<?xml version="1.0" encoding="UTF-8" standalone="no" ?>
<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">

  <anomaly type="notice" value="0.612778,1.03854,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_35{
style=filled;
color=gray75;
251[label="24.66.221.211s;1pkt 1fpkt", shape=rectangle, color=red];
766[label="198.60.8.208;d;8pkt 8fpkt", shape=diamond, color=yellow];
768[label="24.66.221.211;s;8pkt 8fpkt", shape=diamond, color=yellow];
9318[label="198.60.8.208;d;6pkt 6fpkt", shape=hexagon, color=black];
stat35[shape=component, label=&lt;Rules:&lt;BR/&gt;{24.66.221.211:8002, 198.60.8.208:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8002: (50%)&lt;BR/&gt; 1833: (8.69565%)&lt;BR/&gt; 4540: (6.52174%)&lt;BR/&gt; 2160: (6.52174%)&lt;BR/&gt; 2159: (6.52174%)&gt;];
}
251--766[label="1;1pkt 1fpkt"];
251--768[label="1;1pkt 1fpkt"];
251--9318[label="1;1pkt 1fpkt"];
766--768[label="1;8pkt 8fpkt"];
766--9318[label="1;6pkt 6fpkt"];
768--9318[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.8.208" src_ip="24.66.221.211" src_port="8002"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.49.8.56"/>
      <from sec="1296623181" usec="0"/>
      <to sec="1296623186" usec="0"/>
    </slice>
    <from sec="1296623181" usec="0"/>
    <to sec="1296623186" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_37{
style=filled;
color=gray75;
19[label="142.21.62.17s;1pkt 1fpkt", shape=rectangle, color=red];
778[label="204.249.238.215;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat37[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.62.17:63561, 204.249.238.215:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63561: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
19--778[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.249.238.215" dst_port="80" src_ip="142.21.62.17" src_port="63561"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623582" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_38{
style=filled;
color=gray75;
190[label="171.197.144.155s;1pkt 1fpkt", shape=rectangle, color=red];
816[label="202.92.49.185;d;1pkt 1fpkt", shape=diamond, color=yellow];
817[label="171.197.144.155;s;12pkt 12fpkt", shape=diamond, color=yellow];
stat38[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.144.155:*, 157.143.85.91:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.4286%)&lt;BR/&gt; 1156: (10.7143%)&lt;BR/&gt; 137: (7.14286%)&lt;BR/&gt; 1181: (3.57143%)&lt;BR/&gt; 1175: (3.57143%)&gt;];
}
190--816[label="1;1pkt 1fpkt"];
190--817[label="1;1pkt 1fpkt"];
816--817[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="157.143.85.91" dst_port="80" src_ip="171.197.144.155"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296622935" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_39{
style=filled;
color=gray75;
885[label="198.60.8.233;s;1pkt 1fpkt", shape=diamond, color=yellow];
886[label="15.28.8.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
10134[label="15.28.8.8;d;1pkt 1fpkt", shape=hexagon, color=black];
10535[label="198.60.8.233;s;1pkt 1fpkt", shape=hexagon, color=black];
stat39[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.8.233:1290, 15.28.8.8:9030}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9030: (50%)&lt;BR/&gt; 1290: (50%)&gt;];
}
885--886[label="1;1pkt 1fpkt"];
885--10134[label="1;1pkt 1fpkt"];
885--10535[label="1;1pkt 1fpkt"];
886--10134[label="1;1pkt 1fpkt"];
886--10535[label="1;1pkt 1fpkt"];
10134--10535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="15.28.8.8" dst_port="9030" src_ip="198.60.8.233" src_port="1290"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_40{
style=filled;
color=gray75;
1154[label="193.140.7.56;d;1pkt 1fpkt", shape=diamond, color=yellow];
1155[label="171.197.69.11;s;2pkt 2fpkt", shape=diamond, color=yellow];
8213[label="171.197.69.11;s;2pkt 2fpkt", shape=hexagon, color=black];
stat40[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.69.11:58986, 193.140.7.56:9418}[50%]&lt;BR/&gt;{171.197.69.11:123, 27.254.112.216:123}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 123: (40%)&lt;BR/&gt; 58986: (30%)&lt;BR/&gt; 9418: (30%)&gt;];
}
1154--1155[label="1;1pkt 1fpkt"];
1154--8213[label="1;1pkt 1fpkt"];
1155--8213[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="27.254.112.216" dst_port="123" src_ip="171.197.69.11" src_port="123"/>
      <filter dst_ip="193.140.7.56" dst_port="9418" src_ip="171.197.69.11" src_port="58986"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623337" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.10.142.98"/>
      <from sec="1296623463" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623463" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_42{
style=filled;
color=gray75;
4658[label="199.107.145.227;s;764pkt 764fpkt", shape=diamond, color=yellow];
stat42[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.145.227:2117, *:*}[96.0733%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2117: (48.0366%)&lt;BR/&gt; 443: (1.76702%)&lt;BR/&gt; 80: (0.196335%)&lt;BR/&gt; 58135: (0.13089%)&lt;BR/&gt; 45974: (0.13089%)&gt;];
}
4658--5395[label="0.00671141;1pkt 1fpkt"];
4658--11990[label="0.0013089;1pkt 1fpkt"];
4658--12002[label="0.0013089;1pkt 1fpkt"];
4658--12003[label="0.0026178;2pkt 2fpkt"];
4658--12027[label="0.0013089;1pkt 1fpkt"];
4658--12043[label="0.0013089;1pkt 1fpkt"];
4658--12099[label="0.0013089;1pkt 1fpkt"];
4658--12100[label="0.0026178;2pkt 2fpkt"];
4658--12124[label="0.0013089;1pkt 1fpkt"];
4658--12136[label="0.0013089;1pkt 1fpkt"];
4658--12188[label="0.0013089;1pkt 1fpkt"];
4658--12189[label="0.0026178;2pkt 2fpkt"];
4658--12212[label="0.0013089;1pkt 1fpkt"];
4658--12223[label="0.0013089;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.145.227" src_port="2117"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_43{
style=filled;
color=gray75;
1762[label="140.230.70.134;d;6pkt 6fpkt", shape=diamond, color=yellow];
1859[label="15.28.39.216;s;2pkt 2fpkt", shape=diamond, color=yellow];
8280[label="140.230.70.134;d;2pkt 2fpkt", shape=hexagon, color=black];
10297[label="15.28.39.216;s;1pkt 1fpkt", shape=hexagon, color=black];
stat43[shape=component, label=&lt;Rules:&lt;BR/&gt;{15.28.39.213:80, 140.230.70.134:*}[66.6667%]&lt;BR/&gt;{15.28.39.216:9010, 140.230.70.134:*}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9010: (27.2727%)&lt;BR/&gt; 80: (22.7273%)&lt;BR/&gt; 2197: (18.1818%)&lt;BR/&gt; 2201: (9.09091%)&lt;BR/&gt; 2196: (9.09091%)&gt;];
}
1762--1859[label="1;2pkt 2fpkt"];
1762--8280[label="1;2pkt 2fpkt"];
1762--10297[label="1;1pkt 1fpkt"];
1762--11966[label="0.166667;1pkt 1fpkt"];
1762--12072[label="0.166667;1pkt 1fpkt"];
1762--12165[label="0.166667;1pkt 1fpkt"];
1859--8280[label="0.5;1pkt 1fpkt"];
1859--10297[label="1;1pkt 1fpkt"];
8280--10297[label="1;1pkt 1fpkt"];
8280--11966[label="0.5;1pkt 1fpkt"];
8280--12072[label="0.5;1pkt 1fpkt"];
8280--12165[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.230.70.134" src_ip="15.28.39.213" src_port="80"/>
      <filter dst_ip="140.230.70.134" src_ip="15.28.39.216" src_port="9010"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_44{
style=filled;
color=gray75;
90[label="142.21.72.79s;1pkt 1fpkt", shape=rectangle, color=red];
993[label="142.21.72.79;s;41pkt 41fpkt", shape=diamond, color=yellow];
994[label="31.9.168.45;d;1pkt 1fpkt", shape=diamond, color=yellow];
8195[label="31.9.168.45;d;1pkt 1fpkt", shape=hexagon, color=black];
stat44[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.72.79:*, 193.212.21.131:80}[51.2195%]&lt;BR/&gt;{142.21.72.79:*, 9.2.90.99:80}[39.0244%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1818%)&lt;BR/&gt; 50201: (4.54545%)&lt;BR/&gt; 1723: (4.54545%)&lt;BR/&gt; 52098: (1.13636%)&lt;BR/&gt; 52097: (1.13636%)&gt;];
}
90--993[label="1;1pkt 1fpkt"];
90--994[label="1;1pkt 1fpkt"];
90--8195[label="1;1pkt 1fpkt"];
993--994[label="1;1pkt 1fpkt"];
993--3112[label="0.512195;21pkt 21fpkt"];
993--8195[label="1;1pkt 1fpkt"];
993--9083[label="0.292683;12pkt 12fpkt"];
993--11990[label="0.097561;4pkt 4fpkt"];
993--12002[label="0.121951;5pkt 5fpkt"];
993--12027[label="0.121951;5pkt 5fpkt"];
993--12042[label="0.0487805;2pkt 2fpkt"];
993--12099[label="0.121951;5pkt 5fpkt"];
993--12124[label="0.121951;5pkt 5fpkt"];
993--12135[label="0.0487805;2pkt 2fpkt"];
993--12188[label="0.121951;5pkt 5fpkt"];
993--12212[label="0.121951;5pkt 5fpkt"];
993--12222[label="0.0487805;2pkt 2fpkt"];
994--8195[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.212.21.131" dst_port="80" src_ip="142.21.72.79"/>
      <filter dst_ip="9.2.90.99" dst_port="80" src_ip="142.21.72.79"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_45{
style=filled;
color=gray75;
477[label="142.21.192.107s;2pkt 2fpkt", shape=rectangle, color=red];
2238[label="144.130.106.224;d;5pkt 5fpkt", shape=diamond, color=yellow];
2239[label="142.21.192.107;s;13pkt 13fpkt", shape=diamond, color=yellow];
stat45[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.192.107:*, 144.130.106.224:80}[38.4615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.5%)&lt;BR/&gt; 60284: (7.5%)&lt;BR/&gt; 60283: (7.5%)&lt;BR/&gt; 60303: (5%)&lt;BR/&gt; 60302: (5%)&gt;];
}
477--2238[label="1;2pkt 2fpkt"];
477--2239[label="1;2pkt 2fpkt"];
2238--2239[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="144.130.106.224" dst_port="80" src_ip="142.21.192.107"/>
    </slice>
    <from sec="1296622830" usec="0"/>
    <to sec="1296623512" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="204.143.24.41"/>
      <from sec="1296622854" usec="0"/>
      <to sec="1296622943" usec="0"/>
    </slice>
    <from sec="1296622854" usec="0"/>
    <to sec="1296622943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_47{
style=filled;
color=gray75;
1112[label="172.192.68.46;s;1165pkt 1165fpkt", shape=diamond, color=yellow];
2326[label="153.153.226.102;d;1pkt 1fpkt", shape=diamond, color=yellow];
8649[label="153.153.226.102;d;1pkt 1fpkt", shape=hexagon, color=black];
stat47[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.192.68.46:0, *:0}[99.5708%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.5716%)&lt;BR/&gt; 53: (0.214225%)&lt;BR/&gt; 47639: (0.0428449%)&lt;BR/&gt; 46270: (0.0428449%)&lt;BR/&gt; 23808: (0.0428449%)&gt;];
}
1112--2326[label="1;1pkt 1fpkt"];
1112--2757[label="0.00128205;1pkt 1fpkt"];
1112--3658[label="0.00358423;1pkt 1fpkt"];
1112--3741[label="0.00438596;1pkt 1fpkt"];
1112--3842[label="0.00369004;1pkt 1fpkt"];
1112--5173[label="0.00900901;1pkt 1fpkt"];
1112--8649[label="1;1pkt 1fpkt"];
1112--8879[label="0.00128205;1pkt 1fpkt"];
1112--9483[label="0.00369004;1pkt 1fpkt"];
1112--10171[label="0.0104167;1pkt 1fpkt"];
1112--11104[label="0.00358423;1pkt 1fpkt"];
1112--11408[label="0.00438596;1pkt 1fpkt"];
1112--11793[label="0.00719424;1pkt 1fpkt"];
2326--8649[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.192.68.46"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,010,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_48{
style=filled;
color=gray75;
476[label="153.153.226.102s;192pkt 192fpkt", shape=rectangle, color=red];
2327[label="153.153.226.102;s;254pkt 254fpkt", shape=diamond, color=yellow];
stat48[shape=component, label=&lt;Rules:&lt;BR/&gt;{153.153.226.102:*, *:139}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 139: (50%)&lt;BR/&gt; 4214: (0.224215%)&lt;BR/&gt; 4212: (0.224215%)&lt;BR/&gt; 4209: (0.224215%)&lt;BR/&gt; 4207: (0.224215%)&gt;];
}
476--2327[label="1;192pkt 192fpkt"];
</description>
    <slice>
      <filter dst_port="139" src_ip="153.153.226.102"/>
    </slice>
    <from sec="1296622863" usec="0"/>
    <to sec="1296622891" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_49{
style=filled;
color=gray75;
2360[label="12.81.24.141;d;2pkt 2fpkt", shape=diamond, color=yellow];
2361[label="187.165.44.111;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat49[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.145.40:53, 12.81.24.141:35217}[50%]&lt;BR/&gt;{187.165.44.111:80, 12.81.24.141:40939}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40939: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 35217: (16.6667%)&lt;BR/&gt; 53: (16.6667%)&gt;];
}
2360--2361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.24.141" dst_port="40939" src_ip="187.165.44.111" src_port="80"/>
      <filter dst_ip="12.81.24.141" dst_port="35217" src_ip="187.165.145.40" src_port="53"/>
    </slice>
    <from sec="1296622881" usec="0"/>
    <to sec="1296622887" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_50{
style=filled;
color=gray75;
2211[label="172.247.97.160;d;12pkt 12fpkt", shape=diamond, color=yellow];
2370[label="219.58.60.157;s;6pkt 6fpkt", shape=diamond, color=yellow];
9231[label="219.58.60.157;s;6pkt 6fpkt", shape=hexagon, color=black];
stat50[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.58.60.157:*, 172.247.97.160:80}[50%]&lt;BR/&gt;{13.145.17.137:*, 172.247.97.160:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.9167%)&lt;BR/&gt; 25308: (6.25%)&lt;BR/&gt; 25307: (6.25%)&lt;BR/&gt; 25306: (6.25%)&lt;BR/&gt; 25305: (6.25%)&gt;];
}
2211--2370[label="1;6pkt 6fpkt"];
2211--3863[label="0.0833333;1pkt 1fpkt"];
2211--9231[label="1;6pkt 6fpkt"];
2370--9231[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="172.247.97.160" dst_port="80" src_ip="219.58.60.157"/>
      <filter dst_ip="172.247.97.160" dst_port="80" src_ip="13.145.17.137"/>
    </slice>
    <from sec="1296622821" usec="0"/>
    <to sec="1296622947" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_51{
style=filled;
color=gray75;
240[label="142.21.174.196s;2pkt 2fpkt", shape=rectangle, color=red];
2372[label="219.201.144.137;d;1pkt 1fpkt", shape=diamond, color=yellow];
8343[label="219.201.144.137;d;1pkt 1fpkt", shape=hexagon, color=black];
stat51[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.174.196:3896, 219.201.144.137:80}[50%]&lt;BR/&gt;{142.21.174.196:4360, 219.201.144.137:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 4360: (37.5%)&lt;BR/&gt; 3896: (12.5%)&gt;];
}
240--2372[label="1;1pkt 1fpkt"];
240--5006[label="0.5;1pkt 1fpkt"];
240--8343[label="1;1pkt 1fpkt"];
240--11990[label="0.5;1pkt 1fpkt"];
2372--8343[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.144.137" dst_port="80" src_ip="142.21.174.196" src_port="4360"/>
      <filter dst_ip="219.201.144.137" dst_port="80" src_ip="142.21.174.196" src_port="3896"/>
    </slice>
    <from sec="1296623112" usec="0"/>
    <to sec="1296623560" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_52{
style=filled;
color=gray75;
767[label="24.66.221.211;d;10pkt 10fpkt", shape=diamond, color=yellow];
2393[label="198.60.8.208;s;10pkt 10fpkt", shape=diamond, color=yellow];
11098[label="24.66.221.211;d;10pkt 10fpkt", shape=hexagon, color=black];
stat52[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.8.208:*, 24.66.221.211:8002}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8002: (50%)&lt;BR/&gt; 4540: (5%)&lt;BR/&gt; 2167: (5%)&lt;BR/&gt; 2166: (5%)&lt;BR/&gt; 2164: (5%)&gt;];
}
767--2393[label="1;10pkt 10fpkt"];
767--11098[label="1;10pkt 10fpkt"];
2393--11098[label="1;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="24.66.221.211" dst_port="8002" src_ip="198.60.8.208"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,901,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_54{
style=filled;
color=gray75;
1018[label="171.197.67.118;d;2790pkt 2790fpkt", shape=diamond, color=yellow];
2450[label="0.0.0.0;s;3pkt 3fpkt", shape=diamond, color=yellow];
9357[label="171.197.67.118;d;1419pkt 1419fpkt", shape=hexagon, color=black];
stat54[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 171.197.67.118:5027}[96.2007%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5027: (48.1363%)&lt;BR/&gt; 443: (1.08025%)&lt;BR/&gt; 0: (1.02089%)&lt;BR/&gt; 33033: (0.356125%)&lt;BR/&gt; 80: (0.225546%)&gt;];
}
1018--2450[label="1;3pkt 3fpkt"];
1018--9357[label="1;1419pkt 1419fpkt"];
1018--11990[label="0.000716846;2pkt 2fpkt"];
1018--12002[label="0.000716846;2pkt 2fpkt"];
1018--12003[label="0.00637181;17pkt 17fpkt"];
1018--12027[label="0.000716846;2pkt 2fpkt"];
1018--12042[label="0.000358423;1pkt 1fpkt"];
1018--12043[label="0.00286738;8pkt 8fpkt"];
1018--12099[label="0.000716846;2pkt 2fpkt"];
1018--12100[label="0.00637181;17pkt 17fpkt"];
1018--12124[label="0.000716846;2pkt 2fpkt"];
1018--12135[label="0.000358423;1pkt 1fpkt"];
1018--12136[label="0.00286738;8pkt 8fpkt"];
1018--12188[label="0.000716846;2pkt 2fpkt"];
1018--12189[label="0.00637181;17pkt 17fpkt"];
1018--12212[label="0.000716846;2pkt 2fpkt"];
1018--12222[label="0.000358423;1pkt 1fpkt"];
1018--12223[label="0.00286738;8pkt 8fpkt"];
2450--9357[label="1;3pkt 3fpkt"];
9357--11990[label="0.00140944;2pkt 2fpkt"];
9357--12002[label="0.000704722;1pkt 1fpkt"];
9357--12003[label="0.00775194;11pkt 11fpkt"];
9357--12027[label="0.000704722;1pkt 1fpkt"];
9357--12042[label="0.000704722;1pkt 1fpkt"];
9357--12043[label="0.00493305;7pkt 7fpkt"];
9357--12099[label="0.000704722;1pkt 1fpkt"];
9357--12100[label="0.00775194;11pkt 11fpkt"];
9357--12124[label="0.000704722;1pkt 1fpkt"];
9357--12135[label="0.000704722;1pkt 1fpkt"];
9357--12136[label="0.00493305;7pkt 7fpkt"];
9357--12188[label="0.000704722;1pkt 1fpkt"];
9357--12189[label="0.00775194;11pkt 11fpkt"];
9357--12212[label="0.000704722;1pkt 1fpkt"];
9357--12222[label="0.000704722;1pkt 1fpkt"];
9357--12223[label="0.00493305;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.67.118" dst_port="5027"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_55{
style=filled;
color=gray75;
1209[label="73.192.90.15;d;2pkt 2fpkt", shape=diamond, color=yellow];
2494[label="199.107.132.18;s;1093pkt 1093fpkt", shape=diamond, color=yellow];
5552[label="12.109.83.135;d;2pkt 2fpkt", shape=diamond, color=yellow];
8420[label="73.192.90.15;d;1pkt 1fpkt", shape=hexagon, color=black];
stat55[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.132.18:62042, *:*}[59.7438%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 62042: (29.918%)&lt;BR/&gt; 51413: (4.96357%)&lt;BR/&gt; 30426: (1.45719%)&lt;BR/&gt; 16001: (1.32058%)&lt;BR/&gt; 6881: (1.04736%)&gt;];
}
1209--2494[label="1;2pkt 2fpkt"];
1209--8420[label="1;1pkt 1fpkt"];
2494--2718[label="0.020202;2pkt 2fpkt"];
2494--5552[label="1;2pkt 2fpkt"];
2494--8420[label="1;1pkt 1fpkt"];
2494--8863[label="0.0344828;2pkt 2fpkt"];
2494--11729[label="0.0344828;2pkt 2fpkt"];
2494--11989[label="0.000914913;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.132.18" src_port="62042"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_56{
style=filled;
color=gray75;
2519[label="172.0.64.102;d;1240pkt 1240fpkt", shape=diamond, color=yellow];
stat56[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.0.64.102:30036}[94.9194%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30036: (47.4597%)&lt;BR/&gt; 443: (1.89516%)&lt;BR/&gt; 0: (1.12903%)&lt;BR/&gt; 50536: (0.120968%)&lt;BR/&gt; 57794: (0.0806452%)&gt;];
}
2519--12003[label="0.00241935;3pkt 3fpkt"];
2519--12100[label="0.00241935;3pkt 3fpkt"];
2519--12189[label="0.00241935;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.0.64.102" dst_port="30036"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_57{
style=filled;
color=gray75;
1109[label="142.21.174.160;d;60pkt 60fpkt", shape=diamond, color=yellow];
2543[label="199.144.167.199;s;1pkt 1fpkt", shape=diamond, color=yellow];
3524[label="199.144.167.129;s;1pkt 1fpkt", shape=diamond, color=yellow];
4776[label="199.144.170.65;s;3pkt 3fpkt", shape=diamond, color=yellow];
8402[label="199.144.167.199;s;1pkt 1fpkt", shape=hexagon, color=black];
stat57[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 142.21.174.160:5041}[46.6667%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (54.5455%)&lt;BR/&gt; 80: (4.54545%)&lt;BR/&gt; 3724: (3.0303%)&lt;BR/&gt; 1119: (3.0303%)&lt;BR/&gt; 11106: (2.27273%)&gt;];
}
1109--1185[label="0.0166667;1pkt 1fpkt"];
1109--2543[label="1;1pkt 1fpkt"];
1109--3524[label="1;1pkt 1fpkt"];
1109--4776[label="1;3pkt 3fpkt"];
1109--8402[label="1;1pkt 1fpkt"];
1109--11999[label="0.0666667;4pkt 4fpkt"];
1109--12024[label="0.0166667;1pkt 1fpkt"];
1109--12096[label="0.0666667;4pkt 4fpkt"];
1109--12121[label="0.0166667;1pkt 1fpkt"];
1109--12185[label="0.0666667;4pkt 4fpkt"];
1109--12209[label="0.0166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.174.160" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_58{
style=filled;
color=gray75;
1181[label="5.77.88.131;d;1pkt 1fpkt", shape=diamond, color=yellow];
2570[label="171.197.21.147;s;1pkt 1fpkt", shape=diamond, color=yellow];
8414[label="5.77.88.131;d;1pkt 1fpkt", shape=hexagon, color=black];
8415[label="171.197.21.147;s;1pkt 1fpkt", shape=hexagon, color=black];
stat58[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.21.147:51458, 5.77.88.131:8000}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51458: (50%)&lt;BR/&gt; 8000: (50%)&gt;];
}
1181--2570[label="1;1pkt 1fpkt"];
1181--8414[label="1;1pkt 1fpkt"];
1181--8415[label="1;1pkt 1fpkt"];
2570--8414[label="1;1pkt 1fpkt"];
2570--8415[label="1;1pkt 1fpkt"];
8414--8415[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="5.77.88.131" dst_port="8000" src_ip="171.197.21.147" src_port="51458"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="8.47.70.191"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="171.197.29.2"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623446" usec="0"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623446" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_61{
style=filled;
color=gray75;
2648[label="219.135.92.40;d;1pkt 1fpkt", shape=diamond, color=yellow];
2649[label="171.197.204.51;s;4pkt 4fpkt", shape=diamond, color=yellow];
8438[label="171.197.204.51;s;1pkt 1fpkt", shape=hexagon, color=black];
8823[label="219.135.92.40;d;1pkt 1fpkt", shape=hexagon, color=black];
stat61[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.204.51:1069, 219.135.92.40:8292}[25%]&lt;BR/&gt;{171.197.204.51:1203, 140.13.167.70:8294}[25%]&lt;BR/&gt;{171.197.204.51:1205, 140.13.167.70:8294}[25%]&lt;BR/&gt;{171.197.204.51:1207, 140.13.167.70:8294}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8292: (28.5714%)&lt;BR/&gt; 1069: (28.5714%)&lt;BR/&gt; 8294: (21.4286%)&lt;BR/&gt; 1207: (7.14286%)&lt;BR/&gt; 1205: (7.14286%)&gt;];
}
2648--2649[label="1;1pkt 1fpkt"];
2648--8438[label="1;1pkt 1fpkt"];
2648--8823[label="1;1pkt 1fpkt"];
2649--8438[label="1;1pkt 1fpkt"];
2649--8823[label="1;1pkt 1fpkt"];
8438--8823[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.13.167.70" dst_port="8294" src_ip="171.197.204.51" src_port="1207"/>
      <filter dst_ip="140.13.167.70" dst_port="8294" src_ip="171.197.204.51" src_port="1205"/>
      <filter dst_ip="140.13.167.70" dst_port="8294" src_ip="171.197.204.51" src_port="1203"/>
      <filter dst_ip="219.135.92.40" dst_port="8292" src_ip="171.197.204.51" src_port="1069"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_63{
style=filled;
color=gray75;
1078[label="198.48.48.248;d;719pkt 719fpkt", shape=diamond, color=yellow];
2523[label="219.214.62.213;s;374pkt 374fpkt", shape=diamond, color=yellow];
2934[label="128.139.42.65;s;339pkt 339fpkt", shape=diamond, color=yellow];
8393[label="219.214.62.213;s;333pkt 333fpkt", shape=hexagon, color=black];
9363[label="198.48.48.248;d;337pkt 337fpkt", shape=hexagon, color=black];
10264[label="128.139.42.65;s;259pkt 259fpkt", shape=hexagon, color=black];
stat63[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.214.62.213:25, 198.48.48.248:*}[52.0167%]&lt;BR/&gt;{128.139.42.65:25, 198.48.48.248:*}[47.1488%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (49.7882%)&lt;BR/&gt; 123: (0.16942%)&lt;BR/&gt; 59858: (0.0847099%)&lt;BR/&gt; 55403: (0.0847099%)&lt;BR/&gt; 55401: (0.0847099%)&gt;];
}
1078--1381[label="0.00139082;1pkt 1fpkt"];
1078--2523[label="1;374pkt 374fpkt"];
1078--2934[label="1;339pkt 339fpkt"];
1078--8237[label="0.00139082;1pkt 1fpkt"];
1078--8393[label="1;333pkt 333fpkt"];
1078--9363[label="1;337pkt 337fpkt"];
1078--10264[label="1;259pkt 259fpkt"];
1078--11967[label="0.00139082;1pkt 1fpkt"];
1078--11999[label="0.00278164;2pkt 2fpkt"];
1078--12073[label="0.00139082;1pkt 1fpkt"];
1078--12096[label="0.00278164;2pkt 2fpkt"];
1078--12185[label="0.00278164;2pkt 2fpkt"];
2523--8393[label="1;333pkt 333fpkt"];
2523--9363[label="0.504451;170pkt 170fpkt"];
2934--9363[label="0.48368;163pkt 163fpkt"];
2934--10264[label="1;259pkt 259fpkt"];
8393--9363[label="0.510511;170pkt 170fpkt"];
9363--10264[label="0.629344;163pkt 163fpkt"];
9363--11967[label="0.00296736;1pkt 1fpkt"];
9363--12073[label="0.00296736;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.48.248" src_ip="219.214.62.213" src_port="25"/>
      <filter dst_ip="198.48.48.248" src_ip="128.139.42.65" src_port="25"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_64{
style=filled;
color=gray75;
3087[label="34.182.22.173;d;1pkt 1fpkt", shape=diamond, color=yellow];
3088[label="172.5.87.210;s;2pkt 2fpkt", shape=diamond, color=yellow];
5538[label="36.22.36.159;d;1pkt 1fpkt", shape=diamond, color=yellow];
10757[label="172.5.87.210;s;2pkt 2fpkt", shape=hexagon, color=black];
stat64[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.87.210:10657, 36.22.36.159:2897}[50%]&lt;BR/&gt;{172.5.87.210:10657, 34.182.22.173:62202}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10657: (50%)&lt;BR/&gt; 62202: (25%)&lt;BR/&gt; 2897: (25%)&gt;];
}
3087--3088[label="1;1pkt 1fpkt"];
3087--10757[label="1;1pkt 1fpkt"];
3088--5538[label="1;1pkt 1fpkt"];
3088--10757[label="1;2pkt 2fpkt"];
5538--10757[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.182.22.173" dst_port="62202" src_ip="172.5.87.210" src_port="10657"/>
      <filter dst_ip="36.22.36.159" dst_port="2897" src_ip="172.5.87.210" src_port="10657"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="4.59.58.42"/>
      <from sec="1296623487" usec="0"/>
      <to sec="1296623626" usec="0"/>
    </slice>
    <from sec="1296623487" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_68{
style=filled;
color=gray75;
2276[label="198.5.130.220;s;9pkt 9fpkt", shape=diamond, color=yellow];
3299[label="142.21.217.114;d;35pkt 35fpkt", shape=diamond, color=yellow];
3464[label="198.5.130.216;s;13pkt 13fpkt", shape=diamond, color=yellow];
stat68[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.5.130.216:80, 142.21.217.114:*}[37.1429%]&lt;BR/&gt;{*:443, 142.21.217.114:*}[37.1429%]&lt;BR/&gt;{198.5.130.220:80, 142.21.217.114:*}[25.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.5965%)&lt;BR/&gt; 443: (11.4035%)&lt;BR/&gt; 58617: (1.75439%)&lt;BR/&gt; 58616: (1.75439%)&lt;BR/&gt; 58615: (1.75439%)&gt;];
}
2276--3299[label="1;9pkt 9fpkt"];
3299--3464[label="1;13pkt 13fpkt"];
3299--3902[label="0.142857;5pkt 5fpkt"];
3299--11163[label="0.142857;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.217.114" src_port="443"/>
      <filter dst_ip="142.21.217.114" src_ip="198.5.130.216" src_port="80"/>
      <filter dst_ip="142.21.217.114" src_ip="198.5.130.220" src_port="80"/>
    </slice>
    <from sec="1296622819" usec="0"/>
    <to sec="1296623150" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="158.178.205.114"/>
      <from sec="1296623095" usec="0"/>
      <to sec="1296623601" usec="0"/>
    </slice>
    <from sec="1296623095" usec="0"/>
    <to sec="1296623601" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="142.21.86.218"/>
      <from sec="1296622889" usec="0"/>
      <to sec="1296622894" usec="0"/>
    </slice>
    <from sec="1296622889" usec="0"/>
    <to sec="1296622894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_71{
style=filled;
color=gray75;
3229[label="172.1.22.43;s;22pkt 22fpkt", shape=diamond, color=yellow];
3505[label="39.136.39.128;d;1pkt 1fpkt", shape=diamond, color=yellow];
8667[label="39.136.39.128;d;2pkt 2fpkt", shape=hexagon, color=black];
9633[label="172.1.22.43;s;22pkt 22fpkt", shape=hexagon, color=black];
stat71[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.22.43:80, 109.98.174.100:*}[63.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8723%)&lt;BR/&gt; 49450: (3.19149%)&lt;BR/&gt; 49424: (3.19149%)&lt;BR/&gt; 49422: (3.19149%)&lt;BR/&gt; 63122: (2.12766%)&gt;];
}
3229--3505[label="1;1pkt 1fpkt"];
3229--8667[label="1;2pkt 2fpkt"];
3229--9633[label="1;22pkt 22fpkt"];
3229--11966[label="0.0909091;2pkt 2fpkt"];
3229--12072[label="0.0909091;2pkt 2fpkt"];
3229--12165[label="0.0909091;2pkt 2fpkt"];
3505--9633[label="1;1pkt 1fpkt"];
8667--9633[label="1;2pkt 2fpkt"];
9633--11966[label="0.0909091;2pkt 2fpkt"];
9633--12072[label="0.0909091;2pkt 2fpkt"];
9633--12165[label="0.0909091;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="109.98.174.100" src_ip="172.1.22.43" src_port="80"/>
    </slice>
    <from sec="1296622806" usec="0"/>
    <to sec="1296623166" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_72{
style=filled;
color=gray75;
3534[label="219.201.144.109;d;1pkt 1fpkt", shape=diamond, color=yellow];
3535[label="172.5.157.182;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat72[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.157.182:61823, 219.201.144.109:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61823: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3534--3535[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.144.109" dst_port="80" src_ip="172.5.157.182" src_port="61823"/>
    </slice>
    <from sec="1296622937" usec="0"/>
    <to sec="1296622942" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_73{
style=filled;
color=gray75;
3555[label="31.144.227.34;d;1pkt 1fpkt", shape=diamond, color=yellow];
3556[label="187.165.60.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat73[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.60.8:80, 31.144.227.34:64896}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 64896: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
3555--3556[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="31.144.227.34" dst_port="64896" src_ip="187.165.60.8" src_port="80"/>
    </slice>
    <from sec="1296622952" usec="0"/>
    <to sec="1296622965" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_75{
style=filled;
color=gray75;
3572[label="172.247.150.168;d;96pkt 96fpkt", shape=diamond, color=yellow];
3593[label="6.49.6.86;s;77pkt 77fpkt", shape=diamond, color=yellow];
10037[label="172.247.150.168;d;96pkt 96fpkt", shape=hexagon, color=black];
stat75[shape=component, label=&lt;Rules:&lt;BR/&gt;{6.49.6.86:80, 172.247.150.168:*}[64.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (41.2639%)&lt;BR/&gt; 443: (8.36431%)&lt;BR/&gt; 123: (0.743494%)&lt;BR/&gt; 51262: (0.557621%)&lt;BR/&gt; 51261: (0.557621%)&gt;];
}
3572--3593[label="1;77pkt 77fpkt"];
3572--5899[label="0.0151515;1pkt 1fpkt"];
3572--5906[label="0.0208333;2pkt 2fpkt"];
3572--7633[label="0.0104167;1pkt 1fpkt"];
3572--10037[label="1;96pkt 96fpkt"];
3572--10753[label="0.0151515;1pkt 1fpkt"];
3572--11988[label="0.104167;10pkt 10fpkt"];
3572--12089[label="0.104167;10pkt 10fpkt"];
3593--10037[label="1;77pkt 77fpkt"];
3593--11988[label="0.038961;3pkt 3fpkt"];
3593--12089[label="0.038961;3pkt 3fpkt"];
10037--10753[label="0.0151515;1pkt 1fpkt"];
10037--11988[label="0.104167;10pkt 10fpkt"];
10037--12089[label="0.104167;10pkt 10fpkt"];
</description>
    <slice>
      <filter dst_ip="172.247.150.168" src_ip="6.49.6.86" src_port="80"/>
    </slice>
    <from sec="1296622960" usec="0"/>
    <to sec="1296623117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_76{
style=filled;
color=gray75;
283[label="171.197.232.250s;2pkt 2fpkt", shape=rectangle, color=red];
3653[label="193.112.208.187;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat76[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.232.250:2782, 193.112.208.187:80}[50%]&lt;BR/&gt;{171.197.232.250:2796, 193.112.208.187:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2796: (25%)&lt;BR/&gt; 2782: (25%)&gt;];
}
283--3653[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="193.112.208.187" dst_port="80" src_ip="171.197.232.250" src_port="2796"/>
      <filter dst_ip="193.112.208.187" dst_port="80" src_ip="171.197.232.250" src_port="2782"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623513" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_77{
style=filled;
color=gray75;
2537[label="198.48.48.151;d;1pkt 1fpkt", shape=diamond, color=yellow];
3674[label="199.104.119.70;s;1pkt 1fpkt", shape=diamond, color=yellow];
8400[label="198.48.48.151;d;1pkt 1fpkt", shape=hexagon, color=black];
stat77[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.104.119.70:0, 198.48.48.151:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2537--3674[label="1;1pkt 1fpkt"];
2537--8400[label="1;1pkt 1fpkt"];
3674--8400[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.48.151" src_ip="199.104.119.70"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_78{
style=filled;
color=gray75;
3757[label="201.156.214.118;d;1663pkt 1663fpkt", shape=diamond, color=yellow];
3758[label="187.165.43.228;s;1610pkt 1610fpkt", shape=diamond, color=yellow];
8859[label="201.156.214.118;d;1663pkt 1663fpkt", shape=hexagon, color=black];
9438[label="187.165.43.228;s;1431pkt 1431fpkt", shape=hexagon, color=black];
stat78[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.43.228:*, 201.156.214.118:80}[96.813%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51055: (0.031412%)&lt;BR/&gt; 51054: (0.031412%)&lt;BR/&gt; 51053: (0.031412%)&lt;BR/&gt; 51052: (0.031412%)&gt;];
}
3757--3758[label="1;1610pkt 1610fpkt"];
3757--8859[label="1;1663pkt 1663fpkt"];
3757--9438[label="1;1431pkt 1431fpkt"];
3757--11990[label="0.0571257;95pkt 95fpkt"];
3757--12002[label="0.0426939;71pkt 71fpkt"];
3757--12027[label="0.0619363;103pkt 103fpkt"];
3757--12099[label="0.0426939;71pkt 71fpkt"];
3757--12124[label="0.0619363;103pkt 103fpkt"];
3757--12188[label="0.0426939;71pkt 71fpkt"];
3757--12212[label="0.0619363;103pkt 103fpkt"];
3758--8859[label="1;1610pkt 1610fpkt"];
3758--9438[label="1;1431pkt 1431fpkt"];
3758--11990[label="0.0571429;92pkt 92fpkt"];
3758--12002[label="0.0428571;69pkt 69fpkt"];
3758--12027[label="0.0614907;99pkt 99fpkt"];
3758--12099[label="0.0428571;69pkt 69fpkt"];
3758--12124[label="0.0614907;99pkt 99fpkt"];
3758--12188[label="0.0428571;69pkt 69fpkt"];
3758--12212[label="0.0614907;99pkt 99fpkt"];
8859--9438[label="1;1431pkt 1431fpkt"];
8859--11990[label="0.0571257;95pkt 95fpkt"];
8859--12002[label="0.0426939;71pkt 71fpkt"];
8859--12027[label="0.0619363;103pkt 103fpkt"];
8859--12099[label="0.0426939;71pkt 71fpkt"];
8859--12124[label="0.0619363;103pkt 103fpkt"];
8859--12188[label="0.0426939;71pkt 71fpkt"];
8859--12212[label="0.0619363;103pkt 103fpkt"];
9438--11990[label="0.0642907;92pkt 92fpkt"];
9438--12002[label="0.048218;69pkt 69fpkt"];
9438--12027[label="0.0691824;99pkt 99fpkt"];
9438--12099[label="0.048218;69pkt 69fpkt"];
9438--12124[label="0.0691824;99pkt 99fpkt"];
9438--12188[label="0.048218;69pkt 69fpkt"];
9438--12212[label="0.0691824;99pkt 99fpkt"];
</description>
    <slice>
      <filter dst_ip="201.156.214.118" dst_port="80" src_ip="187.165.43.228"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,002,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_80{
style=filled;
color=gray75;
3845[label="172.192.75.73;d;63pkt 63fpkt", shape=diamond, color=yellow];
3846[label="41.200.15.88;s;93pkt 93fpkt", shape=diamond, color=yellow];
8924[label="172.192.75.73;d;51pkt 51fpkt", shape=hexagon, color=black];
stat80[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.200.15.88:*, 172.192.75.73:138}[34.4086%]&lt;BR/&gt;{41.200.15.88:*, 172.192.75.73:137}[32.2581%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 137: (28.0193%)&lt;BR/&gt; 138: (21.4976%)&lt;BR/&gt; 64808: (0.724638%)&lt;BR/&gt; 64240: (0.724638%)&lt;BR/&gt; 64217: (0.724638%)&gt;];
}
3845--3846[label="1;63pkt 63fpkt"];
3845--8924[label="1;51pkt 51fpkt"];
3846--8924[label="1;51pkt 51fpkt"];
</description>
    <slice>
      <filter dst_ip="172.192.75.73" dst_port="137" src_ip="41.200.15.88"/>
      <filter dst_ip="172.192.75.73" dst_port="138" src_ip="41.200.15.88"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.197.114.52"/>
      <from sec="1296622801" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_83{
style=filled;
color=gray75;
4053[label="198.60.0.64;s;40pkt 40fpkt", shape=diamond, color=yellow];
4093[label="107.171.117.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
9093[label="198.60.0.64;s;38pkt 38fpkt", shape=hexagon, color=black];
stat83[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.0.64:57942, *:17788}[37.5%]&lt;BR/&gt;{198.60.0.64:*, *:80}[22.5%]&lt;BR/&gt;{198.60.0.64:57942, *:8800}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 57942: (32.9114%)&lt;BR/&gt; 17788: (18.9873%)&lt;BR/&gt; 80: (10.7595%)&lt;BR/&gt; 8800: (10.1266%)&lt;BR/&gt; 8000: (5.06329%)&gt;];
}
4053--4093[label="1;1pkt 1fpkt"];
4053--9093[label="1;38pkt 38fpkt"];
4093--9093[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="198.60.0.64"/>
      <filter dst_port="17788" src_ip="198.60.0.64" src_port="57942"/>
      <filter dst_port="8800" src_ip="198.60.0.64" src_port="57942"/>
    </slice>
    <from sec="1296622805" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_84{
style=filled;
color=gray75;
434[label="171.197.163.218s;10pkt 10fpkt", shape=rectangle, color=red];
4124[label="171.197.163.218;s;120pkt 120fpkt", shape=diamond, color=yellow];
9646[label="171.197.163.218;s;120pkt 120fpkt", shape=hexagon, color=black];
stat84[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.163.218:*, *:80}[95.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48%)&lt;BR/&gt; 993: (0.8%)&lt;BR/&gt; 50104: (0.6%)&lt;BR/&gt; 50103: (0.6%)&lt;BR/&gt; 50102: (0.6%)&gt;];
}
434--4124[label="1;10pkt 10fpkt"];
434--9646[label="1;10pkt 10fpkt"];
4124--9135[label="0.0103093;1pkt 1fpkt"];
4124--9646[label="1;120pkt 120fpkt"];
4124--11990[label="0.158333;19pkt 19fpkt"];
4124--12002[label="0.00833333;1pkt 1fpkt"];
4124--12099[label="0.00833333;1pkt 1fpkt"];
4124--12188[label="0.00833333;1pkt 1fpkt"];
9646--11990[label="0.158333;19pkt 19fpkt"];
9646--12002[label="0.00833333;1pkt 1fpkt"];
9646--12099[label="0.00833333;1pkt 1fpkt"];
9646--12188[label="0.00833333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.163.218"/>
    </slice>
    <from sec="1296622809" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_85{
style=filled;
color=gray75;
4144[label="210.245.100.47;s;19pkt 19fpkt", shape=diamond, color=yellow];
4145[label="198.60.0.197;d;19pkt 19fpkt", shape=diamond, color=yellow];
9985[label="210.245.100.47;s;19pkt 19fpkt", shape=hexagon, color=black];
10373[label="198.60.0.197;d;19pkt 19fpkt", shape=hexagon, color=black];
stat85[shape=component, label=&lt;Rules:&lt;BR/&gt;{210.245.100.47:80, 198.60.0.197:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50050: (2.63158%)&lt;BR/&gt; 50049: (2.63158%)&lt;BR/&gt; 50048: (2.63158%)&lt;BR/&gt; 50033: (2.63158%)&gt;];
}
4144--4145[label="1;19pkt 19fpkt"];
4144--9985[label="1;19pkt 19fpkt"];
4144--10373[label="1;19pkt 19fpkt"];
4144--11966[label="0.0526316;1pkt 1fpkt"];
4144--11988[label="0.157895;3pkt 3fpkt"];
4144--12072[label="0.0526316;1pkt 1fpkt"];
4144--12089[label="0.157895;3pkt 3fpkt"];
4144--12165[label="0.0526316;1pkt 1fpkt"];
4145--9985[label="1;19pkt 19fpkt"];
4145--10373[label="1;19pkt 19fpkt"];
4145--11966[label="0.0526316;1pkt 1fpkt"];
4145--11988[label="0.157895;3pkt 3fpkt"];
4145--12072[label="0.0526316;1pkt 1fpkt"];
4145--12089[label="0.157895;3pkt 3fpkt"];
4145--12165[label="0.0526316;1pkt 1fpkt"];
9985--10373[label="1;19pkt 19fpkt"];
9985--11966[label="0.0526316;1pkt 1fpkt"];
9985--11988[label="0.157895;3pkt 3fpkt"];
9985--12072[label="0.0526316;1pkt 1fpkt"];
9985--12089[label="0.157895;3pkt 3fpkt"];
9985--12165[label="0.0526316;1pkt 1fpkt"];
10373--11966[label="0.0526316;1pkt 1fpkt"];
10373--11988[label="0.157895;3pkt 3fpkt"];
10373--12072[label="0.0526316;1pkt 1fpkt"];
10373--12089[label="0.157895;3pkt 3fpkt"];
10373--12165[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.0.197" src_ip="210.245.100.47" src_port="80"/>
    </slice>
    <from sec="1296622810" usec="0"/>
    <to sec="1296623191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_86{
style=filled;
color=gray75;
10[label="12.81.29.7s;1pkt 1fpkt", shape=rectangle, color=red];
4313[label="199.107.156.249;d;3pkt 3fpkt", shape=diamond, color=yellow];
4399[label="12.81.29.7;s;2pkt 2fpkt", shape=diamond, color=yellow];
9255[label="199.107.156.249;d;3pkt 3fpkt", shape=hexagon, color=black];
stat86[shape=component, label=&lt;Rules:&lt;BR/&gt;{218.13.82.148:41902, 199.107.156.249:80}[33.3333%]&lt;BR/&gt;{12.81.29.7:33865, 199.107.156.249:80}[33.3333%]&lt;BR/&gt;{12.81.29.7:59020, 199.107.156.249:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59020: (22.2222%)&lt;BR/&gt; 33865: (16.6667%)&lt;BR/&gt; 41902: (11.1111%)&gt;];
}
10--4313[label="1;1pkt 1fpkt"];
10--4399[label="1;1pkt 1fpkt"];
10--9255[label="1;1pkt 1fpkt"];
4313--4399[label="1;2pkt 2fpkt"];
4313--9255[label="1;3pkt 3fpkt"];
4399--9255[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.156.249" dst_port="80" src_ip="12.81.29.7" src_port="59020"/>
      <filter dst_ip="199.107.156.249" dst_port="80" src_ip="12.81.29.7" src_port="33865"/>
      <filter dst_ip="199.107.156.249" dst_port="80" src_ip="218.13.82.148" src_port="41902"/>
    </slice>
    <from sec="1296622921" usec="0"/>
    <to sec="1296623048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="30.81.150.227"/>
      <from sec="1296623539" usec="0"/>
      <to sec="1296623613" usec="0"/>
    </slice>
    <from sec="1296623539" usec="0"/>
    <to sec="1296623613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_88{
style=filled;
color=gray75;
4314[label="199.107.156.249;s;3pkt 3fpkt", shape=diamond, color=yellow];
4398[label="12.81.29.7;d;2pkt 2fpkt", shape=diamond, color=yellow];
9256[label="199.107.156.249;s;3pkt 3fpkt", shape=hexagon, color=black];
9282[label="12.81.29.7;d;2pkt 2fpkt", shape=hexagon, color=black];
stat88[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.156.249:80, 218.13.82.148:41902}[33.3333%]&lt;BR/&gt;{199.107.156.249:80, 12.81.29.7:33865}[33.3333%]&lt;BR/&gt;{199.107.156.249:80, 12.81.29.7:59020}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59020: (20%)&lt;BR/&gt; 33865: (20%)&lt;BR/&gt; 41902: (10%)&gt;];
}
4314--4398[label="1;2pkt 2fpkt"];
4314--9256[label="1;3pkt 3fpkt"];
4314--9282[label="1;2pkt 2fpkt"];
4398--9256[label="1;2pkt 2fpkt"];
4398--9282[label="1;2pkt 2fpkt"];
9256--9282[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.29.7" dst_port="59020" src_ip="199.107.156.249" src_port="80"/>
      <filter dst_ip="12.81.29.7" dst_port="33865" src_ip="199.107.156.249" src_port="80"/>
      <filter dst_ip="218.13.82.148" dst_port="41902" src_ip="199.107.156.249" src_port="80"/>
    </slice>
    <from sec="1296622921" usec="0"/>
    <to sec="1296623048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.5.218.81"/>
      <from sec="1296623199" usec="0"/>
      <to sec="1296623202" usec="0"/>
    </slice>
    <from sec="1296623199" usec="0"/>
    <to sec="1296623202" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_90{
style=filled;
color=gray75;
31[label="172.5.243.23s;1pkt 1fpkt", shape=rectangle, color=red];
4448[label="220.96.9.73;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat90[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.243.23:43247, 220.96.9.73:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 43247: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
31--4448[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="220.96.9.73" dst_port="80" src_ip="172.5.243.23" src_port="43247"/>
    </slice>
    <from sec="1296623015" usec="0"/>
    <to sec="1296623025" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_91{
style=filled;
color=gray75;
3069[label="187.165.164.31;s;33pkt 33fpkt", shape=diamond, color=yellow];
4750[label="106.227.207.136;d;1pkt 1fpkt", shape=diamond, color=yellow];
8561[label="187.165.164.31;s;30pkt 30fpkt", shape=hexagon, color=black];
10314[label="106.227.207.136;d;1pkt 1fpkt", shape=hexagon, color=black];
stat91[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.164.31:0, *:0}[39.3939%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (36.9231%)&lt;BR/&gt; 42713: (6.15385%)&lt;BR/&gt; 16894: (6.15385%)&lt;BR/&gt; 55503: (3.07692%)&lt;BR/&gt; 52160: (3.07692%)&gt;];
}
3069--4750[label="1;1pkt 1fpkt"];
3069--8561[label="1;30pkt 30fpkt"];
3069--10314[label="1;1pkt 1fpkt"];
4750--8561[label="1;1pkt 1fpkt"];
4750--10314[label="1;1pkt 1fpkt"];
8561--10314[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="187.165.164.31"/>
    </slice>
    <from sec="1296622803" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_92{
style=filled;
color=gray75;
4905[label="198.60.0.203;s;95pkt 95fpkt", shape=diamond, color=yellow];
stat92[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.0.203:*, 216.77.2.10:80}[28.4211%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (26.8421%)&lt;BR/&gt; 52773: (5.78947%)&lt;BR/&gt; 17788: (5.26316%)&lt;BR/&gt; 16416: (3.15789%)&lt;BR/&gt; 58020: (2.63158%)&gt;];
}
4905--7168[label="0.0107527;1pkt 1fpkt"];
4905--11989[label="0.0105263;1pkt 1fpkt"];
4905--11990[label="0.0105263;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="216.77.2.10" dst_port="80" src_ip="198.60.0.203"/>
    </slice>
    <from sec="1296622836" usec="0"/>
    <to sec="1296623353" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_93{
style=filled;
color=gray75;
16[label="198.230.157.11s;2pkt 2fpkt", shape=rectangle, color=red];
4963[label="142.21.206.90;d;5pkt 5fpkt", shape=diamond, color=yellow];
5143[label="198.230.157.11;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat93[shape=component, label=&lt;Rules:&lt;BR/&gt;{106.161.146.53:80, 142.21.206.90:1276}[20%]&lt;BR/&gt;{198.230.157.11:80, 142.21.206.90:1277}[20%]&lt;BR/&gt;{198.230.157.11:80, 142.21.206.90:1278}[20%]&lt;BR/&gt;{198.49.130.135:80, 142.21.206.90:1274}[20%]&lt;BR/&gt;{198.49.130.135:80, 142.21.206.90:1275}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1278: (16.6667%)&lt;BR/&gt; 1277: (16.6667%)&lt;BR/&gt; 1276: (5.55556%)&lt;BR/&gt; 1275: (5.55556%)&gt;];
}
16--4963[label="1;2pkt 2fpkt"];
16--5143[label="1;2pkt 2fpkt"];
4963--5143[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.206.90" dst_port="1275" src_ip="198.49.130.135" src_port="80"/>
      <filter dst_ip="142.21.206.90" dst_port="1274" src_ip="198.49.130.135" src_port="80"/>
      <filter dst_ip="142.21.206.90" dst_port="1278" src_ip="198.230.157.11" src_port="80"/>
      <filter dst_ip="142.21.206.90" dst_port="1277" src_ip="198.230.157.11" src_port="80"/>
      <filter dst_ip="142.21.206.90" dst_port="1276" src_ip="106.161.146.53" src_port="80"/>
    </slice>
    <from sec="1296622975" usec="0"/>
    <to sec="1296623175" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_94{
style=filled;
color=gray75;
6752[label="172.1.16.9;s;12pkt 12fpkt", shape=diamond, color=yellow];
7340[label="5.228.230.136;d;4pkt 4fpkt", shape=diamond, color=yellow];
stat94[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.16.9:*, 5.228.230.136:1935}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (40.625%)&lt;BR/&gt; 50502: (6.25%)&lt;BR/&gt; 50485: (6.25%)&lt;BR/&gt; 50474: (6.25%)&lt;BR/&gt; 50465: (6.25%)&gt;];
}
6752--7340[label="1;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="5.228.230.136" dst_port="1935" src_ip="172.1.16.9"/>
    </slice>
    <from sec="1296623209" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_95{
style=filled;
color=gray75;
5108[label="12.81.16.155;d;1pkt 1fpkt", shape=diamond, color=yellow];
5109[label="187.165.78.62;s;1pkt 1fpkt", shape=diamond, color=yellow];
9776[label="187.165.78.62;s;1pkt 1fpkt", shape=hexagon, color=black];
stat95[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.78.62:80, 12.81.16.155:46266}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 46266: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5108--5109[label="1;1pkt 1fpkt"];
5108--9776[label="1;1pkt 1fpkt"];
5109--9776[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.16.155" dst_port="46266" src_ip="187.165.78.62" src_port="80"/>
    </slice>
    <from sec="1296623126" usec="0"/>
    <to sec="1296623140" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.49.88.145"/>
      <from sec="1296623583" usec="0"/>
      <to sec="1296623606" usec="0"/>
    </slice>
    <from sec="1296623583" usec="0"/>
    <to sec="1296623606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_97{
style=filled;
color=gray75;
5145[label="218.13.82.222;d;1pkt 1fpkt", shape=diamond, color=yellow];
5146[label="172.5.75.222;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat97[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.75.222:80, 218.13.82.222:59387}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59387: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5145--5146[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="218.13.82.222" dst_port="59387" src_ip="172.5.75.222" src_port="80"/>
    </slice>
    <from sec="1296623155" usec="0"/>
    <to sec="1296623168" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.1.47.171"/>
      <from sec="1296622801" usec="0"/>
      <to sec="1296623382" usec="0"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623382" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="199.107.145.138"/>
      <from sec="1296622806" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296622806" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="46.31.111.174"/>
      <from sec="1296623168" usec="0"/>
      <to sec="1296623528" usec="0"/>
    </slice>
    <from sec="1296623168" usec="0"/>
    <to sec="1296623528" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_101{
style=filled;
color=gray75;
5612[label="12.81.29.130;d;1pkt 1fpkt", shape=diamond, color=yellow];
5613[label="172.5.248.16;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat101[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.248.16:80, 12.81.29.130:49838}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 49838: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5612--5613[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.29.130" dst_port="49838" src_ip="172.5.248.16" src_port="80"/>
    </slice>
    <from sec="1296623178" usec="0"/>
    <to sec="1296623181" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.0.223.82"/>
      <from sec="1296623196" usec="0"/>
      <to sec="1296623199" usec="0"/>
    </slice>
    <from sec="1296623196" usec="0"/>
    <to sec="1296623199" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_103{
style=filled;
color=gray75;
5535[label="198.60.1.25;d;4pkt 4fpkt", shape=diamond, color=yellow];
5670[label="219.201.145.86;s;3pkt 3fpkt", shape=diamond, color=yellow];
10480[label="219.201.145.86;s;3pkt 3fpkt", shape=hexagon, color=black];
stat103[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.201.144.206:80, 198.60.1.25:49181}[25%]&lt;BR/&gt;{219.201.145.86:80, 198.60.1.25:49201}[25%]&lt;BR/&gt;{219.201.145.86:80, 198.60.1.25:49203}[25%]&lt;BR/&gt;{219.201.145.86:80, 198.60.1.25:49205}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49205: (15%)&lt;BR/&gt; 49203: (15%)&lt;BR/&gt; 49201: (15%)&lt;BR/&gt; 49181: (5%)&gt;];
}
5535--5670[label="1;3pkt 3fpkt"];
5535--10480[label="1;3pkt 3fpkt"];
5535--11988[label="0.25;1pkt 1fpkt"];
5535--12089[label="0.25;1pkt 1fpkt"];
5670--10480[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.1.25" dst_port="49205" src_ip="219.201.145.86" src_port="80"/>
      <filter dst_ip="198.60.1.25" dst_port="49203" src_ip="219.201.145.86" src_port="80"/>
      <filter dst_ip="198.60.1.25" dst_port="49201" src_ip="219.201.145.86" src_port="80"/>
      <filter dst_ip="198.60.1.25" dst_port="49181" src_ip="219.201.144.206" src_port="80"/>
    </slice>
    <from sec="1296623090" usec="0"/>
    <to sec="1296623231" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_104{
style=filled;
color=gray75;
5399[label="142.21.176.123;s;92pkt 92fpkt", shape=diamond, color=yellow];
5674[label="128.115.73.24;d;60pkt 60fpkt", shape=diamond, color=yellow];
stat104[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.176.123:*, 128.115.73.24:80}[65.2174%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.6711%)&lt;BR/&gt; 61000: (0.657895%)&lt;BR/&gt; 60983: (0.657895%)&lt;BR/&gt; 60982: (0.657895%)&lt;BR/&gt; 60981: (0.657895%)&gt;];
}
5399--5674[label="1;60pkt 60fpkt"];
5399--6570[label="0.0229885;2pkt 2fpkt"];
5399--12002[label="0.0978261;9pkt 9fpkt"];
5399--12027[label="0.076087;7pkt 7fpkt"];
5399--12099[label="0.0978261;9pkt 9fpkt"];
5399--12124[label="0.076087;7pkt 7fpkt"];
5399--12188[label="0.0978261;9pkt 9fpkt"];
5399--12212[label="0.076087;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="128.115.73.24" dst_port="80" src_ip="142.21.176.123"/>
    </slice>
    <from sec="1296622813" usec="0"/>
    <to sec="1296623594" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_105{
style=filled;
color=gray75;
5696[label="6.131.186.50;d;1pkt 1fpkt", shape=diamond, color=yellow];
5697[label="172.5.74.135;s;1pkt 1fpkt", shape=diamond, color=yellow];
10110[label="172.5.74.135;s;1pkt 1fpkt", shape=hexagon, color=black];
stat105[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.74.135:80, 6.131.186.50:58200}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 58200: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5696--5697[label="1;1pkt 1fpkt"];
5696--10110[label="1;1pkt 1fpkt"];
5697--10110[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="6.131.186.50" dst_port="58200" src_ip="172.5.74.135" src_port="80"/>
    </slice>
    <from sec="1296623230" usec="0"/>
    <to sec="1296623275" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.60.22.163"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.197.168.169"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623627" usec="0"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,011,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_108{
style=filled;
color=gray75;
5805[label="172.5.115.26;s;317pkt 317fpkt", shape=diamond, color=yellow];
stat108[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.115.26:*, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (5.04732%)&lt;BR/&gt; 19058: (4.10095%)&lt;BR/&gt; 21296: (2.99685%)&lt;BR/&gt; 8166: (2.99685%)&lt;BR/&gt; 9460: (2.2082%)&gt;];
}
5805--11966[label="0.00315457;1pkt 1fpkt"];
5805--12072[label="0.00315457;1pkt 1fpkt"];
5805--12165[label="0.00315457;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.5.115.26"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.37.183.129"/>
      <from sec="1296622803" usec="0"/>
      <to sec="1296623626" usec="0"/>
    </slice>
    <from sec="1296622803" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="142.21.217.100"/>
      <from sec="1296622808" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296622808" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="18.18.242.241"/>
      <from sec="1296622808" usec="0"/>
      <to sec="1296623531" usec="0"/>
    </slice>
    <from sec="1296622808" usec="0"/>
    <to sec="1296623531" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_112{
style=filled;
color=gray75;
6108[label="171.197.240.20;s;31pkt 31fpkt", shape=diamond, color=yellow];
6176[label="198.49.82.81;d;31pkt 31fpkt", shape=diamond, color=yellow];
10983[label="198.49.82.81;d;31pkt 31fpkt", shape=hexagon, color=black];
stat112[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.240.20:*, 198.49.82.81:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49291: (1.6129%)&lt;BR/&gt; 49290: (1.6129%)&lt;BR/&gt; 49287: (1.6129%)&lt;BR/&gt; 49285: (1.6129%)&gt;];
}
6108--6176[label="1;31pkt 31fpkt"];
6108--10983[label="1;31pkt 31fpkt"];
6108--12002[label="0.0322581;1pkt 1fpkt"];
6108--12099[label="0.0322581;1pkt 1fpkt"];
6108--12188[label="0.0322581;1pkt 1fpkt"];
6176--10983[label="1;31pkt 31fpkt"];
6176--12002[label="0.0322581;1pkt 1fpkt"];
6176--12099[label="0.0322581;1pkt 1fpkt"];
6176--12188[label="0.0322581;1pkt 1fpkt"];
10983--12002[label="0.0322581;1pkt 1fpkt"];
10983--12099[label="0.0322581;1pkt 1fpkt"];
10983--12188[label="0.0322581;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.49.82.81" dst_port="80" src_ip="171.197.240.20"/>
    </slice>
    <from sec="1296623186" usec="0"/>
    <to sec="1296623304" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="54.64.170.160"/>
      <from sec="1296623265" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296623265" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_114{
style=filled;
color=gray75;
6258[label="217.145.163.136;s;81pkt 81fpkt", shape=diamond, color=yellow];
6259[label="142.21.202.209;d;157pkt 157fpkt", shape=diamond, color=yellow];
7579[label="40.162.2.192;s;61pkt 61fpkt", shape=diamond, color=yellow];
stat114[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.145.163.136:80, 142.21.202.209:*}[51.5924%]&lt;BR/&gt;{40.162.2.192:80, 142.21.202.209:*}[38.8535%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8328%)&lt;BR/&gt; 2821: (0.334448%)&lt;BR/&gt; 2818: (0.334448%)&lt;BR/&gt; 2816: (0.334448%)&lt;BR/&gt; 2814: (0.334448%)&gt;];
}
6258--6259[label="1;81pkt 81fpkt"];
6258--11999[label="0.17284;14pkt 14fpkt"];
6258--12096[label="0.17284;14pkt 14fpkt"];
6258--12185[label="0.17284;14pkt 14fpkt"];
6259--7579[label="1;61pkt 61fpkt"];
6259--10203[label="0.00763359;1pkt 1fpkt"];
6259--11999[label="0.165605;26pkt 26fpkt"];
6259--12024[label="0.0191083;3pkt 3fpkt"];
6259--12096[label="0.165605;26pkt 26fpkt"];
6259--12121[label="0.0191083;3pkt 3fpkt"];
6259--12185[label="0.165605;26pkt 26fpkt"];
6259--12209[label="0.0191083;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.202.209" src_ip="217.145.163.136" src_port="80"/>
      <filter dst_ip="142.21.202.209" src_ip="40.162.2.192" src_port="80"/>
    </slice>
    <from sec="1296623289" usec="0"/>
    <to sec="1296623554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_115{
style=filled;
color=gray75;
4660[label="172.5.225.225;s;2pkt 2fpkt", shape=diamond, color=yellow];
6441[label="214.1.31.23;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat115[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.225.225:54313, 214.1.31.23:54766}[50%]&lt;BR/&gt;{172.5.225.225:54313, 108.7.134.184:16204}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54313: (50%)&lt;BR/&gt; 54766: (33.3333%)&lt;BR/&gt; 16204: (16.6667%)&gt;];
}
4660--6441[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="108.7.134.184" dst_port="16204" src_ip="172.5.225.225" src_port="54313"/>
      <filter dst_ip="214.1.31.23" dst_port="54766" src_ip="172.5.225.225" src_port="54313"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="198.48.5.61"/>
      <from sec="1296622802" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296622802" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_117{
style=filled;
color=gray75;
6553[label="199.107.145.244;d;172pkt 172fpkt", shape=diamond, color=yellow];
stat117[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.107.145.244:14274}[98.2558%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14274: (49.1279%)&lt;BR/&gt; 45035: (0.581395%)&lt;BR/&gt; 137: (0.581395%)&lt;BR/&gt; 65507: (0.290698%)&lt;BR/&gt; 65187: (0.290698%)&gt;];
}
6553--10516[label="0.00581395;1pkt 1fpkt"];
6553--11870[label="0.00581395;1pkt 1fpkt"];
6553--12021[label="0.00581395;1pkt 1fpkt"];
6553--12118[label="0.00581395;1pkt 1fpkt"];
6553--12206[label="0.00581395;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.145.244" dst_port="14274"/>
    </slice>
    <from sec="1296622806" usec="0"/>
    <to sec="1296623537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_119{
style=filled;
color=gray75;
2284[label="41.98.219.50;s;78pkt 78fpkt", shape=diamond, color=yellow];
6650[label="199.107.140.3;d;174pkt 174fpkt", shape=diamond, color=yellow];
11066[label="41.98.219.50;s;78pkt 78fpkt", shape=hexagon, color=black];
stat119[shape=component, label=&lt;Rules:&lt;BR/&gt;{41.98.219.50:80, 199.107.140.3:*}[44.8276%]&lt;BR/&gt;{65.204.69.24:80, 199.107.140.3:*}[24.7126%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.9091%)&lt;BR/&gt; 32529: (0.454545%)&lt;BR/&gt; 32528: (0.454545%)&lt;BR/&gt; 32527: (0.454545%)&lt;BR/&gt; 32526: (0.454545%)&gt;];
}
2284--6650[label="1;78pkt 78fpkt"];
2284--11066[label="1;78pkt 78fpkt"];
6650--7047[label="0.0322581;1pkt 1fpkt"];
6650--8568[label="0.00574713;1pkt 1fpkt"];
6650--10516[label="0.00574713;1pkt 1fpkt"];
6650--10753[label="0.0151515;1pkt 1fpkt"];
6650--11066[label="1;78pkt 78fpkt"];
6650--11870[label="0.00574713;1pkt 1fpkt"];
6650--12021[label="0.00574713;1pkt 1fpkt"];
6650--12118[label="0.00574713;1pkt 1fpkt"];
6650--12206[label="0.00574713;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.140.3" src_ip="41.98.219.50" src_port="80"/>
      <filter dst_ip="199.107.140.3" src_ip="65.204.69.24" src_port="80"/>
    </slice>
    <from sec="1296622850" usec="0"/>
    <to sec="1296623595" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.45.143.167"/>
      <from sec="1296623101" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296623101" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="26.132.21.188"/>
      <from sec="1296623185" usec="0"/>
      <to sec="1296623433" usec="0"/>
    </slice>
    <from sec="1296623185" usec="0"/>
    <to sec="1296623433" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.167.38.30"/>
      <from sec="1296623266" usec="0"/>
      <to sec="1296623421" usec="0"/>
    </slice>
    <from sec="1296623266" usec="0"/>
    <to sec="1296623421" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="147.39.76.232"/>
      <from sec="1296623269" usec="0"/>
      <to sec="1296623626" usec="0"/>
    </slice>
    <from sec="1296623269" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.39.76.232"/>
      <from sec="1296623269" usec="0"/>
      <to sec="1296623626" usec="0"/>
    </slice>
    <from sec="1296623269" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.1.12.44"/>
      <from sec="1296623308" usec="0"/>
      <to sec="1296623546" usec="0"/>
    </slice>
    <from sec="1296623308" usec="0"/>
    <to sec="1296623546" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="144.181.19.33"/>
      <from sec="1296623357" usec="0"/>
      <to sec="1296623539" usec="0"/>
    </slice>
    <from sec="1296623357" usec="0"/>
    <to sec="1296623539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="58.88.160.34"/>
      <from sec="1296623373" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623373" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_128{
style=filled;
color=gray75;
6952[label="44.12.208.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
6953[label="187.165.17.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat128[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.17.8:14520, 44.12.208.13:14520}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 14520: (100%)&gt;];
}
6952--6953[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="44.12.208.13" dst_port="14520" src_ip="187.165.17.8" src_port="14520"/>
    </slice>
    <from sec="1296623397" usec="0"/>
    <to sec="1296623440" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_129{
style=filled;
color=gray75;
6961[label="157.143.78.197;d;17pkt 17fpkt", shape=diamond, color=yellow];
6962[label="171.197.162.166;s;17pkt 17fpkt", shape=diamond, color=yellow];
stat129[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.162.166:*, 157.143.78.197:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51566: (2.94118%)&lt;BR/&gt; 51565: (2.94118%)&lt;BR/&gt; 51564: (2.94118%)&lt;BR/&gt; 51563: (2.94118%)&gt;];
}
6961--6962[label="1;17pkt 17fpkt"];
</description>
    <slice>
      <filter dst_ip="157.143.78.197" dst_port="80" src_ip="171.197.162.166"/>
    </slice>
    <from sec="1296623404" usec="0"/>
    <to sec="1296623530" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_130{
style=filled;
color=gray75;
6807[label="171.197.240.49;d;9pkt 9fpkt", shape=diamond, color=yellow];
6965[label="168.132.88.206;s;9pkt 9fpkt", shape=diamond, color=yellow];
stat130[shape=component, label=&lt;Rules:&lt;BR/&gt;{168.132.88.206:80, 171.197.240.49:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54617: (5.55556%)&lt;BR/&gt; 54613: (5.55556%)&lt;BR/&gt; 54612: (5.55556%)&lt;BR/&gt; 54611: (5.55556%)&gt;];
}
6807--6965[label="1;9pkt 9fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.240.49" src_ip="168.132.88.206" src_port="80"/>
    </slice>
    <from sec="1296623297" usec="0"/>
    <to sec="1296623414" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_131{
style=filled;
color=gray75;
6929[label="171.197.67.235;s;16pkt 16fpkt", shape=diamond, color=yellow];
6971[label="193.199.34.193;d;1pkt 1fpkt", shape=diamond, color=yellow];
11060[label="171.197.67.235;s;16pkt 16fpkt", shape=hexagon, color=black];
stat131[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.67.235:*, 193.199.34.212:80}[68.75%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49318: (4.54545%)&lt;BR/&gt; 49325: (3.0303%)&lt;BR/&gt; 49324: (3.0303%)&lt;BR/&gt; 49322: (3.0303%)&gt;];
}
6929--6971[label="1;1pkt 1fpkt"];
6929--11060[label="1;16pkt 16fpkt"];
6971--11060[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="193.199.34.212" dst_port="80" src_ip="171.197.67.235"/>
    </slice>
    <from sec="1296623390" usec="0"/>
    <to sec="1296623493" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="57.25.95.30"/>
      <from sec="1296622804" usec="0"/>
      <to sec="1296623623" usec="0"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.5.76.45"/>
      <from sec="1296622805" usec="0"/>
      <to sec="1296623625" usec="0"/>
    </slice>
    <from sec="1296622805" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.1.29.164"/>
      <from sec="1296622806" usec="0"/>
      <to sec="1296623527" usec="0"/>
    </slice>
    <from sec="1296622806" usec="0"/>
    <to sec="1296623527" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_135{
style=filled;
color=gray75;
4631[label="172.192.130.58;d;1273pkt 1273fpkt", shape=diamond, color=yellow];
7182[label="209.246.187.130;s;552pkt 552fpkt", shape=diamond, color=yellow];
stat135[shape=component, label=&lt;Rules:&lt;BR/&gt;{209.246.187.130:*, 172.192.130.58:13347}[43.3621%]&lt;BR/&gt;{37.70.191.125:*, 172.192.130.58:13347}[25.923%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13347: (49.9726%)&lt;BR/&gt; 4934: (0.109589%)&lt;BR/&gt; 4267: (0.109589%)&lt;BR/&gt; 2943: (0.109589%)&lt;BR/&gt; 2935: (0.109589%)&gt;];
}
4631--7182[label="1;552pkt 552fpkt"];
</description>
    <slice>
      <filter dst_ip="172.192.130.58" dst_port="13347" src_ip="209.246.187.130"/>
      <filter dst_ip="172.192.130.58" dst_port="13347" src_ip="37.70.191.125"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_136{
style=filled;
color=gray75;
124[label="40.50.148.120s;1pkt 1fpkt", shape=rectangle, color=red];
149[label="209.176.212.136s;1pkt 1fpkt", shape=rectangle, color=red];
1256[label="140.230.200.207;d;406pkt 406fpkt", shape=diamond, color=yellow];
3017[label="209.176.212.136;s;3pkt 3fpkt", shape=diamond, color=yellow];
3361[label="40.164.90.210;s;5pkt 5fpkt", shape=diamond, color=yellow];
5441[label="46.193.204.7;s;3pkt 3fpkt", shape=diamond, color=yellow];
7240[label="40.50.148.120;s;4pkt 4fpkt", shape=diamond, color=yellow];
stat136[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 140.230.200.207:10067}[49.7537%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10067: (24.3499%)&lt;BR/&gt; 39656: (2.48227%)&lt;BR/&gt; 80: (2.36407%)&lt;BR/&gt; 19469: (1.41844%)&lt;BR/&gt; 47333: (1.30024%)&gt;];
}
124--1256[label="1;1pkt 1fpkt"];
124--7240[label="1;1pkt 1fpkt"];
149--1256[label="1;1pkt 1fpkt"];
149--3017[label="1;1pkt 1fpkt"];
1256--3017[label="1;3pkt 3fpkt"];
1256--3361[label="1;5pkt 5fpkt"];
1256--5228[label="0.0283688;4pkt 4fpkt"];
1256--5441[label="1;3pkt 3fpkt"];
1256--5937[label="0.0434783;5pkt 5fpkt"];
1256--6584[label="0.059322;7pkt 7fpkt"];
1256--7240[label="1;4pkt 4fpkt"];
1256--10657[label="0.032;4pkt 4fpkt"];
1256--11966[label="0.00738916;3pkt 3fpkt"];
1256--11988[label="0.00985222;4pkt 4fpkt"];
1256--11999[label="0.00246305;1pkt 1fpkt"];
1256--12072[label="0.00738916;3pkt 3fpkt"];
1256--12089[label="0.00985222;4pkt 4fpkt"];
1256--12096[label="0.00246305;1pkt 1fpkt"];
1256--12165[label="0.00738916;3pkt 3fpkt"];
1256--12185[label="0.00246305;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.230.200.207" dst_port="10067"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="170.37.136.6"/>
      <from sec="1296622845" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296622845" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.166.112.248"/>
      <from sec="1296623137" usec="0"/>
      <to sec="1296623413" usec="0"/>
    </slice>
    <from sec="1296623137" usec="0"/>
    <to sec="1296623413" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_140{
style=filled;
color=gray75;
7335[label="172.1.16.9;d;5pkt 5fpkt", shape=diamond, color=yellow];
7341[label="5.228.230.136;s;2pkt 2fpkt", shape=diamond, color=yellow];
11294[label="5.228.230.136;s;2pkt 2fpkt", shape=hexagon, color=black];
stat140[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.228.230.88:843, 172.1.16.9:50481}[20%]&lt;BR/&gt;{5.228.230.153:1935, 172.1.16.9:50484}[20%]&lt;BR/&gt;{5.228.230.157:1935, 172.1.16.9:50464}[20%]&lt;BR/&gt;{5.228.230.136:1935, 172.1.16.9:50485}[20%]&lt;BR/&gt;{5.228.230.136:1935, 172.1.16.9:50502}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (44.4444%)&lt;BR/&gt; 50502: (16.6667%)&lt;BR/&gt; 50485: (16.6667%)&lt;BR/&gt; 50484: (5.55556%)&lt;BR/&gt; 50481: (5.55556%)&gt;];
}
7335--7341[label="1;2pkt 2fpkt"];
7335--11294[label="1;2pkt 2fpkt"];
7341--11294[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="172.1.16.9" dst_port="50502" src_ip="5.228.230.136" src_port="1935"/>
      <filter dst_ip="172.1.16.9" dst_port="50485" src_ip="5.228.230.136" src_port="1935"/>
      <filter dst_ip="172.1.16.9" dst_port="50464" src_ip="5.228.230.157" src_port="1935"/>
      <filter dst_ip="172.1.16.9" dst_port="50484" src_ip="5.228.230.153" src_port="1935"/>
      <filter dst_ip="172.1.16.9" dst_port="50481" src_ip="5.228.230.88" src_port="843"/>
    </slice>
    <from sec="1296623209" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="37.245.224.120"/>
      <from sec="1296623259" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623259" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="5.157.254.53"/>
      <from sec="1296623286" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623286" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="44.148.136.72"/>
      <from sec="1296623301" usec="0"/>
      <to sec="1296623606" usec="0"/>
    </slice>
    <from sec="1296623301" usec="0"/>
    <to sec="1296623606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.42.224.140"/>
      <from sec="1296623302" usec="0"/>
      <to sec="1296623622" usec="0"/>
    </slice>
    <from sec="1296623302" usec="0"/>
    <to sec="1296623622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="24.143.15.245"/>
      <from sec="1296623333" usec="0"/>
      <to sec="1296623620" usec="0"/>
    </slice>
    <from sec="1296623333" usec="0"/>
    <to sec="1296623620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_146{
style=filled;
color=gray75;
131[label="12.81.24.124s;1pkt 1fpkt", shape=rectangle, color=red];
7421[label="142.21.108.170;d;3pkt 3fpkt", shape=diamond, color=yellow];
7954[label="12.81.24.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat146[shape=component, label=&lt;Rules:&lt;BR/&gt;{13.145.6.44:52358, 142.21.108.170:80}[33.3333%]&lt;BR/&gt;{12.81.24.124:63000, 142.21.108.170:80}[33.3333%]&lt;BR/&gt;{198.62.6.136:48884, 142.21.108.170:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 63000: (30%)&lt;BR/&gt; 52358: (10%)&lt;BR/&gt; 48884: (10%)&gt;];
}
131--7421[label="1;1pkt 1fpkt"];
131--7954[label="1;1pkt 1fpkt"];
7421--7954[label="1;1pkt 1fpkt"];
7421--12027[label="0.333333;1pkt 1fpkt"];
7421--12124[label="0.333333;1pkt 1fpkt"];
7421--12212[label="0.333333;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.108.170" dst_port="80" src_ip="198.62.6.136" src_port="48884"/>
      <filter dst_ip="142.21.108.170" dst_port="80" src_ip="12.81.24.124" src_port="63000"/>
      <filter dst_ip="142.21.108.170" dst_port="80" src_ip="13.145.6.44" src_port="52358"/>
    </slice>
    <from sec="1296623384" usec="0"/>
    <to sec="1296623483" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_147{
style=filled;
color=gray75;
7048[label="172.1.15.76;d;10pkt 10fpkt", shape=diamond, color=yellow];
7424[label="208.51.222.15;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat147[shape=component, label=&lt;Rules:&lt;BR/&gt;{160.141.7.71:*, 172.1.15.76:993}[40%]&lt;BR/&gt;{157.45.199.1:*, 172.1.15.76:993}[30%]&lt;BR/&gt;{208.51.222.15:*, 172.1.15.76:993}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (50%)&lt;BR/&gt; 1875: (7.69231%)&lt;BR/&gt; 1874: (7.69231%)&lt;BR/&gt; 1873: (7.69231%)&lt;BR/&gt; 62423: (3.84615%)&gt;];
}
7048--7424[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.1.15.76" dst_port="993" src_ip="160.141.7.71"/>
      <filter dst_ip="172.1.15.76" dst_port="993" src_ip="208.51.222.15"/>
      <filter dst_ip="172.1.15.76" dst_port="993" src_ip="157.45.199.1"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="47.164.197.186"/>
      <from sec="1296623389" usec="0"/>
      <to sec="1296623548" usec="0"/>
    </slice>
    <from sec="1296623389" usec="0"/>
    <to sec="1296623548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.164.197.186"/>
      <from sec="1296623389" usec="0"/>
      <to sec="1296623548" usec="0"/>
    </slice>
    <from sec="1296623389" usec="0"/>
    <to sec="1296623548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="214.183.123.182"/>
      <from sec="1296623396" usec="0"/>
      <to sec="1296623539" usec="0"/>
    </slice>
    <from sec="1296623396" usec="0"/>
    <to sec="1296623539" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_151{
style=filled;
color=gray75;
479[label="172.1.35.186s;84pkt 84fpkt", shape=rectangle, color=red];
6848[label="172.1.35.186;s;174pkt 174fpkt", shape=diamond, color=yellow];
7441[label="12.143.112.149;d;76pkt 76fpkt", shape=diamond, color=yellow];
7963[label="13.134.194.25;d;16pkt 16fpkt", shape=diamond, color=yellow];
11600[label="12.143.112.149;d;76pkt 76fpkt", shape=hexagon, color=black];
stat151[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.35.186:*, 12.143.112.149:80}[43.6782%]&lt;BR/&gt;{172.1.35.186:*, 13.140.137.124:80}[20.1149%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50701: (0.469484%)&lt;BR/&gt; 50700: (0.469484%)&lt;BR/&gt; 50699: (0.469484%)&lt;BR/&gt; 50698: (0.469484%)&gt;];
}
479--6848[label="1;84pkt 84fpkt"];
479--7441[label="1;76pkt 76fpkt"];
479--11600[label="1;76pkt 76fpkt"];
6848--7441[label="1;76pkt 76fpkt"];
6848--7963[label="1;16pkt 16fpkt"];
6848--11600[label="1;76pkt 76fpkt"];
6848--12002[label="0.0287356;5pkt 5fpkt"];
6848--12027[label="0.137931;24pkt 24fpkt"];
6848--12099[label="0.0287356;5pkt 5fpkt"];
6848--12124[label="0.137931;24pkt 24fpkt"];
6848--12188[label="0.0287356;5pkt 5fpkt"];
6848--12212[label="0.137931;24pkt 24fpkt"];
7441--11600[label="1;76pkt 76fpkt"];
</description>
    <slice>
      <filter dst_ip="12.143.112.149" dst_port="80" src_ip="172.1.35.186"/>
      <filter dst_ip="13.140.137.124" dst_port="80" src_ip="172.1.35.186"/>
    </slice>
    <from sec="1296623337" usec="0"/>
    <to sec="1296623621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_152{
style=filled;
color=gray75;
64[label="187.165.227.52s;1pkt 1fpkt", shape=rectangle, color=red];
7446[label="212.159.120.16;d;2pkt 2fpkt", shape=diamond, color=yellow];
7924[label="187.165.227.52;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat152[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.227.52:43983, 212.159.120.16:25}[50%]&lt;BR/&gt;{187.165.227.52:43990, 212.159.120.16:25}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 43990: (30%)&lt;BR/&gt; 43983: (20%)&gt;];
}
64--7446[label="1;1pkt 1fpkt"];
64--7924[label="1;1pkt 1fpkt"];
7446--7924[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.159.120.16" dst_port="25" src_ip="187.165.227.52" src_port="43990"/>
      <filter dst_ip="212.159.120.16" dst_port="25" src_ip="187.165.227.52" src_port="43983"/>
    </slice>
    <from sec="1296623408" usec="0"/>
    <to sec="1296623461" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="209.246.141.209"/>
      <from sec="1296623408" usec="0"/>
      <to sec="1296623538" usec="0"/>
    </slice>
    <from sec="1296623408" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="209.246.141.209"/>
      <from sec="1296623408" usec="0"/>
      <to sec="1296623579" usec="0"/>
    </slice>
    <from sec="1296623408" usec="0"/>
    <to sec="1296623579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.103.133.14"/>
      <from sec="1296623412" usec="0"/>
      <to sec="1296623556" usec="0"/>
    </slice>
    <from sec="1296623412" usec="0"/>
    <to sec="1296623556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="12.81.24.45"/>
      <from sec="1296623448" usec="0"/>
      <to sec="1296623452" usec="0"/>
    </slice>
    <from sec="1296623448" usec="0"/>
    <to sec="1296623452" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_157{
style=filled;
color=gray75;
7184[label="170.37.2.51;s;26pkt 26fpkt", shape=diamond, color=yellow];
7500[label="6.131.186.13;d;1pkt 1fpkt", shape=diamond, color=yellow];
11361[label="6.131.186.13;d;1pkt 1fpkt", shape=hexagon, color=black];
stat157[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.37.2.51:80, 12.81.26.239:*}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2143%)&lt;BR/&gt; 40278: (5.35714%)&lt;BR/&gt; 65263: (1.78571%)&lt;BR/&gt; 64022: (1.78571%)&lt;BR/&gt; 63443: (1.78571%)&gt;];
}
7184--7500[label="1;1pkt 1fpkt"];
7184--11361[label="1;1pkt 1fpkt"];
7184--11966[label="0.115385;3pkt 3fpkt"];
7184--11988[label="0.0384615;1pkt 1fpkt"];
7184--12024[label="0.0769231;2pkt 2fpkt"];
7184--12072[label="0.115385;3pkt 3fpkt"];
7184--12089[label="0.0384615;1pkt 1fpkt"];
7184--12121[label="0.0769231;2pkt 2fpkt"];
7184--12165[label="0.115385;3pkt 3fpkt"];
7184--12209[label="0.0769231;2pkt 2fpkt"];
7500--11361[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.26.239" src_ip="170.37.2.51" src_port="80"/>
    </slice>
    <from sec="1296622806" usec="0"/>
    <to sec="1296623581" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_158{
style=filled;
color=gray75;
5077[label="187.165.34.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
7532[label="1.234.6.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
11613[label="1.234.6.80;d;1pkt 1fpkt", shape=hexagon, color=black];
stat158[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.34.50:80, 1.234.6.80:51308}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 51308: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
5077--7532[label="1;1pkt 1fpkt"];
5077--11613[label="1;1pkt 1fpkt"];
7532--11613[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="1.234.6.80" dst_port="51308" src_ip="187.165.34.50" src_port="80"/>
    </slice>
    <from sec="1296623466" usec="0"/>
    <to sec="1296623481" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_159{
style=filled;
color=gray75;
7465[label="171.197.24.59;s;26pkt 26fpkt", shape=diamond, color=yellow];
7535[label="27.254.117.14;d;19pkt 19fpkt", shape=diamond, color=yellow];
stat159[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.24.59:*, 27.254.117.14:443}[96.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (48.8889%)&lt;BR/&gt; 35922: (2.22222%)&lt;BR/&gt; 35921: (2.22222%)&lt;BR/&gt; 35920: (2.22222%)&lt;BR/&gt; 35919: (2.22222%)&gt;];
}
7465--7535[label="1;19pkt 19fpkt"];
</description>
    <slice>
      <filter dst_ip="27.254.117.14" dst_port="443" src_ip="171.197.24.59"/>
    </slice>
    <from sec="1296623420" usec="0"/>
    <to sec="1296623617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_160{
style=filled;
color=gray75;
497[label="187.165.33.35s;6pkt 6fpkt", shape=rectangle, color=red];
7536[label="199.93.109.149;d;6pkt 6fpkt", shape=diamond, color=yellow];
7537[label="187.165.33.35;s;12pkt 12fpkt", shape=diamond, color=yellow];
11614[label="187.165.33.35;s;12pkt 12fpkt", shape=hexagon, color=black];
stat160[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.33.35:*, 199.93.109.149:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65181: (5.55556%)&lt;BR/&gt; 65180: (5.55556%)&lt;BR/&gt; 65179: (5.55556%)&lt;BR/&gt; 65178: (5.55556%)&gt;];
}
497--7536[label="1;6pkt 6fpkt"];
497--7537[label="1;6pkt 6fpkt"];
497--11614[label="1;6pkt 6fpkt"];
7536--7537[label="1;6pkt 6fpkt"];
7536--11614[label="1;6pkt 6fpkt"];
7537--11614[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter dst_ip="199.93.109.149" dst_port="80" src_ip="187.165.33.35"/>
    </slice>
    <from sec="1296623467" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_161{
style=filled;
color=gray75;
7508[label="30.20.183.120;s;7pkt 7fpkt", shape=diamond, color=yellow];
7549[label="142.21.142.218;d;3pkt 3fpkt", shape=diamond, color=yellow];
stat161[shape=component, label=&lt;Rules:&lt;BR/&gt;{30.20.183.120:5060, *:5060}[71.4286%]&lt;BR/&gt;{30.20.183.120:*, 142.21.142.218:5060}[42.8571%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5060: (80%)&lt;BR/&gt; 5195: (10%)&lt;BR/&gt; 5190: (10%)&gt;];
}
7508--7549[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.142.218" dst_port="5060" src_ip="30.20.183.120"/>
      <filter dst_port="5060" src_ip="30.20.183.120" src_port="5060"/>
    </slice>
    <from sec="1296623452" usec="0"/>
    <to sec="1296623591" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_162{
style=filled;
color=gray75;
7278[label="170.37.33.92;s;9pkt 9fpkt", shape=diamond, color=yellow];
7553[label="12.81.25.42;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat162[shape=component, label=&lt;Rules:&lt;BR/&gt;{170.37.33.92:21, *:*}[55.5556%]&lt;BR/&gt;{170.37.33.92:*, 12.81.25.33:*}[22.2222%]&lt;BR/&gt;{170.37.33.92:*, 12.81.25.34:*}[22.2222%]&lt;BR/&gt;{170.37.33.92:*, 12.81.25.42:*}[22.2222%]&lt;BR/&gt;{170.37.33.92:*, 218.13.82.170:*}[22.2222%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 21: (27.2727%)&lt;BR/&gt; 63329: (9.09091%)&lt;BR/&gt; 51348: (9.09091%)&lt;BR/&gt; 39033: (9.09091%)&lt;BR/&gt; 64751: (4.54545%)&gt;];
}
7278--7553[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="218.13.82.170" src_ip="170.37.33.92"/>
      <filter dst_ip="12.81.25.42" src_ip="170.37.33.92"/>
      <filter dst_ip="12.81.25.34" src_ip="170.37.33.92"/>
      <filter dst_ip="12.81.25.33" src_ip="170.37.33.92"/>
      <filter src_ip="170.37.33.92" src_port="21"/>
    </slice>
    <from sec="1296622844" usec="0"/>
    <to sec="1296623610" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_163{
style=filled;
color=gray75;
7295[label="171.197.45.224;s;13pkt 13fpkt", shape=diamond, color=yellow];
7564[label="12.81.25.80;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat163[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.45.224:80, 13.145.6.47:*}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 54793: (7.14286%)&lt;BR/&gt; 60061: (3.57143%)&lt;BR/&gt; 56866: (3.57143%)&lt;BR/&gt; 55036: (3.57143%)&gt;];
}
7295--7564[label="1;1pkt 1fpkt"];
7295--11988[label="0.0769231;1pkt 1fpkt"];
7295--11999[label="0.0769231;1pkt 1fpkt"];
7295--12024[label="0.153846;2pkt 2fpkt"];
7295--12089[label="0.0769231;1pkt 1fpkt"];
7295--12096[label="0.0769231;1pkt 1fpkt"];
7295--12121[label="0.153846;2pkt 2fpkt"];
7295--12185[label="0.0769231;1pkt 1fpkt"];
7295--12209[label="0.153846;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="13.145.6.47" src_ip="171.197.45.224" src_port="80"/>
    </slice>
    <from sec="1296622886" usec="0"/>
    <to sec="1296623497" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="4.52.16.55"/>
      <from sec="1296623507" usec="0"/>
      <to sec="1296623522" usec="0"/>
    </slice>
    <from sec="1296623507" usec="0"/>
    <to sec="1296623522" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,502,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_166{
style=filled;
color=gray75;
7656[label="169.74.166.134;d;5pkt 5fpkt", shape=diamond, color=yellow];
7657[label="172.5.36.25;s;6pkt 6fpkt", shape=diamond, color=yellow];
stat166[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.36.25:*, 169.74.166.134:993}[50%]&lt;BR/&gt;{172.5.36.25:*, 169.74.166.134:22}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (27.2727%)&lt;BR/&gt; 22: (18.1818%)&lt;BR/&gt; 52947: (9.09091%)&lt;BR/&gt; 52939: (9.09091%)&lt;BR/&gt; 52640: (9.09091%)&gt;];
}
7656--7657[label="1;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="169.74.166.134" dst_port="993" src_ip="172.5.36.25"/>
      <filter dst_ip="169.74.166.134" dst_port="22" src_ip="172.5.36.25"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_167{
style=filled;
color=gray75;
7687[label="172.0.72.17;d;428pkt 428fpkt", shape=diamond, color=yellow];
stat167[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 172.0.72.17:19441}[98.5981%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 19441: (49.2991%)&lt;BR/&gt; 16001: (1.16822%)&lt;BR/&gt; 62827: (0.584112%)&lt;BR/&gt; 21588: (0.584112%)&lt;BR/&gt; 26742: (0.233645%)&gt;];
}
7687--12004[label="0.00233645;1pkt 1fpkt"];
7687--12101[label="0.00233645;1pkt 1fpkt"];
7687--12190[label="0.00233645;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.0.72.17" dst_port="19441"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="18.18.242.241"/>
      <from sec="1296622808" usec="0"/>
      <to sec="1296623621" usec="0"/>
    </slice>
    <from sec="1296622808" usec="0"/>
    <to sec="1296623621" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.241.133.35"/>
      <from sec="1296623102" usec="0"/>
      <to sec="1296623623" usec="0"/>
    </slice>
    <from sec="1296623102" usec="0"/>
    <to sec="1296623623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="47.160.25.163"/>
      <from sec="1296623131" usec="0"/>
      <to sec="1296623624" usec="0"/>
    </slice>
    <from sec="1296623131" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.39.75.85"/>
      <from sec="1296623185" usec="0"/>
      <to sec="1296623619" usec="0"/>
    </slice>
    <from sec="1296623185" usec="0"/>
    <to sec="1296623619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="35.99.15.8"/>
      <from sec="1296623279" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623279" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="210.38.134.177"/>
      <from sec="1296623305" usec="0"/>
      <to sec="1296623625" usec="0"/>
    </slice>
    <from sec="1296623305" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_174{
style=filled;
color=gray75;
7367[label="142.21.203.84;s;56pkt 56fpkt", shape=diamond, color=yellow];
7926[label="212.24.89.226;d;54pkt 54fpkt", shape=diamond, color=yellow];
stat174[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.203.84:*, 212.24.89.226:80}[96.4286%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60522: (0.909091%)&lt;BR/&gt; 60521: (0.909091%)&lt;BR/&gt; 60520: (0.909091%)&lt;BR/&gt; 60519: (0.909091%)&gt;];
}
7367--7691[label="0.0178571;1pkt 1fpkt"];
7367--7926[label="1;54pkt 54fpkt"];
7367--12002[label="0.0357143;2pkt 2fpkt"];
7367--12099[label="0.0357143;2pkt 2fpkt"];
7367--12188[label="0.0357143;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.24.89.226" dst_port="80" src_ip="142.21.203.84"/>
    </slice>
    <from sec="1296623298" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,010,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="198.60.1.174"/>
      <from sec="1296623441" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623441" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_176{
style=filled;
color=gray75;
7944[label="34.182.39.87;d;2pkt 2fpkt", shape=diamond, color=yellow];
7945[label="187.165.70.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat176[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.70.84:5041, 34.182.39.87:5041}[50%]&lt;BR/&gt;{187.165.70.87:0, 34.182.39.87:0}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (66.6667%)&lt;BR/&gt; 0: (33.3333%)&gt;];
}
7944--7945[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="34.182.39.87" src_ip="187.165.70.87"/>
      <filter dst_ip="34.182.39.87" dst_port="5041" src_ip="187.165.70.84" src_port="5041"/>
    </slice>
    <from sec="1296623448" usec="0"/>
    <to sec="1296623556" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_177{
style=filled;
color=gray75;
380[label="142.21.74.75s;3pkt 3fpkt", shape=rectangle, color=red];
7957[label="142.21.74.75;s;157pkt 157fpkt", shape=diamond, color=yellow];
stat177[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.74.75:*, *:80}[41.4013%]&lt;BR/&gt;{142.21.74.75:*, 107.6.244.108:*}[32.4841%]&lt;BR/&gt;{142.21.74.75:*, 215.18.168.207:*}[30.5732%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (27.8125%)&lt;BR/&gt; 9900: (3.75%)&lt;BR/&gt; 8000: (3.4375%)&lt;BR/&gt; 8889: (2.8125%)&lt;BR/&gt; 58584: (1.5625%)&gt;];
}
380--7957[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="107.6.244.108" src_ip="142.21.74.75"/>
      <filter dst_ip="215.18.168.207" src_ip="142.21.74.75"/>
      <filter dst_port="80" src_ip="142.21.74.75"/>
    </slice>
    <from sec="1296623462" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,999,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_178{
style=filled;
color=gray75;
137[label="38.180.124.128s;1pkt 1fpkt", shape=rectangle, color=red];
7960[label="172.0.4.46;d;1pkt 1fpkt", shape=diamond, color=yellow];
7961[label="38.180.124.128;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat178[shape=component, label=&lt;Rules:&lt;BR/&gt;{38.180.124.128:1935, 172.0.4.46:1204}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 1935: (50%)&lt;BR/&gt; 1204: (50%)&gt;];
}
137--7960[label="1;1pkt 1fpkt"];
137--7961[label="1;1pkt 1fpkt"];
7960--7961[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.0.4.46" dst_port="1204" src_ip="38.180.124.128" src_port="1935"/>
    </slice>
    <from sec="1296623469" usec="0"/>
    <to sec="1296623489" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.88.81.175"/>
      <from sec="1296623486" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623486" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="172.1.23.58"/>
      <from sec="1296623522" usec="0"/>
      <to sec="1296623625" usec="0"/>
    </slice>
    <from sec="1296623522" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_181{
style=filled;
color=gray75;
3599[label="171.197.216.104;s;2pkt 2fpkt", shape=diamond, color=yellow];
7996[label="212.174.80.108;d;2pkt 2fpkt", shape=diamond, color=yellow];
stat181[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.216.104:1864, 212.174.80.108:80}[50%]&lt;BR/&gt;{171.197.216.104:1876, 212.174.80.108:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1876: (25%)&lt;BR/&gt; 1864: (25%)&gt;];
}
3599--7996[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="212.174.80.108" dst_port="80" src_ip="171.197.216.104" src_port="1876"/>
      <filter dst_ip="212.174.80.108" dst_port="80" src_ip="171.197.216.104" src_port="1864"/>
    </slice>
    <from sec="1296623524" usec="0"/>
    <to sec="1296623587" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_182{
style=filled;
color=gray75;
7609[label="34.151.154.82;d;144pkt 144fpkt", shape=diamond, color=yellow];
8000[label="198.60.136.30;s;143pkt 143fpkt", shape=diamond, color=yellow];
stat182[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.136.30:443, 34.151.154.82:*}[99.3056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.8258%)&lt;BR/&gt; 51130: (0.348432%)&lt;BR/&gt; 51129: (0.348432%)&lt;BR/&gt; 51126: (0.348432%)&lt;BR/&gt; 51125: (0.348432%)&gt;];
}
7609--8000[label="1;143pkt 143fpkt"];
</description>
    <slice>
      <filter dst_ip="34.151.154.82" src_ip="198.60.136.30" src_port="443"/>
    </slice>
    <from sec="1296623527" usec="0"/>
    <to sec="1296623613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_183{
style=filled;
color=gray75;
7608[label="198.60.136.30;d;124pkt 124fpkt", shape=diamond, color=yellow];
8001[label="34.151.154.82;s;144pkt 144fpkt", shape=diamond, color=yellow];
stat183[shape=component, label=&lt;Rules:&lt;BR/&gt;{34.151.154.82:*, 198.60.136.30:443}[99.3056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (49.8134%)&lt;BR/&gt; 51104: (0.373134%)&lt;BR/&gt; 51103: (0.373134%)&lt;BR/&gt; 51102: (0.373134%)&lt;BR/&gt; 51101: (0.373134%)&gt;];
}
7608--8001[label="1;124pkt 124fpkt"];
8001--8700[label="0.00694444;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.136.30" dst_port="443" src_ip="34.151.154.82"/>
    </slice>
    <from sec="1296623527" usec="0"/>
    <to sec="1296623613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,004,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_184{
style=filled;
color=gray75;
3184[label="25.91.246.228;d;293pkt 293fpkt", shape=diamond, color=yellow];
4071[label="199.107.156.180;s;479pkt 479fpkt", shape=diamond, color=yellow];
9113[label="25.91.246.228;d;93pkt 93fpkt", shape=hexagon, color=black];
stat184[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.156.180:445, 25.91.246.228:*}[31.7328%]&lt;BR/&gt;{199.107.156.180:52938, *:*}[30.8977%]&lt;BR/&gt;{199.107.156.180:139, 25.91.246.228:*}[29.4363%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 445: (20.4046%)&lt;BR/&gt; 139: (18.9595%)&lt;BR/&gt; 52938: (8.55491%)&lt;BR/&gt; 443: (0.809249%)&lt;BR/&gt; 993: (0.404624%)&gt;];
}
3184--4071[label="1;293pkt 293fpkt"];
3184--9113[label="1;93pkt 93fpkt"];
4071--5470[label="0.0833333;4pkt 4fpkt"];
4071--6305[label="0.00208768;1pkt 1fpkt"];
4071--9113[label="1;93pkt 93fpkt"];
4071--9370[label="0.00909091;1pkt 1fpkt"];
4071--9953[label="0.00502513;1pkt 1fpkt"];
4071--11027[label="0.00208768;1pkt 1fpkt"];
4071--11104[label="0.00358423;1pkt 1fpkt"];
4071--11781[label="0.0128205;1pkt 1fpkt"];
4071--11990[label="0.00626305;3pkt 3fpkt"];
4071--12002[label="0.00417537;2pkt 2fpkt"];
4071--12003[label="0.00417537;2pkt 2fpkt"];
4071--12027[label="0.00417537;2pkt 2fpkt"];
4071--12043[label="0.00208768;1pkt 1fpkt"];
4071--12099[label="0.00417537;2pkt 2fpkt"];
4071--12100[label="0.00417537;2pkt 2fpkt"];
4071--12124[label="0.00417537;2pkt 2fpkt"];
4071--12136[label="0.00208768;1pkt 1fpkt"];
4071--12188[label="0.00417537;2pkt 2fpkt"];
4071--12189[label="0.00417537;2pkt 2fpkt"];
4071--12212[label="0.00417537;2pkt 2fpkt"];
4071--12223[label="0.00208768;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.156.180" src_port="52938"/>
      <filter dst_ip="25.91.246.228" src_ip="199.107.156.180" src_port="445"/>
      <filter dst_ip="25.91.246.228" src_ip="199.107.156.180" src_port="139"/>
    </slice>
    <from sec="1296622805" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="115.178.50.33"/>
      <from sec="1296623540" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623540" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_186{
style=filled;
color=gray75;
776[label="142.21.62.17;d;19pkt 19fpkt", shape=diamond, color=yellow];
8021[label="219.201.145.105;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat186[shape=component, label=&lt;Rules:&lt;BR/&gt;{204.249.236.32:80, 142.21.62.17:*}[31.5789%]&lt;BR/&gt;{218.130.202.53:80, 142.21.62.17:*}[21.0526%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62560: (5%)&lt;BR/&gt; 62557: (2.5%)&lt;BR/&gt; 62556: (2.5%)&lt;BR/&gt; 62555: (2.5%)&gt;];
}
776--4413[label="0.333333;1pkt 1fpkt"];
776--7246[label="0.157895;3pkt 3fpkt"];
776--8021[label="1;1pkt 1fpkt"];
776--12038[label="0.0526316;1pkt 1fpkt"];
776--12131[label="0.0526316;1pkt 1fpkt"];
776--12218[label="0.0526316;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.62.17" src_ip="204.249.236.32" src_port="80"/>
      <filter dst_ip="142.21.62.17" src_ip="218.130.202.53" src_port="80"/>
    </slice>
    <from sec="1296623389" usec="0"/>
    <to sec="1296623604" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="37.205.42.39"/>
      <from sec="1296623542" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623542" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="74.1.170.73"/>
      <from sec="1296623542" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623542" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="57.80.96.21"/>
      <from sec="1296623544" usec="0"/>
      <to sec="1296623614" usec="0"/>
    </slice>
    <from sec="1296623544" usec="0"/>
    <to sec="1296623614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.145.6.77"/>
      <from sec="1296623546" usec="0"/>
      <to sec="1296623624" usec="0"/>
    </slice>
    <from sec="1296623546" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="9.145.6.77"/>
      <from sec="1296623546" usec="0"/>
      <to sec="1296623624" usec="0"/>
    </slice>
    <from sec="1296623546" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="45.106.26.106"/>
      <from sec="1296623549" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623549" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="106.117.204.12"/>
      <from sec="1296623552" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623552" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="34.19.149.45"/>
      <from sec="1296623552" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623552" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_195{
style=filled;
color=gray75;
8058[label="219.201.144.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
8059[label="172.5.12.31;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat195[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.12.31:54414, 219.201.144.8:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54414: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
8058--8059[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.144.8" dst_port="80" src_ip="172.5.12.31" src_port="54414"/>
    </slice>
    <from sec="1296623555" usec="0"/>
    <to sec="1296623566" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="13.145.17.226"/>
      <from sec="1296623557" usec="0"/>
      <to sec="1296623564" usec="0"/>
    </slice>
    <from sec="1296623557" usec="0"/>
    <to sec="1296623564" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_198{
style=filled;
color=gray75;
7850[label="171.197.222.236;s;13pkt 13fpkt", shape=diamond, color=yellow];
8077[label="218.17.167.120;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat198[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.222.236:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 3999: (7.14286%)&lt;BR/&gt; 60562: (3.57143%)&lt;BR/&gt; 53137: (3.57143%)&lt;BR/&gt; 51920: (3.57143%)&gt;];
}
7850--8077[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.222.236" src_port="25"/>
    </slice>
    <from sec="1296623117" usec="0"/>
    <to sec="1296623579" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="172.5.213.45"/>
      <from sec="1296623568" usec="0"/>
      <to sec="1296623574" usec="0"/>
    </slice>
    <from sec="1296623568" usec="0"/>
    <to sec="1296623574" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="56.189.219.59"/>
      <from sec="1296623569" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623569" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="38.133.177.180"/>
      <from sec="1296623571" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623571" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="5.35.10.172"/>
      <from sec="1296623579" usec="0"/>
      <to sec="1296623596" usec="0"/>
    </slice>
    <from sec="1296623579" usec="0"/>
    <to sec="1296623596" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="194.171.174.8"/>
      <from sec="1296623581" usec="0"/>
      <to sec="1296623617" usec="0"/>
    </slice>
    <from sec="1296623581" usec="0"/>
    <to sec="1296623617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="171.197.162.60"/>
      <from sec="1296623590" usec="0"/>
      <to sec="1296623607" usec="0"/>
    </slice>
    <from sec="1296623590" usec="0"/>
    <to sec="1296623607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="13.23.127.221"/>
      <from sec="1296623592" usec="0"/>
      <to sec="1296623606" usec="0"/>
    </slice>
    <from sec="1296623592" usec="0"/>
    <to sec="1296623606" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_206{
style=filled;
color=gray75;
8069[label="171.197.144.128;d;14pkt 14fpkt", shape=diamond, color=yellow];
8130[label="8.192.141.79;s;14pkt 14fpkt", shape=diamond, color=yellow];
stat206[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.192.141.79:80, 171.197.144.128:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49421: (3.57143%)&lt;BR/&gt; 49419: (3.57143%)&lt;BR/&gt; 49417: (3.57143%)&lt;BR/&gt; 49415: (3.57143%)&gt;];
}
8069--8130[label="1;14pkt 14fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.144.128" src_ip="8.192.141.79" src_port="80"/>
    </slice>
    <from sec="1296623562" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="29.22.82.163"/>
      <from sec="1296623598" usec="0"/>
      <to sec="1296623623" usec="0"/>
    </slice>
    <from sec="1296623598" usec="0"/>
    <to sec="1296623623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_208{
style=filled;
color=gray75;
8065[label="171.197.241.72;s;2pkt 2fpkt", shape=diamond, color=yellow];
8135[label="31.144.154.10;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat208[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.241.72:80, 31.144.154.10:57633}[50%]&lt;BR/&gt;{171.197.241.72:80, 13.145.18.88:49584}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 57633: (33.3333%)&lt;BR/&gt; 49584: (16.6667%)&gt;];
}
8065--8135[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="13.145.18.88" dst_port="49584" src_ip="171.197.241.72" src_port="80"/>
      <filter dst_ip="31.144.154.10" dst_port="57633" src_ip="171.197.241.72" src_port="80"/>
    </slice>
    <from sec="1296623560" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="208.153.129.104"/>
      <from sec="1296623611" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623611" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="107.85.134.40"/>
      <from sec="1296623616" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623616" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_211{
style=filled;
color=gray75;
8083[label="198.48.48.233;d;1pkt 1fpkt", shape=diamond, color=yellow];
8150[label="208.42.90.100;s;1pkt 1fpkt", shape=diamond, color=yellow];
stat211[shape=component, label=&lt;Rules:&lt;BR/&gt;{208.42.90.100:52792, 198.48.48.233:25}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 52792: (50%)&lt;BR/&gt; 25: (50%)&gt;];
}
8083--8150[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.48.233" dst_port="25" src_ip="208.42.90.100" src_port="52792"/>
    </slice>
    <from sec="1296623569" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_212{
style=filled;
color=gray75;
357[label="106.41.45.1s;2pkt 2fpkt", shape=rectangle, color=red];
526[label="171.197.197.2d;1pkt 1fpkt", shape=rectangle, color=red];
537[label="171.197.170.248d;12pkt 12fpkt", shape=rectangle, color=red];
1854[label="171.197.170.248;d;60pkt 60fpkt", shape=diamond, color=yellow];
2241[label="198.112.145.227;s;10pkt 10fpkt", shape=diamond, color=yellow];
3053[label="171.197.197.2;d;36pkt 36fpkt", shape=diamond, color=yellow];
3581[label="45.209.20.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
3768[label="171.197.170.251;d;35pkt 35fpkt", shape=diamond, color=yellow];
4262[label="106.41.45.1;s;37pkt 37fpkt", shape=diamond, color=yellow];
8288[label="171.197.170.248;d;40pkt 40fpkt", shape=hexagon, color=black];
8678[label="45.209.20.94;s;1pkt 1fpkt", shape=hexagon, color=black];
9209[label="106.41.45.1;s;37pkt 37fpkt", shape=hexagon, color=black];
9575[label="171.197.197.2;d;17pkt 17fpkt", shape=hexagon, color=black];
10607[label="171.197.170.251;d;34pkt 34fpkt", shape=hexagon, color=black];
stat212[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 171.197.170.248:80}[43.5115%]&lt;BR/&gt;{106.41.45.1:*, *:80}[29.0076%]&lt;BR/&gt;{*:*, 171.197.197.2:80}[26.7176%]&lt;BR/&gt;{*:*, 171.197.170.251:80}[25.9542%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.9164%)&lt;BR/&gt; 445: (1.08359%)&lt;BR/&gt; 58681: (0.928793%)&lt;BR/&gt; 54415: (0.928793%)&lt;BR/&gt; 54003: (0.928793%)&gt;];
}
357--1854[label="0.5;1pkt 1fpkt"];
357--3768[label="0.5;1pkt 1fpkt"];
357--4262[label="1;2pkt 2fpkt"];
357--9209[label="1;2pkt 2fpkt"];
357--10607[label="0.5;1pkt 1fpkt"];
526--3053[label="1;1pkt 1fpkt"];
526--3581[label="1;1pkt 1fpkt"];
526--8678[label="1;1pkt 1fpkt"];
526--9575[label="1;1pkt 1fpkt"];
537--1854[label="1;12pkt 12fpkt"];
537--2241[label="0.8;8pkt 8fpkt"];
537--4262[label="0.333333;4pkt 4fpkt"];
537--8288[label="1;12pkt 12fpkt"];
537--9209[label="0.333333;4pkt 4fpkt"];
1854--2241[label="1;10pkt 10fpkt"];
1854--4262[label="0.459459;17pkt 17fpkt"];
1854--8288[label="1;40pkt 40fpkt"];
1854--9209[label="0.459459;17pkt 17fpkt"];
1854--11990[label="0.0833333;5pkt 5fpkt"];
1854--12002[label="0.0333333;2pkt 2fpkt"];
1854--12099[label="0.0333333;2pkt 2fpkt"];
1854--12188[label="0.0333333;2pkt 2fpkt"];
2241--8288[label="1;10pkt 10fpkt"];
3053--3581[label="1;1pkt 1fpkt"];
3053--4262[label="0.111111;4pkt 4fpkt"];
3053--8678[label="1;1pkt 1fpkt"];
3053--9209[label="0.111111;4pkt 4fpkt"];
3053--9575[label="1;17pkt 17fpkt"];
3053--11990[label="0.0555556;2pkt 2fpkt"];
3053--12027[label="0.0555556;2pkt 2fpkt"];
3053--12124[label="0.0555556;2pkt 2fpkt"];
3053--12212[label="0.0555556;2pkt 2fpkt"];
3581--8678[label="1;1pkt 1fpkt"];
3581--9575[label="1;1pkt 1fpkt"];
3768--4262[label="0.457143;16pkt 16fpkt"];
3768--9209[label="0.457143;16pkt 16fpkt"];
3768--10607[label="1;34pkt 34fpkt"];
3768--11969[label="0.0285714;1pkt 1fpkt"];
3768--11990[label="0.2;7pkt 7fpkt"];
4262--8288[label="0.216216;8pkt 8fpkt"];
4262--9209[label="1;37pkt 37fpkt"];
4262--9575[label="0.235294;4pkt 4fpkt"];
4262--10607[label="0.470588;16pkt 16fpkt"];
4262--11990[label="0.0810811;3pkt 3fpkt"];
8288--9209[label="0.216216;8pkt 8fpkt"];
8678--9575[label="1;1pkt 1fpkt"];
9209--9575[label="0.235294;4pkt 4fpkt"];
9209--10607[label="0.470588;16pkt 16fpkt"];
9209--11990[label="0.0810811;3pkt 3fpkt"];
9575--11990[label="0.117647;2pkt 2fpkt"];
10607--11969[label="0.0294118;1pkt 1fpkt"];
10607--11990[label="0.205882;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="106.41.45.1"/>
      <filter dst_ip="171.197.170.248" dst_port="80"/>
      <filter dst_ip="171.197.197.2" dst_port="80"/>
      <filter dst_ip="171.197.170.251" dst_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_213{
style=filled;
color=gray75;
2266[label="219.201.145.92;d;2pkt 2fpkt", shape=diamond, color=yellow];
2277[label="219.201.145.106;d;3pkt 3fpkt", shape=diamond, color=yellow];
2604[label="142.21.21.86;s;38pkt 38fpkt", shape=diamond, color=yellow];
8334[label="219.201.145.92;d;2pkt 2fpkt", shape=hexagon, color=black];
8336[label="219.201.145.106;d;1pkt 1fpkt", shape=hexagon, color=black];
stat213[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.21.86:*, *:80}[92.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (47.8261%)&lt;BR/&gt; 4826: (3.26087%)&lt;BR/&gt; 3438: (3.26087%)&lt;BR/&gt; 56782: (2.17391%)&lt;BR/&gt; 4807: (2.17391%)&gt;];
}
2266--2604[label="0.5;1pkt 1fpkt"];
2266--8334[label="1;2pkt 2fpkt"];
2277--2604[label="1;3pkt 3fpkt"];
2277--8336[label="1;1pkt 1fpkt"];
2604--2880[label="0.105263;4pkt 4fpkt"];
2604--3650[label="0.0526316;2pkt 2fpkt"];
2604--5479[label="0.0263158;1pkt 1fpkt"];
2604--5888[label="0.0263158;1pkt 1fpkt"];
2604--6488[label="0.0263158;1pkt 1fpkt"];
2604--7629[label="0.0263158;1pkt 1fpkt"];
2604--8334[label="0.5;1pkt 1fpkt"];
2604--8336[label="1;1pkt 1fpkt"];
2604--8725[label="0.0526316;2pkt 2fpkt"];
2604--8786[label="0.142857;1pkt 1fpkt"];
2604--9369[label="0.0526316;2pkt 2fpkt"];
2604--10744[label="0.0263158;1pkt 1fpkt"];
2604--11158[label="0.105263;4pkt 4fpkt"];
2604--11990[label="0.342105;13pkt 13fpkt"];
2604--12002[label="0.0789474;3pkt 3fpkt"];
2604--12027[label="0.0789474;3pkt 3fpkt"];
2604--12099[label="0.0789474;3pkt 3fpkt"];
2604--12124[label="0.0789474;3pkt 3fpkt"];
2604--12188[label="0.0789474;3pkt 3fpkt"];
2604--12212[label="0.0789474;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="142.21.21.86"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,503,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="175.177.156.21"/>
      <from sec="1296622889" usec="0"/>
      <to sec="1296622914" usec="0"/>
    </slice>
    <from sec="1296622889" usec="0"/>
    <to sec="1296622914" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_217{
style=filled;
color=gray75;
871[label="204.143.24.37;d;1pkt 1fpkt", shape=diamond, color=yellow];
8364[label="204.143.24.37;d;1pkt 1fpkt", shape=hexagon, color=black];
stat217[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.62.17:63627, 204.143.24.37:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 63627: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
871--8364[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.143.24.37" dst_port="80" src_ip="142.21.62.17" src_port="63627"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296622956" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,502,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_218{
style=filled;
color=gray75;
876[label="217.96.111.115;d;2312pkt 2312fpkt", shape=diamond, color=yellow];
877[label="198.48.48.48;s;246pkt 246fpkt", shape=diamond, color=yellow];
1097[label="198.48.48.135;s;468pkt 468fpkt", shape=diamond, color=yellow];
1116[label="198.48.48.227;s;208pkt 208fpkt", shape=diamond, color=yellow];
1327[label="198.48.48.244;s;311pkt 311fpkt", shape=diamond, color=yellow];
1440[label="198.48.48.77;s;329pkt 329fpkt", shape=diamond, color=yellow];
2646[label="198.60.142.166;s;231pkt 231fpkt", shape=diamond, color=yellow];
2661[label="198.48.48.56;s;106pkt 106fpkt", shape=diamond, color=yellow];
2799[label="198.48.48.53;s;197pkt 197fpkt", shape=diamond, color=yellow];
2925[label="198.48.48.37;s;119pkt 119fpkt", shape=diamond, color=yellow];
4640[label="219.232.22.35;d;197pkt 197fpkt", shape=diamond, color=yellow];
8399[label="198.48.48.135;s;194pkt 194fpkt", shape=hexagon, color=black];
8437[label="198.60.142.166;s;231pkt 231fpkt", shape=hexagon, color=black];
8860[label="198.48.48.77;s;329pkt 329fpkt", shape=hexagon, color=black];
9505[label="219.232.22.35;d;197pkt 197fpkt", shape=hexagon, color=black];
stat218[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:22, 217.96.111.115:*}[88.8547%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 22: (45.5242%)&lt;BR/&gt; 6667: (3.62115%)&lt;BR/&gt; 113: (0.581498%)&lt;BR/&gt; 0: (0.105727%)&lt;BR/&gt; 7000: (0.0881057%)&gt;];
}
876--877[label="0.995935;245pkt 245fpkt"];
876--1097[label="1;468pkt 468fpkt"];
876--1116[label="0.980769;204pkt 204fpkt"];
876--1327[label="0.694534;216pkt 216fpkt"];
876--1440[label="1;329pkt 329fpkt"];
876--2464[label="0.970732;199pkt 199fpkt"];
876--2646[label="0.935065;216pkt 216fpkt"];
876--2661[label="0.90566;96pkt 96fpkt"];
876--2799[label="1;197pkt 197fpkt"];
876--2925[label="1;119pkt 119fpkt"];
876--8399[label="1;194pkt 194fpkt"];
876--8437[label="0.935065;216pkt 216fpkt"];
876--8860[label="1;329pkt 329fpkt"];
1097--8399[label="1;194pkt 194fpkt"];
1116--11966[label="0.00480769;1pkt 1fpkt"];
1116--12072[label="0.00480769;1pkt 1fpkt"];
1116--12165[label="0.00480769;1pkt 1fpkt"];
1327--4640[label="0.162437;32pkt 32fpkt"];
1327--9505[label="0.162437;32pkt 32fpkt"];
1440--8860[label="1;329pkt 329fpkt"];
2646--6335[label="0.0562771;13pkt 13fpkt"];
2646--8437[label="1;231pkt 231fpkt"];
2646--12023[label="0.004329;1pkt 1fpkt"];
2646--12120[label="0.004329;1pkt 1fpkt"];
2646--12208[label="0.004329;1pkt 1fpkt"];
2661--5842[label="0.0243902;2pkt 2fpkt"];
2661--12002[label="0.00943396;1pkt 1fpkt"];
2661--12003[label="0.00943396;1pkt 1fpkt"];
2661--12043[label="0.00943396;1pkt 1fpkt"];
2661--12099[label="0.00943396;1pkt 1fpkt"];
2661--12100[label="0.00943396;1pkt 1fpkt"];
2661--12136[label="0.00943396;1pkt 1fpkt"];
2661--12188[label="0.00943396;1pkt 1fpkt"];
2661--12189[label="0.00943396;1pkt 1fpkt"];
2661--12223[label="0.00943396;1pkt 1fpkt"];
4640--9505[label="1;197pkt 197fpkt"];
4640--11149[label="0.00628931;1pkt 1fpkt"];
8437--12023[label="0.004329;1pkt 1fpkt"];
8437--12120[label="0.004329;1pkt 1fpkt"];
8437--12208[label="0.004329;1pkt 1fpkt"];
9505--11149[label="0.00628931;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="217.96.111.115" src_port="22"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="131.10.142.98"/>
      <from sec="1296623463" usec="0"/>
      <to sec="1296623537" usec="0"/>
    </slice>
    <from sec="1296623463" usec="0"/>
    <to sec="1296623537" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_220{
style=filled;
color=gray75;
2482[label="216.81.62.42;d;180pkt 180fpkt", shape=diamond, color=yellow];
4253[label="36.139.187.159;s;6pkt 6fpkt", shape=diamond, color=yellow];
10015[label="36.139.187.159;s;6pkt 6fpkt", shape=hexagon, color=black];
stat220[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 216.81.62.42:*}[74.4444%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (34.8958%)&lt;BR/&gt; 8952: (8.33333%)&lt;BR/&gt; 993: (3.90625%)&lt;BR/&gt; 0: (1.04167%)&lt;BR/&gt; 63348: (0.78125%)&gt;];
}
2482--2723[label="0.0277778;5pkt 5fpkt"];
2482--2915[label="0.0111111;2pkt 2fpkt"];
2482--2938[label="0.0166667;3pkt 3fpkt"];
2482--4253[label="1;6pkt 6fpkt"];
2482--4488[label="0.00555556;1pkt 1fpkt"];
2482--4578[label="0.0258621;3pkt 3fpkt"];
2482--4723[label="0.0144928;2pkt 2fpkt"];
2482--4757[label="0.0252101;3pkt 3fpkt"];
2482--4884[label="0.030303;1pkt 1fpkt"];
2482--5159[label="0.00555556;1pkt 1fpkt"];
2482--5219[label="0.0229885;2pkt 2fpkt"];
2482--6372[label="0.0166667;3pkt 3fpkt"];
2482--7387[label="0.666667;12pkt 12fpkt"];
2482--8495[label="0.0166667;3pkt 3fpkt"];
2482--8811[label="0.0277778;5pkt 5fpkt"];
2482--8918[label="0.0277778;5pkt 5fpkt"];
2482--9306[label="0.00555556;1pkt 1fpkt"];
2482--9355[label="0.0166667;3pkt 3fpkt"];
2482--9843[label="0.0111111;2pkt 2fpkt"];
2482--10000[label="0.030303;1pkt 1fpkt"];
2482--10015[label="1;6pkt 6fpkt"];
2482--10092[label="0.00555556;1pkt 1fpkt"];
2482--10186[label="0.0555556;10pkt 10fpkt"];
2482--11966[label="0.0277778;5pkt 5fpkt"];
2482--11988[label="0.0611111;11pkt 11fpkt"];
2482--11999[label="0.05;9pkt 9fpkt"];
2482--12004[label="0.00555556;1pkt 1fpkt"];
2482--12024[label="0.105556;19pkt 19fpkt"];
2482--12072[label="0.0277778;5pkt 5fpkt"];
2482--12089[label="0.0611111;11pkt 11fpkt"];
2482--12096[label="0.05;9pkt 9fpkt"];
2482--12101[label="0.00555556;1pkt 1fpkt"];
2482--12121[label="0.105556;19pkt 19fpkt"];
2482--12165[label="0.0277778;5pkt 5fpkt"];
2482--12185[label="0.05;9pkt 9fpkt"];
2482--12190[label="0.00555556;1pkt 1fpkt"];
2482--12209[label="0.105556;19pkt 19fpkt"];
4253--10015[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="216.81.62.42" src_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_221{
style=filled;
color=gray75;
26[label="142.21.172.20s;1pkt 1fpkt", shape=rectangle, color=red];
4287[label="142.21.172.20;s;4pkt 4fpkt", shape=diamond, color=yellow];
4412[label="219.201.144.140;d;1pkt 1fpkt", shape=diamond, color=yellow];
stat221[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.172.20:1374, 6.131.165.1:80}[25%]&lt;BR/&gt;{142.21.172.20:1403, 161.27.97.28:80}[25%]&lt;BR/&gt;{142.21.172.20:1407, 218.13.28.132:80}[25%]&lt;BR/&gt;{142.21.172.20:1413, 219.201.144.140:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1413: (25%)&lt;BR/&gt; 1407: (8.33333%)&lt;BR/&gt; 1403: (8.33333%)&lt;BR/&gt; 1374: (8.33333%)&gt;];
}
26--4287[label="1;1pkt 1fpkt"];
26--4412[label="1;1pkt 1fpkt"];
4287--4412[label="1;1pkt 1fpkt"];
4287--8574[label="0.25;1pkt 1fpkt"];
4287--11990[label="0.25;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.144.140" dst_port="80" src_ip="142.21.172.20" src_port="1413"/>
      <filter dst_ip="218.13.28.132" dst_port="80" src_ip="142.21.172.20" src_port="1407"/>
      <filter dst_ip="161.27.97.28" dst_port="80" src_ip="142.21.172.20" src_port="1403"/>
      <filter dst_ip="6.131.165.1" dst_port="80" src_ip="142.21.172.20" src_port="1374"/>
    </slice>
    <from sec="1296622884" usec="0"/>
    <to sec="1296623256" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_223{
style=filled;
color=gray75;
2374[label="142.21.86.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
8661[label="142.21.86.218;s;1pkt 1fpkt", shape=hexagon, color=black];
8662[label="179.208.51.6;d;1pkt 1fpkt", shape=hexagon, color=black];
stat223[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.86.218:80, 179.208.51.6:54879}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 54879: (50%)&lt;BR/&gt; 80: (50%)&gt;];
}
2374--8661[label="1;1pkt 1fpkt"];
2374--8662[label="1;1pkt 1fpkt"];
8661--8662[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="179.208.51.6" dst_port="54879" src_ip="142.21.86.218" src_port="80"/>
    </slice>
    <from sec="1296622889" usec="0"/>
    <to sec="1296622894" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_224{
style=filled;
color=gray75;
3598[label="128.139.132.31;d;3pkt 3fpkt", shape=diamond, color=yellow];
8683[label="128.139.132.31;d;3pkt 3fpkt", shape=hexagon, color=black];
stat224[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.216.104:1652, 128.139.132.31:80}[33.3333%]&lt;BR/&gt;{171.197.216.104:1654, 128.139.132.31:80}[33.3333%]&lt;BR/&gt;{171.197.216.104:1658, 128.139.132.31:80}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1658: (16.6667%)&lt;BR/&gt; 1654: (16.6667%)&lt;BR/&gt; 1652: (16.6667%)&gt;];
}
3598--8683[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="128.139.132.31" dst_port="80" src_ip="171.197.216.104" src_port="1658"/>
      <filter dst_ip="128.139.132.31" dst_port="80" src_ip="171.197.216.104" src_port="1654"/>
      <filter dst_ip="128.139.132.31" dst_port="80" src_ip="171.197.216.104" src_port="1652"/>
    </slice>
    <from sec="1296622973" usec="0"/>
    <to sec="1296623068" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_227{
style=filled;
color=gray75;
1190[label="198.60.21.182;d;4pkt 4fpkt", shape=diamond, color=yellow];
1191[label="131.73.19.43;s;2pkt 2fpkt", shape=diamond, color=yellow];
8788[label="198.60.21.182;d;3pkt 3fpkt", shape=hexagon, color=black];
stat227[shape=component, label=&lt;Rules:&lt;BR/&gt;{152.156.120.28:15183, 198.60.21.182:38474}[20%]&lt;BR/&gt;{192.18.224.149:80, 198.60.21.182:4427}[20%]&lt;BR/&gt;{192.18.87.194:80, 198.60.21.182:4388}[20%]&lt;BR/&gt;{131.73.19.43:8964, 142.21.180.29:49398}[20%]&lt;BR/&gt;{131.73.19.43:9264, 198.60.21.182:3725}[20%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 9264: (16.6667%)&lt;BR/&gt; 3725: (16.6667%)&lt;BR/&gt; 80: (16.6667%)&lt;BR/&gt; 38474: (11.1111%)&lt;BR/&gt; 15183: (11.1111%)&gt;];
}
1190--1191[label="0.5;1pkt 1fpkt"];
1190--8788[label="1;3pkt 3fpkt"];
1191--8730[label="0.5;1pkt 1fpkt"];
1191--8788[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.21.182" dst_port="3725" src_ip="131.73.19.43" src_port="9264"/>
      <filter dst_ip="142.21.180.29" dst_port="49398" src_ip="131.73.19.43" src_port="8964"/>
      <filter dst_ip="198.60.21.182" dst_port="4388" src_ip="192.18.87.194" src_port="80"/>
      <filter dst_ip="198.60.21.182" dst_port="4427" src_ip="192.18.224.149" src_port="80"/>
      <filter dst_ip="198.60.21.182" dst_port="38474" src_ip="152.156.120.28" src_port="15183"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_228{
style=filled;
color=gray75;
1351[label="198.48.42.127;d;689pkt 689fpkt", shape=diamond, color=yellow];
8830[label="198.48.42.127;d;680pkt 680fpkt", shape=hexagon, color=black];
stat228[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 198.48.42.127:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
1351--8830[label="1;680pkt 680fpkt"];
</description>
    <slice>
      <filter dst_ip="198.48.42.127"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_229{
style=filled;
color=gray75;
5168[label="199.107.149.191;s;167pkt 167fpkt", shape=diamond, color=yellow];
10548[label="199.107.149.191;s;142pkt 142fpkt", shape=hexagon, color=black];
stat229[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.149.191:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5168--5173[label="0.00900901;1pkt 1fpkt"];
5168--6305[label="0.00598802;1pkt 1fpkt"];
5168--8743[label="0.0232558;1pkt 1fpkt"];
5168--9483[label="0.00598802;1pkt 1fpkt"];
5168--10171[label="0.0104167;1pkt 1fpkt"];
5168--10548[label="1;142pkt 142fpkt"];
5168--11027[label="0.00598802;1pkt 1fpkt"];
5168--11104[label="0.00598802;1pkt 1fpkt"];
5168--11408[label="0.00598802;1pkt 1fpkt"];
5168--11793[label="0.00719424;1pkt 1fpkt"];
10548--11027[label="0.00704225;1pkt 1fpkt"];
10548--11104[label="0.00704225;1pkt 1fpkt"];
10548--11408[label="0.00704225;1pkt 1fpkt"];
10548--11793[label="0.00719424;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.149.191"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623623" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_230{
style=filled;
color=gray75;
115[label="171.197.58.112s;2pkt 2fpkt", shape=rectangle, color=red];
3057[label="171.197.58.112;s;119pkt 119fpkt", shape=diamond, color=yellow];
3626[label="105.18.233.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
9288[label="105.18.233.55;d;2pkt 2fpkt", shape=hexagon, color=black];
stat230[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.58.112:*, *:80}[74.7899%]&lt;BR/&gt;{171.197.58.112:*, *:443}[25.2101%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38%)&lt;BR/&gt; 443: (12%)&lt;BR/&gt; 50383: (1.6%)&lt;BR/&gt; 50382: (1.6%)&lt;BR/&gt; 51372: (0.4%)&gt;];
}
115--3057[label="1;2pkt 2fpkt"];
115--3626[label="1;2pkt 2fpkt"];
115--9288[label="1;2pkt 2fpkt"];
3057--3284[label="0.0168067;2pkt 2fpkt"];
3057--3626[label="1;2pkt 2fpkt"];
3057--3727[label="0.00840336;1pkt 1fpkt"];
3057--4006[label="0.03125;3pkt 3fpkt"];
3057--4763[label="0.0168067;2pkt 2fpkt"];
3057--4975[label="0.0105263;1pkt 1fpkt"];
3057--5837[label="0.0336134;4pkt 4fpkt"];
3057--6016[label="0.057971;4pkt 4fpkt"];
3057--7160[label="0.166667;11pkt 11fpkt"];
3057--8241[label="0.00840336;1pkt 1fpkt"];
3057--8248[label="0.0168067;2pkt 2fpkt"];
3057--8278[label="0.00840336;1pkt 1fpkt"];
3057--8499[label="0.0336134;4pkt 4fpkt"];
3057--8900[label="0.0336134;4pkt 4fpkt"];
3057--9288[label="1;2pkt 2fpkt"];
3057--9589[label="0.0168067;2pkt 2fpkt"];
3057--11670[label="0.00840336;1pkt 1fpkt"];
3057--11990[label="0.0504202;6pkt 6fpkt"];
3057--12002[label="0.0420168;5pkt 5fpkt"];
3057--12003[label="0.0336134;4pkt 4fpkt"];
3057--12027[label="0.0504202;6pkt 6fpkt"];
3057--12042[label="0.00840336;1pkt 1fpkt"];
3057--12043[label="0.00840336;1pkt 1fpkt"];
3057--12099[label="0.0420168;5pkt 5fpkt"];
3057--12100[label="0.0336134;4pkt 4fpkt"];
3057--12124[label="0.0504202;6pkt 6fpkt"];
3057--12135[label="0.00840336;1pkt 1fpkt"];
3057--12136[label="0.00840336;1pkt 1fpkt"];
3057--12188[label="0.0420168;5pkt 5fpkt"];
3057--12189[label="0.0336134;4pkt 4fpkt"];
3057--12212[label="0.0504202;6pkt 6fpkt"];
3057--12222[label="0.00840336;1pkt 1fpkt"];
3057--12223[label="0.00840336;1pkt 1fpkt"];
3626--9288[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.58.112"/>
      <filter dst_port="443" src_ip="171.197.58.112"/>
    </slice>
    <from sec="1296622803" usec="0"/>
    <to sec="1296623620" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_232{
style=filled;
color=gray75;
3847[label="199.107.149.76;d;621pkt 621fpkt", shape=diamond, color=yellow];
8925[label="199.107.149.76;d;621pkt 621fpkt", shape=hexagon, color=black];
stat232[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 199.107.149.76:0}[99.839%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (99.839%)&lt;BR/&gt; 6000: (0.0805153%)&lt;BR/&gt; 1433: (0.0805153%)&gt;];
}
3847--6306[label="0.00161031;1pkt 1fpkt"];
3847--8925[label="1;621pkt 621fpkt"];
3847--10516[label="0.00161031;1pkt 1fpkt"];
3847--11870[label="0.00161031;1pkt 1fpkt"];
3847--12021[label="0.00161031;1pkt 1fpkt"];
3847--12118[label="0.00161031;1pkt 1fpkt"];
3847--12206[label="0.00161031;1pkt 1fpkt"];
8925--10516[label="0.00161031;1pkt 1fpkt"];
8925--11870[label="0.00161031;1pkt 1fpkt"];
8925--12021[label="0.00161031;1pkt 1fpkt"];
8925--12118[label="0.00161031;1pkt 1fpkt"];
8925--12206[label="0.00161031;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.149.76"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_233{
style=filled;
color=gray75;
6349[label="171.197.205.182;s;82pkt 82fpkt", shape=diamond, color=yellow];
7395[label="217.58.204.9;d;55pkt 55fpkt", shape=diamond, color=yellow];
11592[label="217.58.204.9;d;55pkt 55fpkt", shape=hexagon, color=black];
stat233[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.205.182:*, 217.58.204.9:443}[67.0732%]&lt;BR/&gt;{171.197.205.182:*, *:80}[24.3902%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (44.7917%)&lt;BR/&gt; 80: (5.20833%)&lt;BR/&gt; 55640: (0.78125%)&lt;BR/&gt; 55639: (0.78125%)&lt;BR/&gt; 55638: (0.78125%)&gt;];
}
6349--7205[label="0.0121951;1pkt 1fpkt"];
6349--7395[label="1;55pkt 55fpkt"];
6349--7816[label="0.0853659;7pkt 7fpkt"];
6349--8929[label="0.0363636;2pkt 2fpkt"];
6349--11234[label="0.0121951;1pkt 1fpkt"];
6349--11592[label="1;55pkt 55fpkt"];
6349--12002[label="0.121951;10pkt 10fpkt"];
6349--12027[label="0.243902;20pkt 20fpkt"];
6349--12099[label="0.121951;10pkt 10fpkt"];
6349--12124[label="0.243902;20pkt 20fpkt"];
6349--12188[label="0.121951;10pkt 10fpkt"];
6349--12212[label="0.243902;20pkt 20fpkt"];
7395--11592[label="1;55pkt 55fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.205.182"/>
      <filter dst_ip="217.58.204.9" dst_port="443" src_ip="171.197.205.182"/>
    </slice>
    <from sec="1296623334" usec="0"/>
    <to sec="1296623468" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_235{
style=filled;
color=gray75;
361[label="171.197.160.11s;3pkt 3fpkt", shape=rectangle, color=red];
5823[label="171.197.160.11;s;200pkt 200fpkt", shape=diamond, color=yellow];
7583[label="27.156.168.204;d;17pkt 17fpkt", shape=diamond, color=yellow];
11166[label="171.197.160.11;s;150pkt 150fpkt", shape=hexagon, color=black];
stat235[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.160.11:*, *:80}[51.5%]&lt;BR/&gt;{171.197.160.11:53812, *:*}[46%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (24.4595%)&lt;BR/&gt; 53812: (24.1892%)&lt;BR/&gt; 443: (0.810811%)&lt;BR/&gt; 56543: (0.540541%)&lt;BR/&gt; 56542: (0.540541%)&gt;];
}
361--5823[label="1;3pkt 3fpkt"];
361--7583[label="1;3pkt 3fpkt"];
361--11166[label="1;3pkt 3fpkt"];
5823--7583[label="1;17pkt 17fpkt"];
5823--9008[label="0.005;1pkt 1fpkt"];
5823--9013[label="0.01;2pkt 2fpkt"];
5823--11166[label="1;150pkt 150fpkt"];
5823--11799[label="0.01;2pkt 2fpkt"];
5823--11990[label="0.025;5pkt 5fpkt"];
5823--12002[label="0.13;26pkt 26fpkt"];
5823--12027[label="0.055;11pkt 11fpkt"];
5823--12042[label="0.01;2pkt 2fpkt"];
5823--12099[label="0.13;26pkt 26fpkt"];
5823--12124[label="0.055;11pkt 11fpkt"];
5823--12135[label="0.01;2pkt 2fpkt"];
5823--12188[label="0.13;26pkt 26fpkt"];
5823--12212[label="0.055;11pkt 11fpkt"];
5823--12222[label="0.01;2pkt 2fpkt"];
7583--11166[label="1;17pkt 17fpkt"];
11166--11799[label="0.0133333;2pkt 2fpkt"];
11166--11990[label="0.0333333;5pkt 5fpkt"];
11166--12002[label="0.173333;26pkt 26fpkt"];
11166--12027[label="0.0733333;11pkt 11fpkt"];
11166--12042[label="0.0133333;2pkt 2fpkt"];
11166--12099[label="0.173333;26pkt 26fpkt"];
11166--12124[label="0.0733333;11pkt 11fpkt"];
11166--12135[label="0.0133333;2pkt 2fpkt"];
11166--12188[label="0.173333;26pkt 26fpkt"];
11166--12212[label="0.0733333;11pkt 11fpkt"];
11166--12222[label="0.0133333;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.160.11" src_port="53812"/>
      <filter dst_port="80" src_ip="171.197.160.11"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_236{
style=filled;
color=gray75;
4143[label="210.245.100.47;d;19pkt 19fpkt", shape=diamond, color=yellow];
4146[label="198.60.0.197;s;19pkt 19fpkt", shape=diamond, color=yellow];
9152[label="198.60.0.197;s;13pkt 13fpkt", shape=hexagon, color=black];
10372[label="210.245.100.47;d;19pkt 19fpkt", shape=hexagon, color=black];
stat236[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.0.197:*, 210.245.100.47:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50012: (2.85714%)&lt;BR/&gt; 50011: (2.85714%)&lt;BR/&gt; 50010: (2.85714%)&lt;BR/&gt; 50009: (2.85714%)&gt;];
}
4143--4146[label="1;19pkt 19fpkt"];
4143--9152[label="1;13pkt 13fpkt"];
4143--10372[label="1;19pkt 19fpkt"];
4143--11990[label="0.157895;3pkt 3fpkt"];
4146--9152[label="1;13pkt 13fpkt"];
4146--10372[label="1;19pkt 19fpkt"];
4146--11990[label="0.157895;3pkt 3fpkt"];
9152--10372[label="1;13pkt 13fpkt"];
10372--11990[label="0.157895;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="210.245.100.47" dst_port="80" src_ip="198.60.0.197"/>
    </slice>
    <from sec="1296622810" usec="0"/>
    <to sec="1296623191" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_237{
style=filled;
color=gray75;
2296[label="204.143.24.41;d;1pkt 1fpkt", shape=diamond, color=yellow];
9200[label="142.21.206.117;s;2pkt 2fpkt", shape=hexagon, color=black];
stat237[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.206.117:49182, 2.170.129.4:80}[50%]&lt;BR/&gt;{142.21.206.117:49183, 204.143.24.41:80}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 49183: (33.3333%)&lt;BR/&gt; 49182: (16.6667%)&gt;];
}
2296--9200[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="204.143.24.41" dst_port="80" src_ip="142.21.206.117" src_port="49183"/>
      <filter dst_ip="2.170.129.4" dst_port="80" src_ip="142.21.206.117" src_port="49182"/>
    </slice>
    <from sec="1296622852" usec="0"/>
    <to sec="1296622943" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_238{
style=filled;
color=gray75;
1150[label="172.1.157.205;d;3pkt 3fpkt", shape=diamond, color=yellow];
3446[label="199.144.167.193;s;1pkt 1fpkt", shape=diamond, color=yellow];
7651[label="199.144.170.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
9228[label="199.144.167.193;s;1pkt 1fpkt", shape=hexagon, color=black];
11120[label="172.1.157.205;d;3pkt 3fpkt", shape=hexagon, color=black];
stat238[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.144.170.54:1119, 172.1.157.205:49266}[33.3333%]&lt;BR/&gt;{199.144.170.55:3724, 172.1.157.205:49261}[33.3333%]&lt;BR/&gt;{199.144.167.193:3724, 172.1.157.205:49370}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3724: (38.8889%)&lt;BR/&gt; 49370: (22.2222%)&lt;BR/&gt; 49261: (16.6667%)&lt;BR/&gt; 49266: (11.1111%)&lt;BR/&gt; 1119: (11.1111%)&gt;];
}
1150--3446[label="1;1pkt 1fpkt"];
1150--7651[label="1;1pkt 1fpkt"];
1150--9228[label="1;1pkt 1fpkt"];
1150--11120[label="1;3pkt 3fpkt"];
3446--9228[label="1;1pkt 1fpkt"];
3446--11120[label="1;1pkt 1fpkt"];
7651--11120[label="1;1pkt 1fpkt"];
9228--11120[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="172.1.157.205" dst_port="49370" src_ip="199.144.167.193" src_port="3724"/>
      <filter dst_ip="172.1.157.205" dst_port="49261" src_ip="199.144.170.55" src_port="3724"/>
      <filter dst_ip="172.1.157.205" dst_port="49266" src_ip="199.144.170.54" src_port="1119"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_241{
style=filled;
color=gray75;
3313[label="142.21.212.145;s;194pkt 194fpkt", shape=diamond, color=yellow];
3586[label="131.250.27.182;d;80pkt 80fpkt", shape=diamond, color=yellow];
9273[label="131.250.27.182;d;80pkt 80fpkt", shape=hexagon, color=black];
10394[label="142.21.212.145;s;124pkt 124fpkt", shape=hexagon, color=black];
stat241[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.212.145:80, 131.250.27.182:*}[41.2371%]&lt;BR/&gt;{142.21.212.145:80, 21.22.56.166:*}[20.1031%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2133: (0.41841%)&lt;BR/&gt; 2132: (0.41841%)&lt;BR/&gt; 2131: (0.41841%)&lt;BR/&gt; 2130: (0.41841%)&gt;];
}
3313--3586[label="1;80pkt 80fpkt"];
3313--6338[label="0.149485;29pkt 29fpkt"];
3313--9273[label="1;80pkt 80fpkt"];
3313--10394[label="1;124pkt 124fpkt"];
3313--11966[label="0.0103093;2pkt 2fpkt"];
3313--11988[label="0.00515464;1pkt 1fpkt"];
3313--11999[label="0.056701;11pkt 11fpkt"];
3313--12024[label="0.103093;20pkt 20fpkt"];
3313--12072[label="0.0103093;2pkt 2fpkt"];
3313--12089[label="0.00515464;1pkt 1fpkt"];
3313--12096[label="0.056701;11pkt 11fpkt"];
3313--12121[label="0.103093;20pkt 20fpkt"];
3313--12165[label="0.0103093;2pkt 2fpkt"];
3313--12185[label="0.056701;11pkt 11fpkt"];
3313--12209[label="0.103093;20pkt 20fpkt"];
3586--9273[label="1;80pkt 80fpkt"];
3586--10394[label="1;80pkt 80fpkt"];
9273--10394[label="1;80pkt 80fpkt"];
10394--11966[label="0.016129;2pkt 2fpkt"];
10394--11988[label="0.00806452;1pkt 1fpkt"];
10394--11999[label="0.0887097;11pkt 11fpkt"];
10394--12024[label="0.0645161;8pkt 8fpkt"];
10394--12072[label="0.016129;2pkt 2fpkt"];
10394--12089[label="0.00806452;1pkt 1fpkt"];
10394--12096[label="0.0887097;11pkt 11fpkt"];
10394--12121[label="0.0645161;8pkt 8fpkt"];
10394--12165[label="0.016129;2pkt 2fpkt"];
10394--12185[label="0.0887097;11pkt 11fpkt"];
10394--12209[label="0.0645161;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="131.250.27.182" src_ip="142.21.212.145" src_port="80"/>
      <filter dst_ip="21.22.56.166" src_ip="142.21.212.145" src_port="80"/>
    </slice>
    <from sec="1296622823" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_244{
style=filled;
color=gray75;
4628[label="172.1.8.124;s;1070pkt 1070fpkt", shape=diamond, color=yellow];
9492[label="172.1.8.124;s;517pkt 517fpkt", shape=hexagon, color=black];
stat244[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.8.124:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4628--9492[label="1;517pkt 517fpkt"];
</description>
    <slice>
      <filter src_ip="172.1.8.124"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_245{
style=filled;
color=gray75;
1108[label="199.144.167.199;d;1pkt 1fpkt", shape=diamond, color=yellow];
1110[label="142.21.174.160;s;22pkt 22fpkt", shape=diamond, color=yellow];
4321[label="199.144.167.129;d;1pkt 1fpkt", shape=diamond, color=yellow];
4775[label="199.144.170.65;d;3pkt 3fpkt", shape=diamond, color=yellow];
9595[label="199.144.170.65;d;3pkt 3fpkt", shape=hexagon, color=black];
10161[label="142.21.174.160;s;22pkt 22fpkt", shape=hexagon, color=black];
stat245[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.174.160:*, *:80}[36.3636%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (15.3846%)&lt;BR/&gt; 5041: (7.69231%)&lt;BR/&gt; 3724: (7.69231%)&lt;BR/&gt; 7081: (5.76923%)&lt;BR/&gt; 1119: (4.80769%)&gt;];
}
1108--1110[label="1;1pkt 1fpkt"];
1108--10161[label="1;1pkt 1fpkt"];
1110--4321[label="1;1pkt 1fpkt"];
1110--4775[label="1;3pkt 3fpkt"];
1110--9595[label="1;3pkt 3fpkt"];
1110--10161[label="1;22pkt 22fpkt"];
1110--12002[label="0.181818;4pkt 4fpkt"];
1110--12027[label="0.0909091;2pkt 2fpkt"];
1110--12099[label="0.181818;4pkt 4fpkt"];
1110--12124[label="0.0909091;2pkt 2fpkt"];
1110--12188[label="0.181818;4pkt 4fpkt"];
1110--12212[label="0.0909091;2pkt 2fpkt"];
4321--10161[label="1;1pkt 1fpkt"];
4775--9595[label="1;3pkt 3fpkt"];
4775--10161[label="1;3pkt 3fpkt"];
9595--10161[label="1;3pkt 3fpkt"];
10161--12002[label="0.181818;4pkt 4fpkt"];
10161--12027[label="0.0909091;2pkt 2fpkt"];
10161--12099[label="0.181818;4pkt 4fpkt"];
10161--12124[label="0.0909091;2pkt 2fpkt"];
10161--12188[label="0.181818;4pkt 4fpkt"];
10161--12212[label="0.0909091;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="142.21.174.160"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_249{
style=filled;
color=gray75;
7992[label="198.60.2.221;s;127pkt 127fpkt", shape=diamond, color=yellow];
8148[label="107.153.115.56;d;2pkt 2fpkt", shape=diamond, color=yellow];
11651[label="107.153.115.56;d;2pkt 2fpkt", shape=hexagon, color=black];
stat249[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.2.221:*, *:80}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1391: (1.14504%)&lt;BR/&gt; 1389: (1.14504%)&lt;BR/&gt; 1387: (0.381679%)&lt;BR/&gt; 1385: (0.381679%)&gt;];
}
7992--8148[label="1;2pkt 2fpkt"];
7992--11651[label="1;2pkt 2fpkt"];
7992--12042[label="0.0472441;6pkt 6fpkt"];
7992--12135[label="0.0472441;6pkt 6fpkt"];
7992--12222[label="0.0472441;6pkt 6fpkt"];
8148--11651[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="198.60.2.221"/>
    </slice>
    <from sec="1296623520" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_250{
style=filled;
color=gray75;
869[label="209.9.8.121;s;1pkt 1fpkt", shape=diamond, color=yellow];
870[label="198.60.0.38;d;252pkt 252fpkt", shape=diamond, color=yellow];
1118[label="171.197.58.116;d;159pkt 159fpkt", shape=diamond, color=yellow];
2552[label="45.161.31.179;s;2pkt 2fpkt", shape=diamond, color=yellow];
2807[label="56.186.9.146;s;1pkt 1fpkt", shape=diamond, color=yellow];
2945[label="56.183.34.65;s;1pkt 1fpkt", shape=diamond, color=yellow];
3440[label="32.217.234.117;s;1pkt 1fpkt", shape=diamond, color=yellow];
3575[label="32.21.34.47;s;2pkt 2fpkt", shape=diamond, color=yellow];
3673[label="140.230.202.254;d;156pkt 156fpkt", shape=diamond, color=yellow];
4098[label="208.85.46.212;s;1pkt 1fpkt", shape=diamond, color=yellow];
4874[label="38.176.142.71;s;22pkt 22fpkt", shape=diamond, color=yellow];
5372[label="46.171.103.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
5417[label="44.142.11.80;s;24pkt 24fpkt", shape=diamond, color=yellow];
5496[label="208.42.39.61;s;129pkt 129fpkt", shape=diamond, color=yellow];
6144[label="107.30.43.20;s;1pkt 1fpkt", shape=diamond, color=yellow];
6767[label="56.186.53.150;s;1pkt 1fpkt", shape=diamond, color=yellow];
7103[label="45.209.139.69;s;1pkt 1fpkt", shape=diamond, color=yellow];
7846[label="45.236.25.17;s;1pkt 1fpkt", shape=diamond, color=yellow];
8180[label="209.9.8.121;s;1pkt 1fpkt", shape=hexagon, color=black];
8403[label="45.161.31.179;s;2pkt 2fpkt", shape=hexagon, color=black];
8712[label="198.60.0.38;d;244pkt 244fpkt", shape=hexagon, color=black];
8773[label="171.197.58.116;d;74pkt 74fpkt", shape=hexagon, color=black];
8995[label="56.183.34.65;s;1pkt 1fpkt", shape=hexagon, color=black];
9720[label="32.21.34.47;s;2pkt 2fpkt", shape=hexagon, color=black];
10051[label="208.42.39.61;s;129pkt 129fpkt", shape=hexagon, color=black];
10353[label="208.85.46.212;s;1pkt 1fpkt", shape=hexagon, color=black];
10800[label="46.171.103.122;s;1pkt 1fpkt", shape=hexagon, color=black];
10970[label="107.30.43.20;s;1pkt 1fpkt", shape=hexagon, color=black];
11115[label="140.230.202.254;d;156pkt 156fpkt", shape=hexagon, color=black];
stat250[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 171.197.58.116:*}[28.0423%]&lt;BR/&gt;{*:*, 140.230.202.254:*}[27.5132%]&lt;BR/&gt;{208.42.39.61:80, 198.60.0.38:*}[22.7513%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (35.7091%)&lt;BR/&gt; 5041: (3.17982%)&lt;BR/&gt; 13843: (2.26608%)&lt;BR/&gt; 20859: (2.11988%)&lt;BR/&gt; 443: (1.90058%)&gt;];
}
869--870[label="1;1pkt 1fpkt"];
869--8180[label="1;1pkt 1fpkt"];
869--8712[label="1;1pkt 1fpkt"];
870--3575[label="0.5;1pkt 1fpkt"];
870--4874[label="0.727273;16pkt 16fpkt"];
870--5372[label="1;1pkt 1fpkt"];
870--5417[label="0.75;18pkt 18fpkt"];
870--5496[label="1;129pkt 129fpkt"];
870--7103[label="1;1pkt 1fpkt"];
870--7846[label="1;1pkt 1fpkt"];
870--8180[label="1;1pkt 1fpkt"];
870--8712[label="1;244pkt 244fpkt"];
870--9720[label="0.5;1pkt 1fpkt"];
870--10051[label="1;129pkt 129fpkt"];
870--10800[label="1;1pkt 1fpkt"];
870--11966[label="0.00396825;1pkt 1fpkt"];
870--11988[label="0.15873;40pkt 40fpkt"];
870--12024[label="0.00396825;1pkt 1fpkt"];
870--12072[label="0.00396825;1pkt 1fpkt"];
870--12089[label="0.15873;40pkt 40fpkt"];
870--12121[label="0.00396825;1pkt 1fpkt"];
870--12165[label="0.00396825;1pkt 1fpkt"];
870--12209[label="0.00396825;1pkt 1fpkt"];
1118--1560[label="0.0251572;4pkt 4fpkt"];
1118--1625[label="0.0125786;2pkt 2fpkt"];
1118--1655[label="0.0188679;3pkt 3fpkt"];
1118--1723[label="0.0251572;4pkt 4fpkt"];
1118--1950[label="0.0188679;3pkt 3fpkt"];
1118--2552[label="1;2pkt 2fpkt"];
1118--2807[label="1;1pkt 1fpkt"];
1118--2915[label="0.0188679;3pkt 3fpkt"];
1118--2945[label="1;1pkt 1fpkt"];
1118--3019[label="0.0566038;9pkt 9fpkt"];
1118--3575[label="0.5;1pkt 1fpkt"];
1118--4000[label="0.0188679;3pkt 3fpkt"];
1118--4098[label="1;1pkt 1fpkt"];
1118--6767[label="1;1pkt 1fpkt"];
1118--7287[label="0.04;3pkt 3fpkt"];
1118--8185[label="0.0125786;2pkt 2fpkt"];
1118--8303[label="0.0188679;3pkt 3fpkt"];
1118--8403[label="1;2pkt 2fpkt"];
1118--8773[label="1;74pkt 74fpkt"];
1118--8918[label="0.0125786;2pkt 2fpkt"];
1118--8995[label="1;1pkt 1fpkt"];
1118--9355[label="0.0125786;2pkt 2fpkt"];
1118--9720[label="0.5;1pkt 1fpkt"];
1118--10353[label="1;1pkt 1fpkt"];
1118--11966[label="0.0628931;10pkt 10fpkt"];
1118--11988[label="0.00628931;1pkt 1fpkt"];
1118--11999[label="0.100629;16pkt 16fpkt"];
1118--12000[label="0.0188679;3pkt 3fpkt"];
1118--12004[label="0.00628931;1pkt 1fpkt"];
1118--12024[label="0.0440252;7pkt 7fpkt"];
1118--12039[label="0.00628931;1pkt 1fpkt"];
1118--12072[label="0.0628931;10pkt 10fpkt"];
1118--12089[label="0.00628931;1pkt 1fpkt"];
1118--12096[label="0.100629;16pkt 16fpkt"];
1118--12097[label="0.0188679;3pkt 3fpkt"];
1118--12101[label="0.00628931;1pkt 1fpkt"];
1118--12121[label="0.0440252;7pkt 7fpkt"];
1118--12132[label="0.00628931;1pkt 1fpkt"];
1118--12165[label="0.0628931;10pkt 10fpkt"];
1118--12185[label="0.100629;16pkt 16fpkt"];
1118--12186[label="0.0188679;3pkt 3fpkt"];
1118--12190[label="0.00628931;1pkt 1fpkt"];
1118--12209[label="0.0440252;7pkt 7fpkt"];
1118--12219[label="0.00628931;1pkt 1fpkt"];
2552--8403[label="1;2pkt 2fpkt"];
2552--8773[label="1;2pkt 2fpkt"];
2807--8773[label="1;1pkt 1fpkt"];
2945--8773[label="1;1pkt 1fpkt"];
2945--8995[label="1;1pkt 1fpkt"];
3440--3673[label="1;1pkt 1fpkt"];
3440--11115[label="1;1pkt 1fpkt"];
3575--8712[label="0.5;1pkt 1fpkt"];
3575--8773[label="0.5;1pkt 1fpkt"];
3575--9720[label="1;2pkt 2fpkt"];
3673--4002[label="0.407407;11pkt 11fpkt"];
3673--4874[label="0.272727;6pkt 6fpkt"];
3673--5417[label="0.25;6pkt 6fpkt"];
3673--6144[label="1;1pkt 1fpkt"];
3673--10970[label="1;1pkt 1fpkt"];
3673--11115[label="1;156pkt 156fpkt"];
3673--11966[label="0.102564;16pkt 16fpkt"];
3673--11988[label="0.025641;4pkt 4fpkt"];
3673--12072[label="0.102564;16pkt 16fpkt"];
3673--12089[label="0.025641;4pkt 4fpkt"];
3673--12165[label="0.102564;16pkt 16fpkt"];
4098--8773[label="1;1pkt 1fpkt"];
4098--10353[label="1;1pkt 1fpkt"];
4874--8712[label="0.727273;16pkt 16fpkt"];
4874--11115[label="0.272727;6pkt 6fpkt"];
4874--11966[label="0.0909091;2pkt 2fpkt"];
4874--11988[label="0.227273;5pkt 5fpkt"];
4874--12072[label="0.0909091;2pkt 2fpkt"];
4874--12089[label="0.227273;5pkt 5fpkt"];
4874--12165[label="0.0909091;2pkt 2fpkt"];
5372--8712[label="1;1pkt 1fpkt"];
5372--10800[label="1;1pkt 1fpkt"];
5417--8712[label="0.75;18pkt 18fpkt"];
5417--11115[label="0.25;6pkt 6fpkt"];
5417--11966[label="0.0416667;1pkt 1fpkt"];
5417--11988[label="0.0833333;2pkt 2fpkt"];
5417--12072[label="0.0416667;1pkt 1fpkt"];
5417--12089[label="0.0833333;2pkt 2fpkt"];
5417--12165[label="0.0416667;1pkt 1fpkt"];
5496--8712[label="1;129pkt 129fpkt"];
5496--10051[label="1;129pkt 129fpkt"];
5496--11988[label="0.224806;29pkt 29fpkt"];
5496--12089[label="0.224806;29pkt 29fpkt"];
6144--10970[label="1;1pkt 1fpkt"];
6144--11115[label="1;1pkt 1fpkt"];
7103--8712[label="1;1pkt 1fpkt"];
7846--8712[label="1;1pkt 1fpkt"];
8180--8712[label="1;1pkt 1fpkt"];
8403--8773[label="1;2pkt 2fpkt"];
8712--9720[label="0.5;1pkt 1fpkt"];
8712--10051[label="1;129pkt 129fpkt"];
8712--10800[label="1;1pkt 1fpkt"];
8712--11966[label="0.00409836;1pkt 1fpkt"];
8712--11988[label="0.163934;40pkt 40fpkt"];
8712--12024[label="0.00409836;1pkt 1fpkt"];
8712--12072[label="0.00409836;1pkt 1fpkt"];
8712--12089[label="0.163934;40pkt 40fpkt"];
8712--12121[label="0.00409836;1pkt 1fpkt"];
8712--12165[label="0.00409836;1pkt 1fpkt"];
8712--12209[label="0.00409836;1pkt 1fpkt"];
8773--8918[label="0.027027;2pkt 2fpkt"];
8773--8995[label="1;1pkt 1fpkt"];
8773--9720[label="0.5;1pkt 1fpkt"];
8773--10353[label="1;1pkt 1fpkt"];
8773--11966[label="0.135135;10pkt 10fpkt"];
8773--11988[label="0.0135135;1pkt 1fpkt"];
8773--12000[label="0.0135135;1pkt 1fpkt"];
8773--12039[label="0.0135135;1pkt 1fpkt"];
8773--12072[label="0.135135;10pkt 10fpkt"];
8773--12089[label="0.0135135;1pkt 1fpkt"];
8773--12097[label="0.0135135;1pkt 1fpkt"];
8773--12132[label="0.0135135;1pkt 1fpkt"];
8773--12165[label="0.135135;10pkt 10fpkt"];
8773--12186[label="0.0135135;1pkt 1fpkt"];
8773--12219[label="0.0135135;1pkt 1fpkt"];
10051--11988[label="0.224806;29pkt 29fpkt"];
10051--12089[label="0.224806;29pkt 29fpkt"];
10970--11115[label="1;1pkt 1fpkt"];
11115--11966[label="0.102564;16pkt 16fpkt"];
11115--11988[label="0.025641;4pkt 4fpkt"];
11115--12072[label="0.102564;16pkt 16fpkt"];
11115--12089[label="0.025641;4pkt 4fpkt"];
11115--12165[label="0.102564;16pkt 16fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.58.116"/>
      <filter dst_ip="140.230.202.254"/>
      <filter dst_ip="198.60.0.38" src_ip="208.42.39.61" src_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_251{
style=filled;
color=gray75;
4442[label="12.81.24.119;d;2pkt 2fpkt", shape=diamond, color=yellow];
9738[label="172.5.218.81;s;2pkt 2fpkt", shape=hexagon, color=black];
stat251[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.218.81:80, 12.81.24.119:52054}[50%]&lt;BR/&gt;{172.5.218.81:80, 12.81.24.119:60828}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 60828: (25%)&lt;BR/&gt; 52054: (25%)&gt;];
}
4442--9738[label="1;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.24.119" dst_port="60828" src_ip="172.5.218.81" src_port="80"/>
      <filter dst_ip="12.81.24.119" dst_port="52054" src_ip="172.5.218.81" src_port="80"/>
    </slice>
    <from sec="1296623013" usec="0"/>
    <to sec="1296623023" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_252{
style=filled;
color=gray75;
5126[label="140.230.251.119;d;12pkt 12fpkt", shape=diamond, color=yellow];
5127[label="219.201.144.14;s;8pkt 8fpkt", shape=diamond, color=yellow];
5603[label="5.35.10.80;s;6pkt 6fpkt", shape=diamond, color=yellow];
9781[label="140.230.251.119;d;12pkt 12fpkt", shape=hexagon, color=black];
10091[label="5.35.10.80;s;6pkt 6fpkt", shape=hexagon, color=black];
stat252[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.201.144.14:80, 140.230.251.119:*}[50%]&lt;BR/&gt;{5.35.10.80:80, 140.230.251.119:*}[35.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 62311: (4.54545%)&lt;BR/&gt; 62310: (4.54545%)&lt;BR/&gt; 62309: (4.54545%)&lt;BR/&gt; 62308: (4.54545%)&gt;];
}
5126--5127[label="0.875;7pkt 7fpkt"];
5126--5603[label="0.833333;5pkt 5fpkt"];
5126--9781[label="1;12pkt 12fpkt"];
5126--10091[label="0.833333;5pkt 5fpkt"];
5127--9781[label="0.875;7pkt 7fpkt"];
5603--9781[label="0.833333;5pkt 5fpkt"];
5603--10091[label="1;6pkt 6fpkt"];
5603--11999[label="0.166667;1pkt 1fpkt"];
5603--12096[label="0.166667;1pkt 1fpkt"];
5603--12185[label="0.166667;1pkt 1fpkt"];
9781--10091[label="0.833333;5pkt 5fpkt"];
10091--11999[label="0.166667;1pkt 1fpkt"];
10091--12096[label="0.166667;1pkt 1fpkt"];
10091--12185[label="0.166667;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="140.230.251.119" src_ip="219.201.144.14" src_port="80"/>
      <filter dst_ip="140.230.251.119" src_ip="5.35.10.80" src_port="80"/>
    </slice>
    <from sec="1296623138" usec="0"/>
    <to sec="1296623319" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,999,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_255{
style=filled;
color=gray75;
17[label="198.60.1.12s;2pkt 2fpkt", shape=rectangle, color=red];
336[label="142.21.174.166d;1pkt 1fpkt", shape=rectangle, color=red];
788[label="45.37.82.104;s;1pkt 1fpkt", shape=diamond, color=yellow];
850[label="6.208.12.28;s;1pkt 1fpkt", shape=diamond, color=yellow];
858[label="37.74.67.145;s;1pkt 1fpkt", shape=diamond, color=yellow];
913[label="14.164.9.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
1035[label="0.144.96.126;s;1pkt 1fpkt", shape=diamond, color=yellow];
1040[label="32.19.101.180;s;1pkt 1fpkt", shape=diamond, color=yellow];
1092[label="37.107.52.184;s;1pkt 1fpkt", shape=diamond, color=yellow];
1144[label="131.140.237.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
1171[label="37.65.192.183;s;1pkt 1fpkt", shape=diamond, color=yellow];
1197[label="45.161.28.84;s;1pkt 1fpkt", shape=diamond, color=yellow];
1588[label="147.207.166.92;s;1pkt 1fpkt", shape=diamond, color=yellow];
2396[label="142.21.174.166;d;247pkt 247fpkt", shape=diamond, color=yellow];
3080[label="214.86.147.106;s;1pkt 1fpkt", shape=diamond, color=yellow];
3210[label="147.204.175.238;s;1pkt 1fpkt", shape=diamond, color=yellow];
3213[label="147.204.36.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
4018[label="40.161.83.192;s;1pkt 1fpkt", shape=diamond, color=yellow];
4090[label="46.52.131.113;s;1pkt 1fpkt", shape=diamond, color=yellow];
4115[label="37.20.60.223;s;1pkt 1fpkt", shape=diamond, color=yellow];
5014[label="73.55.71.252;s;1pkt 1fpkt", shape=diamond, color=yellow];
5489[label="45.163.21.176;s;4pkt 4fpkt", shape=diamond, color=yellow];
5531[label="39.6.245.125;s;1pkt 1fpkt", shape=diamond, color=yellow];
5638[label="131.8.70.243;s;1pkt 1fpkt", shape=diamond, color=yellow];
5640[label="9.239.225.58;s;1pkt 1fpkt", shape=diamond, color=yellow];
5641[label="46.108.54.122;s;1pkt 1fpkt", shape=diamond, color=yellow];
5725[label="199.150.232.50;s;1pkt 1fpkt", shape=diamond, color=yellow];
5726[label="33.133.147.22;s;1pkt 1fpkt", shape=diamond, color=yellow];
5802[label="210.112.134.143;s;1pkt 1fpkt", shape=diamond, color=yellow];
6118[label="74.243.129.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
6125[label="57.8.215.55;s;1pkt 1fpkt", shape=diamond, color=yellow];
7228[label="46.58.65.19;s;1pkt 1fpkt", shape=diamond, color=yellow];
7331[label="92.42.36.32;s;1pkt 1fpkt", shape=diamond, color=yellow];
7332[label="107.5.201.203;s;1pkt 1fpkt", shape=diamond, color=yellow];
7972[label="215.88.81.175;s;1pkt 1fpkt", shape=diamond, color=yellow];
7990[label="6.20.111.232;s;1pkt 1fpkt", shape=diamond, color=yellow];
8178[label="37.74.67.145;s;1pkt 1fpkt", shape=hexagon, color=black];
8261[label="147.207.166.92;s;1pkt 1fpkt", shape=hexagon, color=black];
8411[label="37.65.192.183;s;1pkt 1fpkt", shape=hexagon, color=black];
8752[label="0.144.96.126;s;1pkt 1fpkt", shape=hexagon, color=black];
9141[label="37.20.60.223;s;1pkt 1fpkt", shape=hexagon, color=black];
9800[label="142.21.174.166;d;205pkt 205fpkt", shape=hexagon, color=black];
9818[label="32.19.101.180;s;1pkt 1fpkt", shape=hexagon, color=black];
10059[label="73.55.71.252;s;1pkt 1fpkt", shape=hexagon, color=black];
10137[label="14.164.9.37;s;1pkt 1fpkt", shape=hexagon, color=black];
10244[label="210.112.134.143;s;1pkt 1fpkt", shape=hexagon, color=black];
10802[label="46.52.131.113;s;1pkt 1fpkt", shape=hexagon, color=black];
11619[label="215.88.81.175;s;1pkt 1fpkt", shape=hexagon, color=black];
stat255[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.21.174.166:61455}[39.9194%]&lt;BR/&gt;{*:17788, 142.21.174.166:*}[22.1774%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 61455: (22.2112%)&lt;BR/&gt; 17788: (10.8566%)&lt;BR/&gt; 1517: (10.6574%)&lt;BR/&gt; 5041: (9.26295%)&lt;BR/&gt; 80: (5.67729%)&gt;];
}
17--336[label="1;1pkt 1fpkt"];
17--624[label="0.5;1pkt 1fpkt"];
17--1795[label="0.5;1pkt 1fpkt"];
17--2396[label="0.5;1pkt 1fpkt"];
17--4018[label="1;1pkt 1fpkt"];
17--9800[label="0.5;1pkt 1fpkt"];
336--624[label="1;1pkt 1fpkt"];
336--2396[label="1;1pkt 1fpkt"];
336--4018[label="1;1pkt 1fpkt"];
336--9800[label="1;1pkt 1fpkt"];
788--2396[label="1;1pkt 1fpkt"];
788--9800[label="1;1pkt 1fpkt"];
850--2396[label="1;1pkt 1fpkt"];
850--9800[label="1;1pkt 1fpkt"];
858--2396[label="1;1pkt 1fpkt"];
858--8178[label="1;1pkt 1fpkt"];
858--9800[label="1;1pkt 1fpkt"];
913--2396[label="1;1pkt 1fpkt"];
913--9800[label="1;1pkt 1fpkt"];
913--10137[label="1;1pkt 1fpkt"];
1035--2396[label="1;1pkt 1fpkt"];
1035--8752[label="1;1pkt 1fpkt"];
1035--9800[label="1;1pkt 1fpkt"];
1040--2396[label="1;1pkt 1fpkt"];
1040--9800[label="1;1pkt 1fpkt"];
1040--9818[label="1;1pkt 1fpkt"];
1092--2396[label="1;1pkt 1fpkt"];
1092--9800[label="1;1pkt 1fpkt"];
1144--2396[label="1;1pkt 1fpkt"];
1144--9800[label="1;1pkt 1fpkt"];
1171--2396[label="1;1pkt 1fpkt"];
1171--8411[label="1;1pkt 1fpkt"];
1171--9800[label="1;1pkt 1fpkt"];
1197--2396[label="1;1pkt 1fpkt"];
1197--9800[label="1;1pkt 1fpkt"];
1588--2396[label="1;1pkt 1fpkt"];
1588--8261[label="1;1pkt 1fpkt"];
1588--9800[label="1;1pkt 1fpkt"];
2396--2688[label="0.0208333;1pkt 1fpkt"];
2396--3080[label="1;1pkt 1fpkt"];
2396--3210[label="1;1pkt 1fpkt"];
2396--3213[label="1;1pkt 1fpkt"];
2396--4018[label="1;1pkt 1fpkt"];
2396--4090[label="1;1pkt 1fpkt"];
2396--4103[label="0.0833333;1pkt 1fpkt"];
2396--4115[label="1;1pkt 1fpkt"];
2396--5014[label="1;1pkt 1fpkt"];
2396--5489[label="1;4pkt 4fpkt"];
2396--5531[label="1;1pkt 1fpkt"];
2396--5638[label="1;1pkt 1fpkt"];
2396--5640[label="1;1pkt 1fpkt"];
2396--5641[label="1;1pkt 1fpkt"];
2396--5725[label="1;1pkt 1fpkt"];
2396--5726[label="1;1pkt 1fpkt"];
2396--5802[label="1;1pkt 1fpkt"];
2396--6118[label="1;1pkt 1fpkt"];
2396--6125[label="1;1pkt 1fpkt"];
2396--7228[label="1;1pkt 1fpkt"];
2396--7331[label="1;1pkt 1fpkt"];
2396--7332[label="1;1pkt 1fpkt"];
2396--7972[label="1;1pkt 1fpkt"];
2396--7990[label="1;1pkt 1fpkt"];
2396--8178[label="1;1pkt 1fpkt"];
2396--8261[label="1;1pkt 1fpkt"];
2396--8411[label="1;1pkt 1fpkt"];
2396--8752[label="1;1pkt 1fpkt"];
2396--9141[label="1;1pkt 1fpkt"];
2396--9800[label="1;205pkt 205fpkt"];
2396--9818[label="1;1pkt 1fpkt"];
2396--10059[label="1;1pkt 1fpkt"];
2396--10137[label="1;1pkt 1fpkt"];
2396--10244[label="1;1pkt 1fpkt"];
2396--10802[label="1;1pkt 1fpkt"];
2396--11619[label="1;1pkt 1fpkt"];
2396--11966[label="0.0121457;3pkt 3fpkt"];
2396--11988[label="0.0202429;5pkt 5fpkt"];
2396--11999[label="0.0202429;5pkt 5fpkt"];
2396--12000[label="0.00404858;1pkt 1fpkt"];
2396--12024[label="0.0121457;3pkt 3fpkt"];
2396--12038[label="0.0121457;3pkt 3fpkt"];
2396--12039[label="0.00404858;1pkt 1fpkt"];
2396--12072[label="0.0121457;3pkt 3fpkt"];
2396--12089[label="0.0202429;5pkt 5fpkt"];
2396--12096[label="0.0202429;5pkt 5fpkt"];
2396--12097[label="0.00404858;1pkt 1fpkt"];
2396--12121[label="0.0121457;3pkt 3fpkt"];
2396--12131[label="0.0121457;3pkt 3fpkt"];
2396--12132[label="0.00404858;1pkt 1fpkt"];
2396--12165[label="0.0121457;3pkt 3fpkt"];
2396--12185[label="0.0202429;5pkt 5fpkt"];
2396--12186[label="0.00404858;1pkt 1fpkt"];
2396--12209[label="0.0121457;3pkt 3fpkt"];
2396--12218[label="0.0121457;3pkt 3fpkt"];
2396--12219[label="0.00404858;1pkt 1fpkt"];
3080--9800[label="1;1pkt 1fpkt"];
3210--9800[label="1;1pkt 1fpkt"];
3213--9800[label="1;1pkt 1fpkt"];
4018--9800[label="1;1pkt 1fpkt"];
4090--9800[label="1;1pkt 1fpkt"];
4090--10802[label="1;1pkt 1fpkt"];
4115--9141[label="1;1pkt 1fpkt"];
4115--9800[label="1;1pkt 1fpkt"];
5014--9800[label="1;1pkt 1fpkt"];
5014--10059[label="1;1pkt 1fpkt"];
5489--9800[label="1;4pkt 4fpkt"];
5531--9800[label="1;1pkt 1fpkt"];
5638--9800[label="1;1pkt 1fpkt"];
5640--9800[label="1;1pkt 1fpkt"];
5641--9800[label="1;1pkt 1fpkt"];
5725--9800[label="1;1pkt 1fpkt"];
5726--9800[label="1;1pkt 1fpkt"];
5802--9800[label="1;1pkt 1fpkt"];
5802--10244[label="1;1pkt 1fpkt"];
6118--9800[label="1;1pkt 1fpkt"];
6125--9800[label="1;1pkt 1fpkt"];
7228--9800[label="1;1pkt 1fpkt"];
7331--9800[label="1;1pkt 1fpkt"];
7332--9800[label="1;1pkt 1fpkt"];
7972--11619[label="1;1pkt 1fpkt"];
8178--9800[label="1;1pkt 1fpkt"];
8261--9800[label="1;1pkt 1fpkt"];
8411--9800[label="1;1pkt 1fpkt"];
8752--9800[label="1;1pkt 1fpkt"];
9141--9800[label="1;1pkt 1fpkt"];
9800--9818[label="1;1pkt 1fpkt"];
9800--10059[label="1;1pkt 1fpkt"];
9800--10137[label="1;1pkt 1fpkt"];
9800--10244[label="1;1pkt 1fpkt"];
9800--10802[label="1;1pkt 1fpkt"];
9800--11966[label="0.0146341;3pkt 3fpkt"];
9800--11988[label="0.0243902;5pkt 5fpkt"];
9800--11999[label="0.0146341;3pkt 3fpkt"];
9800--12000[label="0.00487805;1pkt 1fpkt"];
9800--12024[label="0.0097561;2pkt 2fpkt"];
9800--12038[label="0.0097561;2pkt 2fpkt"];
9800--12039[label="0.00487805;1pkt 1fpkt"];
9800--12072[label="0.0146341;3pkt 3fpkt"];
9800--12089[label="0.0243902;5pkt 5fpkt"];
9800--12096[label="0.0146341;3pkt 3fpkt"];
9800--12097[label="0.00487805;1pkt 1fpkt"];
9800--12121[label="0.0097561;2pkt 2fpkt"];
9800--12131[label="0.0097561;2pkt 2fpkt"];
9800--12132[label="0.00487805;1pkt 1fpkt"];
9800--12165[label="0.0146341;3pkt 3fpkt"];
9800--12185[label="0.0146341;3pkt 3fpkt"];
9800--12186[label="0.00487805;1pkt 1fpkt"];
9800--12209[label="0.0097561;2pkt 2fpkt"];
9800--12218[label="0.0097561;2pkt 2fpkt"];
9800--12219[label="0.00487805;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.174.166" src_port="17788"/>
      <filter dst_ip="142.21.174.166" dst_port="61455"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_257{
style=filled;
color=gray75;
2575[label="8.47.70.191;s;12pkt 12fpkt", shape=diamond, color=yellow];
9829[label="8.47.70.191;s;12pkt 12fpkt", shape=hexagon, color=black];
stat257[shape=component, label=&lt;Rules:&lt;BR/&gt;{8.47.70.191:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2575--9829[label="1;12pkt 12fpkt"];
</description>
    <slice>
      <filter src_ip="8.47.70.191"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_258{
style=filled;
color=gray75;
1133[label="171.197.209.36;d;52pkt 52fpkt", shape=diamond, color=yellow];
3483[label="37.33.20.214;s;1pkt 1fpkt", shape=diamond, color=yellow];
3750[label="108.114.202.85;s;1pkt 1fpkt", shape=diamond, color=yellow];
4346[label="47.154.50.8;s;1pkt 1fpkt", shape=diamond, color=yellow];
4420[label="45.219.169.124;s;1pkt 1fpkt", shape=diamond, color=yellow];
8210[label="171.197.209.36;d;26pkt 26fpkt", shape=hexagon, color=black];
9850[label="108.114.202.85;s;1pkt 1fpkt", shape=hexagon, color=black];
stat258[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:5041, 171.197.209.36:5041}[42.3077%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (58.4337%)&lt;BR/&gt; 18433: (5.42169%)&lt;BR/&gt; 0: (4.81928%)&lt;BR/&gt; 14520: (3.01205%)&lt;BR/&gt; 8003: (2.40964%)&gt;];
}
1133--3483[label="1;1pkt 1fpkt"];
1133--3750[label="1;1pkt 1fpkt"];
1133--4346[label="1;1pkt 1fpkt"];
1133--4420[label="1;1pkt 1fpkt"];
1133--8210[label="1;26pkt 26fpkt"];
1133--9850[label="1;1pkt 1fpkt"];
1133--11999[label="0.0192308;1pkt 1fpkt"];
1133--12096[label="0.0192308;1pkt 1fpkt"];
1133--12185[label="0.0192308;1pkt 1fpkt"];
3483--8210[label="1;1pkt 1fpkt"];
3750--8210[label="1;1pkt 1fpkt"];
3750--9850[label="1;1pkt 1fpkt"];
4346--8210[label="1;1pkt 1fpkt"];
8210--9850[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.209.36" dst_port="5041" src_port="5041"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_259{
style=filled;
color=gray75;
2160[label="187.165.37.81;s;83pkt 83fpkt", shape=diamond, color=yellow];
2210[label="12.81.29.37;d;72pkt 72fpkt", shape=diamond, color=yellow];
4328[label="12.81.29.125;d;3pkt 3fpkt", shape=diamond, color=yellow];
9266[label="12.81.29.125;d;3pkt 3fpkt", shape=hexagon, color=black];
stat259[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.37.81:80, 12.81.29.37:*}[65.3846%]&lt;BR/&gt;{187.165.37.81:80, 218.13.82.162:*}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.7578%)&lt;BR/&gt; 53: (1.24224%)&lt;BR/&gt; 63537: (0.931677%)&lt;BR/&gt; 55801: (0.931677%)&lt;BR/&gt; 51679: (0.931677%)&gt;];
}
2160--2210[label="0.708333;51pkt 51fpkt"];
2160--2720[label="0.26506;22pkt 22fpkt"];
2160--4328[label="1;3pkt 3fpkt"];
2160--9266[label="1;3pkt 3fpkt"];
2160--9857[label="0.26506;22pkt 22fpkt"];
2160--11966[label="0.0481928;4pkt 4fpkt"];
2160--11988[label="0.0481928;4pkt 4fpkt"];
2160--11999[label="0.060241;5pkt 5fpkt"];
2160--12024[label="0.060241;5pkt 5fpkt"];
2160--12072[label="0.0481928;4pkt 4fpkt"];
2160--12089[label="0.0481928;4pkt 4fpkt"];
2160--12096[label="0.060241;5pkt 5fpkt"];
2160--12121[label="0.060241;5pkt 5fpkt"];
2160--12165[label="0.0481928;4pkt 4fpkt"];
2160--12185[label="0.060241;5pkt 5fpkt"];
2160--12209[label="0.060241;5pkt 5fpkt"];
2210--4023[label="0.0138889;1pkt 1fpkt"];
2210--11966[label="0.0277778;2pkt 2fpkt"];
2210--11987[label="0.0138889;1pkt 1fpkt"];
2210--11988[label="0.0416667;3pkt 3fpkt"];
2210--11999[label="0.0555556;4pkt 4fpkt"];
2210--12023[label="0.0138889;1pkt 1fpkt"];
2210--12024[label="0.0416667;3pkt 3fpkt"];
2210--12072[label="0.0277778;2pkt 2fpkt"];
2210--12088[label="0.0138889;1pkt 1fpkt"];
2210--12089[label="0.0416667;3pkt 3fpkt"];
2210--12096[label="0.0555556;4pkt 4fpkt"];
2210--12120[label="0.0138889;1pkt 1fpkt"];
2210--12121[label="0.0416667;3pkt 3fpkt"];
2210--12165[label="0.0277778;2pkt 2fpkt"];
2210--12185[label="0.0555556;4pkt 4fpkt"];
2210--12208[label="0.0138889;1pkt 1fpkt"];
2210--12209[label="0.0416667;3pkt 3fpkt"];
4328--9266[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.29.37" src_ip="187.165.37.81" src_port="80"/>
      <filter dst_ip="218.13.82.162" src_ip="187.165.37.81" src_port="80"/>
    </slice>
    <from sec="1296622810" usec="0"/>
    <to sec="1296623622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_260{
style=filled;
color=gray75;
2777[label="172.1.10.230;s;589pkt 589fpkt", shape=diamond, color=yellow];
9867[label="172.1.10.230;s;588pkt 588fpkt", shape=hexagon, color=black];
stat260[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.10.230:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
2777--9867[label="1;588pkt 588fpkt"];
</description>
    <slice>
      <filter src_ip="172.1.10.230"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_261{
style=filled;
color=gray75;
4615[label="171.197.119.77;s;1177pkt 1177fpkt", shape=diamond, color=yellow];
9874[label="171.197.119.77;s;1177pkt 1177fpkt", shape=hexagon, color=black];
stat261[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.119.77:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4615--5173[label="0.00900901;1pkt 1fpkt"];
4615--6401[label="0.00143885;1pkt 1fpkt"];
4615--8879[label="0.00128205;1pkt 1fpkt"];
4615--9874[label="1;1177pkt 1177fpkt"];
4615--10171[label="0.0104167;1pkt 1fpkt"];
4615--11104[label="0.00358423;1pkt 1fpkt"];
4615--11425[label="0.00143885;1pkt 1fpkt"];
9874--10171[label="0.0104167;1pkt 1fpkt"];
9874--11104[label="0.00358423;1pkt 1fpkt"];
9874--11425[label="0.00143885;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.119.77"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_262{
style=filled;
color=gray75;
413[label="142.21.175.162s;261pkt 261fpkt", shape=rectangle, color=red];
4169[label="142.21.175.162;s;502pkt 502fpkt", shape=diamond, color=yellow];
6978[label="128.130.145.10;d;289pkt 289fpkt", shape=diamond, color=yellow];
11085[label="128.130.145.10;d;258pkt 258fpkt", shape=hexagon, color=black];
stat262[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.175.162:*, 128.130.145.10:80}[57.5697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 52985: (0.152672%)&lt;BR/&gt; 52984: (0.152672%)&lt;BR/&gt; 52983: (0.152672%)&lt;BR/&gt; 52982: (0.152672%)&gt;];
}
413--3000[label="0.0368098;6pkt 6fpkt"];
413--4169[label="1;261pkt 261fpkt"];
413--6978[label="0.977011;255pkt 255fpkt"];
413--9029[label="0.0368098;6pkt 6fpkt"];
413--11085[label="0.895349;231pkt 231fpkt"];
4169--4577[label="0.025641;3pkt 3fpkt"];
4169--4671[label="0.02;1pkt 1fpkt"];
4169--4807[label="0.0140845;2pkt 2fpkt"];
4169--4842[label="0.0490798;8pkt 8fpkt"];
4169--5842[label="0.0121951;1pkt 1fpkt"];
4169--6515[label="0.0165289;2pkt 2fpkt"];
4169--6978[label="1;289pkt 289fpkt"];
4169--8499[label="0.00819672;3pkt 3fpkt"];
4169--8900[label="0.00199203;1pkt 1fpkt"];
4169--9029[label="0.0368098;6pkt 6fpkt"];
4169--9075[label="0.0204082;1pkt 1fpkt"];
4169--9809[label="0.00884956;2pkt 2fpkt"];
4169--9988[label="0.064;8pkt 8fpkt"];
4169--10685[label="0.0232558;1pkt 1fpkt"];
4169--11085[label="1;258pkt 258fpkt"];
4169--11568[label="0.072;18pkt 18fpkt"];
4169--11990[label="0.0179283;9pkt 9fpkt"];
4169--12002[label="0.00398406;2pkt 2fpkt"];
4169--12027[label="0.00398406;2pkt 2fpkt"];
4169--12099[label="0.00398406;2pkt 2fpkt"];
4169--12124[label="0.00398406;2pkt 2fpkt"];
4169--12188[label="0.00398406;2pkt 2fpkt"];
4169--12212[label="0.00398406;2pkt 2fpkt"];
6978--11085[label="1;258pkt 258fpkt"];
</description>
    <slice>
      <filter dst_ip="128.130.145.10" dst_port="80" src_ip="142.21.175.162"/>
    </slice>
    <from sec="1296622814" usec="0"/>
    <to sec="1296623592" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_264{
style=filled;
color=gray75;
7588[label="4.52.16.55;s;3pkt 3fpkt", shape=diamond, color=yellow];
11624[label="4.52.16.55;s;3pkt 3fpkt", shape=hexagon, color=black];
stat264[shape=component, label=&lt;Rules:&lt;BR/&gt;{4.52.16.55:80, 171.197.163.105:65296}[33.3333%]&lt;BR/&gt;{4.52.16.55:80, 171.197.84.152:50843}[33.3333%]&lt;BR/&gt;{4.52.16.55:80, 171.197.84.152:50865}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 65296: (16.6667%)&lt;BR/&gt; 50865: (16.6667%)&lt;BR/&gt; 50843: (16.6667%)&gt;];
}
7588--11624[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.84.152" dst_port="50865" src_ip="4.52.16.55" src_port="80"/>
      <filter dst_ip="171.197.84.152" dst_port="50843" src_ip="4.52.16.55" src_port="80"/>
      <filter dst_ip="171.197.163.105" dst_port="65296" src_ip="4.52.16.55" src_port="80"/>
    </slice>
    <from sec="1296623507" usec="0"/>
    <to sec="1296623611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_265{
style=filled;
color=gray75;
2466[label="171.197.163.93;s;122pkt 122fpkt", shape=diamond, color=yellow];
10139[label="171.197.163.93;s;82pkt 82fpkt", shape=hexagon, color=black];
stat265[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.163.93:*, *:5223}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5223: (50%)&lt;BR/&gt; 59682: (0.490196%)&lt;BR/&gt; 59681: (0.490196%)&lt;BR/&gt; 59680: (0.490196%)&lt;BR/&gt; 59679: (0.490196%)&gt;];
}
2466--10139[label="1;82pkt 82fpkt"];
</description>
    <slice>
      <filter dst_port="5223" src_ip="171.197.163.93"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_266{
style=filled;
color=gray75;
206[label="177.50.218.165s;3pkt 3fpkt", shape=rectangle, color=red];
6754[label="142.21.248.178;d;27pkt 27fpkt", shape=diamond, color=yellow];
7012[label="177.50.218.165;s;10pkt 10fpkt", shape=diamond, color=yellow];
11354[label="177.50.218.165;s;7pkt 7fpkt", shape=hexagon, color=black];
stat266[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:443, 142.21.248.178:*}[55.5556%]&lt;BR/&gt;{177.50.218.165:80, 142.21.248.178:*}[37.037%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (32.9787%)&lt;BR/&gt; 443: (15.9574%)&lt;BR/&gt; 1385: (4.25532%)&lt;BR/&gt; 1365: (4.25532%)&lt;BR/&gt; 1363: (4.25532%)&gt;];
}
206--6754[label="1;3pkt 3fpkt"];
206--7012[label="1;3pkt 3fpkt"];
206--11354[label="1;3pkt 3fpkt"];
6754--7012[label="1;10pkt 10fpkt"];
6754--10143[label="0.037037;1pkt 1fpkt"];
6754--10645[label="0.037037;1pkt 1fpkt"];
6754--11163[label="0.148148;4pkt 4fpkt"];
6754--11354[label="1;7pkt 7fpkt"];
7012--11354[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.248.178" src_port="443"/>
      <filter dst_ip="142.21.248.178" src_ip="177.50.218.165" src_port="80"/>
    </slice>
    <from sec="1296623215" usec="0"/>
    <to sec="1296623605" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,504,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_268{
style=filled;
color=gray75;
6711[label="171.197.162.17;s;227pkt 227fpkt", shape=diamond, color=yellow];
7470[label="218.12.62.157;d;75pkt 75fpkt", shape=diamond, color=yellow];
stat268[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.162.17:35503, *:*}[62.1723%]&lt;BR/&gt;{*:*, 218.12.62.157:443}[28.0899%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 35503: (27.4834%)&lt;BR/&gt; 443: (20.1987%)&lt;BR/&gt; 80: (1.98675%)&lt;BR/&gt; 33033: (0.662252%)&lt;BR/&gt; 53146: (0.331126%)&gt;];
}
6711--7470[label="0.466667;35pkt 35fpkt"];
6711--9169[label="0.00881057;2pkt 2fpkt"];
6711--12002[label="0.00881057;2pkt 2fpkt"];
6711--12003[label="0.00881057;2pkt 2fpkt"];
6711--12027[label="0.0220264;5pkt 5fpkt"];
6711--12099[label="0.00881057;2pkt 2fpkt"];
6711--12100[label="0.00881057;2pkt 2fpkt"];
6711--12124[label="0.0220264;5pkt 5fpkt"];
6711--12188[label="0.00881057;2pkt 2fpkt"];
6711--12189[label="0.00881057;2pkt 2fpkt"];
6711--12212[label="0.0220264;5pkt 5fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.162.17" src_port="35503"/>
      <filter dst_ip="218.12.62.157" dst_port="443"/>
    </slice>
    <from sec="1296623107" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_269{
style=filled;
color=gray75;
5173[label="128.114.173.159;d;111pkt 111fpkt", shape=diamond, color=yellow];
10171[label="128.114.173.159;d;96pkt 96fpkt", shape=hexagon, color=black];
stat269[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 128.114.173.159:0}[67.5676%]&lt;BR/&gt;{*:*, 128.114.173.159:80}[32.4324%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (69.5652%)&lt;BR/&gt; 80: (15.2174%)&lt;BR/&gt; 65323: (0.483092%)&lt;BR/&gt; 65232: (0.483092%)&lt;BR/&gt; 59626: (0.483092%)&gt;];
}
5173--7098[label="0.00900901;1pkt 1fpkt"];
5173--7718[label="0.00900901;1pkt 1fpkt"];
5173--8753[label="0.00900901;1pkt 1fpkt"];
5173--9874[label="0.00900901;1pkt 1fpkt"];
5173--9879[label="0.00900901;1pkt 1fpkt"];
5173--10171[label="1;96pkt 96fpkt"];
5173--10208[label="0.00900901;1pkt 1fpkt"];
5173--10548[label="0.00900901;1pkt 1fpkt"];
5173--11175[label="0.00900901;1pkt 1fpkt"];
5173--11990[label="0.00900901;1pkt 1fpkt"];
5173--12002[label="0.00900901;1pkt 1fpkt"];
5173--12027[label="0.036036;4pkt 4fpkt"];
5173--12099[label="0.00900901;1pkt 1fpkt"];
5173--12124[label="0.036036;4pkt 4fpkt"];
5173--12188[label="0.00900901;1pkt 1fpkt"];
5173--12212[label="0.036036;4pkt 4fpkt"];
10171--10208[label="0.0104167;1pkt 1fpkt"];
10171--10548[label="0.0104167;1pkt 1fpkt"];
10171--11175[label="0.0104167;1pkt 1fpkt"];
10171--11990[label="0.0104167;1pkt 1fpkt"];
10171--12002[label="0.0104167;1pkt 1fpkt"];
10171--12027[label="0.0104167;1pkt 1fpkt"];
10171--12099[label="0.0104167;1pkt 1fpkt"];
10171--12124[label="0.0104167;1pkt 1fpkt"];
10171--12188[label="0.0104167;1pkt 1fpkt"];
10171--12212[label="0.0104167;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="128.114.173.159" dst_port="80"/>
      <filter dst_ip="128.114.173.159"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_270{
style=filled;
color=gray75;
1704[label="199.107.159.183;d;343pkt 343fpkt", shape=diamond, color=yellow];
8513[label="199.107.159.183;d;343pkt 343fpkt", shape=hexagon, color=black];
stat270[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 199.107.159.183:40447}[77.2595%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 40447: (38.6297%)&lt;BR/&gt; 443: (8.60058%)&lt;BR/&gt; 0: (1.74927%)&lt;BR/&gt; 80: (1.02041%)&lt;BR/&gt; 56082: (0.58309%)&gt;];
}
1704--1817[label="0.0058309;2pkt 2fpkt"];
1704--2915[label="0.0058309;2pkt 2fpkt"];
1704--3019[label="0.0123457;4pkt 4fpkt"];
1704--4833[label="0.0151515;1pkt 1fpkt"];
1704--6306[label="0.00291545;1pkt 1fpkt"];
1704--6372[label="0.00291545;1pkt 1fpkt"];
1704--8513[label="1;343pkt 343fpkt"];
1704--9355[label="0.00874636;3pkt 3fpkt"];
1704--9921[label="0.00869565;2pkt 2fpkt"];
1704--10186[label="0.0233236;8pkt 8fpkt"];
1704--10516[label="0.00291545;1pkt 1fpkt"];
1704--11870[label="0.00291545;1pkt 1fpkt"];
1704--11988[label="0.0058309;2pkt 2fpkt"];
1704--11999[label="0.00291545;1pkt 1fpkt"];
1704--12021[label="0.00291545;1pkt 1fpkt"];
1704--12024[label="0.00874636;3pkt 3fpkt"];
1704--12038[label="0.00291545;1pkt 1fpkt"];
1704--12089[label="0.0058309;2pkt 2fpkt"];
1704--12096[label="0.00291545;1pkt 1fpkt"];
1704--12118[label="0.00291545;1pkt 1fpkt"];
1704--12121[label="0.00874636;3pkt 3fpkt"];
1704--12131[label="0.00291545;1pkt 1fpkt"];
1704--12185[label="0.00291545;1pkt 1fpkt"];
1704--12206[label="0.00291545;1pkt 1fpkt"];
1704--12209[label="0.00874636;3pkt 3fpkt"];
1704--12218[label="0.00291545;1pkt 1fpkt"];
8513--9355[label="0.00874636;3pkt 3fpkt"];
8513--9921[label="0.00869565;2pkt 2fpkt"];
8513--10186[label="0.0233236;8pkt 8fpkt"];
8513--10516[label="0.00291545;1pkt 1fpkt"];
8513--11870[label="0.00291545;1pkt 1fpkt"];
8513--11988[label="0.0058309;2pkt 2fpkt"];
8513--11999[label="0.00291545;1pkt 1fpkt"];
8513--12021[label="0.00291545;1pkt 1fpkt"];
8513--12024[label="0.00874636;3pkt 3fpkt"];
8513--12038[label="0.00291545;1pkt 1fpkt"];
8513--12089[label="0.0058309;2pkt 2fpkt"];
8513--12096[label="0.00291545;1pkt 1fpkt"];
8513--12118[label="0.00291545;1pkt 1fpkt"];
8513--12121[label="0.00874636;3pkt 3fpkt"];
8513--12131[label="0.00291545;1pkt 1fpkt"];
8513--12185[label="0.00291545;1pkt 1fpkt"];
8513--12206[label="0.00291545;1pkt 1fpkt"];
8513--12209[label="0.00874636;3pkt 3fpkt"];
8513--12218[label="0.00291545;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.159.183" dst_port="40447"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_272{
style=filled;
color=gray75;
5206[label="172.1.10.230;d;174pkt 174fpkt", shape=diamond, color=yellow];
10215[label="172.1.10.230;d;167pkt 167fpkt", shape=hexagon, color=black];
stat272[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 172.1.10.230:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
5206--10215[label="1;167pkt 167fpkt"];
</description>
    <slice>
      <filter dst_ip="172.1.10.230"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623538" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_274{
style=filled;
color=gray75;
1862[label="12.81.24.88;d;41pkt 41fpkt", shape=diamond, color=yellow];
1863[label="171.197.217.238;s;78pkt 78fpkt", shape=diamond, color=yellow];
2207[label="172.5.232.91;s;54pkt 54fpkt", shape=diamond, color=yellow];
2269[label="12.81.24.226;d;45pkt 45fpkt", shape=diamond, color=yellow];
3458[label="13.145.6.208;d;36pkt 36fpkt", shape=diamond, color=yellow];
3969[label="172.1.21.41;s;117pkt 117fpkt", shape=diamond, color=yellow];
4012[label="218.13.82.14;d;35pkt 35fpkt", shape=diamond, color=yellow];
4164[label="199.107.151.12;s;62pkt 62fpkt", shape=diamond, color=yellow];
4278[label="172.1.156.54;s;42pkt 42fpkt", shape=diamond, color=yellow];
4478[label="38.39.209.37;d;9pkt 9fpkt", shape=diamond, color=yellow];
4936[label="3.170.43.89;d;44pkt 44fpkt", shape=diamond, color=yellow];
6135[label="215.145.36.61;d;4pkt 4fpkt", shape=diamond, color=yellow];
6995[label="199.75.48.145;d;9pkt 9fpkt", shape=diamond, color=yellow];
7380[label="217.40.160.227;s;7pkt 7fpkt", shape=diamond, color=yellow];
7590[label="171.197.255.160;s;1pkt 1fpkt", shape=diamond, color=yellow];
7767[label="142.21.10.137;s;48pkt 48fpkt", shape=diamond, color=yellow];
7983[label="14.32.186.6;d;5pkt 5fpkt", shape=diamond, color=yellow];
8548[label="171.197.217.238;s;18pkt 18fpkt", shape=hexagon, color=black];
8639[label="12.81.24.226;d;41pkt 41fpkt", shape=hexagon, color=black];
9067[label="218.13.82.14;d;13pkt 13fpkt", shape=hexagon, color=black];
9220[label="172.1.156.54;s;37pkt 37fpkt", shape=hexagon, color=black];
9658[label="199.107.151.12;s;57pkt 57fpkt", shape=hexagon, color=black];
10290[label="172.1.21.41;s;64pkt 64fpkt", shape=hexagon, color=black];
10963[label="215.145.36.61;d;4pkt 4fpkt", shape=hexagon, color=black];
stat274[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.21.41:80, *:*}[24.7265%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (45.6946%)&lt;BR/&gt; 21: (1.49254%)&lt;BR/&gt; 53: (1.0333%)&lt;BR/&gt; 44961: (0.344432%)&lt;BR/&gt; 0: (0.344432%)&gt;];
}
1862--1863[label="0.731707;30pkt 30fpkt"];
1862--7767[label="0.0487805;2pkt 2fpkt"];
1862--8548[label="0.388889;7pkt 7fpkt"];
1862--11966[label="0.0731707;3pkt 3fpkt"];
1862--11988[label="0.0731707;3pkt 3fpkt"];
1862--11999[label="0.121951;5pkt 5fpkt"];
1862--12024[label="0.097561;4pkt 4fpkt"];
1862--12038[label="0.0243902;1pkt 1fpkt"];
1862--12072[label="0.0731707;3pkt 3fpkt"];
1862--12089[label="0.0731707;3pkt 3fpkt"];
1862--12096[label="0.121951;5pkt 5fpkt"];
1862--12121[label="0.097561;4pkt 4fpkt"];
1862--12131[label="0.0243902;1pkt 1fpkt"];
1862--12165[label="0.0731707;3pkt 3fpkt"];
1862--12185[label="0.121951;5pkt 5fpkt"];
1862--12209[label="0.097561;4pkt 4fpkt"];
1862--12218[label="0.0243902;1pkt 1fpkt"];
1863--3458[label="0.75;27pkt 27fpkt"];
1863--6135[label="1;4pkt 4fpkt"];
1863--6360[label="1;1pkt 1fpkt"];
1863--6995[label="1;9pkt 9fpkt"];
1863--7347[label="0.0833333;1pkt 1fpkt"];
1863--7983[label="0.2;1pkt 1fpkt"];
1863--8548[label="1;18pkt 18fpkt"];
1863--10963[label="1;4pkt 4fpkt"];
1863--11966[label="0.0512821;4pkt 4fpkt"];
1863--11988[label="0.0641026;5pkt 5fpkt"];
1863--11999[label="0.0641026;5pkt 5fpkt"];
1863--12024[label="0.0769231;6pkt 6fpkt"];
1863--12038[label="0.0128205;1pkt 1fpkt"];
1863--12072[label="0.0512821;4pkt 4fpkt"];
1863--12089[label="0.0641026;5pkt 5fpkt"];
1863--12096[label="0.0641026;5pkt 5fpkt"];
1863--12121[label="0.0769231;6pkt 6fpkt"];
1863--12131[label="0.0128205;1pkt 1fpkt"];
1863--12165[label="0.0512821;4pkt 4fpkt"];
1863--12185[label="0.0641026;5pkt 5fpkt"];
1863--12209[label="0.0769231;6pkt 6fpkt"];
1863--12218[label="0.0128205;1pkt 1fpkt"];
2207--2269[label="0.711111;32pkt 32fpkt"];
2207--4012[label="0.285714;10pkt 10fpkt"];
2207--8639[label="0.707317;29pkt 29fpkt"];
2207--9067[label="0.307692;4pkt 4fpkt"];
2207--11966[label="0.0555556;3pkt 3fpkt"];
2207--11988[label="0.0740741;4pkt 4fpkt"];
2207--11999[label="0.0555556;3pkt 3fpkt"];
2207--12024[label="0.037037;2pkt 2fpkt"];
2207--12072[label="0.0555556;3pkt 3fpkt"];
2207--12089[label="0.0740741;4pkt 4fpkt"];
2207--12096[label="0.0555556;3pkt 3fpkt"];
2207--12121[label="0.037037;2pkt 2fpkt"];
2207--12165[label="0.0555556;3pkt 3fpkt"];
2207--12185[label="0.0555556;3pkt 3fpkt"];
2207--12209[label="0.037037;2pkt 2fpkt"];
2269--3969[label="0.2;9pkt 9fpkt"];
2269--8639[label="1;41pkt 41fpkt"];
2269--10290[label="0.111111;5pkt 5fpkt"];
2269--11966[label="0.0222222;1pkt 1fpkt"];
2269--11988[label="0.0666667;3pkt 3fpkt"];
2269--11999[label="0.0444444;2pkt 2fpkt"];
2269--12024[label="0.0222222;1pkt 1fpkt"];
2269--12072[label="0.0222222;1pkt 1fpkt"];
2269--12089[label="0.0666667;3pkt 3fpkt"];
2269--12096[label="0.0444444;2pkt 2fpkt"];
2269--12121[label="0.0222222;1pkt 1fpkt"];
2269--12165[label="0.0222222;1pkt 1fpkt"];
2269--12185[label="0.0444444;2pkt 2fpkt"];
2269--12209[label="0.0222222;1pkt 1fpkt"];
3458--4643[label="0.0277778;1pkt 1fpkt"];
3458--8548[label="0.444444;8pkt 8fpkt"];
3458--9509[label="0.0277778;1pkt 1fpkt"];
3458--10551[label="0.0277778;1pkt 1fpkt"];
3458--11414[label="0.0555556;2pkt 2fpkt"];
3458--11988[label="0.0555556;2pkt 2fpkt"];
3458--12024[label="0.0555556;2pkt 2fpkt"];
3458--12089[label="0.0555556;2pkt 2fpkt"];
3458--12121[label="0.0555556;2pkt 2fpkt"];
3458--12209[label="0.0555556;2pkt 2fpkt"];
3969--4012[label="0.171429;6pkt 6fpkt"];
3969--4936[label="0.0454545;2pkt 2fpkt"];
3969--8639[label="0.195122;8pkt 8fpkt"];
3969--8879[label="0.00854701;1pkt 1fpkt"];
3969--9067[label="0.153846;2pkt 2fpkt"];
3969--10290[label="1;64pkt 64fpkt"];
3969--11966[label="0.0512821;6pkt 6fpkt"];
3969--11988[label="0.025641;3pkt 3fpkt"];
3969--11999[label="0.00854701;1pkt 1fpkt"];
3969--12002[label="0.00854701;1pkt 1fpkt"];
3969--12024[label="0.017094;2pkt 2fpkt"];
3969--12072[label="0.0512821;6pkt 6fpkt"];
3969--12089[label="0.025641;3pkt 3fpkt"];
3969--12096[label="0.00854701;1pkt 1fpkt"];
3969--12099[label="0.00854701;1pkt 1fpkt"];
3969--12121[label="0.017094;2pkt 2fpkt"];
3969--12165[label="0.0512821;6pkt 6fpkt"];
3969--12185[label="0.00854701;1pkt 1fpkt"];
3969--12188[label="0.00854701;1pkt 1fpkt"];
3969--12209[label="0.017094;2pkt 2fpkt"];
4012--7380[label="0.285714;2pkt 2fpkt"];
4012--7590[label="1;1pkt 1fpkt"];
4012--9067[label="1;13pkt 13fpkt"];
4012--10290[label="0.142857;5pkt 5fpkt"];
4012--11966[label="0.114286;4pkt 4fpkt"];
4012--11988[label="0.0571429;2pkt 2fpkt"];
4012--12024[label="0.114286;4pkt 4fpkt"];
4012--12072[label="0.114286;4pkt 4fpkt"];
4012--12089[label="0.0571429;2pkt 2fpkt"];
4012--12121[label="0.114286;4pkt 4fpkt"];
4012--12165[label="0.114286;4pkt 4fpkt"];
4012--12209[label="0.114286;4pkt 4fpkt"];
4164--4478[label="1;9pkt 9fpkt"];
4164--6076[label="0.25;2pkt 2fpkt"];
4164--7983[label="0.2;1pkt 1fpkt"];
4164--8807[label="0.016129;1pkt 1fpkt"];
4164--9658[label="1;57pkt 57fpkt"];
4164--11966[label="0.0483871;3pkt 3fpkt"];
4164--11988[label="0.129032;8pkt 8fpkt"];
4164--11999[label="0.016129;1pkt 1fpkt"];
4164--12024[label="0.016129;1pkt 1fpkt"];
4164--12072[label="0.0483871;3pkt 3fpkt"];
4164--12089[label="0.129032;8pkt 8fpkt"];
4164--12096[label="0.016129;1pkt 1fpkt"];
4164--12121[label="0.016129;1pkt 1fpkt"];
4164--12165[label="0.0483871;3pkt 3fpkt"];
4164--12185[label="0.016129;1pkt 1fpkt"];
4164--12209[label="0.016129;1pkt 1fpkt"];
4278--4936[label="0.785714;33pkt 33fpkt"];
4278--9220[label="1;37pkt 37fpkt"];
4278--11988[label="0.119048;5pkt 5fpkt"];
4278--12023[label="0.0238095;1pkt 1fpkt"];
4278--12089[label="0.119048;5pkt 5fpkt"];
4278--12120[label="0.0238095;1pkt 1fpkt"];
4278--12208[label="0.0238095;1pkt 1fpkt"];
4478--9658[label="1;9pkt 9fpkt"];
4936--8558[label="0.0454545;2pkt 2fpkt"];
4936--9220[label="0.891892;33pkt 33fpkt"];
4936--10249[label="0.0227273;1pkt 1fpkt"];
4936--10290[label="0.0454545;2pkt 2fpkt"];
4936--11180[label="0.0454545;2pkt 2fpkt"];
4936--11988[label="0.136364;6pkt 6fpkt"];
4936--12089[label="0.136364;6pkt 6fpkt"];
6135--10963[label="1;4pkt 4fpkt"];
7380--7983[label="0.4;2pkt 2fpkt"];
7380--11999[label="0.142857;1pkt 1fpkt"];
7380--12096[label="0.142857;1pkt 1fpkt"];
7380--12185[label="0.142857;1pkt 1fpkt"];
8548--11966[label="0.222222;4pkt 4fpkt"];
8548--12072[label="0.222222;4pkt 4fpkt"];
8548--12165[label="0.222222;4pkt 4fpkt"];
8639--10290[label="0.121951;5pkt 5fpkt"];
8639--11966[label="0.0243902;1pkt 1fpkt"];
8639--11988[label="0.0731707;3pkt 3fpkt"];
8639--11999[label="0.0487805;2pkt 2fpkt"];
8639--12024[label="0.0243902;1pkt 1fpkt"];
8639--12072[label="0.0243902;1pkt 1fpkt"];
8639--12089[label="0.0731707;3pkt 3fpkt"];
8639--12096[label="0.0487805;2pkt 2fpkt"];
8639--12121[label="0.0243902;1pkt 1fpkt"];
8639--12165[label="0.0243902;1pkt 1fpkt"];
8639--12185[label="0.0487805;2pkt 2fpkt"];
8639--12209[label="0.0243902;1pkt 1fpkt"];
9067--10290[label="0.153846;2pkt 2fpkt"];
9067--11966[label="0.307692;4pkt 4fpkt"];
9067--11988[label="0.153846;2pkt 2fpkt"];
9067--12072[label="0.307692;4pkt 4fpkt"];
9067--12089[label="0.153846;2pkt 2fpkt"];
9067--12165[label="0.307692;4pkt 4fpkt"];
9220--11988[label="0.135135;5pkt 5fpkt"];
9220--12089[label="0.135135;5pkt 5fpkt"];
9658--11966[label="0.0526316;3pkt 3fpkt"];
9658--11988[label="0.140351;8pkt 8fpkt"];
9658--11999[label="0.0175439;1pkt 1fpkt"];
9658--12024[label="0.0175439;1pkt 1fpkt"];
9658--12072[label="0.0526316;3pkt 3fpkt"];
9658--12089[label="0.140351;8pkt 8fpkt"];
9658--12096[label="0.0175439;1pkt 1fpkt"];
9658--12121[label="0.0175439;1pkt 1fpkt"];
9658--12165[label="0.0526316;3pkt 3fpkt"];
9658--12185[label="0.0175439;1pkt 1fpkt"];
9658--12209[label="0.0175439;1pkt 1fpkt"];
10290--11966[label="0.09375;6pkt 6fpkt"];
10290--11988[label="0.046875;3pkt 3fpkt"];
10290--11999[label="0.015625;1pkt 1fpkt"];
10290--12002[label="0.015625;1pkt 1fpkt"];
10290--12024[label="0.015625;1pkt 1fpkt"];
10290--12072[label="0.09375;6pkt 6fpkt"];
10290--12089[label="0.046875;3pkt 3fpkt"];
10290--12096[label="0.015625;1pkt 1fpkt"];
10290--12099[label="0.015625;1pkt 1fpkt"];
10290--12121[label="0.015625;1pkt 1fpkt"];
10290--12165[label="0.09375;6pkt 6fpkt"];
10290--12185[label="0.015625;1pkt 1fpkt"];
10290--12188[label="0.015625;1pkt 1fpkt"];
10290--12209[label="0.015625;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="172.1.21.41" src_port="80"/>
    </slice>
    <from sec="1296622802" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_275{
style=filled;
color=gray75;
5344[label="187.165.73.40;s;321pkt 321fpkt", shape=diamond, color=yellow];
10318[label="187.165.73.40;s;321pkt 321fpkt", shape=hexagon, color=black];
stat275[shape=component, label=&lt;Rules:&lt;BR/&gt;{187.165.73.40:11839, *:*}[92.8349%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 11839: (46.4174%)&lt;BR/&gt; 443: (2.18069%)&lt;BR/&gt; 80: (1.40187%)&lt;BR/&gt; 36144: (0.311526%)&lt;BR/&gt; 65379: (0.155763%)&gt;];
}
5344--10318[label="1;321pkt 321fpkt"];
5344--11988[label="0.00623053;2pkt 2fpkt"];
5344--11999[label="0.00311526;1pkt 1fpkt"];
5344--12000[label="0.00623053;2pkt 2fpkt"];
5344--12038[label="0.00311526;1pkt 1fpkt"];
5344--12039[label="0.00623053;2pkt 2fpkt"];
5344--12089[label="0.00623053;2pkt 2fpkt"];
5344--12096[label="0.00311526;1pkt 1fpkt"];
5344--12097[label="0.00623053;2pkt 2fpkt"];
5344--12131[label="0.00311526;1pkt 1fpkt"];
5344--12132[label="0.00623053;2pkt 2fpkt"];
5344--12185[label="0.00311526;1pkt 1fpkt"];
5344--12186[label="0.00623053;2pkt 2fpkt"];
5344--12218[label="0.00311526;1pkt 1fpkt"];
5344--12219[label="0.00623053;2pkt 2fpkt"];
10318--11988[label="0.00623053;2pkt 2fpkt"];
10318--11999[label="0.00311526;1pkt 1fpkt"];
10318--12000[label="0.00623053;2pkt 2fpkt"];
10318--12038[label="0.00311526;1pkt 1fpkt"];
10318--12039[label="0.00623053;2pkt 2fpkt"];
10318--12089[label="0.00623053;2pkt 2fpkt"];
10318--12096[label="0.00311526;1pkt 1fpkt"];
10318--12097[label="0.00623053;2pkt 2fpkt"];
10318--12131[label="0.00311526;1pkt 1fpkt"];
10318--12132[label="0.00623053;2pkt 2fpkt"];
10318--12185[label="0.00311526;1pkt 1fpkt"];
10318--12186[label="0.00623053;2pkt 2fpkt"];
10318--12218[label="0.00311526;1pkt 1fpkt"];
10318--12219[label="0.00623053;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="187.165.73.40" src_port="11839"/>
    </slice>
    <from sec="1296622803" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_276{
style=filled;
color=gray75;
6948[label="12.81.29.139;d;2pkt 2fpkt", shape=diamond, color=yellow];
6949[label="170.37.33.176;s;1pkt 1fpkt", shape=diamond, color=yellow];
11076[label="12.81.29.139;d;2pkt 2fpkt", shape=hexagon, color=black];
11342[label="170.37.33.176;s;1pkt 1fpkt", shape=hexagon, color=black];
stat276[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.205.137:443, 12.81.29.139:62573}[50%]&lt;BR/&gt;{170.37.33.176:80, 12.81.29.139:59270}[50%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 59270: (33.3333%)&lt;BR/&gt; 80: (33.3333%)&lt;BR/&gt; 62573: (16.6667%)&lt;BR/&gt; 443: (16.6667%)&gt;];
}
6948--6949[label="1;1pkt 1fpkt"];
6948--11076[label="1;2pkt 2fpkt"];
6948--11342[label="1;1pkt 1fpkt"];
6949--11076[label="1;1pkt 1fpkt"];
6949--11342[label="1;1pkt 1fpkt"];
11076--11342[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.29.139" dst_port="59270" src_ip="170.37.33.176" src_port="80"/>
      <filter dst_ip="12.81.29.139" dst_port="62573" src_ip="172.5.205.137" src_port="443"/>
    </slice>
    <from sec="1296623396" usec="0"/>
    <to sec="1296623456" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_277{
style=filled;
color=gray75;
4028[label="171.197.45.229;s;113pkt 113fpkt", shape=diamond, color=yellow];
6085[label="25.160.65.117;d;23pkt 23fpkt", shape=diamond, color=yellow];
stat277[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.45.229:80, 198.49.226.160:*}[25.6637%]&lt;BR/&gt;{171.197.45.229:80, 25.160.65.117:*}[20.354%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59776: (0.735294%)&lt;BR/&gt; 59757: (0.735294%)&lt;BR/&gt; 59737: (0.735294%)&lt;BR/&gt; 59716: (0.735294%)&gt;];
}
4028--4252[label="0.0357143;1pkt 1fpkt"];
4028--6085[label="1;23pkt 23fpkt"];
4028--10409[label="0.0357143;1pkt 1fpkt"];
4028--11966[label="0.0707965;8pkt 8fpkt"];
4028--11988[label="0.0707965;8pkt 8fpkt"];
4028--11999[label="0.0353982;4pkt 4fpkt"];
4028--12024[label="0.0530973;6pkt 6fpkt"];
4028--12038[label="0.00884956;1pkt 1fpkt"];
4028--12072[label="0.0707965;8pkt 8fpkt"];
4028--12089[label="0.0707965;8pkt 8fpkt"];
4028--12096[label="0.0353982;4pkt 4fpkt"];
4028--12121[label="0.0530973;6pkt 6fpkt"];
4028--12131[label="0.00884956;1pkt 1fpkt"];
4028--12165[label="0.0707965;8pkt 8fpkt"];
4028--12185[label="0.0353982;4pkt 4fpkt"];
4028--12209[label="0.0530973;6pkt 6fpkt"];
4028--12218[label="0.00884956;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.49.226.160" src_ip="171.197.45.229" src_port="80"/>
      <filter dst_ip="25.160.65.117" src_ip="171.197.45.229" src_port="80"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_278{
style=filled;
color=gray75;
4426[label="46.24.125.16;d;1pkt 1fpkt", shape=diamond, color=yellow];
4427[label="171.197.200.210;s;4pkt 4fpkt", shape=diamond, color=yellow];
6318[label="208.145.96.33;d;1pkt 1fpkt", shape=diamond, color=yellow];
7488[label="33.36.129.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
10431[label="171.197.200.210;s;2pkt 2fpkt", shape=hexagon, color=black];
11035[label="208.145.96.33;d;1pkt 1fpkt", shape=hexagon, color=black];
stat278[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.200.210:56290, 46.24.125.16:6359}[25%]&lt;BR/&gt;{171.197.200.210:56623, 208.145.96.33:6359}[25%]&lt;BR/&gt;{171.197.200.210:59446, 146.231.192.91:6359}[25%]&lt;BR/&gt;{171.197.200.210:59450, 33.36.129.176:6359}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 6359: (50%)&lt;BR/&gt; 56623: (20%)&lt;BR/&gt; 56290: (15%)&lt;BR/&gt; 59450: (10%)&lt;BR/&gt; 59446: (5%)&gt;];
}
4426--4427[label="1;1pkt 1fpkt"];
4426--10431[label="1;1pkt 1fpkt"];
4427--6318[label="1;1pkt 1fpkt"];
4427--7488[label="1;1pkt 1fpkt"];
4427--10431[label="1;2pkt 2fpkt"];
4427--11035[label="1;1pkt 1fpkt"];
6318--10431[label="1;1pkt 1fpkt"];
6318--11035[label="1;1pkt 1fpkt"];
10431--11035[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="33.36.129.176" dst_port="6359" src_ip="171.197.200.210" src_port="59450"/>
      <filter dst_ip="146.231.192.91" dst_port="6359" src_ip="171.197.200.210" src_port="59446"/>
      <filter dst_ip="208.145.96.33" dst_port="6359" src_ip="171.197.200.210" src_port="56623"/>
      <filter dst_ip="46.24.125.16" dst_port="6359" src_ip="171.197.200.210" src_port="56290"/>
    </slice>
    <from sec="1296623005" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,901,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="0.0.0.0"/>
      <from sec="1296622800" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="0" usec="0"/>
    <to sec="0" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_282{
style=filled;
color=gray75;
2304[label="172.247.27.133;d;99pkt 99fpkt", shape=diamond, color=yellow];
2348[label="5.67.157.193;s;136pkt 136fpkt", shape=diamond, color=yellow];
8338[label="172.247.27.133;d;99pkt 99fpkt", shape=hexagon, color=black];
9218[label="5.67.157.193;s;94pkt 94fpkt", shape=hexagon, color=black];
stat282[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.67.157.193:80, 172.247.27.133:*}[59.8639%]&lt;BR/&gt;{5.67.157.193:80, 199.107.159.128:*}[28.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.8318%)&lt;BR/&gt; 53: (1.16822%)&lt;BR/&gt; 50136: (0.46729%)&lt;BR/&gt; 50101: (0.46729%)&lt;BR/&gt; 50093: (0.46729%)&gt;];
}
2304--2348[label="0.888889;88pkt 88fpkt"];
2304--5958[label="0.0666667;2pkt 2fpkt"];
2304--7111[label="0.0119048;1pkt 1fpkt"];
2304--8338[label="1;99pkt 99fpkt"];
2304--9218[label="0.93617;88pkt 88fpkt"];
2304--11988[label="0.010101;1pkt 1fpkt"];
2304--12089[label="0.010101;1pkt 1fpkt"];
2348--2452[label="0.316176;43pkt 43fpkt"];
2348--4136[label="0.00735294;1pkt 1fpkt"];
2348--8338[label="0.888889;88pkt 88fpkt"];
2348--9218[label="1;94pkt 94fpkt"];
2348--9345[label="0.316176;43pkt 43fpkt"];
2348--9650[label="0.00735294;1pkt 1fpkt"];
2348--10562[label="0.0220588;3pkt 3fpkt"];
8338--9218[label="0.93617;88pkt 88fpkt"];
8338--11988[label="0.010101;1pkt 1fpkt"];
8338--12089[label="0.010101;1pkt 1fpkt"];
9218--9345[label="0.0106383;1pkt 1fpkt"];
9218--9650[label="0.0106383;1pkt 1fpkt"];
9218--10562[label="0.0319149;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="172.247.27.133" src_ip="5.67.157.193" src_port="80"/>
      <filter dst_ip="199.107.159.128" src_ip="5.67.157.193" src_port="80"/>
    </slice>
    <from sec="1296622856" usec="0"/>
    <to sec="1296623441" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_285{
style=filled;
color=gray75;
6437[label="171.197.116.44;s;162pkt 162fpkt", shape=diamond, color=yellow];
10675[label="171.197.116.44;s;139pkt 139fpkt", shape=hexagon, color=black];
stat285[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.116.44:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6437--10675[label="1;139pkt 139fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.116.44"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,010,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_287{
style=filled;
color=gray75;
3930[label="9.134.122.204;s;1849pkt 1849fpkt", shape=diamond, color=yellow];
10689[label="9.134.122.204;s;1644pkt 1644fpkt", shape=hexagon, color=black];
stat287[shape=component, label=&lt;Rules:&lt;BR/&gt;{9.134.122.204:3389, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 3389: (50%)&lt;BR/&gt; 61278: (0.0572574%)&lt;BR/&gt; 59487: (0.0572574%)&lt;BR/&gt; 57917: (0.0572574%)&lt;BR/&gt; 57611: (0.0572574%)&gt;];
}
3930--10689[label="1;1644pkt 1644fpkt"];
</description>
    <slice>
      <filter src_ip="9.134.122.204" src_port="3389"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_288{
style=filled;
color=gray75;
4698[label="171.197.113.157;s;567pkt 567fpkt", shape=diamond, color=yellow];
10710[label="171.197.113.157;s;469pkt 469fpkt", shape=hexagon, color=black];
stat288[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.113.157:0, *:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
4698--10710[label="1;469pkt 469fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.113.157"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_290{
style=filled;
color=gray75;
360[label="171.197.223.9s;1pkt 1fpkt", shape=rectangle, color=red];
3511[label="217.145.5.150;d;28pkt 28fpkt", shape=diamond, color=yellow];
3512[label="171.197.223.9;s;31pkt 31fpkt", shape=diamond, color=yellow];
9253[label="217.145.5.150;d;15pkt 15fpkt", shape=hexagon, color=black];
9254[label="171.197.223.9;s;18pkt 18fpkt", shape=hexagon, color=black];
stat290[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.223.9:*, 217.145.5.150:80}[90.3226%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 3099: (2.68817%)&lt;BR/&gt; 3133: (2.15054%)&lt;BR/&gt; 3131: (2.15054%)&lt;BR/&gt; 3129: (2.15054%)&gt;];
}
360--3511[label="1;1pkt 1fpkt"];
360--3512[label="1;1pkt 1fpkt"];
360--9253[label="1;1pkt 1fpkt"];
360--9254[label="1;1pkt 1fpkt"];
3511--3512[label="1;28pkt 28fpkt"];
3511--9253[label="1;15pkt 15fpkt"];
3511--9254[label="0.833333;15pkt 15fpkt"];
3511--11990[label="0.285714;8pkt 8fpkt"];
3511--12002[label="0.0714286;2pkt 2fpkt"];
3511--12027[label="0.0714286;2pkt 2fpkt"];
3511--12099[label="0.0714286;2pkt 2fpkt"];
3511--12124[label="0.0714286;2pkt 2fpkt"];
3511--12188[label="0.0714286;2pkt 2fpkt"];
3511--12212[label="0.0714286;2pkt 2fpkt"];
3512--4054[label="0.0322581;1pkt 1fpkt"];
3512--9253[label="1;15pkt 15fpkt"];
3512--9254[label="1;18pkt 18fpkt"];
3512--10773[label="0.0322581;1pkt 1fpkt"];
3512--11990[label="0.258065;8pkt 8fpkt"];
3512--12002[label="0.0645161;2pkt 2fpkt"];
3512--12027[label="0.0645161;2pkt 2fpkt"];
3512--12099[label="0.0645161;2pkt 2fpkt"];
3512--12124[label="0.0645161;2pkt 2fpkt"];
3512--12188[label="0.0645161;2pkt 2fpkt"];
3512--12212[label="0.0645161;2pkt 2fpkt"];
9253--9254[label="1;15pkt 15fpkt"];
9253--11990[label="0.266667;4pkt 4fpkt"];
9254--10773[label="0.0555556;1pkt 1fpkt"];
9254--11990[label="0.222222;4pkt 4fpkt"];
</description>
    <slice>
      <filter dst_ip="217.145.5.150" dst_port="80" src_ip="171.197.223.9"/>
    </slice>
    <from sec="1296622920" usec="0"/>
    <to sec="1296623263" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_297{
style=filled;
color=gray75;
257[label="171.197.132.218s;2pkt 2fpkt", shape=rectangle, color=red];
3390[label="16.192.87.224;d;46pkt 46fpkt", shape=diamond, color=yellow];
3391[label="171.197.132.218;s;55pkt 55fpkt", shape=diamond, color=yellow];
10877[label="16.192.87.224;d;46pkt 46fpkt", shape=hexagon, color=black];
11551[label="171.197.132.218;s;55pkt 55fpkt", shape=hexagon, color=black];
stat297[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.132.218:*, 16.192.87.224:80}[83.6364%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 51022: (1.22549%)&lt;BR/&gt; 50991: (1.22549%)&lt;BR/&gt; 51024: (0.980392%)&lt;BR/&gt; 51023: (0.980392%)&gt;];
}
257--3390[label="1;2pkt 2fpkt"];
257--3391[label="1;2pkt 2fpkt"];
257--10877[label="1;2pkt 2fpkt"];
257--11551[label="1;2pkt 2fpkt"];
257--12002[label="0.5;1pkt 1fpkt"];
257--12099[label="0.5;1pkt 1fpkt"];
257--12188[label="0.5;1pkt 1fpkt"];
3390--3391[label="1;46pkt 46fpkt"];
3390--10877[label="1;46pkt 46fpkt"];
3390--11551[label="1;46pkt 46fpkt"];
3390--12002[label="0.130435;6pkt 6fpkt"];
3390--12027[label="0.0652174;3pkt 3fpkt"];
3390--12099[label="0.130435;6pkt 6fpkt"];
3390--12124[label="0.0652174;3pkt 3fpkt"];
3390--12188[label="0.130435;6pkt 6fpkt"];
3390--12212[label="0.0652174;3pkt 3fpkt"];
3391--10877[label="1;46pkt 46fpkt"];
3391--11551[label="1;55pkt 55fpkt"];
3391--12002[label="0.163636;9pkt 9fpkt"];
3391--12027[label="0.0545455;3pkt 3fpkt"];
3391--12099[label="0.163636;9pkt 9fpkt"];
3391--12124[label="0.0545455;3pkt 3fpkt"];
3391--12188[label="0.163636;9pkt 9fpkt"];
3391--12212[label="0.0545455;3pkt 3fpkt"];
10877--11551[label="1;46pkt 46fpkt"];
10877--12002[label="0.130435;6pkt 6fpkt"];
10877--12027[label="0.0652174;3pkt 3fpkt"];
10877--12099[label="0.130435;6pkt 6fpkt"];
10877--12124[label="0.0652174;3pkt 3fpkt"];
10877--12188[label="0.130435;6pkt 6fpkt"];
10877--12212[label="0.0652174;3pkt 3fpkt"];
11551--12002[label="0.163636;9pkt 9fpkt"];
11551--12027[label="0.0545455;3pkt 3fpkt"];
11551--12099[label="0.163636;9pkt 9fpkt"];
11551--12124[label="0.0545455;3pkt 3fpkt"];
11551--12188[label="0.163636;9pkt 9fpkt"];
11551--12212[label="0.0545455;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="16.192.87.224" dst_port="80" src_ip="171.197.132.218"/>
    </slice>
    <from sec="1296622857" usec="0"/>
    <to sec="1296623548" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_298{
style=filled;
color=gray75;
5170[label="171.197.18.30;s;697pkt 697fpkt", shape=diamond, color=yellow];
9823[label="171.197.18.30;s;477pkt 477fpkt", shape=hexagon, color=black];
stat298[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.18.30:*, *:8612}[84.3615%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8612: (42.0358%)&lt;BR/&gt; 8611: (6.26065%)&lt;BR/&gt; 443: (0.979557%)&lt;BR/&gt; 80: (0.72402%)&lt;BR/&gt; 32516: (0.0851789%)&gt;];
}
5170--6388[label="0.00787402;1pkt 1fpkt"];
5170--7118[label="0.125984;32pkt 32fpkt"];
5170--8488[label="0.0029985;2pkt 2fpkt"];
5170--9129[label="0.00483092;1pkt 1fpkt"];
5170--9823[label="1;477pkt 477fpkt"];
5170--11410[label="0.00787402;1pkt 1fpkt"];
5170--11990[label="0.00286944;2pkt 2fpkt"];
5170--12002[label="0.00143472;1pkt 1fpkt"];
5170--12003[label="0.00143472;1pkt 1fpkt"];
5170--12027[label="0.00286944;2pkt 2fpkt"];
5170--12042[label="0.00143472;1pkt 1fpkt"];
5170--12099[label="0.00143472;1pkt 1fpkt"];
5170--12100[label="0.00143472;1pkt 1fpkt"];
5170--12124[label="0.00286944;2pkt 2fpkt"];
5170--12135[label="0.00143472;1pkt 1fpkt"];
5170--12188[label="0.00143472;1pkt 1fpkt"];
5170--12189[label="0.00143472;1pkt 1fpkt"];
5170--12212[label="0.00286944;2pkt 2fpkt"];
5170--12222[label="0.00143472;1pkt 1fpkt"];
9823--11990[label="0.00419287;2pkt 2fpkt"];
9823--12002[label="0.00209644;1pkt 1fpkt"];
9823--12003[label="0.00209644;1pkt 1fpkt"];
9823--12027[label="0.00209644;1pkt 1fpkt"];
9823--12042[label="0.00209644;1pkt 1fpkt"];
9823--12099[label="0.00209644;1pkt 1fpkt"];
9823--12100[label="0.00209644;1pkt 1fpkt"];
9823--12124[label="0.00209644;1pkt 1fpkt"];
9823--12135[label="0.00209644;1pkt 1fpkt"];
9823--12188[label="0.00209644;1pkt 1fpkt"];
9823--12189[label="0.00209644;1pkt 1fpkt"];
9823--12212[label="0.00209644;1pkt 1fpkt"];
9823--12222[label="0.00209644;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="8612" src_ip="171.197.18.30"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623613" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="33.45.143.167"/>
      <from sec="1296623101" usec="0"/>
      <to sec="1296623448" usec="0"/>
    </slice>
    <from sec="1296623101" usec="0"/>
    <to sec="1296623448" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_301{
style=filled;
color=gray75;
868[label="209.9.8.121;d;1pkt 1fpkt", shape=diamond, color=yellow];
1119[label="171.197.58.116;s;538pkt 538fpkt", shape=diamond, color=yellow];
1120[label="45.161.31.179;d;1pkt 1fpkt", shape=diamond, color=yellow];
1619[label="56.186.9.146;d;1pkt 1fpkt", shape=diamond, color=yellow];
2944[label="56.183.34.65;d;1pkt 1fpkt", shape=diamond, color=yellow];
3640[label="198.60.0.38;s;248pkt 248fpkt", shape=diamond, color=yellow];
4097[label="208.85.46.212;d;1pkt 1fpkt", shape=diamond, color=yellow];
4958[label="32.21.34.47;d;2pkt 2fpkt", shape=diamond, color=yellow];
4985[label="208.42.39.61;d;129pkt 129fpkt", shape=diamond, color=yellow];
5371[label="46.171.103.122;d;1pkt 1fpkt", shape=diamond, color=yellow];
5518[label="32.132.182.156;d;1pkt 1fpkt", shape=diamond, color=yellow];
5905[label="73.114.22.88;d;1pkt 1fpkt", shape=diamond, color=yellow];
6766[label="56.186.53.150;d;2pkt 2fpkt", shape=diamond, color=yellow];
7102[label="45.209.139.69;d;1pkt 1fpkt", shape=diamond, color=yellow];
7782[label="107.96.46.150;d;1pkt 1fpkt", shape=diamond, color=yellow];
8045[label="32.142.144.176;d;1pkt 1fpkt", shape=diamond, color=yellow];
8774[label="45.161.31.179;d;1pkt 1fpkt", shape=hexagon, color=black];
9337[label="209.9.8.121;d;1pkt 1fpkt", shape=hexagon, color=black];
9476[label="56.186.9.146;d;1pkt 1fpkt", shape=hexagon, color=black];
9535[label="56.183.34.65;d;1pkt 1fpkt", shape=hexagon, color=black];
10061[label="32.132.182.156;d;1pkt 1fpkt", shape=hexagon, color=black];
10805[label="208.85.46.212;d;1pkt 1fpkt", shape=hexagon, color=black];
stat301[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.0.38:*, *:80}[28.8804%]&lt;BR/&gt;{171.197.58.116:20859, *:*}[26.972%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (25.1603%)&lt;BR/&gt; 20859: (11.3248%)&lt;BR/&gt; 443: (2.51068%)&lt;BR/&gt; 53: (2.29701%)&lt;BR/&gt; 15005: (1.92308%)&gt;];
}
868--3640[label="1;1pkt 1fpkt"];
868--9337[label="1;1pkt 1fpkt"];
1119--1120[label="1;1pkt 1fpkt"];
1119--1277[label="0.00371747;2pkt 2fpkt"];
1119--1559[label="0.00929368;5pkt 5fpkt"];
1119--1619[label="1;1pkt 1fpkt"];
1119--1624[label="0.00371747;2pkt 2fpkt"];
1119--1654[label="0.00585938;3pkt 3fpkt"];
1119--1722[label="0.00743494;4pkt 4fpkt"];
1119--1724[label="0.00557621;3pkt 3fpkt"];
1119--1949[label="0.00642398;3pkt 3fpkt"];
1119--2865[label="0.0387097;18pkt 18fpkt"];
1119--2883[label="0.0307692;2pkt 2fpkt"];
1119--2944[label="1;1pkt 1fpkt"];
1119--3018[label="0.0223048;6pkt 6fpkt"];
1119--4097[label="1;1pkt 1fpkt"];
1119--4534[label="0.00406504;1pkt 1fpkt"];
1119--4738[label="0.0100334;3pkt 3fpkt"];
1119--4837[label="0.0150376;2pkt 2fpkt"];
1119--4958[label="0.5;1pkt 1fpkt"];
1119--5518[label="1;1pkt 1fpkt"];
1119--5905[label="1;1pkt 1fpkt"];
1119--6021[label="0.04;3pkt 3fpkt"];
1119--6766[label="1;2pkt 2fpkt"];
1119--7211[label="0.0545455;3pkt 3fpkt"];
1119--7256[label="0.25;1pkt 1fpkt"];
1119--8045[label="1;1pkt 1fpkt"];
1119--8265[label="0.011811;3pkt 3fpkt"];
1119--8377[label="0.00436681;2pkt 2fpkt"];
1119--8721[label="0.0121951;2pkt 2fpkt"];
1119--8774[label="1;1pkt 1fpkt"];
1119--8950[label="0.0387097;18pkt 18fpkt"];
1119--8975[label="0.00557621;3pkt 3fpkt"];
1119--9476[label="1;1pkt 1fpkt"];
1119--9479[label="0.00571429;2pkt 2fpkt"];
1119--9535[label="1;1pkt 1fpkt"];
1119--10061[label="1;1pkt 1fpkt"];
1119--10253[label="0.0454545;2pkt 2fpkt"];
1119--10805[label="1;1pkt 1fpkt"];
1119--11990[label="0.0111524;6pkt 6fpkt"];
1119--12002[label="0.0501859;27pkt 27fpkt"];
1119--12003[label="0.00743494;4pkt 4fpkt"];
1119--12027[label="0.0427509;23pkt 23fpkt"];
1119--12042[label="0.00743494;4pkt 4fpkt"];
1119--12043[label="0.00371747;2pkt 2fpkt"];
1119--12099[label="0.0501859;27pkt 27fpkt"];
1119--12100[label="0.00743494;4pkt 4fpkt"];
1119--12124[label="0.0427509;23pkt 23fpkt"];
1119--12135[label="0.00743494;4pkt 4fpkt"];
1119--12136[label="0.00371747;2pkt 2fpkt"];
1119--12188[label="0.0501859;27pkt 27fpkt"];
1119--12189[label="0.00743494;4pkt 4fpkt"];
1119--12212[label="0.0427509;23pkt 23fpkt"];
1119--12222[label="0.00743494;4pkt 4fpkt"];
1119--12223[label="0.00371747;2pkt 2fpkt"];
1120--8774[label="1;1pkt 1fpkt"];
1619--9476[label="1;1pkt 1fpkt"];
2944--9535[label="1;1pkt 1fpkt"];
3640--4958[label="0.5;1pkt 1fpkt"];
3640--4985[label="1;129pkt 129fpkt"];
3640--5371[label="1;1pkt 1fpkt"];
3640--7102[label="1;1pkt 1fpkt"];
3640--7782[label="1;1pkt 1fpkt"];
3640--9337[label="1;1pkt 1fpkt"];
3640--11990[label="0.16129;40pkt 40fpkt"];
3640--12027[label="0.00403226;1pkt 1fpkt"];
3640--12124[label="0.00403226;1pkt 1fpkt"];
3640--12212[label="0.00403226;1pkt 1fpkt"];
4097--10805[label="1;1pkt 1fpkt"];
4985--11990[label="0.224806;29pkt 29fpkt"];
5518--10061[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.58.116" src_port="20859"/>
      <filter dst_port="80" src_ip="198.60.0.38"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_302{
style=filled;
color=gray75;
525[label="142.21.168.207s;12pkt 12fpkt", shape=rectangle, color=red];
2139[label="171.197.18.121;s;481pkt 481fpkt", shape=diamond, color=yellow];
3246[label="192.168.0.215;d;4pkt 4fpkt", shape=diamond, color=yellow];
7929[label="142.21.168.207;s;116pkt 116fpkt", shape=diamond, color=yellow];
8073[label="131.97.73.81;d;38pkt 38fpkt", shape=diamond, color=yellow];
9641[label="192.168.0.215;d;3pkt 3fpkt", shape=hexagon, color=black];
10810[label="171.197.18.121;s;410pkt 410fpkt", shape=hexagon, color=black];
11641[label="131.97.73.81;d;38pkt 38fpkt", shape=hexagon, color=black];
stat302[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.18.121:*, *:80}[30.8208%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.7768%)&lt;BR/&gt; 7024: (8.66606%)&lt;BR/&gt; 443: (6.76044%)&lt;BR/&gt; 5222: (5.80762%)&lt;BR/&gt; 82: (1.45191%)&gt;];
}
525--7929[label="1;12pkt 12fpkt"];
525--8073[label="1;12pkt 12fpkt"];
525--11641[label="1;12pkt 12fpkt"];
2139--2481[label="0.0519751;25pkt 25fpkt"];
2139--2880[label="0.027027;13pkt 13fpkt"];
2139--3054[label="0.00330033;1pkt 1fpkt"];
2139--3246[label="1;4pkt 4fpkt"];
2139--3687[label="0.121212;8pkt 8fpkt"];
2139--3878[label="0.00888889;2pkt 2fpkt"];
2139--4054[label="0.00471698;1pkt 1fpkt"];
2139--4086[label="0.0027027;1pkt 1fpkt"];
2139--4134[label="0.00879765;3pkt 3fpkt"];
2139--4141[label="0.0135135;2pkt 2fpkt"];
2139--4534[label="0.00406504;1pkt 1fpkt"];
2139--4752[label="0.00515464;1pkt 1fpkt"];
2139--4795[label="0.0060241;1pkt 1fpkt"];
2139--4847[label="0.00716846;2pkt 2fpkt"];
2139--5255[label="0.0129032;2pkt 2fpkt"];
2139--5325[label="0.0388889;7pkt 7fpkt"];
2139--5395[label="0.00671141;1pkt 1fpkt"];
2139--5397[label="0.0151515;1pkt 1fpkt"];
2139--6088[label="0.111111;2pkt 2fpkt"];
2139--6444[label="0.011236;1pkt 1fpkt"];
2139--6471[label="0.0155039;2pkt 2fpkt"];
2139--6628[label="0.0232558;1pkt 1fpkt"];
2139--7071[label="0.0232558;2pkt 2fpkt"];
2139--7816[label="0.0232558;2pkt 2fpkt"];
2139--8488[label="0.00831601;4pkt 4fpkt"];
2139--8783[label="0.135593;8pkt 8fpkt"];
2139--8900[label="0.002079;1pkt 1fpkt"];
2139--9641[label="1;3pkt 3fpkt"];
2139--9962[label="0.0060241;1pkt 1fpkt"];
2139--10379[label="0.0106383;2pkt 2fpkt"];
2139--10713[label="0.0224719;2pkt 2fpkt"];
2139--10735[label="0.033264;16pkt 16fpkt"];
2139--10773[label="0.00471698;1pkt 1fpkt"];
2139--10810[label="1;410pkt 410fpkt"];
2139--10938[label="0.133333;2pkt 2fpkt"];
2139--11158[label="0.027027;13pkt 13fpkt"];
2139--11433[label="0.0232558;2pkt 2fpkt"];
2139--11477[label="0.0388889;7pkt 7fpkt"];
2139--11989[label="0.002079;1pkt 1fpkt"];
2139--11990[label="0.049896;24pkt 24fpkt"];
2139--12002[label="0.00831601;4pkt 4fpkt"];
2139--12003[label="0.022869;11pkt 11fpkt"];
2139--12027[label="0.047817;23pkt 23fpkt"];
2139--12099[label="0.00831601;4pkt 4fpkt"];
2139--12100[label="0.022869;11pkt 11fpkt"];
2139--12124[label="0.047817;23pkt 23fpkt"];
2139--12188[label="0.00831601;4pkt 4fpkt"];
2139--12189[label="0.022869;11pkt 11fpkt"];
2139--12212[label="0.047817;23pkt 23fpkt"];
3246--9641[label="1;3pkt 3fpkt"];
3246--10810[label="1;4pkt 4fpkt"];
7929--8073[label="1;38pkt 38fpkt"];
7929--11641[label="1;38pkt 38fpkt"];
7929--12042[label="0.00862069;1pkt 1fpkt"];
7929--12135[label="0.00862069;1pkt 1fpkt"];
7929--12222[label="0.00862069;1pkt 1fpkt"];
8073--11641[label="1;38pkt 38fpkt"];
9641--10810[label="1;3pkt 3fpkt"];
10810--10938[label="0.133333;2pkt 2fpkt"];
10810--11158[label="0.0317073;13pkt 13fpkt"];
10810--11433[label="0.0232558;2pkt 2fpkt"];
10810--11477[label="0.0388889;7pkt 7fpkt"];
10810--11989[label="0.00243902;1pkt 1fpkt"];
10810--11990[label="0.0585366;24pkt 24fpkt"];
10810--12002[label="0.0097561;4pkt 4fpkt"];
10810--12003[label="0.0268293;11pkt 11fpkt"];
10810--12027[label="0.0560976;23pkt 23fpkt"];
10810--12099[label="0.0097561;4pkt 4fpkt"];
10810--12100[label="0.0268293;11pkt 11fpkt"];
10810--12124[label="0.0560976;23pkt 23fpkt"];
10810--12188[label="0.0097561;4pkt 4fpkt"];
10810--12189[label="0.0268293;11pkt 11fpkt"];
10810--12212[label="0.0560976;23pkt 23fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.18.121"/>
    </slice>
    <from sec="1296622808" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter src_ip="147.39.76.232"/>
      <from sec="1296623269" usec="0"/>
      <to sec="1296623532" usec="0"/>
    </slice>
    <from sec="1296623269" usec="0"/>
    <to sec="1296623532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_305{
style=filled;
color=gray75;
249[label="142.21.202.209s;60pkt 60fpkt", shape=rectangle, color=red];
6257[label="217.145.163.136;d;81pkt 81fpkt", shape=diamond, color=yellow];
6802[label="142.21.202.209;s;155pkt 155fpkt", shape=diamond, color=yellow];
7578[label="40.162.2.192;d;61pkt 61fpkt", shape=diamond, color=yellow];
11012[label="142.21.202.209;s;93pkt 93fpkt", shape=hexagon, color=black];
stat305[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.202.209:*, 217.145.163.136:80}[52.2581%]&lt;BR/&gt;{142.21.202.209:*, 40.162.2.192:80}[39.3548%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 2818: (0.333333%)&lt;BR/&gt; 2816: (0.333333%)&lt;BR/&gt; 2814: (0.333333%)&lt;BR/&gt; 2812: (0.333333%)&gt;];
}
249--6802[label="1;60pkt 60fpkt"];
249--7578[label="1;60pkt 60fpkt"];
6257--6802[label="1;81pkt 81fpkt"];
6257--11012[label="1;81pkt 81fpkt"];
6257--12002[label="0.17284;14pkt 14fpkt"];
6257--12099[label="0.17284;14pkt 14fpkt"];
6257--12188[label="0.17284;14pkt 14fpkt"];
6802--7578[label="1;61pkt 61fpkt"];
6802--11012[label="1;93pkt 93fpkt"];
6802--11410[label="0.00787402;1pkt 1fpkt"];
6802--12002[label="0.16129;25pkt 25fpkt"];
6802--12027[label="0.0129032;2pkt 2fpkt"];
6802--12099[label="0.16129;25pkt 25fpkt"];
6802--12124[label="0.0129032;2pkt 2fpkt"];
6802--12188[label="0.16129;25pkt 25fpkt"];
6802--12212[label="0.0129032;2pkt 2fpkt"];
11012--12002[label="0.268817;25pkt 25fpkt"];
11012--12027[label="0.0215054;2pkt 2fpkt"];
11012--12099[label="0.268817;25pkt 25fpkt"];
11012--12124[label="0.0215054;2pkt 2fpkt"];
11012--12188[label="0.268817;25pkt 25fpkt"];
11012--12212[label="0.0215054;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="217.145.163.136" dst_port="80" src_ip="142.21.202.209"/>
      <filter dst_ip="40.162.2.192" dst_port="80" src_ip="142.21.202.209"/>
    </slice>
    <from sec="1296623289" usec="0"/>
    <to sec="1296623554" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_306{
style=filled;
color=gray75;
3118[label="142.21.97.160;d;139pkt 139fpkt", shape=diamond, color=yellow];
3567[label="0.149.216.82;s;1pkt 1fpkt", shape=diamond, color=yellow];
6936[label="208.94.108.123;s;1pkt 1fpkt", shape=diamond, color=yellow];
7480[label="30.152.98.210;s;1pkt 1fpkt", shape=diamond, color=yellow];
9086[label="142.21.97.160;d;45pkt 45fpkt", shape=hexagon, color=black];
11063[label="208.94.108.123;s;1pkt 1fpkt", shape=hexagon, color=black];
11353[label="30.152.98.210;s;1pkt 1fpkt", shape=hexagon, color=black];
stat306[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:*, 142.21.97.160:13411}[92.8058%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13411: (44.4444%)&lt;BR/&gt; 4186: (3.43915%)&lt;BR/&gt; 8000: (1.5873%)&lt;BR/&gt; 13303: (1.0582%)&lt;BR/&gt; 58995: (0.793651%)&gt;];
}
3118--3567[label="1;1pkt 1fpkt"];
3118--6936[label="1;1pkt 1fpkt"];
3118--7480[label="1;1pkt 1fpkt"];
3118--9086[label="1;45pkt 45fpkt"];
3118--11063[label="1;1pkt 1fpkt"];
3118--11353[label="1;1pkt 1fpkt"];
3118--11966[label="0.00719424;1pkt 1fpkt"];
3118--11988[label="0.00719424;1pkt 1fpkt"];
3118--11999[label="0.00719424;1pkt 1fpkt"];
3118--12024[label="0.00719424;1pkt 1fpkt"];
3118--12072[label="0.00719424;1pkt 1fpkt"];
3118--12089[label="0.00719424;1pkt 1fpkt"];
3118--12096[label="0.00719424;1pkt 1fpkt"];
3118--12121[label="0.00719424;1pkt 1fpkt"];
3118--12165[label="0.00719424;1pkt 1fpkt"];
3118--12185[label="0.00719424;1pkt 1fpkt"];
3118--12209[label="0.00719424;1pkt 1fpkt"];
3567--9086[label="1;1pkt 1fpkt"];
6936--11063[label="1;1pkt 1fpkt"];
7480--11353[label="1;1pkt 1fpkt"];
9086--11966[label="0.0222222;1pkt 1fpkt"];
9086--11988[label="0.0222222;1pkt 1fpkt"];
9086--11999[label="0.0222222;1pkt 1fpkt"];
9086--12024[label="0.0222222;1pkt 1fpkt"];
9086--12072[label="0.0222222;1pkt 1fpkt"];
9086--12089[label="0.0222222;1pkt 1fpkt"];
9086--12096[label="0.0222222;1pkt 1fpkt"];
9086--12121[label="0.0222222;1pkt 1fpkt"];
9086--12165[label="0.0222222;1pkt 1fpkt"];
9086--12185[label="0.0222222;1pkt 1fpkt"];
9086--12209[label="0.0222222;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.97.160" dst_port="13411"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_308{
style=filled;
color=gray75;
4897[label="198.60.9.134;s;70pkt 70fpkt", shape=diamond, color=yellow];
5138[label="108.204.138.43;d;7pkt 7fpkt", shape=diamond, color=yellow];
6963[label="106.181.70.68;d;1pkt 1fpkt", shape=diamond, color=yellow];
9785[label="108.204.138.43;d;7pkt 7fpkt", shape=hexagon, color=black];
11083[label="106.181.70.68;d;1pkt 1fpkt", shape=hexagon, color=black];
stat308[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.60.9.134:*, *:80}[95.7143%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (48.2558%)&lt;BR/&gt; 52900: (1.74419%)&lt;BR/&gt; 52778: (1.74419%)&lt;BR/&gt; 52777: (1.74419%)&lt;BR/&gt; 52776: (1.74419%)&gt;];
}
4897--5138[label="1;7pkt 7fpkt"];
4897--6963[label="1;1pkt 1fpkt"];
4897--9785[label="1;7pkt 7fpkt"];
4897--11083[label="1;1pkt 1fpkt"];
4897--11990[label="0.157143;11pkt 11fpkt"];
4897--12002[label="0.128571;9pkt 9fpkt"];
4897--12027[label="0.142857;10pkt 10fpkt"];
4897--12042[label="0.242857;17pkt 17fpkt"];
4897--12099[label="0.128571;9pkt 9fpkt"];
4897--12124[label="0.142857;10pkt 10fpkt"];
4897--12135[label="0.242857;17pkt 17fpkt"];
4897--12188[label="0.128571;9pkt 9fpkt"];
4897--12212[label="0.142857;10pkt 10fpkt"];
4897--12222[label="0.242857;17pkt 17fpkt"];
5138--9785[label="1;7pkt 7fpkt"];
6963--11083[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="198.60.9.134"/>
    </slice>
    <from sec="1296622833" usec="0"/>
    <to sec="1296623622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_309{
style=filled;
color=gray75;
902[label="219.201.144.9;d;4pkt 4fpkt", shape=diamond, color=yellow];
1607[label="172.5.230.37;s;1pkt 1fpkt", shape=diamond, color=yellow];
2435[label="198.60.1.103;s;43pkt 43fpkt", shape=diamond, color=yellow];
3896[label="171.197.192.222;s;337pkt 337fpkt", shape=diamond, color=yellow];
4259[label="142.21.218.41;s;54pkt 54fpkt", shape=diamond, color=yellow];
4690[label="128.114.186.137;d;100pkt 100fpkt", shape=diamond, color=yellow];
7801[label="128.142.7.115;d;42pkt 42fpkt", shape=diamond, color=yellow];
8965[label="171.197.192.222;s;290pkt 290fpkt", shape=hexagon, color=black];
9340[label="219.201.144.9;d;4pkt 4fpkt", shape=hexagon, color=black];
9691[label="142.21.218.41;s;48pkt 48fpkt", shape=hexagon, color=black];
11102[label="198.60.1.103;s;43pkt 43fpkt", shape=hexagon, color=black];
stat309[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.192.222:*, *:80}[53.8136%]&lt;BR/&gt;{*:*, 128.114.186.137:80}[21.1864%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (37.5259%)&lt;BR/&gt; 443: (10.5072%)&lt;BR/&gt; 43261: (1.65631%)&lt;BR/&gt; 8080: (0.310559%)&lt;BR/&gt; 57012: (0.207039%)&gt;];
}
902--928[label="0.25;1pkt 1fpkt"];
902--1607[label="1;1pkt 1fpkt"];
902--2435[label="0.25;1pkt 1fpkt"];
902--4259[label="0.25;1pkt 1fpkt"];
902--9340[label="1;4pkt 4fpkt"];
902--9691[label="0.25;1pkt 1fpkt"];
902--11102[label="0.25;1pkt 1fpkt"];
902--11990[label="0.25;1pkt 1fpkt"];
1607--9340[label="1;1pkt 1fpkt"];
2435--2810[label="0.0232558;1pkt 1fpkt"];
2435--3727[label="0.0232558;1pkt 1fpkt"];
2435--3980[label="0.0232558;1pkt 1fpkt"];
2435--5345[label="0.0232558;1pkt 1fpkt"];
2435--9340[label="0.25;1pkt 1fpkt"];
2435--9873[label="0.0232558;1pkt 1fpkt"];
2435--11102[label="1;43pkt 43fpkt"];
2435--11990[label="0.0232558;1pkt 1fpkt"];
2435--12002[label="0.0232558;1pkt 1fpkt"];
2435--12099[label="0.0232558;1pkt 1fpkt"];
2435--12188[label="0.0232558;1pkt 1fpkt"];
3896--4690[label="0.52;52pkt 52fpkt"];
3896--7801[label="1;42pkt 42fpkt"];
3896--8965[label="1;290pkt 290fpkt"];
3896--11990[label="0.0830861;28pkt 28fpkt"];
3896--12002[label="0.0207715;7pkt 7fpkt"];
3896--12003[label="0.0148368;5pkt 5fpkt"];
3896--12027[label="0.0178042;6pkt 6fpkt"];
3896--12043[label="0.00296736;1pkt 1fpkt"];
3896--12099[label="0.0207715;7pkt 7fpkt"];
3896--12100[label="0.0148368;5pkt 5fpkt"];
3896--12124[label="0.0178042;6pkt 6fpkt"];
3896--12136[label="0.00296736;1pkt 1fpkt"];
3896--12188[label="0.0207715;7pkt 7fpkt"];
3896--12189[label="0.0148368;5pkt 5fpkt"];
3896--12212[label="0.0178042;6pkt 6fpkt"];
3896--12223[label="0.00296736;1pkt 1fpkt"];
4259--4690[label="0.222222;12pkt 12fpkt"];
4259--4853[label="0.037037;2pkt 2fpkt"];
4259--5759[label="0.0740741;4pkt 4fpkt"];
4259--8900[label="0.0740741;4pkt 4fpkt"];
4259--8966[label="0.0740741;4pkt 4fpkt"];
4259--9011[label="0.166667;9pkt 9fpkt"];
4259--9340[label="0.25;1pkt 1fpkt"];
4259--9691[label="1;48pkt 48fpkt"];
4259--9992[label="0.037037;2pkt 2fpkt"];
4259--10723[label="0.0185185;1pkt 1fpkt"];
4259--12002[label="0.0555556;3pkt 3fpkt"];
4259--12027[label="0.037037;2pkt 2fpkt"];
4259--12099[label="0.0555556;3pkt 3fpkt"];
4259--12124[label="0.037037;2pkt 2fpkt"];
4259--12188[label="0.0555556;3pkt 3fpkt"];
4259--12212[label="0.037037;2pkt 2fpkt"];
4690--4857[label="0.0116279;1pkt 1fpkt"];
4690--5420[label="0.01;1pkt 1fpkt"];
4690--5947[label="0.0217391;2pkt 2fpkt"];
4690--8965[label="0.5;50pkt 50fpkt"];
4690--9360[label="0.15;15pkt 15fpkt"];
4690--9691[label="0.25;12pkt 12fpkt"];
4690--10023[label="0.07;7pkt 7fpkt"];
4690--10363[label="0.0263158;2pkt 2fpkt"];
4690--10592[label="0.04;4pkt 4fpkt"];
4690--11858[label="0.0263158;2pkt 2fpkt"];
4690--11990[label="0.07;7pkt 7fpkt"];
4690--12002[label="0.04;4pkt 4fpkt"];
4690--12027[label="0.02;2pkt 2fpkt"];
4690--12099[label="0.04;4pkt 4fpkt"];
4690--12124[label="0.02;2pkt 2fpkt"];
4690--12188[label="0.04;4pkt 4fpkt"];
4690--12212[label="0.02;2pkt 2fpkt"];
7801--8965[label="0.857143;36pkt 36fpkt"];
7801--11990[label="0.0238095;1pkt 1fpkt"];
7801--12003[label="0.047619;2pkt 2fpkt"];
7801--12100[label="0.047619;2pkt 2fpkt"];
7801--12189[label="0.047619;2pkt 2fpkt"];
8965--11990[label="0.0965517;28pkt 28fpkt"];
8965--12002[label="0.0241379;7pkt 7fpkt"];
8965--12003[label="0.0172414;5pkt 5fpkt"];
8965--12027[label="0.0206897;6pkt 6fpkt"];
8965--12043[label="0.00344828;1pkt 1fpkt"];
8965--12099[label="0.0241379;7pkt 7fpkt"];
8965--12100[label="0.0172414;5pkt 5fpkt"];
8965--12124[label="0.0206897;6pkt 6fpkt"];
8965--12136[label="0.00344828;1pkt 1fpkt"];
8965--12188[label="0.0241379;7pkt 7fpkt"];
8965--12189[label="0.0172414;5pkt 5fpkt"];
8965--12212[label="0.0206897;6pkt 6fpkt"];
8965--12223[label="0.00344828;1pkt 1fpkt"];
9340--9691[label="0.25;1pkt 1fpkt"];
9340--11102[label="0.25;1pkt 1fpkt"];
9340--11990[label="0.25;1pkt 1fpkt"];
9691--9992[label="0.0416667;2pkt 2fpkt"];
9691--10723[label="0.0208333;1pkt 1fpkt"];
9691--12002[label="0.0625;3pkt 3fpkt"];
9691--12027[label="0.0416667;2pkt 2fpkt"];
9691--12099[label="0.0625;3pkt 3fpkt"];
9691--12124[label="0.0416667;2pkt 2fpkt"];
9691--12188[label="0.0625;3pkt 3fpkt"];
9691--12212[label="0.0416667;2pkt 2fpkt"];
11102--11990[label="0.0232558;1pkt 1fpkt"];
11102--12002[label="0.0232558;1pkt 1fpkt"];
11102--12099[label="0.0232558;1pkt 1fpkt"];
11102--12188[label="0.0232558;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.192.222"/>
      <filter dst_ip="128.114.186.137" dst_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_312{
style=filled;
color=gray75;
3498[label="172.5.157.204;s;2pkt 2fpkt", shape=diamond, color=yellow];
8631[label="219.201.144.40;d;4pkt 4fpkt", shape=hexagon, color=black];
9265[label="172.5.146.10;s;1pkt 1fpkt", shape=hexagon, color=black];
stat312[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.146.10:61375, 219.201.144.40:80}[25%]&lt;BR/&gt;{142.21.232.146:62566, 219.201.144.40:80}[25%]&lt;BR/&gt;{172.5.157.204:4754, 219.201.144.40:80}[25%]&lt;BR/&gt;{172.5.157.204:4756, 219.201.144.40:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 61375: (14.2857%)&lt;BR/&gt; 4756: (14.2857%)&lt;BR/&gt; 4754: (14.2857%)&lt;BR/&gt; 62566: (7.14286%)&gt;];
}
3498--8631[label="1;2pkt 2fpkt"];
8631--9265[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="219.201.144.40" dst_port="80" src_ip="172.5.157.204" src_port="4756"/>
      <filter dst_ip="219.201.144.40" dst_port="80" src_ip="172.5.157.204" src_port="4754"/>
      <filter dst_ip="219.201.144.40" dst_port="80" src_ip="142.21.232.146" src_port="62566"/>
      <filter dst_ip="219.201.144.40" dst_port="80" src_ip="172.5.146.10" src_port="61375"/>
    </slice>
    <from sec="1296622829" usec="0"/>
    <to sec="1296623048" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_313{
style=filled;
color=gray75;
7051[label="172.5.160.62;s;39pkt 39fpkt", shape=diamond, color=yellow];
11141[label="172.5.160.62;s;32pkt 32fpkt", shape=hexagon, color=black];
stat313[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.5.160.62:25, *:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 25: (50%)&lt;BR/&gt; 64758: (1.40845%)&lt;BR/&gt; 61502: (1.40845%)&lt;BR/&gt; 54436: (1.40845%)&lt;BR/&gt; 48271: (1.40845%)&gt;];
}
7051--11141[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter src_ip="172.5.160.62" src_port="25"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_314{
style=filled;
color=gray75;
7083[label="179.213.137.90;s;31pkt 31fpkt", shape=diamond, color=yellow];
11164[label="179.213.137.90;s;31pkt 31fpkt", shape=hexagon, color=black];
stat314[shape=component, label=&lt;Rules:&lt;BR/&gt;{179.213.137.90:5041, *:8000}[25.8065%]&lt;BR/&gt;{179.213.137.90:5041, *:7000}[22.5806%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (51.6129%)&lt;BR/&gt; 8000: (12.9032%)&lt;BR/&gt; 7000: (11.2903%)&lt;BR/&gt; 8002: (6.45161%)&lt;BR/&gt; 8001: (6.45161%)&gt;];
}
7083--11164[label="1;31pkt 31fpkt"];
</description>
    <slice>
      <filter dst_port="8000" src_ip="179.213.137.90" src_port="5041"/>
      <filter dst_port="7000" src_ip="179.213.137.90" src_port="5041"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623619" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_315{
style=filled;
color=gray75;
4650[label="171.197.99.109;d;441pkt 441fpkt", shape=diamond, color=yellow];
11165[label="171.197.99.109;d;441pkt 441fpkt", shape=hexagon, color=black];
stat315[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:8090, 171.197.99.109:27455}[49.2063%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 27455: (49.8866%)&lt;BR/&gt; 8090: (24.6032%)&lt;BR/&gt; 10101: (1.02041%)&lt;BR/&gt; 10102: (0.793651%)&lt;BR/&gt; 38482: (0.680272%)&gt;];
}
4650--11165[label="1;441pkt 441fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.99.109" dst_port="27455" src_port="8090"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623369" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_316{
style=filled;
color=gray75;
3366[label="208.140.28.197;d;82pkt 82fpkt", shape=diamond, color=yellow];
4349[label="172.1.15.128;s;58pkt 58fpkt", shape=diamond, color=yellow];
8641[label="208.140.28.197;d;82pkt 82fpkt", shape=hexagon, color=black];
stat316[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.15.128:443, 208.140.28.197:*}[70.7317%]&lt;BR/&gt;{172.1.15.129:443, 208.140.28.197:*}[23.1707%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (47.7477%)&lt;BR/&gt; 80: (2.25225%)&lt;BR/&gt; 3155: (0.675676%)&lt;BR/&gt; 3151: (0.675676%)&lt;BR/&gt; 3149: (0.675676%)&gt;];
}
3366--4349[label="1;58pkt 58fpkt"];
3366--4712[label="0.0609756;5pkt 5fpkt"];
3366--8641[label="1;82pkt 82fpkt"];
3366--11180[label="0.0609756;5pkt 5fpkt"];
3366--11966[label="0.0243902;2pkt 2fpkt"];
3366--12072[label="0.0243902;2pkt 2fpkt"];
3366--12165[label="0.0243902;2pkt 2fpkt"];
4349--8641[label="1;58pkt 58fpkt"];
8641--11180[label="0.0609756;5pkt 5fpkt"];
8641--11966[label="0.0243902;2pkt 2fpkt"];
8641--12072[label="0.0243902;2pkt 2fpkt"];
8641--12165[label="0.0243902;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="208.140.28.197" src_ip="172.1.15.128" src_port="443"/>
      <filter dst_ip="208.140.28.197" src_ip="172.1.15.129" src_port="443"/>
    </slice>
    <from sec="1296622844" usec="0"/>
    <to sec="1296623171" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_317{
style=filled;
color=gray75;
6773[label="198.49.8.0;d;352pkt 352fpkt", shape=diamond, color=yellow];
6774[label="171.197.221.165;s;363pkt 363fpkt", shape=diamond, color=yellow];
stat317[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.221.165:*, 198.49.8.0:80}[96.9697%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.9301%)&lt;BR/&gt; 3057: (0.13986%)&lt;BR/&gt; 3055: (0.13986%)&lt;BR/&gt; 3053: (0.13986%)&lt;BR/&gt; 3051: (0.13986%)&gt;];
}
6773--6774[label="1;352pkt 352fpkt"];
6774--7204[label="0.0136986;1pkt 1fpkt"];
6774--11181[label="0.0348837;3pkt 3fpkt"];
6774--12027[label="0.0137741;5pkt 5fpkt"];
6774--12124[label="0.0137741;5pkt 5fpkt"];
6774--12212[label="0.0137741;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.49.8.0" dst_port="80" src_ip="171.197.221.165"/>
    </slice>
    <from sec="1296623257" usec="0"/>
    <to sec="1296623525" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.580049,1.09796,503,1 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_318{
style=filled;
color=gray75;
432[label="199.107.145.213s;7pkt 7fpkt", shape=rectangle, color=red];
7707[label="199.107.145.213;s;96pkt 96fpkt", shape=diamond, color=yellow];
stat318[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.145.213:34188, *:*}[73.9583%]&lt;BR/&gt;{199.107.145.213:*, *:80}[23.9583%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 34188: (34.466%)&lt;BR/&gt; 80: (14.5631%)&lt;BR/&gt; 50241: (0.970874%)&lt;BR/&gt; 50239: (0.970874%)&lt;BR/&gt; 50238: (0.970874%)&gt;];
}
432--7707[label="1;7pkt 7fpkt"];
7707--11198[label="0.027027;2pkt 2fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.145.213" src_port="34188"/>
      <filter dst_port="80" src_ip="199.107.145.213"/>
    </slice>
    <from sec="1296622802" usec="0"/>
    <to sec="1296623614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_321{
style=filled;
color=gray75;
7991[label="198.60.2.221;d;127pkt 127fpkt", shape=diamond, color=yellow];
8149[label="107.153.115.56;s;2pkt 2fpkt", shape=diamond, color=yellow];
stat321[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 198.60.2.221:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1391: (0.775194%)&lt;BR/&gt; 1389: (0.775194%)&lt;BR/&gt; 1387: (0.387597%)&lt;BR/&gt; 1385: (0.387597%)&gt;];
}
7991--8149[label="1;2pkt 2fpkt"];
7991--12038[label="0.0393701;5pkt 5fpkt"];
7991--12131[label="0.0393701;5pkt 5fpkt"];
7991--12218[label="0.0393701;5pkt 5fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.2.221" src_port="80"/>
    </slice>
    <from sec="1296623520" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="147.39.76.232"/>
      <from sec="1296623269" usec="0"/>
      <to sec="1296623532" usec="0"/>
    </slice>
    <from sec="1296623269" usec="0"/>
    <to sec="1296623532" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_323{
style=filled;
color=gray75;
3120[label="198.60.1.50;d;194pkt 194fpkt", shape=diamond, color=yellow];
3389[label="183.2.105.200;s;24pkt 24fpkt", shape=diamond, color=yellow];
3507[label="183.2.105.204;s;6pkt 6fpkt", shape=diamond, color=yellow];
3675[label="5.35.212.34;s;209pkt 209fpkt", shape=diamond, color=yellow];
6660[label="142.21.72.128;d;28pkt 28fpkt", shape=diamond, color=yellow];
7409[label="142.21.72.85;d;45pkt 45fpkt", shape=diamond, color=yellow];
8646[label="183.2.105.200;s;24pkt 24fpkt", shape=hexagon, color=black];
9249[label="183.2.105.204;s;6pkt 6fpkt", shape=hexagon, color=black];
9951[label="142.21.214.144;d;77pkt 77fpkt", shape=hexagon, color=black];
10333[label="198.60.1.50;d;124pkt 124fpkt", shape=hexagon, color=black];
11265[label="142.21.72.128;d;28pkt 28fpkt", shape=hexagon, color=black];
11326[label="142.21.72.85;d;45pkt 45fpkt", shape=hexagon, color=black];
stat323[shape=component, label=&lt;Rules:&lt;BR/&gt;{5.35.212.34:993, 198.60.1.50:*}[44.4444%]&lt;BR/&gt;{*:80, 142.21.214.144:*}[21.9373%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 993: (35%)&lt;BR/&gt; 80: (11.1728%)&lt;BR/&gt; 47702: (2.22222%)&lt;BR/&gt; 443: (0.617284%)&lt;BR/&gt; 8443: (0.37037%)&gt;];
}
3120--3675[label="0.804124;156pkt 156fpkt"];
3120--3970[label="0.0154639;3pkt 3fpkt"];
3120--4723[label="0.00724638;1pkt 1fpkt"];
3120--7560[label="0.0103093;2pkt 2fpkt"];
3120--8303[label="0.00515464;1pkt 1fpkt"];
3120--8811[label="0.00515464;1pkt 1fpkt"];
3120--9912[label="0.00515464;1pkt 1fpkt"];
3120--10245[label="0.0103093;2pkt 2fpkt"];
3120--10333[label="1;124pkt 124fpkt"];
3120--11183[label="0.0154639;3pkt 3fpkt"];
3120--11853[label="0.0103093;2pkt 2fpkt"];
3120--11988[label="0.00515464;1pkt 1fpkt"];
3120--12024[label="0.00515464;1pkt 1fpkt"];
3120--12089[label="0.00515464;1pkt 1fpkt"];
3120--12121[label="0.00515464;1pkt 1fpkt"];
3120--12209[label="0.00515464;1pkt 1fpkt"];
3389--6660[label="0.25;6pkt 6fpkt"];
3389--8646[label="1;24pkt 24fpkt"];
3389--9951[label="0.75;18pkt 18fpkt"];
3389--11265[label="0.25;6pkt 6fpkt"];
3389--11988[label="0.0833333;2pkt 2fpkt"];
3389--12089[label="0.0833333;2pkt 2fpkt"];
3507--9249[label="1;6pkt 6fpkt"];
3507--9951[label="1;6pkt 6fpkt"];
3675--6660[label="0.0357143;1pkt 1fpkt"];
3675--7409[label="1;45pkt 45fpkt"];
3675--7699[label="0.0232558;1pkt 1fpkt"];
3675--7701[label="0.0322581;1pkt 1fpkt"];
3675--10333[label="0.774194;96pkt 96fpkt"];
3675--11265[label="0.0357143;1pkt 1fpkt"];
3675--11326[label="1;45pkt 45fpkt"];
3675--11469[label="0.0322581;1pkt 1fpkt"];
6660--7633[label="0.0357143;1pkt 1fpkt"];
6660--8646[label="0.25;6pkt 6fpkt"];
6660--9332[label="0.0357143;1pkt 1fpkt"];
6660--11265[label="1;28pkt 28fpkt"];
6660--11988[label="0.0357143;1pkt 1fpkt"];
6660--11999[label="0.0357143;1pkt 1fpkt"];
6660--12000[label="0.0357143;1pkt 1fpkt"];
6660--12024[label="0.0357143;1pkt 1fpkt"];
6660--12038[label="0.0357143;1pkt 1fpkt"];
6660--12089[label="0.0357143;1pkt 1fpkt"];
6660--12096[label="0.0357143;1pkt 1fpkt"];
6660--12097[label="0.0357143;1pkt 1fpkt"];
6660--12121[label="0.0357143;1pkt 1fpkt"];
6660--12131[label="0.0357143;1pkt 1fpkt"];
6660--12185[label="0.0357143;1pkt 1fpkt"];
6660--12186[label="0.0357143;1pkt 1fpkt"];
6660--12209[label="0.0357143;1pkt 1fpkt"];
6660--12218[label="0.0357143;1pkt 1fpkt"];
7409--11326[label="1;45pkt 45fpkt"];
8646--9951[label="0.75;18pkt 18fpkt"];
8646--11265[label="0.25;6pkt 6fpkt"];
8646--11988[label="0.0833333;2pkt 2fpkt"];
8646--12089[label="0.0833333;2pkt 2fpkt"];
9249--9951[label="1;6pkt 6fpkt"];
9951--10186[label="0.012987;1pkt 1fpkt"];
9951--11966[label="0.493506;38pkt 38fpkt"];
9951--11988[label="0.0649351;5pkt 5fpkt"];
9951--12072[label="0.493506;38pkt 38fpkt"];
9951--12089[label="0.0649351;5pkt 5fpkt"];
9951--12165[label="0.493506;38pkt 38fpkt"];
10333--11183[label="0.0241935;3pkt 3fpkt"];
10333--11853[label="0.016129;2pkt 2fpkt"];
10333--11988[label="0.00806452;1pkt 1fpkt"];
10333--12024[label="0.00806452;1pkt 1fpkt"];
10333--12089[label="0.00806452;1pkt 1fpkt"];
10333--12121[label="0.00806452;1pkt 1fpkt"];
10333--12209[label="0.00806452;1pkt 1fpkt"];
11265--11988[label="0.0357143;1pkt 1fpkt"];
11265--11999[label="0.0357143;1pkt 1fpkt"];
11265--12000[label="0.0357143;1pkt 1fpkt"];
11265--12024[label="0.0357143;1pkt 1fpkt"];
11265--12038[label="0.0357143;1pkt 1fpkt"];
11265--12089[label="0.0357143;1pkt 1fpkt"];
11265--12096[label="0.0357143;1pkt 1fpkt"];
11265--12097[label="0.0357143;1pkt 1fpkt"];
11265--12121[label="0.0357143;1pkt 1fpkt"];
11265--12131[label="0.0357143;1pkt 1fpkt"];
11265--12185[label="0.0357143;1pkt 1fpkt"];
11265--12186[label="0.0357143;1pkt 1fpkt"];
11265--12209[label="0.0357143;1pkt 1fpkt"];
11265--12218[label="0.0357143;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.214.144" src_port="80"/>
      <filter dst_ip="198.60.1.50" src_ip="5.35.212.34" src_port="993"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_324{
style=filled;
color=gray75;
3119[label="142.21.97.160;s;29pkt 29fpkt", shape=diamond, color=yellow];
3566[label="0.149.216.82;d;1pkt 1fpkt", shape=diamond, color=yellow];
6935[label="208.94.108.123;d;1pkt 1fpkt", shape=diamond, color=yellow];
7935[label="30.152.98.210;d;1pkt 1fpkt", shape=diamond, color=yellow];
11337[label="208.94.108.123;d;1pkt 1fpkt", shape=hexagon, color=black];
stat324[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.97.160:13411, *:*}[51.7241%]&lt;BR/&gt;{142.21.97.160:4186, *:*}[31.0345%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 13411: (22.7273%)&lt;BR/&gt; 4186: (19.697%)&lt;BR/&gt; 17788: (7.57576%)&lt;BR/&gt; 8000: (7.57576%)&lt;BR/&gt; 10387: (4.54545%)&gt;];
}
3119--3566[label="1;1pkt 1fpkt"];
3119--6935[label="1;1pkt 1fpkt"];
3119--7935[label="1;1pkt 1fpkt"];
3119--11337[label="1;1pkt 1fpkt"];
3119--11990[label="0.0344828;1pkt 1fpkt"];
3119--12002[label="0.0344828;1pkt 1fpkt"];
3119--12027[label="0.0344828;1pkt 1fpkt"];
3119--12099[label="0.0344828;1pkt 1fpkt"];
3119--12124[label="0.0344828;1pkt 1fpkt"];
3119--12188[label="0.0344828;1pkt 1fpkt"];
3119--12212[label="0.0344828;1pkt 1fpkt"];
6935--11337[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="142.21.97.160" src_port="13411"/>
      <filter src_ip="142.21.97.160" src_port="4186"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623617" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_326{
style=filled;
color=gray75;
7462[label="142.21.72.216;d;33pkt 33fpkt", shape=diamond, color=yellow];
11346[label="142.21.72.216;d;32pkt 32fpkt", shape=hexagon, color=black];
stat326[shape=component, label=&lt;Rules:&lt;BR/&gt;{217.58.204.75:80, 142.21.72.216:*}[42.4242%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 1529: (1.53846%)&lt;BR/&gt; 1525: (1.53846%)&lt;BR/&gt; 1522: (1.53846%)&lt;BR/&gt; 1519: (1.53846%)&gt;];
}
7462--9961[label="0.0606061;2pkt 2fpkt"];
7462--10645[label="0.030303;1pkt 1fpkt"];
7462--11346[label="1;32pkt 32fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.72.216" src_ip="217.58.204.75" src_port="80"/>
    </slice>
    <from sec="1296623418" usec="0"/>
    <to sec="1296623563" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_327{
style=filled;
color=gray75;
2101[label="218.13.82.21;d;8pkt 8fpkt", shape=diamond, color=yellow];
11348[label="218.13.82.21;d;8pkt 8fpkt", shape=hexagon, color=black];
stat327[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.152.118:80, 218.13.82.21:*}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59809: (6.25%)&lt;BR/&gt; 55988: (6.25%)&lt;BR/&gt; 54973: (6.25%)&lt;BR/&gt; 52217: (6.25%)&gt;];
}
2101--4204[label="0.125;1pkt 1fpkt"];
2101--6658[label="0.125;1pkt 1fpkt"];
2101--11348[label="1;8pkt 8fpkt"];
</description>
    <slice>
      <filter dst_ip="218.13.82.21" src_ip="199.107.152.118" src_port="80"/>
    </slice>
    <from sec="1296623422" usec="0"/>
    <to sec="1296623499" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_328{
style=filled;
color=gray75;
5512[label="171.197.162.16;s;108pkt 108fpkt", shape=diamond, color=yellow];
6696[label="12.44.147.14;d;2pkt 2fpkt", shape=diamond, color=yellow];
7000[label="12.123.7.189;d;1pkt 1fpkt", shape=diamond, color=yellow];
11351[label="12.123.7.189;d;1pkt 1fpkt", shape=hexagon, color=black];
stat328[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.162.16:30872, *:*}[83.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 30872: (41.0714%)&lt;BR/&gt; 80: (8.48214%)&lt;BR/&gt; 50548: (1.33929%)&lt;BR/&gt; 33033: (1.33929%)&lt;BR/&gt; 53209: (0.892857%)&gt;];
}
5512--6696[label="1;2pkt 2fpkt"];
5512--7000[label="1;1pkt 1fpkt"];
5512--8499[label="0.037037;4pkt 4fpkt"];
5512--9132[label="0.0485437;5pkt 5fpkt"];
5512--11351[label="1;1pkt 1fpkt"];
5512--11990[label="0.0740741;8pkt 8fpkt"];
5512--12002[label="0.0462963;5pkt 5fpkt"];
5512--12027[label="0.0462963;5pkt 5fpkt"];
5512--12042[label="0.0185185;2pkt 2fpkt"];
5512--12099[label="0.0462963;5pkt 5fpkt"];
5512--12124[label="0.0462963;5pkt 5fpkt"];
5512--12135[label="0.0185185;2pkt 2fpkt"];
5512--12188[label="0.0462963;5pkt 5fpkt"];
5512--12212[label="0.0462963;5pkt 5fpkt"];
5512--12222[label="0.0185185;2pkt 2fpkt"];
7000--11351[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.162.16" src_port="30872"/>
    </slice>
    <from sec="1296623048" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_329{
style=filled;
color=gray75;
3678[label="142.21.105.169;s;59pkt 59fpkt", shape=diamond, color=yellow];
4508[label="104.73.168.21;d;7pkt 7fpkt", shape=diamond, color=yellow];
4820[label="142.21.172.74;s;843pkt 843fpkt", shape=diamond, color=yellow];
4929[label="4.74.82.3;d;6pkt 6fpkt", shape=diamond, color=yellow];
5141[label="13.146.84.55;d;2pkt 2fpkt", shape=diamond, color=yellow];
5643[label="18.74.180.45;d;104pkt 104fpkt", shape=diamond, color=yellow];
5979[label="13.146.89.209;d;16pkt 16fpkt", shape=diamond, color=yellow];
7568[label="30.82.234.49;d;138pkt 138fpkt", shape=diamond, color=yellow];
9310[label="104.73.168.21;d;7pkt 7fpkt", shape=hexagon, color=black];
10097[label="18.74.180.45;d;80pkt 80fpkt", shape=hexagon, color=black];
11368[label="30.82.234.49;d;138pkt 138fpkt", shape=hexagon, color=black];
stat329[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.172.74:*, 30.82.234.49:80}[20.0883%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (43.1429%)&lt;BR/&gt; 35072: (2.32143%)&lt;BR/&gt; 993: (1.35714%)&lt;BR/&gt; 995: (1.28571%)&lt;BR/&gt; 443: (0.785714%)&gt;];
}
3678--4508[label="0.857143;6pkt 6fpkt"];
3678--4929[label="0.166667;1pkt 1fpkt"];
3678--5141[label="0.5;1pkt 1fpkt"];
3678--5979[label="0.875;14pkt 14fpkt"];
3678--8879[label="0.0169492;1pkt 1fpkt"];
3678--9310[label="0.857143;6pkt 6fpkt"];
4508--9310[label="1;7pkt 7fpkt"];
4820--4929[label="0.833333;5pkt 5fpkt"];
4820--5599[label="0.146341;6pkt 6fpkt"];
4820--5643[label="1;104pkt 104fpkt"];
4820--5910[label="0.0337079;3pkt 3fpkt"];
4820--6005[label="0.0168067;2pkt 2fpkt"];
4820--6279[label="1;1pkt 1fpkt"];
4820--6384[label="0.02;2pkt 2fpkt"];
4820--7170[label="0.0135135;1pkt 1fpkt"];
4820--7211[label="0.0181818;1pkt 1fpkt"];
4820--7568[label="1;138pkt 138fpkt"];
4820--9369[label="0.00118624;1pkt 1fpkt"];
4820--10097[label="1;80pkt 80fpkt"];
4820--10330[label="0.0535714;3pkt 3fpkt"];
4820--10685[label="0.0465116;2pkt 2fpkt"];
4820--10863[label="0.0204082;2pkt 2fpkt"];
4820--11368[label="1;138pkt 138fpkt"];
4820--11990[label="0.0177936;15pkt 15fpkt"];
4820--12002[label="0.0403321;34pkt 34fpkt"];
4820--12003[label="0.00237248;2pkt 2fpkt"];
4820--12027[label="0.0225386;19pkt 19fpkt"];
4820--12042[label="0.00355872;3pkt 3fpkt"];
4820--12043[label="0.00237248;2pkt 2fpkt"];
4820--12099[label="0.0403321;34pkt 34fpkt"];
4820--12100[label="0.00237248;2pkt 2fpkt"];
4820--12124[label="0.0225386;19pkt 19fpkt"];
4820--12135[label="0.00355872;3pkt 3fpkt"];
4820--12136[label="0.00237248;2pkt 2fpkt"];
4820--12188[label="0.0403321;34pkt 34fpkt"];
4820--12189[label="0.00237248;2pkt 2fpkt"];
4820--12212[label="0.0225386;19pkt 19fpkt"];
4820--12222[label="0.00355872;3pkt 3fpkt"];
4820--12223[label="0.00237248;2pkt 2fpkt"];
5643--10097[label="1;80pkt 80fpkt"];
5643--12002[label="0.00961538;1pkt 1fpkt"];
5643--12099[label="0.00961538;1pkt 1fpkt"];
5643--12188[label="0.00961538;1pkt 1fpkt"];
7568--11368[label="1;138pkt 138fpkt"];
</description>
    <slice>
      <filter dst_ip="30.82.234.49" dst_port="80" src_ip="142.21.172.74"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_330{
style=filled;
color=gray75;
7595[label="198.48.0.102;s;3pkt 3fpkt", shape=diamond, color=yellow];
11373[label="198.48.0.102;s;3pkt 3fpkt", shape=hexagon, color=black];
stat330[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.48.0.102:80, 13.145.69.97:47892}[33.3333%]&lt;BR/&gt;{198.48.0.102:80, 13.145.69.97:48172}[33.3333%]&lt;BR/&gt;{198.48.0.102:80, 13.145.69.97:48396}[33.3333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48396: (16.6667%)&lt;BR/&gt; 48172: (16.6667%)&lt;BR/&gt; 47892: (16.6667%)&gt;];
}
7595--11373[label="1;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="13.145.69.97" dst_port="48396" src_ip="198.48.0.102" src_port="80"/>
      <filter dst_ip="13.145.69.97" dst_port="48172" src_ip="198.48.0.102" src_port="80"/>
      <filter dst_ip="13.145.69.97" dst_port="47892" src_ip="198.48.0.102" src_port="80"/>
    </slice>
    <from sec="1296623514" usec="0"/>
    <to sec="1296623529" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_331{
style=filled;
color=gray75;
7604[label="198.62.80.182;s;193pkt 193fpkt", shape=diamond, color=yellow];
7903[label="198.60.8.137;d;209pkt 209fpkt", shape=diamond, color=yellow];
11376[label="198.62.80.182;s;154pkt 154fpkt", shape=hexagon, color=black];
11595[label="198.60.8.137;d;209pkt 209fpkt", shape=hexagon, color=black];
stat331[shape=component, label=&lt;Rules:&lt;BR/&gt;{198.62.80.182:80, 198.60.8.137:*}[92.3445%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (49.8693%)&lt;BR/&gt; 50404: (0.261438%)&lt;BR/&gt; 50403: (0.261438%)&lt;BR/&gt; 50402: (0.261438%)&lt;BR/&gt; 50401: (0.261438%)&gt;];
}
7604--7903[label="1;193pkt 193fpkt"];
7604--11376[label="1;154pkt 154fpkt"];
7604--11595[label="1;193pkt 193fpkt"];
7903--11163[label="0.00956938;2pkt 2fpkt"];
7903--11376[label="1;154pkt 154fpkt"];
7903--11595[label="1;209pkt 209fpkt"];
7903--12024[label="0.0239234;5pkt 5fpkt"];
7903--12038[label="0.00478469;1pkt 1fpkt"];
7903--12121[label="0.0239234;5pkt 5fpkt"];
7903--12131[label="0.00478469;1pkt 1fpkt"];
7903--12209[label="0.0239234;5pkt 5fpkt"];
7903--12218[label="0.00478469;1pkt 1fpkt"];
11376--11595[label="1;154pkt 154fpkt"];
11595--12024[label="0.0239234;5pkt 5fpkt"];
11595--12038[label="0.00478469;1pkt 1fpkt"];
11595--12121[label="0.0239234;5pkt 5fpkt"];
11595--12131[label="0.00478469;1pkt 1fpkt"];
11595--12209[label="0.0239234;5pkt 5fpkt"];
11595--12218[label="0.00478469;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.8.137" src_ip="198.62.80.182" src_port="80"/>
    </slice>
    <from sec="1296623363" usec="0"/>
    <to sec="1296623603" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_332{
style=filled;
color=gray75;
1132[label="37.186.25.104;d;1pkt 1fpkt", shape=diamond, color=yellow];
2557[label="171.197.209.36;s;65pkt 65fpkt", shape=diamond, color=yellow];
2694[label="108.114.202.85;d;1pkt 1fpkt", shape=diamond, color=yellow];
3406[label="35.17.196.164;d;1pkt 1fpkt", shape=diamond, color=yellow];
3482[label="37.33.20.214;d;1pkt 1fpkt", shape=diamond, color=yellow];
4345[label="47.154.50.8;d;1pkt 1fpkt", shape=diamond, color=yellow];
4419[label="45.219.169.124;d;1pkt 1fpkt", shape=diamond, color=yellow];
6208[label="47.167.38.30;d;1pkt 1fpkt", shape=diamond, color=yellow];
6236[label="37.77.202.72;d;1pkt 1fpkt", shape=diamond, color=yellow];
9239[label="37.33.20.214;d;1pkt 1fpkt", shape=hexagon, color=black];
9718[label="47.154.50.8;d;1pkt 1fpkt", shape=hexagon, color=black];
10994[label="47.167.38.30;d;1pkt 1fpkt", shape=hexagon, color=black];
11004[label="37.77.202.72;d;1pkt 1fpkt", shape=hexagon, color=black];
11394[label="37.186.25.104;d;1pkt 1fpkt", shape=hexagon, color=black];
stat332[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.209.36:5041, *:5041}[29.2308%]&lt;BR/&gt;{171.197.209.36:18433, *:17788}[23.0769%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 5041: (46.1538%)&lt;BR/&gt; 18433: (14.7436%)&lt;BR/&gt; 17788: (9.61538%)&lt;BR/&gt; 14520: (6.41026%)&lt;BR/&gt; 38059: (1.92308%)&gt;];
}
1132--2557[label="1;1pkt 1fpkt"];
1132--11394[label="1;1pkt 1fpkt"];
2557--2694[label="1;1pkt 1fpkt"];
2557--3406[label="1;1pkt 1fpkt"];
2557--3482[label="1;1pkt 1fpkt"];
2557--4345[label="1;1pkt 1fpkt"];
2557--4419[label="1;1pkt 1fpkt"];
2557--4635[label="0.142857;1pkt 1fpkt"];
2557--6208[label="1;1pkt 1fpkt"];
2557--6236[label="1;1pkt 1fpkt"];
2557--9239[label="1;1pkt 1fpkt"];
2557--9718[label="1;1pkt 1fpkt"];
2557--10655[label="0.142857;1pkt 1fpkt"];
2557--10994[label="1;1pkt 1fpkt"];
2557--11004[label="1;1pkt 1fpkt"];
2557--11394[label="1;1pkt 1fpkt"];
3482--9239[label="1;1pkt 1fpkt"];
4345--9718[label="1;1pkt 1fpkt"];
6208--10994[label="1;1pkt 1fpkt"];
6236--11004[label="1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_port="5041" src_ip="171.197.209.36" src_port="5041"/>
      <filter dst_port="17788" src_ip="171.197.209.36" src_port="18433"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_333{
style=filled;
color=gray75;
7928[label="142.21.168.207;d;109pkt 109fpkt", shape=diamond, color=yellow];
8074[label="131.97.73.81;s;38pkt 38fpkt", shape=diamond, color=yellow];
stat333[shape=component, label=&lt;Rules:&lt;BR/&gt;{131.97.73.81:80, 142.21.168.207:*}[27.5229%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.7755%)&lt;BR/&gt; 82: (8.16327%)&lt;BR/&gt; 5050: (1.02041%)&lt;BR/&gt; 62627: (0.680272%)&lt;BR/&gt; 62626: (0.680272%)&gt;];
}
7928--8074[label="1;38pkt 38fpkt"];
7928--8660[label="0.0555556;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.168.207" src_ip="131.97.73.81" src_port="80"/>
    </slice>
    <from sec="1296623430" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,020,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_335{
style=filled;
color=gray75;
6401[label="54.167.121.119;d;695pkt 695fpkt", shape=diamond, color=yellow];
11425[label="54.167.121.119;d;695pkt 695fpkt", shape=hexagon, color=black];
stat335[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:0, 54.167.121.119:0}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (100%)&gt;];
}
6401--9874[label="0.00143885;1pkt 1fpkt"];
6401--11425[label="1;695pkt 695fpkt"];
</description>
    <slice>
      <filter dst_ip="54.167.121.119"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_336{
style=filled;
color=gray75;
7692[label="199.107.144.72;d;81pkt 81fpkt", shape=diamond, color=yellow];
11464[label="199.107.144.72;d;81pkt 81fpkt", shape=hexagon, color=black];
stat336[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:53, 199.107.144.72:37880}[55.5556%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 53: (37.6543%)&lt;BR/&gt; 37880: (27.7778%)&lt;BR/&gt; 80: (8.64198%)&lt;BR/&gt; 2703: (2.46914%)&lt;BR/&gt; 58238: (0.617284%)&gt;];
}
7692--10516[label="0.0123457;1pkt 1fpkt"];
7692--10843[label="0.0277778;1pkt 1fpkt"];
7692--11464[label="1;81pkt 81fpkt"];
7692--11870[label="0.0123457;1pkt 1fpkt"];
7692--12002[label="0.037037;3pkt 3fpkt"];
7692--12021[label="0.0123457;1pkt 1fpkt"];
7692--12027[label="0.0123457;1pkt 1fpkt"];
7692--12099[label="0.037037;3pkt 3fpkt"];
7692--12118[label="0.0123457;1pkt 1fpkt"];
7692--12124[label="0.0123457;1pkt 1fpkt"];
7692--12188[label="0.037037;3pkt 3fpkt"];
7692--12206[label="0.0123457;1pkt 1fpkt"];
7692--12212[label="0.0123457;1pkt 1fpkt"];
11464--11870[label="0.0123457;1pkt 1fpkt"];
11464--12002[label="0.037037;3pkt 3fpkt"];
11464--12021[label="0.0123457;1pkt 1fpkt"];
11464--12027[label="0.0123457;1pkt 1fpkt"];
11464--12099[label="0.037037;3pkt 3fpkt"];
11464--12118[label="0.0123457;1pkt 1fpkt"];
11464--12124[label="0.0123457;1pkt 1fpkt"];
11464--12188[label="0.037037;3pkt 3fpkt"];
11464--12206[label="0.0123457;1pkt 1fpkt"];
11464--12212[label="0.0123457;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.144.72" dst_port="37880" src_port="53"/>
    </slice>
    <from sec="1296622802" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_337{
style=filled;
color=gray75;
136[label="171.197.84.128s;2pkt 2fpkt", shape=rectangle, color=red];
1148[label="205.5.190.114;d;1pkt 1fpkt", shape=diamond, color=yellow];
2561[label="171.197.84.128;s;890pkt 890fpkt", shape=diamond, color=yellow];
3516[label="84.18.11.42;d;1pkt 1fpkt", shape=diamond, color=yellow];
10564[label="205.5.190.114;d;1pkt 1fpkt", shape=hexagon, color=black];
stat337[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.84.128:*, *:80}[45.8427%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (22.9609%)&lt;BR/&gt; 1024: (9.88827%)&lt;BR/&gt; 53: (9.8324%)&lt;BR/&gt; 37157: (6.08939%)&lt;BR/&gt; 443: (4.41341%)&gt;];
}
136--2561[label="1;2pkt 2fpkt"];
136--3516[label="1;1pkt 1fpkt"];
1148--2561[label="1;1pkt 1fpkt"];
1148--10564[label="1;1pkt 1fpkt"];
2561--2592[label="0.00826446;3pkt 3fpkt"];
2561--2672[label="0.00673401;4pkt 4fpkt"];
2561--2880[label="0.00189394;1pkt 1fpkt"];
2561--2883[label="0.0307692;2pkt 2fpkt"];
2561--3000[label="0.00613497;1pkt 1fpkt"];
2561--3013[label="0.0153846;1pkt 1fpkt"];
2561--3103[label="0.0022779;1pkt 1fpkt"];
2561--3234[label="0.0927835;9pkt 9fpkt"];
2561--3516[label="1;1pkt 1fpkt"];
2561--3650[label="0.00813008;1pkt 1fpkt"];
2561--3702[label="0.0011236;1pkt 1fpkt"];
2561--3727[label="0.00389105;1pkt 1fpkt"];
2561--3893[label="0.0011236;1pkt 1fpkt"];
2561--3915[label="0.0011236;1pkt 1fpkt"];
2561--3916[label="0.0011236;1pkt 1fpkt"];
2561--3962[label="0.0232558;2pkt 2fpkt"];
2561--3968[label="0.008;2pkt 2fpkt"];
2561--3985[label="0.00526316;1pkt 1fpkt"];
2561--4026[label="0.00421941;1pkt 1fpkt"];
2561--4054[label="0.00471698;1pkt 1fpkt"];
2561--4086[label="0.0027027;1pkt 1fpkt"];
2561--4182[label="0.0106383;1pkt 1fpkt"];
2561--4468[label="0.666667;18pkt 18fpkt"];
2561--4534[label="0.00406504;1pkt 1fpkt"];
2561--4644[label="0.0011236;1pkt 1fpkt"];
2561--4653[label="0.0011236;1pkt 1fpkt"];
2561--4667[label="0.0011236;1pkt 1fpkt"];
2561--4670[label="0.0011236;1pkt 1fpkt"];
2561--4671[label="0.04;2pkt 2fpkt"];
2561--4672[label="0.0011236;1pkt 1fpkt"];
2561--5278[label="0.0011236;1pkt 1fpkt"];
2561--5335[label="0.00917431;1pkt 1fpkt"];
2561--5393[label="0.0169492;1pkt 1fpkt"];
2561--5400[label="0.0232558;1pkt 1fpkt"];
2561--5749[label="0.00508906;2pkt 2fpkt"];
2561--5758[label="0.00114286;1pkt 1fpkt"];
2561--5882[label="0.00114811;1pkt 1fpkt"];
2561--5948[label="0.0264901;4pkt 4fpkt"];
2561--6005[label="0.0252101;3pkt 3fpkt"];
2561--6406[label="0.0238095;1pkt 1fpkt"];
2561--6419[label="0.00166389;1pkt 1fpkt"];
2561--6421[label="0.0016;1pkt 1fpkt"];
2561--6444[label="0.011236;1pkt 1fpkt"];
2561--6513[label="0.00153846;1pkt 1fpkt"];
2561--6526[label="0.00181159;1pkt 1fpkt"];
2561--6538[label="0.0014771;1pkt 1fpkt"];
2561--6547[label="0.0540541;6pkt 6fpkt"];
2561--6567[label="0.159722;23pkt 23fpkt"];
2561--6623[label="0.00840336;1pkt 1fpkt"];
2561--6726[label="0.333333;9pkt 9fpkt"];
2561--6750[label="0.0666667;2pkt 2fpkt"];
2561--7105[label="0.0140845;1pkt 1fpkt"];
2561--7133[label="0.0344828;1pkt 1fpkt"];
2561--7159[label="0.00197239;1pkt 1fpkt"];
2561--7197[label="0.0625;3pkt 3fpkt"];
2561--7291[label="0.05;1pkt 1fpkt"];
2561--7333[label="0.0952381;2pkt 2fpkt"];
2561--7620[label="0.0020284;1pkt 1fpkt"];
2561--7768[label="0.0285714;1pkt 1fpkt"];
2561--8721[label="0.00609756;1pkt 1fpkt"];
2561--8900[label="0.0011236;1pkt 1fpkt"];
2561--8966[label="0.00333333;1pkt 1fpkt"];
2561--8984[label="0.0018622;1pkt 1fpkt"];
2561--9029[label="0.00613497;1pkt 1fpkt"];
2561--9044[label="0.00862069;1pkt 1fpkt"];
2561--9073[label="0.0074813;3pkt 3fpkt"];
2561--9129[label="0.00483092;1pkt 1fpkt"];
2561--9135[label="0.0927835;9pkt 9fpkt"];
2561--9331[label="0.008;1pkt 1fpkt"];
2561--9369[label="0.00224719;2pkt 2fpkt"];
2561--9385[label="0.00436681;1pkt 1fpkt"];
2561--9403[label="0.00898876;8pkt 8fpkt"];
2561--9510[label="0.00182815;1pkt 1fpkt"];
2561--9530[label="0.00130719;1pkt 1fpkt"];
2561--9577[label="0.0011236;1pkt 1fpkt"];
2561--9665[label="0.0294118;1pkt 1fpkt"];
2561--9894[label="0.0011236;1pkt 1fpkt"];
2561--9896[label="0.00170358;1pkt 1fpkt"];
2561--9903[label="0.00283286;1pkt 1fpkt"];
2561--9939[label="0.00917431;1pkt 1fpkt"];
2561--10125[label="0.0266667;2pkt 2fpkt"];
2561--10130[label="0.0103093;1pkt 1fpkt"];
2561--10253[label="0.0454545;2pkt 2fpkt"];
2561--10381[label="0.0285714;1pkt 1fpkt"];
2561--10564[label="1;1pkt 1fpkt"];
2561--10612[label="0.0119048;1pkt 1fpkt"];
2561--10659[label="0.0018018;1pkt 1fpkt"];
2561--10683[label="0.0011236;1pkt 1fpkt"];
2561--10685[label="0.0465116;2pkt 2fpkt"];
2561--10723[label="0.00921659;2pkt 2fpkt"];
2561--10773[label="0.00471698;1pkt 1fpkt"];
2561--10851[label="0.00917431;1pkt 1fpkt"];
2561--10863[label="0.0306122;3pkt 3fpkt"];
2561--11108[label="0.00508906;2pkt 2fpkt"];
2561--11130[label="0.00736648;4pkt 4fpkt"];
2561--11158[label="0.00189394;1pkt 1fpkt"];
2561--11202[label="0.00181159;1pkt 1fpkt"];
2561--11386[label="0.0020284;1pkt 1fpkt"];
2561--11465[label="0.0899743;35pkt 35fpkt"];
2561--11492[label="0.00197239;1pkt 1fpkt"];
2561--11747[label="0.0074813;3pkt 3fpkt"];
2561--11989[label="0.0247191;22pkt 22fpkt"];
2561--11990[label="0.0393258;35pkt 35fpkt"];
2561--12002[label="0.0730337;65pkt 65fpkt"];
2561--12003[label="0.0123596;11pkt 11fpkt"];
2561--12027[label="0.0719101;64pkt 64fpkt"];
2561--12042[label="0.00674157;6pkt 6fpkt"];
2561--12043[label="0.00224719;2pkt 2fpkt"];
2561--12099[label="0.0730337;65pkt 65fpkt"];
2561--12100[label="0.0123596;11pkt 11fpkt"];
2561--12124[label="0.0719101;64pkt 64fpkt"];
2561--12135[label="0.00674157;6pkt 6fpkt"];
2561--12136[label="0.00224719;2pkt 2fpkt"];
2561--12188[label="0.0730337;65pkt 65fpkt"];
2561--12189[label="0.0123596;11pkt 11fpkt"];
2561--12212[label="0.0719101;64pkt 64fpkt"];
2561--12222[label="0.00674157;6pkt 6fpkt"];
2561--12223[label="0.00224719;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_port="80" src_ip="171.197.84.128"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_338{
style=filled;
color=gray75;
7714[label="171.197.97.159;s;33pkt 33fpkt", shape=diamond, color=yellow];
11475[label="171.197.97.159;s;33pkt 33fpkt", shape=hexagon, color=black];
stat338[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.97.159:8080, 12.81.16.129:*}[60.6061%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 8080: (50%)&lt;BR/&gt; 64421: (1.51515%)&lt;BR/&gt; 63090: (1.51515%)&lt;BR/&gt; 61895: (1.51515%)&lt;BR/&gt; 61892: (1.51515%)&gt;];
}
7714--11475[label="1;33pkt 33fpkt"];
</description>
    <slice>
      <filter dst_ip="12.81.16.129" src_ip="171.197.97.159" src_port="8080"/>
    </slice>
    <from sec="1296622802" usec="0"/>
    <to sec="1296623611" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_340{
style=filled;
color=gray75;
416[label="172.247.150.168s;45pkt 45fpkt", shape=rectangle, color=red];
3573[label="172.247.150.168;s;96pkt 96fpkt", shape=diamond, color=yellow];
3592[label="6.49.6.86;d;77pkt 77fpkt", shape=diamond, color=yellow];
9274[label="6.49.6.86;d;74pkt 74fpkt", shape=hexagon, color=black];
stat340[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.247.150.168:*, 6.49.6.86:80}[64.5833%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (39.5548%)&lt;BR/&gt; 443: (10.274%)&lt;BR/&gt; 51222: (0.684932%)&lt;BR/&gt; 51221: (0.684932%)&lt;BR/&gt; 51220: (0.684932%)&gt;];
}
416--3573[label="1;45pkt 45fpkt"];
416--3592[label="1;45pkt 45fpkt"];
416--9274[label="1;45pkt 45fpkt"];
3573--3592[label="1;77pkt 77fpkt"];
3573--3729[label="0.0104167;1pkt 1fpkt"];
3573--4763[label="0.0104167;1pkt 1fpkt"];
3573--4764[label="0.0208333;2pkt 2fpkt"];
3573--9274[label="1;74pkt 74fpkt"];
3573--9411[label="0.0104167;1pkt 1fpkt"];
3573--9589[label="0.0104167;1pkt 1fpkt"];
3573--11486[label="0.0208333;2pkt 2fpkt"];
3573--11990[label="0.114583;11pkt 11fpkt"];
3592--9274[label="1;74pkt 74fpkt"];
3592--11990[label="0.038961;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="6.49.6.86" dst_port="80" src_ip="172.247.150.168"/>
    </slice>
    <from sec="1296622960" usec="0"/>
    <to sec="1296623117" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_342{
style=filled;
color=gray75;
3300[label="171.197.9.134;s;68pkt 68fpkt", shape=diamond, color=yellow];
6105[label="84.26.16.230;d;17pkt 17fpkt", shape=diamond, color=yellow];
9172[label="171.197.9.134;s;52pkt 52fpkt", shape=hexagon, color=black];
10953[label="84.26.16.230;d;17pkt 17fpkt", shape=hexagon, color=black];
stat342[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.9.134:*, 84.26.16.230:80}[25%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (38.6364%)&lt;BR/&gt; 7024: (4.22078%)&lt;BR/&gt; 443: (4.22078%)&lt;BR/&gt; 56558: (3.57143%)&lt;BR/&gt; 37: (1.62338%)&gt;];
}
3300--4182[label="0.0294118;2pkt 2fpkt"];
3300--4534[label="0.0147059;1pkt 1fpkt"];
3300--4795[label="0.0294118;2pkt 2fpkt"];
3300--4975[label="0.0588235;4pkt 4fpkt"];
3300--5331[label="0.0294118;2pkt 2fpkt"];
3300--5948[label="0.0588235;4pkt 4fpkt"];
3300--6105[label="1;17pkt 17fpkt"];
3300--7157[label="0.0147059;1pkt 1fpkt"];
3300--7408[label="0.0666667;1pkt 1fpkt"];
3300--9172[label="1;52pkt 52fpkt"];
3300--9962[label="0.0294118;2pkt 2fpkt"];
3300--10309[label="0.0294118;2pkt 2fpkt"];
3300--10953[label="1;17pkt 17fpkt"];
3300--11325[label="0.0666667;1pkt 1fpkt"];
3300--11532[label="0.117647;6pkt 6fpkt"];
3300--11830[label="0.0294118;2pkt 2fpkt"];
3300--11990[label="0.0441176;3pkt 3fpkt"];
3300--12002[label="0.0147059;1pkt 1fpkt"];
3300--12027[label="0.0441176;3pkt 3fpkt"];
3300--12099[label="0.0147059;1pkt 1fpkt"];
3300--12124[label="0.0441176;3pkt 3fpkt"];
3300--12188[label="0.0147059;1pkt 1fpkt"];
3300--12212[label="0.0441176;3pkt 3fpkt"];
6105--9172[label="1;17pkt 17fpkt"];
6105--10953[label="1;17pkt 17fpkt"];
6105--12002[label="0.0588235;1pkt 1fpkt"];
6105--12099[label="0.0588235;1pkt 1fpkt"];
6105--12188[label="0.0588235;1pkt 1fpkt"];
9172--9962[label="0.0384615;2pkt 2fpkt"];
9172--10309[label="0.0384615;2pkt 2fpkt"];
9172--10953[label="1;17pkt 17fpkt"];
9172--11325[label="0.0666667;1pkt 1fpkt"];
9172--11532[label="0.117647;6pkt 6fpkt"];
9172--11830[label="0.0384615;2pkt 2fpkt"];
9172--11990[label="0.0576923;3pkt 3fpkt"];
9172--12002[label="0.0192308;1pkt 1fpkt"];
9172--12027[label="0.0576923;3pkt 3fpkt"];
9172--12099[label="0.0192308;1pkt 1fpkt"];
9172--12124[label="0.0576923;3pkt 3fpkt"];
9172--12188[label="0.0192308;1pkt 1fpkt"];
9172--12212[label="0.0576923;3pkt 3fpkt"];
10953--12002[label="0.0588235;1pkt 1fpkt"];
10953--12099[label="0.0588235;1pkt 1fpkt"];
10953--12188[label="0.0588235;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="84.26.16.230" dst_port="80" src_ip="171.197.9.134"/>
    </slice>
    <from sec="1296622820" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_343{
style=filled;
color=gray75;
4904[label="198.60.0.203;d;90pkt 90fpkt", shape=diamond, color=yellow];
11542[label="198.60.0.203;d;90pkt 90fpkt", shape=hexagon, color=black];
stat343[shape=component, label=&lt;Rules:&lt;BR/&gt;{216.77.2.10:80, 198.60.0.203:*}[30%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (29.4444%)&lt;BR/&gt; 58020: (3.88889%)&lt;BR/&gt; 16416: (3.33333%)&lt;BR/&gt; 33033: (1.66667%)&lt;BR/&gt; 19053: (1.66667%)&gt;];
}
4904--11542[label="1;90pkt 90fpkt"];
4904--11966[label="0.0111111;1pkt 1fpkt"];
4904--11987[label="0.0111111;1pkt 1fpkt"];
4904--11988[label="0.0111111;1pkt 1fpkt"];
4904--11999[label="0.0333333;3pkt 3fpkt"];
4904--12024[label="0.0333333;3pkt 3fpkt"];
4904--12072[label="0.0111111;1pkt 1fpkt"];
4904--12088[label="0.0111111;1pkt 1fpkt"];
4904--12089[label="0.0111111;1pkt 1fpkt"];
4904--12096[label="0.0333333;3pkt 3fpkt"];
4904--12121[label="0.0333333;3pkt 3fpkt"];
4904--12165[label="0.0111111;1pkt 1fpkt"];
4904--12185[label="0.0333333;3pkt 3fpkt"];
4904--12209[label="0.0333333;3pkt 3fpkt"];
11542--11966[label="0.0111111;1pkt 1fpkt"];
11542--11987[label="0.0111111;1pkt 1fpkt"];
11542--11988[label="0.0111111;1pkt 1fpkt"];
11542--11999[label="0.0333333;3pkt 3fpkt"];
11542--12024[label="0.0333333;3pkt 3fpkt"];
11542--12072[label="0.0111111;1pkt 1fpkt"];
11542--12088[label="0.0111111;1pkt 1fpkt"];
11542--12089[label="0.0111111;1pkt 1fpkt"];
11542--12096[label="0.0333333;3pkt 3fpkt"];
11542--12121[label="0.0333333;3pkt 3fpkt"];
11542--12165[label="0.0111111;1pkt 1fpkt"];
11542--12185[label="0.0333333;3pkt 3fpkt"];
11542--12209[label="0.0333333;3pkt 3fpkt"];
</description>
    <slice>
      <filter dst_ip="198.60.0.203" src_ip="216.77.2.10" src_port="80"/>
    </slice>
    <from sec="1296622836" usec="0"/>
    <to sec="1296623627" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_344{
style=filled;
color=gray75;
7819[label="171.197.29.210;d;6pkt 6fpkt", shape=diamond, color=yellow];
11548[label="171.197.29.210;d;6pkt 6fpkt", shape=hexagon, color=black];
stat344[shape=component, label=&lt;Rules:&lt;BR/&gt;{201.13.70.161:80, 171.197.29.210:*}[100%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 50888: (8.33333%)&lt;BR/&gt; 50887: (8.33333%)&lt;BR/&gt; 50885: (8.33333%)&lt;BR/&gt; 50883: (8.33333%)&gt;];
}
7819--11548[label="1;6pkt 6fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.29.210" src_ip="201.13.70.161" src_port="80"/>
    </slice>
    <from sec="1296622847" usec="0"/>
    <to sec="1296623614" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_346{
style=filled;
color=gray75;
7890[label="171.197.9.83;d;24pkt 24fpkt", shape=diamond, color=yellow];
11589[label="171.197.9.83;d;24pkt 24fpkt", shape=hexagon, color=black];
stat346[shape=component, label=&lt;Rules:&lt;BR/&gt;{115.180.122.164:80, 171.197.9.83:*}[50%]&lt;BR/&gt;{192.102.59.166:80, 171.197.9.83:*}[45.8333%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 48488: (2.08333%)&lt;BR/&gt; 47126: (2.08333%)&lt;BR/&gt; 46270: (2.08333%)&lt;BR/&gt; 46242: (2.08333%)&gt;];
}
7890--11589[label="1;24pkt 24fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.9.83" src_ip="115.180.122.164" src_port="80"/>
      <filter dst_ip="171.197.9.83" src_ip="192.102.59.166" src_port="80"/>
    </slice>
    <from sec="1296623310" usec="0"/>
    <to sec="1296623622" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,504,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_347{
style=filled;
color=gray75;
7904[label="172.1.74.59;s;7pkt 7fpkt", shape=diamond, color=yellow];
11596[label="172.1.74.59;s;7pkt 7fpkt", shape=hexagon, color=black];
stat347[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.74.59:*, 6.153.108.231:443}[57.1429%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 443: (42.8571%)&lt;BR/&gt; 55540: (7.14286%)&lt;BR/&gt; 49415: (7.14286%)&lt;BR/&gt; 49414: (7.14286%)&lt;BR/&gt; 49413: (7.14286%)&gt;];
}
7904--11596[label="1;7pkt 7fpkt"];
</description>
    <slice>
      <filter dst_ip="6.153.108.231" dst_port="443" src_ip="172.1.74.59"/>
    </slice>
    <from sec="1296623367" usec="0"/>
    <to sec="1296623608" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="215.88.81.175"/>
      <from sec="1296623486" usec="0"/>
      <to sec="1296623628" usec="0"/>
    </slice>
    <from sec="1296623486" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_349{
style=filled;
color=gray75;
7994[label="140.230.183.133;d;77pkt 77fpkt", shape=diamond, color=yellow];
11626[label="140.230.183.133;d;77pkt 77fpkt", shape=hexagon, color=black];
stat349[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.232.146.196:2703, 140.230.183.133:*}[28.5714%]&lt;BR/&gt;{219.232.146.197:2703, 140.230.183.133:*}[27.2727%]&lt;BR/&gt;{219.232.146.198:2703, 140.230.183.133:*}[22.0779%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 2703: (50%)&lt;BR/&gt; 65306: (0.649351%)&lt;BR/&gt; 65200: (0.649351%)&lt;BR/&gt; 65176: (0.649351%)&lt;BR/&gt; 65155: (0.649351%)&gt;];
}
7994--11626[label="1;77pkt 77fpkt"];
</description>
    <slice>
      <filter dst_ip="140.230.183.133" src_ip="219.232.146.196" src_port="2703"/>
      <filter dst_ip="140.230.183.133" src_ip="219.232.146.197" src_port="2703"/>
      <filter dst_ip="140.230.183.133" src_ip="219.232.146.198" src_port="2703"/>
    </slice>
    <from sec="1296623521" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_350{
style=filled;
color=gray75;
8035[label="219.246.171.2;s;89pkt 89fpkt", shape=diamond, color=yellow];
11633[label="219.246.171.2;s;89pkt 89fpkt", shape=hexagon, color=black];
stat350[shape=component, label=&lt;Rules:&lt;BR/&gt;{219.246.171.2:80, 171.197.101.190:*}[95.5056%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (50%)&lt;BR/&gt; 59588: (0.561798%)&lt;BR/&gt; 59582: (0.561798%)&lt;BR/&gt; 59578: (0.561798%)&lt;BR/&gt; 59576: (0.561798%)&gt;];
}
8035--11633[label="1;89pkt 89fpkt"];
</description>
    <slice>
      <filter dst_ip="171.197.101.190" src_ip="219.246.171.2" src_port="80"/>
    </slice>
    <from sec="1296623545" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.806922,1.28613,999,0 0 0 0 1 0 0 0 0 0 0 0 ">
    <slice>
      <filter dst_ip="9.145.6.77"/>
      <from sec="1296623546" usec="0"/>
      <to sec="1296623624" usec="0"/>
    </slice>
    <from sec="1296623546" usec="0"/>
    <to sec="1296623624" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_353{
style=filled;
color=gray75;
930[label="171.197.232.250;d;42pkt 42fpkt", shape=diamond, color=yellow];
1229[label="193.112.210.215;s;2pkt 2fpkt", shape=diamond, color=yellow];
1416[label="193.112.210.18;s;2pkt 2fpkt", shape=diamond, color=yellow];
1472[label="171.197.141.60;d;207pkt 207fpkt", shape=diamond, color=yellow];
1571[label="193.112.210.212;s;3pkt 3fpkt", shape=diamond, color=yellow];
1735[label="115.162.24.27;s;140pkt 140fpkt", shape=diamond, color=yellow];
1750[label="193.112.208.177;s;47pkt 47fpkt", shape=diamond, color=yellow];
2373[label="219.201.144.137;s;1pkt 1fpkt", shape=diamond, color=yellow];
2595[label="171.197.130.71;d;152pkt 152fpkt", shape=diamond, color=yellow];
2858[label="171.197.84.177;d;176pkt 176fpkt", shape=diamond, color=yellow];
3264[label="171.197.155.197;d;141pkt 141fpkt", shape=diamond, color=yellow];
3302[label="218.198.81.66;s;72pkt 72fpkt", shape=diamond, color=yellow];
3479[label="142.21.172.52;d;150pkt 150fpkt", shape=diamond, color=yellow];
3499[label="142.21.175.138;d;569pkt 569fpkt", shape=diamond, color=yellow];
3549[label="194.109.105.132;s;1pkt 1fpkt", shape=diamond, color=yellow];
3583[label="216.99.4.59;s;4pkt 4fpkt", shape=diamond, color=yellow];
4335[label="6.153.183.176;s;16pkt 16fpkt", shape=diamond, color=yellow];
4380[label="31.9.138.52;s;1pkt 1fpkt", shape=diamond, color=yellow];
4447[label="193.112.210.218;s;1pkt 1fpkt", shape=diamond, color=yellow];
4513[label="115.162.29.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
4894[label="198.60.27.33;d;64pkt 64fpkt", shape=diamond, color=yellow];
4944[label="193.112.210.219;s;1pkt 1fpkt", shape=diamond, color=yellow];
4970[label="193.112.210.25;s;2pkt 2fpkt", shape=diamond, color=yellow];
5001[label="193.112.210.39;s;2pkt 2fpkt", shape=diamond, color=yellow];
5005[label="142.21.174.196;d;25pkt 25fpkt", shape=diamond, color=yellow];
5056[label="31.9.138.39;s;1pkt 1fpkt", shape=diamond, color=yellow];
5256[label="219.246.171.85;s;150pkt 150fpkt", shape=diamond, color=yellow];
5307[label="171.197.137.90;d;81pkt 81fpkt", shape=diamond, color=yellow];
5469[label="193.112.210.95;s;44pkt 44fpkt", shape=diamond, color=yellow];
5601[label="27.147.80.168;s;20pkt 20fpkt", shape=diamond, color=yellow];
5659[label="194.56.71.213;s;9pkt 9fpkt", shape=diamond, color=yellow];
5666[label="193.112.210.213;s;1pkt 1fpkt", shape=diamond, color=yellow];
6038[label="219.246.170.125;s;43pkt 43fpkt", shape=diamond, color=yellow];
6142[label="218.198.81.98;s;7pkt 7fpkt", shape=diamond, color=yellow];
6188[label="219.246.170.120;s;18pkt 18fpkt", shape=diamond, color=yellow];
6683[label="219.246.171.26;s;38pkt 38fpkt", shape=diamond, color=yellow];
6930[label="193.112.210.34;s;1pkt 1fpkt", shape=diamond, color=yellow];
7163[label="172.1.196.171;d;42pkt 42fpkt", shape=diamond, color=yellow];
7354[label="219.246.170.117;s;19pkt 19fpkt", shape=diamond, color=yellow];
7527[label="106.169.179.102;s;7pkt 7fpkt", shape=diamond, color=yellow];
7562[label="193.112.210.36;s;2pkt 2fpkt", shape=diamond, color=yellow];
7862[label="171.197.159.2;d;25pkt 25fpkt", shape=diamond, color=yellow];
7980[label="193.112.210.24;s;2pkt 2fpkt", shape=diamond, color=yellow];
8085[label="5.35.10.171;s;1pkt 1fpkt", shape=diamond, color=yellow];
8128[label="219.229.15.94;s;1pkt 1fpkt", shape=diamond, color=yellow];
8141[label="193.112.210.38;s;1pkt 1fpkt", shape=diamond, color=yellow];
8276[label="115.162.24.27;s;125pkt 125fpkt", shape=hexagon, color=black];
8459[label="193.112.210.18;s;1pkt 1fpkt", shape=hexagon, color=black];
8866[label="171.197.141.60;d;207pkt 207fpkt", shape=hexagon, color=black];
8947[label="171.197.84.177;d;176pkt 176fpkt", shape=hexagon, color=black];
8987[label="193.112.208.177;s;47pkt 47fpkt", shape=hexagon, color=black];
9706[label="142.21.175.138;d;99pkt 99fpkt", shape=hexagon, color=black];
9727[label="31.9.138.52;s;1pkt 1fpkt", shape=hexagon, color=black];
9750[label="193.112.210.39;s;2pkt 2fpkt", shape=hexagon, color=black];
10024[label="193.112.210.95;s;44pkt 44fpkt", shape=hexagon, color=black];
10478[label="194.56.71.213;s;9pkt 9fpkt", shape=hexagon, color=black];
10573[label="171.197.130.71;d;25pkt 25fpkt", shape=hexagon, color=black];
10889[label="142.21.172.52;d;150pkt 150fpkt", shape=hexagon, color=black];
10968[label="218.198.81.98;s;7pkt 7fpkt", shape=hexagon, color=black];
11305[label="219.246.170.117;s;19pkt 19fpkt", shape=hexagon, color=black];
11640[label="193.112.210.219;s;1pkt 1fpkt", shape=hexagon, color=black];
stat353[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 142.21.175.138:*}[30.5121%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.4427%)&lt;BR/&gt; 1935: (1.64717%)&lt;BR/&gt; 53: (1.63177%)&lt;BR/&gt; 0: (1.47783%)&lt;BR/&gt; 443: (0.646552%)&gt;];
}
930--1735[label="0.571429;24pkt 24fpkt"];
930--8276[label="0.309524;13pkt 13fpkt"];
1229--1472[label="0.5;1pkt 1fpkt"];
1229--2595[label="0.5;1pkt 1fpkt"];
1229--8866[label="0.5;1pkt 1fpkt"];
1229--10573[label="0.5;1pkt 1fpkt"];
1416--2595[label="0.5;1pkt 1fpkt"];
1416--3264[label="0.5;1pkt 1fpkt"];
1416--8459[label="1;1pkt 1fpkt"];
1416--10573[label="0.5;1pkt 1fpkt"];
1472--1735[label="0.714286;100pkt 100fpkt"];
1472--2209[label="1;2pkt 2fpkt"];
1472--4970[label="1;2pkt 2fpkt"];
1472--5001[label="0.5;1pkt 1fpkt"];
1472--5666[label="1;1pkt 1fpkt"];
1472--6930[label="1;1pkt 1fpkt"];
1472--7980[label="0.5;1pkt 1fpkt"];
1472--8141[label="1;1pkt 1fpkt"];
1472--8276[label="0.768;96pkt 96fpkt"];
1472--8625[label="1;2pkt 2fpkt"];
1472--8690[label="0.0144928;2pkt 2fpkt"];
1472--8866[label="1;207pkt 207fpkt"];
1472--9750[label="0.5;1pkt 1fpkt"];
1472--11966[label="0.0724638;15pkt 15fpkt"];
1472--11988[label="0.101449;21pkt 21fpkt"];
1472--11999[label="0.0338164;7pkt 7fpkt"];
1472--12000[label="0.00483092;1pkt 1fpkt"];
1472--12024[label="0.0289855;6pkt 6fpkt"];
1472--12038[label="0.00966184;2pkt 2fpkt"];
1472--12072[label="0.0724638;15pkt 15fpkt"];
1472--12089[label="0.101449;21pkt 21fpkt"];
1472--12096[label="0.0338164;7pkt 7fpkt"];
1472--12097[label="0.00483092;1pkt 1fpkt"];
1472--12121[label="0.0289855;6pkt 6fpkt"];
1472--12131[label="0.00966184;2pkt 2fpkt"];
1472--12165[label="0.0724638;15pkt 15fpkt"];
1472--12185[label="0.0338164;7pkt 7fpkt"];
1472--12186[label="0.00483092;1pkt 1fpkt"];
1472--12209[label="0.0289855;6pkt 6fpkt"];
1472--12218[label="0.00966184;2pkt 2fpkt"];
1571--2595[label="1;3pkt 3fpkt"];
1571--10573[label="0.666667;2pkt 2fpkt"];
1735--2595[label="0.00714286;1pkt 1fpkt"];
1735--8276[label="1;125pkt 125fpkt"];
1735--8866[label="0.714286;100pkt 100fpkt"];
1735--9346[label="0.714286;15pkt 15fpkt"];
1735--10573[label="0.04;1pkt 1fpkt"];
1735--11966[label="0.1;14pkt 14fpkt"];
1735--11988[label="0.1;14pkt 14fpkt"];
1735--11999[label="0.0142857;2pkt 2fpkt"];
1735--12024[label="0.0142857;2pkt 2fpkt"];
1735--12072[label="0.1;14pkt 14fpkt"];
1735--12089[label="0.1;14pkt 14fpkt"];
1735--12096[label="0.0142857;2pkt 2fpkt"];
1735--12121[label="0.0142857;2pkt 2fpkt"];
1735--12165[label="0.1;14pkt 14fpkt"];
1735--12185[label="0.0142857;2pkt 2fpkt"];
1735--12209[label="0.0142857;2pkt 2fpkt"];
1750--2595[label="0.404255;19pkt 19fpkt"];
1750--3264[label="0.0212766;1pkt 1fpkt"];
1750--3479[label="0.212766;10pkt 10fpkt"];
1750--8987[label="1;47pkt 47fpkt"];
1750--9904[label="0.340426;16pkt 16fpkt"];
1750--10573[label="0.24;6pkt 6fpkt"];
1750--10889[label="0.212766;10pkt 10fpkt"];
1750--11966[label="0.0851064;4pkt 4fpkt"];
1750--12024[label="0.0212766;1pkt 1fpkt"];
1750--12072[label="0.0851064;4pkt 4fpkt"];
1750--12121[label="0.0212766;1pkt 1fpkt"];
1750--12165[label="0.0851064;4pkt 4fpkt"];
1750--12209[label="0.0212766;1pkt 1fpkt"];
2373--5005[label="1;1pkt 1fpkt"];
2595--4447[label="1;1pkt 1fpkt"];
2595--4828[label="0.00657895;1pkt 1fpkt"];
2595--4944[label="1;1pkt 1fpkt"];
2595--5469[label="0.204545;9pkt 9fpkt"];
2595--5508[label="0.235294;8pkt 8fpkt"];
2595--6038[label="0.0697674;3pkt 3fpkt"];
2595--6188[label="0.0555556;1pkt 1fpkt"];
2595--6192[label="0.03125;1pkt 1fpkt"];
2595--6372[label="0.00657895;1pkt 1fpkt"];
2595--7562[label="1;2pkt 2fpkt"];
2595--7851[label="0.0740741;2pkt 2fpkt"];
2595--7980[label="0.5;1pkt 1fpkt"];
2595--8276[label="0.008;1pkt 1fpkt"];
2595--8459[label="1;1pkt 1fpkt"];
2595--8532[label="0.0232558;1pkt 1fpkt"];
2595--8987[label="0.404255;19pkt 19fpkt"];
2595--10024[label="0.204545;9pkt 9fpkt"];
2595--10573[label="1;25pkt 25fpkt"];
2595--10813[label="0.00657895;1pkt 1fpkt"];
2595--11566[label="0.235294;8pkt 8fpkt"];
2595--11640[label="1;1pkt 1fpkt"];
2595--11966[label="0.00657895;1pkt 1fpkt"];
2595--12024[label="0.0526316;8pkt 8fpkt"];
2595--12072[label="0.00657895;1pkt 1fpkt"];
2595--12121[label="0.0526316;8pkt 8fpkt"];
2595--12165[label="0.00657895;1pkt 1fpkt"];
2595--12209[label="0.0526316;8pkt 8fpkt"];
2858--2978[label="0.0227273;4pkt 4fpkt"];
2858--3583[label="1;4pkt 4fpkt"];
2858--4261[label="0.0740741;10pkt 10fpkt"];
2858--4677[label="0.00568182;1pkt 1fpkt"];
2858--4829[label="0.0212766;3pkt 3fpkt"];
2858--5164[label="0.103774;11pkt 11fpkt"];
2858--5256[label="0.02;3pkt 3fpkt"];
2858--6038[label="0.0465116;2pkt 2fpkt"];
2858--7195[label="0.0140845;1pkt 1fpkt"];
2858--7638[label="0.0227273;4pkt 4fpkt"];
2858--7666[label="0.0170455;3pkt 3fpkt"];
2858--7851[label="0.037037;1pkt 1fpkt"];
2858--7855[label="0.107143;3pkt 3fpkt"];
2858--8947[label="1;176pkt 176fpkt"];
2858--9012[label="0.0227273;4pkt 4fpkt"];
2858--9208[label="0.128205;10pkt 10fpkt"];
2858--11233[label="0.0252101;3pkt 3fpkt"];
2858--11411[label="0.0227273;4pkt 4fpkt"];
2858--11966[label="0.0397727;7pkt 7fpkt"];
2858--11987[label="0.0113636;2pkt 2fpkt"];
2858--11988[label="0.0113636;2pkt 2fpkt"];
2858--11999[label="0.00568182;1pkt 1fpkt"];
2858--12000[label="0.0170455;3pkt 3fpkt"];
2858--12024[label="0.00568182;1pkt 1fpkt"];
2858--12039[label="0.0113636;2pkt 2fpkt"];
2858--12072[label="0.0397727;7pkt 7fpkt"];
2858--12088[label="0.0113636;2pkt 2fpkt"];
2858--12089[label="0.0113636;2pkt 2fpkt"];
2858--12096[label="0.00568182;1pkt 1fpkt"];
2858--12097[label="0.0170455;3pkt 3fpkt"];
2858--12121[label="0.00568182;1pkt 1fpkt"];
2858--12132[label="0.0113636;2pkt 2fpkt"];
2858--12165[label="0.0397727;7pkt 7fpkt"];
2858--12185[label="0.00568182;1pkt 1fpkt"];
2858--12186[label="0.0170455;3pkt 3fpkt"];
2858--12209[label="0.00568182;1pkt 1fpkt"];
2858--12219[label="0.0113636;2pkt 2fpkt"];
3264--3302[label="1;72pkt 72fpkt"];
3264--4513[label="1;1pkt 1fpkt"];
3264--5001[label="0.5;1pkt 1fpkt"];
3264--5469[label="0.25;11pkt 11fpkt"];
3264--8532[label="0.0697674;3pkt 3fpkt"];
3264--8987[label="0.0212766;1pkt 1fpkt"];
3264--9750[label="0.5;1pkt 1fpkt"];
3264--10024[label="0.25;11pkt 11fpkt"];
3264--11966[label="0.212766;30pkt 30fpkt"];
3264--11988[label="0.0567376;8pkt 8fpkt"];
3264--12072[label="0.212766;30pkt 30fpkt"];
3264--12089[label="0.0567376;8pkt 8fpkt"];
3264--12165[label="0.212766;30pkt 30fpkt"];
3302--11966[label="0.0972222;7pkt 7fpkt"];
3302--12072[label="0.0972222;7pkt 7fpkt"];
3302--12165[label="0.0972222;7pkt 7fpkt"];
3479--3549[label="1;1pkt 1fpkt"];
3479--4335[label="0.875;14pkt 14fpkt"];
3479--5469[label="0.0909091;4pkt 4fpkt"];
3479--5899[label="0.0151515;1pkt 1fpkt"];
3479--8987[label="0.212766;10pkt 10fpkt"];
3479--10024[label="0.0909091;4pkt 4fpkt"];
3479--10203[label="0.00763359;1pkt 1fpkt"];
3479--10753[label="0.0151515;1pkt 1fpkt"];
3479--10889[label="1;150pkt 150fpkt"];
3479--11988[label="0.0333333;5pkt 5fpkt"];
3479--11999[label="0.0466667;7pkt 7fpkt"];
3479--12089[label="0.0333333;5pkt 5fpkt"];
3479--12096[label="0.0466667;7pkt 7fpkt"];
3479--12185[label="0.0466667;7pkt 7fpkt"];
3499--4019[label="0.0379747;6pkt 6fpkt"];
3499--4035[label="0.0142857;1pkt 1fpkt"];
3499--4227[label="0.157895;6pkt 6fpkt"];
3499--4261[label="0.266667;36pkt 36fpkt"];
3499--4380[label="1;1pkt 1fpkt"];
3499--4477[label="0.266667;4pkt 4fpkt"];
3499--4703[label="0.016129;4pkt 4fpkt"];
3499--4973[label="0.16129;5pkt 5fpkt"];
3499--5056[label="1;1pkt 1fpkt"];
3499--5256[label="0.126667;19pkt 19fpkt"];
3499--5276[label="0.01;3pkt 3fpkt"];
3499--5360[label="0.011236;2pkt 2fpkt"];
3499--5499[label="0.258065;8pkt 8fpkt"];
3499--5508[label="0.235294;8pkt 8fpkt"];
3499--5600[label="0.0169492;1pkt 1fpkt"];
3499--6038[label="0.302326;13pkt 13fpkt"];
3499--6142[label="1;7pkt 7fpkt"];
3499--6188[label="0.666667;12pkt 12fpkt"];
3499--6192[label="0.28125;9pkt 9fpkt"];
3499--6529[label="0.0542636;7pkt 7fpkt"];
3499--6620[label="0.459459;17pkt 17fpkt"];
3499--6758[label="0.285714;4pkt 4fpkt"];
3499--7195[label="0.0422535;3pkt 3fpkt"];
3499--7293[label="0.0930233;4pkt 4fpkt"];
3499--7354[label="0.526316;10pkt 10fpkt"];
3499--7527[label="1;7pkt 7fpkt"];
3499--7851[label="0.185185;5pkt 5fpkt"];
3499--7855[label="0.285714;8pkt 8fpkt"];
3499--8532[label="0.139535;6pkt 6fpkt"];
3499--8540[label="0.00581395;1pkt 1fpkt"];
3499--9208[label="0.102564;8pkt 8fpkt"];
3499--9547[label="0.0203046;4pkt 4fpkt"];
3499--9706[label="1;99pkt 99fpkt"];
3499--9727[label="1;1pkt 1fpkt"];
3499--10464[label="0.025641;1pkt 1fpkt"];
3499--10763[label="0.0588235;7pkt 7fpkt"];
3499--10904[label="0.173913;4pkt 4fpkt"];
3499--10968[label="1;7pkt 7fpkt"];
3499--11305[label="0.526316;10pkt 10fpkt"];
3499--11566[label="0.235294;8pkt 8fpkt"];
3499--11988[label="0.0439367;25pkt 25fpkt"];
3499--11999[label="0.086116;49pkt 49fpkt"];
3499--12024[label="0.00175747;1pkt 1fpkt"];
3499--12038[label="0.00175747;1pkt 1fpkt"];
3499--12089[label="0.0439367;25pkt 25fpkt"];
3499--12096[label="0.086116;49pkt 49fpkt"];
3499--12121[label="0.00175747;1pkt 1fpkt"];
3499--12131[label="0.00175747;1pkt 1fpkt"];
3499--12185[label="0.086116;49pkt 49fpkt"];
3499--12209[label="0.00175747;1pkt 1fpkt"];
3499--12218[label="0.00175747;1pkt 1fpkt"];
3549--10889[label="1;1pkt 1fpkt"];
3583--8947[label="1;4pkt 4fpkt"];
4335--10123[label="0.125;2pkt 2fpkt"];
4335--10889[label="0.875;14pkt 14fpkt"];
4335--11988[label="0.3125;5pkt 5fpkt"];
4335--12089[label="0.3125;5pkt 5fpkt"];
4380--9706[label="1;1pkt 1fpkt"];
4380--9727[label="1;1pkt 1fpkt"];
4894--5256[label="0.03125;2pkt 2fpkt"];
4894--5601[label="1;20pkt 20fpkt"];
4894--9547[label="0.03125;2pkt 2fpkt"];
4894--10203[label="0.015625;1pkt 1fpkt"];
4894--10813[label="0.078125;5pkt 5fpkt"];
4894--11896[label="0.078125;5pkt 5fpkt"];
4944--11640[label="1;1pkt 1fpkt"];
4970--8866[label="1;2pkt 2fpkt"];
5001--8866[label="0.5;1pkt 1fpkt"];
5001--9750[label="1;2pkt 2fpkt"];
5005--5256[label="0.12;3pkt 3fpkt"];
5005--6002[label="0.36;9pkt 9fpkt"];
5005--6529[label="0.08;2pkt 2fpkt"];
5005--8085[label="1;1pkt 1fpkt"];
5005--10405[label="0.12;3pkt 3fpkt"];
5005--10763[label="0.08;2pkt 2fpkt"];
5005--11988[label="0.04;1pkt 1fpkt"];
5005--12089[label="0.04;1pkt 1fpkt"];
5056--9706[label="1;1pkt 1fpkt"];
5256--5293[label="0.00666667;1pkt 1fpkt"];
5256--5307[label="0.234568;19pkt 19fpkt"];
5256--5358[label="0.0306122;3pkt 3fpkt"];
5256--5419[label="0.0266667;4pkt 4fpkt"];
5256--5661[label="0.0194175;2pkt 2fpkt"];
5256--7862[label="0.6;15pkt 15fpkt"];
5256--8828[label="0.00666667;1pkt 1fpkt"];
5256--8947[label="0.02;3pkt 3fpkt"];
5256--9499[label="0.00666667;1pkt 1fpkt"];
5256--9706[label="0.10101;10pkt 10fpkt"];
5256--9833[label="0.0133333;2pkt 2fpkt"];
5256--9954[label="0.04;3pkt 3fpkt"];
5256--10459[label="0.0833333;2pkt 2fpkt"];
5256--10765[label="0.0533333;4pkt 4fpkt"];
5256--10832[label="0.00666667;1pkt 1fpkt"];
5256--11966[label="0.0333333;5pkt 5fpkt"];
5256--11988[label="0.0333333;5pkt 5fpkt"];
5256--11999[label="0.06;9pkt 9fpkt"];
5256--12024[label="0.04;6pkt 6fpkt"];
5256--12072[label="0.0333333;5pkt 5fpkt"];
5256--12089[label="0.0333333;5pkt 5fpkt"];
5256--12096[label="0.06;9pkt 9fpkt"];
5256--12121[label="0.04;6pkt 6fpkt"];
5256--12165[label="0.0333333;5pkt 5fpkt"];
5256--12185[label="0.06;9pkt 9fpkt"];
5256--12209[label="0.04;6pkt 6fpkt"];
5307--5659[label="1;9pkt 9fpkt"];
5307--6683[label="0.842105;32pkt 32fpkt"];
5307--9208[label="0.102564;8pkt 8fpkt"];
5307--10478[label="1;9pkt 9fpkt"];
5307--11966[label="0.0123457;1pkt 1fpkt"];
5307--11999[label="0.0246914;2pkt 2fpkt"];
5307--12024[label="0.037037;3pkt 3fpkt"];
5307--12072[label="0.0123457;1pkt 1fpkt"];
5307--12096[label="0.0246914;2pkt 2fpkt"];
5307--12121[label="0.037037;3pkt 3fpkt"];
5307--12165[label="0.0123457;1pkt 1fpkt"];
5307--12185[label="0.0246914;2pkt 2fpkt"];
5307--12209[label="0.037037;3pkt 3fpkt"];
5469--10024[label="1;44pkt 44fpkt"];
5469--10889[label="0.0909091;4pkt 4fpkt"];
5469--11988[label="0.0681818;3pkt 3fpkt"];
5469--11999[label="0.0909091;4pkt 4fpkt"];
5469--12089[label="0.0681818;3pkt 3fpkt"];
5469--12096[label="0.0909091;4pkt 4fpkt"];
5469--12185[label="0.0909091;4pkt 4fpkt"];
5659--10478[label="1;9pkt 9fpkt"];
5666--8866[label="1;1pkt 1fpkt"];
6038--6785[label="0.047619;2pkt 2fpkt"];
6038--7808[label="0.0232558;1pkt 1fpkt"];
6038--8947[label="0.0465116;2pkt 2fpkt"];
6038--9229[label="0.0465116;2pkt 2fpkt"];
6038--9536[label="0.0465116;2pkt 2fpkt"];
6038--10856[label="0.0232558;1pkt 1fpkt"];
6038--11536[label="0.0232558;1pkt 1fpkt"];
6038--11999[label="0.0232558;1pkt 1fpkt"];
6038--12024[label="0.0232558;1pkt 1fpkt"];
6038--12096[label="0.0232558;1pkt 1fpkt"];
6038--12121[label="0.0232558;1pkt 1fpkt"];
6038--12185[label="0.0232558;1pkt 1fpkt"];
6038--12209[label="0.0232558;1pkt 1fpkt"];
6142--10968[label="1;7pkt 7fpkt"];
6188--7312[label="0.111111;2pkt 2fpkt"];
6188--7862[label="0.0555556;1pkt 1fpkt"];
6188--11999[label="0.166667;3pkt 3fpkt"];
6188--12024[label="0.0555556;1pkt 1fpkt"];
6188--12096[label="0.166667;3pkt 3fpkt"];
6188--12121[label="0.0555556;1pkt 1fpkt"];
6188--12185[label="0.166667;3pkt 3fpkt"];
6188--12209[label="0.0555556;1pkt 1fpkt"];
6683--11999[label="0.0263158;1pkt 1fpkt"];
6683--12024[label="0.0789474;3pkt 3fpkt"];
6683--12096[label="0.0263158;1pkt 1fpkt"];
6683--12121[label="0.0789474;3pkt 3fpkt"];
6683--12185[label="0.0263158;1pkt 1fpkt"];
6683--12209[label="0.0789474;3pkt 3fpkt"];
6930--8866[label="1;1pkt 1fpkt"];
7163--7354[label="0.315789;6pkt 6fpkt"];
7163--7851[label="0.037037;1pkt 1fpkt"];
7163--10813[label="0.142857;6pkt 6fpkt"];
7163--11305[label="0.315789;6pkt 6fpkt"];
7163--11966[label="0.0238095;1pkt 1fpkt"];
7163--12072[label="0.0238095;1pkt 1fpkt"];
7163--12165[label="0.0238095;1pkt 1fpkt"];
7354--11287[label="0.105263;2pkt 2fpkt"];
7354--11305[label="1;19pkt 19fpkt"];
7354--11527[label="0.0526316;1pkt 1fpkt"];
7354--12024[label="0.105263;2pkt 2fpkt"];
7354--12121[label="0.105263;2pkt 2fpkt"];
7354--12209[label="0.105263;2pkt 2fpkt"];
7862--8128[label="1;1pkt 1fpkt"];
7862--11999[label="0.04;1pkt 1fpkt"];
7862--12024[label="0.04;1pkt 1fpkt"];
7862--12096[label="0.04;1pkt 1fpkt"];
7862--12121[label="0.04;1pkt 1fpkt"];
7862--12185[label="0.04;1pkt 1fpkt"];
7862--12209[label="0.04;1pkt 1fpkt"];
7980--8866[label="0.5;1pkt 1fpkt"];
8141--8866[label="1;1pkt 1fpkt"];
8276--8866[label="0.768;96pkt 96fpkt"];
8276--9346[label="0.714286;15pkt 15fpkt"];
8276--10573[label="0.04;1pkt 1fpkt"];
8276--11966[label="0.112;14pkt 14fpkt"];
8276--11988[label="0.112;14pkt 14fpkt"];
8276--11999[label="0.016;2pkt 2fpkt"];
8276--12024[label="0.016;2pkt 2fpkt"];
8276--12072[label="0.112;14pkt 14fpkt"];
8276--12089[label="0.112;14pkt 14fpkt"];
8276--12096[label="0.016;2pkt 2fpkt"];
8276--12121[label="0.016;2pkt 2fpkt"];
8276--12165[label="0.112;14pkt 14fpkt"];
8276--12185[label="0.016;2pkt 2fpkt"];
8276--12209[label="0.016;2pkt 2fpkt"];
8459--10573[label="1;1pkt 1fpkt"];
8866--9750[label="0.5;1pkt 1fpkt"];
8866--11966[label="0.0724638;15pkt 15fpkt"];
8866--11988[label="0.101449;21pkt 21fpkt"];
8866--11999[label="0.0338164;7pkt 7fpkt"];
8866--12000[label="0.00483092;1pkt 1fpkt"];
8866--12024[label="0.0289855;6pkt 6fpkt"];
8866--12038[label="0.00966184;2pkt 2fpkt"];
8866--12072[label="0.0724638;15pkt 15fpkt"];
8866--12089[label="0.101449;21pkt 21fpkt"];
8866--12096[label="0.0338164;7pkt 7fpkt"];
8866--12097[label="0.00483092;1pkt 1fpkt"];
8866--12121[label="0.0289855;6pkt 6fpkt"];
8866--12131[label="0.00966184;2pkt 2fpkt"];
8866--12165[label="0.0724638;15pkt 15fpkt"];
8866--12185[label="0.0338164;7pkt 7fpkt"];
8866--12186[label="0.00483092;1pkt 1fpkt"];
8866--12209[label="0.0289855;6pkt 6fpkt"];
8866--12218[label="0.00966184;2pkt 2fpkt"];
8947--9012[label="0.0227273;4pkt 4fpkt"];
8947--9208[label="0.128205;10pkt 10fpkt"];
8947--11233[label="0.0252101;3pkt 3fpkt"];
8947--11411[label="0.0227273;4pkt 4fpkt"];
8947--11966[label="0.0397727;7pkt 7fpkt"];
8947--11987[label="0.0113636;2pkt 2fpkt"];
8947--11988[label="0.0113636;2pkt 2fpkt"];
8947--11999[label="0.00568182;1pkt 1fpkt"];
8947--12000[label="0.0170455;3pkt 3fpkt"];
8947--12024[label="0.00568182;1pkt 1fpkt"];
8947--12039[label="0.0113636;2pkt 2fpkt"];
8947--12072[label="0.0397727;7pkt 7fpkt"];
8947--12088[label="0.0113636;2pkt 2fpkt"];
8947--12089[label="0.0113636;2pkt 2fpkt"];
8947--12096[label="0.00568182;1pkt 1fpkt"];
8947--12097[label="0.0170455;3pkt 3fpkt"];
8947--12121[label="0.00568182;1pkt 1fpkt"];
8947--12132[label="0.0113636;2pkt 2fpkt"];
8947--12165[label="0.0397727;7pkt 7fpkt"];
8947--12185[label="0.00568182;1pkt 1fpkt"];
8947--12186[label="0.0170455;3pkt 3fpkt"];
8947--12209[label="0.00568182;1pkt 1fpkt"];
8947--12219[label="0.0113636;2pkt 2fpkt"];
8987--9904[label="0.340426;16pkt 16fpkt"];
8987--10573[label="0.24;6pkt 6fpkt"];
8987--10889[label="0.212766;10pkt 10fpkt"];
8987--11966[label="0.0851064;4pkt 4fpkt"];
8987--12024[label="0.0212766;1pkt 1fpkt"];
8987--12072[label="0.0851064;4pkt 4fpkt"];
8987--12121[label="0.0212766;1pkt 1fpkt"];
8987--12165[label="0.0851064;4pkt 4fpkt"];
8987--12209[label="0.0212766;1pkt 1fpkt"];
9706--9727[label="1;1pkt 1fpkt"];
9706--10763[label="0.040404;4pkt 4fpkt"];
9706--11988[label="0.252525;25pkt 25fpkt"];
9706--12089[label="0.252525;25pkt 25fpkt"];
10024--10889[label="0.0909091;4pkt 4fpkt"];
10024--11988[label="0.0681818;3pkt 3fpkt"];
10024--11999[label="0.0909091;4pkt 4fpkt"];
10024--12089[label="0.0681818;3pkt 3fpkt"];
10024--12096[label="0.0909091;4pkt 4fpkt"];
10024--12185[label="0.0909091;4pkt 4fpkt"];
10573--11966[label="0.04;1pkt 1fpkt"];
10573--12024[label="0.32;8pkt 8fpkt"];
10573--12072[label="0.04;1pkt 1fpkt"];
10573--12121[label="0.32;8pkt 8fpkt"];
10573--12165[label="0.04;1pkt 1fpkt"];
10573--12209[label="0.32;8pkt 8fpkt"];
10889--11988[label="0.0333333;5pkt 5fpkt"];
10889--11999[label="0.0466667;7pkt 7fpkt"];
10889--12089[label="0.0333333;5pkt 5fpkt"];
10889--12096[label="0.0466667;7pkt 7fpkt"];
10889--12185[label="0.0466667;7pkt 7fpkt"];
11305--11527[label="0.0526316;1pkt 1fpkt"];
11305--12024[label="0.105263;2pkt 2fpkt"];
11305--12121[label="0.105263;2pkt 2fpkt"];
11305--12209[label="0.105263;2pkt 2fpkt"];
</description>
    <slice>
      <filter dst_ip="142.21.175.138" src_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,999,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_355{
style=filled;
color=gray75;
989[label="199.107.145.171;s;1119pkt 1119fpkt", shape=diamond, color=yellow];
2590[label="220.2.100.108;d;1pkt 1fpkt", shape=diamond, color=yellow];
2900[label="13.221.132.43;d;1pkt 1fpkt", shape=diamond, color=yellow];
2959[label="203.183.5.173;d;475pkt 475fpkt", shape=diamond, color=yellow];
4264[label="199.107.145.168;s;185pkt 185fpkt", shape=diamond, color=yellow];
8081[label="37.21.85.78;d;22pkt 22fpkt", shape=diamond, color=yellow];
8379[label="199.107.145.171;s;815pkt 815fpkt", shape=hexagon, color=black];
10572[label="220.2.100.108;d;1pkt 1fpkt", shape=hexagon, color=black];
11643[label="37.21.85.78;d;22pkt 22fpkt", shape=hexagon, color=black];
stat355[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.145.171:*, *:*}[82.0381%]&lt;BR/&gt;{*:*, 203.183.5.173:*}[34.824%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 0: (17.3798%)&lt;BR/&gt; 445: (10.7156%)&lt;BR/&gt; 139: (10.2423%)&lt;BR/&gt; 61963: (6.53162%)&lt;BR/&gt; 80: (1.87429%)&gt;];
}
989--2590[label="1;1pkt 1fpkt"];
989--2900[label="1;1pkt 1fpkt"];
989--2959[label="0.490526;233pkt 233fpkt"];
989--6305[label="0.00119474;1pkt 1fpkt"];
989--8081[label="0.863636;19pkt 19fpkt"];
989--8379[label="1;815pkt 815fpkt"];
989--10572[label="1;1pkt 1fpkt"];
989--11027[label="0.0011976;1pkt 1fpkt"];
989--11643[label="0.863636;19pkt 19fpkt"];
989--11966[label="0.00268097;3pkt 3fpkt"];
989--12072[label="0.00268097;3pkt 3fpkt"];
989--12165[label="0.00268097;3pkt 3fpkt"];
2590--8379[label="1;1pkt 1fpkt"];
2590--10572[label="1;1pkt 1fpkt"];
2900--8379[label="1;1pkt 1fpkt"];
2959--4264[label="1;185pkt 185fpkt"];
2959--7098[label="0.00588235;1pkt 1fpkt"];
2959--8379[label="0.456842;217pkt 217fpkt"];
2959--11175[label="0.00595238;1pkt 1fpkt"];
8081--10249[label="0.136364;3pkt 3fpkt"];
8081--11643[label="1;22pkt 22fpkt"];
8379--10572[label="1;1pkt 1fpkt"];
8379--11027[label="0.00122699;1pkt 1fpkt"];
8379--11966[label="0.00368098;3pkt 3fpkt"];
8379--12072[label="0.00368098;3pkt 3fpkt"];
8379--12165[label="0.00368098;3pkt 3fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.145.171"/>
      <filter dst_ip="203.183.5.173"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_356{
style=filled;
color=gray75;
3095[label="172.1.14.11;s;51pkt 51fpkt", shape=diamond, color=yellow];
3625[label="131.118.0.100;d;1pkt 1fpkt", shape=diamond, color=yellow];
4353[label="131.118.152.10;d;2pkt 2fpkt", shape=diamond, color=yellow];
8127[label="25.200.49.170;d;1pkt 1fpkt", shape=diamond, color=yellow];
8566[label="172.1.14.11;s;10pkt 10fpkt", shape=hexagon, color=black];
9285[label="131.118.0.100;d;1pkt 1fpkt", shape=hexagon, color=black];
11649[label="25.200.49.170;d;1pkt 1fpkt", shape=hexagon, color=black];
stat356[shape=component, label=&lt;Rules:&lt;BR/&gt;{172.1.14.11:80, 27.150.90.72:*}[21.1538%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (44.0299%)&lt;BR/&gt; 0: (8.95522%)&lt;BR/&gt; 48058: (2.98507%)&lt;BR/&gt; 52254: (2.23881%)&lt;BR/&gt; 2138: (2.23881%)&gt;];
}
3095--3203[label="0.5;1pkt 1fpkt"];
3095--3625[label="1;1pkt 1fpkt"];
3095--3658[label="0.0196078;1pkt 1fpkt"];
3095--4353[label="0.5;1pkt 1fpkt"];
3095--4624[label="0.0196078;1pkt 1fpkt"];
3095--6328[label="0.666667;2pkt 2fpkt"];
3095--8127[label="1;1pkt 1fpkt"];
3095--8566[label="1;10pkt 10fpkt"];
3095--9020[label="0.0196078;1pkt 1fpkt"];
3095--9285[label="1;1pkt 1fpkt"];
3095--9489[label="0.0196078;1pkt 1fpkt"];
3095--11104[label="0.0196078;1pkt 1fpkt"];
3095--11649[label="1;1pkt 1fpkt"];
3095--11966[label="0.0196078;1pkt 1fpkt"];
3095--11988[label="0.0196078;1pkt 1fpkt"];
3095--11999[label="0.0392157;2pkt 2fpkt"];
3095--12024[label="0.0980392;5pkt 5fpkt"];
3095--12072[label="0.0196078;1pkt 1fpkt"];
3095--12089[label="0.0196078;1pkt 1fpkt"];
3095--12096[label="0.0392157;2pkt 2fpkt"];
3095--12121[label="0.0980392;5pkt 5fpkt"];
3095--12165[label="0.0196078;1pkt 1fpkt"];
3095--12185[label="0.0392157;2pkt 2fpkt"];
3095--12209[label="0.0980392;5pkt 5fpkt"];
3625--8566[label="1;1pkt 1fpkt"];
3625--9285[label="1;1pkt 1fpkt"];
4353--8566[label="0.5;1pkt 1fpkt"];
4353--10249[label="0.5;1pkt 1fpkt"];
8127--11649[label="1;1pkt 1fpkt"];
8566--9020[label="0.1;1pkt 1fpkt"];
8566--9285[label="1;1pkt 1fpkt"];
8566--9489[label="0.1;1pkt 1fpkt"];
8566--11966[label="0.1;1pkt 1fpkt"];
8566--12072[label="0.1;1pkt 1fpkt"];
8566--12165[label="0.1;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="27.150.90.72" src_ip="172.1.14.11" src_port="80"/>
    </slice>
    <from sec="1296622804" usec="0"/>
    <to sec="1296623607" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.430717,1.05619,503,0 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_360{
style=filled;
color=gray75;
2459[label="199.107.150.198;d;196pkt 196fpkt", shape=diamond, color=yellow];
3608[label="13.143.122.71;s;7pkt 7fpkt", shape=diamond, color=yellow];
5407[label="193.112.201.9;s;30pkt 30fpkt", shape=diamond, color=yellow];
8369[label="199.107.150.198;d;44pkt 44fpkt", shape=hexagon, color=black];
10042[label="13.143.122.71;s;7pkt 7fpkt", shape=hexagon, color=black];
stat360[shape=component, label=&lt;Rules:&lt;BR/&gt;{*:80, 199.107.150.198:*}[70.6468%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.6197%)&lt;BR/&gt; 31132: (8.80282%)&lt;BR/&gt; 993: (1.76056%)&lt;BR/&gt; 52867: (0.704225%)&lt;BR/&gt; 52866: (0.704225%)&gt;];
}
2459--3608[label="1;7pkt 7fpkt"];
2459--3844[label="0.0609756;10pkt 10fpkt"];
2459--3961[label="0.108696;5pkt 5fpkt"];
2459--4142[label="0.153846;10pkt 10fpkt"];
2459--5407[label="0.833333;25pkt 25fpkt"];
2459--6306[label="0.00510204;1pkt 1fpkt"];
2459--7155[label="0.00757576;1pkt 1fpkt"];
2459--8324[label="0.0238095;1pkt 1fpkt"];
2459--8369[label="1;44pkt 44fpkt"];
2459--9151[label="0.181818;10pkt 10fpkt"];
2459--10042[label="1;7pkt 7fpkt"];
2459--10516[label="0.00510204;1pkt 1fpkt"];
2459--10645[label="0.0671141;10pkt 10fpkt"];
2459--11870[label="0.00510204;1pkt 1fpkt"];
2459--11945[label="0.0238095;1pkt 1fpkt"];
2459--11966[label="0.0459184;9pkt 9fpkt"];
2459--11988[label="0.00510204;1pkt 1fpkt"];
2459--11999[label="0.0408163;8pkt 8fpkt"];
2459--12000[label="0.00510204;1pkt 1fpkt"];
2459--12021[label="0.00510204;1pkt 1fpkt"];
2459--12024[label="0.0408163;8pkt 8fpkt"];
2459--12038[label="0.00510204;1pkt 1fpkt"];
2459--12039[label="0.00510204;1pkt 1fpkt"];
2459--12072[label="0.0459184;9pkt 9fpkt"];
2459--12089[label="0.00510204;1pkt 1fpkt"];
2459--12096[label="0.0408163;8pkt 8fpkt"];
2459--12097[label="0.00510204;1pkt 1fpkt"];
2459--12118[label="0.00510204;1pkt 1fpkt"];
2459--12121[label="0.0408163;8pkt 8fpkt"];
2459--12131[label="0.00510204;1pkt 1fpkt"];
2459--12132[label="0.00510204;1pkt 1fpkt"];
2459--12165[label="0.0459184;9pkt 9fpkt"];
2459--12185[label="0.0408163;8pkt 8fpkt"];
2459--12186[label="0.00510204;1pkt 1fpkt"];
2459--12206[label="0.00510204;1pkt 1fpkt"];
2459--12209[label="0.0408163;8pkt 8fpkt"];
2459--12218[label="0.00510204;1pkt 1fpkt"];
2459--12219[label="0.00510204;1pkt 1fpkt"];
3608--8369[label="0.857143;6pkt 6fpkt"];
3608--10042[label="1;7pkt 7fpkt"];
5407--9954[label="0.0666667;2pkt 2fpkt"];
5407--10265[label="0.0333333;1pkt 1fpkt"];
5407--11966[label="0.0666667;2pkt 2fpkt"];
5407--12072[label="0.0666667;2pkt 2fpkt"];
5407--12165[label="0.0666667;2pkt 2fpkt"];
8369--10042[label="0.857143;6pkt 6fpkt"];
8369--11966[label="0.204545;9pkt 9fpkt"];
8369--11988[label="0.0227273;1pkt 1fpkt"];
8369--11999[label="0.0227273;1pkt 1fpkt"];
8369--12000[label="0.0227273;1pkt 1fpkt"];
8369--12024[label="0.0227273;1pkt 1fpkt"];
8369--12038[label="0.0227273;1pkt 1fpkt"];
8369--12039[label="0.0227273;1pkt 1fpkt"];
8369--12072[label="0.204545;9pkt 9fpkt"];
8369--12089[label="0.0227273;1pkt 1fpkt"];
8369--12096[label="0.0227273;1pkt 1fpkt"];
8369--12097[label="0.0227273;1pkt 1fpkt"];
8369--12121[label="0.0227273;1pkt 1fpkt"];
8369--12131[label="0.0227273;1pkt 1fpkt"];
8369--12132[label="0.0227273;1pkt 1fpkt"];
8369--12165[label="0.204545;9pkt 9fpkt"];
8369--12185[label="0.0227273;1pkt 1fpkt"];
8369--12186[label="0.0227273;1pkt 1fpkt"];
8369--12209[label="0.0227273;1pkt 1fpkt"];
8369--12218[label="0.0227273;1pkt 1fpkt"];
8369--12219[label="0.0227273;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="199.107.150.198" src_port="80"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,503,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_365{
style=filled;
color=gray75;
937[label="142.21.180.29;s;58pkt 58fpkt", shape=diamond, color=yellow];
2572[label="131.73.19.43;d;2pkt 2fpkt", shape=diamond, color=yellow];
3690[label="198.60.21.182;s;3pkt 3fpkt", shape=diamond, color=yellow];
stat365[shape=component, label=&lt;Rules:&lt;BR/&gt;{142.21.180.29:*, 214.37.25.192:80}[22.9508%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (46.8254%)&lt;BR/&gt; 49398: (1.5873%)&lt;BR/&gt; 9264: (1.5873%)&lt;BR/&gt; 8964: (1.5873%)&lt;BR/&gt; 3725: (1.5873%)&gt;];
}
937--2572[label="0.5;1pkt 1fpkt"];
937--3951[label="0.0344828;2pkt 2fpkt"];
937--3985[label="0.0172414;1pkt 1fpkt"];
937--4119[label="0.0689655;4pkt 4fpkt"];
937--5908[label="0.0344828;2pkt 2fpkt"];
937--6001[label="0.0344828;2pkt 2fpkt"];
937--7134[label="0.0172414;1pkt 1fpkt"];
937--9014[label="0.0344828;2pkt 2fpkt"];
937--9044[label="0.0172414;1pkt 1fpkt"];
937--11800[label="0.0344828;2pkt 2fpkt"];
937--11990[label="0.0517241;3pkt 3fpkt"];
937--12002[label="0.0172414;1pkt 1fpkt"];
937--12027[label="0.0517241;3pkt 3fpkt"];
937--12099[label="0.0172414;1pkt 1fpkt"];
937--12124[label="0.0517241;3pkt 3fpkt"];
937--12188[label="0.0172414;1pkt 1fpkt"];
937--12212[label="0.0517241;3pkt 3fpkt"];
2572--3690[label="0.5;1pkt 1fpkt"];
</description>
    <slice>
      <filter dst_ip="214.37.25.192" dst_port="80" src_ip="142.21.180.29"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623628" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.612778,1.03854,503,1 0 0 1 1 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_367{
style=filled;
color=gray75;
243[label="199.107.150.198s;1pkt 1fpkt", shape=rectangle, color=red];
2460[label="199.107.150.198;s;192pkt 192fpkt", shape=diamond, color=yellow];
3607[label="13.143.122.71;d;7pkt 7fpkt", shape=diamond, color=yellow];
9349[label="199.107.150.198;s;192pkt 192fpkt", shape=hexagon, color=black];
stat367[shape=component, label=&lt;Rules:&lt;BR/&gt;{199.107.150.198:*, *:80}[71.875%]&lt;BR/&gt;{199.107.150.198:31132, *:*}[20.3125%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 80: (36.2245%)&lt;BR/&gt; 31132: (9.94898%)&lt;BR/&gt; 993: (1.27551%)&lt;BR/&gt; 59352: (0.510204%)&lt;BR/&gt; 52864: (0.510204%)&gt;];
}
243--2460[label="1;1pkt 1fpkt"];
243--3607[label="1;1pkt 1fpkt"];
243--9349[label="1;1pkt 1fpkt"];
2460--2826[label="0.0520833;10pkt 10fpkt"];
2460--3103[label="0.00520833;1pkt 1fpkt"];
2460--3607[label="1;7pkt 7fpkt"];
2460--3960[label="0.1;5pkt 5fpkt"];
2460--4141[label="0.0675676;10pkt 10fpkt"];
2460--4570[label="0.0238095;1pkt 1fpkt"];
2460--6498[label="0.0294118;2pkt 2fpkt"];
2460--6587[label="0.00862069;1pkt 1fpkt"];
2460--7211[label="0.0181818;1pkt 1fpkt"];
2460--7791[label="0.0192308;1pkt 1fpkt"];
2460--8499[label="0.0520833;10pkt 10fpkt"];
2460--9349[label="1;192pkt 192fpkt"];
2460--9847[label="0.0263158;1pkt 1fpkt"];
2460--11990[label="0.00520833;1pkt 1fpkt"];
2460--12002[label="0.0364583;7pkt 7fpkt"];
2460--12003[label="0.00520833;1pkt 1fpkt"];
2460--12027[label="0.0260417;5pkt 5fpkt"];
2460--12042[label="0.00520833;1pkt 1fpkt"];
2460--12043[label="0.00520833;1pkt 1fpkt"];
2460--12099[label="0.0364583;7pkt 7fpkt"];
2460--12100[label="0.00520833;1pkt 1fpkt"];
2460--12124[label="0.0260417;5pkt 5fpkt"];
2460--12135[label="0.00520833;1pkt 1fpkt"];
2460--12136[label="0.00520833;1pkt 1fpkt"];
2460--12188[label="0.0364583;7pkt 7fpkt"];
2460--12189[label="0.00520833;1pkt 1fpkt"];
2460--12212[label="0.0260417;5pkt 5fpkt"];
2460--12222[label="0.00520833;1pkt 1fpkt"];
2460--12223[label="0.00520833;1pkt 1fpkt"];
3607--9349[label="1;7pkt 7fpkt"];
9349--9847[label="0.0263158;1pkt 1fpkt"];
9349--11990[label="0.00520833;1pkt 1fpkt"];
9349--12002[label="0.0364583;7pkt 7fpkt"];
9349--12003[label="0.00520833;1pkt 1fpkt"];
9349--12027[label="0.0260417;5pkt 5fpkt"];
9349--12042[label="0.00520833;1pkt 1fpkt"];
9349--12043[label="0.00520833;1pkt 1fpkt"];
9349--12099[label="0.0364583;7pkt 7fpkt"];
9349--12100[label="0.00520833;1pkt 1fpkt"];
9349--12124[label="0.0260417;5pkt 5fpkt"];
9349--12135[label="0.00520833;1pkt 1fpkt"];
9349--12136[label="0.00520833;1pkt 1fpkt"];
9349--12188[label="0.0364583;7pkt 7fpkt"];
9349--12189[label="0.00520833;1pkt 1fpkt"];
9349--12212[label="0.0260417;5pkt 5fpkt"];
9349--12222[label="0.00520833;1pkt 1fpkt"];
9349--12223[label="0.00520833;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="199.107.150.198" src_port="31132"/>
      <filter dst_port="80" src_ip="199.107.150.198"/>
    </slice>
    <from sec="1296622800" usec="0"/>
    <to sec="1296623625" usec="0"/>
  </anomaly>

  <anomaly type="notice" value="0.382723,1.11467,999,0 0 0 1 0 0 0 0 0 0 0 0 ">
    <description>subgraph cluster_378{
style=filled;
color=gray75;
6461[label="171.197.67.116;s;245pkt 245fpkt", shape=diamond, color=yellow];
stat378[shape=component, label=&lt;Rules:&lt;BR/&gt;{171.197.67.116:10044, *:*}[88.5714%]&lt;BR/&gt;&lt;BR/&gt; Major Ports:&lt;BR/&gt; 10044: (44.2857%)&lt;BR/&gt; 443: (3.26531%)&lt;BR/&gt; 80: (2.2449%)&lt;BR/&gt; 65222: (0.204082%)&lt;BR/&gt; 65095: (0.204082%)&gt;];
}
6461--11988[label="0.00408163;1pkt 1fpkt"];
6461--11999[label="0.00408163;1pkt 1fpkt"];
6461--12000[label="0.0122449;3pkt 3fpkt"];
6461--12024[label="0.00408163;1pkt 1fpkt"];
6461--12089[label="0.00408163;1pkt 1fpkt"];
6461--12096[label="0.00408163;1pkt 1fpkt"];
6461--12097[label="0.0122449;3pkt 3fpkt"];
6461--12121[label="0.00408163;1pkt 1fpkt"];
6461--12185[label="0.00408163;1pkt 1fpkt"];
6461--12186[label="0.0122449;3pkt 3fpkt"];
6461--12209[label="0.00408163;1pkt 1fpkt"];
</description>
    <slice>
      <filter src_ip="171.197.67.116" src_port="10044"/>
    </slice>
    <from sec="1296622801" usec="0"/>
    <to sec="1296623626" usec="0"/>
  </anomaly>

</admd:annotation>
