip="173.46.19.70"/>
      <filter dst_ip="212.68.146.229" dst_port="21" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="212.68.146.229" dst_port="21" proto="udp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="80" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="80" proto="udp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="53" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="53" proto="udp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="21" proto="tcp" src_ip="173.46.19.70"/>
      <filter dst_ip="173.46.150.208" dst_port="21" proto="udp" src_ip="173.46.19.70"/>
      <from sec="1292130866" usec="0"/>
      <to sec="1292130868" usec="0"/>
    </slice>
    <from sec="1292130866" usec="0"/>
    <to sec="1292130869" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="194.116.9.149" dst_port="80" proto="udp" src_ip="54.100.112.248"/>
      <from sec="1292130840" usec="0"/>
      <to sec="1292130843" usec="0"/>
    </slice>
    <from sec="1292130840" usec="0"/>
    <to sec="1292130843" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.963767,2.1596,901,1 0 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="53" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="tcp" src_ip="54.100.112.248"/>
      <filter dst_ip="212.187.64.196" dst_port="21" proto="udp" src_ip="54.100.112.248"/>
      <from sec="1292130307" usec="0"/>
      <to sec="1292130309" usec="0"/>
    </slice>
    <from sec="1292130306" usec="0"/>
    <to sec="1292130309" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="179.115.39.247" dst_port="80" proto="tcp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="80" proto="udp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="53" proto="tcp" src_ip="213.240.196.57" src_port="3127"/>
      <filter dst_ip="179.115.39.247" dst_port="53" proto="udp" src_ip="213.240.196.57" src_port="3127"/>
      <from sec="1292130027" usec="0"/>
      <to sec="1292130395" usec="0"/>
    </slice>
    <from sec="1292130027" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.156.9.153" dst_port="53" proto="tcp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="204.156.9.153" dst_port="53" proto="udp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="174.41.119.217" dst_port="53" proto="tcp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="174.41.119.217" dst_port="53" proto="udp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="174.41.119.216" dst_port="53" proto="tcp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="174.41.119.216" dst_port="53" proto="udp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="200.117.231.33" dst_port="53" proto="tcp" src_ip="173.46.150.169" src_port="80"/>
      <filter dst_ip="200.117.231.33" dst_port="53" proto="udp" src_ip="173.46.150.169" src_port="80"/>
      <from sec="1292130491" usec="0"/>
      <to sec="1292130751" usec="0"/>
    </slice>
    <from sec="1292130490" usec="0"/>
    <to sec="1292130751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="42.75.77.116" dst_port="80" proto="tcp" src_ip="173.46.150.172" src_port="80"/>
      <filter dst_ip="42.75.77.116" dst_port="80" proto="udp" src_ip="173.46.150.172" src_port="80"/>
      <filter dst_ip="42.75.77.116" dst_port="53" proto="tcp" src_ip="173.46.150.172" src_port="80"/>
      <filter dst_ip="42.75.77.116" dst_port="53" proto="udp" src_ip="173.46.150.172" src_port="80"/>
      <from sec="1292130203" usec="0"/>
      <to sec="1292130472" usec="0"/>
    </slice>
    <from sec="1292130203" usec="0"/>
    <to sec="1292130473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_port="80" proto="tcp" src_ip="173.46.150.218" src_port="80"/>
      <filter dst_port="80" proto="icmp" src_ip="173.46.150.218" src_port="80"/>
      <from sec="1292130002" usec="0"/>
      <to sec="1292130896" usec="0"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="53" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="tcp" src_port="49185"/>
      <filter dst_ip="212.73.72.10" dst_port="21" proto="udp" src_port="49185"/>
      <from sec="1292130029" usec="0"/>
      <to sec="1292130034" usec="0"/>
    </slice>
    <from sec="1292130029" usec="0"/>
    <to sec="1292130034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="tcp" src_ip="131.19.145.154"/>
      <filter dst_ip="173.46.150.172" dst_port="80" proto="udp" src_ip="131.19.145.154"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="tcp" src_ip="131.19.145.154"/>
      <filter dst_ip="173.46.150.172" dst_port="53" proto="udp" src_ip="131.19.145.154"/>
      <from sec="1292130138" usec="0"/>
      <to sec="1292130141" usec="0"/>
    </slice>
    <from sec="1292130138" usec="0"/>
    <to sec="1292130141" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="53" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="21" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="udp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="tcp" src_ip="216.83.190.73"/>
      <filter dst_ip="212.73.83.22" dst_port="80" proto="udp" src_ip="216.83.190.73"/>
      <from sec="1292130083" usec="0"/>
      <to sec="1292130683" usec="0"/>
    </slice>
    <from sec="1292130083" usec="0"/>
    <to sec="1292130683" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <filter dst_ip="213.240.193.145" dst_port="80" proto="tcp" src_ip="213.240.193.145"/>
      <from sec="1292130075" usec="0"/>
      <to sec="1292130560" usec="0"/>
    </slice>
    <from sec="1292130075" usec="0"/>
    <to sec="1292130560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32315,2.19201,901,0 1 0 0 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="80" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="21" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="tcp" src_ip="173.46.150.218"/>
      <filter dst_ip="173.46.150.218" dst_port="53" proto="udp" src_ip="173.46.150.218"/>
      <from sec="1292130359" usec="0"/>
      <to sec="1292130393" usec="0"/>
    </slice>
    <from sec="1292130359" usec="0"/>
    <to sec="1292130393" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="240" usec="0"/>
    <to sec="44006304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_60{
style=filled;
color=gray75;
681[label="115.252.250.17;d;1pkt 1fpkt", shape=diamond, color=yellow];
682[label="131.19.86.108;s;1pkt 1fpkt", shape=diamond, color=yellow];
4683[label="115.252.250.17;d;1pkt 1fpkt", shape=hexagon, color=black];
stat60[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.86.108:60006, 115.252.250.17:10318}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60006: (50%)&lt;BR/&gt; 10318: (50%)&gt;];
}
681--682[label="1;1pkt 1fpkt"];
681--4683[label="1;1pkt 1fpkt"];
682--4683[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="115.252.250.17" dst_port="10318" src_ip="131.19.86.108" src_port="60006"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
724[label="213.240.205.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
727[label="53.46.241.56;s;6pkt 6fpkt", shape=diamond, color=yellow];
5026[label="213.240.205.68;d;1pkt 1fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{53.46.241.56:*, 213.240.205.12:993}[50%]&lt;BR/&gt;{53.46.241.56:43190, *:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39227: (18.75%)&lt;BR/&gt; 993: (18.75%)&lt;BR/&gt; 548: (18.75%)&lt;BR/&gt; 43190: (12.5%)&lt;BR/&gt; 57362: (6.25%)&gt;];
}
724--727[label="1;1pkt 1fpkt"];
724--5026[label="1;1pkt 1fpkt"];
727--5026[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="53.46.241.56" src_port="43190"/>
      <filter dst_ip="213.240.205.12" dst_port="993" src_ip="53.46.241.56"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
915[label="213.240.193.153;d;1pkt 1fpkt", shape=diamond, color=yellow];
918[label="192.45.132.74;s;1pkt 1fpkt", shape=diamond, color=yellow];
4714[label="213.240.193.153;d;1pkt 1fpkt", shape=hexagon, color=black];
4716[label="192.45.132.74;s;1pkt 1fpkt", shape=hexagon, color=black];
6956[label="192.45.132.74;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.45.132.74:873, 213.240.193.153:50525}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50525: (50%)&lt;BR/&gt; 873: (50%)&gt;];
}
915--918[label="1;1pkt 1fpkt"];
915--4714[label="1;1pkt 1fpkt"];
915--4716[label="1;1pkt 1fpkt"];
915--6956[label="1;1pkt 1fpkt"];
918--4714[label="1;1pkt 1fpkt"];
918--4716[label="1;1pkt 1fpkt"];
918--6956[label="1;1pkt 1fpkt"];
4714--4716[label="1;1pkt 1fpkt"];
4714--6956[label="1;1pkt 1fpkt"];
4716--6956[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.193.153" dst_port="50525" src_ip="192.45.132.74" src_port="873"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
938[label="173.46.18.168;d;3pkt 3fpkt", shape=diamond, color=yellow];
941[label="193.1.8.187;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{0.120.229.161:80, 173.46.18.168:2533}[33.3333%]&lt;BR/&gt;{193.1.8.187:80, 173.46.18.168:2538}[33.3333%]&lt;BR/&gt;{192.186.44.244:80, 173.46.18.168:2624}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2538: (25%)&lt;BR/&gt; 2624: (12.5%)&lt;BR/&gt; 2533: (12.5%)&gt;];
}
938--941[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.18.168" dst_port="2624" src_ip="192.186.44.244" src_port="80"/>
      <filter dst_ip="173.46.18.168" dst_port="2538" src_ip="193.1.8.187" src_port="80"/>
      <filter dst_ip="173.46.18.168" dst_port="2533" src_ip="0.120.229.161" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130222" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11695,2.10765,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_65{
style=filled;
color=gray75;
141[label="173.46.18.168s;2pkt 2fpkt", shape=rectangle, color=red];
939[label="173.46.18.168;s;3pkt 3fpkt", shape=diamond, color=yellow];
940[label="193.1.8.187;d;1pkt 1fpkt", shape=diamond, color=yellow];
1075[label="173.46.121.251;s;1pkt 1fpkt", shape=diamond, color=yellow];
1625[label="193.1.8.186;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat65[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.121.251:57971, 193.1.8.186:80}[25%]&lt;BR/&gt;{173.46.18.168:2533, 0.120.229.161:80}[25%]&lt;BR/&gt;{173.46.18.168:2538, 193.1.8.187:80}[25%]&lt;BR/&gt;{173.46.18.168:2624, 192.186.44.244:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57971: (18.75%)&lt;BR/&gt; 2538: (18.75%)&lt;BR/&gt; 2624: (6.25%)&lt;BR/&gt; 2533: (6.25%)&gt;];
}
141--217[label="0.5;1pkt 1fpkt"];
141--939[label="0.5;1pkt 1fpkt"];
141--940[label="1;1pkt 1fpkt"];
141--1075[label="1;1pkt 1fpkt"];
141--1625[label="1;1pkt 1fpkt"];
939--940[label="1;1pkt 1fpkt"];
1075--1625[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.186.44.244" dst_port="80" src_ip="173.46.18.168" src_port="2624"/>
      <filter dst_ip="193.1.8.187" dst_port="80" src_ip="173.46.18.168" src_port="2538"/>
      <filter dst_ip="0.120.229.161" dst_port="80" src_ip="173.46.18.168" src_port="2533"/>
      <filter dst_ip="193.1.8.186" dst_port="80" src_ip="173.46.121.251" src_port="57971"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="181.10.113.42"/>
      <from sec="1292130573" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130573" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="181.10.113.42"/>
      <from sec="1292130573" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130573" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
1114[label="131.19.194.11;s;1143pkt 1143fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.194.11:123, *:123}[34.6457%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (64.8731%)&lt;BR/&gt; 53: (2.27472%)&lt;BR/&gt; 1027: (0.699913%)&lt;BR/&gt; 0: (0.437445%)&lt;BR/&gt; 2050: (0.393701%)&gt;];
}
1114--6114[label="0.00699913;8pkt 8fpkt"];
1114--6128[label="0.00437445;5pkt 5fpkt"];
1114--6177[label="0.00699913;8pkt 8fpkt"];
1114--6189[label="0.00437445;5pkt 5fpkt"];
1114--6235[label="0.00437445;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="123" src_ip="131.19.194.11" src_port="123"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.35705,2.05962,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_69{
style=filled;
color=gray75;
95[label="178.245.143.122s;1pkt 1fpkt", shape=rectangle, color=red];
1198[label="178.245.143.122;s;14pkt 14fpkt", shape=diamond, color=yellow];
1199[label="173.46.150.166;d;17pkt 17fpkt", shape=diamond, color=yellow];
5112[label="173.46.150.166;d;17pkt 17fpkt", shape=hexagon, color=black];
stat69[shape=component, label=&lt;Rules:&lt;BR/&gt;{178.245.143.122:*, 173.46.150.166:80}[82.3529%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3670: (4.08163%)&lt;BR/&gt; 3693: (3.06122%)&lt;BR/&gt; 3691: (3.06122%)&lt;BR/&gt; 3687: (3.06122%)&gt;];
}
95--1198[label="1;1pkt 1fpkt"];
95--1199[label="1;1pkt 1fpkt"];
95--5112[label="1;1pkt 1fpkt"];
1198--1199[label="1;14pkt 14fpkt"];
1198--5112[label="1;14pkt 14fpkt"];
1199--5112[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.166" dst_port="80" src_ip="178.245.143.122"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_70{
style=filled;
color=gray75;
1232[label="131.19.218.19;s;7pkt 7fpkt", shape=diamond, color=yellow];
1264[label="12.192.77.145;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat70[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.218.19:*, 12.192.77.145:1935}[28.5714%]&lt;BR/&gt;{131.19.218.19:*, 206.16.211.245:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.7778%)&lt;BR/&gt; 1935: (22.2222%)&lt;BR/&gt; 1569: (11.1111%)&lt;BR/&gt; 1568: (11.1111%)&lt;BR/&gt; 1567: (5.55556%)&gt;];
}
1232--1264[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="206.16.211.245" dst_port="80" src_ip="131.19.218.19"/>
      <filter dst_ip="12.192.77.145" dst_port="1935" src_ip="131.19.218.19"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130091" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="133.17.112.70"/>
      <from sec="1292130011" usec="0"/>
      <to sec="1292130018" usec="0"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130018" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="155.31.0.18"/>
      <from sec="1292130028" usec="0"/>
      <to sec="1292130031" usec="0"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130031" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.216.63.106"/>
      <from sec="1292130433" usec="0"/>
      <to sec="1292130630" usec="0"/>
    </slice>
    <from sec="1292130433" usec="0"/>
    <to sec="1292130630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="177.113.147.28"/>
      <from sec="1292130471" usec="0"/>
      <to sec="1292130733" usec="0"/>
    </slice>
    <from sec="1292130471" usec="0"/>
    <to sec="1292130733" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.53.33.178"/>
      <from sec="1292130082" usec="0"/>
      <to sec="1292130097" usec="0"/>
    </slice>
    <from sec="1292130082" usec="0"/>
    <to sec="1292130097" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
732[label="133.0.158.76;s;24pkt 24fpkt", shape=diamond, color=yellow];
1474[label="213.25.218.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
5569[label="133.0.158.76;s;19pkt 19fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.158.76:20248, *:*}[70.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 20248: (34.0909%)&lt;BR/&gt; 443: (7.95455%)&lt;BR/&gt; 1119: (5.68182%)&lt;BR/&gt; 63285: (3.40909%)&lt;BR/&gt; 63936: (2.27273%)&gt;];
}
732--1474[label="1;1pkt 1fpkt"];
732--5569[label="1;19pkt 19fpkt"];
1474--5569[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="133.0.158.76" src_port="20248"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12648,2.07796,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_79{
style=filled;
color=gray75;
731[label="133.0.158.76;d;4pkt 4fpkt", shape=diamond, color=yellow];
1475[label="213.25.218.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
4689[label="133.0.158.76;d;4pkt 4fpkt", shape=hexagon, color=black];
8762[label="213.25.218.69;1pkt 1fpkt", shape=invtriangle, color=brown];
stat79[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.25.218.68:1119, 133.0.158.76:62827}[25%]&lt;BR/&gt;{213.25.218.69:1119, 133.0.158.76:63285}[25%]&lt;BR/&gt;{197.96.38.248:12350, 133.0.158.76:63636}[25%]&lt;BR/&gt;{34.66.34.252:24986, 133.0.158.76:20248}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1119: (30%)&lt;BR/&gt; 63285: (20%)&lt;BR/&gt; 63636: (10%)&lt;BR/&gt; 62827: (10%)&lt;BR/&gt; 24986: (10%)&gt;];
}
731--1475[label="1;1pkt 1fpkt"];
731--4689[label="1;4pkt 4fpkt"];
731--8762[label="1;1pkt 1fpkt"];
1475--4689[label="1;1pkt 1fpkt"];
1475--8762[label="1;1pkt 1fpkt"];
4689--8762[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.158.76" dst_port="20248" src_ip="34.66.34.252" src_port="24986"/>
      <filter dst_ip="133.0.158.76" dst_port="63636" src_ip="197.96.38.248" src_port="12350"/>
      <filter dst_ip="133.0.158.76" dst_port="63285" src_ip="213.25.218.69" src_port="1119"/>
      <filter dst_ip="133.0.158.76" dst_port="62827" src_ip="213.25.218.68" src_port="1119"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
1509[label="173.46.139.173;d;2pkt 2fpkt", shape=diamond, color=yellow];
1510[label="65.209.39.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
1645[label="205.197.146.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
5728[label="173.46.139.173;d;2pkt 2fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.197.146.34:6837, 173.46.139.173:4500}[50%]&lt;BR/&gt;{65.209.39.199:4500, 173.46.139.173:4500}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (75%)&lt;BR/&gt; 6837: (25%)&gt;];
}
1509--1510[label="1;1pkt 1fpkt"];
1509--1645[label="1;1pkt 1fpkt"];
1509--5728[label="1;2pkt 2fpkt"];
1510--5728[label="1;1pkt 1fpkt"];
1645--5728[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.139.173" dst_port="4500" src_ip="65.209.39.199" src_port="4500"/>
      <filter dst_ip="173.46.139.173" dst_port="4500" src_ip="205.197.146.34" src_port="6837"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_81{
style=filled;
color=gray75;
1591[label="64.41.109.136;d;98pkt 98fpkt", shape=diamond, color=yellow];
1592[label="173.46.150.193;s;98pkt 98fpkt", shape=diamond, color=yellow];
stat81[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.150.193:22, 64.41.109.136:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (50%)&lt;BR/&gt; 59316: (0.510204%)&lt;BR/&gt; 59299: (0.510204%)&lt;BR/&gt; 59282: (0.510204%)&lt;BR/&gt; 59230: (0.510204%)&gt;];
}
1591--1592[label="1;98pkt 98fpkt"];
</description>
    <slice>
      <filter dst_ip="64.41.109.136" src_ip="173.46.150.193" src_port="22"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130368" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_82{
style=filled;
color=gray75;
1601[label="24.7.232.194;d;1pkt 1fpkt", shape=diamond, color=yellow];
1602[label="145.83.222.2;s;4pkt 4fpkt", shape=diamond, color=yellow];
5405[label="24.7.232.194;d;1pkt 1fpkt", shape=hexagon, color=black];
stat82[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.83.222.2:8834, 64.106.82.100:8400}[25%]&lt;BR/&gt;{145.83.222.2:8834, 64.106.82.122:8400}[25%]&lt;BR/&gt;{145.83.222.2:8834, 64.106.82.123:8400}[25%]&lt;BR/&gt;{145.83.222.2:8834, 24.7.232.194:15839}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8834: (50%)&lt;BR/&gt; 15839: (25%)&lt;BR/&gt; 8400: (25%)&gt;];
}
1601--1602[label="1;1pkt 1fpkt"];
1601--5405[label="1;1pkt 1fpkt"];
1602--5405[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="24.7.232.194" dst_port="15839" src_ip="145.83.222.2" src_port="8834"/>
      <filter dst_ip="64.106.82.123" dst_port="8400" src_ip="145.83.222.2" src_port="8834"/>
      <filter dst_ip="64.106.82.122" dst_port="8400" src_ip="145.83.222.2" src_port="8834"/>
      <filter dst_ip="64.106.82.100" dst_port="8400" src_ip="145.83.222.2" src_port="8834"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34501,2.02405,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
59[label="173.46.70.71s;1pkt 1fpkt", shape=rectangle, color=red];
1767[label="173.46.70.71;s;42pkt 42fpkt", shape=diamond, color=yellow];
1768[label="4.8.77.54;d;1pkt 1fpkt", shape=diamond, color=yellow];
5128[label="4.8.77.54;d;1pkt 1fpkt", shape=hexagon, color=black];
5626[label="173.46.70.71;s;40pkt 40fpkt", shape=hexagon, color=black];
6918[label="173.46.70.71;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.70.71:1602, *:17788}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1602: (50%)&lt;BR/&gt; 17788: (41.3386%)&lt;BR/&gt; 61474: (2.3622%)&lt;BR/&gt; 52594: (1.1811%)&lt;BR/&gt; 15856: (1.1811%)&gt;];
}
59--1767[label="1;1pkt 1fpkt"];
59--1768[label="1;1pkt 1fpkt"];
59--5128[label="1;1pkt 1fpkt"];
59--5626[label="1;1pkt 1fpkt"];
59--6918[label="1;1pkt 1fpkt"];
1767--1768[label="1;1pkt 1fpkt"];
1767--5128[label="1;1pkt 1fpkt"];
1767--5626[label="1;40pkt 40fpkt"];
1767--6918[label="1;42pkt 42fpkt"];
1768--5128[label="1;1pkt 1fpkt"];
1768--5626[label="1;1pkt 1fpkt"];
1768--6918[label="1;1pkt 1fpkt"];
5128--5626[label="1;1pkt 1fpkt"];
5128--6918[label="1;1pkt 1fpkt"];
5626--6918[label="1;40pkt 40fpkt"];
</description>
    <slice>
      <filter dst_port="17788" src_ip="173.46.70.71" src_port="1602"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
1808[label="187.176.142.157;d;5pkt 5fpkt", shape=diamond, color=yellow];
1809[label="133.17.202.32;s;4pkt 4fpkt", shape=diamond, color=yellow];
4873[label="187.176.142.157;d;4pkt 4fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.26.34:80, 187.176.142.157:65314}[20%]&lt;BR/&gt;{133.17.202.32:80, 187.176.142.157:60360}[20%]&lt;BR/&gt;{133.17.202.32:80, 187.176.142.157:60576}[20%]&lt;BR/&gt;{133.17.202.32:80, 187.176.142.157:62325}[20%]&lt;BR/&gt;{133.17.202.32:80, 187.176.142.157:62519}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62519: (11.5385%)&lt;BR/&gt; 62325: (11.5385%)&lt;BR/&gt; 60576: (11.5385%)&lt;BR/&gt; 60360: (11.5385%)&gt;];
}
1808--1809[label="1;4pkt 4fpkt"];
1808--4873[label="1;4pkt 4fpkt"];
1809--4873[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="187.176.142.157" dst_port="62519" src_ip="133.17.202.32" src_port="80"/>
      <filter dst_ip="187.176.142.157" dst_port="62325" src_ip="133.17.202.32" src_port="80"/>
      <filter dst_ip="187.176.142.157" dst_port="60576" src_ip="133.17.202.32" src_port="80"/>
      <filter dst_ip="187.176.142.157" dst_port="60360" src_ip="133.17.202.32" src_port="80"/>
      <filter dst_ip="187.176.142.157" dst_port="65314" src_ip="155.31.26.34" src_port="80"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="68.216.63.106"/>
      <from sec="1292130433" usec="0"/>
      <to sec="1292130630" usec="0"/>
    </slice>
    <from sec="1292130433" usec="0"/>
    <to sec="1292130630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821559,2.12558,503,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_87{
style=filled;
color=gray75;
1945[label="0.120.240.202;d;1pkt 1fpkt", shape=diamond, color=yellow];
1946[label="133.17.108.99;s;1pkt 1fpkt", shape=diamond, color=yellow];
8893[label="133.17.108.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat87[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.108.99:80, 0.120.240.202:51746}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51746: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1945--1946[label="1;1pkt 1fpkt"];
1945--8893[label="1;1pkt 1fpkt"];
1946--8893[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.120.240.202" dst_port="51746" src_ip="133.17.108.99" src_port="80"/>
    </slice>
    <from sec="1292130119" usec="0"/>
    <to sec="1292130140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
1458[label="173.46.19.166;d;100pkt 100fpkt", shape=diamond, color=yellow];
1929[label="204.166.37.67;s;8pkt 8fpkt", shape=diamond, color=yellow];
1960[label="29.114.64.23;s;39pkt 39fpkt", shape=diamond, color=yellow];
2815[label="28.137.40.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
5020[label="173.46.19.166;d;95pkt 95fpkt", shape=hexagon, color=black];
6864[label="204.166.37.67;7pkt 7fpkt", shape=pentagon, color=darkviolet];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{29.114.64.23:80, 173.46.19.166:*}[39%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45%)&lt;BR/&gt; 52795: (2.4%)&lt;BR/&gt; 443: (2.4%)&lt;BR/&gt; 57618: (0.8%)&lt;BR/&gt; 57617: (0.8%)&gt;];
}
1458--1929[label="1;8pkt 8fpkt"];
1458--1960[label="1;39pkt 39fpkt"];
1458--2815[label="1;1pkt 1fpkt"];
1458--5020[label="1;95pkt 95fpkt"];
1458--5572[label="0.01;1pkt 1fpkt"];
1458--6178[label="0.01;1pkt 1fpkt"];
1458--6864[label="1;7pkt 7fpkt"];
1929--5020[label="1;8pkt 8fpkt"];
1929--6864[label="1;7pkt 7fpkt"];
1960--5020[label="1;39pkt 39fpkt"];
2815--5020[label="1;1pkt 1fpkt"];
5020--6178[label="0.0105263;1pkt 1fpkt"];
5020--6864[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.19.166" src_ip="29.114.64.23" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_89{
style=filled;
color=gray75;
2011[label="212.73.124.88;d;699pkt 699fpkt", shape=diamond, color=yellow];
stat89[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.73.124.88:45730}[46.3519%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 45730: (23.176%)&lt;BR/&gt; 55714: (0.572246%)&lt;BR/&gt; 23098: (0.429185%)&lt;BR/&gt; 21229: (0.429185%)&lt;BR/&gt; 21208: (0.429185%)&gt;];
}
2011--2751[label="0.00143062;1pkt 1fpkt"];
2011--4254[label="0.00143062;1pkt 1fpkt"];
2011--5198[label="0.00143062;1pkt 1fpkt"];
2011--5839[label="0.00143062;1pkt 1fpkt"];
2011--6081[label="0.00143062;1pkt 1fpkt"];
2011--6082[label="0.00143062;1pkt 1fpkt"];
2011--6145[label="0.00143062;1pkt 1fpkt"];
2011--6146[label="0.00143062;1pkt 1fpkt"];
2011--6204[label="0.00143062;1pkt 1fpkt"];
2011--6205[label="0.00143062;1pkt 1fpkt"];
2011--6248[label="0.00143062;1pkt 1fpkt"];
2011--6249[label="0.00143062;1pkt 1fpkt"];
2011--8199[label="0.00143062;1pkt 1fpkt"];
2011--9388[label="0.00143062;1pkt 1fpkt"];
2011--9525[label="0.00143062;1pkt 1fpkt"];
2011--9908[label="0.00143062;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.73.124.88" dst_port="45730"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
1647[label="36.232.73.242;d;2pkt 2fpkt", shape=diamond, color=yellow];
2023[label="213.240.204.87;s;333pkt 333fpkt", shape=diamond, color=yellow];
5244[label="213.240.204.87;s;209pkt 209fpkt", shape=hexagon, color=black];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.204.87:14274, *:*}[95.7958%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14274: (48.0699%)&lt;BR/&gt; 80: (0.919118%)&lt;BR/&gt; 443: (0.827206%)&lt;BR/&gt; 47339: (0.275735%)&lt;BR/&gt; 10790: (0.275735%)&gt;];
}
1647--2023[label="1;2pkt 2fpkt"];
1647--5244[label="1;2pkt 2fpkt"];
2023--5244[label="1;209pkt 209fpkt"];
2023--6120[label="0.003003;1pkt 1fpkt"];
2023--6136[label="0.003003;1pkt 1fpkt"];
2023--6186[label="0.003003;1pkt 1fpkt"];
2023--6196[label="0.003003;1pkt 1fpkt"];
2023--6233[label="0.003003;1pkt 1fpkt"];
2023--6240[label="0.003003;1pkt 1fpkt"];
5244--6120[label="0.00478469;1pkt 1fpkt"];
5244--6136[label="0.00478469;1pkt 1fpkt"];
5244--6186[label="0.00478469;1pkt 1fpkt"];
5244--6196[label="0.00478469;1pkt 1fpkt"];
5244--6233[label="0.00478469;1pkt 1fpkt"];
5244--6240[label="0.00478469;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.240.204.87" src_port="14274"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
2026[label="173.46.16.146;s;42pkt 42fpkt", shape=diamond, color=yellow];
2027[label="160.162.242.104;d;5pkt 5fpkt", shape=diamond, color=yellow];
5395[label="160.162.242.104;d;5pkt 5fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.16.146:*, *:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.6154%)&lt;BR/&gt; 12200: (5.76923%)&lt;BR/&gt; 12100: (5.76923%)&lt;BR/&gt; 51080: (2.88462%)&lt;BR/&gt; 51079: (2.88462%)&gt;];
}
2026--2027[label="1;5pkt 5fpkt"];
2026--5395[label="1;5pkt 5fpkt"];
2026--6120[label="0.047619;2pkt 2fpkt"];
2026--6136[label="0.261905;11pkt 11fpkt"];
2026--6186[label="0.047619;2pkt 2fpkt"];
2026--6196[label="0.261905;11pkt 11fpkt"];
2026--6233[label="0.047619;2pkt 2fpkt"];
2026--6240[label="0.261905;11pkt 11fpkt"];
2027--5395[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="173.46.16.146"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
2061[label="131.19.194.11;d;269pkt 269fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:123, 131.19.194.11:123}[40.8922%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (69.8885%)&lt;BR/&gt; 1027: (2.97398%)&lt;BR/&gt; 1028: (1.48699%)&lt;BR/&gt; 1026: (0.743494%)&lt;BR/&gt; 2049: (0.371747%)&gt;];
}
2061--3985[label="0.00371747;1pkt 1fpkt"];
2061--5716[label="0.00371747;1pkt 1fpkt"];
2061--6064[label="0.00371747;1pkt 1fpkt"];
2061--6142[label="0.00371747;1pkt 1fpkt"];
2061--6202[label="0.00371747;1pkt 1fpkt"];
2061--6246[label="0.00371747;1pkt 1fpkt"];
2061--6537[label="0.00371747;1pkt 1fpkt"];
2061--8595[label="0.00371747;1pkt 1fpkt"];
2061--9569[label="0.00371747;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.194.11" dst_port="123" src_port="123"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.209.97.37"/>
      <from sec="1292130414" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130414" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_96{
style=filled;
color=gray75;
2348[label="133.0.73.112;d;239pkt 239fpkt", shape=diamond, color=yellow];
2349[label="210.110.213.125;s;238pkt 238fpkt", shape=diamond, color=yellow];
5201[label="133.0.73.112;d;239pkt 239fpkt", shape=hexagon, color=black];
7398[label="210.110.213.125;238pkt 238fpkt", shape=pentagon, color=darkviolet];
8993[label="210.110.213.125;238pkt 238fpkt", shape=invtriangle, color=brown];
9746[label="210.110.213.125;238pkt 238fpkt", shape=invhouse, color=bisque];
stat96[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.110.213.125:80, 133.0.73.112:*}[99.5816%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52796: (0.20979%)&lt;BR/&gt; 52795: (0.20979%)&lt;BR/&gt; 52794: (0.20979%)&lt;BR/&gt; 52793: (0.20979%)&gt;];
}
2348--2349[label="1;238pkt 238fpkt"];
2348--5201[label="1;239pkt 239fpkt"];
2348--7398[label="1;238pkt 238fpkt"];
2348--8993[label="1;238pkt 238fpkt"];
2348--9746[label="1;238pkt 238fpkt"];
2349--5201[label="1;238pkt 238fpkt"];
2349--7398[label="1;238pkt 238fpkt"];
2349--8993[label="1;238pkt 238fpkt"];
2349--9746[label="1;238pkt 238fpkt"];
5201--7398[label="1;238pkt 238fpkt"];
5201--8993[label="1;238pkt 238fpkt"];
5201--9746[label="1;238pkt 238fpkt"];
7398--8993[label="1;238pkt 238fpkt"];
7398--9746[label="1;238pkt 238fpkt"];
8993--9746[label="1;238pkt 238fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.73.112" src_ip="210.110.213.125" src_port="80"/>
    </slice>
    <from sec="1292130249" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.1.8.110"/>
      <from sec="1292130252" usec="0"/>
      <to sec="1292130356" usec="0"/>
    </slice>
    <from sec="1292130252" usec="0"/>
    <to sec="1292130356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_99{
style=filled;
color=gray75;
2379[label="213.240.200.171;s;582pkt 582fpkt", shape=diamond, color=yellow];
stat99[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.200.171:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2379--2883[label="0.0131579;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="213.240.200.171"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_100{
style=filled;
color=gray75;
2401[label="213.240.202.205;d;3pkt 3fpkt", shape=diamond, color=yellow];
2402[label="213.7.197.196;s;2pkt 2fpkt", shape=diamond, color=yellow];
5875[label="213.7.197.196;s;2pkt 2fpkt", shape=hexagon, color=black];
stat100[shape=component, label=&lt;Rules:&lt;BR/&gt;{149.12.13.220:0, 213.240.202.205:0}[33.3333%]&lt;BR/&gt;{213.7.197.196:161, 213.240.202.205:161}[33.3333%]&lt;BR/&gt;{213.7.197.196:26437, 213.240.202.205:161}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 161: (64.2857%)&lt;BR/&gt; 26437: (21.4286%)&lt;BR/&gt; 0: (14.2857%)&gt;];
}
2401--2402[label="1;2pkt 2fpkt"];
2401--5875[label="1;2pkt 2fpkt"];
2402--5875[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.202.205" dst_port="161" src_ip="213.7.197.196" src_port="26437"/>
      <filter dst_ip="213.240.202.205" dst_port="161" src_ip="213.7.197.196" src_port="161"/>
      <filter dst_ip="213.240.202.205" src_ip="149.12.13.220"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.161.83.147"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="160.169.133.43"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,020,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="131.19.236.152"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
2503[label="212.68.1.16;s;1116pkt 1116fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.1.16:10508, *:*}[99.7312%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10508: (49.8656%)&lt;BR/&gt; 6881: (1.07527%)&lt;BR/&gt; 16001: (0.94086%)&lt;BR/&gt; 4041: (0.403226%)&lt;BR/&gt; 35691: (0.31362%)&gt;];
}
2503--6141[label="0.00269542;3pkt 3fpkt"];
2503--6201[label="0.00269542;3pkt 3fpkt"];
2503--6245[label="0.00269784;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="212.68.1.16" src_port="10508"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
2527[label="131.19.3.174;s;914pkt 914fpkt", shape=diamond, color=yellow];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.3.174:51897, *:*}[99.1247%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51897: (49.5624%)&lt;BR/&gt; 16001: (1.2035%)&lt;BR/&gt; 6881: (0.929978%)&lt;BR/&gt; 51413: (0.382932%)&lt;BR/&gt; 35691: (0.382932%)&gt;];
}
2527--6136[label="0.00109409;1pkt 1fpkt"];
2527--6137[label="0.00109409;1pkt 1fpkt"];
2527--6141[label="0.00109409;1pkt 1fpkt"];
2527--6196[label="0.00109409;1pkt 1fpkt"];
2527--6197[label="0.00109409;1pkt 1fpkt"];
2527--6201[label="0.00109409;1pkt 1fpkt"];
2527--6240[label="0.00109409;1pkt 1fpkt"];
2527--6241[label="0.00109409;1pkt 1fpkt"];
2527--6245[label="0.00109409;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.3.174" src_port="51897"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,004,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_106{
style=filled;
color=gray75;
2541[label="213.240.198.22;s;225pkt 225fpkt", shape=diamond, color=yellow];
2542[label="55.184.145.33;d;257pkt 257fpkt", shape=diamond, color=yellow];
stat106[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.198.22:445, 55.184.145.33:*}[50.1946%]&lt;BR/&gt;{213.240.198.22:139, 55.184.145.33:*}[49.8054%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (25.1037%)&lt;BR/&gt; 139: (24.8963%)&lt;BR/&gt; 4565: (0.414938%)&lt;BR/&gt; 3798: (0.414938%)&lt;BR/&gt; 2187: (0.414938%)&gt;];
}
2541--2542[label="1;225pkt 225fpkt"];
</description>
    <slice>
      <filter dst_ip="55.184.145.33" src_ip="213.240.198.22" src_port="445"/>
      <filter dst_ip="55.184.145.33" src_ip="213.240.198.22" src_port="139"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_107{
style=filled;
color=gray75;
2563[label="200.116.156.31;d;2pkt 2fpkt", shape=diamond, color=yellow];
2564[label="131.19.218.4;s;2pkt 2fpkt", shape=diamond, color=yellow];
5131[label="200.116.156.31;d;2pkt 2fpkt", shape=hexagon, color=black];
stat107[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.218.4:22, 200.116.156.31:50610}[50%]&lt;BR/&gt;{131.19.218.4:8080, 200.116.156.31:50696}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50696: (25%)&lt;BR/&gt; 50610: (25%)&lt;BR/&gt; 8080: (25%)&lt;BR/&gt; 22: (25%)&gt;];
}
2563--2564[label="1;2pkt 2fpkt"];
2563--5131[label="1;2pkt 2fpkt"];
2564--5131[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="200.116.156.31" dst_port="50696" src_ip="131.19.218.4" src_port="8080"/>
      <filter dst_ip="200.116.156.31" dst_port="50610" src_ip="131.19.218.4" src_port="22"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
2351[label="193.1.8.110;d;1pkt 1fpkt", shape=diamond, color=yellow];
2701[label="173.46.105.164;s;3pkt 3fpkt", shape=diamond, color=yellow];
5202[label="193.1.8.110;d;1pkt 1fpkt", shape=hexagon, color=black];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.105.164:50596, 193.1.8.110:80}[33.3333%]&lt;BR/&gt;{173.46.105.164:50584, 0.120.229.80:80}[33.3333%]&lt;BR/&gt;{173.46.105.164:50599, 0.120.229.80:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50596: (30%)&lt;BR/&gt; 50599: (10%)&lt;BR/&gt; 50584: (10%)&gt;];
}
2351--2701[label="1;1pkt 1fpkt"];
2351--5202[label="1;1pkt 1fpkt"];
2701--5202[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="0.120.229.80" dst_port="80" src_ip="173.46.105.164" src_port="50599"/>
      <filter dst_ip="0.120.229.80" dst_port="80" src_ip="173.46.105.164" src_port="50584"/>
      <filter dst_ip="193.1.8.110" dst_port="80" src_ip="173.46.105.164" src_port="50596"/>
    </slice>
    <from sec="1292130151" usec="0"/>
    <to sec="1292130356" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="102.197.134.31"/>
      <from sec="1292130199" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130199" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_110{
style=filled;
color=gray75;
2345[label="58.216.99.51;d;1pkt 1fpkt", shape=diamond, color=yellow];
2755[label="155.31.219.166;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat110[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.219.166:80, 58.216.99.51:3188}[33.3333%]&lt;BR/&gt;{155.31.219.166:53, 204.180.76.176:21463}[33.3333%]&lt;BR/&gt;{155.31.219.166:53, 194.99.125.200:42559}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3188: (25%)&lt;BR/&gt; 80: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 42559: (12.5%)&lt;BR/&gt; 21463: (12.5%)&gt;];
}
2345--2755[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="194.99.125.200" dst_port="42559" src_ip="155.31.219.166" src_port="53"/>
      <filter dst_ip="204.180.76.176" dst_port="21463" src_ip="155.31.219.166" src_port="53"/>
      <filter dst_ip="58.216.99.51" dst_port="3188" src_ip="155.31.219.166" src_port="80"/>
    </slice>
    <from sec="1292130244" usec="0"/>
    <to sec="1292130278" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_111{
style=filled;
color=gray75;
2346[label="133.0.90.128;s;6pkt 6fpkt", shape=diamond, color=yellow];
2757[label="209.44.176.103;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat111[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.90.128:80, 9.53.51.66:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 13855: (14.2857%)&lt;BR/&gt; 55291: (7.14286%)&lt;BR/&gt; 36460: (7.14286%)&lt;BR/&gt; 36280: (7.14286%)&gt;];
}
2346--2757[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="9.53.51.66" src_ip="133.0.90.128" src_port="80"/>
    </slice>
    <from sec="1292130246" usec="0"/>
    <to sec="1292130369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="173.46.225.212"/>
      <from sec="1292130260" usec="0"/>
      <to sec="1292130478" usec="0"/>
    </slice>
    <from sec="1292130260" usec="0"/>
    <to sec="1292130478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.120.240.98"/>
      <from sec="1292130821" usec="0"/>
      <to sec="1292130824" usec="0"/>
    </slice>
    <from sec="1292130821" usec="0"/>
    <to sec="1292130824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.123.4.173"/>
      <from sec="1292130289" usec="0"/>
      <to sec="1292130384" usec="0"/>
    </slice>
    <from sec="1292130289" usec="0"/>
    <to sec="1292130384" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,999,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
2801[label="64.97.64.2;d;1pkt 1fpkt", shape=diamond, color=yellow];
2802[label="145.83.223.187;s;2pkt 2fpkt", shape=diamond, color=yellow];
7927[label="145.83.223.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.83.223.187:62305, 64.97.64.0:5151}[50%]&lt;BR/&gt;{145.83.223.187:62305, 64.97.64.2:5151}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62305: (50%)&lt;BR/&gt; 5151: (50%)&gt;];
}
2801--2802[label="1;1pkt 1fpkt"];
2801--7927[label="1;1pkt 1fpkt"];
2802--7927[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="64.97.64.2" dst_port="5151" src_ip="145.83.223.187" src_port="62305"/>
      <filter dst_ip="64.97.64.0" dst_port="5151" src_ip="145.83.223.187" src_port="62305"/>
    </slice>
    <from sec="1292130295" usec="0"/>
    <to sec="1292130318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="102.164.159.171"/>
      <from sec="1292130302" usec="0"/>
      <to sec="1292130738" usec="0"/>
    </slice>
    <from sec="1292130302" usec="0"/>
    <to sec="1292130738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
2916[label="133.21.145.49;d;743pkt 743fpkt", shape=diamond, color=yellow];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.21.145.49:39604}[96.6353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39604: (48.3176%)&lt;BR/&gt; 443: (1.21131%)&lt;BR/&gt; 0: (0.942127%)&lt;BR/&gt; 64302: (0.13459%)&lt;BR/&gt; 52156: (0.13459%)&gt;];
}
2916--6137[label="0.00403769;3pkt 3fpkt"];
2916--6197[label="0.00403769;3pkt 3fpkt"];
2916--6241[label="0.00403769;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.21.145.49" dst_port="39604"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130737" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_118{
style=filled;
color=gray75;
1726[label="173.46.150.166;s;15pkt 15fpkt", shape=diamond, color=yellow];
2958[label="178.245.143.122;d;12pkt 12fpkt", shape=diamond, color=yellow];
stat118[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.150.166:80, 178.245.143.122:*}[80%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3693: (3.7037%)&lt;BR/&gt; 3691: (3.7037%)&lt;BR/&gt; 3687: (3.7037%)&lt;BR/&gt; 3685: (3.7037%)&gt;];
}
1726--2958[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="178.245.143.122" src_ip="173.46.150.166" src_port="80"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
2380[label="213.240.204.15;d;139pkt 139fpkt", shape=diamond, color=yellow];
3094[label="33.73.128.48;s;12pkt 12fpkt", shape=diamond, color=yellow];
5024[label="213.240.204.15;d;103pkt 103fpkt", shape=hexagon, color=black];
5340[label="33.73.128.48;s;12pkt 12fpkt", shape=hexagon, color=black];
6713[label="33.73.128.48;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.240.204.15:30003}[89.9281%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30003: (45.3237%)&lt;BR/&gt; 27005: (4.13669%)&lt;BR/&gt; 0: (2.15827%)&lt;BR/&gt; 3081: (1.43885%)&lt;BR/&gt; 80: (1.07914%)&gt;];
}
2380--3094[label="1;12pkt 12fpkt"];
2380--5024[label="1;103pkt 103fpkt"];
2380--5340[label="1;12pkt 12fpkt"];
2380--6713[label="1;12pkt 12fpkt"];
3094--5024[label="1;12pkt 12fpkt"];
3094--5340[label="1;12pkt 12fpkt"];
3094--6713[label="1;12pkt 12fpkt"];
5024--5340[label="1;12pkt 12fpkt"];
5024--6713[label="1;12pkt 12fpkt"];
5340--6713[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.204.15" dst_port="30003"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="133.0.39.2"/>
      <from sec="1292130004" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_121{
style=filled;
color=gray75;
3447[label="133.17.41.130;s;35pkt 35fpkt", shape=diamond, color=yellow];
stat121[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.41.130:*, 33.149.58.66:80}[48.5714%]&lt;BR/&gt;{133.17.41.130:46068, *:*}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (30%)&lt;BR/&gt; 0: (14.2857%)&lt;BR/&gt; 46068: (12.8571%)&lt;BR/&gt; 60596: (1.42857%)&lt;BR/&gt; 60284: (1.42857%)&gt;];
}
</description>
    <slice>
      <filter src_ip="133.17.41.130" src_port="46068"/>
      <filter dst_ip="33.149.58.66" dst_port="80" src_ip="133.17.41.130"/>
    </slice>
    <from sec="1292130212" usec="0"/>
    <to sec="1292130754" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_122{
style=filled;
color=gray75;
3038[label="213.240.204.50;s;67pkt 67fpkt", shape=diamond, color=yellow];
3468[label="24.225.39.184;d;12pkt 12fpkt", shape=diamond, color=yellow];
5672[label="24.225.39.184;d;12pkt 12fpkt", shape=hexagon, color=black];
6725[label="213.240.204.50;67pkt 67fpkt", shape=pentagon, color=darkviolet];
stat122[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.204.50:2000, *:*}[50.7463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (25.3165%)&lt;BR/&gt; 10286: (7.59494%)&lt;BR/&gt; 31309: (1.89873%)&lt;BR/&gt; 24531: (1.89873%)&lt;BR/&gt; 1217: (1.89873%)&gt;];
}
3038--3468[label="1;12pkt 12fpkt"];
3038--5672[label="1;12pkt 12fpkt"];
3038--6725[label="1;67pkt 67fpkt"];
3468--5672[label="1;12pkt 12fpkt"];
3468--6725[label="1;12pkt 12fpkt"];
5672--6725[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="213.240.204.50" src_port="2000"/>
    </slice>
    <from sec="1292130019" usec="0"/>
    <to sec="1292130765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_123{
style=filled;
color=gray75;
3472[label="41.133.209.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
3473[label="131.19.157.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat123[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.157.37:22, 41.133.209.199:50633}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 50633: (50%)&lt;BR/&gt; 22: (50%)&gt;];
}
3472--3473[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="41.133.209.199" dst_port="50633" src_ip="131.19.157.37" src_port="22"/>
    </slice>
    <from sec="1292130368" usec="0"/>
    <to sec="1292130729" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801518,2.09112,503,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_124{
style=filled;
color=gray75;
2277[label="155.31.192.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
3525[label="28.100.73.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
7818[label="155.31.192.171;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9205[label="155.31.192.171;4pkt 4fpkt", shape=invtriangle, color=brown];
stat124[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.192.171:80, 28.100.73.88:57817}[25%]&lt;BR/&gt;{155.31.192.171:25, 68.117.11.119:20354}[25%]&lt;BR/&gt;{155.31.192.171:80, 8.49.204.80:39573}[25%]&lt;BR/&gt;{155.31.192.171:80, 8.49.204.80:42476}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (40%)&lt;BR/&gt; 57817: (20%)&lt;BR/&gt; 42476: (10%)&lt;BR/&gt; 39573: (10%)&lt;BR/&gt; 20354: (10%)&gt;];
}
2277--3525[label="1;1pkt 1fpkt"];
2277--7818[label="1;1pkt 1fpkt"];
2277--9205[label="1;1pkt 1fpkt"];
3525--7818[label="1;1pkt 1fpkt"];
3525--9205[label="1;1pkt 1fpkt"];
7818--9205[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="8.49.204.80" dst_port="42476" src_ip="155.31.192.171" src_port="80"/>
      <filter dst_ip="8.49.204.80" dst_port="39573" src_ip="155.31.192.171" src_port="80"/>
      <filter dst_ip="68.117.11.119" dst_port="20354" src_ip="155.31.192.171" src_port="25"/>
      <filter dst_ip="28.100.73.88" dst_port="57817" src_ip="155.31.192.171" src_port="80"/>
    </slice>
    <from sec="1292130148" usec="0"/>
    <to sec="1292130759" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.1.9.126"/>
      <from sec="1292130774" usec="0"/>
      <to sec="1292130825" usec="0"/>
    </slice>
    <from sec="1292130774" usec="0"/>
    <to sec="1292130825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_126{
style=filled;
color=gray75;
1454[label="205.12.174.62;s;109pkt 109fpkt", shape=diamond, color=yellow];
1707[label="213.240.200.20;d;352pkt 352fpkt", shape=diamond, color=yellow];
3709[label="66.78.8.144;s;160pkt 160fpkt", shape=diamond, color=yellow];
5103[label="213.240.200.20;d;352pkt 352fpkt", shape=hexagon, color=black];
7171[label="8.49.206.98;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8890[label="8.49.206.98;1pkt 1fpkt", shape=invtriangle, color=brown];
9697[label="8.49.206.98;1pkt 1fpkt", shape=invhouse, color=bisque];
stat126[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.78.8.144:*, 213.240.200.20:80}[43.0108%]&lt;BR/&gt;{205.12.174.62:*, 213.240.200.20:80}[23.9247%]&lt;BR/&gt;{16.239.105.210:*, 213.240.200.20:80}[23.1183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8463%)&lt;BR/&gt; 53: (0.307377%)&lt;BR/&gt; 52885: (0.256148%)&lt;BR/&gt; 33224: (0.256148%)&lt;BR/&gt; 64381: (0.153689%)&gt;];
}
1454--1486[label="0.00917431;1pkt 1fpkt"];
1454--1707[label="0.816514;89pkt 89fpkt"];
1454--2494[label="0.00917431;1pkt 1fpkt"];
1454--3762[label="0.0833333;2pkt 2fpkt"];
1454--4671[label="0.0458716;5pkt 5fpkt"];
1454--5032[label="0.0275229;3pkt 3fpkt"];
1454--5034[label="0.00917431;1pkt 1fpkt"];
1454--5103[label="0.816514;89pkt 89fpkt"];
1454--5720[label="0.0550459;6pkt 6fpkt"];
1454--5894[label="0.00917431;1pkt 1fpkt"];
1454--6106[label="0.0458716;5pkt 5fpkt"];
1454--6120[label="0.0183486;2pkt 2fpkt"];
1454--6173[label="0.0458716;5pkt 5fpkt"];
1454--6186[label="0.0183486;2pkt 2fpkt"];
1454--6229[label="0.0458716;5pkt 5fpkt"];
1454--6233[label="0.0183486;2pkt 2fpkt"];
1707--2533[label="0.0285714;1pkt 1fpkt"];
1707--3709[label="1;160pkt 160fpkt"];
1707--4438[label="0.03125;1pkt 1fpkt"];
1707--5103[label="1;352pkt 352fpkt"];
1707--6120[label="0.0454545;16pkt 16fpkt"];
1707--6136[label="0.0454545;16pkt 16fpkt"];
1707--6186[label="0.0454545;16pkt 16fpkt"];
1707--6196[label="0.0454545;16pkt 16fpkt"];
1707--6233[label="0.0454545;16pkt 16fpkt"];
1707--6240[label="0.0454545;16pkt 16fpkt"];
1707--6292[label="0.025;1pkt 1fpkt"];
1707--7171[label="1;1pkt 1fpkt"];
1707--8890[label="1;1pkt 1fpkt"];
1707--9697[label="1;1pkt 1fpkt"];
3709--5103[label="1;160pkt 160fpkt"];
3709--6120[label="0.06875;11pkt 11fpkt"];
3709--6136[label="0.0625;10pkt 10fpkt"];
3709--6186[label="0.06875;11pkt 11fpkt"];
3709--6196[label="0.0625;10pkt 10fpkt"];
3709--6233[label="0.06875;11pkt 11fpkt"];
3709--6240[label="0.0625;10pkt 10fpkt"];
5103--6120[label="0.0454545;16pkt 16fpkt"];
5103--6136[label="0.0454545;16pkt 16fpkt"];
5103--6186[label="0.0454545;16pkt 16fpkt"];
5103--6196[label="0.0454545;16pkt 16fpkt"];
5103--6233[label="0.0454545;16pkt 16fpkt"];
5103--6240[label="0.0454545;16pkt 16fpkt"];
5103--6292[label="0.025;1pkt 1fpkt"];
5103--7171[label="1;1pkt 1fpkt"];
5103--8890[label="1;1pkt 1fpkt"];
5103--9697[label="1;1pkt 1fpkt"];
7171--8890[label="1;1pkt 1fpkt"];
7171--9697[label="1;1pkt 1fpkt"];
8890--9697[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.200.20" dst_port="80" src_ip="66.78.8.144"/>
      <filter dst_ip="213.240.200.20" dst_port="80" src_ip="205.12.174.62"/>
      <filter dst_ip="213.240.200.20" dst_port="80" src_ip="16.239.105.210"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_127{
style=filled;
color=gray75;
3791[label="131.19.2.141;s;1013pkt 1013fpkt", shape=diamond, color=yellow];
stat127[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.2.141:51144, *:*}[91.1155%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51144: (45.5577%)&lt;BR/&gt; 6881: (0.839092%)&lt;BR/&gt; 16001: (0.740375%)&lt;BR/&gt; 16881: (0.542942%)&lt;BR/&gt; 35691: (0.394867%)&gt;];
}
3791--6120[label="0.0029615;3pkt 3fpkt"];
3791--6136[label="0.0029615;3pkt 3fpkt"];
3791--6141[label="0.00394867;4pkt 4fpkt"];
3791--6186[label="0.0029615;3pkt 3fpkt"];
3791--6196[label="0.0029615;3pkt 3fpkt"];
3791--6201[label="0.00394867;4pkt 4fpkt"];
3791--6233[label="0.0029615;3pkt 3fpkt"];
3791--6240[label="0.0029615;3pkt 3fpkt"];
3791--6245[label="0.00394867;4pkt 4fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.2.141" src_port="51144"/>
    </slice>
    <from sec="1292130031" usec="0"/>
    <to sec="1292130648" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
4272[label="44.232.148.216;d;209pkt 209fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.150.218:3127, 44.232.148.216:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3127: (50%)&lt;BR/&gt; 8499: (0.239234%)&lt;BR/&gt; 8498: (0.239234%)&lt;BR/&gt; 8497: (0.239234%)&lt;BR/&gt; 8496: (0.239234%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="44.232.148.216" src_ip="173.46.150.218" src_port="3127"/>
    </slice>
    <from sec="1292130641" usec="0"/>
    <to sec="1292130712" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
3446[label="131.19.141.57;s;30pkt 30fpkt", shape=diamond, color=yellow];
3891[label="178.174.14.76;d;20pkt 20fpkt", shape=diamond, color=yellow];
6782[label="131.19.141.57;47pkt 47fpkt", shape=pentagon, color=darkviolet];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.141.57:80, 178.174.14.76:*}[42.5532%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 7360: (1.54639%)&lt;BR/&gt; 7359: (1.54639%)&lt;BR/&gt; 7357: (1.54639%)&lt;BR/&gt; 7354: (1.54639%)&gt;];
}
3446--3891[label="1;20pkt 20fpkt"];
3446--6129[label="0.0333333;1pkt 1fpkt"];
3446--6164[label="0.0333333;1pkt 1fpkt"];
3446--6190[label="0.0333333;1pkt 1fpkt"];
3446--6223[label="0.0333333;1pkt 1fpkt"];
3446--6250[label="0.0333333;1pkt 1fpkt"];
3446--6782[label="1;30pkt 30fpkt"];
3891--6782[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="178.174.14.76" src_ip="131.19.141.57" src_port="80"/>
    </slice>
    <from sec="1292130014" usec="0"/>
    <to sec="1292130858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="179.210.53.92"/>
      <from sec="1292130575" usec="0"/>
      <to sec="1292130620" usec="0"/>
    </slice>
    <from sec="1292130575" usec="0"/>
    <to sec="1292130620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_132{
style=filled;
color=gray75;
3807[label="131.19.35.207;s;67pkt 67fpkt", shape=diamond, color=yellow];
4169[label="58.0.16.68;d;59pkt 59fpkt", shape=diamond, color=yellow];
8080[label="131.19.35.207;90pkt 90fpkt", shape=pentagon, color=darkviolet];
stat132[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.35.207:*, 58.0.16.68:80}[65.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.0741%)&lt;BR/&gt; 443: (0.925926%)&lt;BR/&gt; 1784: (0.694444%)&lt;BR/&gt; 1782: (0.694444%)&lt;BR/&gt; 1780: (0.694444%)&gt;];
}
3807--4169[label="1;59pkt 59fpkt"];
3807--6120[label="0.0746269;5pkt 5fpkt"];
3807--6136[label="0.104478;7pkt 7fpkt"];
3807--6186[label="0.0746269;5pkt 5fpkt"];
3807--6196[label="0.104478;7pkt 7fpkt"];
3807--6233[label="0.0746269;5pkt 5fpkt"];
3807--6240[label="0.104478;7pkt 7fpkt"];
3807--8080[label="1;67pkt 67fpkt"];
4169--6120[label="0.0847458;5pkt 5fpkt"];
4169--6136[label="0.118644;7pkt 7fpkt"];
4169--6186[label="0.0847458;5pkt 5fpkt"];
4169--6196[label="0.118644;7pkt 7fpkt"];
4169--6233[label="0.0847458;5pkt 5fpkt"];
4169--6240[label="0.118644;7pkt 7fpkt"];
4169--8080[label="1;59pkt 59fpkt"];
</description>
    <slice>
      <filter dst_ip="58.0.16.68" dst_port="80" src_ip="131.19.35.207"/>
    </slice>
    <from sec="1292130120" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.160.222.58"/>
      <from sec="1292130557" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130557" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.120.83.216"/>
      <from sec="1292130584" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130584" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06413,2.07535,504,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
4313[label="130.11.158.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
4322[label="192.156.51.49;d;1pkt 1fpkt", shape=diamond, color=yellow];
6620[label="130.11.158.39;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8639[label="130.11.158.39;4pkt 4fpkt", shape=invtriangle, color=brown];
9584[label="130.11.158.39;3pkt 3fpkt", shape=invhouse, color=bisque];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.11.158.39:443, 192.156.51.49:65178}[25%]&lt;BR/&gt;{130.11.158.39:0, 8.49.202.145:0}[25%]&lt;BR/&gt;{130.11.158.39:443, 8.49.206.192:53600}[25%]&lt;BR/&gt;{130.11.158.39:443, 8.49.206.192:62782}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (34.6154%)&lt;BR/&gt; 0: (30.7692%)&lt;BR/&gt; 65178: (19.2308%)&lt;BR/&gt; 53600: (11.5385%)&lt;BR/&gt; 62782: (3.84615%)&gt;];
}
4313--4322[label="1;1pkt 1fpkt"];
4313--6620[label="1;2pkt 2fpkt"];
4313--8639[label="1;2pkt 2fpkt"];
4313--9584[label="1;2pkt 2fpkt"];
4322--6620[label="1;1pkt 1fpkt"];
4322--8639[label="1;1pkt 1fpkt"];
4322--9584[label="1;1pkt 1fpkt"];
6620--8639[label="1;3pkt 3fpkt"];
6620--9584[label="1;3pkt 3fpkt"];
8639--9584[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="8.49.206.192" dst_port="62782" src_ip="130.11.158.39" src_port="443"/>
      <filter dst_ip="8.49.206.192" dst_port="53600" src_ip="130.11.158.39" src_port="443"/>
      <filter dst_ip="8.49.202.145" src_ip="130.11.158.39"/>
      <filter dst_ip="192.156.51.49" dst_port="65178" src_ip="130.11.158.39" src_port="443"/>
    </slice>
    <from sec="1292130033" usec="0"/>
    <to sec="1292130692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="15.224.204.78"/>
      <from sec="1292130687" usec="0"/>
      <to sec="1292130693" usec="0"/>
    </slice>
    <from sec="1292130687" usec="0"/>
    <to sec="1292130693" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_138{
style=filled;
color=gray75;
4378[label="133.141.47.65;d;119pkt 119fpkt", shape=diamond, color=yellow];
stat138[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.141.47.65:13882}[98.3193%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13882: (49.1597%)&lt;BR/&gt; 65212: (0.420168%)&lt;BR/&gt; 64721: (0.420168%)&lt;BR/&gt; 64618: (0.420168%)&lt;BR/&gt; 64443: (0.420168%)&gt;];
}
4378--5732[label="0.00840336;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.141.47.65" dst_port="13882"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="3.217.82.78"/>
      <from sec="1292130001" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="212.68.29.153"/>
      <from sec="1292130004" usec="0"/>
      <to sec="1292130826" usec="0"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="163.161.114.157"/>
      <from sec="1292130330" usec="0"/>
      <to sec="1292130826" usec="0"/>
    </slice>
    <from sec="1292130330" usec="0"/>
    <to sec="1292130826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_142{
style=filled;
color=gray75;
4553[label="193.0.43.22;d;502pkt 502fpkt", shape=diamond, color=yellow];
4554[label="173.46.18.122;s;502pkt 502fpkt", shape=diamond, color=yellow];
stat142[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.18.122:*, 193.0.43.22:4447}[97.4104%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4447: (48.7052%)&lt;BR/&gt; 4448: (1.29482%)&lt;BR/&gt; 50975: (0.0996016%)&lt;BR/&gt; 50974: (0.0996016%)&lt;BR/&gt; 50973: (0.0996016%)&gt;];
}
4553--4554[label="1;502pkt 502fpkt"];
</description>
    <slice>
      <filter dst_ip="193.0.43.22" dst_port="4447" src_ip="173.46.18.122"/>
    </slice>
    <from sec="1292130655" usec="0"/>
    <to sec="1292130827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.185.56.40"/>
      <from sec="1292130720" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130720" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="203.25.21.51"/>
      <from sec="1292130789" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130789" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.244.173.180"/>
      <from sec="1292130791" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130791" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
4574[label="173.46.112.131;d;54pkt 54fpkt", shape=diamond, color=yellow];
4651[label="192.81.104.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.179.11.149:80, 173.46.112.131:*}[75.9259%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 56110: (1.81818%)&lt;BR/&gt; 56103: (0.909091%)&lt;BR/&gt; 56102: (0.909091%)&lt;BR/&gt; 56101: (0.909091%)&gt;];
}
4574--4651[label="1;1pkt 1fpkt"];
4574--6164[label="0.0740741;4pkt 4fpkt"];
4574--6223[label="0.0740741;4pkt 4fpkt"];
4574--6250[label="0.0740741;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.112.131" src_ip="6.179.11.149" src_port="80"/>
    </slice>
    <from sec="1292130676" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.700641,2.14786,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="193.1.8.107"/>
      <from sec="1292130822" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130822" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130648" usec="0"/>
    </slice>
    <from sec="43598392" usec="0"/>
    <to sec="1903569296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
1361[label="131.19.166.10;s;1pkt 1fpkt", shape=diamond, color=yellow];
4773[label="192.156.51.132;d;1pkt 1fpkt", shape=hexagon, color=black];
4774[label="131.19.166.10;s;1pkt 1fpkt", shape=hexagon, color=black];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.166.10:80, 192.156.51.132:49999}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49999: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1361--4773[label="1;1pkt 1fpkt"];
1361--4774[label="1;1pkt 1fpkt"];
4773--4774[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.156.51.132" dst_port="49999" src_ip="131.19.166.10" src_port="80"/>
    </slice>
    <from sec="1292130031" usec="0"/>
    <to sec="1292130034" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="0.0.0.0"/>
      <from sec="1292130000" usec="0"/>
      <to sec="1292130648" usec="0"/>
    </slice>
    <from sec="43598392" usec="0"/>
    <to sec="1903569296" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.12648,2.07796,999,0 0 0 1 1 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
810[label="133.0.158.65;d;32pkt 32fpkt", shape=diamond, color=yellow];
1095[label="162.208.254.21;s;1pkt 1fpkt", shape=diamond, color=yellow];
3578[label="9.210.33.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
4173[label="58.178.69.139;s;1pkt 1fpkt", shape=diamond, color=yellow];
4566[label="44.82.85.98;s;2pkt 2fpkt", shape=diamond, color=yellow];
4840[label="162.208.254.21;s;1pkt 1fpkt", shape=hexagon, color=black];
8980[label="190.64.134.123;1pkt 1fpkt", shape=invtriangle, color=brown];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 133.0.158.65:64772}[34.375%]&lt;BR/&gt;{202.222.48.255:*, 133.0.158.65:4742}[21.875%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4742: (24.359%)&lt;BR/&gt; 64772: (19.2308%)&lt;BR/&gt; 80: (7.69231%)&lt;BR/&gt; 9920: (3.84615%)&lt;BR/&gt; 13055: (2.5641%)&gt;];
}
810--1012[label="0.333333;1pkt 1fpkt"];
810--1095[label="1;1pkt 1fpkt"];
810--3578[label="1;1pkt 1fpkt"];
810--4173[label="1;1pkt 1fpkt"];
810--4566[label="1;2pkt 2fpkt"];
810--4840[label="1;1pkt 1fpkt"];
810--6129[label="0.03125;1pkt 1fpkt"];
810--6164[label="0.03125;1pkt 1fpkt"];
810--6178[label="0.03125;1pkt 1fpkt"];
810--6190[label="0.03125;1pkt 1fpkt"];
810--6223[label="0.03125;1pkt 1fpkt"];
810--6250[label="0.03125;1pkt 1fpkt"];
810--8980[label="1;1pkt 1fpkt"];
1095--4840[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.158.65" dst_port="64772"/>
      <filter dst_ip="133.0.158.65" dst_port="4742" src_ip="202.222.48.255"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
838[label="173.46.139.173;s;2pkt 2fpkt", shape=diamond, color=yellow];
839[label="65.209.39.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
1104[label="205.197.146.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
4701[label="65.209.39.199;d;1pkt 1fpkt", shape=hexagon, color=black];
4844[label="205.197.146.34;d;1pkt 1fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.139.173:4500, 205.197.146.34:6837}[50%]&lt;BR/&gt;{173.46.139.173:4500, 65.209.39.199:4500}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4500: (75%)&lt;BR/&gt; 6837: (25%)&gt;];
}
838--839[label="1;1pkt 1fpkt"];
838--1104[label="1;1pkt 1fpkt"];
838--4701[label="1;1pkt 1fpkt"];
838--4844[label="1;1pkt 1fpkt"];
839--4701[label="1;1pkt 1fpkt"];
1104--4844[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="65.209.39.199" dst_port="4500" src_ip="173.46.139.173" src_port="4500"/>
      <filter dst_ip="205.197.146.34" dst_port="6837" src_ip="173.46.139.173" src_port="4500"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
1277[label="205.197.131.26;d;19pkt 19fpkt", shape=diamond, color=yellow];
1788[label="131.19.238.57;s;8pkt 8fpkt", shape=diamond, color=yellow];
4870[label="131.19.238.57;s;8pkt 8fpkt", shape=hexagon, color=black];
6785[label="131.19.238.57;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8711[label="131.19.238.57;10pkt 10fpkt", shape=invtriangle, color=brown];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.194.140:80, 205.197.131.26:*}[52.1739%]&lt;BR/&gt;{131.19.238.57:80, 205.197.131.26:*}[30.4348%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.3636%)&lt;BR/&gt; 3972: (4.54545%)&lt;BR/&gt; 3968: (4.54545%)&lt;BR/&gt; 3967: (4.54545%)&lt;BR/&gt; 3964: (4.54545%)&gt;];
}
1277--1788[label="0.875;7pkt 7fpkt"];
1277--4870[label="0.875;7pkt 7fpkt"];
1277--6785[label="0.6;6pkt 6fpkt"];
1277--8711[label="0.6;6pkt 6fpkt"];
1788--4870[label="1;8pkt 8fpkt"];
1788--6785[label="0.875;7pkt 7fpkt"];
1788--8711[label="0.875;7pkt 7fpkt"];
4870--6785[label="0.875;7pkt 7fpkt"];
4870--8711[label="0.875;7pkt 7fpkt"];
6785--8711[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="205.197.131.26" src_ip="131.19.194.140" src_port="80"/>
      <filter dst_ip="205.197.131.26" src_ip="131.19.238.57" src_port="80"/>
    </slice>
    <from sec="1292130007" usec="0"/>
    <to sec="1292130434" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
1329[label="22.250.215.108;d;422pkt 422fpkt", shape=diamond, color=yellow];
1333[label="34.119.96.96;d;51pkt 51fpkt", shape=diamond, color=yellow];
1342[label="34.119.97.33;d;24pkt 24fpkt", shape=diamond, color=yellow];
1845[label="34.119.97.34;d;26pkt 26fpkt", shape=diamond, color=yellow];
2216[label="195.137.193.28;s;1040pkt 1040fpkt", shape=diamond, color=yellow];
2311[label="45.67.104.35;d;77pkt 77fpkt", shape=diamond, color=yellow];
2312[label="45.67.104.6;d;31pkt 31fpkt", shape=diamond, color=yellow];
4523[label="22.250.215.75;d;132pkt 132fpkt", shape=diamond, color=yellow];
4624[label="8.24.14.253;d;35pkt 35fpkt", shape=diamond, color=yellow];
4882[label="34.119.96.96;d;51pkt 51fpkt", shape=hexagon, color=black];
4883[label="34.119.97.33;d;24pkt 24fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.137.193.28:*, *:80}[44.6154%]&lt;BR/&gt;{195.137.193.28:80, 22.250.215.108:*}[40.5769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9477%)&lt;BR/&gt; 4802: (0.104548%)&lt;BR/&gt; 4699: (0.104548%)&lt;BR/&gt; 2011: (0.104548%)&lt;BR/&gt; 1951: (0.104548%)&gt;];
}
1329--2216[label="1;422pkt 422fpkt"];
1329--6129[label="0.00236967;1pkt 1fpkt"];
1329--6164[label="0.00236967;1pkt 1fpkt"];
1329--6178[label="0.0545024;23pkt 23fpkt"];
1329--6190[label="0.00236967;1pkt 1fpkt"];
1329--6223[label="0.00236967;1pkt 1fpkt"];
1329--6250[label="0.00236967;1pkt 1fpkt"];
1333--2216[label="1;51pkt 51fpkt"];
1333--4882[label="1;51pkt 51fpkt"];
1342--2216[label="1;24pkt 24fpkt"];
1342--4883[label="1;24pkt 24fpkt"];
1845--2216[label="1;26pkt 26fpkt"];
2216--2311[label="1;77pkt 77fpkt"];
2216--2312[label="1;31pkt 31fpkt"];
2216--2548[label="0.0123457;1pkt 1fpkt"];
2216--3634[label="0.00403226;1pkt 1fpkt"];
2216--4523[label="1;132pkt 132fpkt"];
2216--4624[label="1;35pkt 35fpkt"];
2216--4882[label="1;51pkt 51fpkt"];
2216--4883[label="1;24pkt 24fpkt"];
2216--6120[label="0.0192308;20pkt 20fpkt"];
2216--6129[label="0.0230769;24pkt 24fpkt"];
2216--6136[label="0.0221154;23pkt 23fpkt"];
2216--6164[label="0.0173077;18pkt 18fpkt"];
2216--6178[label="0.0240385;25pkt 25fpkt"];
2216--6186[label="0.0192308;20pkt 20fpkt"];
2216--6190[label="0.0230769;24pkt 24fpkt"];
2216--6196[label="0.0221154;23pkt 23fpkt"];
2216--6223[label="0.0173077;18pkt 18fpkt"];
2216--6233[label="0.0192308;20pkt 20fpkt"];
2216--6240[label="0.0221154;23pkt 23fpkt"];
2216--6250[label="0.0173077;18pkt 18fpkt"];
4523--6129[label="0.174242;23pkt 23fpkt"];
4523--6164[label="0.0909091;12pkt 12fpkt"];
4523--6190[label="0.174242;23pkt 23fpkt"];
4523--6223[label="0.0909091;12pkt 12fpkt"];
4523--6250[label="0.0909091;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="195.137.193.28"/>
      <filter dst_ip="22.250.215.108" src_ip="195.137.193.28" src_port="80"/>
    </slice>
    <from sec="1292130020" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
787[label="131.19.33.220;d;66pkt 66fpkt", shape=diamond, color=yellow];
1175[label="81.241.177.214;s;63pkt 63fpkt", shape=diamond, color=yellow];
4923[label="131.19.33.220;d;66pkt 66fpkt", shape=hexagon, color=black];
8148[label="81.241.177.214;64pkt 64fpkt", shape=pentagon, color=darkviolet];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{81.241.177.214:*, 131.19.33.220:*}[94.0299%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64389: (0.772201%)&lt;BR/&gt; 64369: (0.772201%)&lt;BR/&gt; 64276: (0.772201%)&lt;BR/&gt; 64252: (0.772201%)&lt;BR/&gt; 53376: (0.772201%)&gt;];
}
787--1175[label="1;63pkt 63fpkt"];
787--4923[label="1;66pkt 66fpkt"];
787--8148[label="0.984375;63pkt 63fpkt"];
1175--4923[label="1;63pkt 63fpkt"];
1175--8148[label="1;63pkt 63fpkt"];
4923--8148[label="0.984375;63pkt 63fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.33.220" src_ip="81.241.177.214"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
2152[label="218.70.172.191;d;1500pkt 1500fpkt", shape=diamond, color=yellow];
2223[label="155.31.6.197;s;1584pkt 1584fpkt", shape=diamond, color=yellow];
4974[label="218.70.172.191;d;547pkt 547fpkt", shape=hexagon, color=black];
7967[label="155.31.6.193;77pkt 77fpkt", shape=pentagon, color=darkviolet];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.6.197:*, 218.70.172.191:80}[95.3642%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7708%)&lt;BR/&gt; 53: (0.229234%)&lt;BR/&gt; 60117: (0.0404531%)&lt;BR/&gt; 51962: (0.0404531%)&lt;BR/&gt; 51784: (0.0404531%)&gt;];
}
2152--2223[label="0.968;1452pkt 1452fpkt"];
2152--4974[label="1;547pkt 547fpkt"];
2152--6120[label="0.082;123pkt 123fpkt"];
2152--6136[label="0.0893333;134pkt 134fpkt"];
2152--6186[label="0.082;123pkt 123fpkt"];
2152--6196[label="0.0893333;134pkt 134fpkt"];
2152--6233[label="0.082;123pkt 123fpkt"];
2152--6240[label="0.0893333;134pkt 134fpkt"];
2152--7967[label="0.623377;48pkt 48fpkt"];
2223--4974[label="0.965265;528pkt 528fpkt"];
2223--6120[label="0.0757576;120pkt 120fpkt"];
2223--6136[label="0.0833333;132pkt 132fpkt"];
2223--6186[label="0.0757576;120pkt 120fpkt"];
2223--6196[label="0.0833333;132pkt 132fpkt"];
2223--6233[label="0.0757576;120pkt 120fpkt"];
2223--6240[label="0.0833333;132pkt 132fpkt"];
4974--7967[label="0.246753;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="218.70.172.191" dst_port="80" src_ip="155.31.6.197"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34501,2.02405,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
96[label="34.44.231.126s;1pkt 1fpkt", shape=rectangle, color=red];
1831[label="213.240.204.50;d;61pkt 61fpkt", shape=diamond, color=yellow];
4986[label="213.240.204.50;d;16pkt 16fpkt", shape=hexagon, color=black];
6389[label="45.22.217.13;4pkt 4fpkt", shape=pentagon, color=darkviolet];
7842[label="35.208.9.175;6pkt 6fpkt", shape=pentagon, color=darkviolet];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.240.204.50:2000}[55.7377%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2000: (27.8409%)&lt;BR/&gt; 31309: (5.11364%)&lt;BR/&gt; 10286: (3.40909%)&lt;BR/&gt; 31063: (2.27273%)&lt;BR/&gt; 24937: (2.27273%)&gt;];
}
96--1831[label="1;1pkt 1fpkt"];
96--4986[label="1;1pkt 1fpkt"];
1831--4986[label="1;16pkt 16fpkt"];
1831--6389[label="1;4pkt 4fpkt"];
1831--7842[label="1;6pkt 6fpkt"];
4986--7842[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.204.50" dst_port="2000"/>
    </slice>
    <from sec="1292130019" usec="0"/>
    <to sec="1292130765" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_164{
style=filled;
color=gray75;
1459[label="173.46.19.166;s;100pkt 100fpkt", shape=diamond, color=yellow];
1928[label="204.166.37.67;d;8pkt 8fpkt", shape=diamond, color=yellow];
1959[label="29.114.64.23;d;39pkt 39fpkt", shape=diamond, color=yellow];
2814[label="28.137.40.19;d;1pkt 1fpkt", shape=diamond, color=yellow];
5006[label="204.166.37.67;d;8pkt 8fpkt", shape=hexagon, color=black];
5209[label="28.137.40.19;d;1pkt 1fpkt", shape=hexagon, color=black];
5861[label="173.46.19.166;s;100pkt 100fpkt", shape=hexagon, color=black];
stat164[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.19.166:*, 29.114.64.23:80}[39%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.9416%)&lt;BR/&gt; 52795: (2.33463%)&lt;BR/&gt; 443: (2.33463%)&lt;BR/&gt; 57832: (0.77821%)&lt;BR/&gt; 57618: (0.77821%)&gt;];
}
1459--1928[label="1;8pkt 8fpkt"];
1459--1959[label="1;39pkt 39fpkt"];
1459--2814[label="1;1pkt 1fpkt"];
1459--5006[label="1;8pkt 8fpkt"];
1459--5209[label="1;1pkt 1fpkt"];
1459--5861[label="1;100pkt 100fpkt"];
1459--6120[label="0.01;1pkt 1fpkt"];
1459--6186[label="0.01;1pkt 1fpkt"];
1459--6233[label="0.01;1pkt 1fpkt"];
1928--5006[label="1;8pkt 8fpkt"];
1928--5861[label="1;8pkt 8fpkt"];
1959--5861[label="1;39pkt 39fpkt"];
2814--5209[label="1;1pkt 1fpkt"];
2814--5861[label="1;1pkt 1fpkt"];
5006--5861[label="1;8pkt 8fpkt"];
5209--5861[label="1;1pkt 1fpkt"];
5861--6120[label="0.01;1pkt 1fpkt"];
5861--6186[label="0.01;1pkt 1fpkt"];
5861--6233[label="0.01;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="29.114.64.23" dst_port="80" src_ip="173.46.19.166"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130804" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,999,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
1480[label="13.172.237.201;d;17pkt 17fpkt", shape=diamond, color=yellow];
5030[label="13.172.237.201;d;17pkt 17fpkt", shape=hexagon, color=black];
8115[label="212.68.25.211;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9349[label="212.68.25.211;1pkt 1fpkt", shape=invtriangle, color=brown];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:17185, 13.172.237.201:35509}[55.5556%]&lt;BR/&gt;{*:17185, 13.172.237.201:58200}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17185: (48.6486%)&lt;BR/&gt; 35509: (29.7297%)&lt;BR/&gt; 58200: (16.2162%)&lt;BR/&gt; 56270: (2.7027%)&lt;BR/&gt; 0: (2.7027%)&gt;];
}
1480--5030[label="1;17pkt 17fpkt"];
1480--8115[label="0.5;1pkt 1fpkt"];
1480--9349[label="1;1pkt 1fpkt"];
5030--8115[label="0.5;1pkt 1fpkt"];
5030--9349[label="1;1pkt 1fpkt"];
8115--9349[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.172.237.201" dst_port="35509" src_port="17185"/>
      <filter dst_ip="13.172.237.201" dst_port="58200" src_port="17185"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_168{
style=filled;
color=gray75;
1074[label="173.46.121.251;d;1pkt 1fpkt", shape=diamond, color=yellow];
5077[label="173.46.121.251;d;1pkt 1fpkt", shape=hexagon, color=black];
stat168[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.1.8.186:80, 173.46.121.251:57971}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57971: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
1074--5077[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.121.251" dst_port="57971" src_ip="193.1.8.186" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130247" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_169{
style=filled;
color=gray75;
2502[label="212.68.1.16;d;988pkt 988fpkt", shape=diamond, color=yellow];
5102[label="212.68.1.16;d;493pkt 493fpkt", shape=hexagon, color=black];
stat169[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.68.1.16:10508}[97.3684%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10508: (48.5483%)&lt;BR/&gt; 0: (2.7684%)&lt;BR/&gt; 6881: (1.2154%)&lt;BR/&gt; 16001: (0.742741%)&lt;BR/&gt; 45682: (0.270088%)&gt;];
}
2502--2751[label="0.00101215;1pkt 1fpkt"];
2502--4254[label="0.00101215;1pkt 1fpkt"];
2502--5102[label="1;493pkt 493fpkt"];
2502--5198[label="0.00101215;1pkt 1fpkt"];
2502--5839[label="0.00101215;1pkt 1fpkt"];
2502--6081[label="0.00101215;1pkt 1fpkt"];
2502--6082[label="0.00101215;1pkt 1fpkt"];
2502--6145[label="0.00101215;1pkt 1fpkt"];
2502--6146[label="0.00101215;1pkt 1fpkt"];
2502--6204[label="0.00101215;1pkt 1fpkt"];
2502--6205[label="0.00101215;1pkt 1fpkt"];
2502--6248[label="0.00101215;1pkt 1fpkt"];
2502--6249[label="0.00101215;1pkt 1fpkt"];
2502--8199[label="0.00101215;1pkt 1fpkt"];
2502--9388[label="0.00101215;1pkt 1fpkt"];
2502--9525[label="0.00101215;1pkt 1fpkt"];
2502--9908[label="0.00101215;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.1.16" dst_port="10508"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="204.209.97.37"/>
      <from sec="1292130414" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130414" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_171{
style=filled;
color=gray75;
2142[label="173.46.232.173;s;20pkt 20fpkt", shape=diamond, color=yellow];
2365[label="2.178.5.234;d;1pkt 1fpkt", shape=diamond, color=yellow];
4244[label="15.131.132.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
5206[label="2.178.5.234;d;1pkt 1fpkt", shape=hexagon, color=black];
7834[label="173.46.232.173;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat171[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.232.173:4186, *:17788}[23.8095%]&lt;BR/&gt;{173.46.232.173:*, *:8000}[23.8095%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4186: (27.907%)&lt;BR/&gt; 17788: (11.6279%)&lt;BR/&gt; 8000: (11.6279%)&lt;BR/&gt; 8891: (4.65116%)&lt;BR/&gt; 5000: (4.65116%)&gt;];
}
2142--2365[label="1;1pkt 1fpkt"];
2142--4244[label="1;1pkt 1fpkt"];
2142--5206[label="1;1pkt 1fpkt"];
2142--6120[label="0.05;1pkt 1fpkt"];
2142--6136[label="0.05;1pkt 1fpkt"];
2142--6186[label="0.05;1pkt 1fpkt"];
2142--6196[label="0.05;1pkt 1fpkt"];
2142--6233[label="0.05;1pkt 1fpkt"];
2142--6240[label="0.05;1pkt 1fpkt"];
2142--7834[label="0.95;19pkt 19fpkt"];
2365--5206[label="1;1pkt 1fpkt"];
2365--7834[label="1;1pkt 1fpkt"];
4244--7834[label="1;1pkt 1fpkt"];
5206--7834[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8000" src_ip="173.46.232.173"/>
      <filter dst_port="17788" src_ip="173.46.232.173" src_port="4186"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.123.4.173"/>
      <from sec="1292130289" usec="0"/>
      <to sec="1292130375" usec="0"/>
    </slice>
    <from sec="1292130289" usec="0"/>
    <to sec="1292130375" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_173{
style=filled;
color=gray75;
1246[label="173.46.225.38;s;320pkt 320fpkt", shape=diamond, color=yellow];
1381[label="173.46.64.160;s;15pkt 15fpkt", shape=diamond, color=yellow];
1382[label="192.156.51.11;d;1pkt 1fpkt", shape=diamond, color=yellow];
1772[label="68.39.155.232;d;4pkt 4fpkt", shape=diamond, color=yellow];
1805[label="173.46.18.1;s;542pkt 542fpkt", shape=diamond, color=yellow];
2741[label="197.34.132.212;d;123pkt 123fpkt", shape=diamond, color=yellow];
2742[label="53.50.181.248;d;7pkt 7fpkt", shape=diamond, color=yellow];
2770[label="9.99.6.139;d;6pkt 6fpkt", shape=diamond, color=yellow];
2816[label="102.231.112.246;d;6pkt 6fpkt", shape=diamond, color=yellow];
2827[label="15.214.90.248;d;6pkt 6fpkt", shape=diamond, color=yellow];
3003[label="173.46.158.203;s;327pkt 327fpkt", shape=diamond, color=yellow];
3141[label="102.183.80.58;d;6pkt 6fpkt", shape=diamond, color=yellow];
3172[label="102.182.80.192;d;7pkt 7fpkt", shape=diamond, color=yellow];
3178[label="102.233.24.86;d;6pkt 6fpkt", shape=diamond, color=yellow];
3227[label="0.158.22.64;d;6pkt 6fpkt", shape=diamond, color=yellow];
3466[label="102.133.182.105;d;6pkt 6fpkt", shape=diamond, color=yellow];
3475[label="3.155.230.4;d;6pkt 6fpkt", shape=diamond, color=yellow];
3483[label="150.249.111.57;d;268pkt 268fpkt", shape=diamond, color=yellow];
3501[label="8.140.235.169;d;6pkt 6fpkt", shape=diamond, color=yellow];
3506[label="214.109.201.0;d;6pkt 6fpkt", shape=diamond, color=yellow];
3514[label="160.193.74.188;d;7pkt 7fpkt", shape=diamond, color=yellow];
3519[label="9.85.172.185;d;7pkt 7fpkt", shape=diamond, color=yellow];
3844[label="8.116.242.253;d;6pkt 6fpkt", shape=diamond, color=yellow];
3862[label="4.176.9.237;d;6pkt 6fpkt", shape=diamond, color=yellow];
3868[label="12.75.212.75;d;6pkt 6fpkt", shape=diamond, color=yellow];
3870[label="44.98.9.81;d;4pkt 4fpkt", shape=diamond, color=yellow];
3905[label="9.119.17.166;d;6pkt 6fpkt", shape=diamond, color=yellow];
3907[label="160.193.26.207;d;6pkt 6fpkt", shape=diamond, color=yellow];
3912[label="9.199.153.244;d;6pkt 6fpkt", shape=diamond, color=yellow];
3914[label="0.106.207.146;d;6pkt 6fpkt", shape=diamond, color=yellow];
3938[label="102.248.128.67;d;6pkt 6fpkt", shape=diamond, color=yellow];
4218[label="9.86.163.185;d;7pkt 7fpkt", shape=diamond, color=yellow];
4232[label="9.127.236.157;d;6pkt 6fpkt", shape=diamond, color=yellow];
4235[label="3.147.204.127;d;6pkt 6fpkt", shape=diamond, color=yellow];
4240[label="14.169.238.187;d;6pkt 6fpkt", shape=diamond, color=yellow];
4250[label="52.78.151.223;d;7pkt 7fpkt", shape=diamond, color=yellow];
4252[label="13.106.130.254;d;6pkt 6fpkt", shape=diamond, color=yellow];
4257[label="15.35.32.218;d;6pkt 6fpkt", shape=diamond, color=yellow];
4303[label="102.74.49.93;d;6pkt 6fpkt", shape=diamond, color=yellow];
4578[label="211.52.112.78;d;7pkt 7fpkt", shape=diamond, color=yellow];
4581[label="41.79.73.97;d;6pkt 6fpkt", shape=diamond, color=yellow];
4587[label="52.183.250.115;d;7pkt 7fpkt", shape=diamond, color=yellow];
4593[label="53.60.62.113;d;6pkt 6fpkt", shape=diamond, color=yellow];
4628[label="13.100.65.85;d;6pkt 6fpkt", shape=diamond, color=yellow];
4976[label="68.39.155.232;d;4pkt 4fpkt", shape=hexagon, color=black];
5211[label="15.214.90.248;d;6pkt 6fpkt", shape=hexagon, color=black];
5295[label="173.46.158.203;s;238pkt 238fpkt", shape=hexagon, color=black];
5359[label="0.158.22.64;d;6pkt 6fpkt", shape=hexagon, color=black];
5507[label="53.50.181.248;d;7pkt 7fpkt", shape=hexagon, color=black];
5533[label="102.182.80.192;d;7pkt 7fpkt", shape=hexagon, color=black];
5544[label="214.109.201.0;d;6pkt 6fpkt", shape=hexagon, color=black];
5545[label="160.193.74.188;d;7pkt 7fpkt", shape=hexagon, color=black];
5710[label="102.248.128.67;d;6pkt 6fpkt", shape=hexagon, color=black];
5837[label="52.78.151.223;d;7pkt 7fpkt", shape=hexagon, color=black];
5968[label="0.106.207.146;d;6pkt 6fpkt", shape=hexagon, color=black];
5979[label="13.106.130.254;d;6pkt 6fpkt", shape=hexagon, color=black];
7707[label="173.46.64.160;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8051[label="173.46.158.203;343pkt 343fpkt", shape=pentagon, color=darkviolet];
stat173[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.18.1:*, *:*}[44.3535%]&lt;BR/&gt;{173.46.158.203:0, *:0}[28.1506%]&lt;BR/&gt;{173.46.225.38:443, 150.249.111.57:*}[23.5679%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (37.1279%)&lt;BR/&gt; 443: (11.4441%)&lt;BR/&gt; 60728: (5.45052%)&lt;BR/&gt; 60730: (4.44489%)&lt;BR/&gt; 60731: (3.90185%)&gt;];
}
1246--1772[label="0.75;3pkt 3fpkt"];
1246--3483[label="1;268pkt 268fpkt"];
1246--3870[label="0.25;1pkt 1fpkt"];
1246--4976[label="0.75;3pkt 3fpkt"];
1381--1382[label="1;1pkt 1fpkt"];
1381--1911[label="0.333333;1pkt 1fpkt"];
1381--3870[label="0.5;2pkt 2fpkt"];
1381--6129[label="0.133333;2pkt 2fpkt"];
1381--6164[label="0.0666667;1pkt 1fpkt"];
1381--6190[label="0.133333;2pkt 2fpkt"];
1381--6223[label="0.0666667;1pkt 1fpkt"];
1381--6250[label="0.0666667;1pkt 1fpkt"];
1381--7707[label="0.933333;14pkt 14fpkt"];
1382--7707[label="1;1pkt 1fpkt"];
1772--3003[label="0.25;1pkt 1fpkt"];
1772--4976[label="1;4pkt 4fpkt"];
1772--5295[label="0.25;1pkt 1fpkt"];
1772--8051[label="0.25;1pkt 1fpkt"];
1805--2741[label="1;123pkt 123fpkt"];
1805--2742[label="0.857143;6pkt 6fpkt"];
1805--2770[label="1;6pkt 6fpkt"];
1805--2816[label="1;6pkt 6fpkt"];
1805--2827[label="1;6pkt 6fpkt"];
1805--2932[label="0.142857;1pkt 1fpkt"];
1805--3141[label="1;6pkt 6fpkt"];
1805--3172[label="0.857143;6pkt 6fpkt"];
1805--3178[label="1;6pkt 6fpkt"];
1805--3227[label="1;6pkt 6fpkt"];
1805--3466[label="1;6pkt 6fpkt"];
1805--3475[label="1;6pkt 6fpkt"];
1805--3501[label="1;6pkt 6fpkt"];
1805--3506[label="1;6pkt 6fpkt"];
1805--3514[label="0.857143;6pkt 6fpkt"];
1805--3519[label="0.857143;6pkt 6fpkt"];
1805--3844[label="1;6pkt 6fpkt"];
1805--3862[label="1;6pkt 6fpkt"];
1805--3868[label="1;6pkt 6fpkt"];
1805--3905[label="1;6pkt 6fpkt"];
1805--3907[label="1;6pkt 6fpkt"];
1805--3912[label="1;6pkt 6fpkt"];
1805--3914[label="1;6pkt 6fpkt"];
1805--3938[label="1;6pkt 6fpkt"];
1805--4218[label="0.857143;6pkt 6fpkt"];
1805--4232[label="1;6pkt 6fpkt"];
1805--4235[label="1;6pkt 6fpkt"];
1805--4240[label="1;6pkt 6fpkt"];
1805--4250[label="0.857143;6pkt 6fpkt"];
1805--4252[label="1;6pkt 6fpkt"];
1805--4257[label="1;6pkt 6fpkt"];
1805--4303[label="1;6pkt 6fpkt"];
1805--4495[label="1;2pkt 2fpkt"];
1805--4578[label="0.857143;6pkt 6fpkt"];
1805--4581[label="1;6pkt 6fpkt"];
1805--4587[label="0.857143;6pkt 6fpkt"];
1805--4593[label="1;6pkt 6fpkt"];
1805--4628[label="1;6pkt 6fpkt"];
1805--5211[label="1;6pkt 6fpkt"];
1805--5359[label="1;6pkt 6fpkt"];
1805--5507[label="0.857143;6pkt 6fpkt"];
1805--5533[label="0.857143;6pkt 6fpkt"];
1805--5544[label="1;6pkt 6fpkt"];
1805--5545[label="0.857143;6pkt 6fpkt"];
1805--5710[label="1;6pkt 6fpkt"];
1805--5837[label="0.857143;6pkt 6fpkt"];
1805--5968[label="1;6pkt 6fpkt"];
1805--5979[label="1;6pkt 6fpkt"];
1805--6136[label="0.00184502;1pkt 1fpkt"];
1805--6137[label="0.00184502;1pkt 1fpkt"];
1805--6196[label="0.00184502;1pkt 1fpkt"];
1805--6197[label="0.00184502;1pkt 1fpkt"];
1805--6240[label="0.00184502;1pkt 1fpkt"];
1805--6241[label="0.00184502;1pkt 1fpkt"];
2742--3003[label="0.142857;1pkt 1fpkt"];
2742--5295[label="0.142857;1pkt 1fpkt"];
2742--5507[label="1;7pkt 7fpkt"];
2742--8051[label="0.142857;1pkt 1fpkt"];
2827--5211[label="1;6pkt 6fpkt"];
3003--3172[label="0.142857;1pkt 1fpkt"];
3003--3268[label="0.0030581;1pkt 1fpkt"];
3003--3514[label="0.142857;1pkt 1fpkt"];
3003--3519[label="0.142857;1pkt 1fpkt"];
3003--3634[label="0.00403226;1pkt 1fpkt"];
3003--3870[label="0.25;1pkt 1fpkt"];
3003--4023[label="0.0128205;1pkt 1fpkt"];
3003--4218[label="0.142857;1pkt 1fpkt"];
3003--4250[label="0.142857;1pkt 1fpkt"];
3003--4578[label="0.142857;1pkt 1fpkt"];
3003--4587[label="0.142857;1pkt 1fpkt"];
3003--4927[label="0.00546448;1pkt 1fpkt"];
3003--4976[label="0.25;1pkt 1fpkt"];
3003--5029[label="0.0128205;1pkt 1fpkt"];
3003--5295[label="1;238pkt 238fpkt"];
3003--5387[label="0.00862069;1pkt 1fpkt"];
3003--5507[label="0.142857;1pkt 1fpkt"];
3003--5533[label="0.142857;1pkt 1fpkt"];
3003--5545[label="0.142857;1pkt 1fpkt"];
3003--5570[label="0.00819672;1pkt 1fpkt"];
3003--5589[label="0.00961538;1pkt 1fpkt"];
3003--5724[label="0.008;1pkt 1fpkt"];
3003--5837[label="0.142857;1pkt 1fpkt"];
3003--8051[label="0.996942;326pkt 326fpkt"];
3172--5295[label="0.142857;1pkt 1fpkt"];
3172--5533[label="1;7pkt 7fpkt"];
3172--8051[label="0.142857;1pkt 1fpkt"];
3227--5359[label="1;6pkt 6fpkt"];
3506--5544[label="1;6pkt 6fpkt"];
3514--5295[label="0.142857;1pkt 1fpkt"];
3514--5545[label="1;7pkt 7fpkt"];
3514--8051[label="0.142857;1pkt 1fpkt"];
3519--5295[label="0.142857;1pkt 1fpkt"];
3519--8051[label="0.142857;1pkt 1fpkt"];
3870--6129[label="0.5;2pkt 2fpkt"];
3870--6190[label="0.5;2pkt 2fpkt"];
3870--7707[label="0.5;2pkt 2fpkt"];
3870--8051[label="0.25;1pkt 1fpkt"];
3914--5968[label="1;6pkt 6fpkt"];
3938--5710[label="1;6pkt 6fpkt"];
4218--8051[label="0.142857;1pkt 1fpkt"];
4250--5837[label="1;7pkt 7fpkt"];
4250--8051[label="0.142857;1pkt 1fpkt"];
4252--5979[label="1;6pkt 6fpkt"];
4578--8051[label="0.142857;1pkt 1fpkt"];
4587--8051[label="0.142857;1pkt 1fpkt"];
4976--5295[label="0.25;1pkt 1fpkt"];
4976--8051[label="0.25;1pkt 1fpkt"];
5295--5387[label="0.00862069;1pkt 1fpkt"];
5295--5507[label="0.142857;1pkt 1fpkt"];
5295--5533[label="0.142857;1pkt 1fpkt"];
5295--5545[label="0.142857;1pkt 1fpkt"];
5295--5570[label="0.00819672;1pkt 1fpkt"];
5295--5589[label="0.00961538;1pkt 1fpkt"];
5295--5724[label="0.008;1pkt 1fpkt"];
5295--8051[label="0.995798;237pkt 237fpkt"];
5507--8051[label="0.142857;1pkt 1fpkt"];
5533--8051[label="0.142857;1pkt 1fpkt"];
5545--8051[label="0.142857;1pkt 1fpkt"];
5837--8051[label="0.142857;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="173.46.18.1"/>
      <filter src_ip="173.46.158.203"/>
      <filter dst_ip="150.249.111.57" src_ip="173.46.225.38" src_port="443"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
748[label="13.172.237.201;s;17pkt 17fpkt", shape=diamond, color=yellow];
5227[label="13.172.237.201;s;17pkt 17fpkt", shape=hexagon, color=black];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.172.237.201:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
748--5227[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter src_ip="13.172.237.201"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.25492,2.08505,020,0 0 0 1 1 0 0 0 0 0 0 1 ">
    <description>subgraph cluster_175{
style=filled;
color=gray75;
800[label="174.41.168.209;d;139pkt 139fpkt", shape=diamond, color=yellow];
5233[label="174.41.168.209;d;139pkt 139fpkt", shape=hexagon, color=black];
9669[label="44.211.145.83;1pkt 1fpkt", shape=invhouse, color=bisque];
stat175[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 174.41.168.209:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
800--5233[label="1;139pkt 139fpkt"];
800--9669[label="1;1pkt 1fpkt"];
5233--9669[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.41.168.209"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
1506[label="133.0.37.249;s;596pkt 596fpkt", shape=diamond, color=yellow];
5236[label="133.0.37.249;s;573pkt 573fpkt", shape=hexagon, color=black];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.37.249:0, *:0}[99.8322%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.8289%)&lt;BR/&gt; 37724: (0.0855432%)&lt;BR/&gt; 80: (0.0855432%)&gt;];
}
1506--2039[label="0.00574713;1pkt 1fpkt"];
1506--3273[label="0.00411523;1pkt 1fpkt"];
1506--5236[label="1;573pkt 573fpkt"];
</description>
    <slice>
      <filter src_ip="133.0.37.249"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.34501,2.02405,999,1 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
87[label="33.45.92.104s;1pkt 1fpkt", shape=rectangle, color=red];
2528[label="212.73.72.10;d;331pkt 331fpkt", shape=diamond, color=yellow];
5283[label="212.73.72.10;d;194pkt 194fpkt", shape=hexagon, color=black];
7237[label="33.45.92.104;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 212.73.72.10:53}[87.3112%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (48.7689%)&lt;BR/&gt; 0: (2.27273%)&lt;BR/&gt; 22: (0.568182%)&lt;BR/&gt; 51067: (0.378788%)&lt;BR/&gt; 49185: (0.378788%)&gt;];
}
87--2528[label="1;1pkt 1fpkt"];
87--5283[label="1;1pkt 1fpkt"];
87--7237[label="1;1pkt 1fpkt"];
2528--2751[label="0.00302115;1pkt 1fpkt"];
2528--3290[label="0.0060423;2pkt 2fpkt"];
2528--4254[label="0.00302115;1pkt 1fpkt"];
2528--4711[label="0.0060423;2pkt 2fpkt"];
2528--5198[label="0.00302115;1pkt 1fpkt"];
2528--5283[label="1;194pkt 194fpkt"];
2528--5839[label="0.00302115;1pkt 1fpkt"];
2528--6081[label="0.00302115;1pkt 1fpkt"];
2528--6082[label="0.00302115;1pkt 1fpkt"];
2528--6114[label="0.0060423;2pkt 2fpkt"];
2528--6119[label="0.0543807;18pkt 18fpkt"];
2528--6128[label="0.00906344;3pkt 3fpkt"];
2528--6135[label="0.0362538;12pkt 12fpkt"];
2528--6144[label="0.0513595;17pkt 17fpkt"];
2528--6145[label="0.00302115;1pkt 1fpkt"];
2528--6146[label="0.00302115;1pkt 1fpkt"];
2528--6177[label="0.0060423;2pkt 2fpkt"];
2528--6185[label="0.0543807;18pkt 18fpkt"];
2528--6189[label="0.00906344;3pkt 3fpkt"];
2528--6195[label="0.0362538;12pkt 12fpkt"];
2528--6203[label="0.0513595;17pkt 17fpkt"];
2528--6204[label="0.00302115;1pkt 1fpkt"];
2528--6205[label="0.00302115;1pkt 1fpkt"];
2528--6232[label="0.0543807;18pkt 18fpkt"];
2528--6235[label="0.00906344;3pkt 3fpkt"];
2528--6239[label="0.0362538;12pkt 12fpkt"];
2528--6247[label="0.0513595;17pkt 17fpkt"];
2528--6248[label="0.00302115;1pkt 1fpkt"];
2528--6249[label="0.00302115;1pkt 1fpkt"];
2528--7237[label="1;2pkt 2fpkt"];
2528--8199[label="0.00302115;1pkt 1fpkt"];
2528--9388[label="0.00302115;1pkt 1fpkt"];
2528--9525[label="0.00302115;1pkt 1fpkt"];
2528--9908[label="0.00302115;1pkt 1fpkt"];
5283--6114[label="0.0103093;2pkt 2fpkt"];
5283--6119[label="0.0927835;18pkt 18fpkt"];
5283--6177[label="0.0103093;2pkt 2fpkt"];
5283--6185[label="0.0927835;18pkt 18fpkt"];
5283--6232[label="0.0927835;18pkt 18fpkt"];
5283--7237[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.73.72.10" dst_port="53"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
1993[label="131.19.57.15;d;86pkt 86fpkt", shape=diamond, color=yellow];
4066[label="173.46.59.202;d;48pkt 48fpkt", shape=diamond, color=yellow];
4294[label="67.115.52.205;s;2pkt 2fpkt", shape=diamond, color=yellow];
5901[label="173.46.59.202;d;48pkt 48fpkt", shape=hexagon, color=black];
8065[label="67.115.52.205;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8426[label="39.129.32.250;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9324[label="67.115.52.205;1pkt 1fpkt", shape=invtriangle, color=brown];
9875[label="67.115.52.205;2pkt 2fpkt", shape=invhouse, color=bisque];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 131.19.57.15:*}[64.1791%]&lt;BR/&gt;{*:*, 173.46.59.202:*}[35.8209%]&lt;BR/&gt;{*:80, *:*}[26.8657%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (14.8148%)&lt;BR/&gt; 443: (7.93651%)&lt;BR/&gt; 8000: (6.34921%)&lt;BR/&gt; 0: (6.34921%)&lt;BR/&gt; 8080: (5.82011%)&gt;];
}
1993--2983[label="0.0138889;1pkt 1fpkt"];
1993--3013[label="0.0116279;1pkt 1fpkt"];
1993--3985[label="0.0116279;1pkt 1fpkt"];
1993--4763[label="0.0232558;2pkt 2fpkt"];
1993--5630[label="0.0116279;1pkt 1fpkt"];
1993--5716[label="0.0116279;1pkt 1fpkt"];
1993--6064[label="0.0116279;1pkt 1fpkt"];
1993--6129[label="0.0813953;7pkt 7fpkt"];
1993--6142[label="0.0116279;1pkt 1fpkt"];
1993--6178[label="0.0232558;2pkt 2fpkt"];
1993--6190[label="0.0813953;7pkt 7fpkt"];
1993--6202[label="0.0116279;1pkt 1fpkt"];
1993--6246[label="0.0116279;1pkt 1fpkt"];
1993--6537[label="0.0116279;1pkt 1fpkt"];
1993--7154[label="0.0232558;2pkt 2fpkt"];
1993--7267[label="0.0116279;1pkt 1fpkt"];
1993--8426[label="1;1pkt 1fpkt"];
1993--8595[label="0.0116279;1pkt 1fpkt"];
1993--8881[label="0.0232558;2pkt 2fpkt"];
1993--8930[label="0.0116279;1pkt 1fpkt"];
1993--9569[label="0.0116279;1pkt 1fpkt"];
1993--9694[label="0.0232558;2pkt 2fpkt"];
4066--4294[label="1;2pkt 2fpkt"];
4066--4526[label="0.153846;2pkt 2fpkt"];
4066--4784[label="0.0208333;1pkt 1fpkt"];
4066--5901[label="1;48pkt 48fpkt"];
4066--6012[label="0.0208333;1pkt 1fpkt"];
4066--6129[label="0.104167;5pkt 5fpkt"];
4066--6164[label="0.0625;3pkt 3fpkt"];
4066--6178[label="0.0208333;1pkt 1fpkt"];
4066--6190[label="0.104167;5pkt 5fpkt"];
4066--6223[label="0.0625;3pkt 3fpkt"];
4066--6250[label="0.0625;3pkt 3fpkt"];
4066--6451[label="0.153846;2pkt 2fpkt"];
4066--7228[label="0.0416667;2pkt 2fpkt"];
4066--8065[label="1;1pkt 1fpkt"];
4066--8912[label="0.0416667;2pkt 2fpkt"];
4066--9324[label="1;1pkt 1fpkt"];
4066--9710[label="0.0416667;2pkt 2fpkt"];
4066--9875[label="1;2pkt 2fpkt"];
4294--5901[label="1;2pkt 2fpkt"];
4294--8065[label="1;1pkt 1fpkt"];
4294--9324[label="1;1pkt 1fpkt"];
4294--9875[label="1;2pkt 2fpkt"];
5901--6012[label="0.0208333;1pkt 1fpkt"];
5901--6129[label="0.104167;5pkt 5fpkt"];
5901--6164[label="0.0625;3pkt 3fpkt"];
5901--6178[label="0.0208333;1pkt 1fpkt"];
5901--6190[label="0.104167;5pkt 5fpkt"];
5901--6223[label="0.0625;3pkt 3fpkt"];
5901--6250[label="0.0625;3pkt 3fpkt"];
5901--6451[label="0.153846;2pkt 2fpkt"];
5901--7228[label="0.0416667;2pkt 2fpkt"];
5901--8065[label="1;1pkt 1fpkt"];
5901--8912[label="0.0416667;2pkt 2fpkt"];
5901--9324[label="1;1pkt 1fpkt"];
5901--9710[label="0.0416667;2pkt 2fpkt"];
5901--9875[label="1;2pkt 2fpkt"];
8065--9324[label="1;1pkt 1fpkt"];
8065--9875[label="1;1pkt 1fpkt"];
9324--9875[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.57.15"/>
      <filter dst_ip="173.46.59.202"/>
      <filter src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_179{
style=filled;
color=gray75;
2673[label="131.19.141.50;s;13pkt 13fpkt", shape=diamond, color=yellow];
2779[label="204.166.90.3;d;41pkt 41fpkt", shape=diamond, color=yellow];
5343[label="204.166.90.3;d;41pkt 41fpkt", shape=hexagon, color=black];
6722[label="131.19.141.50;62pkt 62fpkt", shape=pentagon, color=darkviolet];
8683[label="131.19.141.50;61pkt 61fpkt", shape=invtriangle, color=brown];
9605[label="131.19.141.50;62pkt 62fpkt", shape=invhouse, color=bisque];
stat179[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.141.50:80, 204.166.90.3:*}[66.129%]&lt;BR/&gt;{131.19.141.50:80, 9.53.48.168:*}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49699: (0.892857%)&lt;BR/&gt; 49697: (0.892857%)&lt;BR/&gt; 49695: (0.892857%)&lt;BR/&gt; 49692: (0.892857%)&gt;];
}
2673--6129[label="0.153846;2pkt 2fpkt"];
2673--6164[label="0.153846;2pkt 2fpkt"];
2673--6190[label="0.153846;2pkt 2fpkt"];
2673--6223[label="0.153846;2pkt 2fpkt"];
2673--6250[label="0.153846;2pkt 2fpkt"];
2673--6722[label="1;13pkt 13fpkt"];
2673--8683[label="1;13pkt 13fpkt"];
2673--9605[label="1;13pkt 13fpkt"];
2779--5343[label="1;41pkt 41fpkt"];
2779--6722[label="1;41pkt 41fpkt"];
2779--8683[label="1;41pkt 41fpkt"];
2779--9605[label="1;41pkt 41fpkt"];
5343--6722[label="1;41pkt 41fpkt"];
5343--8683[label="1;41pkt 41fpkt"];
5343--9605[label="1;41pkt 41fpkt"];
6722--8683[label="1;61pkt 61fpkt"];
6722--9605[label="1;62pkt 62fpkt"];
8683--9605[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="204.166.90.3" src_ip="131.19.141.50" src_port="80"/>
      <filter dst_ip="9.53.48.168" src_ip="131.19.141.50" src_port="80"/>
    </slice>
    <from sec="1292130059" usec="0"/>
    <to sec="1292130888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24189,2.04992,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_180{
style=filled;
color=gray75;
875[label="173.46.16.144;s;82pkt 82fpkt", shape=diamond, color=yellow];
876[label="3.20.53.149;d;1pkt 1fpkt", shape=diamond, color=yellow];
4808[label="173.46.16.144;s;69pkt 69fpkt", shape=hexagon, color=black];
5382[label="3.20.53.149;d;1pkt 1fpkt", shape=hexagon, color=black];
7582[label="173.46.16.144;89pkt 89fpkt", shape=pentagon, color=darkviolet];
9779[label="173.46.16.144;89pkt 89fpkt", shape=invhouse, color=bisque];
stat180[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.16.144:36995, *:*}[64.4444%]&lt;BR/&gt;{173.46.16.144:*, *:80}[23.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36995: (32.9305%)&lt;BR/&gt; 80: (10.423%)&lt;BR/&gt; 38411: (1.81269%)&lt;BR/&gt; 1935: (1.51057%)&lt;BR/&gt; 443: (1.51057%)&gt;];
}
875--876[label="1;1pkt 1fpkt"];
875--4808[label="1;69pkt 69fpkt"];
875--5382[label="1;1pkt 1fpkt"];
875--6120[label="0.0609756;5pkt 5fpkt"];
875--6136[label="0.0121951;1pkt 1fpkt"];
875--6137[label="0.0121951;1pkt 1fpkt"];
875--6186[label="0.0609756;5pkt 5fpkt"];
875--6196[label="0.0121951;1pkt 1fpkt"];
875--6197[label="0.0121951;1pkt 1fpkt"];
875--6233[label="0.0609756;5pkt 5fpkt"];
875--6240[label="0.0121951;1pkt 1fpkt"];
875--6241[label="0.0121951;1pkt 1fpkt"];
875--7582[label="0.987805;81pkt 81fpkt"];
875--9779[label="0.987805;81pkt 81fpkt"];
876--4808[label="1;1pkt 1fpkt"];
876--5382[label="1;1pkt 1fpkt"];
876--7582[label="1;1pkt 1fpkt"];
876--9779[label="1;1pkt 1fpkt"];
4808--5382[label="1;1pkt 1fpkt"];
4808--6120[label="0.0724638;5pkt 5fpkt"];
4808--6136[label="0.0144928;1pkt 1fpkt"];
4808--6137[label="0.0144928;1pkt 1fpkt"];
4808--6186[label="0.0724638;5pkt 5fpkt"];
4808--6196[label="0.0144928;1pkt 1fpkt"];
4808--6197[label="0.0144928;1pkt 1fpkt"];
4808--6233[label="0.0724638;5pkt 5fpkt"];
4808--6240[label="0.0144928;1pkt 1fpkt"];
4808--6241[label="0.0144928;1pkt 1fpkt"];
4808--7582[label="0.985507;68pkt 68fpkt"];
4808--9779[label="0.985507;68pkt 68fpkt"];
5382--7582[label="1;1pkt 1fpkt"];
5382--9779[label="1;1pkt 1fpkt"];
7582--9779[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter src_ip="173.46.16.144" src_port="36995"/>
      <filter dst_port="80" src_ip="173.46.16.144"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,010,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
1532[label="213.240.197.37;d;3033pkt 3033fpkt", shape=diamond, color=yellow];
5385[label="213.240.197.37;d;2093pkt 2093fpkt", shape=hexagon, color=black];
6338[label="133.207.154.8;42pkt 42fpkt", shape=pentagon, color=darkviolet];
6527[label="44.190.90.29;41pkt 41fpkt", shape=pentagon, color=darkviolet];
6671[label="2.138.227.44;46pkt 46fpkt", shape=pentagon, color=darkviolet];
6987[label="44.102.200.78;127pkt 127fpkt", shape=pentagon, color=darkviolet];
7011[label="0.218.68.81;41pkt 41fpkt", shape=pentagon, color=darkviolet];
7049[label="41.58.5.86;42pkt 42fpkt", shape=pentagon, color=darkviolet];
8501[label="133.207.154.8;42pkt 42fpkt", shape=invtriangle, color=brown];
8819[label="0.218.68.81;41pkt 41fpkt", shape=invtriangle, color=brown];
8838[label="41.58.5.86;41pkt 41fpkt", shape=invtriangle, color=brown];
9662[label="0.218.68.81;41pkt 41fpkt", shape=invhouse, color=bisque];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.240.197.37:80}[98.9863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.627%)&lt;BR/&gt; 2215: (0.106572%)&lt;BR/&gt; 2403: (0.079929%)&lt;BR/&gt; 2202: (0.079929%)&lt;BR/&gt; 2194: (0.079929%)&gt;];
}
1532--5385[label="1;2093pkt 2093fpkt"];
1532--6120[label="0.0623145;189pkt 189fpkt"];
1532--6136[label="0.0735246;223pkt 223fpkt"];
1532--6142[label="0.000329707;1pkt 1fpkt"];
1532--6186[label="0.0623145;189pkt 189fpkt"];
1532--6196[label="0.0735246;223pkt 223fpkt"];
1532--6202[label="0.000329707;1pkt 1fpkt"];
1532--6233[label="0.0623145;189pkt 189fpkt"];
1532--6240[label="0.0735246;223pkt 223fpkt"];
1532--6246[label="0.000329707;1pkt 1fpkt"];
1532--6338[label="0.904762;38pkt 38fpkt"];
1532--6527[label="0.95122;39pkt 39fpkt"];
1532--6671[label="0.913043;42pkt 42fpkt"];
1532--6987[label="0.929134;118pkt 118fpkt"];
1532--7011[label="0.926829;38pkt 38fpkt"];
1532--7049[label="0.928571;39pkt 39fpkt"];
1532--8501[label="0.904762;38pkt 38fpkt"];
1532--8819[label="0.926829;38pkt 38fpkt"];
1532--8838[label="0.926829;38pkt 38fpkt"];
1532--9662[label="0.926829;38pkt 38fpkt"];
5385--6120[label="0.090301;189pkt 189fpkt"];
5385--6136[label="0.00382226;8pkt 8fpkt"];
5385--6186[label="0.090301;189pkt 189fpkt"];
5385--6196[label="0.00382226;8pkt 8fpkt"];
5385--6233[label="0.090301;189pkt 189fpkt"];
5385--6240[label="0.00382226;8pkt 8fpkt"];
5385--6338[label="0.619048;26pkt 26fpkt"];
5385--6527[label="0.658537;27pkt 27fpkt"];
5385--6671[label="0.608696;28pkt 28fpkt"];
5385--6987[label="0.622047;79pkt 79fpkt"];
5385--7011[label="0.609756;25pkt 25fpkt"];
5385--7049[label="0.642857;27pkt 27fpkt"];
5385--8501[label="0.619048;26pkt 26fpkt"];
5385--8819[label="0.609756;25pkt 25fpkt"];
5385--8838[label="0.634146;26pkt 26fpkt"];
5385--9662[label="0.609756;25pkt 25fpkt"];
6338--8501[label="1;42pkt 42fpkt"];
7011--8819[label="1;41pkt 41fpkt"];
7011--9662[label="1;41pkt 41fpkt"];
7049--8838[label="1;41pkt 41fpkt"];
8819--9662[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.197.37" dst_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,999,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
1063[label="145.7.101.86;d;97pkt 97fpkt", shape=diamond, color=yellow];
3677[label="204.6.218.26;s;4pkt 4fpkt", shape=diamond, color=yellow];
4080[label="64.94.171.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
4124[label="200.202.4.157;s;1pkt 1fpkt", shape=diamond, color=yellow];
5408[label="145.7.101.86;d;86pkt 86fpkt", shape=hexagon, color=black];
8033[label="45.195.102.201;16pkt 16fpkt", shape=pentagon, color=darkviolet];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 145.7.101.86:22887}[79.6117%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22887: (40.2439%)&lt;BR/&gt; 23057: (5.85366%)&lt;BR/&gt; 24227: (1.21951%)&lt;BR/&gt; 23810: (0.97561%)&lt;BR/&gt; 22892: (0.97561%)&gt;];
}
1063--1419[label="0.0103093;1pkt 1fpkt"];
1063--3677[label="1;4pkt 4fpkt"];
1063--4080[label="1;1pkt 1fpkt"];
1063--4124[label="1;1pkt 1fpkt"];
1063--4784[label="0.0103093;1pkt 1fpkt"];
1063--5408[label="1;86pkt 86fpkt"];
1063--6012[label="0.0103093;1pkt 1fpkt"];
1063--6123[label="0.0103093;1pkt 1fpkt"];
1063--6178[label="0.0103093;1pkt 1fpkt"];
1063--7228[label="0.0103093;1pkt 1fpkt"];
1063--8033[label="0.625;10pkt 10fpkt"];
1063--8912[label="0.0103093;1pkt 1fpkt"];
1063--9710[label="0.0103093;1pkt 1fpkt"];
3677--5408[label="0.5;2pkt 2fpkt"];
4080--5408[label="1;1pkt 1fpkt"];
4124--5408[label="1;1pkt 1fpkt"];
5408--6012[label="0.0116279;1pkt 1fpkt"];
5408--6123[label="0.0116279;1pkt 1fpkt"];
5408--6178[label="0.0116279;1pkt 1fpkt"];
5408--7228[label="0.0116279;1pkt 1fpkt"];
5408--8033[label="0.4375;7pkt 7fpkt"];
5408--8912[label="0.0116279;1pkt 1fpkt"];
5408--9710[label="0.0116279;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="145.7.101.86" dst_port="22887"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
1261[label="213.240.201.224;d;1015pkt 1015fpkt", shape=diamond, color=yellow];
2164[label="210.42.138.90;s;227pkt 227fpkt", shape=diamond, color=yellow];
5462[label="213.240.201.224;d;791pkt 791fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{220.85.208.43:53, 213.240.201.224:*}[27.5122%]&lt;BR/&gt;{210.42.138.90:5667, 213.240.201.224:*}[22.1463%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (25.332%)&lt;BR/&gt; 0: (19.577%)&lt;BR/&gt; 5667: (14.6827%)&lt;BR/&gt; 123: (0.147565%)&lt;BR/&gt; 55767: (0.122971%)&gt;];
}
1261--2164[label="0.955947;217pkt 217fpkt"];
1261--5462[label="1;791pkt 791fpkt"];
1261--5877[label="0.0588235;1pkt 1fpkt"];
1261--6114[label="0.035468;36pkt 36fpkt"];
1261--6128[label="0.00788177;8pkt 8fpkt"];
1261--6177[label="0.035468;36pkt 36fpkt"];
1261--6189[label="0.00788177;8pkt 8fpkt"];
1261--6235[label="0.00788177;8pkt 8fpkt"];
2164--5462[label="0.674009;153pkt 153fpkt"];
5462--5877[label="0.0588235;1pkt 1fpkt"];
5462--6114[label="0.045512;36pkt 36fpkt"];
5462--6128[label="0.00252845;2pkt 2fpkt"];
5462--6177[label="0.045512;36pkt 36fpkt"];
5462--6189[label="0.00252845;2pkt 2fpkt"];
5462--6235[label="0.00252845;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.201.224" src_ip="220.85.208.43" src_port="53"/>
      <filter dst_ip="213.240.201.224" src_ip="210.42.138.90" src_port="5667"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130818" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_185{
style=filled;
color=gray75;
3408[label="212.68.7.45;d;85pkt 85fpkt", shape=diamond, color=yellow];
5485[label="212.68.7.45;d;56pkt 56fpkt", shape=hexagon, color=black];
6673[label="9.53.50.45;64pkt 64fpkt", shape=pentagon, color=darkviolet];
6892[label="8.49.206.68;18pkt 18fpkt", shape=pentagon, color=darkviolet];
stat185[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.53.50.45:*, 212.68.7.45:80}[65.625%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5516%)&lt;BR/&gt; 65196: (0.672646%)&lt;BR/&gt; 63471: (0.672646%)&lt;BR/&gt; 59844: (0.672646%)&lt;BR/&gt; 59804: (0.672646%)&gt;];
}
3408--4254[label="0.0117647;1pkt 1fpkt"];
3408--5198[label="0.0117647;1pkt 1fpkt"];
3408--5485[label="1;56pkt 56fpkt"];
3408--5839[label="0.0117647;1pkt 1fpkt"];
3408--6081[label="0.0117647;1pkt 1fpkt"];
3408--6082[label="0.0117647;1pkt 1fpkt"];
3408--6120[label="0.0823529;7pkt 7fpkt"];
3408--6136[label="0.0235294;2pkt 2fpkt"];
3408--6145[label="0.0117647;1pkt 1fpkt"];
3408--6146[label="0.0117647;1pkt 1fpkt"];
3408--6186[label="0.0823529;7pkt 7fpkt"];
3408--6196[label="0.0235294;2pkt 2fpkt"];
3408--6204[label="0.0117647;1pkt 1fpkt"];
3408--6205[label="0.0117647;1pkt 1fpkt"];
3408--6233[label="0.0823529;7pkt 7fpkt"];
3408--6240[label="0.0235294;2pkt 2fpkt"];
3408--6248[label="0.0117647;1pkt 1fpkt"];
3408--6249[label="0.0117647;1pkt 1fpkt"];
3408--6673[label="0.859375;55pkt 55fpkt"];
3408--6892[label="0.888889;16pkt 16fpkt"];
3408--8199[label="0.0117647;1pkt 1fpkt"];
3408--9388[label="0.0117647;1pkt 1fpkt"];
3408--9525[label="0.0117647;1pkt 1fpkt"];
3408--9908[label="0.0117647;1pkt 1fpkt"];
5485--6120[label="0.125;7pkt 7fpkt"];
5485--6186[label="0.125;7pkt 7fpkt"];
5485--6233[label="0.125;7pkt 7fpkt"];
5485--6673[label="0.678571;38pkt 38fpkt"];
5485--6892[label="0.611111;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.7.45" dst_port="80" src_ip="9.53.50.45"/>
    </slice>
    <from sec="1292130020" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,999,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
2331[label="197.34.132.212;s;86pkt 86fpkt", shape=diamond, color=yellow];
2610[label="173.46.18.1;d;547pkt 547fpkt", shape=diamond, color=yellow];
2743[label="53.50.181.248;s;6pkt 6fpkt", shape=diamond, color=yellow];
2771[label="9.99.6.139;s;6pkt 6fpkt", shape=diamond, color=yellow];
2817[label="102.231.112.246;s;6pkt 6fpkt", shape=diamond, color=yellow];
3128[label="15.214.90.248;s;6pkt 6fpkt", shape=diamond, color=yellow];
3138[label="102.133.182.105;s;6pkt 6fpkt", shape=diamond, color=yellow];
3142[label="102.183.80.58;s;6pkt 6fpkt", shape=diamond, color=yellow];
3154[label="3.155.230.4;s;7pkt 7fpkt", shape=diamond, color=yellow];
3173[label="102.182.80.192;s;6pkt 6fpkt", shape=diamond, color=yellow];
3220[label="8.140.235.169;s;6pkt 6fpkt", shape=diamond, color=yellow];
3228[label="0.158.22.64;s;6pkt 6fpkt", shape=diamond, color=yellow];
3480[label="102.233.24.86;s;6pkt 6fpkt", shape=diamond, color=yellow];
3507[label="214.109.201.0;s;10pkt 10fpkt", shape=diamond, color=yellow];
3511[label="8.116.242.253;s;6pkt 6fpkt", shape=diamond, color=yellow];
3515[label="160.193.74.188;s;6pkt 6fpkt", shape=diamond, color=yellow];
3849[label="9.85.172.185;s;6pkt 6fpkt", shape=diamond, color=yellow];
3869[label="12.75.212.75;s;8pkt 8fpkt", shape=diamond, color=yellow];
3906[label="9.119.17.166;s;6pkt 6fpkt", shape=diamond, color=yellow];
3913[label="9.199.153.244;s;7pkt 7fpkt", shape=diamond, color=yellow];
3927[label="9.86.163.185;s;6pkt 6fpkt", shape=diamond, color=yellow];
4211[label="160.193.26.207;s;6pkt 6fpkt", shape=diamond, color=yellow];
4212[label="0.106.207.146;s;6pkt 6fpkt", shape=diamond, color=yellow];
4226[label="102.248.128.67;s;6pkt 6fpkt", shape=diamond, color=yellow];
4233[label="9.127.236.157;s;6pkt 6fpkt", shape=diamond, color=yellow];
4236[label="3.147.204.127;s;6pkt 6fpkt", shape=diamond, color=yellow];
4241[label="14.169.238.187;s;6pkt 6fpkt", shape=diamond, color=yellow];
4258[label="15.35.32.218;s;6pkt 6fpkt", shape=diamond, color=yellow];
4512[label="4.176.9.237;s;4pkt 4fpkt", shape=diamond, color=yellow];
4540[label="52.78.151.223;s;6pkt 6fpkt", shape=diamond, color=yellow];
4541[label="13.106.130.254;s;6pkt 6fpkt", shape=diamond, color=yellow];
4561[label="102.74.49.93;s;6pkt 6fpkt", shape=diamond, color=yellow];
4579[label="211.52.112.78;s;3pkt 3fpkt", shape=diamond, color=yellow];
4588[label="52.183.250.115;s;6pkt 6fpkt", shape=diamond, color=yellow];
4589[label="4.164.183.45;s;6pkt 6fpkt", shape=diamond, color=yellow];
4594[label="53.60.62.113;s;6pkt 6fpkt", shape=diamond, color=yellow];
5520[label="15.214.90.248;s;6pkt 6fpkt", shape=hexagon, color=black];
5534[label="102.182.80.192;s;6pkt 6fpkt", shape=hexagon, color=black];
5689[label="214.109.201.0;s;10pkt 10fpkt", shape=hexagon, color=black];
5692[label="12.75.212.75;s;8pkt 8fpkt", shape=hexagon, color=black];
5972[label="3.147.204.127;s;6pkt 6fpkt", shape=hexagon, color=black];
6265[label="214.109.201.0;10pkt 10fpkt", shape=pentagon, color=darkviolet];
6787[label="102.183.80.58;5pkt 5fpkt", shape=pentagon, color=darkviolet];
6813[label="13.113.202.61;9pkt 9fpkt", shape=pentagon, color=darkviolet];
6985[label="211.52.112.78;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7152[label="41.79.73.97;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7251[label="102.133.182.105;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7694[label="9.127.236.157;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7732[label="2.121.201.162;1pkt 1fpkt", shape=pentagon, color=darkviolet];
7768[label="9.119.17.166;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7918[label="9.85.172.185;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7928[label="14.169.238.187;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7929[label="160.193.74.188;5pkt 5fpkt", shape=pentagon, color=darkviolet];
7960[label="102.182.80.192;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8321[label="4.176.9.237;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8393[label="9.199.153.244;7pkt 7fpkt", shape=pentagon, color=darkviolet];
8414[label="15.214.90.248;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8416[label="53.50.181.248;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8448[label="8.116.242.253;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8469[label="214.109.201.0;10pkt 10fpkt", shape=invtriangle, color=brown];
8712[label="102.183.80.58;6pkt 6fpkt", shape=invtriangle, color=brown];
8728[label="13.113.202.61;9pkt 9fpkt", shape=invtriangle, color=brown];
8919[label="102.133.182.105;5pkt 5fpkt", shape=invtriangle, color=brown];
9178[label="9.119.17.166;6pkt 6fpkt", shape=invtriangle, color=brown];
9258[label="14.169.238.187;2pkt 2fpkt", shape=invtriangle, color=brown];
9449[label="4.176.9.237;4pkt 4fpkt", shape=invtriangle, color=brown];
9487[label="15.214.90.248;6pkt 6fpkt", shape=invtriangle, color=brown];
9488[label="53.50.181.248;6pkt 6fpkt", shape=invtriangle, color=brown];
9506[label="8.116.242.253;1pkt 1fpkt", shape=invtriangle, color=brown];
9515[label="214.109.201.0;10pkt 10fpkt", shape=invhouse, color=bisque];
9624[label="13.113.202.61;10pkt 10fpkt", shape=invhouse, color=bisque];
9951[label="15.214.90.248;5pkt 5fpkt", shape=invhouse, color=bisque];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{197.34.132.212:*, 173.46.18.1:*}[22.4863%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60730: (10.5212%)&lt;BR/&gt; 60732: (9.21815%)&lt;BR/&gt; 60731: (8.20463%)&lt;BR/&gt; 60728: (7.8668%)&lt;BR/&gt; 60733: (4.10232%)&gt;];
}
2331--2610[label="1;86pkt 86fpkt"];
2610--2743[label="1;6pkt 6fpkt"];
2610--2771[label="1;6pkt 6fpkt"];
2610--2817[label="1;6pkt 6fpkt"];
2610--3128[label="1;6pkt 6fpkt"];
2610--3138[label="1;6pkt 6fpkt"];
2610--3142[label="1;6pkt 6fpkt"];
2610--3154[label="1;7pkt 7fpkt"];
2610--3173[label="1;6pkt 6fpkt"];
2610--3220[label="1;6pkt 6fpkt"];
2610--3228[label="1;6pkt 6fpkt"];
2610--3480[label="1;6pkt 6fpkt"];
2610--3507[label="1;10pkt 10fpkt"];
2610--3511[label="1;6pkt 6fpkt"];
2610--3515[label="1;6pkt 6fpkt"];
2610--3849[label="1;6pkt 6fpkt"];
2610--3869[label="1;8pkt 8fpkt"];
2610--3906[label="1;6pkt 6fpkt"];
2610--3913[label="1;7pkt 7fpkt"];
2610--3927[label="1;6pkt 6fpkt"];
2610--4211[label="1;6pkt 6fpkt"];
2610--4212[label="1;6pkt 6fpkt"];
2610--4226[label="1;6pkt 6fpkt"];
2610--4233[label="1;6pkt 6fpkt"];
2610--4236[label="1;6pkt 6fpkt"];
2610--4241[label="1;6pkt 6fpkt"];
2610--4258[label="1;6pkt 6fpkt"];
2610--4512[label="1;4pkt 4fpkt"];
2610--4540[label="1;6pkt 6fpkt"];
2610--4541[label="1;6pkt 6fpkt"];
2610--4561[label="1;6pkt 6fpkt"];
2610--4579[label="1;3pkt 3fpkt"];
2610--4588[label="1;6pkt 6fpkt"];
2610--4589[label="1;6pkt 6fpkt"];
2610--4594[label="1;6pkt 6fpkt"];
2610--4784[label="0.00182815;1pkt 1fpkt"];
2610--5520[label="1;6pkt 6fpkt"];
2610--5534[label="1;6pkt 6fpkt"];
2610--5689[label="1;10pkt 10fpkt"];
2610--5692[label="1;8pkt 8fpkt"];
2610--5972[label="1;6pkt 6fpkt"];
2610--6012[label="0.00182815;1pkt 1fpkt"];
2610--6129[label="0.00182815;1pkt 1fpkt"];
2610--6190[label="0.00182815;1pkt 1fpkt"];
2610--6265[label="1;10pkt 10fpkt"];
2610--6787[label="1;5pkt 5fpkt"];
2610--6813[label="1;9pkt 9fpkt"];
2610--6985[label="1;1pkt 1fpkt"];
2610--7152[label="1;1pkt 1fpkt"];
2610--7228[label="0.00182815;1pkt 1fpkt"];
2610--7251[label="1;5pkt 5fpkt"];
2610--7694[label="1;2pkt 2fpkt"];
2610--7732[label="1;1pkt 1fpkt"];
2610--7768[label="1;6pkt 6fpkt"];
2610--7918[label="1;6pkt 6fpkt"];
2610--7928[label="1;2pkt 2fpkt"];
2610--7929[label="1;5pkt 5fpkt"];
2610--7960[label="1;5pkt 5fpkt"];
2610--8321[label="1;3pkt 3fpkt"];
2610--8393[label="1;7pkt 7fpkt"];
2610--8414[label="1;5pkt 5fpkt"];
2610--8416[label="1;6pkt 6fpkt"];
2610--8448[label="1;1pkt 1fpkt"];
2610--8469[label="1;10pkt 10fpkt"];
2610--8712[label="1;6pkt 6fpkt"];
2610--8728[label="1;9pkt 9fpkt"];
2610--8912[label="0.00182815;1pkt 1fpkt"];
2610--8919[label="1;5pkt 5fpkt"];
2610--9178[label="1;6pkt 6fpkt"];
2610--9258[label="1;2pkt 2fpkt"];
2610--9449[label="1;4pkt 4fpkt"];
2610--9487[label="1;6pkt 6fpkt"];
2610--9488[label="1;6pkt 6fpkt"];
2610--9506[label="1;1pkt 1fpkt"];
2610--9515[label="1;10pkt 10fpkt"];
2610--9624[label="1;10pkt 10fpkt"];
2610--9710[label="0.00182815;1pkt 1fpkt"];
2610--9951[label="1;5pkt 5fpkt"];
2743--8416[label="1;6pkt 6fpkt"];
2743--9488[label="1;6pkt 6fpkt"];
3128--5520[label="1;6pkt 6fpkt"];
3128--8414[label="1;5pkt 5fpkt"];
3128--9487[label="1;6pkt 6fpkt"];
3128--9951[label="1;5pkt 5fpkt"];
3138--7251[label="1;5pkt 5fpkt"];
3138--8919[label="1;5pkt 5fpkt"];
3142--6787[label="1;5pkt 5fpkt"];
3142--8712[label="1;6pkt 6fpkt"];
3173--5534[label="1;6pkt 6fpkt"];
3173--7960[label="1;5pkt 5fpkt"];
3507--5689[label="1;10pkt 10fpkt"];
3507--6265[label="1;10pkt 10fpkt"];
3507--8469[label="1;10pkt 10fpkt"];
3507--9515[label="1;10pkt 10fpkt"];
3511--8448[label="1;1pkt 1fpkt"];
3511--9506[label="1;1pkt 1fpkt"];
3515--7929[label="1;5pkt 5fpkt"];
3849--7918[label="1;6pkt 6fpkt"];
3869--5692[label="1;8pkt 8fpkt"];
3906--7768[label="1;6pkt 6fpkt"];
3906--9178[label="1;6pkt 6fpkt"];
3913--8393[label="1;7pkt 7fpkt"];
4233--7694[label="1;2pkt 2fpkt"];
4236--5972[label="1;6pkt 6fpkt"];
4241--7928[label="1;2pkt 2fpkt"];
4241--9258[label="1;2pkt 2fpkt"];
4512--8321[label="1;3pkt 3fpkt"];
4512--9449[label="1;4pkt 4fpkt"];
4579--6985[label="1;1pkt 1fpkt"];
5520--8414[label="1;5pkt 5fpkt"];
5520--9487[label="1;6pkt 6fpkt"];
5520--9951[label="1;5pkt 5fpkt"];
5534--7960[label="1;5pkt 5fpkt"];
5689--6265[label="1;10pkt 10fpkt"];
5689--8469[label="1;10pkt 10fpkt"];
5689--9515[label="1;10pkt 10fpkt"];
6265--8469[label="1;10pkt 10fpkt"];
6265--9515[label="1;10pkt 10fpkt"];
6787--8712[label="1;5pkt 5fpkt"];
6813--8728[label="1;9pkt 9fpkt"];
6813--9624[label="1;9pkt 9fpkt"];
7251--8919[label="1;5pkt 5fpkt"];
7768--9178[label="1;6pkt 6fpkt"];
7928--9258[label="1;2pkt 2fpkt"];
8321--9449[label="1;3pkt 3fpkt"];
8414--9487[label="1;5pkt 5fpkt"];
8414--9951[label="1;5pkt 5fpkt"];
8416--9488[label="1;6pkt 6fpkt"];
8448--9506[label="1;1pkt 1fpkt"];
8469--9515[label="1;10pkt 10fpkt"];
8728--9624[label="1;9pkt 9fpkt"];
9487--9951[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.18.1" src_ip="197.34.132.212"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_187{
style=filled;
color=gray75;
1066[label="212.68.144.41;s;109pkt 109fpkt", shape=diamond, color=yellow];
1229[label="206.228.235.154;d;12pkt 12fpkt", shape=diamond, color=yellow];
1404[label="206.228.235.157;d;14pkt 14fpkt", shape=diamond, color=yellow];
1406[label="206.228.235.145;d;15pkt 15fpkt", shape=diamond, color=yellow];
1749[label="206.228.235.149;d;7pkt 7fpkt", shape=diamond, color=yellow];
1843[label="133.17.217.29;s;14pkt 14fpkt", shape=diamond, color=yellow];
1924[label="192.156.51.72;d;4pkt 4fpkt", shape=diamond, color=yellow];
2852[label="8.49.206.204;d;1pkt 1fpkt", shape=diamond, color=yellow];
4782[label="206.228.235.157;d;14pkt 14fpkt", shape=hexagon, color=black];
4859[label="206.228.235.149;d;7pkt 7fpkt", shape=hexagon, color=black];
5523[label="192.156.51.72;d;4pkt 4fpkt", shape=hexagon, color=black];
5524[label="8.49.206.204;d;1pkt 1fpkt", shape=hexagon, color=black];
stat187[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.144.41:80, *:*}[78.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.5149%)&lt;BR/&gt; 53: (0.990099%)&lt;BR/&gt; 63403: (0.742574%)&lt;BR/&gt; 60556: (0.742574%)&lt;BR/&gt; 60476: (0.742574%)&gt;];
}
1066--1229[label="0.916667;11pkt 11fpkt"];
1066--1281[label="0.0277778;1pkt 1fpkt"];
1066--1404[label="1;14pkt 14fpkt"];
1066--1406[label="0.8;12pkt 12fpkt"];
1066--1749[label="0.857143;6pkt 6fpkt"];
1066--1891[label="0.00917431;1pkt 1fpkt"];
1066--1924[label="0.25;1pkt 1fpkt"];
1066--2096[label="0.0151515;1pkt 1fpkt"];
1066--3467[label="0.25;1pkt 1fpkt"];
1066--3986[label="0.00917431;1pkt 1fpkt"];
1066--4253[label="0.00917431;1pkt 1fpkt"];
1066--4782[label="1;14pkt 14fpkt"];
1066--4859[label="0.857143;6pkt 6fpkt"];
1066--5430[label="0.0151515;1pkt 1fpkt"];
1066--5526[label="0.25;1pkt 1fpkt"];
1066--5538[label="0.00917431;1pkt 1fpkt"];
1066--5976[label="0.00917431;1pkt 1fpkt"];
1066--6048[label="0.00917431;1pkt 1fpkt"];
1066--6129[label="0.0366972;4pkt 4fpkt"];
1066--6164[label="0.0458716;5pkt 5fpkt"];
1066--6178[label="0.0458716;5pkt 5fpkt"];
1066--6190[label="0.0366972;4pkt 4fpkt"];
1066--6223[label="0.0458716;5pkt 5fpkt"];
1066--6250[label="0.0458716;5pkt 5fpkt"];
1404--4782[label="1;14pkt 14fpkt"];
1406--4453[label="0.0666667;1pkt 1fpkt"];
1749--4859[label="1;7pkt 7fpkt"];
1843--1924[label="0.25;1pkt 1fpkt"];
1843--2852[label="1;1pkt 1fpkt"];
1843--5523[label="0.5;2pkt 2fpkt"];
1843--5524[label="1;1pkt 1fpkt"];
1843--6178[label="0.0714286;1pkt 1fpkt"];
1924--2647[label="0.25;1pkt 1fpkt"];
1924--5523[label="0.75;3pkt 3fpkt"];
1924--6178[label="0.25;1pkt 1fpkt"];
2852--5524[label="1;1pkt 1fpkt"];
5523--6178[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="212.68.144.41" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.18284,2.04981,503,1 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_188{
style=filled;
color=gray75;
303[label="205.198.104.204s;2pkt 2fpkt", shape=rectangle, color=red];
4182[label="174.41.243.179;d;35pkt 35fpkt", shape=diamond, color=yellow];
4346[label="205.198.104.204;s;30pkt 30fpkt", shape=diamond, color=yellow];
8058[label="205.198.104.204;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9321[label="205.198.104.204;29pkt 29fpkt", shape=invtriangle, color=brown];
stat188[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.198.104.204:*, 174.41.243.179:80}[85.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6%)&lt;BR/&gt; 3597: (2%)&lt;BR/&gt; 3596: (2%)&lt;BR/&gt; 3619: (1.6%)&lt;BR/&gt; 3608: (1.6%)&gt;];
}
303--4182[label="1;2pkt 2fpkt"];
303--4346[label="1;2pkt 2fpkt"];
303--8058[label="1;2pkt 2fpkt"];
303--9321[label="1;2pkt 2fpkt"];
4182--4346[label="1;30pkt 30fpkt"];
4182--5572[label="0.0285714;1pkt 1fpkt"];
4182--7589[label="0.0344828;1pkt 1fpkt"];
4182--8058[label="1;29pkt 29fpkt"];
4182--9321[label="1;29pkt 29fpkt"];
4346--8058[label="1;29pkt 29fpkt"];
4346--9321[label="1;29pkt 29fpkt"];
8058--9321[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="174.41.243.179" dst_port="80" src_ip="205.198.104.204"/>
    </slice>
    <from sec="1292130402" usec="0"/>
    <to sec="1292130798" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_190{
style=filled;
color=gray75;
2915[label="131.19.176.188;s;144pkt 144fpkt", shape=diamond, color=yellow];
3654[label="58.0.24.211;d;130pkt 130fpkt", shape=diamond, color=yellow];
5744[label="58.0.24.211;d;116pkt 116fpkt", shape=hexagon, color=black];
stat190[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.176.188:*, 58.0.24.211:80}[90.2778%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.7436%)&lt;BR/&gt; 61635: (0.384615%)&lt;BR/&gt; 61634: (0.384615%)&lt;BR/&gt; 61633: (0.384615%)&lt;BR/&gt; 61632: (0.384615%)&gt;];
}
2915--3654[label="1;130pkt 130fpkt"];
2915--5744[label="1;116pkt 116fpkt"];
2915--5789[label="0.00694444;1pkt 1fpkt"];
2915--6075[label="0.00694444;1pkt 1fpkt"];
2915--6120[label="0.0277778;4pkt 4fpkt"];
2915--6136[label="0.0208333;3pkt 3fpkt"];
2915--6144[label="0.0138889;2pkt 2fpkt"];
2915--6186[label="0.0277778;4pkt 4fpkt"];
2915--6196[label="0.0208333;3pkt 3fpkt"];
2915--6203[label="0.0138889;2pkt 2fpkt"];
2915--6233[label="0.0277778;4pkt 4fpkt"];
2915--6240[label="0.0208333;3pkt 3fpkt"];
2915--6247[label="0.0138889;2pkt 2fpkt"];
3654--5744[label="1;116pkt 116fpkt"];
3654--6120[label="0.0307692;4pkt 4fpkt"];
3654--6136[label="0.0153846;2pkt 2fpkt"];
3654--6186[label="0.0307692;4pkt 4fpkt"];
3654--6196[label="0.0153846;2pkt 2fpkt"];
3654--6233[label="0.0307692;4pkt 4fpkt"];
3654--6240[label="0.0153846;2pkt 2fpkt"];
5744--6120[label="0.0344828;4pkt 4fpkt"];
5744--6136[label="0.0172414;2pkt 2fpkt"];
5744--6186[label="0.0344828;4pkt 4fpkt"];
5744--6196[label="0.0172414;2pkt 2fpkt"];
5744--6233[label="0.0344828;4pkt 4fpkt"];
5744--6240[label="0.0172414;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="58.0.24.211" dst_port="80" src_ip="131.19.176.188"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130824" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
1301[label="173.46.21.184;d;30pkt 30fpkt", shape=diamond, color=yellow];
1374[label="9.53.105.13;s;6pkt 6fpkt", shape=diamond, color=yellow];
1694[label="213.240.203.48;d;35pkt 35fpkt", shape=diamond, color=yellow];
1796[label="212.68.8.214;d;229pkt 229fpkt", shape=diamond, color=yellow];
2589[label="12.135.173.244;s;220pkt 220fpkt", shape=diamond, color=yellow];
4877[label="173.46.21.184;d;30pkt 30fpkt", shape=hexagon, color=black];
4958[label="213.240.203.48;d;35pkt 35fpkt", shape=hexagon, color=black];
5930[label="12.135.173.244;s;220pkt 220fpkt", shape=hexagon, color=black];
6384[label="9.53.105.13;6pkt 6fpkt", shape=pentagon, color=darkviolet];
6954[label="163.62.82.74;2pkt 2fpkt", shape=pentagon, color=darkviolet];
7704[label="13.149.255.159;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8395[label="12.135.173.244;238pkt 238fpkt", shape=pentagon, color=darkviolet];
8517[label="9.53.105.13;7pkt 7fpkt", shape=invtriangle, color=brown];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{12.135.173.244:80, 212.68.8.214:*}[74.9206%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.5771%)&lt;BR/&gt; 443: (0.37594%)&lt;BR/&gt; 49569: (0.234962%)&lt;BR/&gt; 49568: (0.234962%)&lt;BR/&gt; 49567: (0.234962%)&gt;];
}
1301--1374[label="0.666667;4pkt 4fpkt"];
1301--1419[label="0.0333333;1pkt 1fpkt"];
1301--2517[label="0.0333333;1pkt 1fpkt"];
1301--2644[label="0.0333333;1pkt 1fpkt"];
1301--4784[label="0.0333333;1pkt 1fpkt"];
1301--4877[label="1;30pkt 30fpkt"];
1301--5610[label="0.0333333;1pkt 1fpkt"];
1301--6012[label="0.0333333;1pkt 1fpkt"];
1301--6384[label="0.5;3pkt 3fpkt"];
1301--6848[label="0.037037;1pkt 1fpkt"];
1301--7228[label="0.0333333;1pkt 1fpkt"];
1301--7704[label="0.833333;5pkt 5fpkt"];
1301--8517[label="0.571429;4pkt 4fpkt"];
1301--8912[label="0.0333333;1pkt 1fpkt"];
1301--9710[label="0.0333333;1pkt 1fpkt"];
1374--1694[label="0.333333;2pkt 2fpkt"];
1374--4877[label="0.666667;4pkt 4fpkt"];
1374--4958[label="0.333333;2pkt 2fpkt"];
1374--6384[label="0.833333;5pkt 5fpkt"];
1374--8517[label="1;6pkt 6fpkt"];
1694--2589[label="0.0285714;1pkt 1fpkt"];
1694--3013[label="0.0285714;1pkt 1fpkt"];
1694--4958[label="1;35pkt 35fpkt"];
1694--5630[label="0.0285714;1pkt 1fpkt"];
1694--5930[label="0.0285714;1pkt 1fpkt"];
1694--6384[label="0.333333;2pkt 2fpkt"];
1694--6454[label="0.0526316;1pkt 1fpkt"];
1694--6954[label="1;2pkt 2fpkt"];
1694--7144[label="0.0625;2pkt 2fpkt"];
1694--8395[label="0.0285714;1pkt 1fpkt"];
1694--8517[label="0.285714;2pkt 2fpkt"];
1694--8876[label="0.0645161;2pkt 2fpkt"];
1796--2589[label="0.986364;217pkt 217fpkt"];
1796--2751[label="0.00436681;1pkt 1fpkt"];
1796--4254[label="0.00436681;1pkt 1fpkt"];
1796--5198[label="0.00436681;1pkt 1fpkt"];
1796--5839[label="0.00436681;1pkt 1fpkt"];
1796--5930[label="0.986364;217pkt 217fpkt"];
1796--6081[label="0.00436681;1pkt 1fpkt"];
1796--6082[label="0.00436681;1pkt 1fpkt"];
1796--6129[label="0.0917031;21pkt 21fpkt"];
1796--6145[label="0.00436681;1pkt 1fpkt"];
1796--6146[label="0.00436681;1pkt 1fpkt"];
1796--6164[label="0.100437;23pkt 23fpkt"];
1796--6190[label="0.0917031;21pkt 21fpkt"];
1796--6204[label="0.00436681;1pkt 1fpkt"];
1796--6205[label="0.00436681;1pkt 1fpkt"];
1796--6223[label="0.100437;23pkt 23fpkt"];
1796--6248[label="0.00436681;1pkt 1fpkt"];
1796--6249[label="0.00436681;1pkt 1fpkt"];
1796--6250[label="0.100437;23pkt 23fpkt"];
1796--6384[label="0.166667;1pkt 1fpkt"];
1796--7347[label="0.0333333;1pkt 1fpkt"];
1796--7704[label="0.166667;1pkt 1fpkt"];
1796--8199[label="0.00436681;1pkt 1fpkt"];
1796--8395[label="0.947598;217pkt 217fpkt"];
1796--8517[label="0.142857;1pkt 1fpkt"];
1796--9388[label="0.00436681;1pkt 1fpkt"];
1796--9525[label="0.00436681;1pkt 1fpkt"];
1796--9908[label="0.00436681;1pkt 1fpkt"];
2589--4958[label="0.0285714;1pkt 1fpkt"];
2589--5720[label="0.00454545;1pkt 1fpkt"];
2589--5783[label="0.00454545;1pkt 1fpkt"];
2589--5930[label="1;220pkt 220fpkt"];
2589--6129[label="0.0909091;20pkt 20fpkt"];
2589--6164[label="0.0954545;21pkt 21fpkt"];
2589--6190[label="0.0909091;20pkt 20fpkt"];
2589--6223[label="0.0954545;21pkt 21fpkt"];
2589--6250[label="0.0954545;21pkt 21fpkt"];
2589--8395[label="0.995455;219pkt 219fpkt"];
4877--5610[label="0.0333333;1pkt 1fpkt"];
4877--6012[label="0.0333333;1pkt 1fpkt"];
4877--6384[label="0.5;3pkt 3fpkt"];
4877--6848[label="0.037037;1pkt 1fpkt"];
4877--7228[label="0.0333333;1pkt 1fpkt"];
4877--7704[label="0.833333;5pkt 5fpkt"];
4877--8517[label="0.571429;4pkt 4fpkt"];
4877--8912[label="0.0333333;1pkt 1fpkt"];
4877--9710[label="0.0333333;1pkt 1fpkt"];
4958--5630[label="0.0285714;1pkt 1fpkt"];
4958--5930[label="0.0285714;1pkt 1fpkt"];
4958--6384[label="0.333333;2pkt 2fpkt"];
4958--6454[label="0.0526316;1pkt 1fpkt"];
4958--6954[label="1;2pkt 2fpkt"];
4958--7144[label="0.0625;2pkt 2fpkt"];
4958--8395[label="0.0285714;1pkt 1fpkt"];
4958--8517[label="0.285714;2pkt 2fpkt"];
4958--8876[label="0.0645161;2pkt 2fpkt"];
5930--6129[label="0.0909091;20pkt 20fpkt"];
5930--6164[label="0.0954545;21pkt 21fpkt"];
5930--6190[label="0.0909091;20pkt 20fpkt"];
5930--6223[label="0.0954545;21pkt 21fpkt"];
5930--6250[label="0.0954545;21pkt 21fpkt"];
5930--8395[label="0.995455;219pkt 219fpkt"];
6384--8517[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.8.214" src_ip="12.135.173.244" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130862" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="68.216.63.106"/>
      <from sec="1292130433" usec="0"/>
      <to sec="1292130630" usec="0"/>
    </slice>
    <from sec="1292130433" usec="0"/>
    <to sec="1292130630" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.875299,2.15286,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.160.222.58"/>
      <from sec="1292130557" usec="0"/>
      <to sec="1292130828" usec="0"/>
    </slice>
    <from sec="1292130557" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_200{
style=filled;
color=gray75;
2463[label="131.19.170.168;s;1101pkt 1101fpkt", shape=diamond, color=yellow];
5888[label="131.19.170.168;s;1101pkt 1101fpkt", shape=hexagon, color=black];
stat200[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.170.168:39510, *:*}[99.8183%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 39510: (49.9092%)&lt;BR/&gt; 16001: (0.726612%)&lt;BR/&gt; 6881: (0.590372%)&lt;BR/&gt; 35691: (0.408719%)&lt;BR/&gt; 16881: (0.317893%)&gt;];
}
2463--5888[label="1;1101pkt 1101fpkt"];
2463--6120[label="0.000908265;1pkt 1fpkt"];
2463--6186[label="0.000908265;1pkt 1fpkt"];
2463--6233[label="0.000908265;1pkt 1fpkt"];
5888--6120[label="0.000908265;1pkt 1fpkt"];
5888--6186[label="0.000908265;1pkt 1fpkt"];
5888--6233[label="0.000908265;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.170.168" src_port="39510"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,504,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_201{
style=filled;
color=gray75;
4413[label="213.240.205.8;d;112pkt 112fpkt", shape=diamond, color=yellow];
5898[label="213.240.205.8;d;112pkt 112fpkt", shape=hexagon, color=black];
6296[label="212.229.64.4;10pkt 10fpkt", shape=pentagon, color=darkviolet];
stat201[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 213.240.205.8:9001}[61.9469%]&lt;BR/&gt;{*:443, 213.240.205.8:*}[36.2832%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9001: (29.9145%)&lt;BR/&gt; 443: (19.4444%)&lt;BR/&gt; 123: (0.854701%)&lt;BR/&gt; 54542: (0.641026%)&lt;BR/&gt; 54541: (0.641026%)&gt;];
}
4413--5898[label="1;112pkt 112fpkt"];
4413--6296[label="0.9;9pkt 9fpkt"];
5898--6296[label="0.9;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.205.8" src_port="443"/>
      <filter dst_ip="213.240.205.8" dst_port="9001"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_202{
style=filled;
color=gray75;
1620[label="145.7.58.156;s;72pkt 72fpkt", shape=diamond, color=yellow];
3676[label="204.6.218.26;d;1pkt 1fpkt", shape=diamond, color=yellow];
4079[label="64.94.171.106;d;1pkt 1fpkt", shape=diamond, color=yellow];
5903[label="64.94.171.106;d;1pkt 1fpkt", shape=hexagon, color=black];
stat202[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.7.58.156:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1620--3676[label="1;1pkt 1fpkt"];
1620--4079[label="1;1pkt 1fpkt"];
1620--5903[label="1;1pkt 1fpkt"];
4079--5903[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="145.7.58.156"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_203{
style=filled;
color=gray75;
3759[label="42.133.66.88;s;123pkt 123fpkt", shape=diamond, color=yellow];
4119[label="213.240.198.34;d;124pkt 124fpkt", shape=diamond, color=yellow];
5931[label="213.240.198.34;d;124pkt 124fpkt", shape=hexagon, color=black];
7070[label="42.133.66.88;134pkt 134fpkt", shape=pentagon, color=darkviolet];
8847[label="42.133.66.88;133pkt 133fpkt", shape=invtriangle, color=brown];
stat203[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.133.66.88:*, 213.240.198.34:80}[99.2593%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8433%)&lt;BR/&gt; 4964: (0.39185%)&lt;BR/&gt; 4962: (0.39185%)&lt;BR/&gt; 4960: (0.39185%)&lt;BR/&gt; 4958: (0.39185%)&gt;];
}
3759--4119[label="1;123pkt 123fpkt"];
3759--5931[label="1;123pkt 123fpkt"];
3759--6120[label="0.0731707;9pkt 9fpkt"];
3759--6136[label="0.0731707;9pkt 9fpkt"];
3759--6186[label="0.0731707;9pkt 9fpkt"];
3759--6196[label="0.0731707;9pkt 9fpkt"];
3759--6233[label="0.0731707;9pkt 9fpkt"];
3759--6240[label="0.0731707;9pkt 9fpkt"];
3759--7070[label="1;123pkt 123fpkt"];
3759--8847[label="0.99187;122pkt 122fpkt"];
4119--5572[label="0.00806452;1pkt 1fpkt"];
4119--5931[label="1;124pkt 124fpkt"];
4119--6120[label="0.0725806;9pkt 9fpkt"];
4119--6136[label="0.0725806;9pkt 9fpkt"];
4119--6186[label="0.0725806;9pkt 9fpkt"];
4119--6196[label="0.0725806;9pkt 9fpkt"];
4119--6233[label="0.0725806;9pkt 9fpkt"];
4119--6240[label="0.0725806;9pkt 9fpkt"];
4119--7070[label="0.991935;123pkt 123fpkt"];
4119--8847[label="0.983871;122pkt 122fpkt"];
5931--6120[label="0.0725806;9pkt 9fpkt"];
5931--6136[label="0.0725806;9pkt 9fpkt"];
5931--6186[label="0.0725806;9pkt 9fpkt"];
5931--6196[label="0.0725806;9pkt 9fpkt"];
5931--6233[label="0.0725806;9pkt 9fpkt"];
5931--6240[label="0.0725806;9pkt 9fpkt"];
5931--7070[label="0.991935;123pkt 123fpkt"];
5931--8847[label="0.983871;122pkt 122fpkt"];
7070--8847[label="1;133pkt 133fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.198.34" dst_port="80" src_ip="42.133.66.88"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_204{
style=filled;
color=gray75;
4487[label="133.141.131.165;d;99pkt 99fpkt", shape=diamond, color=yellow];
5946[label="133.141.131.165;d;99pkt 99fpkt", shape=hexagon, color=black];
7769[label="9.53.49.166;20pkt 20fpkt", shape=pentagon, color=darkviolet];
stat204[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.204.130.79:*, 133.141.131.165:80}[68.6869%]&lt;BR/&gt;{9.53.49.166:*, 133.141.131.165:80}[20.202%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60614: (0.688073%)&lt;BR/&gt; 58890: (0.688073%)&lt;BR/&gt; 53170: (0.688073%)&lt;BR/&gt; 51845: (0.688073%)&gt;];
}
4487--5946[label="1;99pkt 99fpkt"];
4487--6120[label="0.020202;2pkt 2fpkt"];
4487--6136[label="0.020202;2pkt 2fpkt"];
4487--6186[label="0.020202;2pkt 2fpkt"];
4487--6196[label="0.020202;2pkt 2fpkt"];
4487--6233[label="0.020202;2pkt 2fpkt"];
4487--6240[label="0.020202;2pkt 2fpkt"];
4487--7769[label="1;20pkt 20fpkt"];
5946--6120[label="0.020202;2pkt 2fpkt"];
5946--6136[label="0.020202;2pkt 2fpkt"];
5946--6186[label="0.020202;2pkt 2fpkt"];
5946--6196[label="0.020202;2pkt 2fpkt"];
5946--6233[label="0.020202;2pkt 2fpkt"];
5946--6240[label="0.020202;2pkt 2fpkt"];
5946--7769[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="133.141.131.165" dst_port="80" src_ip="205.204.130.79"/>
      <filter dst_ip="133.141.131.165" dst_port="80" src_ip="9.53.49.166"/>
    </slice>
    <from sec="1292130084" usec="0"/>
    <to sec="1292130817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.24189,2.04992,503,0 0 0 1 1 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_205{
style=filled;
color=gray75;
1200[label="216.222.52.127;d;359pkt 359fpkt", shape=diamond, color=yellow];
1201[label="131.19.220.73;s;1056pkt 1056fpkt", shape=diamond, color=yellow];
2623[label="216.222.52.124;d;689pkt 689fpkt", shape=diamond, color=yellow];
4857[label="131.19.220.73;s;269pkt 269fpkt", shape=hexagon, color=black];
5113[label="216.222.52.127;d;359pkt 359fpkt", shape=hexagon, color=black];
6947[label="131.19.220.73;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9644[label="131.19.220.73;1154pkt 1154fpkt", shape=invhouse, color=bisque];
stat205[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.220.73:*, 216.222.52.124:80}[63.3391%]&lt;BR/&gt;{131.19.220.73:*, 216.222.52.127:80}[34.3373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1923: (0.0642839%)&lt;BR/&gt; 1922: (0.0642839%)&lt;BR/&gt; 1921: (0.0642839%)&lt;BR/&gt; 1920: (0.0642839%)&gt;];
}
1200--1201[label="0.997214;358pkt 358fpkt"];
1200--4857[label="0.996283;268pkt 268fpkt"];
1200--5113[label="1;359pkt 359fpkt"];
1200--9644[label="0.997214;358pkt 358fpkt"];
1201--2207[label="0.0101523;2pkt 2fpkt"];
1201--2209[label="0.00378788;1pkt 1fpkt"];
1201--2241[label="0.0444444;4pkt 4fpkt"];
1201--2623[label="0.98984;682pkt 682fpkt"];
1201--4857[label="1;269pkt 269fpkt"];
1201--5113[label="0.997214;358pkt 358fpkt"];
1201--6120[label="0.0643939;68pkt 68fpkt"];
1201--6136[label="0.0577652;61pkt 61fpkt"];
1201--6186[label="0.0643939;68pkt 68fpkt"];
1201--6196[label="0.0577652;61pkt 61fpkt"];
1201--6233[label="0.0643939;68pkt 68fpkt"];
1201--6240[label="0.0577652;61pkt 61fpkt"];
1201--9644[label="1;1056pkt 1056fpkt"];
2623--4891[label="0.0487805;4pkt 4fpkt"];
2623--6120[label="0.0986938;68pkt 68fpkt"];
2623--6136[label="0.0856313;59pkt 59fpkt"];
2623--6186[label="0.0986938;68pkt 68fpkt"];
2623--6196[label="0.0856313;59pkt 59fpkt"];
2623--6233[label="0.0986938;68pkt 68fpkt"];
2623--6240[label="0.0856313;59pkt 59fpkt"];
2623--7773[label="0.034188;4pkt 4fpkt"];
2623--9183[label="0.034188;4pkt 4fpkt"];
2623--9644[label="0.98984;682pkt 682fpkt"];
4857--5113[label="0.996283;268pkt 268fpkt"];
4857--9644[label="1;269pkt 269fpkt"];
5113--9644[label="0.997214;358pkt 358fpkt"];
6947--9644[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="216.222.52.124" dst_port="80" src_ip="131.19.220.73"/>
      <filter dst_ip="216.222.52.127" dst_port="80" src_ip="131.19.220.73"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
1434[label="5.53.177.98;d;5pkt 5fpkt", shape=diamond, color=yellow];
2158[label="133.17.129.75;s;235pkt 235fpkt", shape=diamond, color=yellow];
3000[label="192.156.51.154;d;90pkt 90fpkt", shape=diamond, color=yellow];
3736[label="8.49.206.183;d;55pkt 55fpkt", shape=diamond, color=yellow];
3889[label="45.115.196.17;d;47pkt 47fpkt", shape=diamond, color=yellow];
5966[label="45.115.196.17;d;47pkt 47fpkt", shape=hexagon, color=black];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.129.75:80, 192.156.51.154:*}[37.0833%]&lt;BR/&gt;{133.17.129.75:80, 8.49.206.183:*}[22.5%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1865: (0.313152%)&lt;BR/&gt; 1756: (0.313152%)&lt;BR/&gt; 1753: (0.313152%)&lt;BR/&gt; 1751: (0.313152%)&gt;];
}
1434--2158[label="0.4;2pkt 2fpkt"];
1434--5429[label="0.2;1pkt 1fpkt"];
2158--3000[label="0.988889;89pkt 89fpkt"];
2158--3736[label="0.981818;54pkt 54fpkt"];
2158--3889[label="1;47pkt 47fpkt"];
2158--5966[label="1;47pkt 47fpkt"];
2158--6129[label="0.0212766;5pkt 5fpkt"];
2158--6164[label="0.0425532;10pkt 10fpkt"];
2158--6178[label="0.0297872;7pkt 7fpkt"];
2158--6190[label="0.0212766;5pkt 5fpkt"];
2158--6223[label="0.0425532;10pkt 10fpkt"];
2158--6250[label="0.0425532;10pkt 10fpkt"];
3000--3766[label="0.025641;1pkt 1fpkt"];
3000--6129[label="0.0333333;3pkt 3fpkt"];
3000--6164[label="0.0777778;7pkt 7fpkt"];
3000--6178[label="0.0555556;5pkt 5fpkt"];
3000--6190[label="0.0333333;3pkt 3fpkt"];
3000--6223[label="0.0777778;7pkt 7fpkt"];
3000--6250[label="0.0777778;7pkt 7fpkt"];
3736--6129[label="0.0363636;2pkt 2fpkt"];
3736--6164[label="0.0727273;4pkt 4fpkt"];
3736--6178[label="0.0363636;2pkt 2fpkt"];
3736--6190[label="0.0363636;2pkt 2fpkt"];
3736--6223[label="0.0727273;4pkt 4fpkt"];
3736--6250[label="0.0727273;4pkt 4fpkt"];
3889--5966[label="1;47pkt 47fpkt"];
</description>
    <slice>
      <filter dst_ip="192.156.51.154" src_ip="133.17.129.75" src_port="80"/>
      <filter dst_ip="8.49.206.183" src_ip="133.17.129.75" src_port="80"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_207{
style=filled;
color=gray75;
4539[label="131.19.100.114;s;12pkt 12fpkt", shape=diamond, color=yellow];
5978[label="131.19.100.114;s;12pkt 12fpkt", shape=hexagon, color=black];
7314[label="131.19.100.114;14pkt 14fpkt", shape=pentagon, color=darkviolet];
stat207[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.100.114:*, 16.199.96.235:80}[50%]&lt;BR/&gt;{131.19.100.114:*, 187.86.65.87:80}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52846: (3.94737%)&lt;BR/&gt; 52841: (3.94737%)&lt;BR/&gt; 52839: (3.94737%)&lt;BR/&gt; 52830: (3.94737%)&gt;];
}
4539--5978[label="1;12pkt 12fpkt"];
4539--7314[label="1;12pkt 12fpkt"];
5978--7314[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="16.199.96.235" dst_port="80" src_ip="131.19.100.114"/>
      <filter dst_ip="187.86.65.87" dst_port="80" src_ip="131.19.100.114"/>
    </slice>
    <from sec="1292130606" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.04158,2.10075,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
654[label="146.57.122.156;s;3pkt 3fpkt", shape=diamond, color=yellow];
655[label="213.240.201.208;d;1pkt 1fpkt", shape=diamond, color=yellow];
3641[label="213.43.239.190;d;63pkt 63fpkt", shape=diamond, color=yellow];
5566[label="213.240.201.208;d;1pkt 1fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.43.239.190:0}[87.6923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (89.7059%)&lt;BR/&gt; 137: (2.20588%)&lt;BR/&gt; 47636: (0.735294%)&lt;BR/&gt; 42252: (0.735294%)&lt;BR/&gt; 34435: (0.735294%)&gt;];
}
654--655[label="1;1pkt 1fpkt"];
654--3641[label="0.333333;1pkt 1fpkt"];
654--5566[label="1;1pkt 1fpkt"];
655--5566[label="1;1pkt 1fpkt"];
3641--5877[label="0.0588235;1pkt 1fpkt"];
3641--7228[label="0.015873;1pkt 1fpkt"];
3641--8912[label="0.015873;1pkt 1fpkt"];
3641--9710[label="0.015873;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.43.239.190"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.85.110.0"/>
    </slice>
    <from sec="1292130006" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="32.150.111.0"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.42.9.1"/>
    </slice>
    <from sec="1292130010" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.221.43.3"/>
    </slice>
    <from sec="1292130590" usec="0"/>
    <to sec="1292130597" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,020,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
3442[label="212.73.107.3;s;49pkt 49fpkt", shape=diamond, color=yellow];
6289[label="212.73.107.3;52pkt 52fpkt", shape=pentagon, color=darkviolet];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.73.107.3:0, *:0}[84.9057%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (84.1584%)&lt;BR/&gt; 4874: (3.9604%)&lt;BR/&gt; 4121: (3.9604%)&lt;BR/&gt; 2122: (3.9604%)&lt;BR/&gt; 2121: (3.9604%)&gt;];
}
3442--6289[label="0.979592;48pkt 48fpkt"];
</description>
    <slice>
      <filter src_ip="212.73.107.3"/>
    </slice>
    <from sec="1292130187" usec="0"/>
    <to sec="1292130859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="117.172.227.3"/>
    </slice>
    <from sec="1292130083" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.161.190.4"/>
    </slice>
    <from sec="1292130829" usec="0"/>
    <to sec="1292130871" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.78.43.6"/>
    </slice>
    <from sec="1292130026" usec="0"/>
    <to sec="1292130066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.238.6"/>
    </slice>
    <from sec="1292130394" usec="0"/>
    <to sec="1292130530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.93.88.7"/>
    </slice>
    <from sec="1292130286" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
6334[label="207.240.52.8;223pkt 223fpkt", shape=pentagon, color=darkviolet];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{207.240.52.8:2892, *:1434}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2892: (50%)&lt;BR/&gt; 1434: (50%)&gt;];
}
</description>
    <slice>
      <filter dst_port="1434" src_ip="207.240.52.8" src_port="2892"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.9.16.9"/>
    </slice>
    <from sec="1292130006" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.84.103.9"/>
    </slice>
    <from sec="1292130346" usec="0"/>
    <to sec="1292130348" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.171.21.11"/>
    </slice>
    <from sec="1292130310" usec="0"/>
    <to sec="1292130323" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.39.57.11"/>
    </slice>
    <from sec="1292130462" usec="0"/>
    <to sec="1292130487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.24.5.12"/>
    </slice>
    <from sec="1292130766" usec="0"/>
    <to sec="1292130772" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.60.43.12"/>
    </slice>
    <from sec="1292130785" usec="0"/>
    <to sec="1292130810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.31.69.12"/>
    </slice>
    <from sec="1292130110" usec="0"/>
    <to sec="1292130702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.83.157.12"/>
    </slice>
    <from sec="1292130873" usec="0"/>
    <to sec="1292130875" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.114.200.12"/>
    </slice>
    <from sec="1292130152" usec="0"/>
    <to sec="1292130166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.68.10.13"/>
    </slice>
    <from sec="1292130783" usec="0"/>
    <to sec="1292130795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.91.34.13"/>
    </slice>
    <from sec="1292130726" usec="0"/>
    <to sec="1292130732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801518,2.09112,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
1154[label="213.240.193.13;s;779pkt 779fpkt", shape=diamond, color=yellow];
6388[label="213.240.193.13;782pkt 782fpkt", shape=pentagon, color=darkviolet];
8520[label="213.240.193.13;782pkt 782fpkt", shape=invtriangle, color=brown];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.193.13:*, *:53}[98.3376%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (49.1677%)&lt;BR/&gt; 0: (1.53649%)&lt;BR/&gt; 63164: (0.128041%)&lt;BR/&gt; 61862: (0.128041%)&lt;BR/&gt; 64077: (0.0640205%)&gt;];
}
1154--3639[label="0.0276339;16pkt 16fpkt"];
1154--3647[label="0.00666667;4pkt 4fpkt"];
1154--3686[label="0.0175719;11pkt 11fpkt"];
1154--3715[label="0.0415973;25pkt 25fpkt"];
1154--4038[label="0.00856531;4pkt 4fpkt"];
1154--4044[label="0.00635593;3pkt 3fpkt"];
1154--4401[label="0.00469484;2pkt 2fpkt"];
1154--4419[label="0.0042735;2pkt 2fpkt"];
1154--4847[label="0.012837;10pkt 10fpkt"];
1154--5735[label="0.0305927;16pkt 16fpkt"];
1154--5752[label="0.00635593;3pkt 3fpkt"];
1154--5904[label="0.0042735;2pkt 2fpkt"];
1154--6388[label="1;779pkt 779fpkt"];
1154--8520[label="1;779pkt 779fpkt"];
6388--8520[label="1;782pkt 782fpkt"];
</description>
    <slice>
      <filter dst_port="53" src_ip="213.240.193.13"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130747" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.244.162.15"/>
    </slice>
    <from sec="1292130336" usec="0"/>
    <to sec="1292130349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.58.104.16"/>
    </slice>
    <from sec="1292130050" usec="0"/>
    <to sec="1292130064" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.201.134.17"/>
    </slice>
    <from sec="1292130009" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.238.201.17"/>
    </slice>
    <from sec="1292130477" usec="0"/>
    <to sec="1292130484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.78.253.17"/>
    </slice>
    <from sec="1292130794" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="144.194.46.18"/>
    </slice>
    <from sec="1292130297" usec="0"/>
    <to sec="1292130310" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.46.144.18"/>
    </slice>
    <from sec="1292130017" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.2.11.19"/>
    </slice>
    <from sec="1292130160" usec="0"/>
    <to sec="1292130170" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.44.60.19"/>
    </slice>
    <from sec="1292130220" usec="0"/>
    <to sec="1292130230" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.196.20"/>
    </slice>
    <from sec="1292130293" usec="0"/>
    <to sec="1292130349" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.51.179.21"/>
    </slice>
    <from sec="1292130713" usec="0"/>
    <to sec="1292130770" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.142.197.21"/>
    </slice>
    <from sec="1292130111" usec="0"/>
    <to sec="1292130114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.36.213.21"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130863" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.77.246.21"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.208.55.22"/>
    </slice>
    <from sec="1292130277" usec="0"/>
    <to sec="1292130467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.85.86.22"/>
    </slice>
    <from sec="1292130386" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="16.124.40.23"/>
    </slice>
    <from sec="1292130553" usec="0"/>
    <to sec="1292130566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.64.206.23"/>
    </slice>
    <from sec="1292130601" usec="0"/>
    <to sec="1292130614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.06413,2.07535,999,0 0 0 1 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
4096[label="133.0.35.50;d;9pkt 9fpkt", shape=diamond, color=yellow];
6489[label="4.85.244.24;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8572[label="4.85.244.24;3pkt 3fpkt", shape=invtriangle, color=brown];
9559[label="4.85.244.24;3pkt 3fpkt", shape=invhouse, color=bisque];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.85.244.24:*, 133.0.35.50:993}[44.4444%]&lt;BR/&gt;{6.2.234.9:*, 133.0.35.50:993}[22.2222%]&lt;BR/&gt;{36.105.103.255:*, 133.0.35.50:993}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 57491: (10.5263%)&lt;BR/&gt; 57489: (10.5263%)&lt;BR/&gt; 57484: (10.5263%)&lt;BR/&gt; 57490: (5.26316%)&gt;];
}
4096--6489[label="1;4pkt 4fpkt"];
4096--8572[label="1;3pkt 3fpkt"];
4096--9559[label="1;3pkt 3fpkt"];
6489--8572[label="1;3pkt 3fpkt"];
6489--9559[label="1;3pkt 3fpkt"];
8572--9559[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.35.50" dst_port="993" src_ip="4.85.244.24"/>
      <filter dst_ip="133.0.35.50" dst_port="993" src_ip="36.105.103.255"/>
      <filter dst_ip="133.0.35.50" dst_port="993" src_ip="6.2.234.9"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.241.99.25"/>
    </slice>
    <from sec="1292130579" usec="0"/>
    <to sec="1292130589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.946741,2.1257,010,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_263{
style=filled;
color=gray75;
335[label="179.77.1.26s;76pkt 76fpkt", shape=rectangle, color=red];
6496[label="179.77.1.26;254pkt 254fpkt", shape=pentagon, color=darkviolet];
stat263[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.77.1.26:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 4420: (0.30303%)&lt;BR/&gt; 4419: (0.30303%)&lt;BR/&gt; 4418: (0.30303%)&lt;BR/&gt; 4410: (0.30303%)&gt;];
}
335--6496[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="179.77.1.26"/>
    </slice>
    <from sec="1292130845" usec="0"/>
    <to sec="1292130855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.45.194.26"/>
    </slice>
    <from sec="1292130470" usec="0"/>
    <to sec="1292130487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.240.201.26"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
1033[label="131.19.118.74;d;110pkt 110fpkt", shape=diamond, color=yellow];
1080[label="35.85.105.77;s;1pkt 1fpkt", shape=diamond, color=yellow];
1905[label="205.94.133.223;s;24pkt 24fpkt", shape=diamond, color=yellow];
1942[label="38.0.45.27;s;5pkt 5fpkt", shape=diamond, color=yellow];
4732[label="35.85.105.77;s;1pkt 1fpkt", shape=hexagon, color=black];
5173[label="205.94.133.223;s;24pkt 24fpkt", shape=hexagon, color=black];
6507[label="38.0.45.27;4pkt 4fpkt", shape=pentagon, color=darkviolet];
8213[label="205.94.133.223;24pkt 24fpkt", shape=pentagon, color=darkviolet];
8580[label="38.0.45.27;4pkt 4fpkt", shape=invtriangle, color=brown];
9398[label="205.94.133.223;23pkt 23fpkt", shape=invtriangle, color=brown];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.94.133.223:80, 131.19.118.74:*}[21.8182%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9545%)&lt;BR/&gt; 443: (1.81818%)&lt;BR/&gt; 60511: (1.13636%)&lt;BR/&gt; 59664: (1.13636%)&lt;BR/&gt; 59435: (1.13636%)&gt;];
}
1033--1036[label="1;1pkt 1fpkt"];
1033--1080[label="1;1pkt 1fpkt"];
1033--1226[label="0.00909091;1pkt 1fpkt"];
1033--1276[label="0.00909091;1pkt 1fpkt"];
1033--1733[label="0.0181818;2pkt 2fpkt"];
1033--1905[label="1;24pkt 24fpkt"];
1033--1942[label="1;5pkt 5fpkt"];
1033--2202[label="0.00925926;1pkt 1fpkt"];
1033--2602[label="0.00909091;1pkt 1fpkt"];
1033--3013[label="0.0363636;4pkt 4fpkt"];
1033--3062[label="0.00909091;1pkt 1fpkt"];
1033--3212[label="1;6pkt 6fpkt"];
1033--3693[label="0.00909091;1pkt 1fpkt"];
1033--3985[label="0.00909091;1pkt 1fpkt"];
1033--4130[label="0.0125;1pkt 1fpkt"];
1033--4727[label="1;1pkt 1fpkt"];
1033--4732[label="1;1pkt 1fpkt"];
1033--4763[label="0.00909091;1pkt 1fpkt"];
1033--4858[label="0.0119048;1pkt 1fpkt"];
1033--5173[label="1;24pkt 24fpkt"];
1033--5609[label="0.010989;1pkt 1fpkt"];
1033--5630[label="0.0363636;4pkt 4fpkt"];
1033--5716[label="0.00909091;1pkt 1fpkt"];
1033--5797[label="0.00909091;1pkt 1fpkt"];
1033--6064[label="0.00909091;1pkt 1fpkt"];
1033--6129[label="0.0454545;5pkt 5fpkt"];
1033--6142[label="0.00909091;1pkt 1fpkt"];
1033--6164[label="0.0363636;4pkt 4fpkt"];
1033--6178[label="0.0545455;6pkt 6fpkt"];
1033--6190[label="0.0454545;5pkt 5fpkt"];
1033--6202[label="0.00909091;1pkt 1fpkt"];
1033--6223[label="0.0363636;4pkt 4fpkt"];
1033--6246[label="0.00909091;1pkt 1fpkt"];
1033--6250[label="0.0363636;4pkt 4fpkt"];
1033--6507[label="1;4pkt 4fpkt"];
1033--6537[label="0.00909091;1pkt 1fpkt"];
1033--7139[label="0.00909091;1pkt 1fpkt"];
1033--7154[label="0.00909091;1pkt 1fpkt"];
1033--7434[label="0.0188679;1pkt 1fpkt"];
1033--8211[label="0.0181818;2pkt 2fpkt"];
1033--8213[label="1;24pkt 24fpkt"];
1033--8580[label="1;4pkt 4fpkt"];
1033--8595[label="0.00909091;1pkt 1fpkt"];
1033--8881[label="0.00909091;1pkt 1fpkt"];
1033--9009[label="0.0192308;1pkt 1fpkt"];
1033--9398[label="1;23pkt 23fpkt"];
1033--9569[label="0.00909091;1pkt 1fpkt"];
1033--9694[label="0.00909091;1pkt 1fpkt"];
1080--4732[label="1;1pkt 1fpkt"];
1905--5173[label="1;24pkt 24fpkt"];
1905--8213[label="1;24pkt 24fpkt"];
1905--9398[label="1;23pkt 23fpkt"];
1942--6178[label="0.2;1pkt 1fpkt"];
1942--6507[label="1;4pkt 4fpkt"];
1942--8580[label="1;4pkt 4fpkt"];
5173--8213[label="1;24pkt 24fpkt"];
5173--9398[label="1;23pkt 23fpkt"];
6507--8580[label="1;4pkt 4fpkt"];
8213--9398[label="1;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.118.74" src_ip="205.94.133.223" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130826" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.160.80.27"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.98.223.27"/>
    </slice>
    <from sec="1292130101" usec="0"/>
    <to sec="1292130114" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.31.84.28"/>
    </slice>
    <from sec="1292130336" usec="0"/>
    <to sec="1292130343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.171.245.28"/>
    </slice>
    <from sec="1292130048" usec="0"/>
    <to sec="1292130058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.58.197.29"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.245.179.30"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="210.144.115.32"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.36.72.33"/>
    </slice>
    <from sec="1292130029" usec="0"/>
    <to sec="1292130037" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.161.33"/>
    </slice>
    <from sec="1292130104" usec="0"/>
    <to sec="1292130108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.9.129.34"/>
    </slice>
    <from sec="1292130528" usec="0"/>
    <to sec="1292130540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.197.146.34"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.103.201.34"/>
    </slice>
    <from sec="1292130033" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.209.1.35"/>
    </slice>
    <from sec="1292130400" usec="0"/>
    <to sec="1292130414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.3.7.35"/>
    </slice>
    <from sec="1292130191" usec="0"/>
    <to sec="1292130204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.74.35"/>
    </slice>
    <from sec="1292130634" usec="0"/>
    <to sec="1292130825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.233.70.36"/>
    </slice>
    <from sec="1292130073" usec="0"/>
    <to sec="1292130085" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="181.43.69.37"/>
    </slice>
    <from sec="1292130544" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.172.188.38"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.149.84.40"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.41.71.42"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.236.73.42"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.248.108.42"/>
    </slice>
    <from sec="1292130356" usec="0"/>
    <to sec="1292130360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.45.152.42"/>
    </slice>
    <from sec="1292130689" usec="0"/>
    <to sec="1292130703" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.20.53.43"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.75.236.43"/>
    </slice>
    <from sec="1292130391" usec="0"/>
    <to sec="1292130426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.86.247.45"/>
    </slice>
    <from sec="1292130837" usec="0"/>
    <to sec="1292130845" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.193.177.46"/>
    </slice>
    <from sec="1292130121" usec="0"/>
    <to sec="1292130128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="30.23.235.46"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.8.47"/>
    </slice>
    <from sec="1292130078" usec="0"/>
    <to sec="1292130081" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.238.220.47"/>
    </slice>
    <from sec="1292130195" usec="0"/>
    <to sec="1292130216" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.0.21.48"/>
    </slice>
    <from sec="1292130377" usec="0"/>
    <to sec="1292130394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.163.250.48"/>
    </slice>
    <from sec="1292130697" usec="0"/>
    <to sec="1292130716" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801518,2.09112,999,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_300{
style=filled;
color=gray75;
3369[label="131.19.241.51;s;501pkt 501fpkt", shape=diamond, color=yellow];
6733[label="131.19.241.51;507pkt 507fpkt", shape=pentagon, color=darkviolet];
8685[label="131.19.241.51;506pkt 506fpkt", shape=invtriangle, color=brown];
stat300[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.241.51:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54033: (2.70806%)&lt;BR/&gt; 16001: (1.1889%)&lt;BR/&gt; 16881: (0.693527%)&lt;BR/&gt; 6881: (0.396301%)&lt;BR/&gt; 80: (0.363276%)&gt;];
}
3369--6120[label="0.00399202;2pkt 2fpkt"];
3369--6136[label="0.00399202;2pkt 2fpkt"];
3369--6186[label="0.00399202;2pkt 2fpkt"];
3369--6196[label="0.00399202;2pkt 2fpkt"];
3369--6233[label="0.00399202;2pkt 2fpkt"];
3369--6240[label="0.00399202;2pkt 2fpkt"];
3369--6733[label="1;501pkt 501fpkt"];
3369--8685[label="0.998004;500pkt 500fpkt"];
6733--8685[label="1;506pkt 506fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.241.51"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.193.245.51"/>
    </slice>
    <from sec="1292130775" usec="0"/>
    <to sec="1292130797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.7.86.53"/>
    </slice>
    <from sec="1292130766" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.131.148.53"/>
    </slice>
    <from sec="1292130554" usec="0"/>
    <to sec="1292130579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.111.159.53"/>
    </slice>
    <from sec="1292130103" usec="0"/>
    <to sec="1292130457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.0.35.54"/>
    </slice>
    <from sec="1292130053" usec="0"/>
    <to sec="1292130837" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.142.178.54"/>
    </slice>
    <from sec="1292130243" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.180.9.56"/>
    </slice>
    <from sec="1292130565" usec="0"/>
    <to sec="1292130572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="6.174.96.56"/>
    </slice>
    <from sec="1292130066" usec="0"/>
    <to sec="1292130076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.85.238.56"/>
    </slice>
    <from sec="1292130022" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.245.16.57"/>
    </slice>
    <from sec="1292130662" usec="0"/>
    <to sec="1292130680" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.43.75.58"/>
    </slice>
    <from sec="1292130397" usec="0"/>
    <to sec="1292130463" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="220.12.85.58"/>
    </slice>
    <from sec="1292130261" usec="0"/>
    <to sec="1292130287" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.40.229.58"/>
    </slice>
    <from sec="1292130745" usec="0"/>
    <to sec="1292130758" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.215.130.59"/>
    </slice>
    <from sec="1292130483" usec="0"/>
    <to sec="1292130489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.32.220.60"/>
    </slice>
    <from sec="1292130248" usec="0"/>
    <to sec="1292130249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.217.27.61"/>
    </slice>
    <from sec="1292130608" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.166.59.62"/>
    </slice>
    <from sec="1292130581" usec="0"/>
    <to sec="1292130615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="69.22.113.62"/>
    </slice>
    <from sec="1292130763" usec="0"/>
    <to sec="1292130784" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.182.143.62"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.234.138.63"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="34.137.34.64"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.15.140.65"/>
    </slice>
    <from sec="1292130467" usec="0"/>
    <to sec="1292130473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="130.11.42.66"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
691[label="204.53.235.255;d;45pkt 45fpkt", shape=diamond, color=yellow];
693[label="131.19.9.43;s;776pkt 776fpkt", shape=diamond, color=yellow];
1219[label="131.19.9.40;s;265pkt 265fpkt", shape=diamond, color=yellow];
1231[label="42.78.79.169;d;193pkt 193fpkt", shape=diamond, color=yellow];
1289[label="204.157.1.127;d;18pkt 18fpkt", shape=diamond, color=yellow];
1418[label="35.208.89.6;d;8pkt 8fpkt", shape=diamond, color=yellow];
1815[label="131.19.81.237;s;167pkt 167fpkt", shape=diamond, color=yellow];
1825[label="192.156.51.179;d;20pkt 20fpkt", shape=diamond, color=yellow];
1886[label="192.156.51.51;d;7pkt 7fpkt", shape=diamond, color=yellow];
1923[label="41.134.144.174;d;90pkt 90fpkt", shape=diamond, color=yellow];
1944[label="213.53.180.56;d;159pkt 159fpkt", shape=diamond, color=yellow];
2319[label="162.115.11.188;d;2pkt 2fpkt", shape=diamond, color=yellow];
2338[label="35.210.133.200;d;2pkt 2fpkt", shape=diamond, color=yellow];
2410[label="131.19.81.232;s;103pkt 103fpkt", shape=diamond, color=yellow];
2648[label="192.217.224.159;d;57pkt 57fpkt", shape=diamond, color=yellow];
2710[label="203.32.157.121;d;10pkt 10fpkt", shape=diamond, color=yellow];
3177[label="200.116.40.118;d;58pkt 58fpkt", shape=diamond, color=yellow];
3814[label="131.19.240.238;s;23pkt 23fpkt", shape=diamond, color=yellow];
3892[label="212.148.9.128;d;26pkt 26fpkt", shape=diamond, color=yellow];
4302[label="69.125.164.60;d;262pkt 262fpkt", shape=diamond, color=yellow];
4661[label="44.100.104.170;d;9pkt 9fpkt", shape=diamond, color=yellow];
4920[label="204.53.235.255;d;45pkt 45fpkt", shape=hexagon, color=black];
5157[label="192.217.224.159;d;57pkt 57fpkt", shape=hexagon, color=black];
5176[label="41.134.144.174;d;90pkt 90fpkt", shape=hexagon, color=black];
5180[label="213.53.180.56;d;159pkt 159fpkt", shape=hexagon, color=black];
5221[label="131.19.9.43;s;425pkt 425fpkt", shape=hexagon, color=black];
5983[label="69.125.164.60;d;262pkt 262fpkt", shape=hexagon, color=black];
6656[label="131.19.9.43;812pkt 812fpkt", shape=pentagon, color=darkviolet];
7748[label="155.31.8.164;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8284[label="131.19.81.232;122pkt 122fpkt", shape=pentagon, color=darkviolet];
8326[label="131.19.81.237;174pkt 174fpkt", shape=pentagon, color=darkviolet];
8338[label="131.19.240.238;28pkt 28fpkt", shape=pentagon, color=darkviolet];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.9.43:80, *:*}[56.823%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9777%)&lt;BR/&gt; 53180: (0.100357%)&lt;BR/&gt; 53170: (0.100357%)&lt;BR/&gt; 53123: (0.100357%)&lt;BR/&gt; 53110: (0.100357%)&gt;];
}
691--693[label="0.755556;34pkt 34fpkt"];
691--1219[label="0.244444;11pkt 11fpkt"];
691--4920[label="1;45pkt 45fpkt"];
691--5221[label="0.755556;34pkt 34fpkt"];
691--6656[label="0.755556;34pkt 34fpkt"];
693--1231[label="0.699482;135pkt 135fpkt"];
693--1289[label="1;18pkt 18fpkt"];
693--1418[label="1;8pkt 8fpkt"];
693--1923[label="0.311111;28pkt 28fpkt"];
693--1944[label="0.584906;93pkt 93fpkt"];
693--2319[label="1;2pkt 2fpkt"];
693--2338[label="1;2pkt 2fpkt"];
693--2648[label="0.596491;34pkt 34fpkt"];
693--2710[label="1;10pkt 10fpkt"];
693--3177[label="0.517241;30pkt 30fpkt"];
693--4291[label="1;6pkt 6fpkt"];
693--4302[label="1;262pkt 262fpkt"];
693--4661[label="1;9pkt 9fpkt"];
693--4920[label="0.755556;34pkt 34fpkt"];
693--5157[label="0.596491;34pkt 34fpkt"];
693--5176[label="0.311111;28pkt 28fpkt"];
693--5180[label="0.584906;93pkt 93fpkt"];
693--5221[label="1;425pkt 425fpkt"];
693--5983[label="1;262pkt 262fpkt"];
693--6129[label="0.0206186;16pkt 16fpkt"];
693--6164[label="0.212629;165pkt 165fpkt"];
693--6178[label="0.0167526;13pkt 13fpkt"];
693--6190[label="0.0206186;16pkt 16fpkt"];
693--6223[label="0.212629;165pkt 165fpkt"];
693--6250[label="0.212629;165pkt 165fpkt"];
693--6656[label="1;776pkt 776fpkt"];
1219--1231[label="0.300518;58pkt 58fpkt"];
1219--1886[label="0.142857;1pkt 1fpkt"];
1219--1923[label="0.688889;62pkt 62fpkt"];
1219--1944[label="0.113208;18pkt 18fpkt"];
1219--3177[label="0.482759;28pkt 28fpkt"];
1219--3445[label="0.333333;10pkt 10fpkt"];
1219--4920[label="0.244444;11pkt 11fpkt"];
1219--4969[label="0.333333;5pkt 5fpkt"];
1219--5176[label="0.688889;62pkt 62fpkt"];
1219--5180[label="0.113208;18pkt 18fpkt"];
1219--6129[label="0.132075;35pkt 35fpkt"];
1219--6178[label="0.132075;35pkt 35fpkt"];
1219--6190[label="0.132075;35pkt 35fpkt"];
1231--5221[label="0.606218;117pkt 117fpkt"];
1231--6178[label="0.00518135;1pkt 1fpkt"];
1231--6656[label="0.699482;135pkt 135fpkt"];
1289--5221[label="1;18pkt 18fpkt"];
1289--6656[label="1;18pkt 18fpkt"];
1418--5221[label="1;8pkt 8fpkt"];
1418--6656[label="1;8pkt 8fpkt"];
1815--1825[label="0.35;7pkt 7fpkt"];
1815--1844[label="0.177778;8pkt 8fpkt"];
1815--2648[label="0.403509;23pkt 23fpkt"];
1815--4256[label="0.222222;2pkt 2fpkt"];
1815--4347[label="0.156863;8pkt 8fpkt"];
1815--5157[label="0.403509;23pkt 23fpkt"];
1815--5651[label="0.162162;6pkt 6fpkt"];
1815--6129[label="0.0598802;10pkt 10fpkt"];
1815--6164[label="0.143713;24pkt 24fpkt"];
1815--6178[label="0.0658683;11pkt 11fpkt"];
1815--6190[label="0.0598802;10pkt 10fpkt"];
1815--6223[label="0.143713;24pkt 24fpkt"];
1815--6250[label="0.143713;24pkt 24fpkt"];
1815--8326[label="0.994012;166pkt 166fpkt"];
1825--1850[label="0.05;1pkt 1fpkt"];
1825--2056[label="0.15;3pkt 3fpkt"];
1825--6129[label="0.05;1pkt 1fpkt"];
1825--6164[label="0.05;1pkt 1fpkt"];
1825--6190[label="0.05;1pkt 1fpkt"];
1825--6223[label="0.05;1pkt 1fpkt"];
1825--6250[label="0.05;1pkt 1fpkt"];
1825--6288[label="0.05;1pkt 1fpkt"];
1825--7748[label="0.3;3pkt 3fpkt"];
1825--8326[label="0.35;7pkt 7fpkt"];
1825--8479[label="0.05;1pkt 1fpkt"];
1886--6178[label="0.142857;1pkt 1fpkt"];
1923--5176[label="1;90pkt 90fpkt"];
1923--5221[label="0.3;27pkt 27fpkt"];
1923--6129[label="0.0111111;1pkt 1fpkt"];
1923--6178[label="0.2;18pkt 18fpkt"];
1923--6190[label="0.0111111;1pkt 1fpkt"];
1923--6656[label="0.311111;28pkt 28fpkt"];
1944--2410[label="0.436893;45pkt 45fpkt"];
1944--3814[label="0.130435;3pkt 3fpkt"];
1944--5180[label="1;159pkt 159fpkt"];
1944--5221[label="0.584906;93pkt 93fpkt"];
1944--6656[label="0.584906;93pkt 93fpkt"];
1944--8284[label="0.368852;45pkt 45fpkt"];
1944--8338[label="0.107143;3pkt 3fpkt"];
2319--5221[label="1;2pkt 2fpkt"];
2319--6656[label="1;2pkt 2fpkt"];
2338--5221[label="1;2pkt 2fpkt"];
2338--6656[label="1;2pkt 2fpkt"];
2410--3892[label="0.384615;10pkt 10fpkt"];
2410--5180[label="0.436893;45pkt 45fpkt"];
2410--6129[label="0.0873786;9pkt 9fpkt"];
2410--6178[label="0.135922;14pkt 14fpkt"];
2410--6190[label="0.0873786;9pkt 9fpkt"];
2410--8284[label="1;103pkt 103fpkt"];
2648--5157[label="1;57pkt 57fpkt"];
2648--5221[label="0.596491;34pkt 34fpkt"];
2648--6656[label="0.596491;34pkt 34fpkt"];
2648--8326[label="0.403509;23pkt 23fpkt"];
2710--5221[label="1;10pkt 10fpkt"];
2710--6656[label="1;10pkt 10fpkt"];
3177--5221[label="0.189655;11pkt 11fpkt"];
3177--6129[label="0.448276;26pkt 26fpkt"];
3177--6178[label="0.155172;9pkt 9fpkt"];
3177--6190[label="0.448276;26pkt 26fpkt"];
3177--6656[label="0.517241;30pkt 30fpkt"];
3814--3892[label="0.695652;16pkt 16fpkt"];
3814--5180[label="0.130435;3pkt 3fpkt"];
3814--6129[label="0.304348;7pkt 7fpkt"];
3814--6178[label="0.0434783;1pkt 1fpkt"];
3814--6190[label="0.304348;7pkt 7fpkt"];
3814--8338[label="0.956522;22pkt 22fpkt"];
3892--6129[label="0.461538;12pkt 12fpkt"];
3892--6190[label="0.461538;12pkt 12fpkt"];
3892--8284[label="0.384615;10pkt 10fpkt"];
3892--8338[label="0.615385;16pkt 16fpkt"];
4302--5983[label="1;262pkt 262fpkt"];
4302--6164[label="0.580153;152pkt 152fpkt"];
4302--6223[label="0.580153;152pkt 152fpkt"];
4302--6250[label="0.580153;152pkt 152fpkt"];
4302--6656[label="1;262pkt 262fpkt"];
4661--6656[label="1;9pkt 9fpkt"];
4920--5221[label="0.755556;34pkt 34fpkt"];
4920--6656[label="0.755556;34pkt 34fpkt"];
5157--5221[label="0.596491;34pkt 34fpkt"];
5157--6656[label="0.596491;34pkt 34fpkt"];
5157--8326[label="0.403509;23pkt 23fpkt"];
5176--5221[label="0.3;27pkt 27fpkt"];
5176--6129[label="0.0111111;1pkt 1fpkt"];
5176--6178[label="0.2;18pkt 18fpkt"];
5176--6190[label="0.0111111;1pkt 1fpkt"];
5176--6656[label="0.311111;28pkt 28fpkt"];
5180--5221[label="0.584906;93pkt 93fpkt"];
5180--6656[label="0.584906;93pkt 93fpkt"];
5180--8284[label="0.368852;45pkt 45fpkt"];
5180--8338[label="0.107143;3pkt 3fpkt"];
5221--6129[label="0.00941176;4pkt 4fpkt"];
5221--6164[label="0.00705882;3pkt 3fpkt"];
5221--6178[label="0.0305882;13pkt 13fpkt"];
5221--6190[label="0.00941176;4pkt 4fpkt"];
5221--6223[label="0.00705882;3pkt 3fpkt"];
5221--6250[label="0.00705882;3pkt 3fpkt"];
5221--6656[label="1;425pkt 425fpkt"];
5983--6164[label="0.580153;152pkt 152fpkt"];
5983--6223[label="0.580153;152pkt 152fpkt"];
5983--6250[label="0.580153;152pkt 152fpkt"];
5983--6656[label="1;262pkt 262fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.9.43" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.86.217.66"/>
    </slice>
    <from sec="1292130320" usec="0"/>
    <to sec="1292130330" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.8.38.67"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130338" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.227.6.68"/>
    </slice>
    <from sec="1292130429" usec="0"/>
    <to sec="1292130702" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.242.127.68"/>
    </slice>
    <from sec="1292130357" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,503,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
1233[label="145.7.56.5;d;297pkt 297fpkt", shape=diamond, color=yellow];
4198[label="59.90.17.107;s;224pkt 224fpkt", shape=diamond, color=yellow];
4639[label="145.7.56.0;d;87pkt 87fpkt", shape=diamond, color=yellow];
4759[label="145.7.56.5;d;93pkt 93fpkt", shape=hexagon, color=black];
6894[label="34.44.38.69;204pkt 204fpkt", shape=pentagon, color=darkviolet];
7264[label="59.90.17.107;224pkt 224fpkt", shape=pentagon, color=darkviolet];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.90.17.107:*, 145.7.56.5:80}[51.1416%]&lt;BR/&gt;{34.44.38.69:*, 145.7.56.0:443}[30.3653%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.7697%)&lt;BR/&gt; 443: (9.92028%)&lt;BR/&gt; 445: (0.265722%)&lt;BR/&gt; 53836: (0.177148%)&lt;BR/&gt; 53830: (0.177148%)&gt;];
}
1233--4198[label="1;224pkt 224fpkt"];
1233--4759[label="1;93pkt 93fpkt"];
1233--6120[label="0.003367;1pkt 1fpkt"];
1233--6136[label="0.104377;31pkt 31fpkt"];
1233--6186[label="0.003367;1pkt 1fpkt"];
1233--6196[label="0.104377;31pkt 31fpkt"];
1233--6233[label="0.003367;1pkt 1fpkt"];
1233--6240[label="0.104377;31pkt 31fpkt"];
1233--6894[label="0.318627;65pkt 65fpkt"];
1233--7264[label="1;224pkt 224fpkt"];
4198--4759[label="0.967742;90pkt 90fpkt"];
4198--6136[label="0.133929;30pkt 30fpkt"];
4198--6196[label="0.133929;30pkt 30fpkt"];
4198--6240[label="0.133929;30pkt 30fpkt"];
4198--7264[label="1;224pkt 224fpkt"];
4639--6894[label="0.977011;85pkt 85fpkt"];
4759--6120[label="0.0107527;1pkt 1fpkt"];
4759--6186[label="0.0107527;1pkt 1fpkt"];
4759--6233[label="0.0107527;1pkt 1fpkt"];
4759--7264[label="0.967742;90pkt 90fpkt"];
</description>
    <slice>
      <filter dst_ip="145.7.56.5" dst_port="80" src_ip="59.90.17.107"/>
      <filter dst_ip="145.7.56.0" dst_port="443" src_ip="34.44.38.69"/>
    </slice>
    <from sec="1292130295" usec="0"/>
    <to sec="1292130879" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.106.68.69"/>
    </slice>
    <from sec="1292130819" usec="0"/>
    <to sec="1292130831" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.25.218.69"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.244.71.70"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.167.138.71"/>
    </slice>
    <from sec="1292130472" usec="0"/>
    <to sec="1292130483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.13.168.71"/>
    </slice>
    <from sec="1292130016" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
6929[label="37.82.81.72;53pkt 53fpkt", shape=pentagon, color=darkviolet];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{37.82.81.72:*, 173.46.150.218:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3116: (0.943396%)&lt;BR/&gt; 3115: (0.943396%)&lt;BR/&gt; 3114: (0.943396%)&lt;BR/&gt; 3112: (0.943396%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="173.46.150.218" dst_port="80" src_ip="37.82.81.72"/>
    </slice>
    <from sec="1292130760" usec="0"/>
    <to sec="1292130808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.189.114.72"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="158.112.202.72"/>
    </slice>
    <from sec="1292130614" usec="0"/>
    <to sec="1292130814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.68.24.73"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="40.200.110.73"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.61.139.73"/>
    </slice>
    <from sec="1292130371" usec="0"/>
    <to sec="1292130443" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.83.223.73"/>
    </slice>
    <from sec="1292130024" usec="0"/>
    <to sec="1292130865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.79.227.73"/>
    </slice>
    <from sec="1292130032" usec="0"/>
    <to sec="1292130047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.209.76.74"/>
    </slice>
    <from sec="1292130646" usec="0"/>
    <to sec="1292130653" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
6971[label="133.162.233.75;115pkt 115fpkt", shape=pentagon, color=darkviolet];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.162.233.75:*, 3.4.215.88:53}[35.6522%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (42.1739%)&lt;BR/&gt; 80: (7.82609%)&lt;BR/&gt; 65168: (0.434783%)&lt;BR/&gt; 64474: (0.434783%)&lt;BR/&gt; 63453: (0.434783%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="3.4.215.88" dst_port="53" src_ip="133.162.233.75"/>
    </slice>
    <from sec="1292130012" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.204.2.76"/>
    </slice>
    <from sec="1292130467" usec="0"/>
    <to sec="1292130480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.191.233.76"/>
    </slice>
    <from sec="1292130097" usec="0"/>
    <to sec="1292130269" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.199.66.78"/>
    </slice>
    <from sec="1292130534" usec="0"/>
    <to sec="1292130543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.68.36.79"/>
    </slice>
    <from sec="1292130290" usec="0"/>
    <to sec="1292130302" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.216.20.81"/>
    </slice>
    <from sec="1292130510" usec="0"/>
    <to sec="1292130531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.31.110.81"/>
    </slice>
    <from sec="1292130405" usec="0"/>
    <to sec="1292130411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.39.222.81"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.11.83"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.27.75.83"/>
    </slice>
    <from sec="1292130331" usec="0"/>
    <to sec="1292130420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.66.108.83"/>
    </slice>
    <from sec="1292130577" usec="0"/>
    <to sec="1292130711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.211.145.83"/>
    </slice>
    <from sec="1292130007" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="165.50.65.84"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.109.13.85"/>
    </slice>
    <from sec="1292130431" usec="0"/>
    <to sec="1292130484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.70.82.85"/>
    </slice>
    <from sec="1292130027" usec="0"/>
    <to sec="1292130112" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.68.25.87"/>
    </slice>
    <from sec="1292130017" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.62.87"/>
    </slice>
    <from sec="1292130875" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="17.250.91.87"/>
    </slice>
    <from sec="1292130734" usec="0"/>
    <to sec="1292130739" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.175.113.87"/>
    </slice>
    <from sec="1292130315" usec="0"/>
    <to sec="1292130430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.54.200.87"/>
    </slice>
    <from sec="1292130233" usec="0"/>
    <to sec="1292130243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.138.178.88"/>
    </slice>
    <from sec="1292130747" usec="0"/>
    <to sec="1292130773" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
7082[label="163.164.222.89;173pkt 173fpkt", shape=pentagon, color=darkviolet];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{163.164.222.89:*, *:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (50%)&lt;BR/&gt; 4540: (0.289017%)&lt;BR/&gt; 4537: (0.289017%)&lt;BR/&gt; 4536: (0.289017%)&lt;BR/&gt; 4533: (0.289017%)&gt;];
}
</description>
    <slice>
      <filter dst_port="445" src_ip="163.164.222.89"/>
    </slice>
    <from sec="1292130246" usec="0"/>
    <to sec="1292130268" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="207.141.102.90"/>
    </slice>
    <from sec="1292130462" usec="0"/>
    <to sec="1292130475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.86.217.90"/>
    </slice>
    <from sec="1292130031" usec="0"/>
    <to sec="1292130045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.10.91"/>
    </slice>
    <from sec="1292130751" usec="0"/>
    <to sec="1292130801" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.103.44.92"/>
    </slice>
    <from sec="1292130503" usec="0"/>
    <to sec="1292130516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_371{
style=filled;
color=gray75;
7116[label="31.76.74.93;130pkt 130fpkt", shape=pentagon, color=darkviolet];
stat371[shape=component, label=&lt;Rules:&lt;BR/&gt;{31.76.74.93:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65310: (0.384615%)&lt;BR/&gt; 62824: (0.384615%)&lt;BR/&gt; 62182: (0.384615%)&lt;BR/&gt; 61661: (0.384615%)&gt;];
}
</description>
    <slice>
      <filter dst_port="80" src_ip="31.76.74.93"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.61.179.93"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.178.246.94"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.64.96"/>
    </slice>
    <from sec="1292130048" usec="0"/>
    <to sec="1292130790" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.100.101.96"/>
    </slice>
    <from sec="1292130679" usec="0"/>
    <to sec="1292130692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="133.0.152.96"/>
    </slice>
    <from sec="1292130251" usec="0"/>
    <to sec="1292130300" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.16.6.97"/>
    </slice>
    <from sec="1292130818" usec="0"/>
    <to sec="1292130822" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.200.96.97"/>
    </slice>
    <from sec="1292130333" usec="0"/>
    <to sec="1292130361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.204.56.98"/>
    </slice>
    <from sec="1292130036" usec="0"/>
    <to sec="1292130050" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.102.170.98"/>
    </slice>
    <from sec="1292130454" usec="0"/>
    <to sec="1292130471" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.224.86.99"/>
    </slice>
    <from sec="1292130731" usec="0"/>
    <to sec="1292130749" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.227.134.99"/>
    </slice>
    <from sec="1292130072" usec="0"/>
    <to sec="1292130169" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.218.218.99"/>
    </slice>
    <from sec="1292130389" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="39.132.216.100"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.165.25.101"/>
    </slice>
    <from sec="1292130465" usec="0"/>
    <to sec="1292130477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="43.137.41.101"/>
    </slice>
    <from sec="1292130896" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.244.237.101"/>
    </slice>
    <from sec="1292130129" usec="0"/>
    <to sec="1292130134" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.64.2.102"/>
    </slice>
    <from sec="1292130118" usec="0"/>
    <to sec="1292130251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.132.192.103"/>
    </slice>
    <from sec="1292130543" usec="0"/>
    <to sec="1292130545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="211.26.197.103"/>
    </slice>
    <from sec="1292130794" usec="0"/>
    <to sec="1292130808" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.15.14.104"/>
    </slice>
    <from sec="1292130616" usec="0"/>
    <to sec="1292130888" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.242.57.104"/>
    </slice>
    <from sec="1292130867" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.242.12.105"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.37.149.105"/>
    </slice>
    <from sec="1292130518" usec="0"/>
    <to sec="1292130527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.68.25.106"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.64.140.106"/>
    </slice>
    <from sec="1292130341" usec="0"/>
    <to sec="1292130373" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.8.107"/>
    </slice>
    <from sec="1292130823" usec="0"/>
    <to sec="1292130854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="163.211.63.109"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.8.110"/>
    </slice>
    <from sec="1292130253" usec="0"/>
    <to sec="1292130357" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.139.33.110"/>
    </slice>
    <from sec="1292130080" usec="0"/>
    <to sec="1292130095" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.160.110"/>
    </slice>
    <from sec="1292130015" usec="0"/>
    <to sec="1292130841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.96.170.110"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.19.172.110"/>
    </slice>
    <from sec="1292130311" usec="0"/>
    <to sec="1292130565" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.03941,2.10318,503,1 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_406{
style=filled;
color=gray75;
289[label="133.0.73.112s;1pkt 1fpkt", shape=rectangle, color=red];
7300[label="133.0.73.112;11pkt 11fpkt", shape=pentagon, color=darkviolet];
8940[label="133.0.73.112;11pkt 11fpkt", shape=invtriangle, color=brown];
stat406[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.73.112:*, 133.207.7.110:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52823: (6.52174%)&lt;BR/&gt; 52833: (4.34783%)&lt;BR/&gt; 52832: (4.34783%)&lt;BR/&gt; 52831: (4.34783%)&gt;];
}
289--7300[label="1;1pkt 1fpkt"];
289--8940[label="1;1pkt 1fpkt"];
7300--8940[label="1;11pkt 11fpkt"];
</description>
    <slice>
      <filter dst_ip="133.207.7.110" dst_port="80" src_ip="133.0.73.112"/>
    </slice>
    <from sec="1292130289" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.108.91.112"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.177.138.112"/>
    </slice>
    <from sec="1292130024" usec="0"/>
    <to sec="1292130061" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="64.244.231.112"/>
    </slice>
    <from sec="1292130576" usec="0"/>
    <to sec="1292130580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.5.83.113"/>
    </slice>
    <from sec="1292130377" usec="0"/>
    <to sec="1292130386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.21.137.113"/>
    </slice>
    <from sec="1292130796" usec="0"/>
    <to sec="1292130842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.161.217.113"/>
    </slice>
    <from sec="1292130119" usec="0"/>
    <to sec="1292130123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.232.0.114"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.136.114"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="20.72.105.115"/>
    </slice>
    <from sec="1292130796" usec="0"/>
    <to sec="1292130812" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.107.214.115"/>
    </slice>
    <from sec="1292130020" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.183.250.115"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.200.38.116"/>
    </slice>
    <from sec="1292130320" usec="0"/>
    <to sec="1292130350" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.207.234.116"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.48.56.117"/>
    </slice>
    <from sec="1292130073" usec="0"/>
    <to sec="1292130078" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="100.187.84.117"/>
    </slice>
    <from sec="1292130645" usec="0"/>
    <to sec="1292130731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.204.109.117"/>
    </slice>
    <from sec="1292130332" usec="0"/>
    <to sec="1292130336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.100.162.117"/>
    </slice>
    <from sec="1292130164" usec="0"/>
    <to sec="1292130616" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.13.194.118"/>
    </slice>
    <from sec="1292130726" usec="0"/>
    <to sec="1292130755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.85.9.119"/>
    </slice>
    <from sec="1292130789" usec="0"/>
    <to sec="1292130794" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.242.171.119"/>
    </slice>
    <from sec="1292130541" usec="0"/>
    <to sec="1292130554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="59.161.55.120"/>
    </slice>
    <from sec="1292130218" usec="0"/>
    <to sec="1292130234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.19.4.121"/>
    </slice>
    <from sec="1292130526" usec="0"/>
    <to sec="1292130533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.186.213.121"/>
    </slice>
    <from sec="1292130031" usec="0"/>
    <to sec="1292130045" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.72.19.122"/>
    </slice>
    <from sec="1292130116" usec="0"/>
    <to sec="1292130123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.64.134.123"/>
    </slice>
    <from sec="1292130563" usec="0"/>
    <to sec="1292130882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.152.153.123"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.11194,2.04271,503,0 0 0 1 1 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_433{
style=filled;
color=gray75;
2530[label="212.68.145.101;d;352pkt 352fpkt", shape=diamond, color=yellow];
2811[label="53.148.160.199;s;6pkt 6fpkt", shape=diamond, color=yellow];
2813[label="204.5.149.82;s;13pkt 13fpkt", shape=diamond, color=yellow];
3097[label="58.10.164.107;s;31pkt 31fpkt", shape=diamond, color=yellow];
3124[label="58.10.164.64;s;26pkt 26fpkt", shape=diamond, color=yellow];
5519[label="58.10.164.64;s;26pkt 26fpkt", shape=hexagon, color=black];
6365[label="204.5.128.11;6pkt 6fpkt", shape=pentagon, color=darkviolet];
7021[label="204.5.149.82;12pkt 12fpkt", shape=pentagon, color=darkviolet];
7268[label="58.10.164.107;31pkt 31fpkt", shape=pentagon, color=darkviolet];
8825[label="204.5.149.82;10pkt 10fpkt", shape=invtriangle, color=brown];
8931[label="58.10.164.107;30pkt 30fpkt", shape=invtriangle, color=brown];
stat433[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 212.68.145.101:*}[97.7465%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6317%)&lt;BR/&gt; 51876: (0.460405%)&lt;BR/&gt; 59940: (0.368324%)&lt;BR/&gt; 59690: (0.368324%)&lt;BR/&gt; 58535: (0.368324%)&gt;];
}
2530--2635[label="0.0237154;6pkt 6fpkt"];
2530--2751[label="0.00284091;1pkt 1fpkt"];
2530--2811[label="1;6pkt 6fpkt"];
2530--2813[label="1;13pkt 13fpkt"];
2530--2950[label="0.017094;2pkt 2fpkt"];
2530--2983[label="0.25;18pkt 18fpkt"];
2530--3097[label="0.935484;29pkt 29fpkt"];
2530--3124[label="0.961538;25pkt 25fpkt"];
2530--3370[label="0.047619;1pkt 1fpkt"];
2530--3399[label="0.030303;5pkt 5fpkt"];
2530--4254[label="0.00284091;1pkt 1fpkt"];
2530--4784[label="0.00284091;1pkt 1fpkt"];
2530--5198[label="0.00284091;1pkt 1fpkt"];
2530--5519[label="0.961538;25pkt 25fpkt"];
2530--5610[label="0.0111732;2pkt 2fpkt"];
2530--5839[label="0.00284091;1pkt 1fpkt"];
2530--6012[label="0.00284091;1pkt 1fpkt"];
2530--6081[label="0.00284091;1pkt 1fpkt"];
2530--6082[label="0.00284091;1pkt 1fpkt"];
2530--6129[label="0.139205;49pkt 49fpkt"];
2530--6145[label="0.00284091;1pkt 1fpkt"];
2530--6146[label="0.00284091;1pkt 1fpkt"];
2530--6164[label="0.00568182;2pkt 2fpkt"];
2530--6178[label="0.0852273;30pkt 30fpkt"];
2530--6190[label="0.139205;49pkt 49fpkt"];
2530--6204[label="0.00284091;1pkt 1fpkt"];
2530--6205[label="0.00284091;1pkt 1fpkt"];
2530--6223[label="0.00568182;2pkt 2fpkt"];
2530--6248[label="0.00284091;1pkt 1fpkt"];
2530--6249[label="0.00284091;1pkt 1fpkt"];
2530--6250[label="0.00568182;2pkt 2fpkt"];
2530--6365[label="1;6pkt 6fpkt"];
2530--7021[label="1;12pkt 12fpkt"];
2530--7228[label="0.00284091;1pkt 1fpkt"];
2530--7268[label="0.935484;29pkt 29fpkt"];
2530--7383[label="0.027933;5pkt 5fpkt"];
2530--7399[label="0.023166;6pkt 6fpkt"];
2530--7798[label="0.0337079;3pkt 3fpkt"];
2530--7922[label="0.0434783;1pkt 1fpkt"];
2530--8199[label="0.00284091;1pkt 1fpkt"];
2530--8825[label="1;10pkt 10fpkt"];
2530--8912[label="0.00284091;1pkt 1fpkt"];
2530--8931[label="0.933333;28pkt 28fpkt"];
2530--9388[label="0.00284091;1pkt 1fpkt"];
2530--9525[label="0.00284091;1pkt 1fpkt"];
2530--9710[label="0.00284091;1pkt 1fpkt"];
2530--9908[label="0.00284091;1pkt 1fpkt"];
2813--7021[label="1;12pkt 12fpkt"];
2813--8825[label="1;10pkt 10fpkt"];
3097--4676[label="0.0645161;2pkt 2fpkt"];
3097--6178[label="0.354839;11pkt 11fpkt"];
3097--7268[label="1;31pkt 31fpkt"];
3097--8931[label="1;30pkt 30fpkt"];
3124--4676[label="0.0384615;1pkt 1fpkt"];
3124--5519[label="1;26pkt 26fpkt"];
3124--6178[label="0.5;13pkt 13fpkt"];
5519--6178[label="0.5;13pkt 13fpkt"];
7021--8825[label="1;10pkt 10fpkt"];
7268--8931[label="1;30pkt 30fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.145.101" src_port="80"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130817" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="155.169.229.123"/>
    </slice>
    <from sec="1292130851" usec="0"/>
    <to sec="1292130864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.162.44.124"/>
    </slice>
    <from sec="1292130593" usec="0"/>
    <to sec="1292130606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,010,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_437{
style=filled;
color=gray75;
786[label="54.100.112.248;s;3846pkt 3846fpkt", shape=diamond, color=yellow];
1037[label="174.41.187.65;d;2pkt 2fpkt", shape=diamond, color=yellow];
1038[label="8.34.17.202;s;1pkt 1fpkt", shape=diamond, color=yellow];
2477[label="174.41.184.208;d;26pkt 26fpkt", shape=diamond, color=yellow];
4412[label="174.41.181.11;d;14pkt 14fpkt", shape=diamond, color=yellow];
5258[label="174.41.187.65;d;2pkt 2fpkt", shape=hexagon, color=black];
7389[label="32.200.103.124;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat437[shape=component, label=&lt;Rules:&lt;BR/&gt;{54.100.112.248:*, *:21}[98.9961%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (49.4604%)&lt;BR/&gt; 24602: (0.321172%)&lt;BR/&gt; 17992: (0.167009%)&lt;BR/&gt; 56183: (0.0385406%)&lt;BR/&gt; 55144: (0.0385406%)&gt;];
}
786--1037[label="0.5;1pkt 1fpkt"];
786--1872[label="0.0357143;1pkt 1fpkt"];
786--2477[label="0.0384615;1pkt 1fpkt"];
786--4412[label="0.0714286;1pkt 1fpkt"];
786--5258[label="0.5;1pkt 1fpkt"];
786--6133[label="0.0691628;266pkt 266fpkt"];
786--6184[label="0.048882;188pkt 188fpkt"];
786--6193[label="0.0691628;266pkt 266fpkt"];
786--6231[label="0.048882;188pkt 188fpkt"];
786--6237[label="0.0691628;266pkt 266fpkt"];
1037--1038[label="1;1pkt 1fpkt"];
1037--5258[label="1;2pkt 2fpkt"];
1038--5258[label="1;1pkt 1fpkt"];
2477--7389[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="54.100.112.248"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.104.133.124"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.130.203.124"/>
    </slice>
    <from sec="1292130325" usec="0"/>
    <to sec="1292130499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.211.41.128"/>
    </slice>
    <from sec="1292130284" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.211.66.128"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.108.81.128"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130351" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="173.46.232.128"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.207.32.129"/>
    </slice>
    <from sec="1292130447" usec="0"/>
    <to sec="1292130459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="0.115.210.129"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.216.227.129"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="81.236.55.130"/>
    </slice>
    <from sec="1292130049" usec="0"/>
    <to sec="1292130052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.39.68.130"/>
    </slice>
    <from sec="1292130832" usec="0"/>
    <to sec="1292130840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.216.140.130"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="38.159.175.130"/>
    </slice>
    <from sec="1292130098" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.160.225.130"/>
    </slice>
    <from sec="1292130473" usec="0"/>
    <to sec="1292130480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.8.133"/>
    </slice>
    <from sec="1292130039" usec="0"/>
    <to sec="1292130060" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.8.134"/>
    </slice>
    <from sec="1292130710" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.240.201.134"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.87.8.135"/>
    </slice>
    <from sec="1292130006" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.138.69.136"/>
    </slice>
    <from sec="1292130205" usec="0"/>
    <to sec="1292130797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.189.130.136"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.195.151.137"/>
    </slice>
    <from sec="1292130172" usec="0"/>
    <to sec="1292130491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.202.161.137"/>
    </slice>
    <from sec="1292130521" usec="0"/>
    <to sec="1292130535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.120.226.137"/>
    </slice>
    <from sec="1292130160" usec="0"/>
    <to sec="1292130766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.60.56.138"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.250.68.138"/>
    </slice>
    <from sec="1292130530" usec="0"/>
    <to sec="1292130535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.178.69.139"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.77.139"/>
    </slice>
    <from sec="1292130532" usec="0"/>
    <to sec="1292130723" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.189.114.139"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.78.194.139"/>
    </slice>
    <from sec="1292130582" usec="0"/>
    <to sec="1292130608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.210.100.140"/>
    </slice>
    <from sec="1292130579" usec="0"/>
    <to sec="1292130610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.126.140"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="55.97.225.140"/>
    </slice>
    <from sec="1292130362" usec="0"/>
    <to sec="1292130378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.92.254.140"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.53.48.141"/>
    </slice>
    <from sec="1292130026" usec="0"/>
    <to sec="1292130859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.199.58.141"/>
    </slice>
    <from sec="1292130130" usec="0"/>
    <to sec="1292130135" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.50.53.142"/>
    </slice>
    <from sec="1292130045" usec="0"/>
    <to sec="1292130047" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="196.16.25.143"/>
    </slice>
    <from sec="1292130095" usec="0"/>
    <to sec="1292130835" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.160.193.143"/>
    </slice>
    <from sec="1292130257" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.137.70.146"/>
    </slice>
    <from sec="1292130718" usec="0"/>
    <to sec="1292130732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_477{
style=filled;
color=gray75;
4292[label="64.211.35.148;s;23pkt 23fpkt", shape=diamond, color=yellow];
7617[label="64.211.35.148;24pkt 24fpkt", shape=pentagon, color=darkviolet];
stat477[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.211.35.148:*, 131.19.9.45:80}[76%]&lt;BR/&gt;{64.211.35.148:*, 131.19.9.43:80}[24%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 10661: (2.12766%)&lt;BR/&gt; 10660: (2.12766%)&lt;BR/&gt; 10659: (2.12766%)&lt;BR/&gt; 10658: (2.12766%)&gt;];
}
4292--7617[label="0.956522;22pkt 22fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.9.45" dst_port="80" src_ip="64.211.35.148"/>
      <filter dst_ip="131.19.9.43" dst_port="80" src_ip="64.211.35.148"/>
    </slice>
    <from sec="1292130656" usec="0"/>
    <to sec="1292130887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.82.153.148"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.100.236.149"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.78.3.151"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.43.49.152"/>
    </slice>
    <from sec="1292130845" usec="0"/>
    <to sec="1292130855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="102.140.2.153"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130314" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.137.65.153"/>
    </slice>
    <from sec="1292130511" usec="0"/>
    <to sec="1292130520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="65.208.112.153"/>
    </slice>
    <from sec="1292130576" usec="0"/>
    <to sec="1292130586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.240.193.153"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.189.228.153"/>
    </slice>
    <from sec="1292130876" usec="0"/>
    <to sec="1292130891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.212.240.153"/>
    </slice>
    <from sec="1292130639" usec="0"/>
    <to sec="1292130652" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="66.239.35.154"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.201.204.154"/>
    </slice>
    <from sec="1292130007" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="33.72.38.155"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="213.240.198.155"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.190.160.157"/>
    </slice>
    <from sec="1292130735" usec="0"/>
    <to sec="1292130853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.86.218.157"/>
    </slice>
    <from sec="1292130778" usec="0"/>
    <to sec="1292130792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.15.1.160"/>
    </slice>
    <from sec="1292130538" usec="0"/>
    <to sec="1292130553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="41.133.82.160"/>
    </slice>
    <from sec="1292130648" usec="0"/>
    <to sec="1292130655" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="215.120.226.160"/>
    </slice>
    <from sec="1292130202" usec="0"/>
    <to sec="1292130707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="36.174.26.161"/>
    </slice>
    <from sec="1292130059" usec="0"/>
    <to sec="1292130832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="179.96.68.161"/>
    </slice>
    <from sec="1292130124" usec="0"/>
    <to sec="1292130864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="203.68.2.162"/>
    </slice>
    <from sec="1292130018" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="160.136.57.162"/>
    </slice>
    <from sec="1292130890" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.237.62.163"/>
    </slice>
    <from sec="1292130221" usec="0"/>
    <to sec="1292130234" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="156.178.107.163"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,502,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.126.163"/>
    </slice>
    <from sec="1292130698" usec="0"/>
    <to sec="1292130720" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_504{
style=filled;
color=gray75;
2638[label="131.19.123.164;s;6pkt 6fpkt", shape=diamond, color=yellow];
7753[label="131.19.123.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
stat504[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.123.164:80, 41.135.103.16:*}[66.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50483: (9.09091%)&lt;BR/&gt; 50482: (9.09091%)&lt;BR/&gt; 50481: (9.09091%)&lt;BR/&gt; 39240: (9.09091%)&gt;];
}
2638--7753[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="41.135.103.16" src_ip="131.19.123.164" src_port="80"/>
    </slice>
    <from sec="1292130016" usec="0"/>
    <to sec="1292130276" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="187.149.6.167"/>
    </slice>
    <from sec="1292130413" usec="0"/>
    <to sec="1292130420" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.160.168"/>
    </slice>
    <from sec="1292130862" usec="0"/>
    <to sec="1292130868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.76.50.170"/>
    </slice>
    <from sec="1292130647" usec="0"/>
    <to sec="1292130807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.85.94.170"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.176.199.170"/>
    </slice>
    <from sec="1292130076" usec="0"/>
    <to sec="1292130082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.42.250.170"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130125" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="31.181.74.171"/>
    </slice>
    <from sec="1292130819" usec="0"/>
    <to sec="1292130883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.240.34.172"/>
    </slice>
    <from sec="1292130506" usec="0"/>
    <to sec="1292130512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.48.67.172"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.160.151.173"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="178.134.149.174"/>
    </slice>
    <from sec="1292130161" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801518,2.09112,020,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_517{
style=filled;
color=gray75;
3280[label="213.240.196.174;s;209pkt 209fpkt", shape=diamond, color=yellow];
7840[label="213.240.196.174;224pkt 224fpkt", shape=pentagon, color=darkviolet];
9216[label="213.240.196.174;224pkt 224fpkt", shape=invtriangle, color=brown];
stat517[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.196.174:0, *:0}[99.5536%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5434%)&lt;BR/&gt; 44470: (0.228311%)&lt;BR/&gt; 445: (0.228311%)&gt;];
}
3280--7840[label="1;209pkt 209fpkt"];
3280--9216[label="1;209pkt 209fpkt"];
7840--9216[label="1;224pkt 224fpkt"];
</description>
    <slice>
      <filter src_ip="213.240.196.174"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="3.176.77.176"/>
    </slice>
    <from sec="1292130475" usec="0"/>
    <to sec="1292130478" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="190.121.90.176"/>
    </slice>
    <from sec="1292130009" usec="0"/>
    <to sec="1292130890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.39.223.176"/>
    </slice>
    <from sec="1292130502" usec="0"/>
    <to sec="1292130504" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.219.177.177"/>
    </slice>
    <from sec="1292130747" usec="0"/>
    <to sec="1292130750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.14.237.177"/>
    </slice>
    <from sec="1292130031" usec="0"/>
    <to sec="1292130859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.143.131.178"/>
    </slice>
    <from sec="1292130810" usec="0"/>
    <to sec="1292130823" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.56.183.179"/>
    </slice>
    <from sec="1292130743" usec="0"/>
    <to sec="1292130750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_525{
style=filled;
color=gray75;
3410[label="8.49.202.112;d;45pkt 45fpkt", shape=diamond, color=yellow];
3411[label="130.11.40.195;s;34pkt 34fpkt", shape=diamond, color=yellow];
7985[label="130.11.40.195;42pkt 42fpkt", shape=pentagon, color=darkviolet];
stat525[shape=component, label=&lt;Rules:&lt;BR/&gt;{130.11.40.195:80, 8.49.202.112:*}[81.6327%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.281%)&lt;BR/&gt; 53: (2.89256%)&lt;BR/&gt; 65365: (1.23967%)&lt;BR/&gt; 65232: (1.23967%)&lt;BR/&gt; 63303: (1.23967%)&gt;];
}
3410--3411[label="0.941176;32pkt 32fpkt"];
3410--6129[label="0.0222222;1pkt 1fpkt"];
3410--6164[label="0.0222222;1pkt 1fpkt"];
3410--6190[label="0.0222222;1pkt 1fpkt"];
3410--6223[label="0.0222222;1pkt 1fpkt"];
3410--6250[label="0.0222222;1pkt 1fpkt"];
3410--7876[label="0.0444444;2pkt 2fpkt"];
3410--7985[label="0.904762;38pkt 38fpkt"];
3410--9233[label="0.0444444;2pkt 2fpkt"];
3410--9830[label="0.0444444;2pkt 2fpkt"];
3411--6129[label="0.0294118;1pkt 1fpkt"];
3411--6190[label="0.0294118;1pkt 1fpkt"];
3411--7985[label="1;34pkt 34fpkt"];
</description>
    <slice>
      <filter dst_ip="8.49.202.112" src_ip="130.11.40.195" src_port="80"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130873" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="145.7.9.181"/>
    </slice>
    <from sec="1292130172" usec="0"/>
    <to sec="1292130491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="141.53.54.181"/>
    </slice>
    <from sec="1292130861" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.48.40.182"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130675" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.101.217.182"/>
    </slice>
    <from sec="1292130040" usec="0"/>
    <to sec="1292130886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.40.59.183"/>
    </slice>
    <from sec="1292130502" usec="0"/>
    <to sec="1292130516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="14.235.8.186"/>
    </slice>
    <from sec="1292130464" usec="0"/>
    <to sec="1292130494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="194.140.96.187"/>
    </slice>
    <from sec="1292130360" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.200.83.188"/>
    </slice>
    <from sec="1292130537" usec="0"/>
    <to sec="1292130539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.13.85.189"/>
    </slice>
    <from sec="1292130505" usec="0"/>
    <to sec="1292130524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.192.64.191"/>
    </slice>
    <from sec="1292130293" usec="0"/>
    <to sec="1292130631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="92.173.120.191"/>
    </slice>
    <from sec="1292130446" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.8.192"/>
    </slice>
    <from sec="1292130100" usec="0"/>
    <to sec="1292130106" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.178.139.192"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.8.194"/>
    </slice>
    <from sec="1292130389" usec="0"/>
    <to sec="1292130396" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.74.194"/>
    </slice>
    <from sec="1292130752" usec="0"/>
    <to sec="1292130756" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="88.189.162.194"/>
    </slice>
    <from sec="1292130813" usec="0"/>
    <to sec="1292130841" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="183.3.222.194"/>
    </slice>
    <from sec="1292130553" usec="0"/>
    <to sec="1292130564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="24.46.176.196"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.12.187.196"/>
    </slice>
    <from sec="1292130451" usec="0"/>
    <to sec="1292130460" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="56.245.223.196"/>
    </slice>
    <from sec="1292130307" usec="0"/>
    <to sec="1292130362" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="5.46.157.198"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="67.122.7.199"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_548{
style=filled;
color=gray75;
8029[label="9.53.50.201;12pkt 12fpkt", shape=pentagon, color=darkviolet];
stat548[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.53.50.201:*, 173.46.170.14:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60843: (4.16667%)&lt;BR/&gt; 57880: (4.16667%)&lt;BR/&gt; 53235: (4.16667%)&lt;BR/&gt; 53223: (4.16667%)&gt;];
}
</description>
    <slice>
      <filter dst_ip="173.46.170.14" dst_port="80" src_ip="9.53.50.201"/>
    </slice>
    <from sec="1292130012" usec="0"/>
    <to sec="1292130520" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.120.20.202"/>
    </slice>
    <from sec="1292130401" usec="0"/>
    <to sec="1292130410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="68.215.68.202"/>
    </slice>
    <from sec="1292130266" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.02585,2.06588,020,0 0 0 1 1 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_551{
style=filled;
color=gray75;
1472[label="213.240.200.171;d;606pkt 606fpkt", shape=diamond, color=yellow];
1493[label="213.240.206.195;d;613pkt 613fpkt", shape=diamond, color=yellow];
2876[label="133.0.37.249;d;163pkt 163fpkt", shape=diamond, color=yellow];
5036[label="213.240.206.195;d;594pkt 594fpkt", shape=hexagon, color=black];
8054[label="64.28.219.203;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat551[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 213.240.206.195:0}[44.2836%]&lt;BR/&gt;{*:0, 213.240.200.171:0}[43.8495%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.9495%)&lt;BR/&gt; 11994: (0.0252653%)&lt;BR/&gt; 6300: (0.0252653%)&gt;];
}
1472--8054[label="0.333333;1pkt 1fpkt"];
1493--5036[label="1;594pkt 594fpkt"];
1493--8054[label="0.333333;1pkt 1fpkt"];
2876--8054[label="0.333333;1pkt 1fpkt"];
5036--8054[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.206.195"/>
      <filter dst_ip="213.240.200.171"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="8.155.89.204"/>
    </slice>
    <from sec="1292130177" usec="0"/>
    <to sec="1292130190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.218.209.204"/>
    </slice>
    <from sec="1292130312" usec="0"/>
    <to sec="1292130328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.228.96.205"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="188.130.212.205"/>
    </slice>
    <from sec="1292130288" usec="0"/>
    <to sec="1292130316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.153.34.207"/>
    </slice>
    <from sec="1292130260" usec="0"/>
    <to sec="1292130272" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.222.53.210"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="175.208.177.210"/>
    </slice>
    <from sec="1292130694" usec="0"/>
    <to sec="1292130699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="58.162.237.210"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="216.202.196.211"/>
    </slice>
    <from sec="1292130162" usec="0"/>
    <to sec="1292130550" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="205.220.93.212"/>
    </slice>
    <from sec="1292130471" usec="0"/>
    <to sec="1292130480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.156.74.213"/>
    </slice>
    <from sec="1292130633" usec="0"/>
    <to sec="1292130637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.140.134.213"/>
    </slice>
    <from sec="1292130705" usec="0"/>
    <to sec="1292130708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.251.138.213"/>
    </slice>
    <from sec="1292130216" usec="0"/>
    <to sec="1292130876" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.117.162.213"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.100.69.214"/>
    </slice>
    <from sec="1292130489" usec="0"/>
    <to sec="1292130502" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="195.125.75.215"/>
    </slice>
    <from sec="1292130588" usec="0"/>
    <to sec="1292130601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="22.168.12.217"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="37.55.40.217"/>
    </slice>
    <from sec="1292130367" usec="0"/>
    <to sec="1292130419" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,901,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.73.82.218"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.228.128.218"/>
    </slice>
    <from sec="1292130398" usec="0"/>
    <to sec="1292130411" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.13.108.219"/>
    </slice>
    <from sec="1292130525" usec="0"/>
    <to sec="1292130609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.10.140.219"/>
    </slice>
    <from sec="1292130217" usec="0"/>
    <to sec="1292130221" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_574{
style=filled;
color=gray75;
2975[label="133.0.197.219;s;122pkt 122fpkt", shape=diamond, color=yellow];
3360[label="33.150.106.71;d;164pkt 164fpkt", shape=diamond, color=yellow];
5912[label="33.150.106.71;d;164pkt 164fpkt", shape=hexagon, color=black];
8186[label="133.0.197.219;204pkt 204fpkt", shape=pentagon, color=darkviolet];
9381[label="133.0.197.219;204pkt 204fpkt", shape=invtriangle, color=brown];
9902[label="133.0.197.219;205pkt 205fpkt", shape=invhouse, color=bisque];
stat574[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.197.219:*, 33.150.106.71:80}[87.3171%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.0715%)&lt;BR/&gt; 443: (1.74036%)&lt;BR/&gt; 62270: (0.28222%)&lt;BR/&gt; 62269: (0.28222%)&lt;BR/&gt; 62268: (0.28222%)&gt;];
}
2975--3360[label="0.909836;111pkt 111fpkt"];
2975--5567[label="0.0114943;1pkt 1fpkt"];
2975--5912[label="0.909836;111pkt 111fpkt"];
2975--6120[label="0.0819672;10pkt 10fpkt"];
2975--6137[label="0.00819672;1pkt 1fpkt"];
2975--6186[label="0.0819672;10pkt 10fpkt"];
2975--6197[label="0.00819672;1pkt 1fpkt"];
2975--6233[label="0.0819672;10pkt 10fpkt"];
2975--6241[label="0.00819672;1pkt 1fpkt"];
2975--8186[label="1;122pkt 122fpkt"];
2975--9381[label="1;122pkt 122fpkt"];
2975--9902[label="1;122pkt 122fpkt"];
3360--5912[label="1;164pkt 164fpkt"];
3360--6120[label="0.0609756;10pkt 10fpkt"];
3360--6136[label="0.0609756;10pkt 10fpkt"];
3360--6186[label="0.0609756;10pkt 10fpkt"];
3360--6196[label="0.0609756;10pkt 10fpkt"];
3360--6233[label="0.0609756;10pkt 10fpkt"];
3360--6240[label="0.0609756;10pkt 10fpkt"];
3360--8186[label="1;164pkt 164fpkt"];
3360--9381[label="1;164pkt 164fpkt"];
3360--9902[label="1;164pkt 164fpkt"];
5912--6120[label="0.0609756;10pkt 10fpkt"];
5912--6136[label="0.0609756;10pkt 10fpkt"];
5912--6186[label="0.0609756;10pkt 10fpkt"];
5912--6196[label="0.0609756;10pkt 10fpkt"];
5912--6233[label="0.0609756;10pkt 10fpkt"];
5912--6240[label="0.0609756;10pkt 10fpkt"];
5912--8186[label="1;164pkt 164fpkt"];
5912--9381[label="1;164pkt 164fpkt"];
5912--9902[label="1;164pkt 164fpkt"];
8186--9381[label="1;204pkt 204fpkt"];
8186--9902[label="1;204pkt 204fpkt"];
9381--9902[label="1;204pkt 204fpkt"];
</description>
    <slice>
      <filter dst_ip="33.150.106.71" dst_port="80" src_ip="133.0.197.219"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,011,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="204.37.185.220"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.114.77.221"/>
    </slice>
    <from sec="1292130777" usec="0"/>
    <to sec="1292130799" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.209.232.221"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.218.226.222"/>
    </slice>
    <from sec="1292130625" usec="0"/>
    <to sec="1292130656" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="122.22.25.223"/>
    </slice>
    <from sec="1292130822" usec="0"/>
    <to sec="1292130836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.15.99.223"/>
    </slice>
    <from sec="1292130517" usec="0"/>
    <to sec="1292130532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.27.7.225"/>
    </slice>
    <from sec="1292130478" usec="0"/>
    <to sec="1292130491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.188.31.225"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="182.129.40.225"/>
    </slice>
    <from sec="1292130111" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,504,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="146.138.85.225"/>
    </slice>
    <from sec="1292130012" usec="0"/>
    <to sec="1292130236" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.30.160.227"/>
    </slice>
    <from sec="1292130374" usec="0"/>
    <to sec="1292130386" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="26.100.72.229"/>
    </slice>
    <from sec="1292130506" usec="0"/>
    <to sec="1292130580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.237.94.229"/>
    </slice>
    <from sec="1292130040" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="128.189.117.229"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="212.21.129.229"/>
    </slice>
    <from sec="1292130464" usec="0"/>
    <to sec="1292130480" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="12.32.147.229"/>
    </slice>
    <from sec="1292130141" usec="0"/>
    <to sec="1292130147" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="193.1.8.230"/>
    </slice>
    <from sec="1292130849" usec="0"/>
    <to sec="1292130853" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="52.134.44.231"/>
    </slice>
    <from sec="1292130677" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.165.208.231"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="29.203.33.232"/>
    </slice>
    <from sec="1292130086" usec="0"/>
    <to sec="1292130410" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.118.163.232"/>
    </slice>
    <from sec="1292130537" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="206.132.152.233"/>
    </slice>
    <from sec="1292130091" usec="0"/>
    <to sec="1292130185" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.178.5.234"/>
    </slice>
    <from sec="1292130268" usec="0"/>
    <to sec="1292130299" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.6.76.234"/>
    </slice>
    <from sec="1292130580" usec="0"/>
    <to sec="1292130587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.124.100.235"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="53.10.210.235"/>
    </slice>
    <from sec="1292130131" usec="0"/>
    <to sec="1292130320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="200.2.130.236"/>
    </slice>
    <from sec="1292130316" usec="0"/>
    <to sec="1292130336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.946741,2.1257,503,1 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_602{
style=filled;
color=gray75;
311[label="145.7.56.5d;43pkt 43fpkt", shape=rectangle, color=red];
8316[label="205.204.181.236;45pkt 45fpkt", shape=pentagon, color=darkviolet];
stat602[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.204.181.236:*, 145.7.56.5:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1360: (1.13636%)&lt;BR/&gt; 1359: (1.13636%)&lt;BR/&gt; 1358: (1.13636%)&lt;BR/&gt; 1357: (1.13636%)&gt;];
}
311--8316[label="1;43pkt 43fpkt"];
</description>
    <slice>
      <filter dst_ip="145.7.56.5" dst_port="80" src_ip="205.204.181.236"/>
    </slice>
    <from sec="1292130006" usec="0"/>
    <to sec="1292130493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="18.44.216.236"/>
    </slice>
    <from sec="1292130445" usec="0"/>
    <to sec="1292130454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.127.54.237"/>
    </slice>
    <from sec="1292130309" usec="0"/>
    <to sec="1292130318" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="21.184.108.237"/>
    </slice>
    <from sec="1292130071" usec="0"/>
    <to sec="1292130162" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="42.234.108.237"/>
    </slice>
    <from sec="1292130441" usec="0"/>
    <to sec="1292130457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.228.209.239"/>
    </slice>
    <from sec="1292130855" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="209.131.25.240"/>
    </slice>
    <from sec="1292130171" usec="0"/>
    <to sec="1292130885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="2.61.119.240"/>
    </slice>
    <from sec="1292130587" usec="0"/>
    <to sec="1292130606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="9.18.177.240"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,010,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_611{
style=filled;
color=gray75;
8351[label="212.128.193.240;188pkt 188fpkt", shape=pentagon, color=darkviolet];
stat611[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.128.193.240:*, *:135}[79.7872%]&lt;BR/&gt;{212.128.193.240:*, *:445}[20.2128%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 135: (39.8936%)&lt;BR/&gt; 445: (10.1064%)&lt;BR/&gt; 4585: (0.531915%)&lt;BR/&gt; 2959: (0.531915%)&lt;BR/&gt; 1182: (0.531915%)&gt;];
}
</description>
    <slice>
      <filter dst_port="135" src_ip="212.128.193.240"/>
      <filter dst_port="445" src_ip="212.128.193.240"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="131.19.240.240"/>
    </slice>
    <from sec="1292130106" usec="0"/>
    <to sec="1292130521" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.115.175.241"/>
    </slice>
    <from sec="1292130243" usec="0"/>
    <to sec="1292130270" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="44.129.87.242"/>
    </slice>
    <from sec="1292130029" usec="0"/>
    <to sec="1292130593" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="13.164.101.242"/>
    </slice>
    <from sec="1292130424" usec="0"/>
    <to sec="1292130445" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="15.237.192.242"/>
    </slice>
    <from sec="1292130536" usec="0"/>
    <to sec="1292130557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,010,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_617{
style=filled;
color=gray75;
879[label="133.0.56.227;d;34pkt 34fpkt", shape=diamond, color=yellow];
2399[label="191.117.162.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
2464[label="34.140.202.242;s;1pkt 1fpkt", shape=diamond, color=yellow];
8369[label="34.140.202.242;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat617[shape=component, label=&lt;Rules:&lt;BR/&gt;{188.117.225.97:*, 133.0.56.227:11629}[88.2353%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11629: (50%)&lt;BR/&gt; 6022: (4.05405%)&lt;BR/&gt; 6058: (2.7027%)&lt;BR/&gt; 22932: (1.35135%)&lt;BR/&gt; 17974: (1.35135%)&gt;];
}
879--2399[label="1;1pkt 1fpkt"];
879--2464[label="1;1pkt 1fpkt"];
879--8369[label="1;1pkt 1fpkt"];
2464--8369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.56.227" dst_port="11629" src_ip="188.117.225.97"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_618{
style=filled;
color=gray75;
2736[label="155.31.18.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
8373[label="155.31.18.243;1pkt 1fpkt", shape=pentagon, color=darkviolet];
stat618[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.18.243:80, 192.156.51.48:54793}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54793: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2736--8373[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.156.51.48" dst_port="54793" src_ip="155.31.18.243" src_port="80"/>
    </slice>
    <from sec="1292130216" usec="0"/>
    <to sec="1292130515" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="35.192.56.243"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130865" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="23.156.97.243"/>
    </slice>
    <from sec="1292130794" usec="0"/>
    <to sec="1292130806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="192.81.123.243"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="4.244.100.244"/>
    </slice>
    <from sec="1292130714" usec="0"/>
    <to sec="1292130726" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="214.91.119.244"/>
    </slice>
    <from sec="1292130608" usec="0"/>
    <to sec="1292130638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.31391,2.02656,503,0 0 0 1 1 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_624{
style=filled;
color=gray75;
2394[label="133.0.2.200;d;83pkt 83fpkt", shape=diamond, color=yellow];
2841[label="8.251.2.137;s;10pkt 10fpkt", shape=diamond, color=yellow];
3594[label="66.138.145.245;s;16pkt 16fpkt", shape=diamond, color=yellow];
5575[label="133.0.2.200;d;74pkt 74fpkt", shape=hexagon, color=black];
7513[label="8.251.2.137;10pkt 10fpkt", shape=pentagon, color=darkviolet];
8401[label="66.138.145.245;15pkt 15fpkt", shape=pentagon, color=darkviolet];
9058[label="8.251.2.137;9pkt 9fpkt", shape=invtriangle, color=brown];
9480[label="66.138.145.245;15pkt 15fpkt", shape=invtriangle, color=brown];
9767[label="8.251.2.137;10pkt 10fpkt", shape=invhouse, color=bisque];
9947[label="66.138.145.245;15pkt 15fpkt", shape=invhouse, color=bisque];
stat624[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 133.0.2.200:*}[93.9759%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.249%)&lt;BR/&gt; 8080: (1.75097%)&lt;BR/&gt; 33008: (1.16732%)&lt;BR/&gt; 33004: (1.16732%)&lt;BR/&gt; 33002: (1.16732%)&gt;];
}
2394--2841[label="1;10pkt 10fpkt"];
2394--3594[label="1;16pkt 16fpkt"];
2394--5575[label="1;74pkt 74fpkt"];
2394--6164[label="0.0240964;2pkt 2fpkt"];
2394--6178[label="0.0722892;6pkt 6fpkt"];
2394--6223[label="0.0240964;2pkt 2fpkt"];
2394--6250[label="0.0240964;2pkt 2fpkt"];
2394--7513[label="1;10pkt 10fpkt"];
2394--8401[label="1;15pkt 15fpkt"];
2394--9058[label="1;9pkt 9fpkt"];
2394--9480[label="1;15pkt 15fpkt"];
2394--9767[label="1;10pkt 10fpkt"];
2394--9947[label="1;15pkt 15fpkt"];
2841--5575[label="1;10pkt 10fpkt"];
2841--7513[label="1;10pkt 10fpkt"];
2841--9058[label="1;9pkt 9fpkt"];
2841--9767[label="1;10pkt 10fpkt"];
3594--5575[label="1;16pkt 16fpkt"];
3594--8401[label="1;15pkt 15fpkt"];
3594--9480[label="1;15pkt 15fpkt"];
3594--9947[label="1;15pkt 15fpkt"];
5575--6178[label="0.0810811;6pkt 6fpkt"];
5575--7513[label="1;10pkt 10fpkt"];
5575--8401[label="1;15pkt 15fpkt"];
5575--9058[label="1;9pkt 9fpkt"];
5575--9480[label="1;15pkt 15fpkt"];
5575--9767[label="1;10pkt 10fpkt"];
5575--9947[label="1;15pkt 15fpkt"];
7513--9058[label="1;9pkt 9fpkt"];
7513--9767[label="1;10pkt 10fpkt"];
8401--9480[label="1;15pkt 15fpkt"];
8401--9947[label="1;15pkt 15fpkt"];
9058--9767[label="1;9pkt 9fpkt"];
9480--9947[label="1;15pkt 15fpkt"];
</description>
    <slice>
      <filter dst_ip="133.0.2.200" src_port="80"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.67703,2.11377,503,0 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_625{
style=filled;
color=gray75;
2519[label="133.162.109.44;d;10pkt 10fpkt", shape=diamond, color=yellow];
8403[label="8.49.202.245;2pkt 2fpkt", shape=pentagon, color=darkviolet];
stat625[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.53.33.178:*, 133.162.109.44:80}[60%]&lt;BR/&gt;{117.0.240.214:*, 133.162.109.44:80}[20%]&lt;BR/&gt;{8.49.202.245:*, 133.162.109.44:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48904: (8.33333%)&lt;BR/&gt; 40050: (8.33333%)&lt;BR/&gt; 63977: (4.16667%)&lt;BR/&gt; 63966: (4.16667%)&gt;];
}
2519--6136[label="0.2;2pkt 2fpkt"];
2519--6196[label="0.2;2pkt 2fpkt"];
2519--6240[label="0.2;2pkt 2fpkt"];
2519--8403[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="133.162.109.44" dst_port="80" src_ip="9.53.33.178"/>
      <filter dst_ip="133.162.109.44" dst_port="80" src_ip="8.49.202.245"/>
      <filter dst_ip="133.162.109.44" dst_port="80" src_ip="117.0.240.214"/>
    </slice>
    <from sec="1292130602" usec="0"/>
    <to sec="1292130797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="177.160.225.245"/>
    </slice>
    <from sec="1292130552" usec="0"/>
    <to sec="1292130562" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="191.17.23.246"/>
    </slice>
    <from sec="1292130402" usec="0"/>
    <to sec="1292130421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,020,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="197.192.180.246"/>
    </slice>
    <from sec="1292130798" usec="0"/>
    <to sec="1292130811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="202.108.4.252"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,503,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="25.145.50.255"/>
    </slice>
    <from sec="1292130402" usec="0"/>
    <to sec="1292130431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.373673,2.16557,999,0 0 0 0 0 0 0 0 0 1 0 0 ">
    <slice>
      <filter src_ip="45.122.207.255"/>
    </slice>
    <from sec="1292130163" usec="0"/>
    <to sec="1292130613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="37.85.110.0"/>
    </slice>
    <from sec="1292130006" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.31.0.2"/>
    </slice>
    <from sec="1292130560" usec="0"/>
    <to sec="1292130568" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_636{
style=filled;
color=gray75;
6277[label="131.19.10.2;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8474[label="131.19.10.2;1pkt 1fpkt", shape=invtriangle, color=brown];
9519[label="131.19.10.2;1pkt 1fpkt", shape=invhouse, color=bisque];
stat636[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.10.2:25, 203.94.153.174:2138}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2138: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
6277--8474[label="1;1pkt 1fpkt"];
6277--9519[label="1;1pkt 1fpkt"];
8474--9519[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="203.94.153.174" dst_port="2138" src_ip="131.19.10.2" src_port="25"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_637{
style=filled;
color=gray75;
6285[label="133.0.216.2;85pkt 85fpkt", shape=pentagon, color=darkviolet];
8477[label="133.0.216.2;86pkt 86fpkt", shape=invtriangle, color=brown];
stat637[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.216.2:*, 160.162.35.252:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59780: (0.584795%)&lt;BR/&gt; 59779: (0.584795%)&lt;BR/&gt; 59778: (0.584795%)&lt;BR/&gt; 59777: (0.584795%)&gt;];
}
6285--8477[label="1;85pkt 85fpkt"];
</description>
    <slice>
      <filter dst_ip="160.162.35.252" dst_port="80" src_ip="133.0.216.2"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_638{
style=filled;
color=gray75;
6307[label="212.68.0.6;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8487[label="212.68.0.6;2pkt 2fpkt", shape=invtriangle, color=brown];
stat638[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.68.0.6:62816, 2.189.48.71:25}[50%]&lt;BR/&gt;{212.68.0.6:50174, 14.27.172.174:53}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62816: (25%)&lt;BR/&gt; 50174: (25%)&lt;BR/&gt; 53: (25%)&lt;BR/&gt; 25: (25%)&gt;];
}
6307--8487[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="14.27.172.174" dst_port="53" src_ip="212.68.0.6" src_port="50174"/>
      <filter dst_ip="2.189.48.71" dst_port="25" src_ip="212.68.0.6" src_port="62816"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.78.43.6"/>
    </slice>
    <from sec="1292130026" usec="0"/>
    <to sec="1292130066" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="69.93.88.7"/>
    </slice>
    <from sec="1292130286" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="204.157.4.8"/>
    </slice>
    <from sec="1292130832" usec="0"/>
    <to sec="1292130850" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_642{
style=filled;
color=gray75;
6366[label="131.19.241.11;230pkt 230fpkt", shape=pentagon, color=darkviolet];
8508[label="131.19.241.11;231pkt 231fpkt", shape=invtriangle, color=brown];
stat642[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.241.11:0, *:0}[98.7013%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (98.6985%)&lt;BR/&gt; 21: (0.650759%)&lt;BR/&gt; 59738: (0.21692%)&lt;BR/&gt; 45795: (0.21692%)&lt;BR/&gt; 42010: (0.21692%)&gt;];
}
6366--8508[label="1;230pkt 230fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.241.11"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_643{
style=filled;
color=gray75;
6372[label="212.73.82.12;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8512[label="212.73.82.12;5pkt 5fpkt", shape=invtriangle, color=brown];
9531[label="212.73.82.12;5pkt 5fpkt", shape=invhouse, color=bisque];
stat643[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.73.82.12:53, 0.73.86.245:19989}[20%]&lt;BR/&gt;{212.73.82.12:53, 0.120.146.31:31282}[20%]&lt;BR/&gt;{212.73.82.12:53, 0.120.146.31:47274}[20%]&lt;BR/&gt;{212.73.82.12:53, 8.189.86.139:34555}[20%]&lt;BR/&gt;{212.73.82.12:53, 8.189.86.139:63997}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 63997: (10%)&lt;BR/&gt; 47274: (10%)&lt;BR/&gt; 34555: (10%)&lt;BR/&gt; 31282: (10%)&gt;];
}
6372--8512[label="1;5pkt 5fpkt"];
6372--9531[label="1;5pkt 5fpkt"];
8512--9531[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="8.189.86.139" dst_port="63997" src_ip="212.73.82.12" src_port="53"/>
      <filter dst_ip="8.189.86.139" dst_port="34555" src_ip="212.73.82.12" src_port="53"/>
      <filter dst_ip="0.120.146.31" dst_port="47274" src_ip="212.73.82.12" src_port="53"/>
      <filter dst_ip="0.120.146.31" dst_port="31282" src_ip="212.73.82.12" src_port="53"/>
      <filter dst_ip="0.73.86.245" dst_port="19989" src_ip="212.73.82.12" src_port="53"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.68.10.13"/>
    </slice>
    <from sec="1292130783" usec="0"/>
    <to sec="1292130795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="30.238.201.17"/>
    </slice>
    <from sec="1292130477" usec="0"/>
    <to sec="1292130484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_648{
style=filled;
color=gray75;
6447[label="14.85.176.19;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8544[label="14.85.176.19;1pkt 1fpkt", shape=invtriangle, color=brown];
9544[label="14.85.176.19;6pkt 6fpkt", shape=invhouse, color=bisque];
stat648[shape=component, label=&lt;Rules:&lt;BR/&gt;{14.85.176.19:54382, 173.46.18.1:*}[50%]&lt;BR/&gt;{14.85.176.19:54384, 173.46.18.1:*}[50%]&lt;BR/&gt;{14.85.176.19:*, 173.46.18.1:60732}[33.3333%]&lt;BR/&gt;{14.85.176.19:*, 173.46.18.1:60733}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54382: (31.25%)&lt;BR/&gt; 60731: (18.75%)&lt;BR/&gt; 54384: (18.75%)&lt;BR/&gt; 60733: (12.5%)&lt;BR/&gt; 60732: (12.5%)&gt;];
}
6447--8544[label="1;1pkt 1fpkt"];
6447--9544[label="1;1pkt 1fpkt"];
8544--9544[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.18.1" src_ip="14.85.176.19" src_port="54384"/>
      <filter dst_ip="173.46.18.1" src_ip="14.85.176.19" src_port="54382"/>
      <filter dst_ip="173.46.18.1" dst_port="60733" src_ip="14.85.176.19"/>
      <filter dst_ip="173.46.18.1" dst_port="60732" src_ip="14.85.176.19"/>
    </slice>
    <from sec="1292130836" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_649{
style=filled;
color=gray75;
6453[label="64.190.99.20;149pkt 149fpkt", shape=pentagon, color=darkviolet];
8547[label="64.190.99.20;148pkt 148fpkt", shape=invtriangle, color=brown];
stat649[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.190.99.20:5060, *:5060}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (100%)&gt;];
}
6453--8547[label="1;148pkt 148fpkt"];
</description>
    <slice>
      <filter dst_port="5060" src_ip="64.190.99.20" src_port="5060"/>
    </slice>
    <from sec="1292130016" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_650{
style=filled;
color=gray75;
6458[label="133.0.75.21;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8550[label="133.0.75.21;13pkt 13fpkt", shape=invtriangle, color=brown];
stat650[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.75.21:*, 128.189.114.72:443}[53.8462%]&lt;BR/&gt;{133.0.75.21:*, 128.189.114.20:443}[46.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 54743: (3.84615%)&lt;BR/&gt; 54742: (3.84615%)&lt;BR/&gt; 54741: (3.84615%)&lt;BR/&gt; 54740: (3.84615%)&gt;];
}
6458--8550[label="1;13pkt 13fpkt"];
</description>
    <slice>
      <filter dst_ip="128.189.114.72" dst_port="443" src_ip="133.0.75.21"/>
      <filter dst_ip="128.189.114.20" dst_port="443" src_ip="133.0.75.21"/>
    </slice>
    <from sec="1292130792" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.208.55.22"/>
    </slice>
    <from sec="1292130277" usec="0"/>
    <to sec="1292130467" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_653{
style=filled;
color=gray75;
6478[label="133.17.111.23;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8563[label="133.17.111.23;2pkt 2fpkt", shape=invtriangle, color=brown];
stat653[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.111.23:80, 8.49.203.12:49778}[50%]&lt;BR/&gt;{133.17.111.23:80, 197.93.82.151:49502}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49778: (25%)&lt;BR/&gt; 49502: (25%)&gt;];
}
6478--8563[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="197.93.82.151" dst_port="49502" src_ip="133.17.111.23" src_port="80"/>
      <filter dst_ip="8.49.203.12" dst_port="49778" src_ip="133.17.111.23" src_port="80"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.64.206.23"/>
    </slice>
    <from sec="1292130601" usec="0"/>
    <to sec="1292130614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.166.108.24"/>
    </slice>
    <from sec="1292130497" usec="0"/>
    <to sec="1292130510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="197.241.99.25"/>
    </slice>
    <from sec="1292130579" usec="0"/>
    <to sec="1292130589" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_657{
style=filled;
color=gray75;
6494[label="133.17.193.25;9pkt 9fpkt", shape=pentagon, color=darkviolet];
8575[label="133.17.193.25;8pkt 8fpkt", shape=invtriangle, color=brown];
9562[label="133.17.193.25;8pkt 8fpkt", shape=invhouse, color=bisque];
stat657[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.193.25:80, 8.49.206.196:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63701: (6%)&lt;BR/&gt; 61753: (6%)&lt;BR/&gt; 57630: (6%)&lt;BR/&gt; 53286: (6%)&gt;];
}
6494--8575[label="1;8pkt 8fpkt"];
6494--9562[label="1;8pkt 8fpkt"];
8575--9562[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="8.49.206.196" src_ip="133.17.193.25" src_port="80"/>
    </slice>
    <from sec="1292130321" usec="0"/>
    <to sec="1292130859" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_658{
style=filled;
color=gray75;
6498[label="173.46.116.26;20pkt 20fpkt", shape=pentagon, color=darkviolet];
8576[label="173.46.116.26;19pkt 19fpkt", shape=invtriangle, color=brown];
stat658[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.116.26:*, 209.44.203.165:80}[50%]&lt;BR/&gt;{173.46.116.26:*, 218.99.125.45:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50211: (2.5641%)&lt;BR/&gt; 50197: (2.5641%)&lt;BR/&gt; 50196: (2.5641%)&lt;BR/&gt; 50195: (2.5641%)&gt;];
}
6498--8576[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="209.44.203.165" dst_port="80" src_ip="173.46.116.26"/>
      <filter dst_ip="218.99.125.45" dst_port="80" src_ip="173.46.116.26"/>
    </slice>
    <from sec="1292130062" usec="0"/>
    <to sec="1292130883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="33.45.194.26"/>
    </slice>
    <from sec="1292130470" usec="0"/>
    <to sec="1292130487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="210.160.80.27"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.31.84.28"/>
    </slice>
    <from sec="1292130336" usec="0"/>
    <to sec="1292130343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="178.171.245.28"/>
    </slice>
    <from sec="1292130048" usec="0"/>
    <to sec="1292130058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_663{
style=filled;
color=gray75;
6531[label="36.131.80.30;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8592[label="36.131.80.30;2pkt 2fpkt", shape=invtriangle, color=brown];
stat663[shape=component, label=&lt;Rules:&lt;BR/&gt;{36.131.80.30:2086, 173.46.150.208:10035}[50%]&lt;BR/&gt;{36.131.80.30:2099, 173.46.150.218:10961}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10961: (25%)&lt;BR/&gt; 10035: (25%)&lt;BR/&gt; 2099: (25%)&lt;BR/&gt; 2086: (25%)&gt;];
}
6531--8592[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.218" dst_port="10961" src_ip="36.131.80.30" src_port="2099"/>
      <filter dst_ip="173.46.150.208" dst_port="10035" src_ip="36.131.80.30" src_port="2086"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_664{
style=filled;
color=gray75;
6544[label="2.87.106.31;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8601[label="2.87.106.31;2pkt 2fpkt", shape=invtriangle, color=brown];
9571[label="2.87.106.31;1pkt 1fpkt", shape=invhouse, color=bisque];
stat664[shape=component, label=&lt;Rules:&lt;BR/&gt;{2.87.106.31:51179, 213.240.197.21:80}[50%]&lt;BR/&gt;{2.87.106.31:51194, 213.240.197.23:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51194: (37.5%)&lt;BR/&gt; 51179: (12.5%)&gt;];
}
6544--8601[label="1;1pkt 1fpkt"];
6544--9571[label="1;1pkt 1fpkt"];
8601--9571[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.197.23" dst_port="80" src_ip="2.87.106.31" src_port="51194"/>
      <filter dst_ip="213.240.197.21" dst_port="80" src_ip="2.87.106.31" src_port="51179"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="9.9.129.34"/>
    </slice>
    <from sec="1292130528" usec="0"/>
    <to sec="1292130540" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.186.141.34"/>
    </slice>
    <from sec="1292130440" usec="0"/>
    <to sec="1292130459" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="205.197.146.34"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.3.7.35"/>
    </slice>
    <from sec="1292130191" usec="0"/>
    <to sec="1292130204" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.176.74.35"/>
    </slice>
    <from sec="1292130634" usec="0"/>
    <to sec="1292130825" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_670{
style=filled;
color=gray75;
6619[label="200.36.134.39;309pkt 309fpkt", shape=pentagon, color=darkviolet];
8638[label="200.36.134.39;309pkt 309fpkt", shape=invtriangle, color=brown];
stat670[shape=component, label=&lt;Rules:&lt;BR/&gt;{200.36.134.39:0, *:0}[96.7638%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (96.7638%)&lt;BR/&gt; 4899: (1.61812%)&lt;BR/&gt; 4341: (0.161812%)&lt;BR/&gt; 4078: (0.161812%)&lt;BR/&gt; 3441: (0.161812%)&gt;];
}
6619--8638[label="1;309pkt 309fpkt"];
</description>
    <slice>
      <filter src_ip="200.36.134.39"/>
    </slice>
    <from sec="1292130013" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.82.102.41"/>
    </slice>
    <from sec="1292130524" usec="0"/>
    <to sec="1292130545" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.41.71.42"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.236.73.42"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.248.108.42"/>
    </slice>
    <from sec="1292130356" usec="0"/>
    <to sec="1292130360" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_675{
style=filled;
color=gray75;
6647[label="192.45.134.42;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8651[label="192.45.134.42;1pkt 1fpkt", shape=invtriangle, color=brown];
stat675[shape=component, label=&lt;Rules:&lt;BR/&gt;{192.45.134.42:1037, 213.240.197.20:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1037: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6647--8651[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.197.20" dst_port="80" src_ip="192.45.134.42" src_port="1037"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.170.56.43"/>
    </slice>
    <from sec="1292130556" usec="0"/>
    <to sec="1292130581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.75.236.43"/>
    </slice>
    <from sec="1292130391" usec="0"/>
    <to sec="1292130426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.242.98.44"/>
    </slice>
    <from sec="1292130595" usec="0"/>
    <to sec="1292130599" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.131.172.45"/>
    </slice>
    <from sec="1292130316" usec="0"/>
    <to sec="1292130331" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.131.190.45"/>
    </slice>
    <from sec="1292130693" usec="0"/>
    <to sec="1292130864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.0.21.48"/>
    </slice>
    <from sec="1292130377" usec="0"/>
    <to sec="1292130394" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_682{
style=filled;
color=gray75;
6707[label="212.73.82.48;5pkt 5fpkt", shape=pentagon, color=darkviolet];
8678[label="212.73.82.48;5pkt 5fpkt", shape=invtriangle, color=brown];
stat682[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.73.82.48:57934, 193.33.62.49:53}[20%]&lt;BR/&gt;{212.73.82.48:59841, 213.40.107.142:80}[20%]&lt;BR/&gt;{212.73.82.48:59194, 213.40.107.198:80}[20%]&lt;BR/&gt;{212.73.82.48:36692, 212.33.172.120:33489}[20%]&lt;BR/&gt;{212.73.82.48:36692, 212.33.172.120:33490}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36692: (20%)&lt;BR/&gt; 80: (20%)&lt;BR/&gt; 59841: (10%)&lt;BR/&gt; 59194: (10%)&lt;BR/&gt; 57934: (10%)&gt;];
}
6707--8678[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="212.33.172.120" dst_port="33490" src_ip="212.73.82.48" src_port="36692"/>
      <filter dst_ip="212.33.172.120" dst_port="33489" src_ip="212.73.82.48" src_port="36692"/>
      <filter dst_ip="213.40.107.198" dst_port="80" src_ip="212.73.82.48" src_port="59194"/>
      <filter dst_ip="213.40.107.142" dst_port="80" src_ip="212.73.82.48" src_port="59841"/>
      <filter dst_ip="193.33.62.49" dst_port="53" src_ip="212.73.82.48" src_port="57934"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_683{
style=filled;
color=gray75;
6730[label="26.194.136.51;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8684[label="26.194.136.51;2pkt 2fpkt", shape=invtriangle, color=brown];
stat683[shape=component, label=&lt;Rules:&lt;BR/&gt;{26.194.136.51:80, 173.46.16.177:1548}[50%]&lt;BR/&gt;{26.194.136.51:80, 173.46.16.177:1597}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1597: (25%)&lt;BR/&gt; 1548: (25%)&gt;];
}
6730--8684[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.16.177" dst_port="1597" src_ip="26.194.136.51" src_port="80"/>
      <filter dst_ip="173.46.16.177" dst_port="1548" src_ip="26.194.136.51" src_port="80"/>
    </slice>
    <from sec="1292130843" usec="0"/>
    <to sec="1292130868" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.193.245.51"/>
    </slice>
    <from sec="1292130775" usec="0"/>
    <to sec="1292130797" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_685{
style=filled;
color=gray75;
6738[label="66.155.195.52;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8688[label="66.155.195.52;1pkt 1fpkt", shape=invtriangle, color=brown];
stat685[shape=component, label=&lt;Rules:&lt;BR/&gt;{66.155.195.52:0, 213.240.204.128:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6738--8688[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.204.128" src_ip="66.155.195.52"/>
    </slice>
    <from sec="1292130829" usec="0"/>
    <to sec="1292130842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_686{
style=filled;
color=gray75;
6753[label="145.83.87.54;91pkt 91fpkt", shape=pentagon, color=darkviolet];
8696[label="145.83.87.54;92pkt 92fpkt", shape=invtriangle, color=brown];
9610[label="145.83.87.54;92pkt 92fpkt", shape=invhouse, color=bisque];
stat686[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.83.87.54:36954, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 36954: (50%)&lt;BR/&gt; 55001: (1.09091%)&lt;BR/&gt; 64962: (0.545455%)&lt;BR/&gt; 64435: (0.545455%)&lt;BR/&gt; 63717: (0.545455%)&gt;];
}
6753--8696[label="1;91pkt 91fpkt"];
6753--9610[label="1;91pkt 91fpkt"];
8696--9610[label="1;92pkt 92fpkt"];
</description>
    <slice>
      <filter src_ip="145.83.87.54" src_port="36954"/>
    </slice>
    <from sec="1292130036" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="3.180.9.56"/>
    </slice>
    <from sec="1292130565" usec="0"/>
    <to sec="1292130572" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_689{
style=filled;
color=gray75;
6764[label="43.240.10.56;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8701[label="43.240.10.56;1pkt 1fpkt", shape=invtriangle, color=brown];
stat689[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.240.10.56:4707, 213.240.196.57:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 4707: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6764--8701[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.196.57" dst_port="80" src_ip="43.240.10.56" src_port="4707"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.99.94.56"/>
    </slice>
    <from sec="1292130022" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.32.220.60"/>
    </slice>
    <from sec="1292130248" usec="0"/>
    <to sec="1292130249" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.217.27.61"/>
    </slice>
    <from sec="1292130608" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_693{
style=filled;
color=gray75;
6810[label="64.80.89.61;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8726[label="64.80.89.61;1pkt 1fpkt", shape=invtriangle, color=brown];
stat693[shape=component, label=&lt;Rules:&lt;BR/&gt;{64.80.89.61:25393, 213.240.196.57:8172}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25393: (50%)&lt;BR/&gt; 8172: (50%)&gt;];
}
6810--8726[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.196.57" dst_port="8172" src_ip="64.80.89.61" src_port="25393"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.181.156.61"/>
    </slice>
    <from sec="1292130026" usec="0"/>
    <to sec="1292130894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.166.59.62"/>
    </slice>
    <from sec="1292130581" usec="0"/>
    <to sec="1292130615" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_696{
style=filled;
color=gray75;
6828[label="160.209.156.63;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8734[label="160.209.156.63;1pkt 1fpkt", shape=invtriangle, color=brown];
stat696[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.209.156.63:2387, 213.240.193.145:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2387: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
6828--8734[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.193.145" dst_port="80" src_ip="160.209.156.63" src_port="2387"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.2.9.65"/>
    </slice>
    <from sec="1292130238" usec="0"/>
    <to sec="1292130242" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="160.15.140.65"/>
    </slice>
    <from sec="1292130467" usec="0"/>
    <to sec="1292130473" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.13.162.67"/>
    </slice>
    <from sec="1292130534" usec="0"/>
    <to sec="1292130559" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="23.116.6.68"/>
    </slice>
    <from sec="1292130117" usec="0"/>
    <to sec="1292130140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.242.127.68"/>
    </slice>
    <from sec="1292130357" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_702{
style=filled;
color=gray75;
6890[label="34.187.205.68;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8757[label="34.187.205.68;2pkt 2fpkt", shape=invtriangle, color=brown];
stat702[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.187.205.68:3083, 213.240.204.153:8172}[50%]&lt;BR/&gt;{34.187.205.68:3084, 173.46.150.208:26847}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 26847: (25%)&lt;BR/&gt; 8172: (25%)&lt;BR/&gt; 3084: (25%)&lt;BR/&gt; 3083: (25%)&gt;];
}
6890--8757[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.208" dst_port="26847" src_ip="34.187.205.68" src_port="3084"/>
      <filter dst_ip="213.240.204.153" dst_port="8172" src_ip="34.187.205.68" src_port="3083"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.167.138.71"/>
    </slice>
    <from sec="1292130472" usec="0"/>
    <to sec="1292130483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="158.112.202.72"/>
    </slice>
    <from sec="1292130614" usec="0"/>
    <to sec="1292130814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_705{
style=filled;
color=gray75;
6940[label="193.36.64.73;61pkt 61fpkt", shape=pentagon, color=darkviolet];
8782[label="193.36.64.73;61pkt 61fpkt", shape=invtriangle, color=brown];
9641[label="193.36.64.73;61pkt 61fpkt", shape=invhouse, color=bisque];
stat705[shape=component, label=&lt;Rules:&lt;BR/&gt;{193.36.64.73:*, 173.46.190.109:9100}[55.7377%]&lt;BR/&gt;{193.36.64.73:*, 173.46.190.109:161}[22.9508%]&lt;BR/&gt;{193.36.64.73:*, 173.46.190.181:161}[21.3115%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9100: (27.8689%)&lt;BR/&gt; 161: (22.1311%)&lt;BR/&gt; 65403: (0.819672%)&lt;BR/&gt; 64680: (0.819672%)&lt;BR/&gt; 64525: (0.819672%)&gt;];
}
6940--8782[label="1;61pkt 61fpkt"];
6940--9641[label="1;61pkt 61fpkt"];
8782--9641[label="1;61pkt 61fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.190.109" dst_port="9100" src_ip="193.36.64.73"/>
      <filter dst_ip="173.46.190.109" dst_port="161" src_ip="193.36.64.73"/>
      <filter dst_ip="173.46.190.181" dst_port="161" src_ip="193.36.64.73"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130889" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.45.132.74"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="179.79.183.74"/>
    </slice>
    <from sec="1292130487" usec="0"/>
    <to sec="1292130498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.39.68.77"/>
    </slice>
    <from sec="1292130523" usec="0"/>
    <to sec="1292130536" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.199.66.78"/>
    </slice>
    <from sec="1292130534" usec="0"/>
    <to sec="1292130543" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="155.31.77.78"/>
    </slice>
    <from sec="1292130541" usec="0"/>
    <to sec="1292130544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_711{
style=filled;
color=gray75;
6996[label="9.87.177.79;3pkt 3fpkt", shape=pentagon, color=darkviolet];
8807[label="9.87.177.79;3pkt 3fpkt", shape=invtriangle, color=brown];
9656[label="9.87.177.79;3pkt 3fpkt", shape=invhouse, color=bisque];
stat711[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.87.177.79:80, 173.46.150.219:45525}[33.3333%]&lt;BR/&gt;{9.87.177.79:80, 173.46.150.219:59556}[33.3333%]&lt;BR/&gt;{9.87.177.79:80, 173.46.150.219:59743}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59743: (16.6667%)&lt;BR/&gt; 59556: (16.6667%)&lt;BR/&gt; 45525: (16.6667%)&gt;];
}
6996--8807[label="1;3pkt 3fpkt"];
6996--9656[label="1;3pkt 3fpkt"];
8807--9656[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.219" dst_port="59743" src_ip="9.87.177.79" src_port="80"/>
      <filter dst_ip="173.46.150.219" dst_port="59556" src_ip="9.87.177.79" src_port="80"/>
      <filter dst_ip="173.46.150.219" dst_port="45525" src_ip="9.87.177.79" src_port="80"/>
    </slice>
    <from sec="1292130851" usec="0"/>
    <to sec="1292130885" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_712{
style=filled;
color=gray75;
7014[label="133.0.153.81;79pkt 79fpkt", shape=pentagon, color=darkviolet];
8820[label="133.0.153.81;79pkt 79fpkt", shape=invtriangle, color=brown];
9663[label="133.0.153.81;78pkt 78fpkt", shape=invhouse, color=bisque];
stat712[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.0.153.81:*, 13.48.131.200:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4883: (0.635593%)&lt;BR/&gt; 4882: (0.635593%)&lt;BR/&gt; 4881: (0.635593%)&lt;BR/&gt; 4454: (0.635593%)&gt;];
}
7014--8820[label="1;79pkt 79fpkt"];
7014--9663[label="1;78pkt 78fpkt"];
8820--9663[label="1;78pkt 78fpkt"];
</description>
    <slice>
      <filter dst_ip="13.48.131.200" dst_port="80" src_ip="133.0.153.81"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130892" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.66.108.83"/>
    </slice>
    <from sec="1292130577" usec="0"/>
    <to sec="1292130711" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.211.145.83"/>
    </slice>
    <from sec="1292130007" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_715{
style=filled;
color=gray75;
7031[label="210.165.188.83;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8831[label="210.165.188.83;1pkt 1fpkt", shape=invtriangle, color=brown];
9670[label="210.165.188.83;1pkt 1fpkt", shape=invhouse, color=bisque];
stat715[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.165.188.83:2126, 213.240.196.57:44970}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 44970: (50%)&lt;BR/&gt; 2126: (50%)&gt;];
}
7031--8831[label="1;1pkt 1fpkt"];
7031--9670[label="1;1pkt 1fpkt"];
8831--9670[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.196.57" dst_port="44970" src_ip="210.165.188.83" src_port="2126"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="165.50.65.84"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130896" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_717{
style=filled;
color=gray75;
7037[label="133.207.230.84;13pkt 13fpkt", shape=pentagon, color=darkviolet];
8834[label="133.207.230.84;12pkt 12fpkt", shape=invtriangle, color=brown];
stat717[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.207.230.84:80, 213.240.192.85:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2028: (4%)&lt;BR/&gt; 2027: (4%)&lt;BR/&gt; 2026: (4%)&lt;BR/&gt; 2025: (4%)&gt;];
}
7037--8834[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.192.85" src_ip="133.207.230.84" src_port="80"/>
    </slice>
    <from sec="1292130328" usec="0"/>
    <to sec="1292130553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="203.183.44.86"/>
    </slice>
    <from sec="1292130745" usec="0"/>
    <to sec="1292130751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.85.180.86"/>
    </slice>
    <from sec="1292130821" usec="0"/>
    <to sec="1292130827" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.175.113.87"/>
    </slice>
    <from sec="1292130315" usec="0"/>
    <to sec="1292130430" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.141.102.90"/>
    </slice>
    <from sec="1292130462" usec="0"/>
    <to sec="1292130475" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.168.160.90"/>
    </slice>
    <from sec="1292130501" usec="0"/>
    <to sec="1292130510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_724{
style=filled;
color=gray75;
7101[label="160.161.100.91;6pkt 6fpkt", shape=pentagon, color=darkviolet];
8861[label="160.161.100.91;6pkt 6fpkt", shape=invtriangle, color=brown];
stat724[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.161.100.91:*, *:21}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (50%)&lt;BR/&gt; 60967: (8.33333%)&lt;BR/&gt; 56874: (8.33333%)&lt;BR/&gt; 54855: (8.33333%)&lt;BR/&gt; 54524: (8.33333%)&gt;];
}
7101--8861[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_port="21" src_ip="160.161.100.91"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.61.179.93"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.178.246.94"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130313" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.100.101.96"/>
    </slice>
    <from sec="1292130679" usec="0"/>
    <to sec="1292130692" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.200.96.97"/>
    </slice>
    <from sec="1292130333" usec="0"/>
    <to sec="1292130361" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_730{
style=filled;
color=gray75;
7159[label="145.83.193.97;105pkt 105fpkt", shape=pentagon, color=darkviolet];
8884[label="145.83.193.97;106pkt 106fpkt", shape=invtriangle, color=brown];
stat730[shape=component, label=&lt;Rules:&lt;BR/&gt;{145.83.193.97:52842, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52842: (50%)&lt;BR/&gt; 65522: (0.473934%)&lt;BR/&gt; 65378: (0.473934%)&lt;BR/&gt; 65172: (0.473934%)&lt;BR/&gt; 65170: (0.473934%)&gt;];
}
7159--8884[label="1;105pkt 105fpkt"];
</description>
    <slice>
      <filter src_ip="145.83.193.97" src_port="52842"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_731{
style=filled;
color=gray75;
7181[label="173.46.201.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8894[label="173.46.201.99;1pkt 1fpkt", shape=invtriangle, color=brown];
9700[label="173.46.201.99;2pkt 2fpkt", shape=invhouse, color=bisque];
stat731[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.201.99:80, 209.44.182.5:53533}[50%]&lt;BR/&gt;{173.46.201.99:80, 192.156.51.150:47185}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53533: (37.5%)&lt;BR/&gt; 47185: (12.5%)&gt;];
}
7181--8894[label="1;1pkt 1fpkt"];
7181--9700[label="1;1pkt 1fpkt"];
8894--9700[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="192.156.51.150" dst_port="47185" src_ip="173.46.201.99" src_port="80"/>
      <filter dst_ip="209.44.182.5" dst_port="53533" src_ip="173.46.201.99" src_port="80"/>
    </slice>
    <from sec="1292130083" usec="0"/>
    <to sec="1292130657" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.218.218.99"/>
    </slice>
    <from sec="1292130389" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.120.226.99"/>
    </slice>
    <from sec="1292130111" usec="0"/>
    <to sec="1292130594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_734{
style=filled;
color=gray75;
7184[label="173.46.232.99;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8897[label="173.46.232.99;1pkt 1fpkt", shape=invtriangle, color=brown];
stat734[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.232.99:2584, 19.94.77.48:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2584: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7184--8897[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="19.94.77.48" dst_port="80" src_ip="173.46.232.99" src_port="2584"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="213.226.16.100"/>
    </slice>
    <from sec="1292130191" usec="0"/>
    <to sec="1292130292" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="39.132.216.100"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.165.25.101"/>
    </slice>
    <from sec="1292130465" usec="0"/>
    <to sec="1292130477" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.182.147.101"/>
    </slice>
    <from sec="1292130198" usec="0"/>
    <to sec="1292130212" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_739{
style=filled;
color=gray75;
7254[label="155.31.0.106;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8922[label="155.31.0.106;1pkt 1fpkt", shape=invtriangle, color=brown];
9714[label="155.31.0.106;1pkt 1fpkt", shape=invhouse, color=bisque];
stat739[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.31.0.106:80, 8.49.200.168:43376}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43376: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7254--8922[label="1;1pkt 1fpkt"];
7254--9714[label="1;1pkt 1fpkt"];
8922--9714[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="8.49.200.168" dst_port="43376" src_ip="155.31.0.106" src_port="80"/>
    </slice>
    <from sec="1292130729" usec="0"/>
    <to sec="1292130858" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.131.132.106"/>
    </slice>
    <from sec="1292130601" usec="0"/>
    <to sec="1292130634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.21.137.113"/>
    </slice>
    <from sec="1292130796" usec="0"/>
    <to sec="1292130842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.161.217.113"/>
    </slice>
    <from sec="1292130119" usec="0"/>
    <to sec="1292130123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.24.39.115"/>
    </slice>
    <from sec="1292130461" usec="0"/>
    <to sec="1292130591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.183.250.115"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.61.132.116"/>
    </slice>
    <from sec="1292130124" usec="0"/>
    <to sec="1292130128" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="100.187.84.117"/>
    </slice>
    <from sec="1292130645" usec="0"/>
    <to sec="1292130731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_748{
style=filled;
color=gray75;
7352[label="213.221.125.119;2pkt 2fpkt", shape=pentagon, color=darkviolet];
8966[label="213.221.125.119;3pkt 3fpkt", shape=invtriangle, color=brown];
stat748[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.221.125.119:62582, 213.240.201.171:80}[33.3333%]&lt;BR/&gt;{213.221.125.119:62595, 213.240.201.171:80}[33.3333%]&lt;BR/&gt;{213.221.125.119:63226, 213.240.201.171:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63226: (20%)&lt;BR/&gt; 62595: (20%)&lt;BR/&gt; 62582: (10%)&gt;];
}
7352--8966[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="213.221.125.119" src_port="63226"/>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="213.221.125.119" src_port="62595"/>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="213.221.125.119" src_port="62582"/>
    </slice>
    <from sec="1292130868" usec="0"/>
    <to sec="1292130886" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.19.4.121"/>
    </slice>
    <from sec="1292130526" usec="0"/>
    <to sec="1292130533" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_750{
style=filled;
color=gray75;
7367[label="213.240.204.121;14pkt 14fpkt", shape=pentagon, color=darkviolet];
8975[label="213.240.204.121;14pkt 14fpkt", shape=invtriangle, color=brown];
stat750[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.240.204.121:*, 192.168.68.1:139}[35.7143%]&lt;BR/&gt;{213.240.204.121:*, 192.168.194.1:139}[28.5714%]&lt;BR/&gt;{213.240.204.121:*, 10.0.1.17:3283}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (35.7143%)&lt;BR/&gt; 3283: (14.2857%)&lt;BR/&gt; 64835: (3.57143%)&lt;BR/&gt; 64834: (3.57143%)&lt;BR/&gt; 64833: (3.57143%)&gt;];
}
7367--8975[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="192.168.68.1" dst_port="139" src_ip="213.240.204.121"/>
      <filter dst_ip="10.0.1.17" dst_port="3283" src_ip="213.240.204.121"/>
      <filter dst_ip="192.168.194.1" dst_port="139" src_ip="213.240.204.121"/>
    </slice>
    <from sec="1292130138" usec="0"/>
    <to sec="1292130671" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.152.153.123"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,010,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_752{
style=filled;
color=gray75;
7382[label="221.84.205.123;90pkt 90fpkt", shape=pentagon, color=darkviolet];
8982[label="221.84.205.123;91pkt 91fpkt", shape=invtriangle, color=brown];
9742[label="221.84.205.123;91pkt 91fpkt", shape=invhouse, color=bisque];
stat752[shape=component, label=&lt;Rules:&lt;BR/&gt;{221.84.205.123:*, *:23}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 23: (50%)&lt;BR/&gt; 65476: (0.551471%)&lt;BR/&gt; 65340: (0.551471%)&lt;BR/&gt; 65271: (0.551471%)&lt;BR/&gt; 65197: (0.551471%)&gt;];
}
7382--8982[label="1;90pkt 90fpkt"];
7382--9742[label="1;90pkt 90fpkt"];
8982--9742[label="1;91pkt 91fpkt"];
</description>
    <slice>
      <filter dst_port="23" src_ip="221.84.205.123"/>
    </slice>
    <from sec="1292130007" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="32.200.103.124"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.130.203.124"/>
    </slice>
    <from sec="1292130325" usec="0"/>
    <to sec="1292130499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.94.87.129"/>
    </slice>
    <from sec="1292130018" usec="0"/>
    <to sec="1292130107" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.216.227.129"/>
    </slice>
    <from sec="1292130604" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="81.236.55.130"/>
    </slice>
    <from sec="1292130049" usec="0"/>
    <to sec="1292130052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="68.39.68.130"/>
    </slice>
    <from sec="1292130832" usec="0"/>
    <to sec="1292130840" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="38.159.175.130"/>
    </slice>
    <from sec="1292130098" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.65.82.132"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130738" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.150.144.132"/>
    </slice>
    <from sec="1292130066" usec="0"/>
    <to sec="1292130083" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_762{
style=filled;
color=gray75;
7474[label="195.132.219.132;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9035[label="195.132.219.132;1pkt 1fpkt", shape=invtriangle, color=brown];
stat762[shape=component, label=&lt;Rules:&lt;BR/&gt;{195.132.219.132:49033, 213.240.201.171:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49033: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7474--9035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="195.132.219.132" src_port="49033"/>
    </slice>
    <from sec="1292130883" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_763{
style=filled;
color=gray75;
7480[label="21.93.162.133;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9039[label="21.93.162.133;1pkt 1fpkt", shape=invtriangle, color=brown];
stat763[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.93.162.133:2046, 133.141.37.76:445}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2046: (50%)&lt;BR/&gt; 445: (50%)&gt;];
}
7480--9039[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="133.141.37.76" dst_port="445" src_ip="21.93.162.133" src_port="2046"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="193.1.8.134"/>
    </slice>
    <from sec="1292130710" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_765{
style=filled;
color=gray75;
7486[label="131.19.52.134;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9044[label="131.19.52.134;4pkt 4fpkt", shape=invtriangle, color=brown];
stat765[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.52.134:80, 9.53.32.21:40845}[25%]&lt;BR/&gt;{131.19.52.134:80, 209.44.178.77:63409}[25%]&lt;BR/&gt;{131.19.52.134:80, 13.4.201.94:44233}[25%]&lt;BR/&gt;{131.19.52.134:80, 13.4.201.94:44368}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63409: (14.2857%)&lt;BR/&gt; 44368: (14.2857%)&lt;BR/&gt; 40845: (14.2857%)&lt;BR/&gt; 44233: (7.14286%)&gt;];
}
7486--9044[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="13.4.201.94" dst_port="44368" src_ip="131.19.52.134" src_port="80"/>
      <filter dst_ip="13.4.201.94" dst_port="44233" src_ip="131.19.52.134" src_port="80"/>
      <filter dst_ip="209.44.178.77" dst_port="63409" src_ip="131.19.52.134" src_port="80"/>
      <filter dst_ip="9.53.32.21" dst_port="40845" src_ip="131.19.52.134" src_port="80"/>
    </slice>
    <from sec="1292130016" usec="0"/>
    <to sec="1292130525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="182.196.33.136"/>
    </slice>
    <from sec="1292130358" usec="0"/>
    <to sec="1292130365" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,503,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_767{
style=filled;
color=gray75;
7503[label="42.29.37.136;29pkt 29fpkt", shape=pentagon, color=darkviolet];
9052[label="42.29.37.136;29pkt 29fpkt", shape=invtriangle, color=brown];
9764[label="42.29.37.136;29pkt 29fpkt", shape=invhouse, color=bisque];
stat767[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.29.37.136:80, 212.68.25.40:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50366: (1.72414%)&lt;BR/&gt; 50365: (1.72414%)&lt;BR/&gt; 50364: (1.72414%)&lt;BR/&gt; 50363: (1.72414%)&gt;];
}
7503--9052[label="1;29pkt 29fpkt"];
7503--9764[label="1;29pkt 29fpkt"];
9052--9764[label="1;29pkt 29fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.25.40" src_ip="42.29.37.136" src_port="80"/>
    </slice>
    <from sec="1292130162" usec="0"/>
    <to sec="1292130165" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="215.120.226.137"/>
    </slice>
    <from sec="1292130160" usec="0"/>
    <to sec="1292130766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.60.56.138"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.250.68.138"/>
    </slice>
    <from sec="1292130530" usec="0"/>
    <to sec="1292130535" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="55.97.225.140"/>
    </slice>
    <from sec="1292130362" usec="0"/>
    <to sec="1292130378" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="109.68.6.141"/>
    </slice>
    <from sec="1292130177" usec="0"/>
    <to sec="1292130190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="212.137.70.146"/>
    </slice>
    <from sec="1292130718" usec="0"/>
    <to sec="1292130732" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_775{
style=filled;
color=gray75;
7624[label="21.25.12.149;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9109[label="21.25.12.149;1pkt 1fpkt", shape=invtriangle, color=brown];
stat775[shape=component, label=&lt;Rules:&lt;BR/&gt;{21.25.12.149:0, 213.240.196.57:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7624--9109[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.196.57" src_ip="21.25.12.149"/>
    </slice>
    <from sec="1292130844" usec="0"/>
    <to sec="1292130857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,901,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_776{
style=filled;
color=gray75;
7632[label="204.0.132.150;3pkt 3fpkt", shape=pentagon, color=darkviolet];
9113[label="204.0.132.150;3pkt 3fpkt", shape=invtriangle, color=brown];
stat776[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.0.132.150:17144, 173.46.150.219:18180}[33.3333%]&lt;BR/&gt;{204.0.132.150:17193, 173.46.150.208:6881}[33.3333%]&lt;BR/&gt;{204.0.132.150:17217, 173.46.150.208:11768}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 18180: (16.6667%)&lt;BR/&gt; 17217: (16.6667%)&lt;BR/&gt; 17193: (16.6667%)&lt;BR/&gt; 17144: (16.6667%)&lt;BR/&gt; 11768: (16.6667%)&gt;];
}
7632--9113[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.208" dst_port="11768" src_ip="204.0.132.150" src_port="17217"/>
      <filter dst_ip="173.46.150.208" dst_port="6881" src_ip="204.0.132.150" src_port="17193"/>
      <filter dst_ip="173.46.150.219" dst_port="18180" src_ip="204.0.132.150" src_port="17144"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="122.16.34.151"/>
    </slice>
    <from sec="1292130440" usec="0"/>
    <to sec="1292130453" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="65.208.112.153"/>
    </slice>
    <from sec="1292130576" usec="0"/>
    <to sec="1292130586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="66.239.35.154"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="64.12.115.154"/>
    </slice>
    <from sec="1292130388" usec="0"/>
    <to sec="1292130403" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_781{
style=filled;
color=gray75;
7685[label="23.7.34.156;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9134[label="23.7.34.156;1pkt 1fpkt", shape=invtriangle, color=brown];
stat781[shape=component, label=&lt;Rules:&lt;BR/&gt;{23.7.34.156:0, 212.68.6.229:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
7685--9134[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.6.229" src_ip="23.7.34.156"/>
    </slice>
    <from sec="1292130867" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.86.218.157"/>
    </slice>
    <from sec="1292130778" usec="0"/>
    <to sec="1292130792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_783{
style=filled;
color=gray75;
7702[label="133.17.147.159;21pkt 21fpkt", shape=pentagon, color=darkviolet];
9148[label="133.17.147.159;20pkt 20fpkt", shape=invtriangle, color=brown];
stat783[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.17.147.159:80, 213.4.109.68:*}[57.1429%]&lt;BR/&gt;{133.17.147.159:80, 8.49.203.75:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63678: (2.43902%)&lt;BR/&gt; 62040: (2.43902%)&lt;BR/&gt; 61671: (2.43902%)&lt;BR/&gt; 58795: (2.43902%)&gt;];
}
7702--9148[label="1;20pkt 20fpkt"];
</description>
    <slice>
      <filter dst_ip="213.4.109.68" src_ip="133.17.147.159" src_port="80"/>
      <filter dst_ip="8.49.203.75" src_ip="133.17.147.159" src_port="80"/>
    </slice>
    <from sec="1292130024" usec="0"/>
    <to sec="1292130842" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.174.26.161"/>
    </slice>
    <from sec="1292130059" usec="0"/>
    <to sec="1292130832" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="145.85.180.161"/>
    </slice>
    <from sec="1292130448" usec="0"/>
    <to sec="1292130457" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.53.102.162"/>
    </slice>
    <from sec="1292130062" usec="0"/>
    <to sec="1292130076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="156.178.107.163"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_791{
style=filled;
color=gray75;
7749[label="43.178.20.164;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9170[label="43.178.20.164;5pkt 5fpkt", shape=invtriangle, color=brown];
stat791[shape=component, label=&lt;Rules:&lt;BR/&gt;{43.178.20.164:80, 131.19.145.154:63321}[20%]&lt;BR/&gt;{43.178.20.164:80, 131.19.145.154:63325}[20%]&lt;BR/&gt;{43.178.20.164:80, 131.19.145.154:63327}[20%]&lt;BR/&gt;{43.178.20.164:80, 131.19.145.154:63328}[20%]&lt;BR/&gt;{43.178.20.164:80, 131.19.145.154:63329}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63329: (10%)&lt;BR/&gt; 63328: (10%)&lt;BR/&gt; 63327: (10%)&lt;BR/&gt; 63325: (10%)&gt;];
}
7749--9170[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="131.19.145.154" dst_port="63329" src_ip="43.178.20.164" src_port="80"/>
      <filter dst_ip="131.19.145.154" dst_port="63328" src_ip="43.178.20.164" src_port="80"/>
      <filter dst_ip="131.19.145.154" dst_port="63327" src_ip="43.178.20.164" src_port="80"/>
      <filter dst_ip="131.19.145.154" dst_port="63325" src_ip="43.178.20.164" src_port="80"/>
      <filter dst_ip="131.19.145.154" dst_port="63321" src_ip="43.178.20.164" src_port="80"/>
    </slice>
    <from sec="1292130888" usec="0"/>
    <to sec="1292130899" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.76.50.170"/>
    </slice>
    <from sec="1292130647" usec="0"/>
    <to sec="1292130807" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.176.199.170"/>
    </slice>
    <from sec="1292130076" usec="0"/>
    <to sec="1292130082" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.1023,2.0729,999,1 0 0 1 0 0 0 0 0 1 0 0 ">
    <description>subgraph cluster_794{
style=filled;
color=gray75;
81[label="64.40.143.101s;1pkt 1fpkt", shape=rectangle, color=red];
1314[label="213.240.198.17;d;2pkt 2fpkt", shape=diamond, color=yellow];
1881[label="64.40.143.101;s;2pkt 2fpkt", shape=diamond, color=yellow];
3306[label="212.73.67.18;d;563pkt 563fpkt", shape=diamond, color=yellow];
7206[label="64.40.143.101;3pkt 3fpkt", shape=pentagon, color=darkviolet];
stat794[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 212.73.67.18:*}[78.7986%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (46.3222%)&lt;BR/&gt; 0: (1.40105%)&lt;BR/&gt; 80: (1.31349%)&lt;BR/&gt; 25: (1.22592%)&lt;BR/&gt; 113: (0.61296%)&gt;];
}
81--1314[label="1;1pkt 1fpkt"];
81--1881[label="1;1pkt 1fpkt"];
81--7206[label="1;1pkt 1fpkt"];
1314--1881[label="0.5;1pkt 1fpkt"];
1314--4270[label="1;1pkt 1fpkt"];
1314--7206[label="0.5;1pkt 1fpkt"];
1881--3306[label="0.5;1pkt 1fpkt"];
1881--7206[label="1;2pkt 2fpkt"];
3306--4254[label="0.0017762;1pkt 1fpkt"];
3306--5198[label="0.0017762;1pkt 1fpkt"];
3306--5839[label="0.0017762;1pkt 1fpkt"];
3306--6081[label="0.0017762;1pkt 1fpkt"];
3306--6082[label="0.0017762;1pkt 1fpkt"];
3306--6114[label="0.0213144;12pkt 12fpkt"];
3306--6119[label="0.0124334;7pkt 7fpkt"];
3306--6128[label="0.0746004;42pkt 42fpkt"];
3306--6135[label="0.0071048;4pkt 4fpkt"];
3306--6144[label="0.0035524;2pkt 2fpkt"];
3306--6145[label="0.0017762;1pkt 1fpkt"];
3306--6146[label="0.0017762;1pkt 1fpkt"];
3306--6177[label="0.0213144;12pkt 12fpkt"];
3306--6185[label="0.0124334;7pkt 7fpkt"];
3306--6189[label="0.0746004;42pkt 42fpkt"];
3306--6195[label="0.0071048;4pkt 4fpkt"];
3306--6203[label="0.0035524;2pkt 2fpkt"];
3306--6204[label="0.0017762;1pkt 1fpkt"];
3306--6205[label="0.0017762;1pkt 1fpkt"];
3306--6232[label="0.0124334;7pkt 7fpkt"];
3306--6235[label="0.0746004;42pkt 42fpkt"];
3306--6239[label="0.0071048;4pkt 4fpkt"];
3306--6247[label="0.0035524;2pkt 2fpkt"];
3306--6248[label="0.0017762;1pkt 1fpkt"];
3306--6249[label="0.0017762;1pkt 1fpkt"];
3306--7206[label="0.333333;1pkt 1fpkt"];
3306--7230[label="0.00649351;1pkt 1fpkt"];
3306--7256[label="0.0962963;13pkt 13fpkt"];
3306--8119[label="0.0130719;2pkt 2fpkt"];
3306--8199[label="0.0017762;1pkt 1fpkt"];
3306--8223[label="0.0119048;2pkt 2fpkt"];
3306--8913[label="0.00645161;1pkt 1fpkt"];
3306--9184[label="0.0181818;3pkt 3fpkt"];
3306--9388[label="0.0017762;1pkt 1fpkt"];
3306--9399[label="0.011976;2pkt 2fpkt"];
3306--9525[label="0.0017762;1pkt 1fpkt"];
3306--9908[label="0.0017762;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.73.67.18" src_port="53"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130811" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="31.181.74.171"/>
    </slice>
    <from sec="1292130819" usec="0"/>
    <to sec="1292130883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,020,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_796{
style=filled;
color=gray75;
7822[label="212.180.52.172;125pkt 125fpkt", shape=pentagon, color=darkviolet];
9206[label="212.180.52.172;125pkt 125fpkt", shape=invtriangle, color=brown];
stat796[shape=component, label=&lt;Rules:&lt;BR/&gt;{212.180.52.172:0, *:0}[99.2%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.2%)&lt;BR/&gt; 61905: (0.4%)&lt;BR/&gt; 42718: (0.4%)&gt;];
}
7822--9206[label="1;125pkt 125fpkt"];
</description>
    <slice>
      <filter src_ip="212.180.52.172"/>
    </slice>
    <from sec="1292130018" usec="0"/>
    <to sec="1292130884" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.144.213.172"/>
    </slice>
    <from sec="1292130431" usec="0"/>
    <to sec="1292130438" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="42.160.151.173"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="178.134.149.174"/>
    </slice>
    <from sec="1292130161" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="190.121.90.176"/>
    </slice>
    <from sec="1292130009" usec="0"/>
    <to sec="1292130890" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_801{
style=filled;
color=gray75;
7854[label="35.238.180.176;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9222[label="35.238.180.176;1pkt 1fpkt", shape=invtriangle, color=brown];
stat801[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.238.180.176:33233, 213.240.201.171:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 33233: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
7854--9222[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="35.238.180.176" src_port="33233"/>
    </slice>
    <from sec="1292130279" usec="0"/>
    <to sec="1292130893" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_802{
style=filled;
color=gray75;
7863[label="179.114.72.178;5pkt 5fpkt", shape=pentagon, color=darkviolet];
9226[label="179.114.72.178;5pkt 5fpkt", shape=invtriangle, color=brown];
stat802[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.114.72.178:11433, 173.46.150.208:3124}[20%]&lt;BR/&gt;{179.114.72.178:11438, 173.46.150.208:3124}[20%]&lt;BR/&gt;{179.114.72.178:11439, 173.46.150.208:3124}[20%]&lt;BR/&gt;{179.114.72.178:11441, 173.46.150.208:3124}[20%]&lt;BR/&gt;{179.114.72.178:11442, 173.46.150.208:3124}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3124: (50%)&lt;BR/&gt; 11442: (10%)&lt;BR/&gt; 11441: (10%)&lt;BR/&gt; 11439: (10%)&lt;BR/&gt; 11438: (10%)&gt;];
}
7863--9226[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.208" dst_port="3124" src_ip="179.114.72.178" src_port="11442"/>
      <filter dst_ip="173.46.150.208" dst_port="3124" src_ip="179.114.72.178" src_port="11441"/>
      <filter dst_ip="173.46.150.208" dst_port="3124" src_ip="179.114.72.178" src_port="11439"/>
      <filter dst_ip="173.46.150.208" dst_port="3124" src_ip="179.114.72.178" src_port="11438"/>
      <filter dst_ip="173.46.150.208" dst_port="3124" src_ip="179.114.72.178" src_port="11433"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.56.183.179"/>
    </slice>
    <from sec="1292130743" usec="0"/>
    <to sec="1292130750" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="141.53.54.181"/>
    </slice>
    <from sec="1292130861" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_805{
style=filled;
color=gray75;
7893[label="4.210.227.181;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9242[label="4.210.227.181;1pkt 1fpkt", shape=invtriangle, color=brown];
stat805[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.210.227.181:58463, 173.46.18.1:60731}[50%]&lt;BR/&gt;{4.210.227.181:58464, 173.46.18.1:60732}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60732: (33.3333%)&lt;BR/&gt; 58464: (33.3333%)&lt;BR/&gt; 60731: (16.6667%)&lt;BR/&gt; 58463: (16.6667%)&gt;];
}
7893--9242[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.18.1" dst_port="60732" src_ip="4.210.227.181" src_port="58464"/>
      <filter dst_ip="173.46.18.1" dst_port="60731" src_ip="4.210.227.181" src_port="58463"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="194.140.96.187"/>
    </slice>
    <from sec="1292130360" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.13.85.189"/>
    </slice>
    <from sec="1292130505" usec="0"/>
    <to sec="1292130524" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_808{
style=filled;
color=gray75;
7940[label="205.206.168.189;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9263[label="205.206.168.189;2pkt 2fpkt", shape=invtriangle, color=brown];
stat808[shape=component, label=&lt;Rules:&lt;BR/&gt;{205.206.168.189:80, 213.240.203.66:54519}[50%]&lt;BR/&gt;{205.206.168.189:80, 213.240.203.66:54544}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54544: (33.3333%)&lt;BR/&gt; 54519: (16.6667%)&gt;];
}
7940--9263[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.203.66" dst_port="54544" src_ip="205.206.168.189" src_port="80"/>
      <filter dst_ip="213.240.203.66" dst_port="54519" src_ip="205.206.168.189" src_port="80"/>
    </slice>
    <from sec="1292130229" usec="0"/>
    <to sec="1292130273" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="12.192.64.191"/>
    </slice>
    <from sec="1292130293" usec="0"/>
    <to sec="1292130631" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_810{
style=filled;
color=gray75;
7962[label="9.53.95.192;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9275[label="9.53.95.192;3pkt 3fpkt", shape=invtriangle, color=brown];
stat810[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.53.95.192:36374, 173.46.193.202:80}[33.3333%]&lt;BR/&gt;{9.53.95.192:37515, 173.46.193.202:80}[33.3333%]&lt;BR/&gt;{9.53.95.192:60738, 173.46.193.202:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 37515: (20%)&lt;BR/&gt; 36374: (20%)&lt;BR/&gt; 60738: (10%)&gt;];
}
7962--9275[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.193.202" dst_port="80" src_ip="9.53.95.192" src_port="60738"/>
      <filter dst_ip="173.46.193.202" dst_port="80" src_ip="9.53.95.192" src_port="37515"/>
      <filter dst_ip="173.46.193.202" dst_port="80" src_ip="9.53.95.192" src_port="36374"/>
    </slice>
    <from sec="1292130165" usec="0"/>
    <to sec="1292130855" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="183.3.222.194"/>
    </slice>
    <from sec="1292130553" usec="0"/>
    <to sec="1292130564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="28.19.192.197"/>
    </slice>
    <from sec="1292130522" usec="0"/>
    <to sec="1292130551" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,901,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="5.46.157.198"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="67.122.7.199"/>
    </slice>
    <from sec="1292130005" usec="0"/>
    <to sec="1292130009" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="214.102.161.200"/>
    </slice>
    <from sec="1292130436" usec="0"/>
    <to sec="1292130450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="45.218.176.202"/>
    </slice>
    <from sec="1292130577" usec="0"/>
    <to sec="1292130586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,999,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_818{
style=filled;
color=gray75;
8050[label="213.221.154.203;14pkt 14fpkt", shape=pentagon, color=darkviolet];
9316[label="213.221.154.203;15pkt 15fpkt", shape=invtriangle, color=brown];
9871[label="213.221.154.203;14pkt 14fpkt", shape=invhouse, color=bisque];
stat818[shape=component, label=&lt;Rules:&lt;BR/&gt;{213.221.154.203:*, 212.68.7.28:995}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 60516: (3.48837%)&lt;BR/&gt; 60509: (3.48837%)&lt;BR/&gt; 60486: (3.48837%)&lt;BR/&gt; 60479: (3.48837%)&gt;];
}
8050--9316[label="1;14pkt 14fpkt"];
8050--9871[label="1;14pkt 14fpkt"];
9316--9871[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.7.28" dst_port="995" src_ip="213.221.154.203"/>
    </slice>
    <from sec="1292130024" usec="0"/>
    <to sec="1292130866" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.218.209.204"/>
    </slice>
    <from sec="1292130312" usec="0"/>
    <to sec="1292130327" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="188.130.212.205"/>
    </slice>
    <from sec="1292130288" usec="0"/>
    <to sec="1292130316" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="175.208.177.210"/>
    </slice>
    <from sec="1292130694" usec="0"/>
    <to sec="1292130699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="207.49.240.211"/>
    </slice>
    <from sec="1292130715" usec="0"/>
    <to sec="1292130728" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.801518,2.09112,504,0 0 0 1 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_823{
style=filled;
color=gray75;
3073[label="173.46.92.74;d;74pkt 74fpkt", shape=diamond, color=yellow];
7729[label="209.175.97.162;15pkt 15fpkt", shape=pentagon, color=darkviolet];
8098[label="26.202.142.209;1pkt 1fpkt", shape=pentagon, color=darkviolet];
8127[label="8.238.152.212;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9163[label="209.175.97.162;16pkt 16fpkt", shape=invtriangle, color=brown];
9339[label="26.202.142.209;1pkt 1fpkt", shape=invtriangle, color=brown];
9351[label="8.238.152.212;9pkt 9fpkt", shape=invtriangle, color=brown];
stat823[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 173.46.92.74:*}[62.3529%]&lt;BR/&gt;{*:443, 173.46.92.74:*}[24.7059%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.6%)&lt;BR/&gt; 443: (8.4%)&lt;BR/&gt; 53900: (1.2%)&lt;BR/&gt; 53871: (1.2%)&lt;BR/&gt; 53870: (1.2%)&gt;];
}
3073--3321[label="0.0135135;1pkt 1fpkt"];
3073--4094[label="0.027027;2pkt 2fpkt"];
3073--4164[label="0.0151515;1pkt 1fpkt"];
3073--5223[label="0.027027;2pkt 2fpkt"];
3073--5263[label="0.0135135;1pkt 1fpkt"];
3073--5308[label="0.0675676;5pkt 5fpkt"];
3073--6129[label="0.027027;2pkt 2fpkt"];
3073--6164[label="0.0135135;1pkt 1fpkt"];
3073--6178[label="0.0135135;1pkt 1fpkt"];
3073--6190[label="0.027027;2pkt 2fpkt"];
3073--6223[label="0.0135135;1pkt 1fpkt"];
3073--6250[label="0.0135135;1pkt 1fpkt"];
3073--6272[label="0.027027;2pkt 2fpkt"];
3073--6341[label="0.108108;8pkt 8fpkt"];
3073--6765[label="0.0135135;1pkt 1fpkt"];
3073--7228[label="0.0135135;1pkt 1fpkt"];
3073--7267[label="0.0405405;3pkt 3fpkt"];
3073--7729[label="0.333333;5pkt 5fpkt"];
3073--8098[label="1;1pkt 1fpkt"];
3073--8127[label="1;9pkt 9fpkt"];
3073--8503[label="0.108108;8pkt 8fpkt"];
3073--8912[label="0.0135135;1pkt 1fpkt"];
3073--8930[label="0.0405405;3pkt 3fpkt"];
3073--9163[label="0.3125;5pkt 5fpkt"];
3073--9339[label="1;1pkt 1fpkt"];
3073--9351[label="1;9pkt 9fpkt"];
3073--9710[label="0.0135135;1pkt 1fpkt"];
7729--9163[label="1;15pkt 15fpkt"];
8098--9339[label="1;1pkt 1fpkt"];
8127--9351[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.92.74" src_port="80"/>
      <filter dst_ip="173.46.92.74" src_port="443"/>
    </slice>
    <from sec="1292130015" usec="0"/>
    <to sec="1292130814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="192.156.74.213"/>
    </slice>
    <from sec="1292130633" usec="0"/>
    <to sec="1292130637" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="35.140.134.213"/>
    </slice>
    <from sec="1292130705" usec="0"/>
    <to sec="1292130708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="191.117.162.213"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="195.125.75.215"/>
    </slice>
    <from sec="1292130588" usec="0"/>
    <to sec="1292130601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,504,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_828{
style=filled;
color=gray75;
8160[label="173.46.197.216;10pkt 10fpkt", shape=pentagon, color=darkviolet];
9368[label="173.46.197.216;9pkt 9fpkt", shape=invtriangle, color=brown];
stat828[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.197.216:*, 2.10.140.219:443}[40%]&lt;BR/&gt;{173.46.197.216:*, 220.85.211.31:80}[20%]&lt;BR/&gt;{173.46.197.216:*, 218.98.241.41:80}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (28.9474%)&lt;BR/&gt; 443: (21.0526%)&lt;BR/&gt; 63787: (5.26316%)&lt;BR/&gt; 63700: (5.26316%)&lt;BR/&gt; 63697: (5.26316%)&gt;];
}
8160--9368[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="2.10.140.219" dst_port="443" src_ip="173.46.197.216"/>
      <filter dst_ip="218.98.241.41" dst_port="80" src_ip="173.46.197.216"/>
      <filter dst_ip="220.85.211.31" dst_port="80" src_ip="173.46.197.216"/>
    </slice>
    <from sec="1292130215" usec="0"/>
    <to sec="1292130251" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_829{
style=filled;
color=gray75;
8161[label="8.49.206.216;1pkt 1fpkt", shape=pentagon, color=darkviolet];
9369[label="8.49.206.216;1pkt 1fpkt", shape=invtriangle, color=brown];
stat829[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.49.206.216:57796, 213.240.193.144:60475}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 60475: (50%)&lt;BR/&gt; 57796: (50%)&gt;];
}
8161--9369[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.193.144" dst_port="60475" src_ip="8.49.206.216" src_port="57796"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="177.150.39.217"/>
    </slice>
    <from sec="1292130313" usec="0"/>
    <to sec="1292130328" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="36.170.224.217"/>
    </slice>
    <from sec="1292130808" usec="0"/>
    <to sec="1292130810" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="216.101.128.220"/>
    </slice>
    <from sec="1292130002" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="8.110.60.221"/>
    </slice>
    <from sec="1292130634" usec="0"/>
    <to sec="1292130647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="52.209.232.221"/>
    </slice>
    <from sec="1292130305" usec="0"/>
    <to sec="1292130311" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.821559,2.12558,999,0 0 0 1 0 0 0 0 0 0 1 0 ">
    <description>subgraph cluster_835{
style=filled;
color=gray75;
1988[label="212.73.125.83;d;1377pkt 1377fpkt", shape=diamond, color=yellow];
9392[label="69.88.67.222;264pkt 264fpkt", shape=invtriangle, color=brown];
stat835[shape=component, label=&lt;Rules:&lt;BR/&gt;{59.21.166.147:*, 212.73.125.83:10021}[22.9614%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10021: (28.9762%)&lt;BR/&gt; 34087: (1.24924%)&lt;BR/&gt; 10100: (1.21877%)&lt;BR/&gt; 10101: (1.12736%)&lt;BR/&gt; 58151: (1.09689%)&gt;];
}
1988--2751[label="0.000726216;1pkt 1fpkt"];
1988--4254[label="0.000726216;1pkt 1fpkt"];
1988--5198[label="0.000726216;1pkt 1fpkt"];
1988--5839[label="0.000726216;1pkt 1fpkt"];
1988--6081[label="0.000726216;1pkt 1fpkt"];
1988--6082[label="0.000726216;1pkt 1fpkt"];
1988--6145[label="0.000726216;1pkt 1fpkt"];
1988--6146[label="0.000726216;1pkt 1fpkt"];
1988--6204[label="0.000726216;1pkt 1fpkt"];
1988--6205[label="0.000726216;1pkt 1fpkt"];
1988--6248[label="0.000726216;1pkt 1fpkt"];
1988--6249[label="0.000726216;1pkt 1fpkt"];
1988--8199[label="0.000726216;1pkt 1fpkt"];
1988--9388[label="0.000726216;1pkt 1fpkt"];
1988--9392[label="0.920455;243pkt 243fpkt"];
1988--9525[label="0.000726216;1pkt 1fpkt"];
1988--9908[label="0.000726216;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.73.125.83" dst_port="10021" src_ip="59.21.166.147"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="44.15.99.223"/>
    </slice>
    <from sec="1292130517" usec="0"/>
    <to sec="1292130532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="209.27.7.225"/>
    </slice>
    <from sec="1292130478" usec="0"/>
    <to sec="1292130491" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="26.100.72.229"/>
    </slice>
    <from sec="1292130506" usec="0"/>
    <to sec="1292130580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,010,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_839{
style=filled;
color=gray75;
8271[label="215.38.187.230;27pkt 27fpkt", shape=pentagon, color=darkviolet];
9419[label="215.38.187.230;27pkt 27fpkt", shape=invtriangle, color=brown];
stat839[shape=component, label=&lt;Rules:&lt;BR/&gt;{215.38.187.230:25, *:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (100%)&gt;];
}
8271--9419[label="1;27pkt 27fpkt"];
</description>
    <slice>
      <filter dst_port="25" src_ip="215.38.187.230" src_port="25"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="206.118.163.232"/>
    </slice>
    <from sec="1292130537" usec="0"/>
    <to sec="1292130552" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_841{
style=filled;
color=gray75;
8297[label="131.19.220.233;41pkt 41fpkt", shape=pentagon, color=darkviolet];
9436[label="131.19.220.233;42pkt 42fpkt", shape=invtriangle, color=brown];
stat841[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.19.220.233:38834, *:*}[80.9524%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 38834: (40.3614%)&lt;BR/&gt; 443: (3.61446%)&lt;BR/&gt; 49545: (2.40964%)&lt;BR/&gt; 24828: (2.40964%)&lt;BR/&gt; 12350: (2.40964%)&gt;];
}
8297--9436[label="1;41pkt 41fpkt"];
</description>
    <slice>
      <filter src_ip="131.19.220.233" src_port="38834"/>
    </slice>
    <from sec="1292130021" usec="0"/>
    <to sec="1292130854" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="20.74.27.234"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="53.10.210.235"/>
    </slice>
    <from sec="1292130131" usec="0"/>
    <to sec="1292130320" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="18.44.216.236"/>
    </slice>
    <from sec="1292130445" usec="0"/>
    <to sec="1292130454" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,999,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_845{
style=filled;
color=gray75;
8320[label="196.72.8.237;6pkt 6fpkt", shape=pentagon, color=darkviolet];
9448[label="196.72.8.237;6pkt 6fpkt", shape=invtriangle, color=brown];
stat845[shape=component, label=&lt;Rules:&lt;BR/&gt;{196.72.8.237:995, 133.162.77.177:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 995: (50%)&lt;BR/&gt; 4627: (8.33333%)&lt;BR/&gt; 4626: (8.33333%)&lt;BR/&gt; 4625: (8.33333%)&lt;BR/&gt; 4619: (8.33333%)&gt;];
}
8320--9448[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="133.162.77.177" src_ip="196.72.8.237" src_port="995"/>
    </slice>
    <from sec="1292130101" usec="0"/>
    <to sec="1292130828" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,020,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="147.29.76.239"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="13.228.209.239"/>
    </slice>
    <from sec="1292130855" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="29.152.8.241"/>
    </slice>
    <from sec="1292130438" usec="0"/>
    <to sec="1292130506" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="15.237.192.242"/>
    </slice>
    <from sec="1292130536" usec="0"/>
    <to sec="1292130557" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.140.202.242"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_851{
style=filled;
color=gray75;
8377[label="173.46.109.243;4pkt 4fpkt", shape=pentagon, color=darkviolet];
9467[label="173.46.109.243;4pkt 4fpkt", shape=invtriangle, color=brown];
stat851[shape=component, label=&lt;Rules:&lt;BR/&gt;{173.46.109.243:61944, 9.56.92.45:80}[25%]&lt;BR/&gt;{173.46.109.243:61987, 9.56.92.45:80}[25%]&lt;BR/&gt;{173.46.109.243:61975, 8.34.187.128:80}[25%]&lt;BR/&gt;{173.46.109.243:61988, 8.34.187.128:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61988: (12.5%)&lt;BR/&gt; 61987: (12.5%)&lt;BR/&gt; 61975: (12.5%)&lt;BR/&gt; 61944: (12.5%)&gt;];
}
8377--9467[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="8.34.187.128" dst_port="80" src_ip="173.46.109.243" src_port="61988"/>
      <filter dst_ip="8.34.187.128" dst_port="80" src_ip="173.46.109.243" src_port="61975"/>
      <filter dst_ip="9.56.92.45" dst_port="80" src_ip="173.46.109.243" src_port="61987"/>
      <filter dst_ip="9.56.92.45" dst_port="80" src_ip="173.46.109.243" src_port="61944"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.568941,2.14347,503,0 0 0 0 0 0 0 0 0 1 1 0 ">
    <description>subgraph cluster_852{
style=filled;
color=gray75;
8398[label="69.112.24.245;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9478[label="69.112.24.245;2pkt 2fpkt", shape=invtriangle, color=brown];
stat852[shape=component, label=&lt;Rules:&lt;BR/&gt;{69.112.24.245:43159, 213.240.197.22:80}[50%]&lt;BR/&gt;{69.112.24.245:53664, 213.240.201.171:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 53664: (25%)&lt;BR/&gt; 43159: (25%)&gt;];
}
8398--9478[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="213.240.201.171" dst_port="80" src_ip="69.112.24.245" src_port="53664"/>
      <filter dst_ip="213.240.197.22" dst_port="80" src_ip="69.112.24.245" src_port="43159"/>
    </slice>
    <from sec="1292130865" usec="0"/>
    <to sec="1292130870" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.902013,2.12809,901,0 0 0 0 0 0 0 0 0 1 1 1 ">
    <description>subgraph cluster_853{
style=filled;
color=gray75;
8423[label="42.2.163.249;2pkt 2fpkt", shape=pentagon, color=darkviolet];
9491[label="42.2.163.249;2pkt 2fpkt", shape=invtriangle, color=brown];
9952[label="42.2.163.249;2pkt 2fpkt", shape=invhouse, color=bisque];
stat853[shape=component, label=&lt;Rules:&lt;BR/&gt;{42.2.163.249:53, 212.68.6.17:47456}[50%]&lt;BR/&gt;{42.2.163.249:53, 212.68.6.17:51146}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (50%)&lt;BR/&gt; 51146: (25%)&lt;BR/&gt; 47456: (25%)&gt;];
}
8423--9491[label="1;2pkt 2fpkt"];
8423--9952[label="1;2pkt 2fpkt"];
9491--9952[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.6.17" dst_port="51146" src_ip="42.2.163.249" src_port="53"/>
      <filter dst_ip="212.68.6.17" dst_port="47456" src_ip="42.2.163.249" src_port="53"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,999,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="34.32.243.253"/>
    </slice>
    <from sec="1292130011" usec="0"/>
    <to sec="1292130363" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.596843,2.17709,503,0 0 0 0 0 0 0 0 0 0 1 0 ">
    <slice>
      <filter src_ip="25.145.50.255"/>
    </slice>
    <from sec="1292130402" usec="0"/>
    <to sec="1292130431" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.68.10.13"/>
    </slice>
    <from sec="1292130783" usec="0"/>
    <to sec="1292130795" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="30.238.201.17"/>
    </slice>
    <from sec="1292130477" usec="0"/>
    <to sec="1292130484" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="1.32623,2.06209,999,0 0 0 1 1 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_858{
style=filled;
color=gray75;
2462[label="174.41.130.147;d;26pkt 26fpkt", shape=diamond, color=yellow];
5090[label="174.41.130.147;d;23pkt 23fpkt", shape=hexagon, color=black];
8536[label="64.78.253.17;1pkt 1fpkt", shape=invtriangle, color=brown];
9543[label="64.78.253.17;1pkt 1fpkt", shape=invhouse, color=bisque];
stat858[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 174.41.130.147:17368}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 17368: (50%)&lt;BR/&gt; 36316: (2.94118%)&lt;BR/&gt; 51425: (1.96078%)&lt;BR/&gt; 41415: (1.96078%)&lt;BR/&gt; 27044: (1.96078%)&gt;];
}
2462--5090[label="1;23pkt 23fpkt"];
2462--8536[label="1;1pkt 1fpkt"];
2462--9543[label="1;1pkt 1fpkt"];
8536--9543[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="174.41.130.147" dst_port="17368"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.166.108.24"/>
    </slice>
    <from sec="1292130497" usec="0"/>
    <to sec="1292130510" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.31.84.28"/>
    </slice>
    <from sec="1292130336" usec="0"/>
    <to sec="1292130343" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="178.171.245.28"/>
    </slice>
    <from sec="1292130048" usec="0"/>
    <to sec="1292130058" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="3.176.161.33"/>
    </slice>
    <from sec="1292130104" usec="0"/>
    <to sec="1292130108" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="163.237.112.35"/>
    </slice>
    <from sec="1292130552" usec="0"/>
    <to sec="1292130556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="38.41.71.42"/>
    </slice>
    <from sec="1292130028" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="183.75.236.43"/>
    </slice>
    <from sec="1292130391" usec="0"/>
    <to sec="1292130426" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.131.190.45"/>
    </slice>
    <from sec="1292130693" usec="0"/>
    <to sec="1292130864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.102.238.45"/>
    </slice>
    <from sec="1292130457" usec="0"/>
    <to sec="1292130486" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="88.82.168.46"/>
    </slice>
    <from sec="1292130575" usec="0"/>
    <to sec="1292130586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919868,2.16195,503,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_869{
style=filled;
color=gray75;
8702[label="35.209.28.56;13pkt 13fpkt", shape=invtriangle, color=brown];
9612[label="35.209.28.56;12pkt 12fpkt", shape=invhouse, color=bisque];
stat869[shape=component, label=&lt;Rules:&lt;BR/&gt;{35.209.28.56:*, 173.46.150.172:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1298: (4%)&lt;BR/&gt; 1296: (4%)&lt;BR/&gt; 1267: (4%)&lt;BR/&gt; 1266: (4%)&gt;];
}
8702--9612[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="173.46.150.172" dst_port="80" src_ip="35.209.28.56"/>
    </slice>
    <from sec="1292130888" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="36.217.27.61"/>
    </slice>
    <from sec="1292130608" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.793452,2.15034,504,0 0 0 0 0 0 0 0 0 1 0 1 ">
    <description>subgraph cluster_871{
style=filled;
color=gray75;
6859[label="133.141.131.66;9pkt 9fpkt", shape=pentagon, color=darkviolet];
9629[label="133.141.131.66;8pkt 8fpkt", shape=invhouse, color=bisque];
stat871[shape=component, label=&lt;Rules:&lt;BR/&gt;{133.141.131.66:443, 67.189.14.71:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (50%)&lt;BR/&gt; 34729: (5.88235%)&lt;BR/&gt; 34724: (5.88235%)&lt;BR/&gt; 34723: (5.88235%)&lt;BR/&gt; 34653: (5.88235%)&gt;];
}
6859--9629[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="67.189.14.71" src_ip="133.141.131.66" src_port="443"/>
    </slice>
    <from sec="1292130001" usec="0"/>
    <to sec="1292130632" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="207.242.127.68"/>
    </slice>
    <from sec="1292130357" usec="0"/>
    <to sec="1292130370" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.167.138.71"/>
    </slice>
    <from sec="1292130472" usec="0"/>
    <to sec="1292130483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="158.112.202.72"/>
    </slice>
    <from sec="1292130614" usec="0"/>
    <to sec="1292130814" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="179.79.183.74"/>
    </slice>
    <from sec="1292130487" usec="0"/>
    <to sec="1292130498" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="155.31.77.78"/>
    </slice>
    <from sec="1292130541" usec="0"/>
    <to sec="1292130544" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="203.183.44.86"/>
    </slice>
    <from sec="1292130745" usec="0"/>
    <to sec="1292130751" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="177.54.200.87"/>
    </slice>
    <from sec="1292130233" usec="0"/>
    <to sec="1292130243" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="5.61.179.93"/>
    </slice>
    <from sec="1292130008" usec="0"/>
    <to sec="1292130895" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.218.218.99"/>
    </slice>
    <from sec="1292130389" usec="0"/>
    <to sec="1292130395" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.120.226.99"/>
    </slice>
    <from sec="1292130111" usec="0"/>
    <to sec="1292130594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,901,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="39.132.216.100"/>
    </slice>
    <from sec="1292130900" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="15.131.132.106"/>
    </slice>
    <from sec="1292130601" usec="0"/>
    <to sec="1292130634" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.244.231.112"/>
    </slice>
    <from sec="1292130576" usec="0"/>
    <to sec="1292130580" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="177.161.217.113"/>
    </slice>
    <from sec="1292130119" usec="0"/>
    <to sec="1292130123" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="100.187.84.117"/>
    </slice>
    <from sec="1292130645" usec="0"/>
    <to sec="1292130731" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.13.194.118"/>
    </slice>
    <from sec="1292130726" usec="0"/>
    <to sec="1292130755" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="190.64.134.123"/>
    </slice>
    <from sec="1292130563" usec="0"/>
    <to sec="1292130882" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.919868,2.16195,020,0 0 0 0 0 0 0 0 0 0 1 1 ">
    <description>subgraph cluster_890{
style=filled;
color=gray75;
8983[label="155.169.229.123;1pkt 1fpkt", shape=invtriangle, color=brown];
9743[label="155.169.229.123;1pkt 1fpkt", shape=invhouse, color=bisque];
stat890[shape=component, label=&lt;Rules:&lt;BR/&gt;{155.169.229.123:0, 212.68.6.224:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
8983--9743[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="212.68.6.224" src_ip="155.169.229.123"/>
    </slice>
    <from sec="1292130851" usec="0"/>
    <to sec="1292130864" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.236.55.130"/>
    </slice>
    <from sec="1292130049" usec="0"/>
    <to sec="1292130052" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.1.8.134"/>
    </slice>
    <from sec="1292130710" usec="0"/>
    <to sec="1292130880" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.120.226.137"/>
    </slice>
    <from sec="1292130160" usec="0"/>
    <to sec="1292130766" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="109.68.6.141"/>
    </slice>
    <from sec="1292130177" usec="0"/>
    <to sec="1292130190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="217.66.54.144"/>
    </slice>
    <from sec="1292130605" usec="0"/>
    <to sec="1292130609" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="21.25.12.149"/>
    </slice>
    <from sec="1292130844" usec="0"/>
    <to sec="1292130857" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="65.208.112.153"/>
    </slice>
    <from sec="1292130576" usec="0"/>
    <to sec="1292130586" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="213.240.193.153"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130901" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="66.239.35.154"/>
    </slice>
    <from sec="1292130004" usec="0"/>
    <to sec="1292130898" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.86.218.157"/>
    </slice>
    <from sec="1292130778" usec="0"/>
    <to sec="1292130792" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="18.66.1.158"/>
    </slice>
    <from sec="1292130504" usec="0"/>
    <to sec="1292130516" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="177.15.1.160"/>
    </slice>
    <from sec="1292130538" usec="0"/>
    <to sec="1292130553" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="28.137.40.160"/>
    </slice>
    <from sec="1292130018" usec="0"/>
    <to sec="1292130897" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="215.120.226.160"/>
    </slice>
    <from sec="1292130202" usec="0"/>
    <to sec="1292130707" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="12.53.102.162"/>
    </slice>
    <from sec="1292130062" usec="0"/>
    <to sec="1292130076" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="31.181.74.171"/>
    </slice>
    <from sec="1292130819" usec="0"/>
    <to sec="1292130883" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="14.235.8.186"/>
    </slice>
    <from sec="1292130464" usec="0"/>
    <to sec="1292130494" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="194.105.96.186"/>
    </slice>
    <from sec="1292130085" usec="0"/>
    <to sec="1292130087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="192.200.83.188"/>
    </slice>
    <from sec="1292130537" usec="0"/>
    <to sec="1292130539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="16.217.88.196"/>
    </slice>
    <from sec="1292130092" usec="0"/>
    <to sec="1292130099" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.1.8.199"/>
    </slice>
    <from sec="1292130027" usec="0"/>
    <to sec="1292130087" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.102.161.200"/>
    </slice>
    <from sec="1292130436" usec="0"/>
    <to sec="1292130450" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.155.89.204"/>
    </slice>
    <from sec="1292130177" usec="0"/>
    <to sec="1292130190" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="64.108.182.206"/>
    </slice>
    <from sec="1292130200" usec="0"/>
    <to sec="1292130213" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="26.202.142.209"/>
    </slice>
    <from sec="1292130533" usec="0"/>
    <to sec="1292130537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="216.222.53.210"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130080" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="175.208.177.210"/>
    </slice>
    <from sec="1292130694" usec="0"/>
    <to sec="1292130699" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="35.140.134.213"/>
    </slice>
    <from sec="1292130705" usec="0"/>
    <to sec="1292130708" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="22.168.12.217"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130900" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="81.224.209.219"/>
    </slice>
    <from sec="1292130740" usec="0"/>
    <to sec="1292130744" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="8.110.60.221"/>
    </slice>
    <from sec="1292130634" usec="0"/>
    <to sec="1292130647" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="122.22.25.223"/>
    </slice>
    <from sec="1292130822" usec="0"/>
    <to sec="1292130836" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="44.15.99.223"/>
    </slice>
    <from sec="1292130517" usec="0"/>
    <to sec="1292130532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="193.1.8.224"/>
    </slice>
    <from sec="1292130729" usec="0"/>
    <to sec="1292130742" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="25.165.208.231"/>
    </slice>
    <from sec="1292130000" usec="0"/>
    <to sec="1292130079" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="200.2.130.236"/>
    </slice>
    <from sec="1292130316" usec="0"/>
    <to sec="1292130336" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="187.86.53.239"/>
    </slice>
    <from sec="1292130483" usec="0"/>
    <to sec="1292130487" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="147.29.76.239"/>
    </slice>
    <from sec="1292130003" usec="0"/>
    <to sec="1292130195" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,503,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="13.228.209.239"/>
    </slice>
    <from sec="1292130855" usec="0"/>
    <to sec="1292130872" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="23.156.97.243"/>
    </slice>
    <from sec="1292130794" usec="0"/>
    <to sec="1292130806" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,999,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="214.91.119.244"/>
    </slice>
    <from sec="1292130608" usec="0"/>
    <to sec="1292130638" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.813692,2.18386,020,0 0 0 0 0 0 0 0 0 0 0 1 ">
    <slice>
      <filter src_ip="197.192.180.246"/>
    </slice>
    <from sec="1292130798" usec="0"/>
    <to sec="1292130811" usec="0"/>
  </anomaly>

</admd:annotation>
