diff --git a/experiment/a-priori/A_priori.ipynb b/experiment/a-priori/A_priori.ipynb
new file mode 100644
index 0000000000000000000000000000000000000000..8c24cb462d02502f029b59d48cece496ce4f657e
--- /dev/null
+++ b/experiment/a-priori/A_priori.ipynb
@@ -0,0 +1,3100 @@
+{
+ "cells": [
+ {
+ "cell_type": "code",
+ "execution_count": 1,
+ "metadata": {},
+ "outputs": [
+ {
+ "name": "stdout",
+ "output_type": "stream",
+ "text": [
+ "<class 'pandas.core.frame.DataFrame'>\n",
+ "RangeIndex: 25192 entries, 0 to 25191\n",
+ "Data columns (total 42 columns):\n",
+ " # Column Non-Null Count Dtype \n",
+ "--- ------ -------------- ----- \n",
+ " 0 duration 25192 non-null int64 \n",
+ " 1 protocol_type 25192 non-null object \n",
+ " 2 service 25192 non-null object \n",
+ " 3 flag 25192 non-null object \n",
+ " 4 src_bytes 25192 non-null int64 \n",
+ " 5 dst_bytes 25192 non-null int64 \n",
+ " 6 land 25192 non-null int64 \n",
+ " 7 wrong_fragment 25192 non-null int64 \n",
+ " 8 urgent 25192 non-null int64 \n",
+ " 9 hot 25192 non-null int64 \n",
+ " 10 num_failed_logins 25192 non-null int64 \n",
+ " 11 logged_in 25192 non-null int64 \n",
+ " 12 num_compromised 25192 non-null int64 \n",
+ " 13 root_shell 25192 non-null int64 \n",
+ " 14 su_attempted 25192 non-null int64 \n",
+ " 15 num_root 25192 non-null int64 \n",
+ " 16 num_file_creations 25192 non-null int64 \n",
+ " 17 num_shells 25192 non-null int64 \n",
+ " 18 num_access_files 25192 non-null int64 \n",
+ " 19 num_outbound_cmds 25192 non-null int64 \n",
+ " 20 is_host_login 25192 non-null int64 \n",
+ " 21 is_guest_login 25192 non-null int64 \n",
+ " 22 count 25192 non-null int64 \n",
+ " 23 srv_count 25192 non-null int64 \n",
+ " 24 serror_rate 25192 non-null float64\n",
+ " 25 srv_serror_rate 25192 non-null float64\n",
+ " 26 rerror_rate 25192 non-null float64\n",
+ " 27 srv_rerror_rate 25192 non-null float64\n",
+ " 28 same_srv_rate 25192 non-null float64\n",
+ " 29 diff_srv_rate 25192 non-null float64\n",
+ " 30 srv_diff_host_rate 25192 non-null float64\n",
+ " 31 dst_host_count 25192 non-null int64 \n",
+ " 32 dst_host_srv_count 25192 non-null int64 \n",
+ " 33 dst_host_same_srv_rate 25192 non-null float64\n",
+ " 34 dst_host_diff_srv_rate 25192 non-null float64\n",
+ " 35 dst_host_same_src_port_rate 25192 non-null float64\n",
+ " 36 dst_host_srv_diff_host_rate 25192 non-null float64\n",
+ " 37 dst_host_serror_rate 25192 non-null float64\n",
+ " 38 dst_host_srv_serror_rate 25192 non-null float64\n",
+ " 39 dst_host_rerror_rate 25192 non-null float64\n",
+ " 40 dst_host_srv_rerror_rate 25192 non-null float64\n",
+ " 41 class 25192 non-null object \n",
+ "dtypes: float64(15), int64(23), object(4)\n",
+ "memory usage: 8.1+ MB\n"
+ ]
+ }
+ ],
+ "source": [
+ "import numpy as np \n",
+ "import pandas as pd\n",
+ "from mlxtend.frequent_patterns import apriori,association_rules\n",
+ "\n",
+ "df_train = pd.read_csv(\"../../dataset/Train_data.csv\")\n",
+ "\n",
+ "df_train.info()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 2,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>protocol_type</th>\n",
+ " <th>service</th>\n",
+ " <th>flag</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>...</th>\n",
+ " <th>dst_host_srv_count</th>\n",
+ " <th>dst_host_same_srv_rate</th>\n",
+ " <th>dst_host_diff_srv_rate</th>\n",
+ " <th>dst_host_same_src_port_rate</th>\n",
+ " <th>dst_host_srv_diff_host_rate</th>\n",
+ " <th>dst_host_serror_rate</th>\n",
+ " <th>dst_host_srv_serror_rate</th>\n",
+ " <th>dst_host_rerror_rate</th>\n",
+ " <th>dst_host_srv_rerror_rate</th>\n",
+ " <th>class</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>ftp_data</td>\n",
+ " <td>SF</td>\n",
+ " <td>491</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>25</td>\n",
+ " <td>0.17</td>\n",
+ " <td>0.03</td>\n",
+ " <td>0.17</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.05</td>\n",
+ " <td>0.00</td>\n",
+ " <td>normal</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " <td>udp</td>\n",
+ " <td>other</td>\n",
+ " <td>SF</td>\n",
+ " <td>146</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.60</td>\n",
+ " <td>0.88</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>normal</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>private</td>\n",
+ " <td>S0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>26</td>\n",
+ " <td>0.10</td>\n",
+ " <td>0.05</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>http</td>\n",
+ " <td>SF</td>\n",
+ " <td>232</td>\n",
+ " <td>8153</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>255</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.03</td>\n",
+ " <td>0.04</td>\n",
+ " <td>0.03</td>\n",
+ " <td>0.01</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.01</td>\n",
+ " <td>normal</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>http</td>\n",
+ " <td>SF</td>\n",
+ " <td>199</td>\n",
+ " <td>420</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>255</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>normal</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>private</td>\n",
+ " <td>REJ</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>19</td>\n",
+ " <td>0.07</td>\n",
+ " <td>0.07</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>private</td>\n",
+ " <td>S0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>9</td>\n",
+ " <td>0.04</td>\n",
+ " <td>0.05</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>private</td>\n",
+ " <td>S0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>15</td>\n",
+ " <td>0.06</td>\n",
+ " <td>0.07</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>remote_job</td>\n",
+ " <td>S0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>23</td>\n",
+ " <td>0.09</td>\n",
+ " <td>0.05</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>0</td>\n",
+ " <td>tcp</td>\n",
+ " <td>private</td>\n",
+ " <td>S0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>13</td>\n",
+ " <td>0.05</td>\n",
+ " <td>0.06</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>1.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>0.00</td>\n",
+ " <td>anomaly</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>10 rows × 42 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration protocol_type service flag src_bytes dst_bytes land \\\n",
+ "0 0 tcp ftp_data SF 491 0 0 \n",
+ "1 0 udp other SF 146 0 0 \n",
+ "2 0 tcp private S0 0 0 0 \n",
+ "3 0 tcp http SF 232 8153 0 \n",
+ "4 0 tcp http SF 199 420 0 \n",
+ "5 0 tcp private REJ 0 0 0 \n",
+ "6 0 tcp private S0 0 0 0 \n",
+ "7 0 tcp private S0 0 0 0 \n",
+ "8 0 tcp remote_job S0 0 0 0 \n",
+ "9 0 tcp private S0 0 0 0 \n",
+ "\n",
+ " wrong_fragment urgent hot ... dst_host_srv_count \\\n",
+ "0 0 0 0 ... 25 \n",
+ "1 0 0 0 ... 1 \n",
+ "2 0 0 0 ... 26 \n",
+ "3 0 0 0 ... 255 \n",
+ "4 0 0 0 ... 255 \n",
+ "5 0 0 0 ... 19 \n",
+ "6 0 0 0 ... 9 \n",
+ "7 0 0 0 ... 15 \n",
+ "8 0 0 0 ... 23 \n",
+ "9 0 0 0 ... 13 \n",
+ "\n",
+ " dst_host_same_srv_rate dst_host_diff_srv_rate \\\n",
+ "0 0.17 0.03 \n",
+ "1 0.00 0.60 \n",
+ "2 0.10 0.05 \n",
+ "3 1.00 0.00 \n",
+ "4 1.00 0.00 \n",
+ "5 0.07 0.07 \n",
+ "6 0.04 0.05 \n",
+ "7 0.06 0.07 \n",
+ "8 0.09 0.05 \n",
+ "9 0.05 0.06 \n",
+ "\n",
+ " dst_host_same_src_port_rate dst_host_srv_diff_host_rate \\\n",
+ "0 0.17 0.00 \n",
+ "1 0.88 0.00 \n",
+ "2 0.00 0.00 \n",
+ "3 0.03 0.04 \n",
+ "4 0.00 0.00 \n",
+ "5 0.00 0.00 \n",
+ "6 0.00 0.00 \n",
+ "7 0.00 0.00 \n",
+ "8 0.00 0.00 \n",
+ "9 0.00 0.00 \n",
+ "\n",
+ " dst_host_serror_rate dst_host_srv_serror_rate dst_host_rerror_rate \\\n",
+ "0 0.00 0.00 0.05 \n",
+ "1 0.00 0.00 0.00 \n",
+ "2 1.00 1.00 0.00 \n",
+ "3 0.03 0.01 0.00 \n",
+ "4 0.00 0.00 0.00 \n",
+ "5 0.00 0.00 1.00 \n",
+ "6 1.00 1.00 0.00 \n",
+ "7 1.00 1.00 0.00 \n",
+ "8 1.00 1.00 0.00 \n",
+ "9 1.00 1.00 0.00 \n",
+ "\n",
+ " dst_host_srv_rerror_rate class \n",
+ "0 0.00 normal \n",
+ "1 0.00 normal \n",
+ "2 0.00 anomaly \n",
+ "3 0.01 normal \n",
+ "4 0.00 normal \n",
+ "5 1.00 anomaly \n",
+ "6 0.00 anomaly \n",
+ "7 0.00 anomaly \n",
+ "8 0.00 anomaly \n",
+ "9 0.00 anomaly \n",
+ "\n",
+ "[10 rows x 42 columns]"
+ ]
+ },
+ "execution_count": 2,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "df_train.head(n=10)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 3,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>service_tim_i</th>\n",
+ " <th>service_time</th>\n",
+ " <th>service_urh_i</th>\n",
+ " <th>service_urp_i</th>\n",
+ " <th>service_uucp</th>\n",
+ " <th>service_uucp_path</th>\n",
+ " <th>service_vmnet</th>\n",
+ " <th>service_whois</th>\n",
+ " <th>class_anomaly</th>\n",
+ " <th>class_normal</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " <td>491</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " <td>146</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " <td>232</td>\n",
+ " <td>8153</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " <td>199</td>\n",
+ " <td>420</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>5 rows × 120 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent hot \\\n",
+ "0 0 491 0 0 0 0 0 \n",
+ "1 0 146 0 0 0 0 0 \n",
+ "2 0 0 0 0 0 0 0 \n",
+ "3 0 232 8153 0 0 0 0 \n",
+ "4 0 199 420 0 0 0 0 \n",
+ "\n",
+ " num_failed_logins logged_in num_compromised ... service_tim_i \\\n",
+ "0 0 0 0 ... 0 \n",
+ "1 0 0 0 ... 0 \n",
+ "2 0 0 0 ... 0 \n",
+ "3 0 1 0 ... 0 \n",
+ "4 0 1 0 ... 0 \n",
+ "\n",
+ " service_time service_urh_i service_urp_i service_uucp \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 0 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " service_uucp_path service_vmnet service_whois class_anomaly \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 1 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " class_normal \n",
+ "0 1 \n",
+ "1 1 \n",
+ "2 0 \n",
+ "3 1 \n",
+ "4 1 \n",
+ "\n",
+ "[5 rows x 120 columns]"
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "data_train = pd.get_dummies(df_train,columns = [\"protocol_type\", \"flag\", \"service\", \"class\"],)\n",
+ "\n",
+ "data_train.head()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 4,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>dst_host_count</th>\n",
+ " <th>dst_host_srv_count</th>\n",
+ " <th>dst_host_same_srv_rate</th>\n",
+ " <th>dst_host_diff_srv_rate</th>\n",
+ " <th>dst_host_same_src_port_rate</th>\n",
+ " <th>dst_host_srv_diff_host_rate</th>\n",
+ " <th>dst_host_serror_rate</th>\n",
+ " <th>dst_host_srv_serror_rate</th>\n",
+ " <th>dst_host_rerror_rate</th>\n",
+ " <th>dst_host_srv_rerror_rate</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009889</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-0.328634</td>\n",
+ " <td>-0.813985</td>\n",
+ " <td>-0.779157</td>\n",
+ " <td>-0.280673</td>\n",
+ " <td>0.073120</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.221668</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010032</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-1.030895</td>\n",
+ " <td>-1.157831</td>\n",
+ " <td>2.764403</td>\n",
+ " <td>2.375620</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.804947</td>\n",
+ " <td>-0.935081</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009996</td>\n",
+ " <td>0.052473</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-1.540854</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.380894</td>\n",
+ " <td>0.073759</td>\n",
+ " <td>-0.574435</td>\n",
+ " <td>-0.604947</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.342768</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010010</td>\n",
+ " <td>-0.034582</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.868212</td>\n",
+ " <td>-1.001906</td>\n",
+ " <td>-0.066984</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>2.884296</td>\n",
+ " <td>2.777041</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.958592</td>\n",
+ " <td>-1.068731</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.904364</td>\n",
+ " <td>-1.024181</td>\n",
+ " <td>-0.066984</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.832060</td>\n",
+ " <td>-0.957356</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.922440</td>\n",
+ " <td>-1.046456</td>\n",
+ " <td>-0.120406</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>10 rows × 38 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent \\\n",
+ "0 -0.113551 -0.009889 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "1 -0.113551 -0.010032 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "2 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "3 -0.113551 -0.009996 0.052473 -0.00891 -0.091223 -0.006301 \n",
+ "4 -0.113551 -0.010010 -0.034582 -0.00891 -0.091223 -0.006301 \n",
+ "5 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "6 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "7 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "8 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "9 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "\n",
+ " hot num_failed_logins logged_in num_compromised ... \\\n",
+ "0 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "1 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "2 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "3 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "4 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "5 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "6 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "7 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "8 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "9 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "\n",
+ " dst_host_count dst_host_srv_count dst_host_same_srv_rate \\\n",
+ "0 -0.328634 -0.813985 -0.779157 \n",
+ "1 0.732059 -1.030895 -1.157831 \n",
+ "2 0.732059 -0.804947 -0.935081 \n",
+ "3 -1.540854 1.264742 1.069663 \n",
+ "4 0.732059 1.264742 1.069663 \n",
+ "5 0.732059 -0.868212 -1.001906 \n",
+ "6 0.732059 -0.958592 -1.068731 \n",
+ "7 0.732059 -0.904364 -1.024181 \n",
+ "8 0.732059 -0.832060 -0.957356 \n",
+ "9 0.732059 -0.922440 -1.046456 \n",
+ "\n",
+ " dst_host_diff_srv_rate dst_host_same_src_port_rate \\\n",
+ "0 -0.280673 0.073120 \n",
+ "1 2.764403 2.375620 \n",
+ "2 -0.173828 -0.478183 \n",
+ "3 -0.440940 -0.380894 \n",
+ "4 -0.440940 -0.478183 \n",
+ "5 -0.066984 -0.478183 \n",
+ "6 -0.173828 -0.478183 \n",
+ "7 -0.066984 -0.478183 \n",
+ "8 -0.173828 -0.478183 \n",
+ "9 -0.120406 -0.478183 \n",
+ "\n",
+ " dst_host_srv_diff_host_rate dst_host_serror_rate \\\n",
+ "0 -0.287993 -0.641804 \n",
+ "1 -0.287993 -0.641804 \n",
+ "2 -0.287993 1.603834 \n",
+ "3 0.073759 -0.574435 \n",
+ "4 -0.287993 -0.641804 \n",
+ "5 -0.287993 -0.641804 \n",
+ "6 -0.287993 1.603834 \n",
+ "7 -0.287993 1.603834 \n",
+ "8 -0.287993 1.603834 \n",
+ "9 -0.287993 1.603834 \n",
+ "\n",
+ " dst_host_srv_serror_rate dst_host_rerror_rate dst_host_srv_rerror_rate \n",
+ "0 -0.627365 -0.221668 -0.374281 \n",
+ "1 -0.627365 -0.385140 -0.374281 \n",
+ "2 1.614454 -0.385140 -0.374281 \n",
+ "3 -0.604947 -0.385140 -0.342768 \n",
+ "4 -0.627365 -0.385140 -0.374281 \n",
+ "5 -0.627365 2.884296 2.777041 \n",
+ "6 1.614454 -0.385140 -0.374281 \n",
+ "7 1.614454 -0.385140 -0.374281 \n",
+ "8 1.614454 -0.385140 -0.374281 \n",
+ "9 1.614454 -0.385140 -0.374281 \n",
+ "\n",
+ "[10 rows x 38 columns]"
+ ]
+ },
+ "execution_count": 4,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "from sklearn.preprocessing import StandardScaler\n",
+ "scaler = StandardScaler()\n",
+ "\n",
+ "# extract numerical attributes and scale it to have zero mean and unit variance \n",
+ "cols = data_train.select_dtypes(include=['float64','int64']).columns\n",
+ "sc_train = scaler.fit_transform(data_train.select_dtypes(include=['float64','int64']))\n",
+ "\n",
+ "\n",
+ "# turn the result back to a dataframe\n",
+ "sc_traindf = pd.DataFrame(sc_train, columns = cols)\n",
+ "sc_traindf.head(n=10)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 5,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>dst_host_count</th>\n",
+ " <th>dst_host_srv_count</th>\n",
+ " <th>dst_host_same_srv_rate</th>\n",
+ " <th>dst_host_diff_srv_rate</th>\n",
+ " <th>dst_host_same_src_port_rate</th>\n",
+ " <th>dst_host_srv_diff_host_rate</th>\n",
+ " <th>dst_host_serror_rate</th>\n",
+ " <th>dst_host_srv_serror_rate</th>\n",
+ " <th>dst_host_rerror_rate</th>\n",
+ " <th>dst_host_srv_rerror_rate</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>10 rows × 38 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent hot \\\n",
+ "0 0 0 0 0 0 0 0 \n",
+ "1 0 0 0 0 0 0 0 \n",
+ "2 0 0 0 0 0 0 0 \n",
+ "3 0 0 1 0 0 0 0 \n",
+ "4 0 0 0 0 0 0 0 \n",
+ "5 0 0 0 0 0 0 0 \n",
+ "6 0 0 0 0 0 0 0 \n",
+ "7 0 0 0 0 0 0 0 \n",
+ "8 0 0 0 0 0 0 0 \n",
+ "9 0 0 0 0 0 0 0 \n",
+ "\n",
+ " num_failed_logins logged_in num_compromised ... dst_host_count \\\n",
+ "0 0 0 0 ... 0 \n",
+ "1 0 0 0 ... 1 \n",
+ "2 0 0 0 ... 1 \n",
+ "3 0 1 0 ... 0 \n",
+ "4 0 1 0 ... 1 \n",
+ "5 0 0 0 ... 1 \n",
+ "6 0 0 0 ... 1 \n",
+ "7 0 0 0 ... 1 \n",
+ "8 0 0 0 ... 1 \n",
+ "9 0 0 0 ... 1 \n",
+ "\n",
+ " dst_host_srv_count dst_host_same_srv_rate dst_host_diff_srv_rate \\\n",
+ "0 0 0 0 \n",
+ "1 0 0 1 \n",
+ "2 0 0 0 \n",
+ "3 1 1 0 \n",
+ "4 1 1 0 \n",
+ "5 0 0 0 \n",
+ "6 0 0 0 \n",
+ "7 0 0 0 \n",
+ "8 0 0 0 \n",
+ "9 0 0 0 \n",
+ "\n",
+ " dst_host_same_src_port_rate dst_host_srv_diff_host_rate \\\n",
+ "0 1 0 \n",
+ "1 1 0 \n",
+ "2 0 0 \n",
+ "3 0 1 \n",
+ "4 0 0 \n",
+ "5 0 0 \n",
+ "6 0 0 \n",
+ "7 0 0 \n",
+ "8 0 0 \n",
+ "9 0 0 \n",
+ "\n",
+ " dst_host_serror_rate dst_host_srv_serror_rate dst_host_rerror_rate \\\n",
+ "0 0 0 0 \n",
+ "1 0 0 0 \n",
+ "2 1 1 0 \n",
+ "3 0 0 0 \n",
+ "4 0 0 0 \n",
+ "5 0 0 1 \n",
+ "6 1 1 0 \n",
+ "7 1 1 0 \n",
+ "8 1 1 0 \n",
+ "9 1 1 0 \n",
+ "\n",
+ " dst_host_srv_rerror_rate \n",
+ "0 0 \n",
+ "1 0 \n",
+ "2 0 \n",
+ "3 0 \n",
+ "4 0 \n",
+ "5 1 \n",
+ "6 0 \n",
+ "7 0 \n",
+ "8 0 \n",
+ "9 0 \n",
+ "\n",
+ "[10 rows x 38 columns]"
+ ]
+ },
+ "execution_count": 5,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "def encode_units(x):\n",
+ " if x<=0:\n",
+ " return 0\n",
+ " if x>=0 :\n",
+ " return 1\n",
+ " \n",
+ "train_df = sc_traindf.applymap(encode_units)\n",
+ "\n",
+ "train_df.head(n=10)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 6,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>service_tim_i</th>\n",
+ " <th>service_time</th>\n",
+ " <th>service_urh_i</th>\n",
+ " <th>service_urp_i</th>\n",
+ " <th>service_uucp</th>\n",
+ " <th>service_uucp_path</th>\n",
+ " <th>service_vmnet</th>\n",
+ " <th>service_whois</th>\n",
+ " <th>class_anomaly</th>\n",
+ " <th>class_normal</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>5 rows × 120 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent hot \\\n",
+ "0 0 0 0 0 0 0 0 \n",
+ "1 0 0 0 0 0 0 0 \n",
+ "2 0 0 0 0 0 0 0 \n",
+ "3 0 0 1 0 0 0 0 \n",
+ "4 0 0 0 0 0 0 0 \n",
+ "\n",
+ " num_failed_logins logged_in num_compromised ... service_tim_i \\\n",
+ "0 0 0 0 ... 0 \n",
+ "1 0 0 0 ... 0 \n",
+ "2 0 0 0 ... 0 \n",
+ "3 0 1 0 ... 0 \n",
+ "4 0 1 0 ... 0 \n",
+ "\n",
+ " service_time service_urh_i service_urp_i service_uucp \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 0 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " service_uucp_path service_vmnet service_whois class_anomaly \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 1 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " class_normal \n",
+ "0 1 \n",
+ "1 1 \n",
+ "2 0 \n",
+ "3 1 \n",
+ "4 1 \n",
+ "\n",
+ "[5 rows x 120 columns]"
+ ]
+ },
+ "execution_count": 6,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "columns = data_train.columns\n",
+ "colname = ['duration', 'src_bytes', 'dst_bytes', 'land', 'wrong_fragment',\n",
+ " 'urgent', 'hot', 'num_failed_logins', 'logged_in', 'num_compromised',\n",
+ " 'root_shell', 'su_attempted', 'num_root', 'num_file_creations',\n",
+ " 'num_shells', 'num_access_files', 'num_outbound_cmds', 'is_host_login',\n",
+ " 'is_guest_login', 'count', 'srv_count', 'serror_rate',\n",
+ " 'srv_serror_rate', 'rerror_rate', 'srv_rerror_rate', 'same_srv_rate',\n",
+ " 'diff_srv_rate', 'srv_diff_host_rate', 'dst_host_count',\n",
+ " 'dst_host_srv_count', 'dst_host_same_srv_rate',\n",
+ " 'dst_host_diff_srv_rate', 'dst_host_same_src_port_rate',\n",
+ " 'dst_host_srv_diff_host_rate', 'dst_host_serror_rate',\n",
+ " 'dst_host_srv_serror_rate', 'dst_host_rerror_rate',\n",
+ " 'dst_host_srv_rerror_rate']\n",
+ "for col in columns :\n",
+ " for j in colname :\n",
+ " if col == j :\n",
+ " data_train[col] = train_df[col]\n",
+ "data_train.head()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 7,
+ "metadata": {},
+ "outputs": [
+ {
+ "name": "stdout",
+ "output_type": "stream",
+ "text": [
+ "num_outbound_cmds\n",
+ "is_host_login\n"
+ ]
+ }
+ ],
+ "source": [
+ "data_train[['num_outbound_cmds','is_host_login']].head()\n",
+ "for col in data_train.columns :\n",
+ " if data_train[col].mean() == 0 :\n",
+ " print(col)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 8,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>support</th>\n",
+ " <th>itemsets</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>26</th>\n",
+ " <td>0.814782</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>15</th>\n",
+ " <td>0.643022</td>\n",
+ " <td>(dst_host_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>12</th>\n",
+ " <td>0.622102</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>32</th>\n",
+ " <td>0.594355</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>227</th>\n",
+ " <td>0.562837</td>\n",
+ " <td>(same_srv_rate, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>...</th>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>281</th>\n",
+ " <td>0.010241</td>\n",
+ " <td>(dst_host_count, flag_RSTO)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>100</th>\n",
+ " <td>0.010241</td>\n",
+ " <td>(num_compromised, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>287</th>\n",
+ " <td>0.010162</td>\n",
+ " <td>(service_finger, dst_host_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>47</th>\n",
+ " <td>0.010043</td>\n",
+ " <td>(duration, srv_rerror_rate)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>46</th>\n",
+ " <td>0.010043</td>\n",
+ " <td>(rerror_rate, duration)</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>467 rows × 2 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " support itemsets\n",
+ "26 0.814782 (protocol_type_tcp)\n",
+ "15 0.643022 (dst_host_count)\n",
+ "12 0.622102 (same_srv_rate)\n",
+ "32 0.594355 (flag_SF)\n",
+ "227 0.562837 (same_srv_rate, flag_SF)\n",
+ ".. ... ...\n",
+ "281 0.010241 (dst_host_count, flag_RSTO)\n",
+ "100 0.010241 (num_compromised, flag_SF)\n",
+ "287 0.010162 (service_finger, dst_host_count)\n",
+ "47 0.010043 (duration, srv_rerror_rate)\n",
+ "46 0.010043 (rerror_rate, duration)\n",
+ "\n",
+ "[467 rows x 2 columns]"
+ ]
+ },
+ "execution_count": 8,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "frequent_itemsets = apriori ( data_train , min_support = 0.01 , use_colnames=True ,max_len =2)\n",
+ "result_desc = frequent_itemsets.sort_values(['support'],ascending =[False])\n",
+ "result_desc"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 9,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>antecedents</th>\n",
+ " <th>consequents</th>\n",
+ " <th>antecedent support</th>\n",
+ " <th>consequent support</th>\n",
+ " <th>support</th>\n",
+ " <th>confidence</th>\n",
+ " <th>lift</th>\n",
+ " <th>leverage</th>\n",
+ " <th>conviction</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>104</th>\n",
+ " <td>(service_eco_i)</td>\n",
+ " <td>(protocol_type_icmp)</td>\n",
+ " <td>0.036083</td>\n",
+ " <td>0.065695</td>\n",
+ " <td>0.036083</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>15.221752</td>\n",
+ " <td>0.033712</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>111</th>\n",
+ " <td>(service_ecr_i)</td>\n",
+ " <td>(protocol_type_icmp)</td>\n",
+ " <td>0.024333</td>\n",
+ " <td>0.065695</td>\n",
+ " <td>0.024333</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>15.221752</td>\n",
+ " <td>0.022735</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>91</th>\n",
+ " <td>(service_domain_u)</td>\n",
+ " <td>(protocol_type_udp)</td>\n",
+ " <td>0.072245</td>\n",
+ " <td>0.119522</td>\n",
+ " <td>0.072245</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>8.366656</td>\n",
+ " <td>0.063610</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>118</th>\n",
+ " <td>(flag_RSTR)</td>\n",
+ " <td>(rerror_rate)</td>\n",
+ " <td>0.019728</td>\n",
+ " <td>0.124127</td>\n",
+ " <td>0.019728</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>8.056284</td>\n",
+ " <td>0.017280</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>131</th>\n",
+ " <td>(flag_RSTO)</td>\n",
+ " <td>(rerror_rate)</td>\n",
+ " <td>0.012067</td>\n",
+ " <td>0.124127</td>\n",
+ " <td>0.012067</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>8.056284</td>\n",
+ " <td>0.010569</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>...</th>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " <td>...</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>122</th>\n",
+ " <td>(hot)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.020641</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.018736</td>\n",
+ " <td>0.907692</td>\n",
+ " <td>1.527188</td>\n",
+ " <td>0.006468</td>\n",
+ " <td>4.394484</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.562837</td>\n",
+ " <td>0.904735</td>\n",
+ " <td>1.522212</td>\n",
+ " <td>0.193088</td>\n",
+ " <td>4.258046</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>84</th>\n",
+ " <td>(dst_bytes)</td>\n",
+ " <td>(service_http)</td>\n",
+ " <td>0.098206</td>\n",
+ " <td>0.317680</td>\n",
+ " <td>0.088719</td>\n",
+ " <td>0.903395</td>\n",
+ " <td>2.843725</td>\n",
+ " <td>0.057521</td>\n",
+ " <td>7.063009</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>109</th>\n",
+ " <td>(service_other)</td>\n",
+ " <td>(dst_host_count)</td>\n",
+ " <td>0.034058</td>\n",
+ " <td>0.643022</td>\n",
+ " <td>0.030764</td>\n",
+ " <td>0.903263</td>\n",
+ " <td>1.404717</td>\n",
+ " <td>0.008863</td>\n",
+ " <td>3.690211</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>75</th>\n",
+ " <td>(srv_count)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.130597</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.117855</td>\n",
+ " <td>0.902432</td>\n",
+ " <td>1.809460</td>\n",
+ " <td>0.052722</td>\n",
+ " <td>5.137630</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>138 rows × 9 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " antecedents consequents antecedent support \\\n",
+ "104 (service_eco_i) (protocol_type_icmp) 0.036083 \n",
+ "111 (service_ecr_i) (protocol_type_icmp) 0.024333 \n",
+ "91 (service_domain_u) (protocol_type_udp) 0.072245 \n",
+ "118 (flag_RSTR) (rerror_rate) 0.019728 \n",
+ "131 (flag_RSTO) (rerror_rate) 0.012067 \n",
+ ".. ... ... ... \n",
+ "122 (hot) (flag_SF) 0.020641 \n",
+ "0 (same_srv_rate) (flag_SF) 0.622102 \n",
+ "84 (dst_bytes) (service_http) 0.098206 \n",
+ "109 (service_other) (dst_host_count) 0.034058 \n",
+ "75 (srv_count) (dst_host_same_srv_rate) 0.130597 \n",
+ "\n",
+ " consequent support support confidence lift leverage conviction \n",
+ "104 0.065695 0.036083 1.000000 15.221752 0.033712 inf \n",
+ "111 0.065695 0.024333 1.000000 15.221752 0.022735 inf \n",
+ "91 0.119522 0.072245 1.000000 8.366656 0.063610 inf \n",
+ "118 0.124127 0.019728 1.000000 8.056284 0.017280 inf \n",
+ "131 0.124127 0.012067 1.000000 8.056284 0.010569 inf \n",
+ ".. ... ... ... ... ... ... \n",
+ "122 0.594355 0.018736 0.907692 1.527188 0.006468 4.394484 \n",
+ "0 0.594355 0.562837 0.904735 1.522212 0.193088 4.258046 \n",
+ "84 0.317680 0.088719 0.903395 2.843725 0.057521 7.063009 \n",
+ "109 0.643022 0.030764 0.903263 1.404717 0.008863 3.690211 \n",
+ "75 0.498730 0.117855 0.902432 1.809460 0.052722 5.137630 \n",
+ "\n",
+ "[138 rows x 9 columns]"
+ ]
+ },
+ "execution_count": 9,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "rules = association_rules(result_desc , metric = \"confidence\" , min_threshold = 0.90)\n",
+ "rules = rules.sort_values(['confidence','lift'], ascending=[False , False])\n",
+ "rules"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 10,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>antecedents</th>\n",
+ " <th>consequents</th>\n",
+ " <th>antecedent support</th>\n",
+ " <th>consequent support</th>\n",
+ " <th>support</th>\n",
+ " <th>confidence</th>\n",
+ " <th>lift</th>\n",
+ " <th>leverage</th>\n",
+ " <th>conviction</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>45</th>\n",
+ " <td>(flag_S0)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.278223</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.275048</td>\n",
+ " <td>0.988586</td>\n",
+ " <td>2.120792</td>\n",
+ " <td>0.145357</td>\n",
+ " <td>46.772805</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>44</th>\n",
+ " <td>(dst_host_srv_serror_rate)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.281478</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.277072</td>\n",
+ " <td>0.984346</td>\n",
+ " <td>2.111697</td>\n",
+ " <td>0.145864</td>\n",
+ " <td>34.104513</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>36</th>\n",
+ " <td>(srv_serror_rate)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.286440</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.277707</td>\n",
+ " <td>0.969512</td>\n",
+ " <td>2.079873</td>\n",
+ " <td>0.144186</td>\n",
+ " <td>17.510607</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>43</th>\n",
+ " <td>(dst_host_serror_rate)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.287512</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.277191</td>\n",
+ " <td>0.964103</td>\n",
+ " <td>2.068270</td>\n",
+ " <td>0.143170</td>\n",
+ " <td>14.872106</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>31</th>\n",
+ " <td>(serror_rate)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.288544</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.278184</td>\n",
+ " <td>0.964094</td>\n",
+ " <td>2.068250</td>\n",
+ " <td>0.143682</td>\n",
+ " <td>14.868307</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>56</th>\n",
+ " <td>(service_private)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.172714</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.164814</td>\n",
+ " <td>0.954263</td>\n",
+ " <td>2.047160</td>\n",
+ " <td>0.084306</td>\n",
+ " <td>11.672486</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>123</th>\n",
+ " <td>(flag_RSTR)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.019728</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.018617</td>\n",
+ " <td>0.943662</td>\n",
+ " <td>2.024417</td>\n",
+ " <td>0.009421</td>\n",
+ " <td>9.476014</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>113</th>\n",
+ " <td>(service_ecr_i)</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>0.024333</td>\n",
+ " <td>0.46614</td>\n",
+ " <td>0.022825</td>\n",
+ " <td>0.938010</td>\n",
+ " <td>2.012292</td>\n",
+ " <td>0.011482</td>\n",
+ " <td>8.612004</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " antecedents consequents antecedent support \\\n",
+ "45 (flag_S0) (class_anomaly) 0.278223 \n",
+ "44 (dst_host_srv_serror_rate) (class_anomaly) 0.281478 \n",
+ "36 (srv_serror_rate) (class_anomaly) 0.286440 \n",
+ "43 (dst_host_serror_rate) (class_anomaly) 0.287512 \n",
+ "31 (serror_rate) (class_anomaly) 0.288544 \n",
+ "56 (service_private) (class_anomaly) 0.172714 \n",
+ "123 (flag_RSTR) (class_anomaly) 0.019728 \n",
+ "113 (service_ecr_i) (class_anomaly) 0.024333 \n",
+ "\n",
+ " consequent support support confidence lift leverage conviction \n",
+ "45 0.46614 0.275048 0.988586 2.120792 0.145357 46.772805 \n",
+ "44 0.46614 0.277072 0.984346 2.111697 0.145864 34.104513 \n",
+ "36 0.46614 0.277707 0.969512 2.079873 0.144186 17.510607 \n",
+ "43 0.46614 0.277191 0.964103 2.068270 0.143170 14.872106 \n",
+ "31 0.46614 0.278184 0.964094 2.068250 0.143682 14.868307 \n",
+ "56 0.46614 0.164814 0.954263 2.047160 0.084306 11.672486 \n",
+ "123 0.46614 0.018617 0.943662 2.024417 0.009421 9.476014 \n",
+ "113 0.46614 0.022825 0.938010 2.012292 0.011482 8.612004 "
+ ]
+ },
+ "execution_count": 10,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "rules[rules['consequents'] == {'class_anomaly'}]"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 11,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>support</th>\n",
+ " <th>itemsets</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>0.814782</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0.643022</td>\n",
+ " <td>(dst_host_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0.622102</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>0.594355</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>19</th>\n",
+ " <td>0.562837</td>\n",
+ " <td>(same_srv_rate, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>0.533860</td>\n",
+ " <td>(class_normal)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>21</th>\n",
+ " <td>0.516077</td>\n",
+ " <td>(dst_host_count, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>20</th>\n",
+ " <td>0.509963</td>\n",
+ " <td>(same_srv_rate, class_normal)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>33</th>\n",
+ " <td>0.502660</td>\n",
+ " <td>(class_normal, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>0.498730</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>17</th>\n",
+ " <td>0.492339</td>\n",
+ " <td>(same_srv_rate, dst_host_same_srv_rate)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>28</th>\n",
+ " <td>0.469117</td>\n",
+ " <td>(dst_host_same_srv_rate, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>0.466140</td>\n",
+ " <td>(class_anomaly)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>18</th>\n",
+ " <td>0.460027</td>\n",
+ " <td>(same_srv_rate, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0.435773</td>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>29</th>\n",
+ " <td>0.432637</td>\n",
+ " <td>(dst_host_same_srv_rate, class_normal)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>16</th>\n",
+ " <td>0.430891</td>\n",
+ " <td>(same_srv_rate, dst_host_srv_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>23</th>\n",
+ " <td>0.426485</td>\n",
+ " <td>(dst_host_same_srv_rate, dst_host_srv_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>32</th>\n",
+ " <td>0.423984</td>\n",
+ " <td>(class_normal, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>25</th>\n",
+ " <td>0.412234</td>\n",
+ " <td>(dst_host_srv_count, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>30</th>\n",
+ " <td>0.409138</td>\n",
+ " <td>(protocol_type_tcp, flag_SF)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>26</th>\n",
+ " <td>0.401437</td>\n",
+ " <td>(dst_host_srv_count, class_normal)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>22</th>\n",
+ " <td>0.395403</td>\n",
+ " <td>(class_anomaly, dst_host_count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0.394768</td>\n",
+ " <td>(logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>12</th>\n",
+ " <td>0.394768</td>\n",
+ " <td>(protocol_type_tcp, logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>31</th>\n",
+ " <td>0.390799</td>\n",
+ " <td>(class_anomaly, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>13</th>\n",
+ " <td>0.387861</td>\n",
+ " <td>(flag_SF, logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>10</th>\n",
+ " <td>0.387702</td>\n",
+ " <td>(same_srv_rate, logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>14</th>\n",
+ " <td>0.378533</td>\n",
+ " <td>(class_normal, logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>27</th>\n",
+ " <td>0.365314</td>\n",
+ " <td>(dst_host_same_srv_rate, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0.364481</td>\n",
+ " <td>(count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>15</th>\n",
+ " <td>0.351818</td>\n",
+ " <td>(dst_host_count, count)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>11</th>\n",
+ " <td>0.337051</td>\n",
+ " <td>(dst_host_same_srv_rate, logged_in)</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>24</th>\n",
+ " <td>0.333519</td>\n",
+ " <td>(dst_host_srv_count, protocol_type_tcp)</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " support itemsets\n",
+ "6 0.814782 (protocol_type_tcp)\n",
+ "3 0.643022 (dst_host_count)\n",
+ "2 0.622102 (same_srv_rate)\n",
+ "7 0.594355 (flag_SF)\n",
+ "19 0.562837 (same_srv_rate, flag_SF)\n",
+ "9 0.533860 (class_normal)\n",
+ "21 0.516077 (dst_host_count, protocol_type_tcp)\n",
+ "20 0.509963 (same_srv_rate, class_normal)\n",
+ "33 0.502660 (class_normal, flag_SF)\n",
+ "5 0.498730 (dst_host_same_srv_rate)\n",
+ "17 0.492339 (same_srv_rate, dst_host_same_srv_rate)\n",
+ "28 0.469117 (dst_host_same_srv_rate, flag_SF)\n",
+ "8 0.466140 (class_anomaly)\n",
+ "18 0.460027 (same_srv_rate, protocol_type_tcp)\n",
+ "4 0.435773 (dst_host_srv_count)\n",
+ "29 0.432637 (dst_host_same_srv_rate, class_normal)\n",
+ "16 0.430891 (same_srv_rate, dst_host_srv_count)\n",
+ "23 0.426485 (dst_host_same_srv_rate, dst_host_srv_count)\n",
+ "32 0.423984 (class_normal, protocol_type_tcp)\n",
+ "25 0.412234 (dst_host_srv_count, flag_SF)\n",
+ "30 0.409138 (protocol_type_tcp, flag_SF)\n",
+ "26 0.401437 (dst_host_srv_count, class_normal)\n",
+ "22 0.395403 (class_anomaly, dst_host_count)\n",
+ "0 0.394768 (logged_in)\n",
+ "12 0.394768 (protocol_type_tcp, logged_in)\n",
+ "31 0.390799 (class_anomaly, protocol_type_tcp)\n",
+ "13 0.387861 (flag_SF, logged_in)\n",
+ "10 0.387702 (same_srv_rate, logged_in)\n",
+ "14 0.378533 (class_normal, logged_in)\n",
+ "27 0.365314 (dst_host_same_srv_rate, protocol_type_tcp)\n",
+ "1 0.364481 (count)\n",
+ "15 0.351818 (dst_host_count, count)\n",
+ "11 0.337051 (dst_host_same_srv_rate, logged_in)\n",
+ "24 0.333519 (dst_host_srv_count, protocol_type_tcp)"
+ ]
+ },
+ "execution_count": 11,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "frequent_itemsets = apriori ( data_train , min_support = 0.33 , use_colnames=True ,max_len =2)\n",
+ "result_desc = frequent_itemsets.sort_values(['support'],ascending =[False])\n",
+ "result_desc"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 12,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>antecedents</th>\n",
+ " <th>consequents</th>\n",
+ " <th>antecedent support</th>\n",
+ " <th>consequent support</th>\n",
+ " <th>support</th>\n",
+ " <th>confidence</th>\n",
+ " <th>lift</th>\n",
+ " <th>leverage</th>\n",
+ " <th>conviction</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>21</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.814782</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>1.000000</td>\n",
+ " <td>1.227321</td>\n",
+ " <td>0.073118</td>\n",
+ " <td>inf</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>13</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.430891</td>\n",
+ " <td>0.988796</td>\n",
+ " <td>1.589443</td>\n",
+ " <td>0.159795</td>\n",
+ " <td>33.728142</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.492339</td>\n",
+ " <td>0.987186</td>\n",
+ " <td>1.586854</td>\n",
+ " <td>0.182078</td>\n",
+ " <td>29.490107</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>23</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.387861</td>\n",
+ " <td>0.982504</td>\n",
+ " <td>1.653058</td>\n",
+ " <td>0.153229</td>\n",
+ " <td>23.184690</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>24</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.387702</td>\n",
+ " <td>0.982102</td>\n",
+ " <td>1.578682</td>\n",
+ " <td>0.142116</td>\n",
+ " <td>21.113444</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>15</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.426485</td>\n",
+ " <td>0.978685</td>\n",
+ " <td>1.962355</td>\n",
+ " <td>0.209152</td>\n",
+ " <td>23.516858</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>26</th>\n",
+ " <td>(count)</td>\n",
+ " <td>(dst_host_count)</td>\n",
+ " <td>0.364481</td>\n",
+ " <td>0.643022</td>\n",
+ " <td>0.351818</td>\n",
+ " <td>0.965258</td>\n",
+ " <td>1.501129</td>\n",
+ " <td>0.117449</td>\n",
+ " <td>10.275159</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>25</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.378533</td>\n",
+ " <td>0.958874</td>\n",
+ " <td>1.796115</td>\n",
+ " <td>0.167782</td>\n",
+ " <td>11.334383</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.509963</td>\n",
+ " <td>0.955238</td>\n",
+ " <td>1.535500</td>\n",
+ " <td>0.177848</td>\n",
+ " <td>8.442437</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.562837</td>\n",
+ " <td>0.946971</td>\n",
+ " <td>1.522212</td>\n",
+ " <td>0.193088</td>\n",
+ " <td>7.126276</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>17</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.412234</td>\n",
+ " <td>0.945983</td>\n",
+ " <td>1.591612</td>\n",
+ " <td>0.153230</td>\n",
+ " <td>7.509556</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.502660</td>\n",
+ " <td>0.941557</td>\n",
+ " <td>1.584165</td>\n",
+ " <td>0.185357</td>\n",
+ " <td>6.940859</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.469117</td>\n",
+ " <td>0.940624</td>\n",
+ " <td>1.582595</td>\n",
+ " <td>0.172694</td>\n",
+ " <td>6.831795</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>18</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.401437</td>\n",
+ " <td>0.921206</td>\n",
+ " <td>1.725557</td>\n",
+ " <td>0.168795</td>\n",
+ " <td>5.915937</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.562837</td>\n",
+ " <td>0.904735</td>\n",
+ " <td>1.522212</td>\n",
+ " <td>0.193088</td>\n",
+ " <td>4.258046</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>11</th>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.432637</td>\n",
+ " <td>0.867479</td>\n",
+ " <td>1.624918</td>\n",
+ " <td>0.166386</td>\n",
+ " <td>3.517468</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>14</th>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.426485</td>\n",
+ " <td>0.855142</td>\n",
+ " <td>1.962355</td>\n",
+ " <td>0.209152</td>\n",
+ " <td>3.895025</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>27</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.337051</td>\n",
+ " <td>0.853796</td>\n",
+ " <td>1.711941</td>\n",
+ " <td>0.140169</td>\n",
+ " <td>3.428564</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>20</th>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>(dst_host_count)</td>\n",
+ " <td>0.466140</td>\n",
+ " <td>0.643022</td>\n",
+ " <td>0.395403</td>\n",
+ " <td>0.848250</td>\n",
+ " <td>1.319163</td>\n",
+ " <td>0.095665</td>\n",
+ " <td>2.352412</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.502660</td>\n",
+ " <td>0.845722</td>\n",
+ " <td>1.584165</td>\n",
+ " <td>0.185357</td>\n",
+ " <td>3.021435</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>22</th>\n",
+ " <td>(class_anomaly)</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " <td>0.466140</td>\n",
+ " <td>0.814782</td>\n",
+ " <td>0.390799</td>\n",
+ " <td>0.838372</td>\n",
+ " <td>1.028952</td>\n",
+ " <td>0.010996</td>\n",
+ " <td>1.145948</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.509963</td>\n",
+ " <td>0.819742</td>\n",
+ " <td>1.535500</td>\n",
+ " <td>0.177848</td>\n",
+ " <td>2.585963</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>12</th>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.432637</td>\n",
+ " <td>0.810395</td>\n",
+ " <td>1.624918</td>\n",
+ " <td>0.166386</td>\n",
+ " <td>2.643758</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>(dst_host_count)</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " <td>0.643022</td>\n",
+ " <td>0.814782</td>\n",
+ " <td>0.516077</td>\n",
+ " <td>0.802580</td>\n",
+ " <td>0.985024</td>\n",
+ " <td>-0.007846</td>\n",
+ " <td>0.938192</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>16</th>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.814782</td>\n",
+ " <td>0.423984</td>\n",
+ " <td>0.794185</td>\n",
+ " <td>0.974721</td>\n",
+ " <td>-0.010996</td>\n",
+ " <td>0.899924</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.492339</td>\n",
+ " <td>0.791411</td>\n",
+ " <td>1.586854</td>\n",
+ " <td>0.182078</td>\n",
+ " <td>2.403153</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>10</th>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.469117</td>\n",
+ " <td>0.789287</td>\n",
+ " <td>1.582595</td>\n",
+ " <td>0.172694</td>\n",
+ " <td>2.378928</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>28</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(protocol_type_tcp)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.814782</td>\n",
+ " <td>0.333519</td>\n",
+ " <td>0.765349</td>\n",
+ " <td>0.939329</td>\n",
+ " <td>-0.021542</td>\n",
+ " <td>0.789332</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>19</th>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>0.533860</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.401437</td>\n",
+ " <td>0.751952</td>\n",
+ " <td>1.725557</td>\n",
+ " <td>0.168795</td>\n",
+ " <td>2.274666</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " antecedents consequents antecedent support \\\n",
+ "21 (logged_in) (protocol_type_tcp) 0.394768 \n",
+ "13 (dst_host_srv_count) (same_srv_rate) 0.435773 \n",
+ "8 (dst_host_same_srv_rate) (same_srv_rate) 0.498730 \n",
+ "23 (logged_in) (flag_SF) 0.394768 \n",
+ "24 (logged_in) (same_srv_rate) 0.394768 \n",
+ "15 (dst_host_srv_count) (dst_host_same_srv_rate) 0.435773 \n",
+ "26 (count) (dst_host_count) 0.364481 \n",
+ "25 (logged_in) (class_normal) 0.394768 \n",
+ "4 (class_normal) (same_srv_rate) 0.533860 \n",
+ "1 (flag_SF) (same_srv_rate) 0.594355 \n",
+ "17 (dst_host_srv_count) (flag_SF) 0.435773 \n",
+ "5 (class_normal) (flag_SF) 0.533860 \n",
+ "9 (dst_host_same_srv_rate) (flag_SF) 0.498730 \n",
+ "18 (dst_host_srv_count) (class_normal) 0.435773 \n",
+ "0 (same_srv_rate) (flag_SF) 0.622102 \n",
+ "11 (dst_host_same_srv_rate) (class_normal) 0.498730 \n",
+ "14 (dst_host_same_srv_rate) (dst_host_srv_count) 0.498730 \n",
+ "27 (logged_in) (dst_host_same_srv_rate) 0.394768 \n",
+ "20 (class_anomaly) (dst_host_count) 0.466140 \n",
+ "6 (flag_SF) (class_normal) 0.594355 \n",
+ "22 (class_anomaly) (protocol_type_tcp) 0.466140 \n",
+ "3 (same_srv_rate) (class_normal) 0.622102 \n",
+ "12 (class_normal) (dst_host_same_srv_rate) 0.533860 \n",
+ "2 (dst_host_count) (protocol_type_tcp) 0.643022 \n",
+ "16 (class_normal) (protocol_type_tcp) 0.533860 \n",
+ "7 (same_srv_rate) (dst_host_same_srv_rate) 0.622102 \n",
+ "10 (flag_SF) (dst_host_same_srv_rate) 0.594355 \n",
+ "28 (dst_host_srv_count) (protocol_type_tcp) 0.435773 \n",
+ "19 (class_normal) (dst_host_srv_count) 0.533860 \n",
+ "\n",
+ " consequent support support confidence lift leverage conviction \n",
+ "21 0.814782 0.394768 1.000000 1.227321 0.073118 inf \n",
+ "13 0.622102 0.430891 0.988796 1.589443 0.159795 33.728142 \n",
+ "8 0.622102 0.492339 0.987186 1.586854 0.182078 29.490107 \n",
+ "23 0.594355 0.387861 0.982504 1.653058 0.153229 23.184690 \n",
+ "24 0.622102 0.387702 0.982102 1.578682 0.142116 21.113444 \n",
+ "15 0.498730 0.426485 0.978685 1.962355 0.209152 23.516858 \n",
+ "26 0.643022 0.351818 0.965258 1.501129 0.117449 10.275159 \n",
+ "25 0.533860 0.378533 0.958874 1.796115 0.167782 11.334383 \n",
+ "4 0.622102 0.509963 0.955238 1.535500 0.177848 8.442437 \n",
+ "1 0.622102 0.562837 0.946971 1.522212 0.193088 7.126276 \n",
+ "17 0.594355 0.412234 0.945983 1.591612 0.153230 7.509556 \n",
+ "5 0.594355 0.502660 0.941557 1.584165 0.185357 6.940859 \n",
+ "9 0.594355 0.469117 0.940624 1.582595 0.172694 6.831795 \n",
+ "18 0.533860 0.401437 0.921206 1.725557 0.168795 5.915937 \n",
+ "0 0.594355 0.562837 0.904735 1.522212 0.193088 4.258046 \n",
+ "11 0.533860 0.432637 0.867479 1.624918 0.166386 3.517468 \n",
+ "14 0.435773 0.426485 0.855142 1.962355 0.209152 3.895025 \n",
+ "27 0.498730 0.337051 0.853796 1.711941 0.140169 3.428564 \n",
+ "20 0.643022 0.395403 0.848250 1.319163 0.095665 2.352412 \n",
+ "6 0.533860 0.502660 0.845722 1.584165 0.185357 3.021435 \n",
+ "22 0.814782 0.390799 0.838372 1.028952 0.010996 1.145948 \n",
+ "3 0.533860 0.509963 0.819742 1.535500 0.177848 2.585963 \n",
+ "12 0.498730 0.432637 0.810395 1.624918 0.166386 2.643758 \n",
+ "2 0.814782 0.516077 0.802580 0.985024 -0.007846 0.938192 \n",
+ "16 0.814782 0.423984 0.794185 0.974721 -0.010996 0.899924 \n",
+ "7 0.498730 0.492339 0.791411 1.586854 0.182078 2.403153 \n",
+ "10 0.498730 0.469117 0.789287 1.582595 0.172694 2.378928 \n",
+ "28 0.814782 0.333519 0.765349 0.939329 -0.021542 0.789332 \n",
+ "19 0.435773 0.401437 0.751952 1.725557 0.168795 2.274666 "
+ ]
+ },
+ "execution_count": 12,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "rules = association_rules(result_desc , metric = \"confidence\" , min_threshold = 0.75)\n",
+ "rules = rules.sort_values(['confidence','lift'], ascending=[False , False])\n",
+ "rules"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 13,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>antecedents</th>\n",
+ " <th>consequents</th>\n",
+ " <th>antecedent support</th>\n",
+ " <th>consequent support</th>\n",
+ " <th>support</th>\n",
+ " <th>confidence</th>\n",
+ " <th>lift</th>\n",
+ " <th>leverage</th>\n",
+ " <th>conviction</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>25</th>\n",
+ " <td>(logged_in)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.394768</td>\n",
+ " <td>0.53386</td>\n",
+ " <td>0.378533</td>\n",
+ " <td>0.958874</td>\n",
+ " <td>1.796115</td>\n",
+ " <td>0.167782</td>\n",
+ " <td>11.334383</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>18</th>\n",
+ " <td>(dst_host_srv_count)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.435773</td>\n",
+ " <td>0.53386</td>\n",
+ " <td>0.401437</td>\n",
+ " <td>0.921206</td>\n",
+ " <td>1.725557</td>\n",
+ " <td>0.168795</td>\n",
+ " <td>5.915937</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>11</th>\n",
+ " <td>(dst_host_same_srv_rate)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.498730</td>\n",
+ " <td>0.53386</td>\n",
+ " <td>0.432637</td>\n",
+ " <td>0.867479</td>\n",
+ " <td>1.624918</td>\n",
+ " <td>0.166386</td>\n",
+ " <td>3.517468</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>(flag_SF)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.594355</td>\n",
+ " <td>0.53386</td>\n",
+ " <td>0.502660</td>\n",
+ " <td>0.845722</td>\n",
+ " <td>1.584165</td>\n",
+ " <td>0.185357</td>\n",
+ " <td>3.021435</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>(same_srv_rate)</td>\n",
+ " <td>(class_normal)</td>\n",
+ " <td>0.622102</td>\n",
+ " <td>0.53386</td>\n",
+ " <td>0.509963</td>\n",
+ " <td>0.819742</td>\n",
+ " <td>1.535500</td>\n",
+ " <td>0.177848</td>\n",
+ " <td>2.585963</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " antecedents consequents antecedent support \\\n",
+ "25 (logged_in) (class_normal) 0.394768 \n",
+ "18 (dst_host_srv_count) (class_normal) 0.435773 \n",
+ "11 (dst_host_same_srv_rate) (class_normal) 0.498730 \n",
+ "6 (flag_SF) (class_normal) 0.594355 \n",
+ "3 (same_srv_rate) (class_normal) 0.622102 \n",
+ "\n",
+ " consequent support support confidence lift leverage conviction \n",
+ "25 0.53386 0.378533 0.958874 1.796115 0.167782 11.334383 \n",
+ "18 0.53386 0.401437 0.921206 1.725557 0.168795 5.915937 \n",
+ "11 0.53386 0.432637 0.867479 1.624918 0.166386 3.517468 \n",
+ "6 0.53386 0.502660 0.845722 1.584165 0.185357 3.021435 \n",
+ "3 0.53386 0.509963 0.819742 1.535500 0.177848 2.585963 "
+ ]
+ },
+ "execution_count": 13,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "rules[rules['consequents'] == {'class_normal'}]"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": null,
+ "metadata": {},
+ "outputs": [],
+ "source": []
+ }
+ ],
+ "metadata": {
+ "interpreter": {
+ "hash": "201ef9045d1e569690d4ef19acedf47659d611d6c0ceca4c00974770fb24d6e6"
+ },
+ "kernelspec": {
+ "display_name": "Python 3.8.5 64-bit ('base': conda)",
+ "name": "python3"
+ },
+ "language_info": {
+ "codemirror_mode": {
+ "name": "ipython",
+ "version": 3
+ },
+ "file_extension": ".py",
+ "mimetype": "text/x-python",
+ "name": "python",
+ "nbconvert_exporter": "python",
+ "pygments_lexer": "ipython3",
+ "version": "3.8.5"
+ },
+ "orig_nbformat": 4
+ },
+ "nbformat": 4,
+ "nbformat_minor": 2
+}
diff --git a/experiment/decision tree classifier/DecisionTree.ipynb b/experiment/decision tree classifier/DecisionTree.ipynb
new file mode 100644
index 0000000000000000000000000000000000000000..256526c612ce8d2bc9ac6d90c2dd4d9870da0925
--- /dev/null
+++ b/experiment/decision tree classifier/DecisionTree.ipynb
@@ -0,0 +1,1097 @@
+{
+ "cells": [
+ {
+ "cell_type": "code",
+ "execution_count": 1,
+ "metadata": {},
+ "outputs": [
+ {
+ "name": "stdout",
+ "output_type": "stream",
+ "text": [
+ "<class 'pandas.core.frame.DataFrame'>\n",
+ "RangeIndex: 25192 entries, 0 to 25191\n",
+ "Data columns (total 42 columns):\n",
+ " # Column Non-Null Count Dtype \n",
+ "--- ------ -------------- ----- \n",
+ " 0 duration 25192 non-null int64 \n",
+ " 1 protocol_type 25192 non-null object \n",
+ " 2 service 25192 non-null object \n",
+ " 3 flag 25192 non-null object \n",
+ " 4 src_bytes 25192 non-null int64 \n",
+ " 5 dst_bytes 25192 non-null int64 \n",
+ " 6 land 25192 non-null int64 \n",
+ " 7 wrong_fragment 25192 non-null int64 \n",
+ " 8 urgent 25192 non-null int64 \n",
+ " 9 hot 25192 non-null int64 \n",
+ " 10 num_failed_logins 25192 non-null int64 \n",
+ " 11 logged_in 25192 non-null int64 \n",
+ " 12 num_compromised 25192 non-null int64 \n",
+ " 13 root_shell 25192 non-null int64 \n",
+ " 14 su_attempted 25192 non-null int64 \n",
+ " 15 num_root 25192 non-null int64 \n",
+ " 16 num_file_creations 25192 non-null int64 \n",
+ " 17 num_shells 25192 non-null int64 \n",
+ " 18 num_access_files 25192 non-null int64 \n",
+ " 19 num_outbound_cmds 25192 non-null int64 \n",
+ " 20 is_host_login 25192 non-null int64 \n",
+ " 21 is_guest_login 25192 non-null int64 \n",
+ " 22 count 25192 non-null int64 \n",
+ " 23 srv_count 25192 non-null int64 \n",
+ " 24 serror_rate 25192 non-null float64\n",
+ " 25 srv_serror_rate 25192 non-null float64\n",
+ " 26 rerror_rate 25192 non-null float64\n",
+ " 27 srv_rerror_rate 25192 non-null float64\n",
+ " 28 same_srv_rate 25192 non-null float64\n",
+ " 29 diff_srv_rate 25192 non-null float64\n",
+ " 30 srv_diff_host_rate 25192 non-null float64\n",
+ " 31 dst_host_count 25192 non-null int64 \n",
+ " 32 dst_host_srv_count 25192 non-null int64 \n",
+ " 33 dst_host_same_srv_rate 25192 non-null float64\n",
+ " 34 dst_host_diff_srv_rate 25192 non-null float64\n",
+ " 35 dst_host_same_src_port_rate 25192 non-null float64\n",
+ " 36 dst_host_srv_diff_host_rate 25192 non-null float64\n",
+ " 37 dst_host_serror_rate 25192 non-null float64\n",
+ " 38 dst_host_srv_serror_rate 25192 non-null float64\n",
+ " 39 dst_host_rerror_rate 25192 non-null float64\n",
+ " 40 dst_host_srv_rerror_rate 25192 non-null float64\n",
+ " 41 class 25192 non-null object \n",
+ "dtypes: float64(15), int64(23), object(4)\n",
+ "memory usage: 8.1+ MB\n"
+ ]
+ }
+ ],
+ "source": [
+ "from sklearn import tree\n",
+ "import numpy as np \n",
+ "import pandas as pd\n",
+ "\n",
+ "df_train = pd.read_csv(\"../../dataset/Train_data.csv\")\n",
+ "\n",
+ "df_train.info()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 2,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>service_tim_i</th>\n",
+ " <th>service_time</th>\n",
+ " <th>service_urh_i</th>\n",
+ " <th>service_urp_i</th>\n",
+ " <th>service_uucp</th>\n",
+ " <th>service_uucp_path</th>\n",
+ " <th>service_vmnet</th>\n",
+ " <th>service_whois</th>\n",
+ " <th>class_anomaly</th>\n",
+ " <th>class_normal</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " <td>491</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " <td>146</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " <td>232</td>\n",
+ " <td>8153</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " <td>199</td>\n",
+ " <td>420</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " <td>0</td>\n",
+ " <td>...</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>0</td>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>5 rows × 120 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent hot \\\n",
+ "0 0 491 0 0 0 0 0 \n",
+ "1 0 146 0 0 0 0 0 \n",
+ "2 0 0 0 0 0 0 0 \n",
+ "3 0 232 8153 0 0 0 0 \n",
+ "4 0 199 420 0 0 0 0 \n",
+ "\n",
+ " num_failed_logins logged_in num_compromised ... service_tim_i \\\n",
+ "0 0 0 0 ... 0 \n",
+ "1 0 0 0 ... 0 \n",
+ "2 0 0 0 ... 0 \n",
+ "3 0 1 0 ... 0 \n",
+ "4 0 1 0 ... 0 \n",
+ "\n",
+ " service_time service_urh_i service_urp_i service_uucp \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 0 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " service_uucp_path service_vmnet service_whois class_anomaly \\\n",
+ "0 0 0 0 0 \n",
+ "1 0 0 0 0 \n",
+ "2 0 0 0 1 \n",
+ "3 0 0 0 0 \n",
+ "4 0 0 0 0 \n",
+ "\n",
+ " class_normal \n",
+ "0 1 \n",
+ "1 1 \n",
+ "2 0 \n",
+ "3 1 \n",
+ "4 1 \n",
+ "\n",
+ "[5 rows x 120 columns]"
+ ]
+ },
+ "execution_count": 2,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "data_train = pd.get_dummies(df_train, columns = [\"protocol_type\", \"flag\", \"service\", \"class\"],) # object형 데이터를 가변수화\n",
+ "\n",
+ "data_train.head()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 3,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>dst_host_count</th>\n",
+ " <th>dst_host_srv_count</th>\n",
+ " <th>dst_host_same_srv_rate</th>\n",
+ " <th>dst_host_diff_srv_rate</th>\n",
+ " <th>dst_host_same_src_port_rate</th>\n",
+ " <th>dst_host_srv_diff_host_rate</th>\n",
+ " <th>dst_host_serror_rate</th>\n",
+ " <th>dst_host_srv_serror_rate</th>\n",
+ " <th>dst_host_rerror_rate</th>\n",
+ " <th>dst_host_srv_rerror_rate</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009889</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-0.328634</td>\n",
+ " <td>-0.813985</td>\n",
+ " <td>-0.779157</td>\n",
+ " <td>-0.280673</td>\n",
+ " <td>0.073120</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.221668</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010032</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-1.030895</td>\n",
+ " <td>-1.157831</td>\n",
+ " <td>2.764403</td>\n",
+ " <td>2.375620</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.804947</td>\n",
+ " <td>-0.935081</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009996</td>\n",
+ " <td>0.052473</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-1.540854</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.380894</td>\n",
+ " <td>0.073759</td>\n",
+ " <td>-0.574435</td>\n",
+ " <td>-0.604947</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.342768</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010010</td>\n",
+ " <td>-0.034582</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.868212</td>\n",
+ " <td>-1.001906</td>\n",
+ " <td>-0.066984</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>2.884296</td>\n",
+ " <td>2.777041</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.958592</td>\n",
+ " <td>-1.068731</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.904364</td>\n",
+ " <td>-1.024181</td>\n",
+ " <td>-0.066984</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.832060</td>\n",
+ " <td>-0.957356</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.922440</td>\n",
+ " <td>-1.046456</td>\n",
+ " <td>-0.120406</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>10 rows × 38 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent \\\n",
+ "0 -0.113551 -0.009889 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "1 -0.113551 -0.010032 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "2 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "3 -0.113551 -0.009996 0.052473 -0.00891 -0.091223 -0.006301 \n",
+ "4 -0.113551 -0.010010 -0.034582 -0.00891 -0.091223 -0.006301 \n",
+ "5 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "6 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "7 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "8 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "9 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "\n",
+ " hot num_failed_logins logged_in num_compromised ... \\\n",
+ "0 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "1 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "2 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "3 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "4 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "5 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "6 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "7 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "8 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "9 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "\n",
+ " dst_host_count dst_host_srv_count dst_host_same_srv_rate \\\n",
+ "0 -0.328634 -0.813985 -0.779157 \n",
+ "1 0.732059 -1.030895 -1.157831 \n",
+ "2 0.732059 -0.804947 -0.935081 \n",
+ "3 -1.540854 1.264742 1.069663 \n",
+ "4 0.732059 1.264742 1.069663 \n",
+ "5 0.732059 -0.868212 -1.001906 \n",
+ "6 0.732059 -0.958592 -1.068731 \n",
+ "7 0.732059 -0.904364 -1.024181 \n",
+ "8 0.732059 -0.832060 -0.957356 \n",
+ "9 0.732059 -0.922440 -1.046456 \n",
+ "\n",
+ " dst_host_diff_srv_rate dst_host_same_src_port_rate \\\n",
+ "0 -0.280673 0.073120 \n",
+ "1 2.764403 2.375620 \n",
+ "2 -0.173828 -0.478183 \n",
+ "3 -0.440940 -0.380894 \n",
+ "4 -0.440940 -0.478183 \n",
+ "5 -0.066984 -0.478183 \n",
+ "6 -0.173828 -0.478183 \n",
+ "7 -0.066984 -0.478183 \n",
+ "8 -0.173828 -0.478183 \n",
+ "9 -0.120406 -0.478183 \n",
+ "\n",
+ " dst_host_srv_diff_host_rate dst_host_serror_rate \\\n",
+ "0 -0.287993 -0.641804 \n",
+ "1 -0.287993 -0.641804 \n",
+ "2 -0.287993 1.603834 \n",
+ "3 0.073759 -0.574435 \n",
+ "4 -0.287993 -0.641804 \n",
+ "5 -0.287993 -0.641804 \n",
+ "6 -0.287993 1.603834 \n",
+ "7 -0.287993 1.603834 \n",
+ "8 -0.287993 1.603834 \n",
+ "9 -0.287993 1.603834 \n",
+ "\n",
+ " dst_host_srv_serror_rate dst_host_rerror_rate dst_host_srv_rerror_rate \n",
+ "0 -0.627365 -0.221668 -0.374281 \n",
+ "1 -0.627365 -0.385140 -0.374281 \n",
+ "2 1.614454 -0.385140 -0.374281 \n",
+ "3 -0.604947 -0.385140 -0.342768 \n",
+ "4 -0.627365 -0.385140 -0.374281 \n",
+ "5 -0.627365 2.884296 2.777041 \n",
+ "6 1.614454 -0.385140 -0.374281 \n",
+ "7 1.614454 -0.385140 -0.374281 \n",
+ "8 1.614454 -0.385140 -0.374281 \n",
+ "9 1.614454 -0.385140 -0.374281 \n",
+ "\n",
+ "[10 rows x 38 columns]"
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "from sklearn.preprocessing import StandardScaler\n",
+ "scaler = StandardScaler()\n",
+ "\n",
+ "# extract numerical attributes and scale it to have zero mean and unit variance \n",
+ "cols = data_train.select_dtypes(include=['float64','int64']).columns\n",
+ "sc_train = scaler.fit_transform(data_train.select_dtypes(include=['float64','int64']))\n",
+ "\n",
+ "\n",
+ "# turn the result back to a dataframe\n",
+ "sc_traindf = pd.DataFrame(sc_train, columns = cols)\n",
+ "sc_traindf.head(n=10)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 4,
+ "metadata": {},
+ "outputs": [],
+ "source": [
+ "columns = data_train.columns\n",
+ "colname = ['duration', 'src_bytes', 'dst_bytes', 'land', 'wrong_fragment',\n",
+ " 'urgent', 'hot', 'num_failed_logins', 'logged_in', 'num_compromised',\n",
+ " 'root_shell', 'su_attempted', 'num_root', 'num_file_creations',\n",
+ " 'num_shells', 'num_access_files', 'num_outbound_cmds', 'is_host_login',\n",
+ " 'is_guest_login', 'count', 'srv_count', 'serror_rate',\n",
+ " 'srv_serror_rate', 'rerror_rate', 'srv_rerror_rate', 'same_srv_rate',\n",
+ " 'diff_srv_rate', 'srv_diff_host_rate', 'dst_host_count',\n",
+ " 'dst_host_srv_count', 'dst_host_same_srv_rate',\n",
+ " 'dst_host_diff_srv_rate', 'dst_host_same_src_port_rate',\n",
+ " 'dst_host_srv_diff_host_rate', 'dst_host_serror_rate',\n",
+ " 'dst_host_srv_serror_rate', 'dst_host_rerror_rate',\n",
+ " 'dst_host_srv_rerror_rate']\n",
+ "for col in columns :\n",
+ " for j in colname :\n",
+ " if col == j :\n",
+ " data_train[col] = sc_traindf[col]\n",
+ "\n",
+ "data_x = data_train[colname]\n",
+ "data_y = data_train[[\"class_anomaly\"]]"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 5,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>duration</th>\n",
+ " <th>src_bytes</th>\n",
+ " <th>dst_bytes</th>\n",
+ " <th>land</th>\n",
+ " <th>wrong_fragment</th>\n",
+ " <th>urgent</th>\n",
+ " <th>hot</th>\n",
+ " <th>num_failed_logins</th>\n",
+ " <th>logged_in</th>\n",
+ " <th>num_compromised</th>\n",
+ " <th>...</th>\n",
+ " <th>dst_host_count</th>\n",
+ " <th>dst_host_srv_count</th>\n",
+ " <th>dst_host_same_srv_rate</th>\n",
+ " <th>dst_host_diff_srv_rate</th>\n",
+ " <th>dst_host_same_src_port_rate</th>\n",
+ " <th>dst_host_srv_diff_host_rate</th>\n",
+ " <th>dst_host_serror_rate</th>\n",
+ " <th>dst_host_srv_serror_rate</th>\n",
+ " <th>dst_host_rerror_rate</th>\n",
+ " <th>dst_host_srv_rerror_rate</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009889</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-0.328634</td>\n",
+ " <td>-0.813985</td>\n",
+ " <td>-0.779157</td>\n",
+ " <td>-0.280673</td>\n",
+ " <td>0.073120</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.221668</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010032</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-1.030895</td>\n",
+ " <td>-1.157831</td>\n",
+ " <td>2.764403</td>\n",
+ " <td>2.375620</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010093</td>\n",
+ " <td>-0.039310</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>-0.807626</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>-0.804947</td>\n",
+ " <td>-0.935081</td>\n",
+ " <td>-0.173828</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>1.603834</td>\n",
+ " <td>1.614454</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.009996</td>\n",
+ " <td>0.052473</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>-1.540854</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.380894</td>\n",
+ " <td>0.073759</td>\n",
+ " <td>-0.574435</td>\n",
+ " <td>-0.604947</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.342768</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>-0.113551</td>\n",
+ " <td>-0.010010</td>\n",
+ " <td>-0.034582</td>\n",
+ " <td>-0.00891</td>\n",
+ " <td>-0.091223</td>\n",
+ " <td>-0.006301</td>\n",
+ " <td>-0.091933</td>\n",
+ " <td>-0.02622</td>\n",
+ " <td>1.238197</td>\n",
+ " <td>-0.021873</td>\n",
+ " <td>...</td>\n",
+ " <td>0.732059</td>\n",
+ " <td>1.264742</td>\n",
+ " <td>1.069663</td>\n",
+ " <td>-0.440940</td>\n",
+ " <td>-0.478183</td>\n",
+ " <td>-0.287993</td>\n",
+ " <td>-0.641804</td>\n",
+ " <td>-0.627365</td>\n",
+ " <td>-0.385140</td>\n",
+ " <td>-0.374281</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "<p>5 rows × 38 columns</p>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " duration src_bytes dst_bytes land wrong_fragment urgent \\\n",
+ "0 -0.113551 -0.009889 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "1 -0.113551 -0.010032 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "2 -0.113551 -0.010093 -0.039310 -0.00891 -0.091223 -0.006301 \n",
+ "3 -0.113551 -0.009996 0.052473 -0.00891 -0.091223 -0.006301 \n",
+ "4 -0.113551 -0.010010 -0.034582 -0.00891 -0.091223 -0.006301 \n",
+ "\n",
+ " hot num_failed_logins logged_in num_compromised ... \\\n",
+ "0 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "1 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "2 -0.091933 -0.02622 -0.807626 -0.021873 ... \n",
+ "3 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "4 -0.091933 -0.02622 1.238197 -0.021873 ... \n",
+ "\n",
+ " dst_host_count dst_host_srv_count dst_host_same_srv_rate \\\n",
+ "0 -0.328634 -0.813985 -0.779157 \n",
+ "1 0.732059 -1.030895 -1.157831 \n",
+ "2 0.732059 -0.804947 -0.935081 \n",
+ "3 -1.540854 1.264742 1.069663 \n",
+ "4 0.732059 1.264742 1.069663 \n",
+ "\n",
+ " dst_host_diff_srv_rate dst_host_same_src_port_rate \\\n",
+ "0 -0.280673 0.073120 \n",
+ "1 2.764403 2.375620 \n",
+ "2 -0.173828 -0.478183 \n",
+ "3 -0.440940 -0.380894 \n",
+ "4 -0.440940 -0.478183 \n",
+ "\n",
+ " dst_host_srv_diff_host_rate dst_host_serror_rate \\\n",
+ "0 -0.287993 -0.641804 \n",
+ "1 -0.287993 -0.641804 \n",
+ "2 -0.287993 1.603834 \n",
+ "3 0.073759 -0.574435 \n",
+ "4 -0.287993 -0.641804 \n",
+ "\n",
+ " dst_host_srv_serror_rate dst_host_rerror_rate dst_host_srv_rerror_rate \n",
+ "0 -0.627365 -0.221668 -0.374281 \n",
+ "1 -0.627365 -0.385140 -0.374281 \n",
+ "2 1.614454 -0.385140 -0.374281 \n",
+ "3 -0.604947 -0.385140 -0.342768 \n",
+ "4 -0.627365 -0.385140 -0.374281 \n",
+ "\n",
+ "[5 rows x 38 columns]"
+ ]
+ },
+ "execution_count": 5,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "data_x.head()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 6,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>class_anomaly</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>1</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>0</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " class_anomaly\n",
+ "0 0\n",
+ "1 0\n",
+ "2 1\n",
+ "3 0\n",
+ "4 0"
+ ]
+ },
+ "execution_count": 6,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "data_y.head()"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 7,
+ "metadata": {},
+ "outputs": [],
+ "source": [
+ "clf = tree.DecisionTreeClassifier()\n",
+ "clf = clf.fit(data_x, data_y)"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": 11,
+ "metadata": {},
+ "outputs": [
+ {
+ "data": {
+ "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\n -->\n<!-- Title: Tree Pages: 1 -->\n<svg width=\"7021pt\" height=\"2099pt\"\n viewBox=\"0.00 0.00 7021.00 2099.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 2095)\">\n<title>Tree</title>\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-2095 7017,-2095 7017,4 -4,4\"/>\n<!-- 0 -->\n<g id=\"node1\" class=\"node\"><title>0</title>\n<path fill=\"#fcefe6\" stroke=\"black\" d=\"M4909,-2091C4909,-2091 4770,-2091 4770,-2091 4764,-2091 4758,-2085 4758,-2079 4758,-2079 4758,-2020 4758,-2020 4758,-2014 4764,-2008 4770,-2008 4770,-2008 4909,-2008 4909,-2008 4915,-2008 4921,-2014 4921,-2020 4921,-2020 4921,-2079 4921,-2079 4921,-2085 4915,-2091 4909,-2091\"/>\n<text text-anchor=\"start\" x=\"4784\" y=\"-2075.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"4802\" y=\"-2060.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.498</text>\n<text text-anchor=\"start\" x=\"4783.5\" y=\"-2045.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25192</text>\n<text text-anchor=\"start\" x=\"4766\" y=\"-2030.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13449, 11743]</text>\n<text text-anchor=\"start\" x=\"4810.5\" y=\"-2015.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 1 -->\n<g id=\"node2\" class=\"node\"><title>1</title>\n<path fill=\"#4aa6e7\" stroke=\"black\" d=\"M4693,-1972C4693,-1972 4524,-1972 4524,-1972 4518,-1972 4512,-1966 4512,-1960 4512,-1960 4512,-1901 4512,-1901 4512,-1895 4518,-1889 4524,-1889 4524,-1889 4693,-1889 4693,-1889 4699,-1889 4705,-1895 4705,-1901 4705,-1901 4705,-1960 4705,-1960 4705,-1966 4699,-1972 4693,-1972\"/>\n<text text-anchor=\"start\" x=\"4520\" y=\"-1956.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 0.844</text>\n<text text-anchor=\"start\" x=\"4571\" y=\"-1941.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.147</text>\n<text text-anchor=\"start\" x=\"4552.5\" y=\"-1926.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11644</text>\n<text text-anchor=\"start\" x=\"4543.5\" y=\"-1911.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [932, 10712]</text>\n<text text-anchor=\"start\" x=\"4579.5\" y=\"-1896.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 0->1 -->\n<g id=\"edge1\" class=\"edge\"><title>0->1</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4759.36,-2007.91C4739.38,-1997.79 4717.84,-1986.88 4697.46,-1976.56\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4699.01,-1973.42 4688.5,-1972.02 4695.84,-1979.66 4699.01,-1973.42\"/>\n<text text-anchor=\"middle\" x=\"4696.29\" y=\"-1992.08\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\n</g>\n<!-- 116 -->\n<g id=\"node117\" class=\"node\"><title>116</title>\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M5905,-1972C5905,-1972 5774,-1972 5774,-1972 5768,-1972 5762,-1966 5762,-1960 5762,-1960 5762,-1901 5762,-1901 5762,-1895 5768,-1889 5774,-1889 5774,-1889 5905,-1889 5905,-1889 5911,-1889 5917,-1895 5917,-1901 5917,-1901 5917,-1960 5917,-1960 5917,-1966 5911,-1972 5905,-1972\"/>\n<text text-anchor=\"start\" x=\"5782.5\" y=\"-1956.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 4.185</text>\n<text text-anchor=\"start\" x=\"5802\" y=\"-1941.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.141</text>\n<text text-anchor=\"start\" x=\"5783.5\" y=\"-1926.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13548</text>\n<text text-anchor=\"start\" x=\"5770\" y=\"-1911.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12517, 1031]</text>\n<text text-anchor=\"start\" x=\"5810.5\" y=\"-1896.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 0->116 -->\n<g id=\"edge116\" class=\"edge\"><title>0->116</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4921.33,-2038.93C5107.27,-2017.17 5560.22,-1964.18 5751.72,-1941.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5752.22,-1945.24 5761.74,-1940.6 5751.4,-1938.28 5752.22,-1945.24\"/>\n<text text-anchor=\"middle\" x=\"5746.24\" y=\"-1956.51\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\n</g>\n<!-- 2 -->\n<g id=\"node3\" class=\"node\"><title>2</title>\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M3990.5,-1853C3990.5,-1853 3868.5,-1853 3868.5,-1853 3862.5,-1853 3856.5,-1847 3856.5,-1841 3856.5,-1841 3856.5,-1782 3856.5,-1782 3856.5,-1776 3862.5,-1770 3868.5,-1770 3868.5,-1770 3990.5,-1770 3990.5,-1770 3996.5,-1770 4002.5,-1776 4002.5,-1782 4002.5,-1782 4002.5,-1841 4002.5,-1841 4002.5,-1847 3996.5,-1853 3990.5,-1853\"/>\n<text text-anchor=\"start\" x=\"3870\" y=\"-1837.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.039</text>\n<text text-anchor=\"start\" x=\"3892\" y=\"-1822.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.092</text>\n<text text-anchor=\"start\" x=\"3873.5\" y=\"-1807.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11157</text>\n<text text-anchor=\"start\" x=\"3864.5\" y=\"-1792.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [542, 10615]</text>\n<text text-anchor=\"start\" x=\"3900.5\" y=\"-1777.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 1->2 -->\n<g id=\"edge2\" class=\"edge\"><title>1->2</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4511.94,-1912.86C4378.26,-1889.83 4139.05,-1848.61 4012.8,-1826.85\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4013.25,-1823.38 4002.8,-1825.13 4012.06,-1830.28 4013.25,-1823.38\"/>\n</g>\n<!-- 111 -->\n<g id=\"node112\" class=\"node\"><title>111</title>\n<path fill=\"#eba06a\" stroke=\"black\" d=\"M4660,-1853C4660,-1853 4557,-1853 4557,-1853 4551,-1853 4545,-1847 4545,-1841 4545,-1841 4545,-1782 4545,-1782 4545,-1776 4551,-1770 4557,-1770 4557,-1770 4660,-1770 4660,-1770 4666,-1770 4672,-1776 4672,-1782 4672,-1782 4672,-1841 4672,-1841 4672,-1847 4666,-1853 4660,-1853\"/>\n<text text-anchor=\"start\" x=\"4553\" y=\"-1837.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"4571\" y=\"-1822.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.319</text>\n<text text-anchor=\"start\" x=\"4561\" y=\"-1807.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 487</text>\n<text text-anchor=\"start\" x=\"4555.5\" y=\"-1792.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [390, 97]</text>\n<text text-anchor=\"start\" x=\"4579.5\" y=\"-1777.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 1->111 -->\n<g id=\"edge111\" class=\"edge\"><title>1->111</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4608.5,-1888.91C4608.5,-1880.65 4608.5,-1871.86 4608.5,-1863.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4612,-1863.02 4608.5,-1853.02 4605,-1863.02 4612,-1863.02\"/>\n</g>\n<!-- 3 -->\n<g id=\"node4\" class=\"node\"><title>3</title>\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M3213.5,-1734C3213.5,-1734 3091.5,-1734 3091.5,-1734 3085.5,-1734 3079.5,-1728 3079.5,-1722 3079.5,-1722 3079.5,-1663 3079.5,-1663 3079.5,-1657 3085.5,-1651 3091.5,-1651 3091.5,-1651 3213.5,-1651 3213.5,-1651 3219.5,-1651 3225.5,-1657 3225.5,-1663 3225.5,-1663 3225.5,-1722 3225.5,-1722 3225.5,-1728 3219.5,-1734 3213.5,-1734\"/>\n<text text-anchor=\"start\" x=\"3095\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.215</text>\n<text text-anchor=\"start\" x=\"3115\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.066</text>\n<text text-anchor=\"start\" x=\"3096.5\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10943</text>\n<text text-anchor=\"start\" x=\"3087.5\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [371, 10572]</text>\n<text text-anchor=\"start\" x=\"3123.5\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 2->3 -->\n<g id=\"edge3\" class=\"edge\"><title>2->3</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3856.4,-1799.49C3711.55,-1777.68 3388.87,-1729.09 3235.95,-1706.07\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3236.1,-1702.55 3225.69,-1704.52 3235.05,-1709.47 3236.1,-1702.55\"/>\n</g>\n<!-- 92 -->\n<g id=\"node93\" class=\"node\"><title>92</title>\n<path fill=\"#eca16b\" stroke=\"black\" d=\"M4016.5,-1734C4016.5,-1734 3842.5,-1734 3842.5,-1734 3836.5,-1734 3830.5,-1728 3830.5,-1722 3830.5,-1722 3830.5,-1663 3830.5,-1663 3830.5,-1657 3836.5,-1651 3842.5,-1651 3842.5,-1651 4016.5,-1651 4016.5,-1651 4022.5,-1651 4028.5,-1657 4028.5,-1663 4028.5,-1663 4028.5,-1722 4028.5,-1722 4028.5,-1728 4022.5,-1734 4016.5,-1734\"/>\n<text text-anchor=\"start\" x=\"3838.5\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.089</text>\n<text text-anchor=\"start\" x=\"3892\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.321</text>\n<text text-anchor=\"start\" x=\"3882\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 214</text>\n<text text-anchor=\"start\" x=\"3876.5\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [171, 43]</text>\n<text text-anchor=\"start\" x=\"3900.5\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 2->92 -->\n<g id=\"edge92\" class=\"edge\"><title>2->92</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3929.5,-1769.91C3929.5,-1761.65 3929.5,-1752.86 3929.5,-1744.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3933,-1744.02 3929.5,-1734.02 3926,-1744.02 3933,-1744.02\"/>\n</g>\n<!-- 4 -->\n<g id=\"node5\" class=\"node\"><title>4</title>\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M2688.5,-1615C2688.5,-1615 2482.5,-1615 2482.5,-1615 2476.5,-1615 2470.5,-1609 2470.5,-1603 2470.5,-1603 2470.5,-1544 2470.5,-1544 2470.5,-1538 2476.5,-1532 2482.5,-1532 2482.5,-1532 2688.5,-1532 2688.5,-1532 2694.5,-1532 2700.5,-1538 2700.5,-1544 2700.5,-1544 2700.5,-1603 2700.5,-1603 2700.5,-1609 2694.5,-1615 2688.5,-1615\"/>\n<text text-anchor=\"start\" x=\"2478.5\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ -0.456</text>\n<text text-anchor=\"start\" x=\"2548\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.054</text>\n<text text-anchor=\"start\" x=\"2529.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10872</text>\n<text text-anchor=\"start\" x=\"2520.5\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [304, 10568]</text>\n<text text-anchor=\"start\" x=\"2556.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 3->4 -->\n<g id=\"edge4\" class=\"edge\"><title>3->4</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3079.25,-1676.38C2986.04,-1657.15 2823.6,-1623.63 2710.61,-1600.32\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2711.02,-1596.83 2700.51,-1598.23 2709.6,-1603.68 2711.02,-1596.83\"/>\n</g>\n<!-- 89 -->\n<g id=\"node90\" class=\"node\"><title>89</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M3246,-1615C3246,-1615 3059,-1615 3059,-1615 3053,-1615 3047,-1609 3047,-1603 3047,-1603 3047,-1544 3047,-1544 3047,-1538 3053,-1532 3059,-1532 3059,-1532 3246,-1532 3246,-1532 3252,-1532 3258,-1538 3258,-1544 3258,-1544 3258,-1603 3258,-1603 3258,-1609 3252,-1615 3246,-1615\"/>\n<text text-anchor=\"start\" x=\"3055\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 3.566</text>\n<text text-anchor=\"start\" x=\"3115\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.106</text>\n<text text-anchor=\"start\" x=\"3109\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 71</text>\n<text text-anchor=\"start\" x=\"3108\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 4]</text>\n<text text-anchor=\"start\" x=\"3123.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 3->89 -->\n<g id=\"edge89\" class=\"edge\"><title>3->89</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3152.5,-1650.91C3152.5,-1642.65 3152.5,-1633.86 3152.5,-1625.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3156,-1625.02 3152.5,-1615.02 3149,-1625.02 3156,-1625.02\"/>\n</g>\n<!-- 5 -->\n<g id=\"node6\" class=\"node\"><title>5</title>\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M1398.5,-1496C1398.5,-1496 1292.5,-1496 1292.5,-1496 1286.5,-1496 1280.5,-1490 1280.5,-1484 1280.5,-1484 1280.5,-1425 1280.5,-1425 1280.5,-1419 1286.5,-1413 1292.5,-1413 1292.5,-1413 1398.5,-1413 1398.5,-1413 1404.5,-1413 1410.5,-1419 1410.5,-1425 1410.5,-1425 1410.5,-1484 1410.5,-1484 1410.5,-1490 1404.5,-1496 1398.5,-1496\"/>\n<text text-anchor=\"start\" x=\"1290\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"1308\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.013</text>\n<text text-anchor=\"start\" x=\"1294\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9718</text>\n<text text-anchor=\"start\" x=\"1288.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [63, 9655]</text>\n<text text-anchor=\"start\" x=\"1316.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 4->5 -->\n<g id=\"edge5\" class=\"edge\"><title>4->5</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2470.24,-1561.62C2219.45,-1537.96 1630.02,-1482.35 1420.8,-1462.6\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1421.11,-1459.12 1410.83,-1461.66 1420.45,-1466.09 1421.11,-1459.12\"/>\n</g>\n<!-- 48 -->\n<g id=\"node49\" class=\"node\"><title>48</title>\n<path fill=\"#6db7ec\" stroke=\"black\" d=\"M2688.5,-1496C2688.5,-1496 2482.5,-1496 2482.5,-1496 2476.5,-1496 2470.5,-1490 2470.5,-1484 2470.5,-1484 2470.5,-1425 2470.5,-1425 2470.5,-1419 2476.5,-1413 2482.5,-1413 2482.5,-1413 2688.5,-1413 2688.5,-1413 2694.5,-1413 2700.5,-1419 2700.5,-1425 2700.5,-1425 2700.5,-1484 2700.5,-1484 2700.5,-1490 2694.5,-1496 2688.5,-1496\"/>\n<text text-anchor=\"start\" x=\"2478.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ -0.295</text>\n<text text-anchor=\"start\" x=\"2552\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.33</text>\n<text text-anchor=\"start\" x=\"2534\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1154</text>\n<text text-anchor=\"start\" x=\"2528.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [241, 913]</text>\n<text text-anchor=\"start\" x=\"2556.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 4->48 -->\n<g id=\"edge48\" class=\"edge\"><title>4->48</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2585.5,-1531.91C2585.5,-1523.65 2585.5,-1514.86 2585.5,-1506.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2589,-1506.02 2585.5,-1496.02 2582,-1506.02 2589,-1506.02\"/>\n</g>\n<!-- 6 -->\n<g id=\"node7\" class=\"node\"><title>6</title>\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M1064.5,-1377C1064.5,-1377 958.5,-1377 958.5,-1377 952.5,-1377 946.5,-1371 946.5,-1365 946.5,-1365 946.5,-1306 946.5,-1306 946.5,-1300 952.5,-1294 958.5,-1294 958.5,-1294 1064.5,-1294 1064.5,-1294 1070.5,-1294 1076.5,-1300 1076.5,-1306 1076.5,-1306 1076.5,-1365 1076.5,-1365 1076.5,-1371 1070.5,-1377 1064.5,-1377\"/>\n<text text-anchor=\"start\" x=\"970\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ -0.69</text>\n<text text-anchor=\"start\" x=\"974\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.007</text>\n<text text-anchor=\"start\" x=\"960\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9549</text>\n<text text-anchor=\"start\" x=\"954.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 9516]</text>\n<text text-anchor=\"start\" x=\"982.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 5->6 -->\n<g id=\"edge6\" class=\"edge\"><title>5->6</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1280.31,-1430.66C1224.56,-1411.13 1144.34,-1383.03 1086.05,-1362.61\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1087.12,-1359.28 1076.53,-1359.28 1084.81,-1365.89 1087.12,-1359.28\"/>\n</g>\n<!-- 35 -->\n<g id=\"node36\" class=\"node\"><title>35</title>\n<path fill=\"#64b2eb\" stroke=\"black\" d=\"M1397,-1377C1397,-1377 1294,-1377 1294,-1377 1288,-1377 1282,-1371 1282,-1365 1282,-1365 1282,-1306 1282,-1306 1282,-1300 1288,-1294 1294,-1294 1294,-1294 1397,-1294 1397,-1294 1403,-1294 1409,-1300 1409,-1306 1409,-1306 1409,-1365 1409,-1365 1409,-1371 1403,-1377 1397,-1377\"/>\n<text text-anchor=\"start\" x=\"1290\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"1308\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.292</text>\n<text text-anchor=\"start\" x=\"1298\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 169</text>\n<text text-anchor=\"start\" x=\"1292.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [30, 139]</text>\n<text text-anchor=\"start\" x=\"1316.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 5->35 -->\n<g id=\"edge35\" class=\"edge\"><title>5->35</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1345.5,-1412.91C1345.5,-1404.65 1345.5,-1395.86 1345.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1349,-1387.02 1345.5,-1377.02 1342,-1387.02 1349,-1387.02\"/>\n</g>\n<!-- 7 -->\n<g id=\"node8\" class=\"node\"><title>7</title>\n<path fill=\"#42a2e6\" stroke=\"black\" d=\"M897,-1258C897,-1258 706,-1258 706,-1258 700,-1258 694,-1252 694,-1246 694,-1246 694,-1187 694,-1187 694,-1181 700,-1175 706,-1175 706,-1175 897,-1175 897,-1175 903,-1175 909,-1181 909,-1187 909,-1187 909,-1246 909,-1246 909,-1252 903,-1258 897,-1258\"/>\n<text text-anchor=\"start\" x=\"702\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ -0.094</text>\n<text text-anchor=\"start\" x=\"764\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.084</text>\n<text text-anchor=\"start\" x=\"754\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 747</text>\n<text text-anchor=\"start\" x=\"748.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 714]</text>\n<text text-anchor=\"start\" x=\"772.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 6->7 -->\n<g id=\"edge7\" class=\"edge\"><title>6->7</title>\n<path fill=\"none\" stroke=\"black\" d=\"M946.493,-1298.28C926.467,-1287.12 904.158,-1274.7 883.162,-1263\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"884.693,-1259.84 874.254,-1258.03 881.286,-1265.96 884.693,-1259.84\"/>\n</g>\n<!-- 34 -->\n<g id=\"node35\" class=\"node\"><title>34</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1060.5,-1250.5C1060.5,-1250.5 962.5,-1250.5 962.5,-1250.5 956.5,-1250.5 950.5,-1244.5 950.5,-1238.5 950.5,-1238.5 950.5,-1194.5 950.5,-1194.5 950.5,-1188.5 956.5,-1182.5 962.5,-1182.5 962.5,-1182.5 1060.5,-1182.5 1060.5,-1182.5 1066.5,-1182.5 1072.5,-1188.5 1072.5,-1194.5 1072.5,-1194.5 1072.5,-1238.5 1072.5,-1238.5 1072.5,-1244.5 1066.5,-1250.5 1060.5,-1250.5\"/>\n<text text-anchor=\"start\" x=\"982.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"960\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8802</text>\n<text text-anchor=\"start\" x=\"958.5\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8802]</text>\n<text text-anchor=\"start\" x=\"982.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 6->34 -->\n<g id=\"edge34\" class=\"edge\"><title>6->34</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1011.5,-1293.91C1011.5,-1283.2 1011.5,-1271.62 1011.5,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1015,-1260.67 1011.5,-1250.67 1008,-1260.67 1015,-1260.67\"/>\n</g>\n<!-- 8 -->\n<g id=\"node9\" class=\"node\"><title>8</title>\n<path fill=\"#a7d3f3\" stroke=\"black\" d=\"M648,-1139C648,-1139 471,-1139 471,-1139 465,-1139 459,-1133 459,-1127 459,-1127 459,-1068 459,-1068 459,-1062 465,-1056 471,-1056 471,-1056 648,-1056 648,-1056 654,-1056 660,-1062 660,-1068 660,-1068 660,-1127 660,-1127 660,-1133 654,-1139 648,-1139\"/>\n<text text-anchor=\"start\" x=\"467\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 1.536</text>\n<text text-anchor=\"start\" x=\"522\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.459</text>\n<text text-anchor=\"start\" x=\"516\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 56</text>\n<text text-anchor=\"start\" x=\"511\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [20, 36]</text>\n<text text-anchor=\"start\" x=\"530.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 7->8 -->\n<g id=\"edge8\" class=\"edge\"><title>7->8</title>\n<path fill=\"none\" stroke=\"black\" d=\"M717.539,-1174.91C696.516,-1164.74 673.842,-1153.78 652.412,-1143.42\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"653.839,-1140.22 643.312,-1139.02 650.792,-1146.52 653.839,-1140.22\"/>\n</g>\n<!-- 19 -->\n<g id=\"node20\" class=\"node\"><title>19</title>\n<path fill=\"#3d9fe5\" stroke=\"black\" d=\"M900.5,-1139C900.5,-1139 702.5,-1139 702.5,-1139 696.5,-1139 690.5,-1133 690.5,-1127 690.5,-1127 690.5,-1068 690.5,-1068 690.5,-1062 696.5,-1056 702.5,-1056 702.5,-1056 900.5,-1056 900.5,-1056 906.5,-1056 912.5,-1062 912.5,-1068 912.5,-1068 912.5,-1127 912.5,-1127 912.5,-1133 906.5,-1139 900.5,-1139\"/>\n<text text-anchor=\"start\" x=\"698.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ -0.69</text>\n<text text-anchor=\"start\" x=\"764\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.037</text>\n<text text-anchor=\"start\" x=\"754\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 691</text>\n<text text-anchor=\"start\" x=\"748.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 678]</text>\n<text text-anchor=\"start\" x=\"772.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 7->19 -->\n<g id=\"edge19\" class=\"edge\"><title>7->19</title>\n<path fill=\"none\" stroke=\"black\" d=\"M801.5,-1174.91C801.5,-1166.65 801.5,-1157.86 801.5,-1149.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"805,-1149.02 801.5,-1139.02 798,-1149.02 805,-1149.02\"/>\n</g>\n<!-- 9 -->\n<g id=\"node10\" class=\"node\"><title>9</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M477,-1020C477,-1020 304,-1020 304,-1020 298,-1020 292,-1014 292,-1008 292,-1008 292,-949 292,-949 292,-943 298,-937 304,-937 304,-937 477,-937 477,-937 483,-937 489,-943 489,-949 489,-949 489,-1008 489,-1008 489,-1014 483,-1020 477,-1020\"/>\n<text text-anchor=\"start\" x=\"300\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -1.017</text>\n<text text-anchor=\"start\" x=\"353\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"347\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"342\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [20, 10]</text>\n<text text-anchor=\"start\" x=\"361.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 8->9 -->\n<g id=\"edge9\" class=\"edge\"><title>8->9</title>\n<path fill=\"none\" stroke=\"black\" d=\"M500.866,-1055.91C486.84,-1046.2 471.762,-1035.76 457.394,-1025.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"459.244,-1022.84 449.03,-1020.02 455.26,-1028.59 459.244,-1022.84\"/>\n</g>\n<!-- 18 -->\n<g id=\"node19\" class=\"node\"><title>18</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M600,-1012.5C600,-1012.5 519,-1012.5 519,-1012.5 513,-1012.5 507,-1006.5 507,-1000.5 507,-1000.5 507,-956.5 507,-956.5 507,-950.5 513,-944.5 519,-944.5 519,-944.5 600,-944.5 600,-944.5 606,-944.5 612,-950.5 612,-956.5 612,-956.5 612,-1000.5 612,-1000.5 612,-1006.5 606,-1012.5 600,-1012.5\"/>\n<text text-anchor=\"start\" x=\"530.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"516\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\n<text text-anchor=\"start\" x=\"515\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 26]</text>\n<text text-anchor=\"start\" x=\"530.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 8->18 -->\n<g id=\"edge18\" class=\"edge\"><title>8->18</title>\n<path fill=\"none\" stroke=\"black\" d=\"M559.5,-1055.91C559.5,-1045.2 559.5,-1033.62 559.5,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"563,-1022.67 559.5,-1012.67 556,-1022.67 563,-1022.67\"/>\n</g>\n<!-- 10 -->\n<g id=\"node11\" class=\"node\"><title>10</title>\n<path fill=\"#91c9f1\" stroke=\"black\" d=\"M309,-901C309,-901 130,-901 130,-901 124,-901 118,-895 118,-889 118,-889 118,-830 118,-830 118,-824 124,-818 130,-818 130,-818 309,-818 309,-818 315,-818 321,-824 321,-830 321,-830 321,-889 321,-889 321,-895 315,-901 309,-901\"/>\n<text text-anchor=\"start\" x=\"126\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ -0.336</text>\n<text text-anchor=\"start\" x=\"182\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.426</text>\n<text text-anchor=\"start\" x=\"176\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"179\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 9]</text>\n<text text-anchor=\"start\" x=\"190.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 9->10 -->\n<g id=\"edge10\" class=\"edge\"><title>9->10</title>\n<path fill=\"none\" stroke=\"black\" d=\"M331.172,-936.907C316.98,-927.197 301.724,-916.758 287.186,-906.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"288.952,-903.779 278.723,-901.021 284.999,-909.556 288.952,-903.779\"/>\n</g>\n<!-- 15 -->\n<g id=\"node16\" class=\"node\"><title>15</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M454,-901C454,-901 351,-901 351,-901 345,-901 339,-895 339,-889 339,-889 339,-830 339,-830 339,-824 345,-818 351,-818 351,-818 454,-818 454,-818 460,-818 466,-824 466,-830 466,-830 466,-889 466,-889 466,-895 460,-901 454,-901\"/>\n<text text-anchor=\"start\" x=\"347\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"365\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.111</text>\n<text text-anchor=\"start\" x=\"359\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"358\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 1]</text>\n<text text-anchor=\"start\" x=\"373.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 9->15 -->\n<g id=\"edge15\" class=\"edge\"><title>9->15</title>\n<path fill=\"none\" stroke=\"black\" d=\"M394.663,-936.907C395.52,-928.558 396.431,-919.671 397.318,-911.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"400.805,-911.326 398.344,-901.021 393.842,-910.611 400.805,-911.326\"/>\n</g>\n<!-- 11 -->\n<g id=\"node12\" class=\"node\"><title>11</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M157,-782C157,-782 54,-782 54,-782 48,-782 42,-776 42,-770 42,-770 42,-711 42,-711 42,-705 48,-699 54,-699 54,-699 157,-699 157,-699 163,-699 169,-705 169,-711 169,-711 169,-770 169,-770 169,-776 163,-782 157,-782\"/>\n<text text-anchor=\"start\" x=\"50\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"68\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"66\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"65\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 2]</text>\n<text text-anchor=\"start\" x=\"76.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 10->11 -->\n<g id=\"edge11\" class=\"edge\"><title>10->11</title>\n<path fill=\"none\" stroke=\"black\" d=\"M179.948,-817.907C170.929,-808.651 161.265,-798.732 151.986,-789.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"154.467,-786.741 144.982,-782.021 149.454,-791.626 154.467,-786.741\"/>\n</g>\n<!-- 14 -->\n<g id=\"node15\" class=\"node\"><title>14</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M272,-774.5C272,-774.5 199,-774.5 199,-774.5 193,-774.5 187,-768.5 187,-762.5 187,-762.5 187,-718.5 187,-718.5 187,-712.5 193,-706.5 199,-706.5 199,-706.5 272,-706.5 272,-706.5 278,-706.5 284,-712.5 284,-718.5 284,-718.5 284,-762.5 284,-762.5 284,-768.5 278,-774.5 272,-774.5\"/>\n<text text-anchor=\"start\" x=\"206.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"196\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"195\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\n<text text-anchor=\"start\" x=\"206.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 10->14 -->\n<g id=\"edge14\" class=\"edge\"><title>10->14</title>\n<path fill=\"none\" stroke=\"black\" d=\"M225.051,-817.907C226.515,-807.204 228.1,-795.615 229.582,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"233.077,-785.049 230.964,-774.667 226.142,-784.1 233.077,-785.049\"/>\n</g>\n<!-- 12 -->\n<g id=\"node13\" class=\"node\"><title>12</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M85,-655.5C85,-655.5 12,-655.5 12,-655.5 6,-655.5 0,-649.5 0,-643.5 0,-643.5 0,-599.5 0,-599.5 0,-593.5 6,-587.5 12,-587.5 12,-587.5 85,-587.5 85,-587.5 91,-587.5 97,-593.5 97,-599.5 97,-599.5 97,-643.5 97,-643.5 97,-649.5 91,-655.5 85,-655.5\"/>\n<text text-anchor=\"start\" x=\"19.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"9\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"8\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"19.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 11->12 -->\n<g id=\"edge12\" class=\"edge\"><title>11->12</title>\n<path fill=\"none\" stroke=\"black\" d=\"M85.7241,-698.907C80.3484,-687.873 74.5143,-675.898 69.0944,-664.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"72.1845,-663.124 64.6583,-655.667 65.8915,-666.19 72.1845,-663.124\"/>\n</g>\n<!-- 13 -->\n<g id=\"node14\" class=\"node\"><title>13</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M200,-655.5C200,-655.5 127,-655.5 127,-655.5 121,-655.5 115,-649.5 115,-643.5 115,-643.5 115,-599.5 115,-599.5 115,-593.5 121,-587.5 127,-587.5 127,-587.5 200,-587.5 200,-587.5 206,-587.5 212,-593.5 212,-599.5 212,-599.5 212,-643.5 212,-643.5 212,-649.5 206,-655.5 200,-655.5\"/>\n<text text-anchor=\"start\" x=\"134.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"124\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"123\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"134.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 11->13 -->\n<g id=\"edge13\" class=\"edge\"><title>11->13</title>\n<path fill=\"none\" stroke=\"black\" d=\"M125.623,-698.907C131.093,-687.873 137.029,-675.898 142.544,-664.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"145.753,-666.181 147.058,-655.667 139.481,-663.072 145.753,-666.181\"/>\n</g>\n<!-- 16 -->\n<g id=\"node17\" class=\"node\"><title>16</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M411,-774.5C411,-774.5 330,-774.5 330,-774.5 324,-774.5 318,-768.5 318,-762.5 318,-762.5 318,-718.5 318,-718.5 318,-712.5 324,-706.5 330,-706.5 330,-706.5 411,-706.5 411,-706.5 417,-706.5 423,-712.5 423,-718.5 423,-718.5 423,-762.5 423,-762.5 423,-768.5 417,-774.5 411,-774.5\"/>\n<text text-anchor=\"start\" x=\"341.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"327\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"326\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\n<text text-anchor=\"start\" x=\"341.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 15->16 -->\n<g id=\"edge16\" class=\"edge\"><title>15->16</title>\n<path fill=\"none\" stroke=\"black\" d=\"M391.398,-817.907C388.44,-807.094 385.235,-795.376 382.245,-784.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"385.586,-783.389 379.571,-774.667 378.834,-785.236 385.586,-783.389\"/>\n</g>\n<!-- 17 -->\n<g id=\"node18\" class=\"node\"><title>17</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M526,-774.5C526,-774.5 453,-774.5 453,-774.5 447,-774.5 441,-768.5 441,-762.5 441,-762.5 441,-718.5 441,-718.5 441,-712.5 447,-706.5 453,-706.5 453,-706.5 526,-706.5 526,-706.5 532,-706.5 538,-712.5 538,-718.5 538,-718.5 538,-762.5 538,-762.5 538,-768.5 532,-774.5 526,-774.5\"/>\n<text text-anchor=\"start\" x=\"460.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"450\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"449\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"460.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 15->17 -->\n<g id=\"edge17\" class=\"edge\"><title>15->17</title>\n<path fill=\"none\" stroke=\"black\" d=\"M432.684,-817.907C441.136,-806.542 450.329,-794.178 458.809,-782.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"461.679,-784.78 464.837,-774.667 456.062,-780.603 461.679,-784.78\"/>\n</g>\n<!-- 20 -->\n<g id=\"node21\" class=\"node\"><title>20</title>\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M842.5,-1020C842.5,-1020 642.5,-1020 642.5,-1020 636.5,-1020 630.5,-1014 630.5,-1008 630.5,-1008 630.5,-949 630.5,-949 630.5,-943 636.5,-937 642.5,-937 642.5,-937 842.5,-937 842.5,-937 848.5,-937 854.5,-943 854.5,-949 854.5,-949 854.5,-1008 854.5,-1008 854.5,-1014 848.5,-1020 842.5,-1020\"/>\n<text text-anchor=\"start\" x=\"638.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.56</text>\n<text text-anchor=\"start\" x=\"705\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.026</text>\n<text text-anchor=\"start\" x=\"695\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 684</text>\n<text text-anchor=\"start\" x=\"694\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 675]</text>\n<text text-anchor=\"start\" x=\"713.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 19->20 -->\n<g id=\"edge20\" class=\"edge\"><title>19->20</title>\n<path fill=\"none\" stroke=\"black\" d=\"M781.03,-1055.91C776.683,-1047.29 772.046,-1038.09 767.55,-1029.17\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"770.561,-1027.37 762.934,-1020.02 764.311,-1030.53 770.561,-1027.37\"/>\n</g>\n<!-- 31 -->\n<g id=\"node32\" class=\"node\"><title>31</title>\n<path fill=\"#f8e0ce\" stroke=\"black\" d=\"M1120.5,-1020C1120.5,-1020 884.5,-1020 884.5,-1020 878.5,-1020 872.5,-1014 872.5,-1008 872.5,-1008 872.5,-949 872.5,-949 872.5,-943 878.5,-937 884.5,-937 884.5,-937 1120.5,-937 1120.5,-937 1126.5,-937 1132.5,-943 1132.5,-949 1132.5,-949 1132.5,-1008 1132.5,-1008 1132.5,-1014 1126.5,-1020 1120.5,-1020\"/>\n<text text-anchor=\"start\" x=\"880.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.138</text>\n<text text-anchor=\"start\" x=\"969\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.49</text>\n<text text-anchor=\"start\" x=\"963\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"962\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 3]</text>\n<text text-anchor=\"start\" x=\"973.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 19->31 -->\n<g id=\"edge31\" class=\"edge\"><title>19->31</title>\n<path fill=\"none\" stroke=\"black\" d=\"M871.236,-1055.91C888.23,-1046.02 906.522,-1035.37 923.897,-1025.25\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"926.006,-1028.08 932.887,-1020.02 922.484,-1022.03 926.006,-1028.08\"/>\n</g>\n<!-- 21 -->\n<g id=\"node22\" class=\"node\"><title>21</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M598,-893.5C598,-893.5 509,-893.5 509,-893.5 503,-893.5 497,-887.5 497,-881.5 497,-881.5 497,-837.5 497,-837.5 497,-831.5 503,-825.5 509,-825.5 509,-825.5 598,-825.5 598,-825.5 604,-825.5 610,-831.5 610,-837.5 610,-837.5 610,-881.5 610,-881.5 610,-887.5 604,-893.5 598,-893.5\"/>\n<text text-anchor=\"start\" x=\"524.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"506\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 602</text>\n<text text-anchor=\"start\" x=\"505\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 602]</text>\n<text text-anchor=\"start\" x=\"524.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 20->21 -->\n<g id=\"edge21\" class=\"edge\"><title>20->21</title>\n<path fill=\"none\" stroke=\"black\" d=\"M676.927,-936.907C657.053,-924.604 635.288,-911.131 615.645,-898.971\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"617.422,-895.955 607.077,-893.667 613.738,-901.906 617.422,-895.955\"/>\n</g>\n<!-- 22 -->\n<g id=\"node23\" class=\"node\"><title>22</title>\n<path fill=\"#51a9e8\" stroke=\"black\" d=\"M844.5,-901C844.5,-901 640.5,-901 640.5,-901 634.5,-901 628.5,-895 628.5,-889 628.5,-889 628.5,-830 628.5,-830 628.5,-824 634.5,-818 640.5,-818 640.5,-818 844.5,-818 844.5,-818 850.5,-818 856.5,-824 856.5,-830 856.5,-830 856.5,-889 856.5,-889 856.5,-895 850.5,-901 844.5,-901\"/>\n<text text-anchor=\"start\" x=\"636.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 1.245</text>\n<text text-anchor=\"start\" x=\"705\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.195</text>\n<text text-anchor=\"start\" x=\"699\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 82</text>\n<text text-anchor=\"start\" x=\"698\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 73]</text>\n<text text-anchor=\"start\" x=\"713.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 20->22 -->\n<g id=\"edge22\" class=\"edge\"><title>20->22</title>\n<path fill=\"none\" stroke=\"black\" d=\"M742.5,-936.907C742.5,-928.649 742.5,-919.864 742.5,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"746,-911.021 742.5,-901.021 739,-911.021 746,-911.021\"/>\n</g>\n<!-- 23 -->\n<g id=\"node24\" class=\"node\"><title>23</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M711,-774.5C711,-774.5 638,-774.5 638,-774.5 632,-774.5 626,-768.5 626,-762.5 626,-762.5 626,-718.5 626,-718.5 626,-712.5 632,-706.5 638,-706.5 638,-706.5 711,-706.5 711,-706.5 717,-706.5 723,-712.5 723,-718.5 723,-718.5 723,-762.5 723,-762.5 723,-768.5 717,-774.5 711,-774.5\"/>\n<text text-anchor=\"start\" x=\"645.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"635\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"634\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\n<text text-anchor=\"start\" x=\"645.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 22->23 -->\n<g id=\"edge23\" class=\"edge\"><title>22->23</title>\n<path fill=\"none\" stroke=\"black\" d=\"M718.908,-817.907C712.43,-806.763 705.395,-794.658 698.875,-783.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"701.828,-781.554 693.777,-774.667 695.775,-785.072 701.828,-781.554\"/>\n</g>\n<!-- 24 -->\n<g id=\"node25\" class=\"node\"><title>24</title>\n<path fill=\"#3ea0e6\" stroke=\"black\" d=\"M867.5,-782C867.5,-782 753.5,-782 753.5,-782 747.5,-782 741.5,-776 741.5,-770 741.5,-770 741.5,-711 741.5,-711 741.5,-705 747.5,-699 753.5,-699 753.5,-699 867.5,-699 867.5,-699 873.5,-699 879.5,-705 879.5,-711 879.5,-711 879.5,-770 879.5,-770 879.5,-776 873.5,-782 867.5,-782\"/>\n<text text-anchor=\"start\" x=\"749.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 1.037</text>\n<text text-anchor=\"start\" x=\"773\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.052</text>\n<text text-anchor=\"start\" x=\"767\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 75</text>\n<text text-anchor=\"start\" x=\"766\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 73]</text>\n<text text-anchor=\"start\" x=\"781.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 22->24 -->\n<g id=\"edge24\" class=\"edge\"><title>22->24</title>\n<path fill=\"none\" stroke=\"black\" d=\"M766.092,-817.907C771.156,-809.195 776.56,-799.897 781.793,-790.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"784.951,-792.425 786.949,-782.021 778.898,-788.908 784.951,-792.425\"/>\n</g>\n<!-- 25 -->\n<g id=\"node26\" class=\"node\"><title>25</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M762,-655.5C762,-655.5 689,-655.5 689,-655.5 683,-655.5 677,-649.5 677,-643.5 677,-643.5 677,-599.5 677,-599.5 677,-593.5 683,-587.5 689,-587.5 689,-587.5 762,-587.5 762,-587.5 768,-587.5 774,-593.5 774,-599.5 774,-599.5 774,-643.5 774,-643.5 774,-649.5 768,-655.5 762,-655.5\"/>\n<text text-anchor=\"start\" x=\"696.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"686\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"685\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"696.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 24->25 -->\n<g id=\"edge25\" class=\"edge\"><title>24->25</title>\n<path fill=\"none\" stroke=\"black\" d=\"M781.01,-698.907C772.753,-687.542 763.771,-675.178 755.485,-663.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"758.305,-661.7 749.596,-655.667 752.642,-665.814 758.305,-661.7\"/>\n</g>\n<!-- 26 -->\n<g id=\"node27\" class=\"node\"><title>26</title>\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M986.5,-663C986.5,-663 804.5,-663 804.5,-663 798.5,-663 792.5,-657 792.5,-651 792.5,-651 792.5,-592 792.5,-592 792.5,-586 798.5,-580 804.5,-580 804.5,-580 986.5,-580 986.5,-580 992.5,-580 998.5,-586 998.5,-592 998.5,-592 998.5,-651 998.5,-651 998.5,-657 992.5,-663 986.5,-663\"/>\n<text text-anchor=\"start\" x=\"800.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ -0.586</text>\n<text text-anchor=\"start\" x=\"858\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.027</text>\n<text text-anchor=\"start\" x=\"852\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 74</text>\n<text text-anchor=\"start\" x=\"851\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 73]</text>\n<text text-anchor=\"start\" x=\"866.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 24->26 -->\n<g id=\"edge26\" class=\"edge\"><title>24->26</title>\n<path fill=\"none\" stroke=\"black\" d=\"M839.99,-698.907C846.451,-690.014 853.357,-680.509 860.024,-671.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"863.016,-673.168 866.062,-663.021 857.353,-669.054 863.016,-673.168\"/>\n</g>\n<!-- 27 -->\n<g id=\"node28\" class=\"node\"><title>27</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M901,-544C901,-544 714,-544 714,-544 708,-544 702,-538 702,-532 702,-532 702,-473 702,-473 702,-467 708,-461 714,-461 714,-461 901,-461 901,-461 907,-461 913,-467 913,-473 913,-473 913,-532 913,-532 913,-538 907,-544 901,-544\"/>\n<text text-anchor=\"start\" x=\"710\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 2.497</text>\n<text text-anchor=\"start\" x=\"770\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"768\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"767\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"778.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 26->27 -->\n<g id=\"edge27\" class=\"edge\"><title>26->27</title>\n<path fill=\"none\" stroke=\"black\" d=\"M864.969,-579.907C858.211,-570.923 850.985,-561.315 844.016,-552.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"846.785,-549.909 837.977,-544.021 841.191,-554.116 846.785,-549.909\"/>\n</g>\n<!-- 30 -->\n<g id=\"node31\" class=\"node\"><title>30</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1024,-536.5C1024,-536.5 943,-536.5 943,-536.5 937,-536.5 931,-530.5 931,-524.5 931,-524.5 931,-480.5 931,-480.5 931,-474.5 937,-468.5 943,-468.5 943,-468.5 1024,-468.5 1024,-468.5 1030,-468.5 1036,-474.5 1036,-480.5 1036,-480.5 1036,-524.5 1036,-524.5 1036,-530.5 1030,-536.5 1024,-536.5\"/>\n<text text-anchor=\"start\" x=\"954.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"940\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 71</text>\n<text text-anchor=\"start\" x=\"939\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 71]</text>\n<text text-anchor=\"start\" x=\"954.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 26->30 -->\n<g id=\"edge30\" class=\"edge\"><title>26->30</title>\n<path fill=\"none\" stroke=\"black\" d=\"M926.031,-579.907C934.58,-568.542 943.879,-556.178 952.456,-544.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"955.34,-546.763 958.554,-536.667 949.746,-542.555 955.34,-546.763\"/>\n</g>\n<!-- 28 -->\n<g id=\"node29\" class=\"node\"><title>28</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M787,-417.5C787,-417.5 714,-417.5 714,-417.5 708,-417.5 702,-411.5 702,-405.5 702,-405.5 702,-361.5 702,-361.5 702,-355.5 708,-349.5 714,-349.5 714,-349.5 787,-349.5 787,-349.5 793,-349.5 799,-355.5 799,-361.5 799,-361.5 799,-405.5 799,-405.5 799,-411.5 793,-417.5 787,-417.5\"/>\n<text text-anchor=\"start\" x=\"721.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"711\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"710\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"721.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 27->28 -->\n<g id=\"edge28\" class=\"edge\"><title>27->28</title>\n<path fill=\"none\" stroke=\"black\" d=\"M787.724,-460.907C782.348,-449.873 776.514,-437.898 771.094,-426.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"774.184,-425.124 766.658,-417.667 767.892,-428.19 774.184,-425.124\"/>\n</g>\n<!-- 29 -->\n<g id=\"node30\" class=\"node\"><title>29</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M902,-417.5C902,-417.5 829,-417.5 829,-417.5 823,-417.5 817,-411.5 817,-405.5 817,-405.5 817,-361.5 817,-361.5 817,-355.5 823,-349.5 829,-349.5 829,-349.5 902,-349.5 902,-349.5 908,-349.5 914,-355.5 914,-361.5 914,-361.5 914,-405.5 914,-405.5 914,-411.5 908,-417.5 902,-417.5\"/>\n<text text-anchor=\"start\" x=\"836.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"826\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"825\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"836.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 27->29 -->\n<g id=\"edge29\" class=\"edge\"><title>27->29</title>\n<path fill=\"none\" stroke=\"black\" d=\"M827.623,-460.907C833.093,-449.873 839.029,-437.898 844.544,-426.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"847.753,-428.181 849.058,-417.667 841.481,-425.072 847.753,-428.181\"/>\n</g>\n<!-- 32 -->\n<g id=\"node33\" class=\"node\"><title>32</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M960,-893.5C960,-893.5 887,-893.5 887,-893.5 881,-893.5 875,-887.5 875,-881.5 875,-881.5 875,-837.5 875,-837.5 875,-831.5 881,-825.5 887,-825.5 887,-825.5 960,-825.5 960,-825.5 966,-825.5 972,-831.5 972,-837.5 972,-837.5 972,-881.5 972,-881.5 972,-887.5 966,-893.5 960,-893.5\"/>\n<text text-anchor=\"start\" x=\"894.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"884\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"883\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"894.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 31->32 -->\n<g id=\"edge32\" class=\"edge\"><title>31->32</title>\n<path fill=\"none\" stroke=\"black\" d=\"M975.091,-936.907C967.492,-925.652 959.231,-913.418 951.593,-902.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"954.391,-899.996 945.895,-893.667 948.59,-903.913 954.391,-899.996\"/>\n</g>\n<!-- 33 -->\n<g id=\"node34\" class=\"node\"><title>33</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1075,-893.5C1075,-893.5 1002,-893.5 1002,-893.5 996,-893.5 990,-887.5 990,-881.5 990,-881.5 990,-837.5 990,-837.5 990,-831.5 996,-825.5 1002,-825.5 1002,-825.5 1075,-825.5 1075,-825.5 1081,-825.5 1087,-831.5 1087,-837.5 1087,-837.5 1087,-881.5 1087,-881.5 1087,-887.5 1081,-893.5 1075,-893.5\"/>\n<text text-anchor=\"start\" x=\"1009.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"999\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"998\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"1009.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 31->33 -->\n<g id=\"edge33\" class=\"edge\"><title>31->33</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1014.99,-936.907C1018.32,-926.094 1021.92,-914.376 1025.29,-903.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1028.7,-904.254 1028.29,-893.667 1022.01,-902.195 1028.7,-904.254\"/>\n</g>\n<!-- 36 -->\n<g id=\"node37\" class=\"node\"><title>36</title>\n<path fill=\"#e89050\" stroke=\"black\" d=\"M1331.5,-1258C1331.5,-1258 1125.5,-1258 1125.5,-1258 1119.5,-1258 1113.5,-1252 1113.5,-1246 1113.5,-1246 1113.5,-1187 1113.5,-1187 1113.5,-1181 1119.5,-1175 1125.5,-1175 1125.5,-1175 1331.5,-1175 1331.5,-1175 1337.5,-1175 1343.5,-1181 1343.5,-1187 1343.5,-1187 1343.5,-1246 1343.5,-1246 1343.5,-1252 1337.5,-1258 1331.5,-1258\"/>\n<text text-anchor=\"start\" x=\"1121.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ -1.124</text>\n<text text-anchor=\"start\" x=\"1191\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.185</text>\n<text text-anchor=\"start\" x=\"1185\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\n<text text-anchor=\"start\" x=\"1184\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [26, 3]</text>\n<text text-anchor=\"start\" x=\"1199.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 35->36 -->\n<g id=\"edge36\" class=\"edge\"><title>35->36</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1304.91,-1293.91C1295.65,-1284.65 1285.73,-1274.73 1276.21,-1265.21\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1278.57,-1262.62 1269.02,-1258.02 1273.62,-1267.57 1278.57,-1262.62\"/>\n</g>\n<!-- 39 -->\n<g id=\"node40\" class=\"node\"><title>39</title>\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M1551,-1258C1551,-1258 1374,-1258 1374,-1258 1368,-1258 1362,-1252 1362,-1246 1362,-1246 1362,-1187 1362,-1187 1362,-1181 1368,-1175 1374,-1175 1374,-1175 1551,-1175 1551,-1175 1557,-1175 1563,-1181 1563,-1187 1563,-1187 1563,-1246 1563,-1246 1563,-1252 1557,-1258 1551,-1258\"/>\n<text text-anchor=\"start\" x=\"1370\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.301</text>\n<text text-anchor=\"start\" x=\"1425\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.056</text>\n<text text-anchor=\"start\" x=\"1415\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 140</text>\n<text text-anchor=\"start\" x=\"1414\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 136]</text>\n<text text-anchor=\"start\" x=\"1433.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 35->39 -->\n<g id=\"edge39\" class=\"edge\"><title>35->39</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1386.09,-1293.91C1395.35,-1284.65 1405.27,-1274.73 1414.79,-1265.21\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1417.38,-1267.57 1421.98,-1258.02 1412.43,-1262.62 1417.38,-1267.57\"/>\n</g>\n<!-- 37 -->\n<g id=\"node38\" class=\"node\"><title>37</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1156,-1131.5C1156,-1131.5 1083,-1131.5 1083,-1131.5 1077,-1131.5 1071,-1125.5 1071,-1119.5 1071,-1119.5 1071,-1075.5 1071,-1075.5 1071,-1069.5 1077,-1063.5 1083,-1063.5 1083,-1063.5 1156,-1063.5 1156,-1063.5 1162,-1063.5 1168,-1069.5 1168,-1075.5 1168,-1075.5 1168,-1119.5 1168,-1119.5 1168,-1125.5 1162,-1131.5 1156,-1131.5\"/>\n<text text-anchor=\"start\" x=\"1090.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1080\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"1079\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"1090.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 36->37 -->\n<g id=\"edge37\" class=\"edge\"><title>36->37</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1190.68,-1174.91C1179.89,-1163.32 1168.13,-1150.7 1157.33,-1139.11\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1159.78,-1136.6 1150.4,-1131.67 1154.65,-1141.37 1159.78,-1136.6\"/>\n</g>\n<!-- 38 -->\n<g id=\"node39\" class=\"node\"><title>38</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1279,-1131.5C1279,-1131.5 1198,-1131.5 1198,-1131.5 1192,-1131.5 1186,-1125.5 1186,-1119.5 1186,-1119.5 1186,-1075.5 1186,-1075.5 1186,-1069.5 1192,-1063.5 1198,-1063.5 1198,-1063.5 1279,-1063.5 1279,-1063.5 1285,-1063.5 1291,-1069.5 1291,-1075.5 1291,-1075.5 1291,-1119.5 1291,-1119.5 1291,-1125.5 1285,-1131.5 1279,-1131.5\"/>\n<text text-anchor=\"start\" x=\"1209.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1195\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\n<text text-anchor=\"start\" x=\"1194\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [26, 0]</text>\n<text text-anchor=\"start\" x=\"1209.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 36->38 -->\n<g id=\"edge38\" class=\"edge\"><title>36->38</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1231.97,-1174.91C1232.88,-1164.2 1233.87,-1152.62 1234.8,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1238.3,-1141.93 1235.67,-1131.67 1231.33,-1141.33 1238.3,-1141.93\"/>\n</g>\n<!-- 40 -->\n<g id=\"node41\" class=\"node\"><title>40</title>\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M1557,-1139C1557,-1139 1330,-1139 1330,-1139 1324,-1139 1318,-1133 1318,-1127 1318,-1127 1318,-1068 1318,-1068 1318,-1062 1324,-1056 1330,-1056 1330,-1056 1557,-1056 1557,-1056 1563,-1056 1569,-1062 1569,-1068 1569,-1068 1569,-1127 1569,-1127 1569,-1133 1563,-1139 1557,-1139\"/>\n<text text-anchor=\"start\" x=\"1326\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ -0.152</text>\n<text text-anchor=\"start\" x=\"1406\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.029</text>\n<text text-anchor=\"start\" x=\"1396\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 138</text>\n<text text-anchor=\"start\" x=\"1395\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 136]</text>\n<text text-anchor=\"start\" x=\"1414.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 39->40 -->\n<g id=\"edge40\" class=\"edge\"><title>39->40</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1455.91,-1174.91C1454.55,-1166.56 1453.11,-1157.67 1451.7,-1149.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1455.14,-1148.33 1450.08,-1139.02 1448.23,-1149.45 1455.14,-1148.33\"/>\n</g>\n<!-- 47 -->\n<g id=\"node48\" class=\"node\"><title>47</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1672,-1131.5C1672,-1131.5 1599,-1131.5 1599,-1131.5 1593,-1131.5 1587,-1125.5 1587,-1119.5 1587,-1119.5 1587,-1075.5 1587,-1075.5 1587,-1069.5 1593,-1063.5 1599,-1063.5 1599,-1063.5 1672,-1063.5 1672,-1063.5 1678,-1063.5 1684,-1069.5 1684,-1075.5 1684,-1075.5 1684,-1119.5 1684,-1119.5 1684,-1125.5 1678,-1131.5 1672,-1131.5\"/>\n<text text-anchor=\"start\" x=\"1606.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1596\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1595\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"1606.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 39->47 -->\n<g id=\"edge47\" class=\"edge\"><title>39->47</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1524.14,-1174.86C1541.46,-1163.35 1560.26,-1150.75 1577.5,-1139 1578.28,-1138.47 1579.06,-1137.94 1579.85,-1137.4\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1582.14,-1140.07 1588.4,-1131.52 1578.17,-1134.3 1582.14,-1140.07\"/>\n</g>\n<!-- 41 -->\n<g id=\"node42\" class=\"node\"><title>41</title>\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M1382,-1020C1382,-1020 1279,-1020 1279,-1020 1273,-1020 1267,-1014 1267,-1008 1267,-1008 1267,-949 1267,-949 1267,-943 1273,-937 1279,-937 1279,-937 1382,-937 1382,-937 1388,-937 1394,-943 1394,-949 1394,-949 1394,-1008 1394,-1008 1394,-1014 1388,-1020 1382,-1020\"/>\n<text text-anchor=\"start\" x=\"1275\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"1293\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.014</text>\n<text text-anchor=\"start\" x=\"1283\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 137</text>\n<text text-anchor=\"start\" x=\"1282\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 136]</text>\n<text text-anchor=\"start\" x=\"1301.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 40->41 -->\n<g id=\"edge41\" class=\"edge\"><title>40->41</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1404.3,-1055.91C1395.44,-1046.74 1385.96,-1036.93 1376.85,-1027.49\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1379.1,-1024.78 1369.64,-1020.02 1374.07,-1029.65 1379.1,-1024.78\"/>\n</g>\n<!-- 46 -->\n<g id=\"node47\" class=\"node\"><title>46</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1497,-1012.5C1497,-1012.5 1424,-1012.5 1424,-1012.5 1418,-1012.5 1412,-1006.5 1412,-1000.5 1412,-1000.5 1412,-956.5 1412,-956.5 1412,-950.5 1418,-944.5 1424,-944.5 1424,-944.5 1497,-944.5 1497,-944.5 1503,-944.5 1509,-950.5 1509,-956.5 1509,-956.5 1509,-1000.5 1509,-1000.5 1509,-1006.5 1503,-1012.5 1497,-1012.5\"/>\n<text text-anchor=\"start\" x=\"1431.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1421\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1420\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1431.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 40->46 -->\n<g id=\"edge46\" class=\"edge\"><title>40->46</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1449.4,-1055.91C1450.95,-1045.2 1452.64,-1033.62 1454.21,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1457.71,-1023.07 1455.68,-1012.67 1450.78,-1022.06 1457.71,-1023.07\"/>\n</g>\n<!-- 42 -->\n<g id=\"node43\" class=\"node\"><title>42</title>\n<path fill=\"#5aade9\" stroke=\"black\" d=\"M1290,-901C1290,-901 1117,-901 1117,-901 1111,-901 1105,-895 1105,-889 1105,-889 1105,-830 1105,-830 1105,-824 1111,-818 1117,-818 1117,-818 1290,-818 1290,-818 1296,-818 1302,-824 1302,-830 1302,-830 1302,-889 1302,-889 1302,-895 1296,-901 1290,-901\"/>\n<text text-anchor=\"start\" x=\"1113\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.823</text>\n<text text-anchor=\"start\" x=\"1166\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.245</text>\n<text text-anchor=\"start\" x=\"1164\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"1163\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 6]</text>\n<text text-anchor=\"start\" x=\"1174.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 41->42 -->\n<g id=\"edge42\" class=\"edge\"><title>41->42</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1286.44,-936.907C1276.29,-927.56 1265.41,-917.538 1254.98,-907.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1257.21,-905.222 1247.48,-901.021 1252.47,-910.371 1257.21,-905.222\"/>\n</g>\n<!-- 45 -->\n<g id=\"node46\" class=\"node\"><title>45</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1421,-893.5C1421,-893.5 1332,-893.5 1332,-893.5 1326,-893.5 1320,-887.5 1320,-881.5 1320,-881.5 1320,-837.5 1320,-837.5 1320,-831.5 1326,-825.5 1332,-825.5 1332,-825.5 1421,-825.5 1421,-825.5 1427,-825.5 1433,-831.5 1433,-837.5 1433,-837.5 1433,-881.5 1433,-881.5 1433,-887.5 1427,-893.5 1421,-893.5\"/>\n<text text-anchor=\"start\" x=\"1347.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1329\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 130</text>\n<text text-anchor=\"start\" x=\"1328\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 130]</text>\n<text text-anchor=\"start\" x=\"1347.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 41->45 -->\n<g id=\"edge45\" class=\"edge\"><title>41->45</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1346.46,-936.907C1350.75,-925.983 1355.41,-914.137 1359.75,-903.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1363.06,-904.254 1363.46,-893.667 1356.54,-901.693 1363.06,-904.254\"/>\n</g>\n<!-- 43 -->\n<g id=\"node44\" class=\"node\"><title>43</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1182,-774.5C1182,-774.5 1109,-774.5 1109,-774.5 1103,-774.5 1097,-768.5 1097,-762.5 1097,-762.5 1097,-718.5 1097,-718.5 1097,-712.5 1103,-706.5 1109,-706.5 1109,-706.5 1182,-706.5 1182,-706.5 1188,-706.5 1194,-712.5 1194,-718.5 1194,-718.5 1194,-762.5 1194,-762.5 1194,-768.5 1188,-774.5 1182,-774.5\"/>\n<text text-anchor=\"start\" x=\"1116.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1106\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1105\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"1116.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 42->43 -->\n<g id=\"edge43\" class=\"edge\"><title>42->43</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1183.38,-817.907C1177.91,-806.873 1171.97,-794.898 1166.46,-783.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1169.52,-782.072 1161.94,-774.667 1163.25,-785.181 1169.52,-782.072\"/>\n</g>\n<!-- 44 -->\n<g id=\"node45\" class=\"node\"><title>44</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1297,-774.5C1297,-774.5 1224,-774.5 1224,-774.5 1218,-774.5 1212,-768.5 1212,-762.5 1212,-762.5 1212,-718.5 1212,-718.5 1212,-712.5 1218,-706.5 1224,-706.5 1224,-706.5 1297,-706.5 1297,-706.5 1303,-706.5 1309,-712.5 1309,-718.5 1309,-718.5 1309,-762.5 1309,-762.5 1309,-768.5 1303,-774.5 1297,-774.5\"/>\n<text text-anchor=\"start\" x=\"1231.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1221\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1220\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1231.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 42->44 -->\n<g id=\"edge44\" class=\"edge\"><title>42->44</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1223.28,-817.907C1228.65,-806.873 1234.49,-794.898 1239.91,-783.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1243.11,-785.19 1244.34,-774.667 1236.82,-782.124 1243.11,-785.19\"/>\n</g>\n<!-- 49 -->\n<g id=\"node50\" class=\"node\"><title>49</title>\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M2553.5,-1377C2553.5,-1377 2317.5,-1377 2317.5,-1377 2311.5,-1377 2305.5,-1371 2305.5,-1365 2305.5,-1365 2305.5,-1306 2305.5,-1306 2305.5,-1300 2311.5,-1294 2317.5,-1294 2317.5,-1294 2553.5,-1294 2553.5,-1294 2559.5,-1294 2565.5,-1300 2565.5,-1306 2565.5,-1306 2565.5,-1365 2565.5,-1365 2565.5,-1371 2559.5,-1377 2553.5,-1377\"/>\n<text text-anchor=\"start\" x=\"2313.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.641</text>\n<text text-anchor=\"start\" x=\"2398\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.077</text>\n<text text-anchor=\"start\" x=\"2388\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 942</text>\n<text text-anchor=\"start\" x=\"2382.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [38, 904]</text>\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 48->49 -->\n<g id=\"edge49\" class=\"edge\"><title>48->49</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2533.46,-1412.91C2521.24,-1403.38 2508.13,-1393.15 2495.59,-1383.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2497.49,-1380.41 2487.45,-1377.02 2493.18,-1385.93 2497.49,-1380.41\"/>\n</g>\n<!-- 80 -->\n<g id=\"node81\" class=\"node\"><title>80</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M3032.5,-1377C3032.5,-1377 2904.5,-1377 2904.5,-1377 2898.5,-1377 2892.5,-1371 2892.5,-1365 2892.5,-1365 2892.5,-1306 2892.5,-1306 2892.5,-1300 2898.5,-1294 2904.5,-1294 2904.5,-1294 3032.5,-1294 3032.5,-1294 3038.5,-1294 3044.5,-1300 3044.5,-1306 3044.5,-1306 3044.5,-1365 3044.5,-1365 3044.5,-1371 3038.5,-1377 3032.5,-1377\"/>\n<text text-anchor=\"start\" x=\"2900.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ -0.181</text>\n<text text-anchor=\"start\" x=\"2931\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.081</text>\n<text text-anchor=\"start\" x=\"2921\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 212</text>\n<text text-anchor=\"start\" x=\"2920\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 9]</text>\n<text text-anchor=\"start\" x=\"2939.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 48->80 -->\n<g id=\"edge80\" class=\"edge\"><title>48->80</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2700.67,-1418.32C2759.05,-1400.48 2828.75,-1379.19 2882.41,-1362.8\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2883.69,-1366.07 2892.24,-1359.8 2881.65,-1359.37 2883.69,-1366.07\"/>\n</g>\n<!-- 50 -->\n<g id=\"node51\" class=\"node\"><title>50</title>\n<path fill=\"#80c0ee\" stroke=\"black\" d=\"M2106,-1258C2106,-1258 2017,-1258 2017,-1258 2011,-1258 2005,-1252 2005,-1246 2005,-1246 2005,-1187 2005,-1187 2005,-1181 2011,-1175 2017,-1175 2017,-1175 2106,-1175 2106,-1175 2112,-1175 2118,-1181 2118,-1187 2118,-1187 2118,-1246 2118,-1246 2118,-1252 2112,-1258 2106,-1258\"/>\n<text text-anchor=\"start\" x=\"2016\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ -0.707</text>\n<text text-anchor=\"start\" x=\"2024\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.388</text>\n<text text-anchor=\"start\" x=\"2014\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 114</text>\n<text text-anchor=\"start\" x=\"2013\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [30, 84]</text>\n<text text-anchor=\"start\" x=\"2032.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 49->50 -->\n<g id=\"edge50\" class=\"edge\"><title>49->50</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2306,-1293.99C2245.85,-1275.17 2176.91,-1253.6 2127.6,-1238.18\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2128.59,-1234.82 2118,-1235.18 2126.5,-1241.5 2128.59,-1234.82\"/>\n</g>\n<!-- 59 -->\n<g id=\"node60\" class=\"node\"><title>59</title>\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M2540,-1258C2540,-1258 2331,-1258 2331,-1258 2325,-1258 2319,-1252 2319,-1246 2319,-1246 2319,-1187 2319,-1187 2319,-1181 2325,-1175 2331,-1175 2331,-1175 2540,-1175 2540,-1175 2546,-1175 2552,-1181 2552,-1187 2552,-1187 2552,-1246 2552,-1246 2552,-1252 2546,-1258 2540,-1258\"/>\n<text text-anchor=\"start\" x=\"2327\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.605</text>\n<text text-anchor=\"start\" x=\"2398\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.019</text>\n<text text-anchor=\"start\" x=\"2388\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 828</text>\n<text text-anchor=\"start\" x=\"2387\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 820]</text>\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 49->59 -->\n<g id=\"edge59\" class=\"edge\"><title>49->59</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2435.5,-1293.91C2435.5,-1285.65 2435.5,-1276.86 2435.5,-1268.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2439,-1268.02 2435.5,-1258.02 2432,-1268.02 2439,-1268.02\"/>\n</g>\n<!-- 51 -->\n<g id=\"node52\" class=\"node\"><title>51</title>\n<path fill=\"#eb9e67\" stroke=\"black\" d=\"M1929,-1139C1929,-1139 1720,-1139 1720,-1139 1714,-1139 1708,-1133 1708,-1127 1708,-1127 1708,-1068 1708,-1068 1708,-1062 1714,-1056 1720,-1056 1720,-1056 1929,-1056 1929,-1056 1935,-1056 1941,-1062 1941,-1068 1941,-1068 1941,-1127 1941,-1127 1941,-1133 1935,-1139 1929,-1139\"/>\n<text text-anchor=\"start\" x=\"1716\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.347</text>\n<text text-anchor=\"start\" x=\"1787\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.307</text>\n<text text-anchor=\"start\" x=\"1781\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\n<text text-anchor=\"start\" x=\"1780\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [30, 7]</text>\n<text text-anchor=\"start\" x=\"1795.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 50->51 -->\n<g id=\"edge51\" class=\"edge\"><title>50->51</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2004.73,-1187.48C1978.17,-1174.36 1945.88,-1158.42 1916,-1143.67\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1917.33,-1140.42 1906.81,-1139.13 1914.23,-1146.7 1917.33,-1140.42\"/>\n</g>\n<!-- 58 -->\n<g id=\"node59\" class=\"node\"><title>58</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2102,-1131.5C2102,-1131.5 2021,-1131.5 2021,-1131.5 2015,-1131.5 2009,-1125.5 2009,-1119.5 2009,-1119.5 2009,-1075.5 2009,-1075.5 2009,-1069.5 2015,-1063.5 2021,-1063.5 2021,-1063.5 2102,-1063.5 2102,-1063.5 2108,-1063.5 2114,-1069.5 2114,-1075.5 2114,-1075.5 2114,-1119.5 2114,-1119.5 2114,-1125.5 2108,-1131.5 2102,-1131.5\"/>\n<text text-anchor=\"start\" x=\"2032.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2018\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 77</text>\n<text text-anchor=\"start\" x=\"2017\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 77]</text>\n<text text-anchor=\"start\" x=\"2032.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 50->58 -->\n<g id=\"edge58\" class=\"edge\"><title>50->58</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2061.5,-1174.91C2061.5,-1164.2 2061.5,-1152.62 2061.5,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2065,-1141.67 2061.5,-1131.67 2058,-1141.67 2065,-1141.67\"/>\n</g>\n<!-- 52 -->\n<g id=\"node53\" class=\"node\"><title>52</title>\n<path fill=\"#e68540\" stroke=\"black\" d=\"M1672,-1020C1672,-1020 1573,-1020 1573,-1020 1567,-1020 1561,-1014 1561,-1008 1561,-1008 1561,-949 1561,-949 1561,-943 1567,-937 1573,-937 1573,-937 1672,-937 1672,-937 1678,-937 1684,-943 1684,-949 1684,-949 1684,-1008 1684,-1008 1684,-1014 1678,-1020 1672,-1020\"/>\n<text text-anchor=\"start\" x=\"1569\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.112</text>\n<text text-anchor=\"start\" x=\"1585\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.064</text>\n<text text-anchor=\"start\" x=\"1579\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"1578\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 1]</text>\n<text text-anchor=\"start\" x=\"1593.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 51->52 -->\n<g id=\"edge52\" class=\"edge\"><title>51->52</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1754.42,-1055.91C1734.47,-1044.35 1712.73,-1031.76 1692.77,-1020.2\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1694.44,-1017.13 1684.04,-1015.14 1690.93,-1023.18 1694.44,-1017.13\"/>\n</g>\n<!-- 55 -->\n<g id=\"node56\" class=\"node\"><title>55</title>\n<path fill=\"#5aade9\" stroke=\"black\" d=\"M1918,-1020C1918,-1020 1731,-1020 1731,-1020 1725,-1020 1719,-1014 1719,-1008 1719,-1008 1719,-949 1719,-949 1719,-943 1725,-937 1731,-937 1731,-937 1918,-937 1918,-937 1924,-937 1930,-943 1930,-949 1930,-949 1930,-1008 1930,-1008 1930,-1014 1924,-1020 1918,-1020\"/>\n<text text-anchor=\"start\" x=\"1727\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.975</text>\n<text text-anchor=\"start\" x=\"1787\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.245</text>\n<text text-anchor=\"start\" x=\"1785\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"1784\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 6]</text>\n<text text-anchor=\"start\" x=\"1795.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 51->55 -->\n<g id=\"edge55\" class=\"edge\"><title>51->55</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1824.5,-1055.91C1824.5,-1047.65 1824.5,-1038.86 1824.5,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1828,-1030.02 1824.5,-1020.02 1821,-1030.02 1828,-1030.02\"/>\n</g>\n<!-- 53 -->\n<g id=\"node54\" class=\"node\"><title>53</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1544,-893.5C1544,-893.5 1463,-893.5 1463,-893.5 1457,-893.5 1451,-887.5 1451,-881.5 1451,-881.5 1451,-837.5 1451,-837.5 1451,-831.5 1457,-825.5 1463,-825.5 1463,-825.5 1544,-825.5 1544,-825.5 1550,-825.5 1556,-831.5 1556,-837.5 1556,-837.5 1556,-881.5 1556,-881.5 1556,-887.5 1550,-893.5 1544,-893.5\"/>\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1460\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\n<text text-anchor=\"start\" x=\"1459\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 52->53 -->\n<g id=\"edge53\" class=\"edge\"><title>52->53</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1581.21,-936.907C1569.32,-925.211 1556.35,-912.457 1544.47,-900.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1546.82,-898.182 1537.23,-893.667 1541.91,-903.174 1546.82,-898.182\"/>\n</g>\n<!-- 54 -->\n<g id=\"node55\" class=\"node\"><title>54</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1659,-893.5C1659,-893.5 1586,-893.5 1586,-893.5 1580,-893.5 1574,-887.5 1574,-881.5 1574,-881.5 1574,-837.5 1574,-837.5 1574,-831.5 1580,-825.5 1586,-825.5 1586,-825.5 1659,-825.5 1659,-825.5 1665,-825.5 1671,-831.5 1671,-837.5 1671,-837.5 1671,-881.5 1671,-881.5 1671,-887.5 1665,-893.5 1659,-893.5\"/>\n<text text-anchor=\"start\" x=\"1593.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1583\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1582\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"1593.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 52->54 -->\n<g id=\"edge54\" class=\"edge\"><title>52->54</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1622.5,-936.907C1622.5,-926.204 1622.5,-914.615 1622.5,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1626,-903.667 1622.5,-893.667 1619,-903.667 1626,-903.667\"/>\n</g>\n<!-- 56 -->\n<g id=\"node57\" class=\"node\"><title>56</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1774,-893.5C1774,-893.5 1701,-893.5 1701,-893.5 1695,-893.5 1689,-887.5 1689,-881.5 1689,-881.5 1689,-837.5 1689,-837.5 1689,-831.5 1695,-825.5 1701,-825.5 1701,-825.5 1774,-825.5 1774,-825.5 1780,-825.5 1786,-831.5 1786,-837.5 1786,-837.5 1786,-881.5 1786,-881.5 1786,-887.5 1780,-893.5 1774,-893.5\"/>\n<text text-anchor=\"start\" x=\"1708.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1698\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1697\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"1708.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 55->56 -->\n<g id=\"edge56\" class=\"edge\"><title>55->56</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1794.32,-936.907C1785.86,-925.542 1776.67,-913.178 1768.19,-901.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1770.94,-899.603 1762.16,-893.667 1765.32,-903.78 1770.94,-899.603\"/>\n</g>\n<!-- 57 -->\n<g id=\"node58\" class=\"node\"><title>57</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1889,-893.5C1889,-893.5 1816,-893.5 1816,-893.5 1810,-893.5 1804,-887.5 1804,-881.5 1804,-881.5 1804,-837.5 1804,-837.5 1804,-831.5 1810,-825.5 1816,-825.5 1816,-825.5 1889,-825.5 1889,-825.5 1895,-825.5 1901,-831.5 1901,-837.5 1901,-837.5 1901,-881.5 1901,-881.5 1901,-887.5 1895,-893.5 1889,-893.5\"/>\n<text text-anchor=\"start\" x=\"1823.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1813\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1812\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1823.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 55->57 -->\n<g id=\"edge57\" class=\"edge\"><title>55->57</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1834.21,-936.907C1836.8,-926.094 1839.61,-914.376 1842.22,-903.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1845.64,-904.207 1844.56,-893.667 1838.83,-902.578 1845.64,-904.207\"/>\n</g>\n<!-- 60 -->\n<g id=\"node61\" class=\"node\"><title>60</title>\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M2382,-1139C2382,-1139 2209,-1139 2209,-1139 2203,-1139 2197,-1133 2197,-1127 2197,-1127 2197,-1068 2197,-1068 2197,-1062 2203,-1056 2209,-1056 2209,-1056 2382,-1056 2382,-1056 2388,-1056 2394,-1062 2394,-1068 2394,-1068 2394,-1127 2394,-1127 2394,-1133 2388,-1139 2382,-1139\"/>\n<text text-anchor=\"start\" x=\"2205\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -1.026</text>\n<text text-anchor=\"start\" x=\"2262\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.01</text>\n<text text-anchor=\"start\" x=\"2248\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 819</text>\n<text text-anchor=\"start\" x=\"2247\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 815]</text>\n<text text-anchor=\"start\" x=\"2266.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 59->60 -->\n<g id=\"edge60\" class=\"edge\"><title>59->60</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2386.93,-1174.91C2375.63,-1165.47 2363.52,-1155.34 2351.92,-1145.65\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2353.9,-1142.75 2343.99,-1139.02 2349.42,-1148.12 2353.9,-1142.75\"/>\n</g>\n<!-- 71 -->\n<g id=\"node72\" class=\"node\"><title>71</title>\n<path fill=\"#d7ebfa\" stroke=\"black\" d=\"M2647.5,-1139C2647.5,-1139 2501.5,-1139 2501.5,-1139 2495.5,-1139 2489.5,-1133 2489.5,-1127 2489.5,-1127 2489.5,-1068 2489.5,-1068 2489.5,-1062 2495.5,-1056 2501.5,-1056 2501.5,-1056 2647.5,-1056 2647.5,-1056 2653.5,-1056 2659.5,-1062 2659.5,-1068 2659.5,-1068 2659.5,-1127 2659.5,-1127 2659.5,-1133 2653.5,-1139 2647.5,-1139\"/>\n<text text-anchor=\"start\" x=\"2497.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -1.778</text>\n<text text-anchor=\"start\" x=\"2537\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.494</text>\n<text text-anchor=\"start\" x=\"2535\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"2534\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 5]</text>\n<text text-anchor=\"start\" x=\"2545.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 59->71 -->\n<g id=\"edge71\" class=\"edge\"><title>59->71</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2483.73,-1174.91C2494.94,-1165.47 2506.97,-1155.34 2518.49,-1145.65\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2520.96,-1148.14 2526.36,-1139.02 2516.46,-1142.78 2520.96,-1148.14\"/>\n</g>\n<!-- 61 -->\n<g id=\"node62\" class=\"node\"><title>61</title>\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M2134,-1020C2134,-1020 2031,-1020 2031,-1020 2025,-1020 2019,-1014 2019,-1008 2019,-1008 2019,-949 2019,-949 2019,-943 2025,-937 2031,-937 2031,-937 2134,-937 2134,-937 2140,-937 2146,-943 2146,-949 2146,-949 2146,-1008 2146,-1008 2146,-1014 2140,-1020 2134,-1020\"/>\n<text text-anchor=\"start\" x=\"2027\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"2045\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.375</text>\n<text text-anchor=\"start\" x=\"2043\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2042\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\n<text text-anchor=\"start\" x=\"2053.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 60->61 -->\n<g id=\"edge61\" class=\"edge\"><title>60->61</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2221.6,-1055.91C2200.15,-1044.13 2176.75,-1031.27 2155.37,-1019.53\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2156.79,-1016.31 2146.34,-1014.57 2153.42,-1022.45 2156.79,-1016.31\"/>\n</g>\n<!-- 64 -->\n<g id=\"node65\" class=\"node\"><title>64</title>\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M2413.5,-1020C2413.5,-1020 2177.5,-1020 2177.5,-1020 2171.5,-1020 2165.5,-1014 2165.5,-1008 2165.5,-1008 2165.5,-949 2165.5,-949 2165.5,-943 2171.5,-937 2177.5,-937 2177.5,-937 2413.5,-937 2413.5,-937 2419.5,-937 2425.5,-943 2425.5,-949 2425.5,-949 2425.5,-1008 2425.5,-1008 2425.5,-1014 2419.5,-1020 2413.5,-1020\"/>\n<text text-anchor=\"start\" x=\"2173.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 1.614</text>\n<text text-anchor=\"start\" x=\"2258\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.007</text>\n<text text-anchor=\"start\" x=\"2248\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 815</text>\n<text text-anchor=\"start\" x=\"2247\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 812]</text>\n<text text-anchor=\"start\" x=\"2266.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 60->64 -->\n<g id=\"edge64\" class=\"edge\"><title>60->64</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2295.5,-1055.91C2295.5,-1047.65 2295.5,-1038.86 2295.5,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2299,-1030.02 2295.5,-1020.02 2292,-1030.02 2299,-1030.02\"/>\n</g>\n<!-- 62 -->\n<g id=\"node63\" class=\"node\"><title>62</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2004,-893.5C2004,-893.5 1931,-893.5 1931,-893.5 1925,-893.5 1919,-887.5 1919,-881.5 1919,-881.5 1919,-837.5 1919,-837.5 1919,-831.5 1925,-825.5 1931,-825.5 1931,-825.5 2004,-825.5 2004,-825.5 2010,-825.5 2016,-831.5 2016,-837.5 2016,-837.5 2016,-881.5 2016,-881.5 2016,-887.5 2010,-893.5 2004,-893.5\"/>\n<text text-anchor=\"start\" x=\"1938.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"1928\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1927\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"1938.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 61->62 -->\n<g id=\"edge62\" class=\"edge\"><title>61->62</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2042.6,-936.907C2031.21,-925.321 2018.81,-912.698 2007.42,-901.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2009.61,-898.345 2000.1,-893.667 2004.61,-903.252 2009.61,-898.345\"/>\n</g>\n<!-- 63 -->\n<g id=\"node64\" class=\"node\"><title>63</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M2119,-893.5C2119,-893.5 2046,-893.5 2046,-893.5 2040,-893.5 2034,-887.5 2034,-881.5 2034,-881.5 2034,-837.5 2034,-837.5 2034,-831.5 2040,-825.5 2046,-825.5 2046,-825.5 2119,-825.5 2119,-825.5 2125,-825.5 2131,-831.5 2131,-837.5 2131,-837.5 2131,-881.5 2131,-881.5 2131,-887.5 2125,-893.5 2119,-893.5\"/>\n<text text-anchor=\"start\" x=\"2053.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"2043\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2042\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"2053.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 61->63 -->\n<g id=\"edge63\" class=\"edge\"><title>61->63</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2082.5,-936.907C2082.5,-926.204 2082.5,-914.615 2082.5,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2086,-903.667 2082.5,-893.667 2079,-903.667 2086,-903.667\"/>\n</g>\n<!-- 65 -->\n<g id=\"node66\" class=\"node\"><title>65</title>\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M2388,-901C2388,-901 2161,-901 2161,-901 2155,-901 2149,-895 2149,-889 2149,-889 2149,-830 2149,-830 2149,-824 2155,-818 2161,-818 2161,-818 2388,-818 2388,-818 2394,-818 2400,-824 2400,-830 2400,-830 2400,-889 2400,-889 2400,-895 2394,-901 2388,-901\"/>\n<text text-anchor=\"start\" x=\"2157\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ -0.198</text>\n<text text-anchor=\"start\" x=\"2237\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.111</text>\n<text text-anchor=\"start\" x=\"2231\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\n<text text-anchor=\"start\" x=\"2230\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 48]</text>\n<text text-anchor=\"start\" x=\"2245.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 64->65 -->\n<g id=\"edge65\" class=\"edge\"><title>64->65</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2288.21,-936.907C2286.72,-928.558 2285.12,-919.671 2283.57,-911.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2286.98,-910.245 2281.77,-901.021 2280.09,-911.482 2286.98,-910.245\"/>\n</g>\n<!-- 70 -->\n<g id=\"node71\" class=\"node\"><title>70</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2519,-893.5C2519,-893.5 2430,-893.5 2430,-893.5 2424,-893.5 2418,-887.5 2418,-881.5 2418,-881.5 2418,-837.5 2418,-837.5 2418,-831.5 2424,-825.5 2430,-825.5 2430,-825.5 2519,-825.5 2519,-825.5 2525,-825.5 2531,-831.5 2531,-837.5 2531,-837.5 2531,-881.5 2531,-881.5 2531,-887.5 2525,-893.5 2519,-893.5\"/>\n<text text-anchor=\"start\" x=\"2445.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2427\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 764</text>\n<text text-anchor=\"start\" x=\"2426\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 764]</text>\n<text text-anchor=\"start\" x=\"2445.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 64->70 -->\n<g id=\"edge70\" class=\"edge\"><title>64->70</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2357.6,-936.907C2376.26,-924.714 2396.67,-911.373 2415.14,-899.298\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2417.3,-902.068 2423.76,-893.667 2413.47,-896.209 2417.3,-902.068\"/>\n</g>\n<!-- 66 -->\n<g id=\"node67\" class=\"node\"><title>66</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2168,-774.5C2168,-774.5 2087,-774.5 2087,-774.5 2081,-774.5 2075,-768.5 2075,-762.5 2075,-762.5 2075,-718.5 2075,-718.5 2075,-712.5 2081,-706.5 2087,-706.5 2087,-706.5 2168,-706.5 2168,-706.5 2174,-706.5 2180,-712.5 2180,-718.5 2180,-718.5 2180,-762.5 2180,-762.5 2180,-768.5 2174,-774.5 2168,-774.5\"/>\n<text text-anchor=\"start\" x=\"2098.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2084\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\n<text text-anchor=\"start\" x=\"2083\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 47]</text>\n<text text-anchor=\"start\" x=\"2098.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 65->66 -->\n<g id=\"edge66\" class=\"edge\"><title>65->66</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2223.5,-817.907C2208.53,-805.99 2192.17,-792.976 2177.28,-781.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2179.18,-778.156 2169.17,-774.667 2174.82,-783.633 2179.18,-778.156\"/>\n</g>\n<!-- 67 -->\n<g id=\"node68\" class=\"node\"><title>67</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M2397,-782C2397,-782 2210,-782 2210,-782 2204,-782 2198,-776 2198,-770 2198,-770 2198,-711 2198,-711 2198,-705 2204,-699 2210,-699 2210,-699 2397,-699 2397,-699 2403,-699 2409,-705 2409,-711 2409,-711 2409,-770 2409,-770 2409,-776 2403,-782 2397,-782\"/>\n<text text-anchor=\"start\" x=\"2206\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 2.417</text>\n<text text-anchor=\"start\" x=\"2266\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.375</text>\n<text text-anchor=\"start\" x=\"2264\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2263\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 1]</text>\n<text text-anchor=\"start\" x=\"2274.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 65->67 -->\n<g id=\"edge67\" class=\"edge\"><title>65->67</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2284.56,-817.907C2286.65,-809.468 2288.88,-800.477 2291.05,-791.738\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2294.45,-792.569 2293.46,-782.021 2287.65,-790.885 2294.45,-792.569\"/>\n</g>\n<!-- 68 -->\n<g id=\"node69\" class=\"node\"><title>68</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2240,-655.5C2240,-655.5 2167,-655.5 2167,-655.5 2161,-655.5 2155,-649.5 2155,-643.5 2155,-643.5 2155,-599.5 2155,-599.5 2155,-593.5 2161,-587.5 2167,-587.5 2167,-587.5 2240,-587.5 2240,-587.5 2246,-587.5 2252,-593.5 2252,-599.5 2252,-599.5 2252,-643.5 2252,-643.5 2252,-649.5 2246,-655.5 2240,-655.5\"/>\n<text text-anchor=\"start\" x=\"2174.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2164\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2163\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"2174.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 67->68 -->\n<g id=\"edge68\" class=\"edge\"><title>67->68</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2268.81,-698.907C2259,-687.432 2248.32,-674.938 2238.49,-663.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2241.01,-660.995 2231.85,-655.667 2235.68,-665.543 2241.01,-660.995\"/>\n</g>\n<!-- 69 -->\n<g id=\"node70\" class=\"node\"><title>69</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2355,-655.5C2355,-655.5 2282,-655.5 2282,-655.5 2276,-655.5 2270,-649.5 2270,-643.5 2270,-643.5 2270,-599.5 2270,-599.5 2270,-593.5 2276,-587.5 2282,-587.5 2282,-587.5 2355,-587.5 2355,-587.5 2361,-587.5 2367,-593.5 2367,-599.5 2367,-599.5 2367,-643.5 2367,-643.5 2367,-649.5 2361,-655.5 2355,-655.5\"/>\n<text text-anchor=\"start\" x=\"2289.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2279\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2278\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2289.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 67->69 -->\n<g id=\"edge69\" class=\"edge\"><title>67->69</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2308.7,-698.907C2310.08,-688.204 2311.56,-676.615 2312.95,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2316.45,-666.031 2314.25,-655.667 2309.5,-665.141 2316.45,-666.031\"/>\n</g>\n<!-- 72 -->\n<g id=\"node73\" class=\"node\"><title>72</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2692.5,-1020C2692.5,-1020 2456.5,-1020 2456.5,-1020 2450.5,-1020 2444.5,-1014 2444.5,-1008 2444.5,-1008 2444.5,-949 2444.5,-949 2444.5,-943 2450.5,-937 2456.5,-937 2456.5,-937 2692.5,-937 2692.5,-937 2698.5,-937 2704.5,-943 2704.5,-949 2704.5,-949 2704.5,-1008 2704.5,-1008 2704.5,-1014 2698.5,-1020 2692.5,-1020\"/>\n<text text-anchor=\"start\" x=\"2452.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 1.419</text>\n<text text-anchor=\"start\" x=\"2537\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"2535\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"2534\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 2]</text>\n<text text-anchor=\"start\" x=\"2545.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 71->72 -->\n<g id=\"edge72\" class=\"edge\"><title>71->72</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2574.5,-1055.91C2574.5,-1047.65 2574.5,-1038.86 2574.5,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2578,-1030.02 2574.5,-1020.02 2571,-1030.02 2578,-1030.02\"/>\n</g>\n<!-- 79 -->\n<g id=\"node80\" class=\"node\"><title>79</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2808,-1012.5C2808,-1012.5 2735,-1012.5 2735,-1012.5 2729,-1012.5 2723,-1006.5 2723,-1000.5 2723,-1000.5 2723,-956.5 2723,-956.5 2723,-950.5 2729,-944.5 2735,-944.5 2735,-944.5 2808,-944.5 2808,-944.5 2814,-944.5 2820,-950.5 2820,-956.5 2820,-956.5 2820,-1000.5 2820,-1000.5 2820,-1006.5 2814,-1012.5 2808,-1012.5\"/>\n<text text-anchor=\"start\" x=\"2742.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2732\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2731\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"2742.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 71->79 -->\n<g id=\"edge79\" class=\"edge\"><title>71->79</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2651.82,-1055.85C2672.13,-1044.66 2693.85,-1032.22 2713.5,-1020 2714.44,-1019.42 2715.38,-1018.82 2716.33,-1018.22\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2718.45,-1021.02 2724.94,-1012.65 2714.64,-1015.15 2718.45,-1021.02\"/>\n</g>\n<!-- 73 -->\n<g id=\"node74\" class=\"node\"><title>73</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2634,-893.5C2634,-893.5 2561,-893.5 2561,-893.5 2555,-893.5 2549,-887.5 2549,-881.5 2549,-881.5 2549,-837.5 2549,-837.5 2549,-831.5 2555,-825.5 2561,-825.5 2561,-825.5 2634,-825.5 2634,-825.5 2640,-825.5 2646,-831.5 2646,-837.5 2646,-837.5 2646,-881.5 2646,-881.5 2646,-887.5 2640,-893.5 2634,-893.5\"/>\n<text text-anchor=\"start\" x=\"2568.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2558\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2557\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2568.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 72->73 -->\n<g id=\"edge73\" class=\"edge\"><title>72->73</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2582.48,-936.907C2584.58,-926.204 2586.86,-914.615 2588.99,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2592.49,-904.154 2590.98,-893.667 2585.62,-902.804 2592.49,-904.154\"/>\n</g>\n<!-- 74 -->\n<g id=\"node75\" class=\"node\"><title>74</title>\n<path fill=\"#eca06a\" stroke=\"black\" d=\"M2786.5,-901C2786.5,-901 2676.5,-901 2676.5,-901 2670.5,-901 2664.5,-895 2664.5,-889 2664.5,-889 2664.5,-830 2664.5,-830 2664.5,-824 2670.5,-818 2676.5,-818 2676.5,-818 2786.5,-818 2786.5,-818 2792.5,-818 2798.5,-824 2798.5,-830 2798.5,-830 2798.5,-889 2798.5,-889 2798.5,-895 2792.5,-901 2786.5,-901\"/>\n<text text-anchor=\"start\" x=\"2672.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ -0.362</text>\n<text text-anchor=\"start\" x=\"2698\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.32</text>\n<text text-anchor=\"start\" x=\"2692\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"2691\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 1]</text>\n<text text-anchor=\"start\" x=\"2702.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 72->74 -->\n<g id=\"edge74\" class=\"edge\"><title>72->74</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2628.97,-936.907C2641.88,-927.288 2655.75,-916.953 2668.98,-907.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2671.2,-909.803 2677.13,-901.021 2667.02,-904.19 2671.2,-909.803\"/>\n</g>\n<!-- 75 -->\n<g id=\"node76\" class=\"node\"><title>75</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M2649,-782C2649,-782 2476,-782 2476,-782 2470,-782 2464,-776 2464,-770 2464,-770 2464,-711 2464,-711 2464,-705 2470,-699 2476,-699 2476,-699 2649,-699 2649,-699 2655,-699 2661,-705 2661,-711 2661,-711 2661,-770 2661,-770 2661,-776 2655,-782 2649,-782\"/>\n<text text-anchor=\"start\" x=\"2472\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.999</text>\n<text text-anchor=\"start\" x=\"2533.5\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"2523\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2522\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"2533.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 74->75 -->\n<g id=\"edge75\" class=\"edge\"><title>74->75</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2672.87,-817.907C2658.84,-808.197 2643.76,-797.758 2629.39,-787.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2631.24,-784.835 2621.03,-782.021 2627.26,-790.591 2631.24,-784.835\"/>\n</g>\n<!-- 78 -->\n<g id=\"node79\" class=\"node\"><title>78</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2768,-774.5C2768,-774.5 2695,-774.5 2695,-774.5 2689,-774.5 2683,-768.5 2683,-762.5 2683,-762.5 2683,-718.5 2683,-718.5 2683,-712.5 2689,-706.5 2695,-706.5 2695,-706.5 2768,-706.5 2768,-706.5 2774,-706.5 2780,-712.5 2780,-718.5 2780,-718.5 2780,-762.5 2780,-762.5 2780,-768.5 2774,-774.5 2768,-774.5\"/>\n<text text-anchor=\"start\" x=\"2702.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2692\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2691\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"2702.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 74->78 -->\n<g id=\"edge78\" class=\"edge\"><title>74->78</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2731.5,-817.907C2731.5,-807.204 2731.5,-795.615 2731.5,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2735,-784.667 2731.5,-774.667 2728,-784.667 2735,-784.667\"/>\n</g>\n<!-- 76 -->\n<g id=\"node77\" class=\"node\"><title>76</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2484,-655.5C2484,-655.5 2411,-655.5 2411,-655.5 2405,-655.5 2399,-649.5 2399,-643.5 2399,-643.5 2399,-599.5 2399,-599.5 2399,-593.5 2405,-587.5 2411,-587.5 2411,-587.5 2484,-587.5 2484,-587.5 2490,-587.5 2496,-593.5 2496,-599.5 2496,-599.5 2496,-643.5 2496,-643.5 2496,-649.5 2490,-655.5 2484,-655.5\"/>\n<text text-anchor=\"start\" x=\"2418.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2408\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2407\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"2418.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 75->76 -->\n<g id=\"edge76\" class=\"edge\"><title>75->76</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2522.6,-698.907C2511.21,-687.321 2498.81,-674.698 2487.42,-663.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2489.61,-660.345 2480.1,-655.667 2484.61,-665.252 2489.61,-660.345\"/>\n</g>\n<!-- 77 -->\n<g id=\"node78\" class=\"node\"><title>77</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2599,-655.5C2599,-655.5 2526,-655.5 2526,-655.5 2520,-655.5 2514,-649.5 2514,-643.5 2514,-643.5 2514,-599.5 2514,-599.5 2514,-593.5 2520,-587.5 2526,-587.5 2526,-587.5 2599,-587.5 2599,-587.5 2605,-587.5 2611,-593.5 2611,-599.5 2611,-599.5 2611,-643.5 2611,-643.5 2611,-649.5 2605,-655.5 2599,-655.5\"/>\n<text text-anchor=\"start\" x=\"2533.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2523\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2522\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2533.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 75->77 -->\n<g id=\"edge77\" class=\"edge\"><title>75->77</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2562.5,-698.907C2562.5,-688.204 2562.5,-676.615 2562.5,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2566,-665.667 2562.5,-655.667 2559,-665.667 2566,-665.667\"/>\n</g>\n<!-- 81 -->\n<g id=\"node82\" class=\"node\"><title>81</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3058,-1258C3058,-1258 2879,-1258 2879,-1258 2873,-1258 2867,-1252 2867,-1246 2867,-1246 2867,-1187 2867,-1187 2867,-1181 2873,-1175 2879,-1175 2879,-1175 3058,-1175 3058,-1175 3064,-1175 3070,-1181 3070,-1187 3070,-1187 3070,-1246 3070,-1246 3070,-1252 3064,-1258 3058,-1258\"/>\n<text text-anchor=\"start\" x=\"2875\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 4.02</text>\n<text text-anchor=\"start\" x=\"2931\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.029</text>\n<text text-anchor=\"start\" x=\"2921\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 206</text>\n<text text-anchor=\"start\" x=\"2920\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 3]</text>\n<text text-anchor=\"start\" x=\"2939.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 80->81 -->\n<g id=\"edge81\" class=\"edge\"><title>80->81</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2968.5,-1293.91C2968.5,-1285.65 2968.5,-1276.86 2968.5,-1268.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2972,-1268.02 2968.5,-1258.02 2965,-1268.02 2972,-1268.02\"/>\n</g>\n<!-- 88 -->\n<g id=\"node89\" class=\"node\"><title>88</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3173,-1250.5C3173,-1250.5 3100,-1250.5 3100,-1250.5 3094,-1250.5 3088,-1244.5 3088,-1238.5 3088,-1238.5 3088,-1194.5 3088,-1194.5 3088,-1188.5 3094,-1182.5 3100,-1182.5 3100,-1182.5 3173,-1182.5 3173,-1182.5 3179,-1182.5 3185,-1188.5 3185,-1194.5 3185,-1194.5 3185,-1238.5 3185,-1238.5 3185,-1244.5 3179,-1250.5 3173,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3107.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3097\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"3096\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"3107.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 80->88 -->\n<g id=\"edge88\" class=\"edge\"><title>80->88</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3027.03,-1293.83C3043.67,-1282.26 3061.8,-1269.64 3078.5,-1258 3079.25,-1257.48 3080,-1256.95 3080.76,-1256.42\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3082.83,-1259.25 3089.03,-1250.66 3078.82,-1253.51 3082.83,-1259.25\"/>\n</g>\n<!-- 82 -->\n<g id=\"node83\" class=\"node\"><title>82</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M3071.5,-1139C3071.5,-1139 2865.5,-1139 2865.5,-1139 2859.5,-1139 2853.5,-1133 2853.5,-1127 2853.5,-1127 2853.5,-1068 2853.5,-1068 2853.5,-1062 2859.5,-1056 2865.5,-1056 2865.5,-1056 3071.5,-1056 3071.5,-1056 3077.5,-1056 3083.5,-1062 3083.5,-1068 3083.5,-1068 3083.5,-1127 3083.5,-1127 3083.5,-1133 3077.5,-1139 3071.5,-1139\"/>\n<text text-anchor=\"start\" x=\"2861.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ -0.012</text>\n<text text-anchor=\"start\" x=\"2931\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.019</text>\n<text text-anchor=\"start\" x=\"2921\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 205</text>\n<text text-anchor=\"start\" x=\"2920\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 2]</text>\n<text text-anchor=\"start\" x=\"2939.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 81->82 -->\n<g id=\"edge82\" class=\"edge\"><title>81->82</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2968.5,-1174.91C2968.5,-1166.65 2968.5,-1157.86 2968.5,-1149.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2972,-1149.02 2968.5,-1139.02 2965,-1149.02 2972,-1149.02\"/>\n</g>\n<!-- 87 -->\n<g id=\"node88\" class=\"node\"><title>87</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3187,-1131.5C3187,-1131.5 3114,-1131.5 3114,-1131.5 3108,-1131.5 3102,-1125.5 3102,-1119.5 3102,-1119.5 3102,-1075.5 3102,-1075.5 3102,-1069.5 3108,-1063.5 3114,-1063.5 3114,-1063.5 3187,-1063.5 3187,-1063.5 3193,-1063.5 3199,-1069.5 3199,-1075.5 3199,-1075.5 3199,-1119.5 3199,-1119.5 3199,-1125.5 3193,-1131.5 3187,-1131.5\"/>\n<text text-anchor=\"start\" x=\"3121.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3111\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3110\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3121.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 81->87 -->\n<g id=\"edge87\" class=\"edge\"><title>81->87</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3035.87,-1174.9C3054.36,-1163.49 3074.32,-1150.94 3092.5,-1139 3093.29,-1138.48 3094.08,-1137.96 3094.87,-1137.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3097.13,-1140.14 3103.49,-1131.66 3093.23,-1134.32 3097.13,-1140.14\"/>\n</g>\n<!-- 83 -->\n<g id=\"node84\" class=\"node\"><title>83</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M3086.5,-1020C3086.5,-1020 2850.5,-1020 2850.5,-1020 2844.5,-1020 2838.5,-1014 2838.5,-1008 2838.5,-1008 2838.5,-949 2838.5,-949 2838.5,-943 2844.5,-937 2850.5,-937 2850.5,-937 3086.5,-937 3086.5,-937 3092.5,-937 3098.5,-943 3098.5,-949 3098.5,-949 3098.5,-1008 3098.5,-1008 3098.5,-1014 3092.5,-1020 3086.5,-1020\"/>\n<text text-anchor=\"start\" x=\"2846.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 1.289</text>\n<text text-anchor=\"start\" x=\"2931\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"2929\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"2928\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 2]</text>\n<text text-anchor=\"start\" x=\"2939.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 82->83 -->\n<g id=\"edge83\" class=\"edge\"><title>82->83</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2968.5,-1055.91C2968.5,-1047.65 2968.5,-1038.86 2968.5,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2972,-1030.02 2968.5,-1020.02 2965,-1030.02 2972,-1030.02\"/>\n</g>\n<!-- 86 -->\n<g id=\"node87\" class=\"node\"><title>86</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3218,-1012.5C3218,-1012.5 3129,-1012.5 3129,-1012.5 3123,-1012.5 3117,-1006.5 3117,-1000.5 3117,-1000.5 3117,-956.5 3117,-956.5 3117,-950.5 3123,-944.5 3129,-944.5 3129,-944.5 3218,-944.5 3218,-944.5 3224,-944.5 3230,-950.5 3230,-956.5 3230,-956.5 3230,-1000.5 3230,-1000.5 3230,-1006.5 3224,-1012.5 3218,-1012.5\"/>\n<text text-anchor=\"start\" x=\"3144.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3126\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 199</text>\n<text text-anchor=\"start\" x=\"3125\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [199, 0]</text>\n<text text-anchor=\"start\" x=\"3144.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 82->86 -->\n<g id=\"edge86\" class=\"edge\"><title>82->86</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3043.89,-1055.85C3064.62,-1044.45 3087.02,-1031.91 3107.5,-1020 3108.77,-1019.26 3110.05,-1018.51 3111.35,-1017.75\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3113.14,-1020.76 3119.96,-1012.65 3109.57,-1014.74 3113.14,-1020.76\"/>\n</g>\n<!-- 84 -->\n<g id=\"node85\" class=\"node\"><title>84</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2905,-893.5C2905,-893.5 2832,-893.5 2832,-893.5 2826,-893.5 2820,-887.5 2820,-881.5 2820,-881.5 2820,-837.5 2820,-837.5 2820,-831.5 2826,-825.5 2832,-825.5 2832,-825.5 2905,-825.5 2905,-825.5 2911,-825.5 2917,-831.5 2917,-837.5 2917,-837.5 2917,-881.5 2917,-881.5 2917,-887.5 2911,-893.5 2905,-893.5\"/>\n<text text-anchor=\"start\" x=\"2839.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2829\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2828\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"2839.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 83->84 -->\n<g id=\"edge84\" class=\"edge\"><title>83->84</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2933.81,-936.907C2924,-925.432 2913.32,-912.938 2903.49,-901.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2906.01,-898.995 2896.85,-893.667 2900.68,-903.543 2906.01,-898.995\"/>\n</g>\n<!-- 85 -->\n<g id=\"node86\" class=\"node\"><title>85</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3020,-893.5C3020,-893.5 2947,-893.5 2947,-893.5 2941,-893.5 2935,-887.5 2935,-881.5 2935,-881.5 2935,-837.5 2935,-837.5 2935,-831.5 2941,-825.5 2947,-825.5 2947,-825.5 3020,-825.5 3020,-825.5 3026,-825.5 3032,-831.5 3032,-837.5 3032,-837.5 3032,-881.5 3032,-881.5 3032,-887.5 3026,-893.5 3020,-893.5\"/>\n<text text-anchor=\"start\" x=\"2954.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2944\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2943\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"2954.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 83->85 -->\n<g id=\"edge85\" class=\"edge\"><title>83->85</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2973.7,-936.907C2975.08,-926.204 2976.56,-914.615 2977.95,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2981.45,-904.031 2979.25,-893.667 2974.5,-903.141 2981.45,-904.031\"/>\n</g>\n<!-- 90 -->\n<g id=\"node91\" class=\"node\"><title>90</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3133,-1488.5C3133,-1488.5 3052,-1488.5 3052,-1488.5 3046,-1488.5 3040,-1482.5 3040,-1476.5 3040,-1476.5 3040,-1432.5 3040,-1432.5 3040,-1426.5 3046,-1420.5 3052,-1420.5 3052,-1420.5 3133,-1420.5 3133,-1420.5 3139,-1420.5 3145,-1426.5 3145,-1432.5 3145,-1432.5 3145,-1476.5 3145,-1476.5 3145,-1482.5 3139,-1488.5 3133,-1488.5\"/>\n<text text-anchor=\"start\" x=\"3063.5\" y=\"-1473.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3049\" y=\"-1458.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 67</text>\n<text text-anchor=\"start\" x=\"3048\" y=\"-1443.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 0]</text>\n<text text-anchor=\"start\" x=\"3063.5\" y=\"-1428.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 89->90 -->\n<g id=\"edge90\" class=\"edge\"><title>89->90</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3131.68,-1531.91C3126.02,-1520.87 3119.88,-1508.9 3114.18,-1497.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3117.19,-1495.97 3109.51,-1488.67 3110.96,-1499.16 3117.19,-1495.97\"/>\n</g>\n<!-- 91 -->\n<g id=\"node92\" class=\"node\"><title>91</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3248,-1488.5C3248,-1488.5 3175,-1488.5 3175,-1488.5 3169,-1488.5 3163,-1482.5 3163,-1476.5 3163,-1476.5 3163,-1432.5 3163,-1432.5 3163,-1426.5 3169,-1420.5 3175,-1420.5 3175,-1420.5 3248,-1420.5 3248,-1420.5 3254,-1420.5 3260,-1426.5 3260,-1432.5 3260,-1432.5 3260,-1476.5 3260,-1476.5 3260,-1482.5 3254,-1488.5 3248,-1488.5\"/>\n<text text-anchor=\"start\" x=\"3182.5\" y=\"-1473.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3172\" y=\"-1458.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"3171\" y=\"-1443.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"3182.5\" y=\"-1428.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 89->91 -->\n<g id=\"edge91\" class=\"edge\"><title>89->91</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3172.97,-1531.91C3178.53,-1520.87 3184.57,-1508.9 3190.18,-1497.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3193.4,-1499.17 3194.77,-1488.67 3187.15,-1496.02 3193.4,-1499.17\"/>\n</g>\n<!-- 93 -->\n<g id=\"node94\" class=\"node\"><title>93</title>\n<path fill=\"#e78c4b\" stroke=\"black\" d=\"M3889,-1615C3889,-1615 3778,-1615 3778,-1615 3772,-1615 3766,-1609 3766,-1603 3766,-1603 3766,-1544 3766,-1544 3766,-1538 3772,-1532 3778,-1532 3778,-1532 3889,-1532 3889,-1532 3895,-1532 3901,-1538 3901,-1544 3901,-1544 3901,-1603 3901,-1603 3901,-1609 3895,-1615 3889,-1615\"/>\n<text text-anchor=\"start\" x=\"3774\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.025</text>\n<text text-anchor=\"start\" x=\"3800\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.15</text>\n<text text-anchor=\"start\" x=\"3786\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 183</text>\n<text text-anchor=\"start\" x=\"3780.5\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [168, 15]</text>\n<text text-anchor=\"start\" x=\"3804.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 92->93 -->\n<g id=\"edge93\" class=\"edge\"><title>92->93</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3896.19,-1650.91C3888.75,-1641.83 3880.78,-1632.12 3873.11,-1622.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3875.8,-1620.53 3866.75,-1615.02 3870.39,-1624.97 3875.8,-1620.53\"/>\n</g>\n<!-- 108 -->\n<g id=\"node109\" class=\"node\"><title>108</title>\n<path fill=\"#4ea8e8\" stroke=\"black\" d=\"M4118,-1615C4118,-1615 3931,-1615 3931,-1615 3925,-1615 3919,-1609 3919,-1603 3919,-1603 3919,-1544 3919,-1544 3919,-1538 3925,-1532 3931,-1532 3931,-1532 4118,-1532 4118,-1532 4124,-1532 4130,-1538 4130,-1544 4130,-1544 4130,-1603 4130,-1603 4130,-1609 4124,-1615 4118,-1615\"/>\n<text text-anchor=\"start\" x=\"3927\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.307</text>\n<text text-anchor=\"start\" x=\"3987\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.175</text>\n<text text-anchor=\"start\" x=\"3981\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\n<text text-anchor=\"start\" x=\"3980\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 28]</text>\n<text text-anchor=\"start\" x=\"3995.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 92->108 -->\n<g id=\"edge108\" class=\"edge\"><title>92->108</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3962.46,-1650.91C3969.75,-1641.92 3977.56,-1632.32 3985.08,-1623.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3988.01,-1624.99 3991.6,-1615.02 3982.58,-1620.58 3988.01,-1624.99\"/>\n</g>\n<!-- 94 -->\n<g id=\"node95\" class=\"node\"><title>94</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M3679,-1496C3679,-1496 3590,-1496 3590,-1496 3584,-1496 3578,-1490 3578,-1484 3578,-1484 3578,-1425 3578,-1425 3578,-1419 3584,-1413 3590,-1413 3590,-1413 3679,-1413 3679,-1413 3685,-1413 3691,-1419 3691,-1425 3691,-1425 3691,-1484 3691,-1484 3691,-1490 3685,-1496 3679,-1496\"/>\n<text text-anchor=\"start\" x=\"3589\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ -0.698</text>\n<text text-anchor=\"start\" x=\"3597\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.058</text>\n<text text-anchor=\"start\" x=\"3587\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 167</text>\n<text text-anchor=\"start\" x=\"3586\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [162, 5]</text>\n<text text-anchor=\"start\" x=\"3605.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 93->94 -->\n<g id=\"edge94\" class=\"edge\"><title>93->94</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3765.85,-1532.73C3744.46,-1520.15 3720.87,-1506.28 3699.66,-1493.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3701.43,-1490.79 3691.04,-1488.74 3697.89,-1496.83 3701.43,-1490.79\"/>\n</g>\n<!-- 103 -->\n<g id=\"node104\" class=\"node\"><title>103</title>\n<path fill=\"#b0d8f5\" stroke=\"black\" d=\"M3937.5,-1496C3937.5,-1496 3735.5,-1496 3735.5,-1496 3729.5,-1496 3723.5,-1490 3723.5,-1484 3723.5,-1484 3723.5,-1425 3723.5,-1425 3723.5,-1419 3729.5,-1413 3735.5,-1413 3735.5,-1413 3937.5,-1413 3937.5,-1413 3943.5,-1413 3949.5,-1419 3949.5,-1425 3949.5,-1425 3949.5,-1484 3949.5,-1484 3949.5,-1490 3943.5,-1496 3937.5,-1496\"/>\n<text text-anchor=\"start\" x=\"3731.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.724</text>\n<text text-anchor=\"start\" x=\"3799\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.469</text>\n<text text-anchor=\"start\" x=\"3793\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"3792\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 10]</text>\n<text text-anchor=\"start\" x=\"3807.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 93->103 -->\n<g id=\"edge103\" class=\"edge\"><title>93->103</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3834.54,-1531.91C3834.75,-1523.56 3834.98,-1514.67 3835.2,-1506.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3838.7,-1506.11 3835.46,-1496.02 3831.71,-1505.93 3838.7,-1506.11\"/>\n</g>\n<!-- 95 -->\n<g id=\"node96\" class=\"node\"><title>95</title>\n<path fill=\"#e5833b\" stroke=\"black\" d=\"M3519,-1377C3519,-1377 3346,-1377 3346,-1377 3340,-1377 3334,-1371 3334,-1365 3334,-1365 3334,-1306 3334,-1306 3334,-1300 3340,-1294 3346,-1294 3346,-1294 3519,-1294 3519,-1294 3525,-1294 3531,-1300 3531,-1306 3531,-1306 3531,-1365 3531,-1365 3531,-1371 3525,-1377 3519,-1377\"/>\n<text text-anchor=\"start\" x=\"3342\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -1.026</text>\n<text text-anchor=\"start\" x=\"3395\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.024</text>\n<text text-anchor=\"start\" x=\"3385\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 162</text>\n<text text-anchor=\"start\" x=\"3384\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [160, 2]</text>\n<text text-anchor=\"start\" x=\"3403.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 94->95 -->\n<g id=\"edge95\" class=\"edge\"><title>94->95</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3577.96,-1420.75C3557.36,-1408.82 3533.66,-1395.09 3511.46,-1382.24\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3513.12,-1379.15 3502.71,-1377.17 3509.61,-1385.21 3513.12,-1379.15\"/>\n</g>\n<!-- 100 -->\n<g id=\"node101\" class=\"node\"><title>100</title>\n<path fill=\"#bddef6\" stroke=\"black\" d=\"M3707.5,-1377C3707.5,-1377 3561.5,-1377 3561.5,-1377 3555.5,-1377 3549.5,-1371 3549.5,-1365 3549.5,-1365 3549.5,-1306 3549.5,-1306 3549.5,-1300 3555.5,-1294 3561.5,-1294 3561.5,-1294 3707.5,-1294 3707.5,-1294 3713.5,-1294 3719.5,-1300 3719.5,-1306 3719.5,-1306 3719.5,-1365 3719.5,-1365 3719.5,-1371 3713.5,-1377 3707.5,-1377\"/>\n<text text-anchor=\"start\" x=\"3557.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -0.945</text>\n<text text-anchor=\"start\" x=\"3601\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.48</text>\n<text text-anchor=\"start\" x=\"3595\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"3594\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 3]</text>\n<text text-anchor=\"start\" x=\"3605.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 94->100 -->\n<g id=\"edge100\" class=\"edge\"><title>94->100</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3634.5,-1412.91C3634.5,-1404.65 3634.5,-1395.86 3634.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3638,-1387.02 3634.5,-1377.02 3631,-1387.02 3638,-1387.02\"/>\n</g>\n<!-- 96 -->\n<g id=\"node97\" class=\"node\"><title>96</title>\n<path fill=\"#eb9d65\" stroke=\"black\" d=\"M3370.5,-1258C3370.5,-1258 3246.5,-1258 3246.5,-1258 3240.5,-1258 3234.5,-1252 3234.5,-1246 3234.5,-1246 3234.5,-1187 3234.5,-1187 3234.5,-1181 3240.5,-1175 3246.5,-1175 3246.5,-1175 3370.5,-1175 3370.5,-1175 3376.5,-1175 3382.5,-1181 3382.5,-1187 3382.5,-1187 3382.5,-1246 3382.5,-1246 3382.5,-1252 3376.5,-1258 3370.5,-1258\"/>\n<text text-anchor=\"start\" x=\"3242.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 2.451</text>\n<text text-anchor=\"start\" x=\"3271\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.298</text>\n<text text-anchor=\"start\" x=\"3265\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\n<text text-anchor=\"start\" x=\"3268\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 2]</text>\n<text text-anchor=\"start\" x=\"3279.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 95->96 -->\n<g id=\"edge96\" class=\"edge\"><title>95->96</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3389.48,-1293.91C3379.57,-1284.56 3368.95,-1274.54 3358.77,-1264.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3361.12,-1262.34 3351.45,-1258.02 3356.32,-1267.43 3361.12,-1262.34\"/>\n</g>\n<!-- 99 -->\n<g id=\"node100\" class=\"node\"><title>99</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3502,-1250.5C3502,-1250.5 3413,-1250.5 3413,-1250.5 3407,-1250.5 3401,-1244.5 3401,-1238.5 3401,-1238.5 3401,-1194.5 3401,-1194.5 3401,-1188.5 3407,-1182.5 3413,-1182.5 3413,-1182.5 3502,-1182.5 3502,-1182.5 3508,-1182.5 3514,-1188.5 3514,-1194.5 3514,-1194.5 3514,-1238.5 3514,-1238.5 3514,-1244.5 3508,-1250.5 3502,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3428.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3410\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 151</text>\n<text text-anchor=\"start\" x=\"3409\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [151, 0]</text>\n<text text-anchor=\"start\" x=\"3428.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 95->99 -->\n<g id=\"edge99\" class=\"edge\"><title>95->99</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3441.17,-1293.91C3443.46,-1283.2 3445.94,-1271.62 3448.25,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3451.75,-1261.18 3450.41,-1250.67 3444.9,-1259.71 3451.75,-1261.18\"/>\n</g>\n<!-- 97 -->\n<g id=\"node98\" class=\"node\"><title>97</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3323,-1131.5C3323,-1131.5 3250,-1131.5 3250,-1131.5 3244,-1131.5 3238,-1125.5 3238,-1119.5 3238,-1119.5 3238,-1075.5 3238,-1075.5 3238,-1069.5 3244,-1063.5 3250,-1063.5 3250,-1063.5 3323,-1063.5 3323,-1063.5 3329,-1063.5 3335,-1069.5 3335,-1075.5 3335,-1075.5 3335,-1119.5 3335,-1119.5 3335,-1125.5 3329,-1131.5 3323,-1131.5\"/>\n<text text-anchor=\"start\" x=\"3257.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3247\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"3246\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\n<text text-anchor=\"start\" x=\"3257.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 96->97 -->\n<g id=\"edge97\" class=\"edge\"><title>96->97</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3300.87,-1174.91C3298.85,-1164.2 3296.68,-1152.62 3294.64,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3298.02,-1140.85 3292.74,-1131.67 3291.14,-1142.14 3298.02,-1140.85\"/>\n</g>\n<!-- 98 -->\n<g id=\"node99\" class=\"node\"><title>98</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3438,-1131.5C3438,-1131.5 3365,-1131.5 3365,-1131.5 3359,-1131.5 3353,-1125.5 3353,-1119.5 3353,-1119.5 3353,-1075.5 3353,-1075.5 3353,-1069.5 3359,-1063.5 3365,-1063.5 3365,-1063.5 3438,-1063.5 3438,-1063.5 3444,-1063.5 3450,-1069.5 3450,-1075.5 3450,-1075.5 3450,-1119.5 3450,-1119.5 3450,-1125.5 3444,-1131.5 3438,-1131.5\"/>\n<text text-anchor=\"start\" x=\"3372.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3362\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3361\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3372.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 96->98 -->\n<g id=\"edge98\" class=\"edge\"><title>96->98</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3340.77,-1174.91C3349.8,-1163.54 3359.63,-1151.18 3368.69,-1139.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3371.65,-1141.67 3375.14,-1131.67 3366.17,-1137.32 3371.65,-1141.67\"/>\n</g>\n<!-- 101 -->\n<g id=\"node102\" class=\"node\"><title>101</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3630,-1250.5C3630,-1250.5 3557,-1250.5 3557,-1250.5 3551,-1250.5 3545,-1244.5 3545,-1238.5 3545,-1238.5 3545,-1194.5 3545,-1194.5 3545,-1188.5 3551,-1182.5 3557,-1182.5 3557,-1182.5 3630,-1182.5 3630,-1182.5 3636,-1182.5 3642,-1188.5 3642,-1194.5 3642,-1194.5 3642,-1238.5 3642,-1238.5 3642,-1244.5 3636,-1250.5 3630,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3564.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3554\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3553\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"3564.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 100->101 -->\n<g id=\"edge101\" class=\"edge\"><title>100->101</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3620.28,-1293.91C3616.45,-1282.98 3612.3,-1271.14 3608.43,-1260.11\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3611.73,-1258.95 3605.12,-1250.67 3605.13,-1261.26 3611.73,-1258.95\"/>\n</g>\n<!-- 102 -->\n<g id=\"node103\" class=\"node\"><title>102</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3745,-1250.5C3745,-1250.5 3672,-1250.5 3672,-1250.5 3666,-1250.5 3660,-1244.5 3660,-1238.5 3660,-1238.5 3660,-1194.5 3660,-1194.5 3660,-1188.5 3666,-1182.5 3672,-1182.5 3672,-1182.5 3745,-1182.5 3745,-1182.5 3751,-1182.5 3757,-1188.5 3757,-1194.5 3757,-1194.5 3757,-1238.5 3757,-1238.5 3757,-1244.5 3751,-1250.5 3745,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3679.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3669\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3668\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"3679.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 100->102 -->\n<g id=\"edge102\" class=\"edge\"><title>100->102</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3660.17,-1293.91C3667.22,-1282.76 3674.88,-1270.66 3681.97,-1259.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3685.14,-1260.99 3687.52,-1250.67 3679.22,-1257.25 3685.14,-1260.99\"/>\n</g>\n<!-- 104 -->\n<g id=\"node105\" class=\"node\"><title>104</title>\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M3923,-1377C3923,-1377 3750,-1377 3750,-1377 3744,-1377 3738,-1371 3738,-1365 3738,-1365 3738,-1306 3738,-1306 3738,-1300 3744,-1294 3750,-1294 3750,-1294 3923,-1294 3923,-1294 3929,-1294 3935,-1300 3935,-1306 3935,-1306 3935,-1365 3935,-1365 3935,-1371 3929,-1377 3923,-1377\"/>\n<text text-anchor=\"start\" x=\"3746\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.733</text>\n<text text-anchor=\"start\" x=\"3799\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.245</text>\n<text text-anchor=\"start\" x=\"3797\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"3796\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 1]</text>\n<text text-anchor=\"start\" x=\"3807.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 103->104 -->\n<g id=\"edge104\" class=\"edge\"><title>103->104</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3836.5,-1412.91C3836.5,-1404.65 3836.5,-1395.86 3836.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3840,-1387.02 3836.5,-1377.02 3833,-1387.02 3840,-1387.02\"/>\n</g>\n<!-- 107 -->\n<g id=\"node108\" class=\"node\"><title>107</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4038,-1369.5C4038,-1369.5 3965,-1369.5 3965,-1369.5 3959,-1369.5 3953,-1363.5 3953,-1357.5 3953,-1357.5 3953,-1313.5 3953,-1313.5 3953,-1307.5 3959,-1301.5 3965,-1301.5 3965,-1301.5 4038,-1301.5 4038,-1301.5 4044,-1301.5 4050,-1307.5 4050,-1313.5 4050,-1313.5 4050,-1357.5 4050,-1357.5 4050,-1363.5 4044,-1369.5 4038,-1369.5\"/>\n<text text-anchor=\"start\" x=\"3972.5\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3962\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"3961\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\n<text text-anchor=\"start\" x=\"3972.5\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 103->107 -->\n<g id=\"edge107\" class=\"edge\"><title>103->107</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3893.75,-1412.91C3910.86,-1400.77 3929.59,-1387.49 3946.55,-1375.46\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3948.59,-1378.31 3954.73,-1369.67 3944.54,-1372.6 3948.59,-1378.31\"/>\n</g>\n<!-- 105 -->\n<g id=\"node106\" class=\"node\"><title>105</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3866,-1250.5C3866,-1250.5 3793,-1250.5 3793,-1250.5 3787,-1250.5 3781,-1244.5 3781,-1238.5 3781,-1238.5 3781,-1194.5 3781,-1194.5 3781,-1188.5 3787,-1182.5 3793,-1182.5 3793,-1182.5 3866,-1182.5 3866,-1182.5 3872,-1182.5 3878,-1188.5 3878,-1194.5 3878,-1194.5 3878,-1238.5 3878,-1238.5 3878,-1244.5 3872,-1250.5 3866,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3800.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3790\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3789\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3800.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 104->105 -->\n<g id=\"edge105\" class=\"edge\"><title>104->105</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3834.07,-1293.91C3833.43,-1283.2 3832.74,-1271.62 3832.09,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3835.58,-1260.44 3831.48,-1250.67 3828.59,-1260.86 3835.58,-1260.44\"/>\n</g>\n<!-- 106 -->\n<g id=\"node107\" class=\"node\"><title>106</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3981,-1250.5C3981,-1250.5 3908,-1250.5 3908,-1250.5 3902,-1250.5 3896,-1244.5 3896,-1238.5 3896,-1238.5 3896,-1194.5 3896,-1194.5 3896,-1188.5 3902,-1182.5 3908,-1182.5 3908,-1182.5 3981,-1182.5 3981,-1182.5 3987,-1182.5 3993,-1188.5 3993,-1194.5 3993,-1194.5 3993,-1238.5 3993,-1238.5 3993,-1244.5 3987,-1250.5 3981,-1250.5\"/>\n<text text-anchor=\"start\" x=\"3915.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3905\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"3904\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"3915.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 104->106 -->\n<g id=\"edge106\" class=\"edge\"><title>104->106</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3873.97,-1293.91C3884.67,-1282.32 3896.32,-1269.7 3907.01,-1258.11\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3909.67,-1260.39 3913.88,-1250.67 3904.53,-1255.64 3909.67,-1260.39\"/>\n</g>\n<!-- 109 -->\n<g id=\"node110\" class=\"node\"><title>109</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4056,-1488.5C4056,-1488.5 3983,-1488.5 3983,-1488.5 3977,-1488.5 3971,-1482.5 3971,-1476.5 3971,-1476.5 3971,-1432.5 3971,-1432.5 3971,-1426.5 3977,-1420.5 3983,-1420.5 3983,-1420.5 4056,-1420.5 4056,-1420.5 4062,-1420.5 4068,-1426.5 4068,-1432.5 4068,-1432.5 4068,-1476.5 4068,-1476.5 4068,-1482.5 4062,-1488.5 4056,-1488.5\"/>\n<text text-anchor=\"start\" x=\"3990.5\" y=\"-1473.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3980\" y=\"-1458.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3979\" y=\"-1443.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"3990.5\" y=\"-1428.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 108->109 -->\n<g id=\"edge109\" class=\"edge\"><title>108->109</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4022.77,-1531.91C4022.31,-1521.2 4021.81,-1509.62 4021.35,-1498.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4024.84,-1498.51 4020.92,-1488.67 4017.85,-1498.81 4024.84,-1498.51\"/>\n</g>\n<!-- 110 -->\n<g id=\"node111\" class=\"node\"><title>110</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4179,-1488.5C4179,-1488.5 4098,-1488.5 4098,-1488.5 4092,-1488.5 4086,-1482.5 4086,-1476.5 4086,-1476.5 4086,-1432.5 4086,-1432.5 4086,-1426.5 4092,-1420.5 4098,-1420.5 4098,-1420.5 4179,-1420.5 4179,-1420.5 4185,-1420.5 4191,-1426.5 4191,-1432.5 4191,-1432.5 4191,-1476.5 4191,-1476.5 4191,-1482.5 4185,-1488.5 4179,-1488.5\"/>\n<text text-anchor=\"start\" x=\"4109.5\" y=\"-1473.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4095\" y=\"-1458.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\n<text text-anchor=\"start\" x=\"4094\" y=\"-1443.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 28]</text>\n<text text-anchor=\"start\" x=\"4109.5\" y=\"-1428.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 108->110 -->\n<g id=\"edge110\" class=\"edge\"><title>108->110</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4064.05,-1531.91C4075.34,-1520.32 4087.64,-1507.7 4098.93,-1496.11\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4101.71,-1498.27 4106.18,-1488.67 4096.7,-1493.39 4101.71,-1498.27\"/>\n</g>\n<!-- 112 -->\n<g id=\"node113\" class=\"node\"><title>112</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4582,-1726.5C4582,-1726.5 4493,-1726.5 4493,-1726.5 4487,-1726.5 4481,-1720.5 4481,-1714.5 4481,-1714.5 4481,-1670.5 4481,-1670.5 4481,-1664.5 4487,-1658.5 4493,-1658.5 4493,-1658.5 4582,-1658.5 4582,-1658.5 4588,-1658.5 4594,-1664.5 4594,-1670.5 4594,-1670.5 4594,-1714.5 4594,-1714.5 4594,-1720.5 4588,-1726.5 4582,-1726.5\"/>\n<text text-anchor=\"start\" x=\"4508.5\" y=\"-1711.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4490\" y=\"-1696.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 376</text>\n<text text-anchor=\"start\" x=\"4489\" y=\"-1681.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [376, 0]</text>\n<text text-anchor=\"start\" x=\"4508.5\" y=\"-1666.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 111->112 -->\n<g id=\"edge112\" class=\"edge\"><title>111->112</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4583.87,-1769.91C4577.1,-1758.76 4569.76,-1746.66 4562.95,-1735.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4565.81,-1733.4 4557.63,-1726.67 4559.82,-1737.03 4565.81,-1733.4\"/>\n</g>\n<!-- 113 -->\n<g id=\"node114\" class=\"node\"><title>113</title>\n<path fill=\"#56abe9\" stroke=\"black\" d=\"M4735,-1734C4735,-1734 4624,-1734 4624,-1734 4618,-1734 4612,-1728 4612,-1722 4612,-1722 4612,-1663 4612,-1663 4612,-1657 4618,-1651 4624,-1651 4624,-1651 4735,-1651 4735,-1651 4741,-1651 4747,-1657 4747,-1663 4747,-1663 4747,-1722 4747,-1722 4747,-1728 4741,-1734 4735,-1734\"/>\n<text text-anchor=\"start\" x=\"4620\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.039</text>\n<text text-anchor=\"start\" x=\"4646\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.22</text>\n<text text-anchor=\"start\" x=\"4632\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 111</text>\n<text text-anchor=\"start\" x=\"4631\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 97]</text>\n<text text-anchor=\"start\" x=\"4650.5\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 111->113 -->\n<g id=\"edge113\" class=\"edge\"><title>111->113</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4633.13,-1769.91C4638.47,-1761.1 4644.18,-1751.7 4649.7,-1742.61\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4652.71,-1744.39 4654.91,-1734.02 4646.73,-1740.75 4652.71,-1744.39\"/>\n</g>\n<!-- 114 -->\n<g id=\"node115\" class=\"node\"><title>114</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4659,-1607.5C4659,-1607.5 4578,-1607.5 4578,-1607.5 4572,-1607.5 4566,-1601.5 4566,-1595.5 4566,-1595.5 4566,-1551.5 4566,-1551.5 4566,-1545.5 4572,-1539.5 4578,-1539.5 4578,-1539.5 4659,-1539.5 4659,-1539.5 4665,-1539.5 4671,-1545.5 4671,-1551.5 4671,-1551.5 4671,-1595.5 4671,-1595.5 4671,-1601.5 4665,-1607.5 4659,-1607.5\"/>\n<text text-anchor=\"start\" x=\"4589.5\" y=\"-1592.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4575\" y=\"-1577.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 97</text>\n<text text-anchor=\"start\" x=\"4574\" y=\"-1562.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 97]</text>\n<text text-anchor=\"start\" x=\"4589.5\" y=\"-1547.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 113->114 -->\n<g id=\"edge114\" class=\"edge\"><title>113->114</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4658.34,-1650.91C4652.58,-1639.87 4646.34,-1627.9 4640.54,-1616.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4643.52,-1614.92 4635.79,-1607.67 4637.31,-1618.15 4643.52,-1614.92\"/>\n</g>\n<!-- 115 -->\n<g id=\"node116\" class=\"node\"><title>115</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4782,-1607.5C4782,-1607.5 4701,-1607.5 4701,-1607.5 4695,-1607.5 4689,-1601.5 4689,-1595.5 4689,-1595.5 4689,-1551.5 4689,-1551.5 4689,-1545.5 4695,-1539.5 4701,-1539.5 4701,-1539.5 4782,-1539.5 4782,-1539.5 4788,-1539.5 4794,-1545.5 4794,-1551.5 4794,-1551.5 4794,-1595.5 4794,-1595.5 4794,-1601.5 4788,-1607.5 4782,-1607.5\"/>\n<text text-anchor=\"start\" x=\"4712.5\" y=\"-1592.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4698\" y=\"-1577.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"4697\" y=\"-1562.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\n<text text-anchor=\"start\" x=\"4712.5\" y=\"-1547.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 113->115 -->\n<g id=\"edge115\" class=\"edge\"><title>113->115</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4701.01,-1650.91C4706.86,-1639.87 4713.2,-1627.9 4719.1,-1616.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4722.33,-1618.14 4723.92,-1607.67 4716.15,-1614.86 4722.33,-1618.14\"/>\n</g>\n<!-- 117 -->\n<g id=\"node118\" class=\"node\"><title>117</title>\n<path fill=\"#e68844\" stroke=\"black\" d=\"M5900.5,-1853C5900.5,-1853 5778.5,-1853 5778.5,-1853 5772.5,-1853 5766.5,-1847 5766.5,-1841 5766.5,-1841 5766.5,-1782 5766.5,-1782 5766.5,-1776 5772.5,-1770 5778.5,-1770 5778.5,-1770 5900.5,-1770 5900.5,-1770 5906.5,-1770 5912.5,-1776 5912.5,-1782 5912.5,-1782 5912.5,-1841 5912.5,-1841 5912.5,-1847 5906.5,-1853 5900.5,-1853\"/>\n<text text-anchor=\"start\" x=\"5807.5\" y=\"-1837.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.14</text>\n<text text-anchor=\"start\" x=\"5802\" y=\"-1822.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.097</text>\n<text text-anchor=\"start\" x=\"5783.5\" y=\"-1807.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13165</text>\n<text text-anchor=\"start\" x=\"5774.5\" y=\"-1792.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12490, 675]</text>\n<text text-anchor=\"start\" x=\"5810.5\" y=\"-1777.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 116->117 -->\n<g id=\"edge117\" class=\"edge\"><title>116->117</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5839.5,-1888.91C5839.5,-1880.65 5839.5,-1871.86 5839.5,-1863.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5843,-1863.02 5839.5,-1853.02 5836,-1863.02 5843,-1863.02\"/>\n</g>\n<!-- 280 -->\n<g id=\"node281\" class=\"node\"><title>280</title>\n<path fill=\"#48a4e7\" stroke=\"black\" d=\"M6211,-1853C6211,-1853 6108,-1853 6108,-1853 6102,-1853 6096,-1847 6096,-1841 6096,-1841 6096,-1782 6096,-1782 6096,-1776 6102,-1770 6108,-1770 6108,-1770 6211,-1770 6211,-1770 6217,-1770 6223,-1776 6223,-1782 6223,-1782 6223,-1841 6223,-1841 6223,-1847 6217,-1853 6211,-1853\"/>\n<text text-anchor=\"start\" x=\"6104\" y=\"-1837.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"6122\" y=\"-1822.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.131</text>\n<text text-anchor=\"start\" x=\"6112\" y=\"-1807.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 383</text>\n<text text-anchor=\"start\" x=\"6106.5\" y=\"-1792.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [27, 356]</text>\n<text text-anchor=\"start\" x=\"6130.5\" y=\"-1777.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 116->280 -->\n<g id=\"edge280\" class=\"edge\"><title>116->280</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5917.37,-1901.03C5968.82,-1882.22 6035.8,-1857.73 6086.27,-1839.27\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6087.63,-1842.5 6095.82,-1835.78 6085.22,-1835.93 6087.63,-1842.5\"/>\n</g>\n<!-- 118 -->\n<g id=\"node119\" class=\"node\"><title>118</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M5792.5,-1734C5792.5,-1734 5556.5,-1734 5556.5,-1734 5550.5,-1734 5544.5,-1728 5544.5,-1722 5544.5,-1722 5544.5,-1663 5544.5,-1663 5544.5,-1657 5550.5,-1651 5556.5,-1651 5556.5,-1651 5792.5,-1651 5792.5,-1651 5798.5,-1651 5804.5,-1657 5804.5,-1663 5804.5,-1663 5804.5,-1722 5804.5,-1722 5804.5,-1728 5798.5,-1734 5792.5,-1734\"/>\n<text text-anchor=\"start\" x=\"5552.5\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 2.749</text>\n<text text-anchor=\"start\" x=\"5641\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.06</text>\n<text text-anchor=\"start\" x=\"5618.5\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12653</text>\n<text text-anchor=\"start\" x=\"5609.5\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12261, 392]</text>\n<text text-anchor=\"start\" x=\"5645.5\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 117->118 -->\n<g id=\"edge118\" class=\"edge\"><title>117->118</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5782.25,-1769.91C5768.56,-1760.2 5753.84,-1749.76 5739.81,-1739.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5741.83,-1736.95 5731.64,-1734.02 5737.78,-1742.66 5741.83,-1736.95\"/>\n</g>\n<!-- 259 -->\n<g id=\"node260\" class=\"node\"><title>259</title>\n<path fill=\"#d9ecfa\" stroke=\"black\" d=\"M6077,-1734C6077,-1734 5966,-1734 5966,-1734 5960,-1734 5954,-1728 5954,-1722 5954,-1722 5954,-1663 5954,-1663 5954,-1657 5960,-1651 5966,-1651 5966,-1651 6077,-1651 6077,-1651 6083,-1651 6089,-1657 6089,-1663 6089,-1663 6089,-1722 6089,-1722 6089,-1728 6083,-1734 6077,-1734\"/>\n<text text-anchor=\"start\" x=\"5962\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.008</text>\n<text text-anchor=\"start\" x=\"5984\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.494</text>\n<text text-anchor=\"start\" x=\"5974\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 512</text>\n<text text-anchor=\"start\" x=\"5964.5\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [229, 283]</text>\n<text text-anchor=\"start\" x=\"5992.5\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 117->259 -->\n<g id=\"edge259\" class=\"edge\"><title>117->259</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5902.64,-1769.91C5917.89,-1760.11 5934.29,-1749.56 5949.89,-1739.53\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5951.95,-1742.37 5958.47,-1734.02 5948.16,-1736.48 5951.95,-1742.37\"/>\n</g>\n<!-- 119 -->\n<g id=\"node120\" class=\"node\"><title>119</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M5328,-1615C5328,-1615 5189,-1615 5189,-1615 5183,-1615 5177,-1609 5177,-1603 5177,-1603 5177,-1544 5177,-1544 5177,-1538 5183,-1532 5189,-1532 5189,-1532 5328,-1532 5328,-1532 5334,-1532 5340,-1538 5340,-1544 5340,-1544 5340,-1603 5340,-1603 5340,-1609 5334,-1615 5328,-1615\"/>\n<text text-anchor=\"start\" x=\"5185\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">wrong_fragment ≤ 1.83</text>\n<text text-anchor=\"start\" x=\"5221\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.027</text>\n<text text-anchor=\"start\" x=\"5202.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12051</text>\n<text text-anchor=\"start\" x=\"5193.5\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11884, 167]</text>\n<text text-anchor=\"start\" x=\"5229.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 118->119 -->\n<g id=\"edge119\" class=\"edge\"><title>118->119</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5544.3,-1654.88C5481.22,-1637.14 5406.97,-1616.26 5349.97,-1600.23\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5350.83,-1596.83 5340.26,-1597.49 5348.94,-1603.57 5350.83,-1596.83\"/>\n</g>\n<!-- 210 -->\n<g id=\"node211\" class=\"node\"><title>210</title>\n<path fill=\"#f5ccaf\" stroke=\"black\" d=\"M5727.5,-1615C5727.5,-1615 5621.5,-1615 5621.5,-1615 5615.5,-1615 5609.5,-1609 5609.5,-1603 5609.5,-1603 5609.5,-1544 5609.5,-1544 5609.5,-1538 5615.5,-1532 5621.5,-1532 5621.5,-1532 5727.5,-1532 5727.5,-1532 5733.5,-1532 5739.5,-1538 5739.5,-1544 5739.5,-1544 5739.5,-1603 5739.5,-1603 5739.5,-1609 5733.5,-1615 5727.5,-1615\"/>\n<text text-anchor=\"start\" x=\"5619\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"5637\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.468</text>\n<text text-anchor=\"start\" x=\"5627\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 602</text>\n<text text-anchor=\"start\" x=\"5617.5\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [377, 225]</text>\n<text text-anchor=\"start\" x=\"5645.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 118->210 -->\n<g id=\"edge210\" class=\"edge\"><title>118->210</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5674.5,-1650.91C5674.5,-1642.65 5674.5,-1633.86 5674.5,-1625.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5678,-1625.02 5674.5,-1615.02 5671,-1625.02 5678,-1625.02\"/>\n</g>\n<!-- 120 -->\n<g id=\"node121\" class=\"node\"><title>120</title>\n<path fill=\"#e5833b\" stroke=\"black\" d=\"M4866.5,-1496C4866.5,-1496 4744.5,-1496 4744.5,-1496 4738.5,-1496 4732.5,-1490 4732.5,-1484 4732.5,-1484 4732.5,-1425 4732.5,-1425 4732.5,-1419 4738.5,-1413 4744.5,-1413 4744.5,-1413 4866.5,-1413 4866.5,-1413 4872.5,-1413 4878.5,-1419 4878.5,-1425 4878.5,-1425 4878.5,-1484 4878.5,-1484 4878.5,-1490 4872.5,-1496 4866.5,-1496\"/>\n<text text-anchor=\"start\" x=\"4746\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.039</text>\n<text text-anchor=\"start\" x=\"4768\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.024</text>\n<text text-anchor=\"start\" x=\"4749.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12028</text>\n<text text-anchor=\"start\" x=\"4740.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11884, 144]</text>\n<text text-anchor=\"start\" x=\"4776.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 119->120 -->\n<g id=\"edge120\" class=\"edge\"><title>119->120</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5176.99,-1551.45C5095.48,-1530.39 4970.75,-1498.18 4888.66,-1476.98\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4889.42,-1473.56 4878.87,-1474.45 4887.67,-1480.34 4889.42,-1473.56\"/>\n</g>\n<!-- 209 -->\n<g id=\"node210\" class=\"node\"><title>209</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5299,-1488.5C5299,-1488.5 5218,-1488.5 5218,-1488.5 5212,-1488.5 5206,-1482.5 5206,-1476.5 5206,-1476.5 5206,-1432.5 5206,-1432.5 5206,-1426.5 5212,-1420.5 5218,-1420.5 5218,-1420.5 5299,-1420.5 5299,-1420.5 5305,-1420.5 5311,-1426.5 5311,-1432.5 5311,-1432.5 5311,-1476.5 5311,-1476.5 5311,-1482.5 5305,-1488.5 5299,-1488.5\"/>\n<text text-anchor=\"start\" x=\"5229.5\" y=\"-1473.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5215\" y=\"-1458.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\n<text text-anchor=\"start\" x=\"5214\" y=\"-1443.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 23]</text>\n<text text-anchor=\"start\" x=\"5229.5\" y=\"-1428.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 119->209 -->\n<g id=\"edge209\" class=\"edge\"><title>119->209</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5258.5,-1531.91C5258.5,-1521.2 5258.5,-1509.62 5258.5,-1498.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5262,-1498.67 5258.5,-1488.67 5255,-1498.67 5262,-1498.67\"/>\n</g>\n<!-- 121 -->\n<g id=\"node122\" class=\"node\"><title>121</title>\n<path fill=\"#e88e4d\" stroke=\"black\" d=\"M4618.5,-1377C4618.5,-1377 4504.5,-1377 4504.5,-1377 4498.5,-1377 4492.5,-1371 4492.5,-1365 4492.5,-1365 4492.5,-1306 4492.5,-1306 4492.5,-1300 4498.5,-1294 4504.5,-1294 4504.5,-1294 4618.5,-1294 4618.5,-1294 4624.5,-1294 4630.5,-1300 4630.5,-1306 4630.5,-1306 4630.5,-1365 4630.5,-1365 4630.5,-1371 4624.5,-1377 4618.5,-1377\"/>\n<text text-anchor=\"start\" x=\"4504.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 0.149</text>\n<text text-anchor=\"start\" x=\"4524\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.167</text>\n<text text-anchor=\"start\" x=\"4510\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1417</text>\n<text text-anchor=\"start\" x=\"4500.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1287, 130]</text>\n<text text-anchor=\"start\" x=\"4532.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 120->121 -->\n<g id=\"edge121\" class=\"edge\"><title>120->121</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4732.29,-1418.4C4703.16,-1404.43 4669.58,-1388.33 4639.95,-1374.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4641.42,-1370.94 4630.89,-1369.77 4638.4,-1377.25 4641.42,-1370.94\"/>\n</g>\n<!-- 170 -->\n<g id=\"node171\" class=\"node\"><title>170</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4862.5,-1377C4862.5,-1377 4748.5,-1377 4748.5,-1377 4742.5,-1377 4736.5,-1371 4736.5,-1365 4736.5,-1365 4736.5,-1306 4736.5,-1306 4736.5,-1300 4742.5,-1294 4748.5,-1294 4748.5,-1294 4862.5,-1294 4862.5,-1294 4868.5,-1294 4874.5,-1300 4874.5,-1306 4874.5,-1306 4874.5,-1365 4874.5,-1365 4874.5,-1371 4868.5,-1377 4862.5,-1377\"/>\n<text text-anchor=\"start\" x=\"4746\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.114</text>\n<text text-anchor=\"start\" x=\"4768\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.003</text>\n<text text-anchor=\"start\" x=\"4749.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10611</text>\n<text text-anchor=\"start\" x=\"4744.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10597, 14]</text>\n<text text-anchor=\"start\" x=\"4776.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 120->170 -->\n<g id=\"edge170\" class=\"edge\"><title>120->170</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4805.5,-1412.91C4805.5,-1404.65 4805.5,-1395.86 4805.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4809,-1387.02 4805.5,-1377.02 4802,-1387.02 4809,-1387.02\"/>\n</g>\n<!-- 122 -->\n<g id=\"node123\" class=\"node\"><title>122</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M4223.5,-1258C4223.5,-1258 4029.5,-1258 4029.5,-1258 4023.5,-1258 4017.5,-1252 4017.5,-1246 4017.5,-1246 4017.5,-1187 4017.5,-1187 4017.5,-1181 4023.5,-1175 4029.5,-1175 4029.5,-1175 4223.5,-1175 4223.5,-1175 4229.5,-1175 4235.5,-1181 4235.5,-1187 4235.5,-1187 4235.5,-1246 4235.5,-1246 4235.5,-1252 4229.5,-1258 4223.5,-1258\"/>\n<text text-anchor=\"start\" x=\"4025.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.68</text>\n<text text-anchor=\"start\" x=\"4089\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.086</text>\n<text text-anchor=\"start\" x=\"4075\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1348</text>\n<text text-anchor=\"start\" x=\"4069.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1287, 61]</text>\n<text text-anchor=\"start\" x=\"4097.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 121->122 -->\n<g id=\"edge122\" class=\"edge\"><title>121->122</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4492.09,-1315.83C4425.84,-1298.01 4324.69,-1270.81 4245.56,-1249.52\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4246.1,-1246.04 4235.53,-1246.83 4244.28,-1252.8 4246.1,-1246.04\"/>\n</g>\n<!-- 169 -->\n<g id=\"node170\" class=\"node\"><title>169</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4602,-1250.5C4602,-1250.5 4521,-1250.5 4521,-1250.5 4515,-1250.5 4509,-1244.5 4509,-1238.5 4509,-1238.5 4509,-1194.5 4509,-1194.5 4509,-1188.5 4515,-1182.5 4521,-1182.5 4521,-1182.5 4602,-1182.5 4602,-1182.5 4608,-1182.5 4614,-1188.5 4614,-1194.5 4614,-1194.5 4614,-1238.5 4614,-1238.5 4614,-1244.5 4608,-1250.5 4602,-1250.5\"/>\n<text text-anchor=\"start\" x=\"4532.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4518\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 69</text>\n<text text-anchor=\"start\" x=\"4517\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 69]</text>\n<text text-anchor=\"start\" x=\"4532.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 121->169 -->\n<g id=\"edge169\" class=\"edge\"><title>121->169</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4561.5,-1293.91C4561.5,-1283.2 4561.5,-1271.62 4561.5,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4565,-1260.67 4561.5,-1250.67 4558,-1260.67 4565,-1260.67\"/>\n</g>\n<!-- 123 -->\n<g id=\"node124\" class=\"node\"><title>123</title>\n<path fill=\"#e5833d\" stroke=\"black\" d=\"M3800.5,-1139C3800.5,-1139 3694.5,-1139 3694.5,-1139 3688.5,-1139 3682.5,-1133 3682.5,-1127 3682.5,-1127 3682.5,-1068 3682.5,-1068 3682.5,-1062 3688.5,-1056 3694.5,-1056 3694.5,-1056 3800.5,-1056 3800.5,-1056 3806.5,-1056 3812.5,-1062 3812.5,-1068 3812.5,-1068 3812.5,-1127 3812.5,-1127 3812.5,-1133 3806.5,-1139 3800.5,-1139\"/>\n<text text-anchor=\"start\" x=\"3698\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.11</text>\n<text text-anchor=\"start\" x=\"3710\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.036</text>\n<text text-anchor=\"start\" x=\"3696\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1249</text>\n<text text-anchor=\"start\" x=\"3690.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1226, 23]</text>\n<text text-anchor=\"start\" x=\"3718.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 122->123 -->\n<g id=\"edge123\" class=\"edge\"><title>122->123</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4017.47,-1180.03C4012.07,-1178.32 4006.73,-1176.63 4001.5,-1175 3941.44,-1156.23 3873.13,-1135.7 3822.49,-1120.64\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3823.19,-1117.2 3812.6,-1117.7 3821.19,-1123.91 3823.19,-1117.2\"/>\n</g>\n<!-- 162 -->\n<g id=\"node163\" class=\"node\"><title>162</title>\n<path fill=\"#f5cfb4\" stroke=\"black\" d=\"M4199.5,-1139C4199.5,-1139 4053.5,-1139 4053.5,-1139 4047.5,-1139 4041.5,-1133 4041.5,-1127 4041.5,-1127 4041.5,-1068 4041.5,-1068 4041.5,-1062 4047.5,-1056 4053.5,-1056 4053.5,-1056 4199.5,-1056 4199.5,-1056 4205.5,-1056 4211.5,-1062 4211.5,-1068 4211.5,-1068 4211.5,-1127 4211.5,-1127 4211.5,-1133 4205.5,-1139 4199.5,-1139\"/>\n<text text-anchor=\"start\" x=\"4049.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -1.354</text>\n<text text-anchor=\"start\" x=\"4089\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.473</text>\n<text text-anchor=\"start\" x=\"4083\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\n<text text-anchor=\"start\" x=\"4078\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [61, 38]</text>\n<text text-anchor=\"start\" x=\"4097.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 122->162 -->\n<g id=\"edge162\" class=\"edge\"><title>122->162</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4126.5,-1174.91C4126.5,-1166.65 4126.5,-1157.86 4126.5,-1149.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4130,-1149.02 4126.5,-1139.02 4123,-1149.02 4130,-1149.02\"/>\n</g>\n<!-- 124 -->\n<g id=\"node125\" class=\"node\"><title>124</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3520.5,-1020C3520.5,-1020 3414.5,-1020 3414.5,-1020 3408.5,-1020 3402.5,-1014 3402.5,-1008 3402.5,-1008 3402.5,-949 3402.5,-949 3402.5,-943 3408.5,-937 3414.5,-937 3414.5,-937 3520.5,-937 3520.5,-937 3526.5,-937 3532.5,-943 3532.5,-949 3532.5,-949 3532.5,-1008 3532.5,-1008 3532.5,-1014 3526.5,-1020 3520.5,-1020\"/>\n<text text-anchor=\"start\" x=\"3412\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"3430\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.032</text>\n<text text-anchor=\"start\" x=\"3416\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1246</text>\n<text text-anchor=\"start\" x=\"3410.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1226, 20]</text>\n<text text-anchor=\"start\" x=\"3438.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 123->124 -->\n<g id=\"edge124\" class=\"edge\"><title>123->124</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3682.21,-1069.22C3640.35,-1051.73 3585.9,-1028.98 3542.31,-1010.76\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3543.47,-1007.45 3532.9,-1006.83 3540.78,-1013.91 3543.47,-1007.45\"/>\n</g>\n<!-- 161 -->\n<g id=\"node162\" class=\"node\"><title>161</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3784,-1012.5C3784,-1012.5 3711,-1012.5 3711,-1012.5 3705,-1012.5 3699,-1006.5 3699,-1000.5 3699,-1000.5 3699,-956.5 3699,-956.5 3699,-950.5 3705,-944.5 3711,-944.5 3711,-944.5 3784,-944.5 3784,-944.5 3790,-944.5 3796,-950.5 3796,-956.5 3796,-956.5 3796,-1000.5 3796,-1000.5 3796,-1006.5 3790,-1012.5 3784,-1012.5\"/>\n<text text-anchor=\"start\" x=\"3718.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3708\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3707\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"3718.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 123->161 -->\n<g id=\"edge161\" class=\"edge\"><title>123->161</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3747.5,-1055.91C3747.5,-1045.2 3747.5,-1033.62 3747.5,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3751,-1022.67 3747.5,-1012.67 3744,-1022.67 3751,-1022.67\"/>\n</g>\n<!-- 125 -->\n<g id=\"node126\" class=\"node\"><title>125</title>\n<path fill=\"#e68641\" stroke=\"black\" d=\"M3188,-901C3188,-901 3085,-901 3085,-901 3079,-901 3073,-895 3073,-889 3073,-889 3073,-830 3073,-830 3073,-824 3079,-818 3085,-818 3085,-818 3188,-818 3188,-818 3194,-818 3200,-824 3200,-830 3200,-830 3200,-889 3200,-889 3200,-895 3194,-901 3188,-901\"/>\n<text text-anchor=\"start\" x=\"3081\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"3099\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.078</text>\n<text text-anchor=\"start\" x=\"3089\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 271</text>\n<text text-anchor=\"start\" x=\"3083.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [260, 11]</text>\n<text text-anchor=\"start\" x=\"3107.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 124->125 -->\n<g id=\"edge125\" class=\"edge\"><title>124->125</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3402.5,-954.524C3347.15,-934.959 3267.66,-906.862 3210,-886.482\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3210.82,-883.058 3200.23,-883.025 3208.49,-889.658 3210.82,-883.058\"/>\n</g>\n<!-- 132 -->\n<g id=\"node133\" class=\"node\"><title>132</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M3578.5,-901C3578.5,-901 3356.5,-901 3356.5,-901 3350.5,-901 3344.5,-895 3344.5,-889 3344.5,-889 3344.5,-830 3344.5,-830 3344.5,-824 3350.5,-818 3356.5,-818 3356.5,-818 3578.5,-818 3578.5,-818 3584.5,-818 3590.5,-824 3590.5,-830 3590.5,-830 3590.5,-889 3590.5,-889 3590.5,-895 3584.5,-901 3578.5,-901\"/>\n<text text-anchor=\"start\" x=\"3352.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 1.114</text>\n<text text-anchor=\"start\" x=\"3430\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.018</text>\n<text text-anchor=\"start\" x=\"3420\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 975</text>\n<text text-anchor=\"start\" x=\"3419\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [966, 9]</text>\n<text text-anchor=\"start\" x=\"3438.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 124->132 -->\n<g id=\"edge132\" class=\"edge\"><title>124->132</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3467.5,-936.907C3467.5,-928.649 3467.5,-919.864 3467.5,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3471,-911.021 3467.5,-901.021 3464,-911.021 3471,-911.021\"/>\n</g>\n<!-- 126 -->\n<g id=\"node127\" class=\"node\"><title>126</title>\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M3037.5,-782C3037.5,-782 2891.5,-782 2891.5,-782 2885.5,-782 2879.5,-776 2879.5,-770 2879.5,-770 2879.5,-711 2879.5,-711 2879.5,-705 2885.5,-699 2891.5,-699 2891.5,-699 3037.5,-699 3037.5,-699 3043.5,-699 3049.5,-705 3049.5,-711 3049.5,-711 3049.5,-770 3049.5,-770 3049.5,-776 3043.5,-782 3037.5,-782\"/>\n<text text-anchor=\"start\" x=\"2887.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -1.768</text>\n<text text-anchor=\"start\" x=\"2927\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.008</text>\n<text text-anchor=\"start\" x=\"2917\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 261</text>\n<text text-anchor=\"start\" x=\"2916\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [260, 1]</text>\n<text text-anchor=\"start\" x=\"2935.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 125->126 -->\n<g id=\"edge126\" class=\"edge\"><title>125->126</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3076.83,-817.907C3062.55,-808.197 3047.2,-797.758 3032.58,-787.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3034.31,-784.751 3024.07,-782.021 3030.37,-790.539 3034.31,-784.751\"/>\n</g>\n<!-- 131 -->\n<g id=\"node132\" class=\"node\"><title>131</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3177,-774.5C3177,-774.5 3096,-774.5 3096,-774.5 3090,-774.5 3084,-768.5 3084,-762.5 3084,-762.5 3084,-718.5 3084,-718.5 3084,-712.5 3090,-706.5 3096,-706.5 3096,-706.5 3177,-706.5 3177,-706.5 3183,-706.5 3189,-712.5 3189,-718.5 3189,-718.5 3189,-762.5 3189,-762.5 3189,-768.5 3183,-774.5 3177,-774.5\"/>\n<text text-anchor=\"start\" x=\"3107.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3093\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"3092\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 10]</text>\n<text text-anchor=\"start\" x=\"3107.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 125->131 -->\n<g id=\"edge131\" class=\"edge\"><title>125->131</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3136.5,-817.907C3136.5,-807.204 3136.5,-795.615 3136.5,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3140,-784.667 3136.5,-774.667 3133,-784.667 3140,-784.667\"/>\n</g>\n<!-- 127 -->\n<g id=\"node128\" class=\"node\"><title>127</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2877.5,-663C2877.5,-663 2641.5,-663 2641.5,-663 2635.5,-663 2629.5,-657 2629.5,-651 2629.5,-651 2629.5,-592 2629.5,-592 2629.5,-586 2635.5,-580 2641.5,-580 2641.5,-580 2877.5,-580 2877.5,-580 2883.5,-580 2889.5,-586 2889.5,-592 2889.5,-592 2889.5,-651 2889.5,-651 2889.5,-657 2883.5,-663 2877.5,-663\"/>\n<text text-anchor=\"start\" x=\"2637.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 1.419</text>\n<text text-anchor=\"start\" x=\"2722\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"2720\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2719\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\n<text text-anchor=\"start\" x=\"2730.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 126->127 -->\n<g id=\"edge127\" class=\"edge\"><title>126->127</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2893.38,-698.907C2876.04,-689.016 2857.39,-678.368 2839.67,-668.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2840.92,-664.938 2830.5,-663.021 2837.45,-671.017 2840.92,-664.938\"/>\n</g>\n<!-- 130 -->\n<g id=\"node131\" class=\"node\"><title>130</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3009,-655.5C3009,-655.5 2920,-655.5 2920,-655.5 2914,-655.5 2908,-649.5 2908,-643.5 2908,-643.5 2908,-599.5 2908,-599.5 2908,-593.5 2914,-587.5 2920,-587.5 2920,-587.5 3009,-587.5 3009,-587.5 3015,-587.5 3021,-593.5 3021,-599.5 3021,-599.5 3021,-643.5 3021,-643.5 3021,-649.5 3015,-655.5 3009,-655.5\"/>\n<text text-anchor=\"start\" x=\"2935.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2917\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 258</text>\n<text text-anchor=\"start\" x=\"2916\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [258, 0]</text>\n<text text-anchor=\"start\" x=\"2935.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 126->130 -->\n<g id=\"edge130\" class=\"edge\"><title>126->130</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2964.5,-698.907C2964.5,-688.204 2964.5,-676.615 2964.5,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2968,-665.667 2964.5,-655.667 2961,-665.667 2968,-665.667\"/>\n</g>\n<!-- 128 -->\n<g id=\"node129\" class=\"node\"><title>128</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2681,-536.5C2681,-536.5 2608,-536.5 2608,-536.5 2602,-536.5 2596,-530.5 2596,-524.5 2596,-524.5 2596,-480.5 2596,-480.5 2596,-474.5 2602,-468.5 2608,-468.5 2608,-468.5 2681,-468.5 2681,-468.5 2687,-468.5 2693,-474.5 2693,-480.5 2693,-480.5 2693,-524.5 2693,-524.5 2693,-530.5 2687,-536.5 2681,-536.5\"/>\n<text text-anchor=\"start\" x=\"2615.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2605\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2604\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"2615.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 127->128 -->\n<g id=\"edge128\" class=\"edge\"><title>127->128</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2719.6,-579.907C2708.21,-568.321 2695.81,-555.698 2684.42,-544.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2686.61,-541.345 2677.1,-536.667 2681.61,-546.252 2686.61,-541.345\"/>\n</g>\n<!-- 129 -->\n<g id=\"node130\" class=\"node\"><title>129</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2796,-536.5C2796,-536.5 2723,-536.5 2723,-536.5 2717,-536.5 2711,-530.5 2711,-524.5 2711,-524.5 2711,-480.5 2711,-480.5 2711,-474.5 2717,-468.5 2723,-468.5 2723,-468.5 2796,-468.5 2796,-468.5 2802,-468.5 2808,-474.5 2808,-480.5 2808,-480.5 2808,-524.5 2808,-524.5 2808,-530.5 2802,-536.5 2796,-536.5\"/>\n<text text-anchor=\"start\" x=\"2730.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2720\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2719\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2730.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 127->129 -->\n<g id=\"edge129\" class=\"edge\"><title>127->129</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2759.5,-579.907C2759.5,-569.204 2759.5,-557.615 2759.5,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2763,-546.667 2759.5,-536.667 2756,-546.667 2763,-546.667\"/>\n</g>\n<!-- 133 -->\n<g id=\"node134\" class=\"node\"><title>133</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M3457.5,-782C3457.5,-782 3225.5,-782 3225.5,-782 3219.5,-782 3213.5,-776 3213.5,-770 3213.5,-770 3213.5,-711 3213.5,-711 3213.5,-705 3219.5,-699 3225.5,-699 3225.5,-699 3457.5,-699 3457.5,-699 3463.5,-699 3469.5,-705 3469.5,-711 3469.5,-711 3469.5,-770 3469.5,-770 3469.5,-776 3463.5,-782 3457.5,-782\"/>\n<text text-anchor=\"start\" x=\"3221.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ -0.17</text>\n<text text-anchor=\"start\" x=\"3304\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.016</text>\n<text text-anchor=\"start\" x=\"3294\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 971</text>\n<text text-anchor=\"start\" x=\"3293\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [963, 8]</text>\n<text text-anchor=\"start\" x=\"3312.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 132->133 -->\n<g id=\"edge133\" class=\"edge\"><title>132->133</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3423.78,-817.907C3413.72,-808.56 3402.93,-798.538 3392.58,-788.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3394.85,-786.261 3385.14,-782.021 3390.08,-791.39 3394.85,-786.261\"/>\n</g>\n<!-- 158 -->\n<g id=\"node159\" class=\"node\"><title>158</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M3673,-782C3673,-782 3500,-782 3500,-782 3494,-782 3488,-776 3488,-770 3488,-770 3488,-711 3488,-711 3488,-705 3494,-699 3500,-699 3500,-699 3673,-699 3673,-699 3679,-699 3685,-705 3685,-711 3685,-711 3685,-770 3685,-770 3685,-776 3679,-782 3673,-782\"/>\n<text text-anchor=\"start\" x=\"3496\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.814</text>\n<text text-anchor=\"start\" x=\"3549\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.375</text>\n<text text-anchor=\"start\" x=\"3547\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"3546\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 1]</text>\n<text text-anchor=\"start\" x=\"3557.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 132->158 -->\n<g id=\"edge158\" class=\"edge\"><title>132->158</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3508.79,-817.907C3518.2,-808.651 3528.29,-798.732 3537.98,-789.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3540.61,-791.527 3545.29,-782.021 3535.7,-786.536 3540.61,-791.527\"/>\n</g>\n<!-- 134 -->\n<g id=\"node135\" class=\"node\"><title>134</title>\n<path fill=\"#e68641\" stroke=\"black\" d=\"M3161.5,-663C3161.5,-663 3051.5,-663 3051.5,-663 3045.5,-663 3039.5,-657 3039.5,-651 3039.5,-651 3039.5,-592 3039.5,-592 3039.5,-586 3045.5,-580 3051.5,-580 3051.5,-580 3161.5,-580 3161.5,-580 3167.5,-580 3173.5,-586 3173.5,-592 3173.5,-592 3173.5,-651 3173.5,-651 3173.5,-657 3167.5,-663 3161.5,-663\"/>\n<text text-anchor=\"start\" x=\"3047.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ -0.168</text>\n<text text-anchor=\"start\" x=\"3069\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.072</text>\n<text text-anchor=\"start\" x=\"3059\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 134</text>\n<text text-anchor=\"start\" x=\"3058\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 5]</text>\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 133->134 -->\n<g id=\"edge134\" class=\"edge\"><title>133->134</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3259.97,-698.907C3234.94,-686.446 3207.5,-672.784 3182.83,-660.502\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3184.39,-657.368 3173.88,-656.045 3181.27,-663.635 3184.39,-657.368\"/>\n</g>\n<!-- 143 -->\n<g id=\"node144\" class=\"node\"><title>143</title>\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M3449,-663C3449,-663 3240,-663 3240,-663 3234,-663 3228,-657 3228,-651 3228,-651 3228,-592 3228,-592 3228,-586 3234,-580 3240,-580 3240,-580 3449,-580 3449,-580 3455,-580 3461,-586 3461,-592 3461,-592 3461,-651 3461,-651 3461,-657 3455,-663 3449,-663\"/>\n<text text-anchor=\"start\" x=\"3236\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.549</text>\n<text text-anchor=\"start\" x=\"3307\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.007</text>\n<text text-anchor=\"start\" x=\"3297\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 837</text>\n<text text-anchor=\"start\" x=\"3296\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [834, 3]</text>\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 133->143 -->\n<g id=\"edge143\" class=\"edge\"><title>133->143</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3342.54,-698.907C3342.75,-690.558 3342.98,-681.671 3343.2,-673.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3346.7,-673.107 3343.46,-663.021 3339.71,-672.928 3346.7,-673.107\"/>\n</g>\n<!-- 135 -->\n<g id=\"node136\" class=\"node\"><title>135</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M2948.5,-544C2948.5,-544 2838.5,-544 2838.5,-544 2832.5,-544 2826.5,-538 2826.5,-532 2826.5,-532 2826.5,-473 2826.5,-473 2826.5,-467 2832.5,-461 2838.5,-461 2838.5,-461 2948.5,-461 2948.5,-461 2954.5,-461 2960.5,-467 2960.5,-473 2960.5,-473 2960.5,-532 2960.5,-532 2960.5,-538 2954.5,-544 2948.5,-544\"/>\n<text text-anchor=\"start\" x=\"2834.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ -0.224</text>\n<text text-anchor=\"start\" x=\"2856\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.016</text>\n<text text-anchor=\"start\" x=\"2846\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 128</text>\n<text text-anchor=\"start\" x=\"2845\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [127, 1]</text>\n<text text-anchor=\"start\" x=\"2864.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 134->135 -->\n<g id=\"edge135\" class=\"edge\"><title>134->135</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3039.4,-583.641C3017.22,-571.46 2992.39,-557.821 2969.59,-545.297\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2971.08,-542.121 2960.63,-540.375 2967.71,-548.257 2971.08,-542.121\"/>\n</g>\n<!-- 140 -->\n<g id=\"node141\" class=\"node\"><title>140</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3202,-544C3202,-544 3011,-544 3011,-544 3005,-544 2999,-538 2999,-532 2999,-532 2999,-473 2999,-473 2999,-467 3005,-461 3011,-461 3011,-461 3202,-461 3202,-461 3208,-461 3214,-467 3214,-473 3214,-473 3214,-532 3214,-532 3214,-538 3208,-544 3202,-544\"/>\n<text text-anchor=\"start\" x=\"3007\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ -0.201</text>\n<text text-anchor=\"start\" x=\"3069\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"3067\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"3066\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 134->140 -->\n<g id=\"edge140\" class=\"edge\"><title>134->140</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3106.5,-579.907C3106.5,-571.649 3106.5,-562.864 3106.5,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3110,-554.021 3106.5,-544.021 3103,-554.021 3110,-554.021\"/>\n</g>\n<!-- 136 -->\n<g id=\"node137\" class=\"node\"><title>136</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2698,-417.5C2698,-417.5 2609,-417.5 2609,-417.5 2603,-417.5 2597,-411.5 2597,-405.5 2597,-405.5 2597,-361.5 2597,-361.5 2597,-355.5 2603,-349.5 2609,-349.5 2609,-349.5 2698,-349.5 2698,-349.5 2704,-349.5 2710,-355.5 2710,-361.5 2710,-361.5 2710,-405.5 2710,-405.5 2710,-411.5 2704,-417.5 2698,-417.5\"/>\n<text text-anchor=\"start\" x=\"2624.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2606\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 122</text>\n<text text-anchor=\"start\" x=\"2605\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [122, 0]</text>\n<text text-anchor=\"start\" x=\"2624.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 135->136 -->\n<g id=\"edge136\" class=\"edge\"><title>135->136</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2826.14,-465.428C2822.9,-463.895 2819.67,-462.411 2816.5,-461 2774.1,-442.159 2760.19,-445.376 2718.5,-425 2716.75,-424.146 2714.99,-423.258 2713.23,-422.341\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2714.85,-419.24 2704.39,-417.558 2711.52,-425.396 2714.85,-419.24\"/>\n</g>\n<!-- 137 -->\n<g id=\"node138\" class=\"node\"><title>137</title>\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M2913,-425C2913,-425 2740,-425 2740,-425 2734,-425 2728,-419 2728,-413 2728,-413 2728,-354 2728,-354 2728,-348 2734,-342 2740,-342 2740,-342 2913,-342 2913,-342 2919,-342 2925,-348 2925,-354 2925,-354 2925,-413 2925,-413 2925,-419 2919,-425 2913,-425\"/>\n<text text-anchor=\"start\" x=\"2736\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.922</text>\n<text text-anchor=\"start\" x=\"2789\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.278</text>\n<text text-anchor=\"start\" x=\"2787\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"2786\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\n<text text-anchor=\"start\" x=\"2797.5\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 135->137 -->\n<g id=\"edge137\" class=\"edge\"><title>135->137</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2870.25,-460.907C2865.27,-452.195 2859.94,-442.897 2854.79,-433.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2857.71,-431.959 2849.7,-425.021 2851.64,-435.438 2857.71,-431.959\"/>\n</g>\n<!-- 138 -->\n<g id=\"node139\" class=\"node\"><title>138</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2806,-298.5C2806,-298.5 2733,-298.5 2733,-298.5 2727,-298.5 2721,-292.5 2721,-286.5 2721,-286.5 2721,-242.5 2721,-242.5 2721,-236.5 2727,-230.5 2733,-230.5 2733,-230.5 2806,-230.5 2806,-230.5 2812,-230.5 2818,-236.5 2818,-242.5 2818,-242.5 2818,-286.5 2818,-286.5 2818,-292.5 2812,-298.5 2806,-298.5\"/>\n<text text-anchor=\"start\" x=\"2740.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2730\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2729\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2740.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 137->138 -->\n<g id=\"edge138\" class=\"edge\"><title>137->138</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2806.72,-341.907C2801.35,-330.873 2795.51,-318.898 2790.09,-307.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2793.18,-306.124 2785.66,-298.667 2786.89,-309.19 2793.18,-306.124\"/>\n</g>\n<!-- 139 -->\n<g id=\"node140\" class=\"node\"><title>139</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2921,-298.5C2921,-298.5 2848,-298.5 2848,-298.5 2842,-298.5 2836,-292.5 2836,-286.5 2836,-286.5 2836,-242.5 2836,-242.5 2836,-236.5 2842,-230.5 2848,-230.5 2848,-230.5 2921,-230.5 2921,-230.5 2927,-230.5 2933,-236.5 2933,-242.5 2933,-242.5 2933,-286.5 2933,-286.5 2933,-292.5 2927,-298.5 2921,-298.5\"/>\n<text text-anchor=\"start\" x=\"2855.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2845\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"2844\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"2855.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 137->139 -->\n<g id=\"edge139\" class=\"edge\"><title>137->139</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2846.62,-341.907C2852.09,-330.873 2858.03,-318.898 2863.54,-307.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2866.75,-309.181 2868.06,-298.667 2860.48,-306.072 2866.75,-309.181\"/>\n</g>\n<!-- 141 -->\n<g id=\"node142\" class=\"node\"><title>141</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3028,-417.5C3028,-417.5 2955,-417.5 2955,-417.5 2949,-417.5 2943,-411.5 2943,-405.5 2943,-405.5 2943,-361.5 2943,-361.5 2943,-355.5 2949,-349.5 2955,-349.5 2955,-349.5 3028,-349.5 3028,-349.5 3034,-349.5 3040,-355.5 3040,-361.5 3040,-361.5 3040,-405.5 3040,-405.5 3040,-411.5 3034,-417.5 3028,-417.5\"/>\n<text text-anchor=\"start\" x=\"2962.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"2952\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2951\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"2962.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 140->141 -->\n<g id=\"edge141\" class=\"edge\"><title>140->141</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3066.6,-460.907C3055.21,-449.321 3042.81,-436.698 3031.42,-425.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3033.61,-422.345 3024.1,-417.667 3028.61,-427.252 3033.61,-422.345\"/>\n</g>\n<!-- 142 -->\n<g id=\"node143\" class=\"node\"><title>142</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3143,-417.5C3143,-417.5 3070,-417.5 3070,-417.5 3064,-417.5 3058,-411.5 3058,-405.5 3058,-405.5 3058,-361.5 3058,-361.5 3058,-355.5 3064,-349.5 3070,-349.5 3070,-349.5 3143,-349.5 3143,-349.5 3149,-349.5 3155,-355.5 3155,-361.5 3155,-361.5 3155,-405.5 3155,-405.5 3155,-411.5 3149,-417.5 3143,-417.5\"/>\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3067\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3066\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 140->142 -->\n<g id=\"edge142\" class=\"edge\"><title>140->142</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3106.5,-460.907C3106.5,-450.204 3106.5,-438.615 3106.5,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3110,-427.667 3106.5,-417.667 3103,-427.667 3110,-427.667\"/>\n</g>\n<!-- 144 -->\n<g id=\"node145\" class=\"node\"><title>144</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3431,-544C3431,-544 3258,-544 3258,-544 3252,-544 3246,-538 3246,-532 3246,-532 3246,-473 3246,-473 3246,-467 3252,-461 3258,-461 3258,-461 3431,-461 3431,-461 3437,-461 3443,-467 3443,-473 3443,-473 3443,-532 3443,-532 3443,-538 3437,-544 3431,-544\"/>\n<text text-anchor=\"start\" x=\"3254\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.258</text>\n<text text-anchor=\"start\" x=\"3307\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.002</text>\n<text text-anchor=\"start\" x=\"3297\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 813</text>\n<text text-anchor=\"start\" x=\"3296\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [812, 1]</text>\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 143->144 -->\n<g id=\"edge144\" class=\"edge\"><title>143->144</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3344.5,-579.907C3344.5,-571.649 3344.5,-562.864 3344.5,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3348,-554.021 3344.5,-544.021 3341,-554.021 3348,-554.021\"/>\n</g>\n<!-- 153 -->\n<g id=\"node154\" class=\"node\"><title>153</title>\n<path fill=\"#e78c4b\" stroke=\"black\" d=\"M3658,-544C3658,-544 3485,-544 3485,-544 3479,-544 3473,-538 3473,-532 3473,-532 3473,-473 3473,-473 3473,-467 3479,-461 3485,-461 3485,-461 3658,-461 3658,-461 3664,-461 3670,-467 3670,-473 3670,-473 3670,-532 3670,-532 3670,-538 3664,-544 3658,-544\"/>\n<text text-anchor=\"start\" x=\"3481\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.294</text>\n<text text-anchor=\"start\" x=\"3534\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.153</text>\n<text text-anchor=\"start\" x=\"3528\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\n<text text-anchor=\"start\" x=\"3527\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 2]</text>\n<text text-anchor=\"start\" x=\"3542.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 143->153 -->\n<g id=\"edge153\" class=\"edge\"><title>143->153</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3423.26,-579.907C3442.8,-569.834 3463.87,-558.977 3483.81,-548.698\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3485.6,-551.713 3492.88,-544.021 3482.39,-545.491 3485.6,-551.713\"/>\n</g>\n<!-- 145 -->\n<g id=\"node146\" class=\"node\"><title>145</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3274,-417.5C3274,-417.5 3185,-417.5 3185,-417.5 3179,-417.5 3173,-411.5 3173,-405.5 3173,-405.5 3173,-361.5 3173,-361.5 3173,-355.5 3179,-349.5 3185,-349.5 3185,-349.5 3274,-349.5 3274,-349.5 3280,-349.5 3286,-355.5 3286,-361.5 3286,-361.5 3286,-405.5 3286,-405.5 3286,-411.5 3280,-417.5 3274,-417.5\"/>\n<text text-anchor=\"start\" x=\"3200.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3182\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 609</text>\n<text text-anchor=\"start\" x=\"3181\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [609, 0]</text>\n<text text-anchor=\"start\" x=\"3200.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 144->145 -->\n<g id=\"edge145\" class=\"edge\"><title>144->145</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3304.6,-460.907C3293.21,-449.321 3280.81,-436.698 3269.42,-425.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3271.61,-422.345 3262.1,-417.667 3266.61,-427.252 3271.61,-422.345\"/>\n</g>\n<!-- 146 -->\n<g id=\"node147\" class=\"node\"><title>146</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M3489,-425C3489,-425 3316,-425 3316,-425 3310,-425 3304,-419 3304,-413 3304,-413 3304,-354 3304,-354 3304,-348 3310,-342 3316,-342 3316,-342 3489,-342 3489,-342 3495,-342 3501,-348 3501,-354 3501,-354 3501,-413 3501,-413 3501,-419 3495,-425 3489,-425\"/>\n<text text-anchor=\"start\" x=\"3312\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.249</text>\n<text text-anchor=\"start\" x=\"3369\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.01</text>\n<text text-anchor=\"start\" x=\"3355\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 204</text>\n<text text-anchor=\"start\" x=\"3354\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 1]</text>\n<text text-anchor=\"start\" x=\"3373.5\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 144->146 -->\n<g id=\"edge146\" class=\"edge\"><title>144->146</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3364.62,-460.907C3368.9,-452.286 3373.46,-443.09 3377.87,-434.175\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3381.11,-435.535 3382.41,-425.021 3374.84,-432.426 3381.11,-435.535\"/>\n</g>\n<!-- 147 -->\n<g id=\"node148\" class=\"node\"><title>147</title>\n<path fill=\"#e88f4f\" stroke=\"black\" d=\"M3394.5,-306C3394.5,-306 3252.5,-306 3252.5,-306 3246.5,-306 3240.5,-300 3240.5,-294 3240.5,-294 3240.5,-235 3240.5,-235 3240.5,-229 3246.5,-223 3252.5,-223 3252.5,-223 3394.5,-223 3394.5,-223 3400.5,-223 3406.5,-229 3406.5,-235 3406.5,-235 3406.5,-294 3406.5,-294 3406.5,-300 3400.5,-306 3394.5,-306\"/>\n<text text-anchor=\"start\" x=\"3248.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 0.394</text>\n<text text-anchor=\"start\" x=\"3290\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.18</text>\n<text text-anchor=\"start\" x=\"3280\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"3283\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 1]</text>\n<text text-anchor=\"start\" x=\"3294.5\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 146->147 -->\n<g id=\"edge147\" class=\"edge\"><title>146->147</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3375.09,-341.907C3369.09,-333.014 3362.67,-323.509 3356.47,-314.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3359.36,-312.35 3350.86,-306.021 3353.56,-316.267 3359.36,-312.35\"/>\n</g>\n<!-- 152 -->\n<g id=\"node153\" class=\"node\"><title>152</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3526,-298.5C3526,-298.5 3437,-298.5 3437,-298.5 3431,-298.5 3425,-292.5 3425,-286.5 3425,-286.5 3425,-242.5 3425,-242.5 3425,-236.5 3431,-230.5 3437,-230.5 3437,-230.5 3526,-230.5 3526,-230.5 3532,-230.5 3538,-236.5 3538,-242.5 3538,-242.5 3538,-286.5 3538,-286.5 3538,-292.5 3532,-298.5 3526,-298.5\"/>\n<text text-anchor=\"start\" x=\"3452.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3434\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 194</text>\n<text text-anchor=\"start\" x=\"3433\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [194, 0]</text>\n<text text-anchor=\"start\" x=\"3452.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 146->152 -->\n<g id=\"edge152\" class=\"edge\"><title>146->152</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3429.91,-341.907C3437.51,-330.652 3445.77,-318.418 3453.41,-307.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3456.41,-308.913 3459.11,-298.667 3450.61,-304.996 3456.41,-308.913\"/>\n</g>\n<!-- 148 -->\n<g id=\"node149\" class=\"node\"><title>148</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3285,-179.5C3285,-179.5 3212,-179.5 3212,-179.5 3206,-179.5 3200,-173.5 3200,-167.5 3200,-167.5 3200,-123.5 3200,-123.5 3200,-117.5 3206,-111.5 3212,-111.5 3212,-111.5 3285,-111.5 3285,-111.5 3291,-111.5 3297,-117.5 3297,-123.5 3297,-123.5 3297,-167.5 3297,-167.5 3297,-173.5 3291,-179.5 3285,-179.5\"/>\n<text text-anchor=\"start\" x=\"3219.5\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3209\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"3208\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\n<text text-anchor=\"start\" x=\"3219.5\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 147->148 -->\n<g id=\"edge148\" class=\"edge\"><title>147->148</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3297.48,-222.907C3290.26,-211.652 3282.42,-199.418 3275.17,-188.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3278.1,-186.197 3269.76,-179.667 3272.21,-189.975 3278.1,-186.197\"/>\n</g>\n<!-- 149 -->\n<g id=\"node150\" class=\"node\"><title>149</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M3469.5,-187C3469.5,-187 3327.5,-187 3327.5,-187 3321.5,-187 3315.5,-181 3315.5,-175 3315.5,-175 3315.5,-116 3315.5,-116 3315.5,-110 3321.5,-104 3327.5,-104 3327.5,-104 3469.5,-104 3469.5,-104 3475.5,-104 3481.5,-110 3481.5,-116 3481.5,-116 3481.5,-175 3481.5,-175 3481.5,-181 3475.5,-187 3469.5,-187\"/>\n<text text-anchor=\"start\" x=\"3323.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 0.581</text>\n<text text-anchor=\"start\" x=\"3369.5\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"3359\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3358\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"3369.5\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 147->149 -->\n<g id=\"edge149\" class=\"edge\"><title>147->149</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3349.52,-222.907C3355.16,-214.105 3361.19,-204.703 3367.02,-195.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3370.07,-197.328 3372.53,-187.021 3364.18,-193.551 3370.07,-197.328\"/>\n</g>\n<!-- 150 -->\n<g id=\"node151\" class=\"node\"><title>150</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3377,-68C3377,-68 3304,-68 3304,-68 3298,-68 3292,-62 3292,-56 3292,-56 3292,-12 3292,-12 3292,-6 3298,-0 3304,-0 3304,-0 3377,-0 3377,-0 3383,-0 3389,-6 3389,-12 3389,-12 3389,-56 3389,-56 3389,-62 3383,-68 3377,-68\"/>\n<text text-anchor=\"start\" x=\"3311.5\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3301\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3300\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3311.5\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 149->150 -->\n<g id=\"edge150\" class=\"edge\"><title>149->150</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3376.9,-103.726C3372.31,-95.0615 3367.46,-85.8962 3362.84,-77.1802\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3365.91,-75.4982 3358.14,-68.2996 3359.73,-78.7748 3365.91,-75.4982\"/>\n</g>\n<!-- 151 -->\n<g id=\"node152\" class=\"node\"><title>151</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3492,-68C3492,-68 3419,-68 3419,-68 3413,-68 3407,-62 3407,-56 3407,-56 3407,-12 3407,-12 3407,-6 3413,-0 3419,-0 3419,-0 3492,-0 3492,-0 3498,-0 3504,-6 3504,-12 3504,-12 3504,-56 3504,-56 3504,-62 3498,-68 3492,-68\"/>\n<text text-anchor=\"start\" x=\"3426.5\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3416\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3415\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3426.5\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 149->151 -->\n<g id=\"edge151\" class=\"edge\"><title>149->151</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3419.72,-103.726C3424.24,-95.0615 3429.01,-85.8962 3433.54,-77.1802\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3436.65,-78.7859 3438.17,-68.2996 3430.44,-75.5537 3436.65,-78.7859\"/>\n</g>\n<!-- 154 -->\n<g id=\"node155\" class=\"node\"><title>154</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3612,-417.5C3612,-417.5 3531,-417.5 3531,-417.5 3525,-417.5 3519,-411.5 3519,-405.5 3519,-405.5 3519,-361.5 3519,-361.5 3519,-355.5 3525,-349.5 3531,-349.5 3531,-349.5 3612,-349.5 3612,-349.5 3618,-349.5 3624,-355.5 3624,-361.5 3624,-361.5 3624,-405.5 3624,-405.5 3624,-411.5 3618,-417.5 3612,-417.5\"/>\n<text text-anchor=\"start\" x=\"3542.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3528\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\n<text text-anchor=\"start\" x=\"3527\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\n<text text-anchor=\"start\" x=\"3542.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 153->154 -->\n<g id=\"edge154\" class=\"edge\"><title>153->154</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3571.5,-460.907C3571.5,-450.204 3571.5,-438.615 3571.5,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3575,-427.667 3571.5,-417.667 3568,-427.667 3575,-427.667\"/>\n</g>\n<!-- 155 -->\n<g id=\"node156\" class=\"node\"><title>155</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3800.5,-425C3800.5,-425 3654.5,-425 3654.5,-425 3648.5,-425 3642.5,-419 3642.5,-413 3642.5,-413 3642.5,-354 3642.5,-354 3642.5,-348 3648.5,-342 3654.5,-342 3654.5,-342 3800.5,-342 3800.5,-342 3806.5,-342 3812.5,-348 3812.5,-354 3812.5,-354 3812.5,-413 3812.5,-413 3812.5,-419 3806.5,-425 3800.5,-425\"/>\n<text text-anchor=\"start\" x=\"3650.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -0.122</text>\n<text text-anchor=\"start\" x=\"3690\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"3688\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3687\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"3698.5\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 153->155 -->\n<g id=\"edge155\" class=\"edge\"><title>153->155</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3625.62,-460.907C3638.45,-451.288 3652.23,-440.953 3665.38,-431.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3667.57,-433.821 3673.47,-425.021 3663.37,-428.221 3667.57,-433.821\"/>\n</g>\n<!-- 156 -->\n<g id=\"node157\" class=\"node\"><title>156</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3747,-298.5C3747,-298.5 3674,-298.5 3674,-298.5 3668,-298.5 3662,-292.5 3662,-286.5 3662,-286.5 3662,-242.5 3662,-242.5 3662,-236.5 3668,-230.5 3674,-230.5 3674,-230.5 3747,-230.5 3747,-230.5 3753,-230.5 3759,-236.5 3759,-242.5 3759,-242.5 3759,-286.5 3759,-286.5 3759,-292.5 3753,-298.5 3747,-298.5\"/>\n<text text-anchor=\"start\" x=\"3681.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3671\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3670\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3681.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 155->156 -->\n<g id=\"edge156\" class=\"edge\"><title>155->156</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3721.6,-341.907C3720.05,-331.204 3718.36,-319.615 3716.79,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3720.22,-308.06 3715.32,-298.667 3713.29,-309.066 3720.22,-308.06\"/>\n</g>\n<!-- 157 -->\n<g id=\"node158\" class=\"node\"><title>157</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3862,-298.5C3862,-298.5 3789,-298.5 3789,-298.5 3783,-298.5 3777,-292.5 3777,-286.5 3777,-286.5 3777,-242.5 3777,-242.5 3777,-236.5 3783,-230.5 3789,-230.5 3789,-230.5 3862,-230.5 3862,-230.5 3868,-230.5 3874,-236.5 3874,-242.5 3874,-242.5 3874,-286.5 3874,-286.5 3874,-292.5 3868,-298.5 3862,-298.5\"/>\n<text text-anchor=\"start\" x=\"3796.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3786\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3785\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3796.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 155->157 -->\n<g id=\"edge157\" class=\"edge\"><title>155->157</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3761.5,-341.907C3771.11,-330.432 3781.58,-317.938 3791.21,-306.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3793.98,-308.58 3797.72,-298.667 3788.61,-304.086 3793.98,-308.58\"/>\n</g>\n<!-- 159 -->\n<g id=\"node160\" class=\"node\"><title>159</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3595,-655.5C3595,-655.5 3522,-655.5 3522,-655.5 3516,-655.5 3510,-649.5 3510,-643.5 3510,-643.5 3510,-599.5 3510,-599.5 3510,-593.5 3516,-587.5 3522,-587.5 3522,-587.5 3595,-587.5 3595,-587.5 3601,-587.5 3607,-593.5 3607,-599.5 3607,-599.5 3607,-643.5 3607,-643.5 3607,-649.5 3601,-655.5 3595,-655.5\"/>\n<text text-anchor=\"start\" x=\"3529.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3519\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3518\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"3529.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 158->159 -->\n<g id=\"edge159\" class=\"edge\"><title>158->159</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3576.79,-698.907C3574.2,-688.094 3571.39,-676.376 3568.78,-665.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3572.17,-664.578 3566.44,-655.667 3565.36,-666.207 3572.17,-664.578\"/>\n</g>\n<!-- 160 -->\n<g id=\"node161\" class=\"node\"><title>160</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3710,-655.5C3710,-655.5 3637,-655.5 3637,-655.5 3631,-655.5 3625,-649.5 3625,-643.5 3625,-643.5 3625,-599.5 3625,-599.5 3625,-593.5 3631,-587.5 3637,-587.5 3637,-587.5 3710,-587.5 3710,-587.5 3716,-587.5 3722,-593.5 3722,-599.5 3722,-599.5 3722,-643.5 3722,-643.5 3722,-649.5 3716,-655.5 3710,-655.5\"/>\n<text text-anchor=\"start\" x=\"3644.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3634\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3633\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3644.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 158->160 -->\n<g id=\"edge160\" class=\"edge\"><title>158->160</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3616.68,-698.907C3625.14,-687.542 3634.33,-675.178 3642.81,-663.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3645.68,-665.78 3648.84,-655.667 3640.06,-661.603 3645.68,-665.78\"/>\n</g>\n<!-- 163 -->\n<g id=\"node164\" class=\"node\"><title>163</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4036,-1012.5C4036,-1012.5 3955,-1012.5 3955,-1012.5 3949,-1012.5 3943,-1006.5 3943,-1000.5 3943,-1000.5 3943,-956.5 3943,-956.5 3943,-950.5 3949,-944.5 3955,-944.5 3955,-944.5 4036,-944.5 4036,-944.5 4042,-944.5 4048,-950.5 4048,-956.5 4048,-956.5 4048,-1000.5 4048,-1000.5 4048,-1006.5 4042,-1012.5 4036,-1012.5\"/>\n<text text-anchor=\"start\" x=\"3966.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3952\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 46</text>\n<text text-anchor=\"start\" x=\"3951\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [46, 0]</text>\n<text text-anchor=\"start\" x=\"3966.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 162->163 -->\n<g id=\"edge163\" class=\"edge\"><title>162->163</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4081.05,-1055.91C4067.83,-1044.1 4053.4,-1031.22 4040.23,-1019.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4042.43,-1016.72 4032.64,-1012.67 4037.76,-1021.94 4042.43,-1016.72\"/>\n</g>\n<!-- 164 -->\n<g id=\"node165\" class=\"node\"><title>164</title>\n<path fill=\"#87c4ef\" stroke=\"black\" d=\"M4181,-1020C4181,-1020 4078,-1020 4078,-1020 4072,-1020 4066,-1014 4066,-1008 4066,-1008 4066,-949 4066,-949 4066,-943 4072,-937 4078,-937 4078,-937 4181,-937 4181,-937 4187,-937 4193,-943 4193,-949 4193,-949 4193,-1008 4193,-1008 4193,-1014 4187,-1020 4181,-1020\"/>\n<text text-anchor=\"start\" x=\"4074\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"4092\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.406</text>\n<text text-anchor=\"start\" x=\"4086\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 53</text>\n<text text-anchor=\"start\" x=\"4081\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [15, 38]</text>\n<text text-anchor=\"start\" x=\"4100.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 162->164 -->\n<g id=\"edge164\" class=\"edge\"><title>162->164</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4127.54,-1055.91C4127.75,-1047.56 4127.98,-1038.67 4128.2,-1030.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4131.7,-1030.11 4128.46,-1020.02 4124.71,-1029.93 4131.7,-1030.11\"/>\n</g>\n<!-- 165 -->\n<g id=\"node166\" class=\"node\"><title>165</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3974,-893.5C3974,-893.5 3893,-893.5 3893,-893.5 3887,-893.5 3881,-887.5 3881,-881.5 3881,-881.5 3881,-837.5 3881,-837.5 3881,-831.5 3887,-825.5 3893,-825.5 3893,-825.5 3974,-825.5 3974,-825.5 3980,-825.5 3986,-831.5 3986,-837.5 3986,-837.5 3986,-881.5 3986,-881.5 3986,-887.5 3980,-893.5 3974,-893.5\"/>\n<text text-anchor=\"start\" x=\"3904.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3890\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"3889\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\n<text text-anchor=\"start\" x=\"3904.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 164->165 -->\n<g id=\"edge165\" class=\"edge\"><title>164->165</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4065.91,-942.029C4037.78,-926.222 4008.04,-909.319 3994.5,-901 3993.4,-900.326 3992.3,-899.643 3991.19,-898.951\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3992.9,-895.897 3982.58,-893.516 3989.17,-901.815 3992.9,-895.897\"/>\n</g>\n<!-- 166 -->\n<g id=\"node167\" class=\"node\"><title>166</title>\n<path fill=\"#3ea0e6\" stroke=\"black\" d=\"M4243,-901C4243,-901 4016,-901 4016,-901 4010,-901 4004,-895 4004,-889 4004,-889 4004,-830 4004,-830 4004,-824 4010,-818 4016,-818 4016,-818 4243,-818 4243,-818 4249,-818 4255,-824 4255,-830 4255,-830 4255,-889 4255,-889 4255,-895 4249,-901 4243,-901\"/>\n<text text-anchor=\"start\" x=\"4012\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ -0.107</text>\n<text text-anchor=\"start\" x=\"4096\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.05</text>\n<text text-anchor=\"start\" x=\"4086\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 39</text>\n<text text-anchor=\"start\" x=\"4085\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 38]</text>\n<text text-anchor=\"start\" x=\"4100.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 164->166 -->\n<g id=\"edge166\" class=\"edge\"><title>164->166</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4129.5,-936.907C4129.5,-928.649 4129.5,-919.864 4129.5,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4133,-911.021 4129.5,-901.021 4126,-911.021 4133,-911.021\"/>\n</g>\n<!-- 167 -->\n<g id=\"node168\" class=\"node\"><title>167</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4058,-774.5C4058,-774.5 3977,-774.5 3977,-774.5 3971,-774.5 3965,-768.5 3965,-762.5 3965,-762.5 3965,-718.5 3965,-718.5 3965,-712.5 3971,-706.5 3977,-706.5 3977,-706.5 4058,-706.5 4058,-706.5 4064,-706.5 4070,-712.5 4070,-718.5 4070,-718.5 4070,-762.5 4070,-762.5 4070,-768.5 4064,-774.5 4058,-774.5\"/>\n<text text-anchor=\"start\" x=\"3988.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3974\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\n<text text-anchor=\"start\" x=\"3973\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 38]</text>\n<text text-anchor=\"start\" x=\"3988.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 166->167 -->\n<g id=\"edge167\" class=\"edge\"><title>166->167</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4090.64,-817.907C4079.55,-806.321 4067.47,-793.698 4056.38,-782.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4058.69,-779.47 4049.25,-774.667 4053.64,-784.311 4058.69,-779.47\"/>\n</g>\n<!-- 168 -->\n<g id=\"node169\" class=\"node\"><title>168</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4173,-774.5C4173,-774.5 4100,-774.5 4100,-774.5 4094,-774.5 4088,-768.5 4088,-762.5 4088,-762.5 4088,-718.5 4088,-718.5 4088,-712.5 4094,-706.5 4100,-706.5 4100,-706.5 4173,-706.5 4173,-706.5 4179,-706.5 4185,-712.5 4185,-718.5 4185,-718.5 4185,-762.5 4185,-762.5 4185,-768.5 4179,-774.5 4173,-774.5\"/>\n<text text-anchor=\"start\" x=\"4107.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4097\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4096\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"4107.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 166->168 -->\n<g id=\"edge168\" class=\"edge\"><title>166->168</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4131.93,-817.907C4132.57,-807.204 4133.26,-795.615 4133.91,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4137.41,-784.858 4134.52,-774.667 4130.42,-784.44 4137.41,-784.858\"/>\n</g>\n<!-- 171 -->\n<g id=\"node172\" class=\"node\"><title>171</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4827,-1258C4827,-1258 4690,-1258 4690,-1258 4684,-1258 4678,-1252 4678,-1246 4678,-1246 4678,-1187 4678,-1187 4678,-1181 4684,-1175 4690,-1175 4690,-1175 4827,-1175 4827,-1175 4833,-1175 4839,-1181 4839,-1187 4839,-1187 4839,-1246 4839,-1246 4839,-1252 4833,-1258 4827,-1258\"/>\n<text text-anchor=\"start\" x=\"4686\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">is_guest_login ≤ 5.161</text>\n<text text-anchor=\"start\" x=\"4721\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.002</text>\n<text text-anchor=\"start\" x=\"4702.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10554</text>\n<text text-anchor=\"start\" x=\"4701.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10545, 9]</text>\n<text text-anchor=\"start\" x=\"4729.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 170->171 -->\n<g id=\"edge171\" class=\"edge\"><title>170->171</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4789.19,-1293.91C4785.77,-1285.38 4782.11,-1276.28 4778.57,-1267.46\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4781.75,-1266 4774.78,-1258.02 4775.26,-1268.6 4781.75,-1266\"/>\n</g>\n<!-- 204 -->\n<g id=\"node205\" class=\"node\"><title>204</title>\n<path fill=\"#e88d4c\" stroke=\"black\" d=\"M5004,-1258C5004,-1258 4877,-1258 4877,-1258 4871,-1258 4865,-1252 4865,-1246 4865,-1246 4865,-1187 4865,-1187 4865,-1181 4871,-1175 4877,-1175 4877,-1175 5004,-1175 5004,-1175 5010,-1175 5016,-1181 5016,-1187 5016,-1187 5016,-1246 5016,-1246 5016,-1252 5010,-1258 5004,-1258\"/>\n<text text-anchor=\"start\" x=\"4873\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ -0.9</text>\n<text text-anchor=\"start\" x=\"4907\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.16</text>\n<text text-anchor=\"start\" x=\"4897\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 57</text>\n<text text-anchor=\"start\" x=\"4896\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [52, 5]</text>\n<text text-anchor=\"start\" x=\"4911.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 170->204 -->\n<g id=\"edge204\" class=\"edge\"><title>170->204</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4852.34,-1293.91C4863.23,-1284.47 4874.91,-1274.34 4886.1,-1264.65\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4888.48,-1267.22 4893.75,-1258.02 4883.9,-1261.93 4888.48,-1267.22\"/>\n</g>\n<!-- 172 -->\n<g id=\"node173\" class=\"node\"><title>172</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4613,-1139C4613,-1139 4426,-1139 4426,-1139 4420,-1139 4414,-1133 4414,-1127 4414,-1127 4414,-1068 4414,-1068 4414,-1062 4420,-1056 4426,-1056 4426,-1056 4613,-1056 4613,-1056 4619,-1056 4625,-1062 4625,-1068 4625,-1068 4625,-1127 4625,-1127 4625,-1133 4619,-1139 4613,-1139\"/>\n<text text-anchor=\"start\" x=\"4422\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 4.607</text>\n<text text-anchor=\"start\" x=\"4482\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.002</text>\n<text text-anchor=\"start\" x=\"4463.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10552</text>\n<text text-anchor=\"start\" x=\"4462.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10544, 8]</text>\n<text text-anchor=\"start\" x=\"4490.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 171->172 -->\n<g id=\"edge172\" class=\"edge\"><title>171->172</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4677.92,-1176.05C4656.69,-1165.66 4633.63,-1154.37 4611.84,-1143.7\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4613.11,-1140.43 4602.59,-1139.17 4610.03,-1146.71 4613.11,-1140.43\"/>\n</g>\n<!-- 201 -->\n<g id=\"node202\" class=\"node\"><title>201</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M4861.5,-1139C4861.5,-1139 4655.5,-1139 4655.5,-1139 4649.5,-1139 4643.5,-1133 4643.5,-1127 4643.5,-1127 4643.5,-1068 4643.5,-1068 4643.5,-1062 4649.5,-1056 4655.5,-1056 4655.5,-1056 4861.5,-1056 4861.5,-1056 4867.5,-1056 4873.5,-1062 4873.5,-1068 4873.5,-1068 4873.5,-1127 4873.5,-1127 4873.5,-1133 4867.5,-1139 4861.5,-1139\"/>\n<text text-anchor=\"start\" x=\"4651.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ -0.857</text>\n<text text-anchor=\"start\" x=\"4729.5\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"4719\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4718\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"4729.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 171->201 -->\n<g id=\"edge201\" class=\"edge\"><title>171->201</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4758.5,-1174.91C4758.5,-1166.65 4758.5,-1157.86 4758.5,-1149.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4762,-1149.02 4758.5,-1139.02 4755,-1149.02 4762,-1149.02\"/>\n</g>\n<!-- 173 -->\n<g id=\"node174\" class=\"node\"><title>173</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4446,-1020C4446,-1020 4339,-1020 4339,-1020 4333,-1020 4327,-1014 4327,-1008 4327,-1008 4327,-949 4327,-949 4327,-943 4333,-937 4339,-937 4339,-937 4446,-937 4446,-937 4452,-937 4458,-943 4458,-949 4458,-949 4458,-1008 4458,-1008 4458,-1014 4452,-1020 4446,-1020\"/>\n<text text-anchor=\"start\" x=\"4335\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 7.252</text>\n<text text-anchor=\"start\" x=\"4355\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.001</text>\n<text text-anchor=\"start\" x=\"4336.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10549</text>\n<text text-anchor=\"start\" x=\"4335.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10542, 7]</text>\n<text text-anchor=\"start\" x=\"4363.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 172->173 -->\n<g id=\"edge173\" class=\"edge\"><title>172->173</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4475.44,-1055.91C4465.29,-1046.56 4454.41,-1036.54 4443.98,-1026.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4446.21,-1024.22 4436.48,-1020.02 4441.47,-1029.37 4446.21,-1024.22\"/>\n</g>\n<!-- 198 -->\n<g id=\"node199\" class=\"node\"><title>198</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M4661,-1020C4661,-1020 4488,-1020 4488,-1020 4482,-1020 4476,-1014 4476,-1008 4476,-1008 4476,-949 4476,-949 4476,-943 4482,-937 4488,-937 4488,-937 4661,-937 4661,-937 4667,-937 4673,-943 4673,-949 4673,-949 4673,-1008 4673,-1008 4673,-1014 4667,-1020 4661,-1020\"/>\n<text text-anchor=\"start\" x=\"4484\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_file_creations ≤ 16.966</text>\n<text text-anchor=\"start\" x=\"4537\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"4535\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4534\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\n<text text-anchor=\"start\" x=\"4545.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 172->198 -->\n<g id=\"edge198\" class=\"edge\"><title>172->198</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4538.58,-1055.91C4542.63,-1047.29 4546.96,-1038.09 4551.15,-1029.17\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4554.36,-1030.56 4555.45,-1020.02 4548.03,-1027.58 4554.36,-1030.56\"/>\n</g>\n<!-- 174 -->\n<g id=\"node175\" class=\"node\"><title>174</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4392.5,-901C4392.5,-901 4286.5,-901 4286.5,-901 4280.5,-901 4274.5,-895 4274.5,-889 4274.5,-889 4274.5,-830 4274.5,-830 4274.5,-824 4280.5,-818 4286.5,-818 4286.5,-818 4392.5,-818 4392.5,-818 4398.5,-818 4404.5,-824 4404.5,-830 4404.5,-830 4404.5,-889 4404.5,-889 4404.5,-895 4398.5,-901 4392.5,-901\"/>\n<text text-anchor=\"start\" x=\"4283.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.413</text>\n<text text-anchor=\"start\" x=\"4302\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.001</text>\n<text text-anchor=\"start\" x=\"4283.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10543</text>\n<text text-anchor=\"start\" x=\"4282.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10537, 6]</text>\n<text text-anchor=\"start\" x=\"4310.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 173->174 -->\n<g id=\"edge174\" class=\"edge\"><title>173->174</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4374.11,-936.907C4370.21,-928.286 4366.04,-919.09 4362,-910.175\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4365.17,-908.686 4357.86,-901.021 4358.79,-911.574 4365.17,-908.686\"/>\n</g>\n<!-- 195 -->\n<g id=\"node196\" class=\"node\"><title>195</title>\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M4548.5,-901C4548.5,-901 4434.5,-901 4434.5,-901 4428.5,-901 4422.5,-895 4422.5,-889 4422.5,-889 4422.5,-830 4422.5,-830 4422.5,-824 4428.5,-818 4434.5,-818 4434.5,-818 4548.5,-818 4548.5,-818 4554.5,-818 4560.5,-824 4560.5,-830 4560.5,-830 4560.5,-889 4560.5,-889 4560.5,-895 4554.5,-901 4548.5,-901\"/>\n<text text-anchor=\"start\" x=\"4430.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 0.478</text>\n<text text-anchor=\"start\" x=\"4454\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.278</text>\n<text text-anchor=\"start\" x=\"4452\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"4451\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\n<text text-anchor=\"start\" x=\"4462.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 173->195 -->\n<g id=\"edge195\" class=\"edge\"><title>173->195</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4426.85,-936.907C4434.53,-927.832 4442.74,-918.121 4450.66,-908.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4453.43,-910.916 4457.21,-901.021 4448.08,-906.394 4453.43,-910.916\"/>\n</g>\n<!-- 175 -->\n<g id=\"node176\" class=\"node\"><title>175</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4427.5,-782C4427.5,-782 4223.5,-782 4223.5,-782 4217.5,-782 4211.5,-776 4211.5,-770 4211.5,-770 4211.5,-711 4211.5,-711 4211.5,-705 4217.5,-699 4223.5,-699 4223.5,-699 4427.5,-699 4427.5,-699 4433.5,-699 4439.5,-705 4439.5,-711 4439.5,-711 4439.5,-770 4439.5,-770 4439.5,-776 4433.5,-782 4427.5,-782\"/>\n<text text-anchor=\"start\" x=\"4219.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.056</text>\n<text text-anchor=\"start\" x=\"4288\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.001</text>\n<text text-anchor=\"start\" x=\"4269.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10531</text>\n<text text-anchor=\"start\" x=\"4268.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10526, 5]</text>\n<text text-anchor=\"start\" x=\"4296.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 174->175 -->\n<g id=\"edge175\" class=\"edge\"><title>174->175</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4334.64,-817.907C4333.64,-809.558 4332.58,-800.671 4331.55,-792.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4335.01,-791.534 4330.35,-782.021 4328.06,-792.366 4335.01,-791.534\"/>\n</g>\n<!-- 192 -->\n<g id=\"node193\" class=\"node\"><title>192</title>\n<path fill=\"#e78c4b\" stroke=\"black\" d=\"M4609.5,-782C4609.5,-782 4469.5,-782 4469.5,-782 4463.5,-782 4457.5,-776 4457.5,-770 4457.5,-770 4457.5,-711 4457.5,-711 4457.5,-705 4463.5,-699 4469.5,-699 4469.5,-699 4609.5,-699 4609.5,-699 4615.5,-699 4621.5,-705 4621.5,-711 4621.5,-711 4621.5,-770 4621.5,-770 4621.5,-776 4615.5,-782 4609.5,-782\"/>\n<text text-anchor=\"start\" x=\"4465.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">su_attempted ≤ 10.222</text>\n<text text-anchor=\"start\" x=\"4502\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.153</text>\n<text text-anchor=\"start\" x=\"4496\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"4495\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 1]</text>\n<text text-anchor=\"start\" x=\"4510.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 174->192 -->\n<g id=\"edge192\" class=\"edge\"><title>174->192</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4404.71,-820.352C4422.82,-809.759 4442.66,-798.15 4461.43,-787.174\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4463.38,-790.084 4470.25,-782.013 4459.85,-784.042 4463.38,-790.084\"/>\n</g>\n<!-- 176 -->\n<g id=\"node177\" class=\"node\"><title>176</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4313,-663C4313,-663 4206,-663 4206,-663 4200,-663 4194,-657 4194,-651 4194,-651 4194,-592 4194,-592 4194,-586 4200,-580 4206,-580 4206,-580 4313,-580 4313,-580 4319,-580 4325,-586 4325,-592 4325,-592 4325,-651 4325,-651 4325,-657 4319,-663 4313,-663\"/>\n<text text-anchor=\"start\" x=\"4202\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 0.006</text>\n<text text-anchor=\"start\" x=\"4222\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.001</text>\n<text text-anchor=\"start\" x=\"4203.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10469</text>\n<text text-anchor=\"start\" x=\"4202.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10466, 3]</text>\n<text text-anchor=\"start\" x=\"4230.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 175->176 -->\n<g id=\"edge176\" class=\"edge\"><title>175->176</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4302.6,-698.907C4297.69,-690.195 4292.44,-680.897 4287.36,-671.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4290.32,-670.011 4282.36,-663.021 4284.22,-673.45 4290.32,-670.011\"/>\n</g>\n<!-- 187 -->\n<g id=\"node188\" class=\"node\"><title>187</title>\n<path fill=\"#e68540\" stroke=\"black\" d=\"M4462,-663C4462,-663 4355,-663 4355,-663 4349,-663 4343,-657 4343,-651 4343,-651 4343,-592 4343,-592 4343,-586 4349,-580 4355,-580 4355,-580 4462,-580 4462,-580 4468,-580 4474,-586 4474,-592 4474,-592 4474,-651 4474,-651 4474,-657 4468,-663 4462,-663\"/>\n<text text-anchor=\"start\" x=\"4351\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.215</text>\n<text text-anchor=\"start\" x=\"4371\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.062</text>\n<text text-anchor=\"start\" x=\"4365\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 62</text>\n<text text-anchor=\"start\" x=\"4364\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [60, 2]</text>\n<text text-anchor=\"start\" x=\"4379.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 175->187 -->\n<g id=\"edge187\" class=\"edge\"><title>175->187</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4354.3,-698.907C4360.61,-690.014 4367.35,-680.509 4373.86,-671.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4376.82,-673.202 4379.75,-663.021 4371.11,-669.152 4376.82,-673.202\"/>\n</g>\n<!-- 177 -->\n<g id=\"node178\" class=\"node\"><title>177</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4134.5,-544C4134.5,-544 3960.5,-544 3960.5,-544 3954.5,-544 3948.5,-538 3948.5,-532 3948.5,-532 3948.5,-473 3948.5,-473 3948.5,-467 3954.5,-461 3960.5,-461 3960.5,-461 4134.5,-461 4134.5,-461 4140.5,-461 4146.5,-467 4146.5,-473 4146.5,-473 4146.5,-532 4146.5,-532 4146.5,-538 4140.5,-544 4134.5,-544\"/>\n<text text-anchor=\"start\" x=\"3956.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.612</text>\n<text text-anchor=\"start\" x=\"4018.5\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3991.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10451</text>\n<text text-anchor=\"start\" x=\"3990.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10449, 2]</text>\n<text text-anchor=\"start\" x=\"4018.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 176->177 -->\n<g id=\"edge177\" class=\"edge\"><title>176->177</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4193.87,-584.282C4173.66,-573.124 4151.14,-560.695 4129.94,-548.997\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4131.39,-545.802 4120.95,-544.034 4128.01,-551.93 4131.39,-545.802\"/>\n</g>\n<!-- 184 -->\n<g id=\"node185\" class=\"node\"><title>184</title>\n<path fill=\"#e78845\" stroke=\"black\" d=\"M4346,-544C4346,-544 4177,-544 4177,-544 4171,-544 4165,-538 4165,-532 4165,-532 4165,-473 4165,-473 4165,-467 4171,-461 4177,-461 4177,-461 4346,-461 4346,-461 4352,-461 4358,-467 4358,-473 4358,-473 4358,-532 4358,-532 4358,-538 4352,-544 4346,-544\"/>\n<text text-anchor=\"start\" x=\"4173\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.224</text>\n<text text-anchor=\"start\" x=\"4224\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.105</text>\n<text text-anchor=\"start\" x=\"4218\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\n<text text-anchor=\"start\" x=\"4217\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [17, 1]</text>\n<text text-anchor=\"start\" x=\"4232.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 176->184 -->\n<g id=\"edge184\" class=\"edge\"><title>176->184</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4260.19,-579.907C4260.34,-571.558 4260.49,-562.671 4260.64,-554.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4264.14,-554.079 4260.81,-544.021 4257.14,-553.959 4264.14,-554.079\"/>\n</g>\n<!-- 178 -->\n<g id=\"node179\" class=\"node\"><title>178</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3948.5,-417.5C3948.5,-417.5 3842.5,-417.5 3842.5,-417.5 3836.5,-417.5 3830.5,-411.5 3830.5,-405.5 3830.5,-405.5 3830.5,-361.5 3830.5,-361.5 3830.5,-355.5 3836.5,-349.5 3842.5,-349.5 3842.5,-349.5 3948.5,-349.5 3948.5,-349.5 3954.5,-349.5 3960.5,-355.5 3960.5,-361.5 3960.5,-361.5 3960.5,-405.5 3960.5,-405.5 3960.5,-411.5 3954.5,-417.5 3948.5,-417.5\"/>\n<text text-anchor=\"start\" x=\"3866.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3839.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10361</text>\n<text text-anchor=\"start\" x=\"3838.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10361, 0]</text>\n<text text-anchor=\"start\" x=\"3866.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 177->178 -->\n<g id=\"edge178\" class=\"edge\"><title>177->178</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3994.76,-460.907C3979.14,-448.88 3962.06,-435.735 3946.54,-423.791\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3948.65,-420.993 3938.59,-417.667 3944.38,-426.54 3948.65,-420.993\"/>\n</g>\n<!-- 179 -->\n<g id=\"node180\" class=\"node\"><title>179</title>\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M4164.5,-425C4164.5,-425 3990.5,-425 3990.5,-425 3984.5,-425 3978.5,-419 3978.5,-413 3978.5,-413 3978.5,-354 3978.5,-354 3978.5,-348 3984.5,-342 3990.5,-342 3990.5,-342 4164.5,-342 4164.5,-342 4170.5,-342 4176.5,-348 4176.5,-354 4176.5,-354 4176.5,-413 4176.5,-413 4176.5,-419 4170.5,-425 4164.5,-425\"/>\n<text text-anchor=\"start\" x=\"3986.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.677</text>\n<text text-anchor=\"start\" x=\"4040\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.043</text>\n<text text-anchor=\"start\" x=\"4034\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 90</text>\n<text text-anchor=\"start\" x=\"4033\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [88, 2]</text>\n<text text-anchor=\"start\" x=\"4048.5\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 177->179 -->\n<g id=\"edge179\" class=\"edge\"><title>177->179</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4057.91,-460.907C4060.07,-452.468 4062.38,-443.477 4064.62,-434.738\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4068.02,-435.577 4067.11,-425.021 4061.24,-433.838 4068.02,-435.577\"/>\n</g>\n<!-- 180 -->\n<g id=\"node181\" class=\"node\"><title>180</title>\n<path fill=\"#efb388\" stroke=\"black\" d=\"M4012,-306C4012,-306 3913,-306 3913,-306 3907,-306 3901,-300 3901,-294 3901,-294 3901,-235 3901,-235 3901,-229 3907,-223 3913,-223 3913,-223 4012,-223 4012,-223 4018,-223 4024,-229 4024,-235 4024,-235 4024,-294 4024,-294 4024,-300 4018,-306 4012,-306\"/>\n<text text-anchor=\"start\" x=\"3909\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.113</text>\n<text text-anchor=\"start\" x=\"3925\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.408</text>\n<text text-anchor=\"start\" x=\"3923\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"3922\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 2]</text>\n<text text-anchor=\"start\" x=\"3933.5\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 179->180 -->\n<g id=\"edge180\" class=\"edge\"><title>179->180</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4037.6,-341.907C4028.5,-332.651 4018.75,-322.732 4009.39,-313.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4011.83,-310.699 4002.33,-306.021 4006.84,-315.606 4011.83,-310.699\"/>\n</g>\n<!-- 183 -->\n<g id=\"node184\" class=\"node\"><title>183</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4135,-298.5C4135,-298.5 4054,-298.5 4054,-298.5 4048,-298.5 4042,-292.5 4042,-286.5 4042,-286.5 4042,-242.5 4042,-242.5 4042,-236.5 4048,-230.5 4054,-230.5 4054,-230.5 4135,-230.5 4135,-230.5 4141,-230.5 4147,-236.5 4147,-242.5 4147,-242.5 4147,-286.5 4147,-286.5 4147,-292.5 4141,-298.5 4135,-298.5\"/>\n<text text-anchor=\"start\" x=\"4065.5\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4051\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 83</text>\n<text text-anchor=\"start\" x=\"4050\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [83, 0]</text>\n<text text-anchor=\"start\" x=\"4065.5\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 179->183 -->\n<g id=\"edge183\" class=\"edge\"><title>179->183</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4083.4,-341.907C4084.95,-331.204 4086.64,-319.615 4088.21,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4091.71,-309.066 4089.68,-298.667 4084.78,-308.06 4091.71,-309.066\"/>\n</g>\n<!-- 181 -->\n<g id=\"node182\" class=\"node\"><title>181</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3941,-179.5C3941,-179.5 3868,-179.5 3868,-179.5 3862,-179.5 3856,-173.5 3856,-167.5 3856,-167.5 3856,-123.5 3856,-123.5 3856,-117.5 3862,-111.5 3868,-111.5 3868,-111.5 3941,-111.5 3941,-111.5 3947,-111.5 3953,-117.5 3953,-123.5 3953,-123.5 3953,-167.5 3953,-167.5 3953,-173.5 3947,-179.5 3941,-179.5\"/>\n<text text-anchor=\"start\" x=\"3875.5\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3865\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"3864\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"3875.5\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 180->181 -->\n<g id=\"edge181\" class=\"edge\"><title>180->181</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3942.38,-222.907C3936.91,-211.873 3930.97,-199.898 3925.46,-188.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3928.52,-187.072 3920.94,-179.667 3922.25,-190.181 3928.52,-187.072\"/>\n</g>\n<!-- 182 -->\n<g id=\"node183\" class=\"node\"><title>182</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4056,-179.5C4056,-179.5 3983,-179.5 3983,-179.5 3977,-179.5 3971,-173.5 3971,-167.5 3971,-167.5 3971,-123.5 3971,-123.5 3971,-117.5 3977,-111.5 3983,-111.5 3983,-111.5 4056,-111.5 4056,-111.5 4062,-111.5 4068,-117.5 4068,-123.5 4068,-123.5 4068,-167.5 4068,-167.5 4068,-173.5 4062,-179.5 4056,-179.5\"/>\n<text text-anchor=\"start\" x=\"3990.5\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"3980\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3979\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3990.5\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 180->182 -->\n<g id=\"edge182\" class=\"edge\"><title>180->182</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3982.28,-222.907C3987.65,-211.873 3993.49,-199.898 3998.91,-188.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4002.11,-190.19 4003.34,-179.667 3995.82,-187.124 4002.11,-190.19\"/>\n</g>\n<!-- 185 -->\n<g id=\"node186\" class=\"node\"><title>185</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4288,-417.5C4288,-417.5 4207,-417.5 4207,-417.5 4201,-417.5 4195,-411.5 4195,-405.5 4195,-405.5 4195,-361.5 4195,-361.5 4195,-355.5 4201,-349.5 4207,-349.5 4207,-349.5 4288,-349.5 4288,-349.5 4294,-349.5 4300,-355.5 4300,-361.5 4300,-361.5 4300,-405.5 4300,-405.5 4300,-411.5 4294,-417.5 4288,-417.5\"/>\n<text text-anchor=\"start\" x=\"4218.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4204\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"4203\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [17, 0]</text>\n<text text-anchor=\"start\" x=\"4218.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 184->185 -->\n<g id=\"edge185\" class=\"edge\"><title>184->185</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4256.64,-460.907C4255.36,-450.204 4253.98,-438.615 4252.68,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4256.13,-427.18 4251.47,-417.667 4249.18,-428.012 4256.13,-427.18\"/>\n</g>\n<!-- 186 -->\n<g id=\"node187\" class=\"node\"><title>186</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4403,-417.5C4403,-417.5 4330,-417.5 4330,-417.5 4324,-417.5 4318,-411.5 4318,-405.5 4318,-405.5 4318,-361.5 4318,-361.5 4318,-355.5 4324,-349.5 4330,-349.5 4330,-349.5 4403,-349.5 4403,-349.5 4409,-349.5 4415,-355.5 4415,-361.5 4415,-361.5 4415,-405.5 4415,-405.5 4415,-411.5 4409,-417.5 4403,-417.5\"/>\n<text text-anchor=\"start\" x=\"4337.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4327\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4326\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4337.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 184->186 -->\n<g id=\"edge186\" class=\"edge\"><title>184->186</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4297.93,-460.907C4308.33,-449.321 4319.66,-436.698 4330.05,-425.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4332.66,-427.447 4336.73,-417.667 4327.45,-422.772 4332.66,-427.447\"/>\n</g>\n<!-- 188 -->\n<g id=\"node189\" class=\"node\"><title>188</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M4561,-544C4561,-544 4388,-544 4388,-544 4382,-544 4376,-538 4376,-532 4376,-532 4376,-473 4376,-473 4376,-467 4382,-461 4388,-461 4388,-461 4561,-461 4561,-461 4567,-461 4573,-467 4573,-473 4573,-473 4573,-532 4573,-532 4573,-538 4567,-544 4561,-544\"/>\n<text text-anchor=\"start\" x=\"4384\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.529</text>\n<text text-anchor=\"start\" x=\"4437\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"4435\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4434\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"4445.5\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 187->188 -->\n<g id=\"edge188\" class=\"edge\"><title>187->188</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4431.4,-579.907C4436.31,-571.195 4441.56,-561.897 4446.64,-552.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4449.78,-554.45 4451.64,-544.021 4443.68,-551.011 4449.78,-554.45\"/>\n</g>\n<!-- 191 -->\n<g id=\"node192\" class=\"node\"><title>191</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4684,-536.5C4684,-536.5 4603,-536.5 4603,-536.5 4597,-536.5 4591,-530.5 4591,-524.5 4591,-524.5 4591,-480.5 4591,-480.5 4591,-474.5 4597,-468.5 4603,-468.5 4603,-468.5 4684,-468.5 4684,-468.5 4690,-468.5 4696,-474.5 4696,-480.5 4696,-480.5 4696,-524.5 4696,-524.5 4696,-530.5 4690,-536.5 4684,-536.5\"/>\n<text text-anchor=\"start\" x=\"4614.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4600\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 59</text>\n<text text-anchor=\"start\" x=\"4599\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [59, 0]</text>\n<text text-anchor=\"start\" x=\"4614.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 187->191 -->\n<g id=\"edge191\" class=\"edge\"><title>187->191</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4474,-583.977C4476.86,-582.6 4479.7,-581.267 4482.5,-580 4525.16,-560.706 4539.63,-564.94 4581.5,-544 4583.04,-543.229 4584.59,-542.428 4586.15,-541.602\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4588.02,-544.563 4595.05,-536.632 4584.61,-538.451 4588.02,-544.563\"/>\n</g>\n<!-- 189 -->\n<g id=\"node190\" class=\"node\"><title>189</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4518,-417.5C4518,-417.5 4445,-417.5 4445,-417.5 4439,-417.5 4433,-411.5 4433,-405.5 4433,-405.5 4433,-361.5 4433,-361.5 4433,-355.5 4439,-349.5 4445,-349.5 4445,-349.5 4518,-349.5 4518,-349.5 4524,-349.5 4530,-355.5 4530,-361.5 4530,-361.5 4530,-405.5 4530,-405.5 4530,-411.5 4524,-417.5 4518,-417.5\"/>\n<text text-anchor=\"start\" x=\"4452.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4442\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4441\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"4452.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 188->189 -->\n<g id=\"edge189\" class=\"edge\"><title>188->189</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4476.93,-460.907C4477.57,-450.204 4478.26,-438.615 4478.91,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4482.41,-427.858 4479.52,-417.667 4475.42,-427.44 4482.41,-427.858\"/>\n</g>\n<!-- 190 -->\n<g id=\"node191\" class=\"node\"><title>190</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4633,-417.5C4633,-417.5 4560,-417.5 4560,-417.5 4554,-417.5 4548,-411.5 4548,-405.5 4548,-405.5 4548,-361.5 4548,-361.5 4548,-355.5 4554,-349.5 4560,-349.5 4560,-349.5 4633,-349.5 4633,-349.5 4639,-349.5 4645,-355.5 4645,-361.5 4645,-361.5 4645,-405.5 4645,-405.5 4645,-411.5 4639,-417.5 4633,-417.5\"/>\n<text text-anchor=\"start\" x=\"4567.5\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4557\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4556\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"4567.5\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 188->190 -->\n<g id=\"edge190\" class=\"edge\"><title>188->190</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4516.83,-460.907C4529.02,-449.211 4542.32,-436.457 4554.5,-424.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4557.12,-427.115 4561.92,-417.667 4552.28,-422.062 4557.12,-427.115\"/>\n</g>\n<!-- 193 -->\n<g id=\"node194\" class=\"node\"><title>193</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4577,-655.5C4577,-655.5 4504,-655.5 4504,-655.5 4498,-655.5 4492,-649.5 4492,-643.5 4492,-643.5 4492,-599.5 4492,-599.5 4492,-593.5 4498,-587.5 4504,-587.5 4504,-587.5 4577,-587.5 4577,-587.5 4583,-587.5 4589,-593.5 4589,-599.5 4589,-599.5 4589,-643.5 4589,-643.5 4589,-649.5 4583,-655.5 4577,-655.5\"/>\n<text text-anchor=\"start\" x=\"4511.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4501\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4500\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4511.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 192->193 -->\n<g id=\"edge193\" class=\"edge\"><title>192->193</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4539.85,-698.907C4539.94,-688.204 4540.04,-676.615 4540.13,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4543.63,-665.697 4540.22,-655.667 4536.63,-665.637 4543.63,-665.697\"/>\n</g>\n<!-- 194 -->\n<g id=\"node195\" class=\"node\"><title>194</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4700,-655.5C4700,-655.5 4619,-655.5 4619,-655.5 4613,-655.5 4607,-649.5 4607,-643.5 4607,-643.5 4607,-599.5 4607,-599.5 4607,-593.5 4613,-587.5 4619,-587.5 4619,-587.5 4700,-587.5 4700,-587.5 4706,-587.5 4712,-593.5 4712,-599.5 4712,-599.5 4712,-643.5 4712,-643.5 4712,-649.5 4706,-655.5 4700,-655.5\"/>\n<text text-anchor=\"start\" x=\"4630.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4616\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\n<text text-anchor=\"start\" x=\"4615\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 0]</text>\n<text text-anchor=\"start\" x=\"4630.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 192->194 -->\n<g id=\"edge194\" class=\"edge\"><title>192->194</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4581.13,-698.907C4593.13,-687.211 4606.21,-674.457 4618.19,-662.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4620.77,-665.154 4625.48,-655.667 4615.88,-660.142 4620.77,-665.154\"/>\n</g>\n<!-- 196 -->\n<g id=\"node197\" class=\"node\"><title>196</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4725,-774.5C4725,-774.5 4652,-774.5 4652,-774.5 4646,-774.5 4640,-768.5 4640,-762.5 4640,-762.5 4640,-718.5 4640,-718.5 4640,-712.5 4646,-706.5 4652,-706.5 4652,-706.5 4725,-706.5 4725,-706.5 4731,-706.5 4737,-712.5 4737,-718.5 4737,-718.5 4737,-762.5 4737,-762.5 4737,-768.5 4731,-774.5 4725,-774.5\"/>\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4649\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"4648\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 195->196 -->\n<g id=\"edge196\" class=\"edge\"><title>195->196</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4560.56,-822.376C4583.15,-810.065 4608.16,-795.892 4630.5,-782 4631.44,-781.416 4632.38,-780.824 4633.33,-780.223\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4635.45,-783.024 4641.94,-774.65 4631.64,-777.148 4635.45,-783.024\"/>\n</g>\n<!-- 197 -->\n<g id=\"node198\" class=\"node\"><title>197</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4840,-774.5C4840,-774.5 4767,-774.5 4767,-774.5 4761,-774.5 4755,-768.5 4755,-762.5 4755,-762.5 4755,-718.5 4755,-718.5 4755,-712.5 4761,-706.5 4767,-706.5 4767,-706.5 4840,-706.5 4840,-706.5 4846,-706.5 4852,-712.5 4852,-718.5 4852,-718.5 4852,-762.5 4852,-762.5 4852,-768.5 4846,-774.5 4840,-774.5\"/>\n<text text-anchor=\"start\" x=\"4774.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4764\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4763\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4774.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 195->197 -->\n<g id=\"edge197\" class=\"edge\"><title>195->197</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4560.81,-821.3C4563.72,-820.125 4566.62,-819.019 4569.5,-818 4644.76,-791.348 4672.14,-813.508 4745.5,-782 4747.32,-781.218 4749.14,-780.375 4750.95,-779.48\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4752.8,-782.46 4759.94,-774.628 4749.48,-776.301 4752.8,-782.46\"/>\n</g>\n<!-- 199 -->\n<g id=\"node200\" class=\"node\"><title>199</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4664,-893.5C4664,-893.5 4591,-893.5 4591,-893.5 4585,-893.5 4579,-887.5 4579,-881.5 4579,-881.5 4579,-837.5 4579,-837.5 4579,-831.5 4585,-825.5 4591,-825.5 4591,-825.5 4664,-825.5 4664,-825.5 4670,-825.5 4676,-831.5 4676,-837.5 4676,-837.5 4676,-881.5 4676,-881.5 4676,-887.5 4670,-893.5 4664,-893.5\"/>\n<text text-anchor=\"start\" x=\"4598.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4588\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4587\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4598.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 198->199 -->\n<g id=\"edge199\" class=\"edge\"><title>198->199</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4592.89,-936.907C4597.84,-925.983 4603.2,-914.137 4608.2,-903.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4611.54,-904.22 4612.48,-893.667 4605.16,-901.332 4611.54,-904.22\"/>\n</g>\n<!-- 200 -->\n<g id=\"node201\" class=\"node\"><title>200</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4779,-893.5C4779,-893.5 4706,-893.5 4706,-893.5 4700,-893.5 4694,-887.5 4694,-881.5 4694,-881.5 4694,-837.5 4694,-837.5 4694,-831.5 4700,-825.5 4706,-825.5 4706,-825.5 4779,-825.5 4779,-825.5 4785,-825.5 4791,-831.5 4791,-837.5 4791,-837.5 4791,-881.5 4791,-881.5 4791,-887.5 4785,-893.5 4779,-893.5\"/>\n<text text-anchor=\"start\" x=\"4713.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4703\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4702\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4713.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 198->200 -->\n<g id=\"edge200\" class=\"edge\"><title>198->200</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4633.03,-936.826C4649.67,-925.256 4667.8,-912.637 4684.5,-901 4685.25,-900.478 4686,-899.952 4686.76,-899.422\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4688.83,-902.251 4695.03,-893.661 4684.82,-896.51 4688.83,-902.251\"/>\n</g>\n<!-- 202 -->\n<g id=\"node203\" class=\"node\"><title>202</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4776,-1012.5C4776,-1012.5 4703,-1012.5 4703,-1012.5 4697,-1012.5 4691,-1006.5 4691,-1000.5 4691,-1000.5 4691,-956.5 4691,-956.5 4691,-950.5 4697,-944.5 4703,-944.5 4703,-944.5 4776,-944.5 4776,-944.5 4782,-944.5 4788,-950.5 4788,-956.5 4788,-956.5 4788,-1000.5 4788,-1000.5 4788,-1006.5 4782,-1012.5 4776,-1012.5\"/>\n<text text-anchor=\"start\" x=\"4710.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4700\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4699\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4710.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 201->202 -->\n<g id=\"edge202\" class=\"edge\"><title>201->202</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4751.91,-1055.91C4750.17,-1045.2 4748.29,-1033.62 4746.53,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4749.94,-1021.98 4744.89,-1012.67 4743.03,-1023.1 4749.94,-1021.98\"/>\n</g>\n<!-- 203 -->\n<g id=\"node204\" class=\"node\"><title>203</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4891,-1012.5C4891,-1012.5 4818,-1012.5 4818,-1012.5 4812,-1012.5 4806,-1006.5 4806,-1000.5 4806,-1000.5 4806,-956.5 4806,-956.5 4806,-950.5 4812,-944.5 4818,-944.5 4818,-944.5 4891,-944.5 4891,-944.5 4897,-944.5 4903,-950.5 4903,-956.5 4903,-956.5 4903,-1000.5 4903,-1000.5 4903,-1006.5 4897,-1012.5 4891,-1012.5\"/>\n<text text-anchor=\"start\" x=\"4825.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4815\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4814\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"4825.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 201->203 -->\n<g id=\"edge203\" class=\"edge\"><title>201->203</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4791.81,-1055.91C4801.22,-1044.43 4811.47,-1031.94 4820.91,-1020.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4823.65,-1022.62 4827.29,-1012.67 4818.24,-1018.18 4823.65,-1022.62\"/>\n</g>\n<!-- 205 -->\n<g id=\"node206\" class=\"node\"><title>205</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4977,-1131.5C4977,-1131.5 4904,-1131.5 4904,-1131.5 4898,-1131.5 4892,-1125.5 4892,-1119.5 4892,-1119.5 4892,-1075.5 4892,-1075.5 4892,-1069.5 4898,-1063.5 4904,-1063.5 4904,-1063.5 4977,-1063.5 4977,-1063.5 4983,-1063.5 4989,-1069.5 4989,-1075.5 4989,-1075.5 4989,-1119.5 4989,-1119.5 4989,-1125.5 4983,-1131.5 4977,-1131.5\"/>\n<text text-anchor=\"start\" x=\"4911.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4901\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"4900\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"4911.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 204->205 -->\n<g id=\"edge205\" class=\"edge\"><title>204->205</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4940.5,-1174.91C4940.5,-1164.2 4940.5,-1152.62 4940.5,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4944,-1141.67 4940.5,-1131.67 4937,-1141.67 4944,-1141.67\"/>\n</g>\n<!-- 206 -->\n<g id=\"node207\" class=\"node\"><title>206</title>\n<path fill=\"#e6833d\" stroke=\"black\" d=\"M5126,-1139C5126,-1139 5019,-1139 5019,-1139 5013,-1139 5007,-1133 5007,-1127 5007,-1127 5007,-1068 5007,-1068 5007,-1062 5013,-1056 5019,-1056 5019,-1056 5126,-1056 5126,-1056 5132,-1056 5138,-1062 5138,-1068 5138,-1068 5138,-1127 5138,-1127 5138,-1133 5132,-1139 5126,-1139\"/>\n<text text-anchor=\"start\" x=\"5015\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 0.004</text>\n<text text-anchor=\"start\" x=\"5035\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.037</text>\n<text text-anchor=\"start\" x=\"5029\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 53</text>\n<text text-anchor=\"start\" x=\"5028\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [52, 1]</text>\n<text text-anchor=\"start\" x=\"5043.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 204->206 -->\n<g id=\"edge206\" class=\"edge\"><title>204->206</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4986.3,-1174.91C4996.84,-1165.56 5008.15,-1155.54 5018.99,-1145.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5021.62,-1148.27 5026.78,-1139.02 5016.98,-1143.03 5021.62,-1148.27\"/>\n</g>\n<!-- 207 -->\n<g id=\"node208\" class=\"node\"><title>207</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5014,-1012.5C5014,-1012.5 4933,-1012.5 4933,-1012.5 4927,-1012.5 4921,-1006.5 4921,-1000.5 4921,-1000.5 4921,-956.5 4921,-956.5 4921,-950.5 4927,-944.5 4933,-944.5 4933,-944.5 5014,-944.5 5014,-944.5 5020,-944.5 5026,-950.5 5026,-956.5 5026,-956.5 5026,-1000.5 5026,-1000.5 5026,-1006.5 5020,-1012.5 5014,-1012.5\"/>\n<text text-anchor=\"start\" x=\"4944.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"4930\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 52</text>\n<text text-anchor=\"start\" x=\"4929\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [52, 0]</text>\n<text text-anchor=\"start\" x=\"4944.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 206->207 -->\n<g id=\"edge207\" class=\"edge\"><title>206->207</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5038.15,-1055.91C5028.44,-1044.43 5017.87,-1031.94 5008.14,-1020.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5010.7,-1018.04 5001.56,-1012.67 5005.35,-1022.56 5010.7,-1018.04\"/>\n</g>\n<!-- 208 -->\n<g id=\"node209\" class=\"node\"><title>208</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5129,-1012.5C5129,-1012.5 5056,-1012.5 5056,-1012.5 5050,-1012.5 5044,-1006.5 5044,-1000.5 5044,-1000.5 5044,-956.5 5044,-956.5 5044,-950.5 5050,-944.5 5056,-944.5 5056,-944.5 5129,-944.5 5129,-944.5 5135,-944.5 5141,-950.5 5141,-956.5 5141,-956.5 5141,-1000.5 5141,-1000.5 5141,-1006.5 5135,-1012.5 5129,-1012.5\"/>\n<text text-anchor=\"start\" x=\"5063.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5053\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5052\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5063.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 206->208 -->\n<g id=\"edge208\" class=\"edge\"><title>206->208</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5079.44,-1055.91C5081.27,-1045.2 5083.25,-1033.62 5085.1,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5088.6,-1023.11 5086.83,-1012.67 5081.7,-1021.93 5088.6,-1023.11\"/>\n</g>\n<!-- 211 -->\n<g id=\"node212\" class=\"node\"><title>211</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M5746,-1496C5746,-1496 5537,-1496 5537,-1496 5531,-1496 5525,-1490 5525,-1484 5525,-1484 5525,-1425 5525,-1425 5525,-1419 5531,-1413 5537,-1413 5537,-1413 5746,-1413 5746,-1413 5752,-1413 5758,-1419 5758,-1425 5758,-1425 5758,-1484 5758,-1484 5758,-1490 5752,-1496 5746,-1496\"/>\n<text text-anchor=\"start\" x=\"5533\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.594</text>\n<text text-anchor=\"start\" x=\"5604\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.085</text>\n<text text-anchor=\"start\" x=\"5594\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 292</text>\n<text text-anchor=\"start\" x=\"5588.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [279, 13]</text>\n<text text-anchor=\"start\" x=\"5612.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 210->211 -->\n<g id=\"edge211\" class=\"edge\"><title>210->211</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5663.05,-1531.91C5660.67,-1523.47 5658.13,-1514.48 5655.67,-1505.74\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5659.01,-1504.7 5652.93,-1496.02 5652.28,-1506.6 5659.01,-1504.7\"/>\n</g>\n<!-- 234 -->\n<g id=\"node235\" class=\"node\"><title>234</title>\n<path fill=\"#95caf1\" stroke=\"black\" d=\"M5899,-1496C5899,-1496 5788,-1496 5788,-1496 5782,-1496 5776,-1490 5776,-1484 5776,-1484 5776,-1425 5776,-1425 5776,-1419 5782,-1413 5788,-1413 5788,-1413 5899,-1413 5899,-1413 5905,-1413 5911,-1419 5911,-1425 5911,-1425 5911,-1484 5911,-1484 5911,-1490 5905,-1496 5899,-1496\"/>\n<text text-anchor=\"start\" x=\"5784\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.039</text>\n<text text-anchor=\"start\" x=\"5806\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.432</text>\n<text text-anchor=\"start\" x=\"5796\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 310</text>\n<text text-anchor=\"start\" x=\"5790.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [98, 212]</text>\n<text text-anchor=\"start\" x=\"5814.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 210->234 -->\n<g id=\"edge234\" class=\"edge\"><title>210->234</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5733.13,-1531.91C5747.16,-1522.2 5762.24,-1511.76 5776.61,-1501.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5778.74,-1504.59 5784.97,-1496.02 5774.76,-1498.84 5778.74,-1504.59\"/>\n</g>\n<!-- 212 -->\n<g id=\"node213\" class=\"node\"><title>212</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M5526.5,-1377C5526.5,-1377 5352.5,-1377 5352.5,-1377 5346.5,-1377 5340.5,-1371 5340.5,-1365 5340.5,-1365 5340.5,-1306 5340.5,-1306 5340.5,-1300 5346.5,-1294 5352.5,-1294 5352.5,-1294 5526.5,-1294 5526.5,-1294 5532.5,-1294 5538.5,-1300 5538.5,-1306 5538.5,-1306 5538.5,-1365 5538.5,-1365 5538.5,-1371 5532.5,-1377 5526.5,-1377\"/>\n<text text-anchor=\"start\" x=\"5348.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.024</text>\n<text text-anchor=\"start\" x=\"5402\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.061</text>\n<text text-anchor=\"start\" x=\"5392\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 286</text>\n<text text-anchor=\"start\" x=\"5391\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [277, 9]</text>\n<text text-anchor=\"start\" x=\"5410.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 211->212 -->\n<g id=\"edge212\" class=\"edge\"><title>211->212</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5571.42,-1412.91C5554.34,-1403.02 5535.96,-1392.37 5518.49,-1382.25\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5519.87,-1379 5509.46,-1377.02 5516.36,-1385.06 5519.87,-1379\"/>\n</g>\n<!-- 231 -->\n<g id=\"node232\" class=\"node\"><title>231</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M5726,-1377C5726,-1377 5569,-1377 5569,-1377 5563,-1377 5557,-1371 5557,-1365 5557,-1365 5557,-1306 5557,-1306 5557,-1300 5563,-1294 5569,-1294 5569,-1294 5726,-1294 5726,-1294 5732,-1294 5738,-1300 5738,-1306 5738,-1306 5738,-1365 5738,-1365 5738,-1371 5732,-1377 5726,-1377\"/>\n<text text-anchor=\"start\" x=\"5565\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.8</text>\n<text text-anchor=\"start\" x=\"5610\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.444</text>\n<text text-anchor=\"start\" x=\"5608\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"5607\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\n<text text-anchor=\"start\" x=\"5618.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 211->231 -->\n<g id=\"edge231\" class=\"edge\"><title>211->231</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5643.58,-1412.91C5644.01,-1404.56 5644.47,-1395.67 5644.91,-1387.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5648.41,-1387.19 5645.42,-1377.02 5641.41,-1386.83 5648.41,-1387.19\"/>\n</g>\n<!-- 213 -->\n<g id=\"node214\" class=\"node\"><title>213</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M5365,-1258C5365,-1258 5192,-1258 5192,-1258 5186,-1258 5180,-1252 5180,-1246 5180,-1246 5180,-1187 5180,-1187 5180,-1181 5186,-1175 5192,-1175 5192,-1175 5365,-1175 5365,-1175 5371,-1175 5377,-1181 5377,-1187 5377,-1187 5377,-1246 5377,-1246 5377,-1252 5371,-1258 5365,-1258\"/>\n<text text-anchor=\"start\" x=\"5188\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.638</text>\n<text text-anchor=\"start\" x=\"5241\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.055</text>\n<text text-anchor=\"start\" x=\"5231\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 285</text>\n<text text-anchor=\"start\" x=\"5230\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [277, 8]</text>\n<text text-anchor=\"start\" x=\"5249.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 212->213 -->\n<g id=\"edge213\" class=\"edge\"><title>212->213</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5383.64,-1293.91C5370.4,-1284.29 5356.18,-1273.95 5342.61,-1264.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5344.41,-1261.07 5334.26,-1258.02 5340.29,-1266.73 5344.41,-1261.07\"/>\n</g>\n<!-- 230 -->\n<g id=\"node231\" class=\"node\"><title>230</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5480,-1250.5C5480,-1250.5 5407,-1250.5 5407,-1250.5 5401,-1250.5 5395,-1244.5 5395,-1238.5 5395,-1238.5 5395,-1194.5 5395,-1194.5 5395,-1188.5 5401,-1182.5 5407,-1182.5 5407,-1182.5 5480,-1182.5 5480,-1182.5 5486,-1182.5 5492,-1188.5 5492,-1194.5 5492,-1194.5 5492,-1238.5 5492,-1238.5 5492,-1244.5 5486,-1250.5 5480,-1250.5\"/>\n<text text-anchor=\"start\" x=\"5414.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5404\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5403\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5414.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 212->230 -->\n<g id=\"edge230\" class=\"edge\"><title>212->230</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5440.89,-1293.91C5441.25,-1283.2 5441.65,-1271.62 5442.02,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5445.52,-1260.78 5442.37,-1250.67 5438.53,-1260.54 5445.52,-1260.78\"/>\n</g>\n<!-- 214 -->\n<g id=\"node215\" class=\"node\"><title>214</title>\n<path fill=\"#e78c4a\" stroke=\"black\" d=\"M5316,-1139C5316,-1139 5213,-1139 5213,-1139 5207,-1139 5201,-1133 5201,-1127 5201,-1127 5201,-1068 5201,-1068 5201,-1062 5207,-1056 5213,-1056 5213,-1056 5316,-1056 5316,-1056 5322,-1056 5328,-1062 5328,-1068 5328,-1068 5328,-1127 5328,-1127 5328,-1133 5322,-1139 5316,-1139\"/>\n<text text-anchor=\"start\" x=\"5209\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"5227\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.143</text>\n<text text-anchor=\"start\" x=\"5217\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 103</text>\n<text text-anchor=\"start\" x=\"5220\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [95, 8]</text>\n<text text-anchor=\"start\" x=\"5235.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 213->214 -->\n<g id=\"edge214\" class=\"edge\"><title>213->214</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5273.64,-1174.91C5272.64,-1166.56 5271.58,-1157.67 5270.55,-1149.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5274.01,-1148.53 5269.35,-1139.02 5267.06,-1149.37 5274.01,-1148.53\"/>\n</g>\n<!-- 229 -->\n<g id=\"node230\" class=\"node\"><title>229</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5447,-1131.5C5447,-1131.5 5358,-1131.5 5358,-1131.5 5352,-1131.5 5346,-1125.5 5346,-1119.5 5346,-1119.5 5346,-1075.5 5346,-1075.5 5346,-1069.5 5352,-1063.5 5358,-1063.5 5358,-1063.5 5447,-1063.5 5447,-1063.5 5453,-1063.5 5459,-1069.5 5459,-1075.5 5459,-1075.5 5459,-1119.5 5459,-1119.5 5459,-1125.5 5453,-1131.5 5447,-1131.5\"/>\n<text text-anchor=\"start\" x=\"5373.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5355\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 182</text>\n<text text-anchor=\"start\" x=\"5354\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [182, 0]</text>\n<text text-anchor=\"start\" x=\"5373.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 213->229 -->\n<g id=\"edge229\" class=\"edge\"><title>213->229</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5321.52,-1174.91C5333.92,-1163.21 5347.43,-1150.46 5359.81,-1138.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5362.48,-1141.08 5367.35,-1131.67 5357.67,-1135.98 5362.48,-1141.08\"/>\n</g>\n<!-- 215 -->\n<g id=\"node216\" class=\"node\"><title>215</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M5344,-1020C5344,-1020 5171,-1020 5171,-1020 5165,-1020 5159,-1014 5159,-1008 5159,-1008 5159,-949 5159,-949 5159,-943 5165,-937 5171,-937 5171,-937 5344,-937 5344,-937 5350,-937 5356,-943 5356,-949 5356,-949 5356,-1008 5356,-1008 5356,-1014 5350,-1020 5344,-1020\"/>\n<text text-anchor=\"start\" x=\"5167\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.724</text>\n<text text-anchor=\"start\" x=\"5220\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.022</text>\n<text text-anchor=\"start\" x=\"5214\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 89</text>\n<text text-anchor=\"start\" x=\"5213\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [88, 1]</text>\n<text text-anchor=\"start\" x=\"5228.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 214->215 -->\n<g id=\"edge215\" class=\"edge\"><title>214->215</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5262.07,-1055.91C5261.57,-1047.56 5261.04,-1038.67 5260.52,-1030.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5264.02,-1029.79 5259.92,-1020.02 5257.03,-1030.21 5264.02,-1029.79\"/>\n</g>\n<!-- 220 -->\n<g id=\"node221\" class=\"node\"><title>220</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M5532.5,-1020C5532.5,-1020 5386.5,-1020 5386.5,-1020 5380.5,-1020 5374.5,-1014 5374.5,-1008 5374.5,-1008 5374.5,-949 5374.5,-949 5374.5,-943 5380.5,-937 5386.5,-937 5386.5,-937 5532.5,-937 5532.5,-937 5538.5,-937 5544.5,-943 5544.5,-949 5544.5,-949 5544.5,-1008 5544.5,-1008 5544.5,-1014 5538.5,-1020 5532.5,-1020\"/>\n<text text-anchor=\"start\" x=\"5382.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ -1.809</text>\n<text text-anchor=\"start\" x=\"5430.5\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"5416\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"5419\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 7]</text>\n<text text-anchor=\"start\" x=\"5430.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 214->220 -->\n<g id=\"edge220\" class=\"edge\"><title>214->220</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5328.08,-1058.35C5345.65,-1047.81 5364.91,-1036.25 5383.13,-1025.32\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5385.2,-1028.16 5391.98,-1020.01 5381.6,-1022.16 5385.2,-1028.16\"/>\n</g>\n<!-- 216 -->\n<g id=\"node217\" class=\"node\"><title>216</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5161,-893.5C5161,-893.5 5080,-893.5 5080,-893.5 5074,-893.5 5068,-887.5 5068,-881.5 5068,-881.5 5068,-837.5 5068,-837.5 5068,-831.5 5074,-825.5 5080,-825.5 5080,-825.5 5161,-825.5 5161,-825.5 5167,-825.5 5173,-831.5 5173,-837.5 5173,-837.5 5173,-881.5 5173,-881.5 5173,-887.5 5167,-893.5 5161,-893.5\"/>\n<text text-anchor=\"start\" x=\"5091.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5077\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 87</text>\n<text text-anchor=\"start\" x=\"5076\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [87, 0]</text>\n<text text-anchor=\"start\" x=\"5091.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 215->216 -->\n<g id=\"edge216\" class=\"edge\"><title>215->216</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5209.97,-936.907C5196.14,-925.101 5181.06,-912.217 5167.28,-900.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5169.21,-897.5 5159.34,-893.667 5164.67,-902.823 5169.21,-897.5\"/>\n</g>\n<!-- 217 -->\n<g id=\"node218\" class=\"node\"><title>217</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M5310,-901C5310,-901 5203,-901 5203,-901 5197,-901 5191,-895 5191,-889 5191,-889 5191,-830 5191,-830 5191,-824 5197,-818 5203,-818 5203,-818 5310,-818 5310,-818 5316,-818 5322,-824 5322,-830 5322,-830 5322,-889 5322,-889 5322,-895 5316,-901 5310,-901\"/>\n<text text-anchor=\"start\" x=\"5199\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.215</text>\n<text text-anchor=\"start\" x=\"5227.5\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"5217\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"5216\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"5227.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 215->217 -->\n<g id=\"edge217\" class=\"edge\"><title>215->217</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5257.15,-936.907C5257.08,-928.649 5257.01,-919.864 5256.93,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5260.43,-910.99 5256.85,-901.021 5253.43,-911.05 5260.43,-910.99\"/>\n</g>\n<!-- 218 -->\n<g id=\"node219\" class=\"node\"><title>218</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5175,-774.5C5175,-774.5 5102,-774.5 5102,-774.5 5096,-774.5 5090,-768.5 5090,-762.5 5090,-762.5 5090,-718.5 5090,-718.5 5090,-712.5 5096,-706.5 5102,-706.5 5102,-706.5 5175,-706.5 5175,-706.5 5181,-706.5 5187,-712.5 5187,-718.5 5187,-718.5 5187,-762.5 5187,-762.5 5187,-768.5 5181,-774.5 5175,-774.5\"/>\n<text text-anchor=\"start\" x=\"5109.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5099\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5098\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"5109.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 217->218 -->\n<g id=\"edge218\" class=\"edge\"><title>217->218</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5215.56,-817.907C5203.76,-806.211 5190.9,-793.457 5179.12,-781.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5181.52,-779.222 5171.95,-774.667 5176.59,-784.193 5181.52,-779.222\"/>\n</g>\n<!-- 219 -->\n<g id=\"node220\" class=\"node\"><title>219</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5290,-774.5C5290,-774.5 5217,-774.5 5217,-774.5 5211,-774.5 5205,-768.5 5205,-762.5 5205,-762.5 5205,-718.5 5205,-718.5 5205,-712.5 5211,-706.5 5217,-706.5 5217,-706.5 5290,-706.5 5290,-706.5 5296,-706.5 5302,-712.5 5302,-718.5 5302,-718.5 5302,-762.5 5302,-762.5 5302,-768.5 5296,-774.5 5290,-774.5\"/>\n<text text-anchor=\"start\" x=\"5224.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5214\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5213\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5224.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 217->219 -->\n<g id=\"edge219\" class=\"edge\"><title>217->219</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5255.46,-817.907C5255.18,-807.204 5254.89,-795.615 5254.61,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5258.11,-784.574 5254.35,-774.667 5251.11,-784.753 5258.11,-784.574\"/>\n</g>\n<!-- 221 -->\n<g id=\"node222\" class=\"node\"><title>221</title>\n<path fill=\"#eca572\" stroke=\"black\" d=\"M5483,-901C5483,-901 5380,-901 5380,-901 5374,-901 5368,-895 5368,-889 5368,-889 5368,-830 5368,-830 5368,-824 5374,-818 5380,-818 5380,-818 5483,-818 5483,-818 5489,-818 5495,-824 5495,-830 5495,-830 5495,-889 5495,-889 5495,-895 5489,-901 5483,-901\"/>\n<text text-anchor=\"start\" x=\"5376\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"5394\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.346</text>\n<text text-anchor=\"start\" x=\"5392\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"5391\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 2]</text>\n<text text-anchor=\"start\" x=\"5402.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 220->221 -->\n<g id=\"edge221\" class=\"edge\"><title>220->221</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5449.79,-936.907C5447.79,-928.558 5445.66,-919.671 5443.59,-911.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5446.93,-909.932 5441.2,-901.021 5440.12,-911.561 5446.93,-909.932\"/>\n</g>\n<!-- 228 -->\n<g id=\"node229\" class=\"node\"><title>228</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5598,-893.5C5598,-893.5 5525,-893.5 5525,-893.5 5519,-893.5 5513,-887.5 5513,-881.5 5513,-881.5 5513,-837.5 5513,-837.5 5513,-831.5 5519,-825.5 5525,-825.5 5525,-825.5 5598,-825.5 5598,-825.5 5604,-825.5 5610,-831.5 5610,-837.5 5610,-837.5 5610,-881.5 5610,-881.5 5610,-887.5 5604,-893.5 5598,-893.5\"/>\n<text text-anchor=\"start\" x=\"5532.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5522\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"5521\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\n<text text-anchor=\"start\" x=\"5532.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 220->228 -->\n<g id=\"edge228\" class=\"edge\"><title>220->228</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5494.89,-936.907C5504.89,-925.432 5515.78,-912.938 5525.81,-901.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5528.65,-903.505 5532.59,-893.667 5523.38,-898.905 5528.65,-903.505\"/>\n</g>\n<!-- 222 -->\n<g id=\"node223\" class=\"node\"><title>222</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5405,-774.5C5405,-774.5 5332,-774.5 5332,-774.5 5326,-774.5 5320,-768.5 5320,-762.5 5320,-762.5 5320,-718.5 5320,-718.5 5320,-712.5 5326,-706.5 5332,-706.5 5332,-706.5 5405,-706.5 5405,-706.5 5411,-706.5 5417,-712.5 5417,-718.5 5417,-718.5 5417,-762.5 5417,-762.5 5417,-768.5 5411,-774.5 5405,-774.5\"/>\n<text text-anchor=\"start\" x=\"5339.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5329\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5328\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5339.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 221->222 -->\n<g id=\"edge222\" class=\"edge\"><title>221->222</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5409.64,-817.907C5403.7,-806.873 5397.25,-794.898 5391.26,-783.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5394.18,-781.812 5386.36,-774.667 5388.02,-785.131 5394.18,-781.812\"/>\n</g>\n<!-- 223 -->\n<g id=\"node224\" class=\"node\"><title>223</title>\n<path fill=\"#e99355\" stroke=\"black\" d=\"M5669.5,-782C5669.5,-782 5447.5,-782 5447.5,-782 5441.5,-782 5435.5,-776 5435.5,-770 5435.5,-770 5435.5,-711 5435.5,-711 5435.5,-705 5441.5,-699 5447.5,-699 5447.5,-699 5669.5,-699 5669.5,-699 5675.5,-699 5681.5,-705 5681.5,-711 5681.5,-711 5681.5,-770 5681.5,-770 5681.5,-776 5675.5,-782 5669.5,-782\"/>\n<text text-anchor=\"start\" x=\"5443.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.933</text>\n<text text-anchor=\"start\" x=\"5521\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.219</text>\n<text text-anchor=\"start\" x=\"5519\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"5518\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 1]</text>\n<text text-anchor=\"start\" x=\"5529.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 221->223 -->\n<g id=\"edge223\" class=\"edge\"><title>221->223</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5475.56,-817.907C5485.71,-808.56 5496.59,-798.538 5507.02,-788.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5509.53,-791.371 5514.52,-782.021 5504.79,-786.222 5509.53,-791.371\"/>\n</g>\n<!-- 224 -->\n<g id=\"node225\" class=\"node\"><title>224</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5529,-655.5C5529,-655.5 5456,-655.5 5456,-655.5 5450,-655.5 5444,-649.5 5444,-643.5 5444,-643.5 5444,-599.5 5444,-599.5 5444,-593.5 5450,-587.5 5456,-587.5 5456,-587.5 5529,-587.5 5529,-587.5 5535,-587.5 5541,-593.5 5541,-599.5 5541,-599.5 5541,-643.5 5541,-643.5 5541,-649.5 5535,-655.5 5529,-655.5\"/>\n<text text-anchor=\"start\" x=\"5463.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5453\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"5452\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"5463.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 223->224 -->\n<g id=\"edge224\" class=\"edge\"><title>223->224</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5535.6,-698.907C5529.31,-687.763 5522.49,-675.658 5516.16,-664.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5519.17,-662.657 5511.21,-655.667 5513.07,-666.096 5519.17,-662.657\"/>\n</g>\n<!-- 225 -->\n<g id=\"node226\" class=\"node\"><title>225</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M5678,-663C5678,-663 5571,-663 5571,-663 5565,-663 5559,-657 5559,-651 5559,-651 5559,-592 5559,-592 5559,-586 5565,-580 5571,-580 5571,-580 5678,-580 5678,-580 5684,-580 5690,-586 5690,-592 5690,-592 5690,-651 5690,-651 5690,-657 5684,-663 5678,-663\"/>\n<text text-anchor=\"start\" x=\"5567\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 0.179</text>\n<text text-anchor=\"start\" x=\"5595.5\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.5</text>\n<text text-anchor=\"start\" x=\"5585\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"5584\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"5595.5\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 223->225 -->\n<g id=\"edge225\" class=\"edge\"><title>223->225</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5581.4,-698.907C5586.31,-690.195 5591.56,-680.897 5596.64,-671.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5599.78,-673.45 5601.64,-663.021 5593.68,-670.011 5599.78,-673.45\"/>\n</g>\n<!-- 226 -->\n<g id=\"node227\" class=\"node\"><title>226</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5603,-536.5C5603,-536.5 5530,-536.5 5530,-536.5 5524,-536.5 5518,-530.5 5518,-524.5 5518,-524.5 5518,-480.5 5518,-480.5 5518,-474.5 5524,-468.5 5530,-468.5 5530,-468.5 5603,-468.5 5603,-468.5 5609,-468.5 5615,-474.5 5615,-480.5 5615,-480.5 5615,-524.5 5615,-524.5 5615,-530.5 5609,-536.5 5603,-536.5\"/>\n<text text-anchor=\"start\" x=\"5537.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5527\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5526\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5537.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 225->226 -->\n<g id=\"edge226\" class=\"edge\"><title>225->226</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5604.38,-579.907C5598.91,-568.873 5592.97,-556.898 5587.46,-545.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5590.52,-544.072 5582.94,-536.667 5584.25,-547.181 5590.52,-544.072\"/>\n</g>\n<!-- 227 -->\n<g id=\"node228\" class=\"node\"><title>227</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5718,-536.5C5718,-536.5 5645,-536.5 5645,-536.5 5639,-536.5 5633,-530.5 5633,-524.5 5633,-524.5 5633,-480.5 5633,-480.5 5633,-474.5 5639,-468.5 5645,-468.5 5645,-468.5 5718,-468.5 5718,-468.5 5724,-468.5 5730,-474.5 5730,-480.5 5730,-480.5 5730,-524.5 5730,-524.5 5730,-530.5 5724,-536.5 5718,-536.5\"/>\n<text text-anchor=\"start\" x=\"5652.5\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5642\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5641\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"5652.5\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 225->227 -->\n<g id=\"edge227\" class=\"edge\"><title>225->227</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5644.28,-579.907C5649.65,-568.873 5655.49,-556.898 5660.91,-545.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5664.11,-547.19 5665.34,-536.667 5657.82,-544.124 5664.11,-547.19\"/>\n</g>\n<!-- 232 -->\n<g id=\"node233\" class=\"node\"><title>232</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5602,-1250.5C5602,-1250.5 5529,-1250.5 5529,-1250.5 5523,-1250.5 5517,-1244.5 5517,-1238.5 5517,-1238.5 5517,-1194.5 5517,-1194.5 5517,-1188.5 5523,-1182.5 5529,-1182.5 5529,-1182.5 5602,-1182.5 5602,-1182.5 5608,-1182.5 5614,-1188.5 5614,-1194.5 5614,-1194.5 5614,-1238.5 5614,-1238.5 5614,-1244.5 5608,-1250.5 5602,-1250.5\"/>\n<text text-anchor=\"start\" x=\"5536.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5526\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"5525\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"5536.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 231->232 -->\n<g id=\"edge232\" class=\"edge\"><title>231->232</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5619.05,-1293.91C5611.16,-1282.65 5602.59,-1270.42 5594.66,-1259.11\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5597.35,-1256.85 5588.75,-1250.67 5591.62,-1260.86 5597.35,-1256.85\"/>\n</g>\n<!-- 233 -->\n<g id=\"node234\" class=\"node\"><title>233</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5717,-1250.5C5717,-1250.5 5644,-1250.5 5644,-1250.5 5638,-1250.5 5632,-1244.5 5632,-1238.5 5632,-1238.5 5632,-1194.5 5632,-1194.5 5632,-1188.5 5638,-1182.5 5644,-1182.5 5644,-1182.5 5717,-1182.5 5717,-1182.5 5723,-1182.5 5729,-1188.5 5729,-1194.5 5729,-1194.5 5729,-1238.5 5729,-1238.5 5729,-1244.5 5723,-1250.5 5717,-1250.5\"/>\n<text text-anchor=\"start\" x=\"5651.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5641\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"5640\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"5651.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 231->233 -->\n<g id=\"edge233\" class=\"edge\"><title>231->233</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5658.95,-1293.91C5662,-1283.09 5665.3,-1271.38 5668.39,-1260.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5671.8,-1261.24 5671.15,-1250.67 5665.06,-1259.34 5671.8,-1261.24\"/>\n</g>\n<!-- 235 -->\n<g id=\"node236\" class=\"node\"><title>235</title>\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M5886,-1377C5886,-1377 5775,-1377 5775,-1377 5769,-1377 5763,-1371 5763,-1365 5763,-1365 5763,-1306 5763,-1306 5763,-1300 5769,-1294 5775,-1294 5775,-1294 5886,-1294 5886,-1294 5892,-1294 5898,-1300 5898,-1306 5898,-1306 5898,-1365 5898,-1365 5898,-1371 5892,-1377 5886,-1377\"/>\n<text text-anchor=\"start\" x=\"5771\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.009</text>\n<text text-anchor=\"start\" x=\"5793\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.217</text>\n<text text-anchor=\"start\" x=\"5783\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 242</text>\n<text text-anchor=\"start\" x=\"5777.5\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [30, 212]</text>\n<text text-anchor=\"start\" x=\"5801.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 234->235 -->\n<g id=\"edge235\" class=\"edge\"><title>234->235</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5838.99,-1412.91C5838.06,-1404.56 5837.07,-1395.67 5836.11,-1387.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5839.59,-1386.57 5835,-1377.02 5832.63,-1387.35 5839.59,-1386.57\"/>\n</g>\n<!-- 258 -->\n<g id=\"node259\" class=\"node\"><title>258</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6009,-1369.5C6009,-1369.5 5928,-1369.5 5928,-1369.5 5922,-1369.5 5916,-1363.5 5916,-1357.5 5916,-1357.5 5916,-1313.5 5916,-1313.5 5916,-1307.5 5922,-1301.5 5928,-1301.5 5928,-1301.5 6009,-1301.5 6009,-1301.5 6015,-1301.5 6021,-1307.5 6021,-1313.5 6021,-1313.5 6021,-1357.5 6021,-1357.5 6021,-1363.5 6015,-1369.5 6009,-1369.5\"/>\n<text text-anchor=\"start\" x=\"5939.5\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5925\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 68</text>\n<text text-anchor=\"start\" x=\"5924\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [68, 0]</text>\n<text text-anchor=\"start\" x=\"5939.5\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 234->258 -->\n<g id=\"edge258\" class=\"edge\"><title>234->258</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5886.87,-1412.91C5899.36,-1401.21 5912.99,-1388.46 5925.47,-1376.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5928.16,-1379.06 5933.07,-1369.67 5923.37,-1373.95 5928.16,-1379.06\"/>\n</g>\n<!-- 236 -->\n<g id=\"node237\" class=\"node\"><title>236</title>\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M5867.5,-1258C5867.5,-1258 5763.5,-1258 5763.5,-1258 5757.5,-1258 5751.5,-1252 5751.5,-1246 5751.5,-1246 5751.5,-1187 5751.5,-1187 5751.5,-1181 5757.5,-1175 5763.5,-1175 5763.5,-1175 5867.5,-1175 5867.5,-1175 5873.5,-1175 5879.5,-1181 5879.5,-1187 5879.5,-1187 5879.5,-1246 5879.5,-1246 5879.5,-1252 5873.5,-1258 5867.5,-1258\"/>\n<text text-anchor=\"start\" x=\"5759.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.196</text>\n<text text-anchor=\"start\" x=\"5778\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.104</text>\n<text text-anchor=\"start\" x=\"5768\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 218</text>\n<text text-anchor=\"start\" x=\"5762.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12, 206]</text>\n<text text-anchor=\"start\" x=\"5786.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 235->236 -->\n<g id=\"edge236\" class=\"edge\"><title>235->236</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5825.3,-1293.91C5824.23,-1285.56 5823.09,-1276.67 5821.98,-1268.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5825.44,-1267.49 5820.69,-1258.02 5818.5,-1268.38 5825.44,-1267.49\"/>\n</g>\n<!-- 255 -->\n<g id=\"node256\" class=\"node\"><title>255</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M6009,-1258C6009,-1258 5910,-1258 5910,-1258 5904,-1258 5898,-1252 5898,-1246 5898,-1246 5898,-1187 5898,-1187 5898,-1181 5904,-1175 5910,-1175 5910,-1175 6009,-1175 6009,-1175 6015,-1175 6021,-1181 6021,-1187 6021,-1187 6021,-1246 6021,-1246 6021,-1252 6015,-1258 6009,-1258\"/>\n<text text-anchor=\"start\" x=\"5906\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.111</text>\n<text text-anchor=\"start\" x=\"5922\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.375</text>\n<text text-anchor=\"start\" x=\"5916\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\n<text text-anchor=\"start\" x=\"5915\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [18, 6]</text>\n<text text-anchor=\"start\" x=\"5930.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 235->255 -->\n<g id=\"edge255\" class=\"edge\"><title>235->255</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5875.26,-1293.91C5885.56,-1284.56 5896.61,-1274.54 5907.21,-1264.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5909.77,-1267.33 5914.82,-1258.02 5905.06,-1262.15 5909.77,-1267.33\"/>\n</g>\n<!-- 237 -->\n<g id=\"node238\" class=\"node\"><title>237</title>\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M5763,-1139C5763,-1139 5660,-1139 5660,-1139 5654,-1139 5648,-1133 5648,-1127 5648,-1127 5648,-1068 5648,-1068 5648,-1062 5654,-1056 5660,-1056 5660,-1056 5763,-1056 5763,-1056 5769,-1056 5775,-1062 5775,-1068 5775,-1068 5775,-1127 5775,-1127 5775,-1133 5769,-1139 5763,-1139\"/>\n<text text-anchor=\"start\" x=\"5656\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"5674\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.064</text>\n<text text-anchor=\"start\" x=\"5664\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 213</text>\n<text text-anchor=\"start\" x=\"5663\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 206]</text>\n<text text-anchor=\"start\" x=\"5682.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 236->237 -->\n<g id=\"edge237\" class=\"edge\"><title>236->237</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5779.42,-1174.91C5771.35,-1165.83 5762.72,-1156.12 5754.41,-1146.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5756.78,-1144.17 5747.52,-1139.02 5751.55,-1148.82 5756.78,-1144.17\"/>\n</g>\n<!-- 254 -->\n<g id=\"node255\" class=\"node\"><title>254</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5878,-1131.5C5878,-1131.5 5805,-1131.5 5805,-1131.5 5799,-1131.5 5793,-1125.5 5793,-1119.5 5793,-1119.5 5793,-1075.5 5793,-1075.5 5793,-1069.5 5799,-1063.5 5805,-1063.5 5805,-1063.5 5878,-1063.5 5878,-1063.5 5884,-1063.5 5890,-1069.5 5890,-1075.5 5890,-1075.5 5890,-1119.5 5890,-1119.5 5890,-1125.5 5884,-1131.5 5878,-1131.5\"/>\n<text text-anchor=\"start\" x=\"5812.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5802\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"5801\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"5812.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 236->254 -->\n<g id=\"edge254\" class=\"edge\"><title>236->254</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5824.52,-1174.91C5826.92,-1164.09 5829.53,-1152.38 5831.96,-1141.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5835.38,-1142.19 5834.13,-1131.67 5828.54,-1140.67 5835.38,-1142.19\"/>\n</g>\n<!-- 238 -->\n<g id=\"node239\" class=\"node\"><title>238</title>\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M5837,-1020C5837,-1020 5664,-1020 5664,-1020 5658,-1020 5652,-1014 5652,-1008 5652,-1008 5652,-949 5652,-949 5652,-943 5658,-937 5664,-937 5664,-937 5837,-937 5837,-937 5843,-937 5849,-943 5849,-949 5849,-949 5849,-1008 5849,-1008 5849,-1014 5843,-1020 5837,-1020\"/>\n<text text-anchor=\"start\" x=\"5660\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -1.008</text>\n<text text-anchor=\"start\" x=\"5713\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.025</text>\n<text text-anchor=\"start\" x=\"5703\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 159</text>\n<text text-anchor=\"start\" x=\"5702\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 157]</text>\n<text text-anchor=\"start\" x=\"5721.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 237->238 -->\n<g id=\"edge238\" class=\"edge\"><title>237->238</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5725.03,-1055.91C5727.84,-1047.47 5730.84,-1038.48 5733.75,-1029.74\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5737.15,-1030.61 5736.99,-1020.02 5730.51,-1028.4 5737.15,-1030.61\"/>\n</g>\n<!-- 247 -->\n<g id=\"node248\" class=\"node\"><title>247</title>\n<path fill=\"#4da7e8\" stroke=\"black\" d=\"M6220,-1020C6220,-1020 6117,-1020 6117,-1020 6111,-1020 6105,-1014 6105,-1008 6105,-1008 6105,-949 6105,-949 6105,-943 6111,-937 6117,-937 6117,-937 6220,-937 6220,-937 6226,-937 6232,-943 6232,-949 6232,-949 6232,-1008 6232,-1008 6232,-1014 6226,-1020 6220,-1020\"/>\n<text text-anchor=\"start\" x=\"6113\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"6131\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.168</text>\n<text text-anchor=\"start\" x=\"6125\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 54</text>\n<text text-anchor=\"start\" x=\"6124\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 49]</text>\n<text text-anchor=\"start\" x=\"6139.5\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 237->247 -->\n<g id=\"edge247\" class=\"edge\"><title>237->247</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5775.39,-1059.24C5778.1,-1058.08 5780.81,-1057 5783.5,-1056 5887.79,-1017.42 6015.55,-996.945 6094.49,-987.165\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6095.31,-990.591 6104.82,-985.912 6094.47,-983.641 6095.31,-990.591\"/>\n</g>\n<!-- 239 -->\n<g id=\"node240\" class=\"node\"><title>239</title>\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M5837,-901C5837,-901 5664,-901 5664,-901 5658,-901 5652,-895 5652,-889 5652,-889 5652,-830 5652,-830 5652,-824 5658,-818 5664,-818 5664,-818 5837,-818 5837,-818 5843,-818 5849,-824 5849,-830 5849,-830 5849,-889 5849,-889 5849,-895 5843,-901 5837,-901\"/>\n<text text-anchor=\"start\" x=\"5660\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -1.017</text>\n<text text-anchor=\"start\" x=\"5713\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.375</text>\n<text text-anchor=\"start\" x=\"5711\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"5710\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\n<text text-anchor=\"start\" x=\"5721.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 238->239 -->\n<g id=\"edge239\" class=\"edge\"><title>238->239</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5750.5,-936.907C5750.5,-928.649 5750.5,-919.864 5750.5,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5754,-911.021 5750.5,-901.021 5747,-911.021 5754,-911.021\"/>\n</g>\n<!-- 242 -->\n<g id=\"node243\" class=\"node\"><title>242</title>\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M6090,-901C6090,-901 5881,-901 5881,-901 5875,-901 5869,-895 5869,-889 5869,-889 5869,-830 5869,-830 5869,-824 5875,-818 5881,-818 5881,-818 6090,-818 6090,-818 6096,-818 6102,-824 6102,-830 6102,-830 6102,-889 6102,-889 6102,-895 6096,-901 6090,-901\"/>\n<text text-anchor=\"start\" x=\"5877\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ -0.616</text>\n<text text-anchor=\"start\" x=\"5948\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.013</text>\n<text text-anchor=\"start\" x=\"5938\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 155</text>\n<text text-anchor=\"start\" x=\"5937\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 154]</text>\n<text text-anchor=\"start\" x=\"5956.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 238->242 -->\n<g id=\"edge242\" class=\"edge\"><title>238->242</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5832.03,-936.907C5852.36,-926.789 5874.27,-915.879 5895,-905.559\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5896.72,-908.611 5904.11,-901.021 5893.6,-902.345 5896.72,-908.611\"/>\n</g>\n<!-- 240 -->\n<g id=\"node241\" class=\"node\"><title>240</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5785,-774.5C5785,-774.5 5712,-774.5 5712,-774.5 5706,-774.5 5700,-768.5 5700,-762.5 5700,-762.5 5700,-718.5 5700,-718.5 5700,-712.5 5706,-706.5 5712,-706.5 5712,-706.5 5785,-706.5 5785,-706.5 5791,-706.5 5797,-712.5 5797,-718.5 5797,-718.5 5797,-762.5 5797,-762.5 5797,-768.5 5791,-774.5 5785,-774.5\"/>\n<text text-anchor=\"start\" x=\"5719.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5709\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"5708\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"5719.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 239->240 -->\n<g id=\"edge240\" class=\"edge\"><title>239->240</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5749.81,-817.907C5749.62,-807.204 5749.43,-795.615 5749.24,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5752.74,-784.606 5749.07,-774.667 5745.74,-784.725 5752.74,-784.606\"/>\n</g>\n<!-- 241 -->\n<g id=\"node242\" class=\"node\"><title>241</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5900,-774.5C5900,-774.5 5827,-774.5 5827,-774.5 5821,-774.5 5815,-768.5 5815,-762.5 5815,-762.5 5815,-718.5 5815,-718.5 5815,-712.5 5821,-706.5 5827,-706.5 5827,-706.5 5900,-706.5 5900,-706.5 5906,-706.5 5912,-712.5 5912,-718.5 5912,-718.5 5912,-762.5 5912,-762.5 5912,-768.5 5906,-774.5 5900,-774.5\"/>\n<text text-anchor=\"start\" x=\"5834.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5824\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5823\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"5834.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 239->241 -->\n<g id=\"edge241\" class=\"edge\"><title>239->241</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5789.7,-817.907C5800.89,-806.321 5813.09,-793.698 5824.28,-782.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5827.04,-784.291 5831.47,-774.667 5822,-779.428 5827.04,-784.291\"/>\n</g>\n<!-- 243 -->\n<g id=\"node244\" class=\"node\"><title>243</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6031,-774.5C6031,-774.5 5942,-774.5 5942,-774.5 5936,-774.5 5930,-768.5 5930,-762.5 5930,-762.5 5930,-718.5 5930,-718.5 5930,-712.5 5936,-706.5 5942,-706.5 5942,-706.5 6031,-706.5 6031,-706.5 6037,-706.5 6043,-712.5 6043,-718.5 6043,-718.5 6043,-762.5 6043,-762.5 6043,-768.5 6037,-774.5 6031,-774.5\"/>\n<text text-anchor=\"start\" x=\"5957.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5939\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 147</text>\n<text text-anchor=\"start\" x=\"5938\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 147]</text>\n<text text-anchor=\"start\" x=\"5957.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 242->243 -->\n<g id=\"edge243\" class=\"edge\"><title>242->243</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5985.85,-817.907C5985.94,-807.204 5986.04,-795.615 5986.13,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5989.63,-784.697 5986.22,-774.667 5982.63,-784.637 5989.63,-784.697\"/>\n</g>\n<!-- 244 -->\n<g id=\"node245\" class=\"node\"><title>244</title>\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M6246,-782C6246,-782 6073,-782 6073,-782 6067,-782 6061,-776 6061,-770 6061,-770 6061,-711 6061,-711 6061,-705 6067,-699 6073,-699 6073,-699 6246,-699 6246,-699 6252,-699 6258,-705 6258,-711 6258,-711 6258,-770 6258,-770 6258,-776 6252,-782 6246,-782\"/>\n<text text-anchor=\"start\" x=\"6069\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ -0.362</text>\n<text text-anchor=\"start\" x=\"6122\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.219</text>\n<text text-anchor=\"start\" x=\"6120\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"6119\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 7]</text>\n<text text-anchor=\"start\" x=\"6130.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 242->244 -->\n<g id=\"edge244\" class=\"edge\"><title>242->244</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6045.87,-817.907C6060.31,-808.197 6075.83,-797.758 6090.63,-787.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6092.89,-790.505 6099.24,-782.021 6088.99,-784.696 6092.89,-790.505\"/>\n</g>\n<!-- 245 -->\n<g id=\"node246\" class=\"node\"><title>245</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6094,-655.5C6094,-655.5 6021,-655.5 6021,-655.5 6015,-655.5 6009,-649.5 6009,-643.5 6009,-643.5 6009,-599.5 6009,-599.5 6009,-593.5 6015,-587.5 6021,-587.5 6021,-587.5 6094,-587.5 6094,-587.5 6100,-587.5 6106,-593.5 6106,-599.5 6106,-599.5 6106,-643.5 6106,-643.5 6106,-649.5 6100,-655.5 6094,-655.5\"/>\n<text text-anchor=\"start\" x=\"6028.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6018\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"6017\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\n<text text-anchor=\"start\" x=\"6028.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 244->245 -->\n<g id=\"edge245\" class=\"edge\"><title>244->245</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6124.11,-698.907C6114.11,-687.432 6103.22,-674.938 6093.19,-663.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6095.62,-660.905 6086.41,-655.667 6090.35,-665.505 6095.62,-660.905\"/>\n</g>\n<!-- 246 -->\n<g id=\"node247\" class=\"node\"><title>246</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6209,-655.5C6209,-655.5 6136,-655.5 6136,-655.5 6130,-655.5 6124,-649.5 6124,-643.5 6124,-643.5 6124,-599.5 6124,-599.5 6124,-593.5 6130,-587.5 6136,-587.5 6136,-587.5 6209,-587.5 6209,-587.5 6215,-587.5 6221,-593.5 6221,-599.5 6221,-599.5 6221,-643.5 6221,-643.5 6221,-649.5 6215,-655.5 6209,-655.5\"/>\n<text text-anchor=\"start\" x=\"6143.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6133\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6132\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6143.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 244->246 -->\n<g id=\"edge246\" class=\"edge\"><title>244->246</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6164.01,-698.907C6165.2,-688.204 6166.49,-676.615 6167.69,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6171.19,-665.992 6168.81,-655.667 6164.23,-665.219 6171.19,-665.992\"/>\n</g>\n<!-- 248 -->\n<g id=\"node249\" class=\"node\"><title>248</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6205,-893.5C6205,-893.5 6132,-893.5 6132,-893.5 6126,-893.5 6120,-887.5 6120,-881.5 6120,-881.5 6120,-837.5 6120,-837.5 6120,-831.5 6126,-825.5 6132,-825.5 6132,-825.5 6205,-825.5 6205,-825.5 6211,-825.5 6217,-831.5 6217,-837.5 6217,-837.5 6217,-881.5 6217,-881.5 6217,-887.5 6211,-893.5 6205,-893.5\"/>\n<text text-anchor=\"start\" x=\"6139.5\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6129\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"6128\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"6139.5\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 247->248 -->\n<g id=\"edge248\" class=\"edge\"><title>247->248</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6168.5,-936.907C6168.5,-926.204 6168.5,-914.615 6168.5,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6172,-903.667 6168.5,-893.667 6165,-903.667 6172,-903.667\"/>\n</g>\n<!-- 249 -->\n<g id=\"node250\" class=\"node\"><title>249</title>\n<path fill=\"#3d9fe6\" stroke=\"black\" d=\"M6416,-901C6416,-901 6247,-901 6247,-901 6241,-901 6235,-895 6235,-889 6235,-889 6235,-830 6235,-830 6235,-824 6241,-818 6247,-818 6247,-818 6416,-818 6416,-818 6422,-818 6428,-824 6428,-830 6428,-830 6428,-889 6428,-889 6428,-895 6422,-901 6416,-901\"/>\n<text text-anchor=\"start\" x=\"6243\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 0.004</text>\n<text text-anchor=\"start\" x=\"6294\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.039</text>\n<text text-anchor=\"start\" x=\"6288\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 50</text>\n<text text-anchor=\"start\" x=\"6287\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 49]</text>\n<text text-anchor=\"start\" x=\"6302.5\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 247->249 -->\n<g id=\"edge249\" class=\"edge\"><title>247->249</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6225.05,-936.907C6238.45,-927.288 6252.85,-916.953 6266.59,-907.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6268.97,-909.695 6275.05,-901.021 6264.88,-904.009 6268.97,-909.695\"/>\n</g>\n<!-- 250 -->\n<g id=\"node251\" class=\"node\"><title>250</title>\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M6366,-782C6366,-782 6291,-782 6291,-782 6285,-782 6279,-776 6279,-770 6279,-770 6279,-711 6279,-711 6279,-705 6285,-699 6291,-699 6291,-699 6366,-699 6366,-699 6372,-699 6378,-705 6378,-711 6378,-711 6378,-770 6378,-770 6378,-776 6372,-782 6366,-782\"/>\n<text text-anchor=\"start\" x=\"6287\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ -0.69</text>\n<text text-anchor=\"start\" x=\"6291\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.278</text>\n<text text-anchor=\"start\" x=\"6289\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"6288\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\n<text text-anchor=\"start\" x=\"6299.5\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 249->250 -->\n<g id=\"edge250\" class=\"edge\"><title>249->250</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6330.46,-817.907C6330.25,-809.558 6330.02,-800.671 6329.8,-792.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6333.29,-791.928 6329.54,-782.021 6326.3,-792.107 6333.29,-791.928\"/>\n</g>\n<!-- 253 -->\n<g id=\"node254\" class=\"node\"><title>253</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6489,-774.5C6489,-774.5 6408,-774.5 6408,-774.5 6402,-774.5 6396,-768.5 6396,-762.5 6396,-762.5 6396,-718.5 6396,-718.5 6396,-712.5 6402,-706.5 6408,-706.5 6408,-706.5 6489,-706.5 6489,-706.5 6495,-706.5 6501,-712.5 6501,-718.5 6501,-718.5 6501,-762.5 6501,-762.5 6501,-768.5 6495,-774.5 6489,-774.5\"/>\n<text text-anchor=\"start\" x=\"6419.5\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6405\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 44</text>\n<text text-anchor=\"start\" x=\"6404\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 44]</text>\n<text text-anchor=\"start\" x=\"6419.5\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 249->253 -->\n<g id=\"edge253\" class=\"edge\"><title>249->253</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6372.09,-817.907C6383.79,-806.211 6396.54,-793.457 6408.22,-781.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6410.74,-784.213 6415.33,-774.667 6405.79,-779.263 6410.74,-784.213\"/>\n</g>\n<!-- 251 -->\n<g id=\"node252\" class=\"node\"><title>251</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6351,-655.5C6351,-655.5 6278,-655.5 6278,-655.5 6272,-655.5 6266,-649.5 6266,-643.5 6266,-643.5 6266,-599.5 6266,-599.5 6266,-593.5 6272,-587.5 6278,-587.5 6278,-587.5 6351,-587.5 6351,-587.5 6357,-587.5 6363,-593.5 6363,-599.5 6363,-599.5 6363,-643.5 6363,-643.5 6363,-649.5 6357,-655.5 6351,-655.5\"/>\n<text text-anchor=\"start\" x=\"6285.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6275\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"6274\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\n<text text-anchor=\"start\" x=\"6285.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 250->251 -->\n<g id=\"edge251\" class=\"edge\"><title>250->251</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6323.64,-698.907C6322.36,-688.204 6320.98,-676.615 6319.68,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6323.13,-665.18 6318.47,-655.667 6316.18,-666.012 6323.13,-665.18\"/>\n</g>\n<!-- 252 -->\n<g id=\"node253\" class=\"node\"><title>252</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6466,-655.5C6466,-655.5 6393,-655.5 6393,-655.5 6387,-655.5 6381,-649.5 6381,-643.5 6381,-643.5 6381,-599.5 6381,-599.5 6381,-593.5 6387,-587.5 6393,-587.5 6393,-587.5 6466,-587.5 6466,-587.5 6472,-587.5 6478,-593.5 6478,-599.5 6478,-599.5 6478,-643.5 6478,-643.5 6478,-649.5 6472,-655.5 6466,-655.5\"/>\n<text text-anchor=\"start\" x=\"6400.5\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6390\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6389\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6400.5\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 250->252 -->\n<g id=\"edge252\" class=\"edge\"><title>250->252</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6363.54,-698.907C6373.45,-687.432 6384.23,-674.938 6394.16,-663.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6396.98,-665.524 6400.87,-655.667 6391.68,-660.95 6396.98,-665.524\"/>\n</g>\n<!-- 256 -->\n<g id=\"node257\" class=\"node\"><title>256</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6001,-1131.5C6001,-1131.5 5920,-1131.5 5920,-1131.5 5914,-1131.5 5908,-1125.5 5908,-1119.5 5908,-1119.5 5908,-1075.5 5908,-1075.5 5908,-1069.5 5914,-1063.5 5920,-1063.5 5920,-1063.5 6001,-1063.5 6001,-1063.5 6007,-1063.5 6013,-1069.5 6013,-1075.5 6013,-1075.5 6013,-1119.5 6013,-1119.5 6013,-1125.5 6007,-1131.5 6001,-1131.5\"/>\n<text text-anchor=\"start\" x=\"5931.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"5917\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\n<text text-anchor=\"start\" x=\"5916\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [18, 0]</text>\n<text text-anchor=\"start\" x=\"5931.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 255->256 -->\n<g id=\"edge256\" class=\"edge\"><title>255->256</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5959.85,-1174.91C5959.94,-1164.2 5960.04,-1152.62 5960.13,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5963.63,-1141.7 5960.22,-1131.67 5956.63,-1141.64 5963.63,-1141.7\"/>\n</g>\n<!-- 257 -->\n<g id=\"node258\" class=\"node\"><title>257</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6116,-1131.5C6116,-1131.5 6043,-1131.5 6043,-1131.5 6037,-1131.5 6031,-1125.5 6031,-1119.5 6031,-1119.5 6031,-1075.5 6031,-1075.5 6031,-1069.5 6037,-1063.5 6043,-1063.5 6043,-1063.5 6116,-1063.5 6116,-1063.5 6122,-1063.5 6128,-1069.5 6128,-1075.5 6128,-1075.5 6128,-1119.5 6128,-1119.5 6128,-1125.5 6122,-1131.5 6116,-1131.5\"/>\n<text text-anchor=\"start\" x=\"6050.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6040\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"6039\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"6050.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 255->257 -->\n<g id=\"edge257\" class=\"edge\"><title>255->257</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6001.13,-1174.91C6013.13,-1163.21 6026.21,-1150.46 6038.19,-1138.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6040.77,-1141.15 6045.48,-1131.67 6035.88,-1136.14 6040.77,-1141.15\"/>\n</g>\n<!-- 260 -->\n<g id=\"node261\" class=\"node\"><title>260</title>\n<path fill=\"#eeac7c\" stroke=\"black\" d=\"M6136,-1615C6136,-1615 6037,-1615 6037,-1615 6031,-1615 6025,-1609 6025,-1603 6025,-1603 6025,-1544 6025,-1544 6025,-1538 6031,-1532 6037,-1532 6037,-1532 6136,-1532 6136,-1532 6142,-1532 6148,-1538 6148,-1544 6148,-1544 6148,-1603 6148,-1603 6148,-1609 6142,-1615 6136,-1615\"/>\n<text text-anchor=\"start\" x=\"6033\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.112</text>\n<text text-anchor=\"start\" x=\"6049\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.379</text>\n<text text-anchor=\"start\" x=\"6039\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 307</text>\n<text text-anchor=\"start\" x=\"6033.5\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [229, 78]</text>\n<text text-anchor=\"start\" x=\"6057.5\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 259->260 -->\n<g id=\"edge260\" class=\"edge\"><title>259->260</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6044.05,-1650.91C6048.89,-1642.2 6054.06,-1632.9 6059.06,-1623.89\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6062.19,-1625.46 6063.99,-1615.02 6056.07,-1622.06 6062.19,-1625.46\"/>\n</g>\n<!-- 279 -->\n<g id=\"node280\" class=\"node\"><title>279</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6267,-1607.5C6267,-1607.5 6178,-1607.5 6178,-1607.5 6172,-1607.5 6166,-1601.5 6166,-1595.5 6166,-1595.5 6166,-1551.5 6166,-1551.5 6166,-1545.5 6172,-1539.5 6178,-1539.5 6178,-1539.5 6267,-1539.5 6267,-1539.5 6273,-1539.5 6279,-1545.5 6279,-1551.5 6279,-1551.5 6279,-1595.5 6279,-1595.5 6279,-1601.5 6273,-1607.5 6267,-1607.5\"/>\n<text text-anchor=\"start\" x=\"6193.5\" y=\"-1592.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6175\" y=\"-1577.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 205</text>\n<text text-anchor=\"start\" x=\"6174\" y=\"-1562.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 205]</text>\n<text text-anchor=\"start\" x=\"6193.5\" y=\"-1547.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 259->279 -->\n<g id=\"edge279\" class=\"edge\"><title>259->279</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6089.06,-1653.83C6110.69,-1641.6 6134.69,-1627.87 6156.5,-1615 6157.77,-1614.25 6159.05,-1613.5 6160.33,-1612.73\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6162.14,-1615.73 6168.92,-1607.59 6158.55,-1609.72 6162.14,-1615.73\"/>\n</g>\n<!-- 261 -->\n<g id=\"node262\" class=\"node\"><title>261</title>\n<path fill=\"#c7e3f8\" stroke=\"black\" d=\"M6233,-1496C6233,-1496 6064,-1496 6064,-1496 6058,-1496 6052,-1490 6052,-1484 6052,-1484 6052,-1425 6052,-1425 6052,-1419 6058,-1413 6064,-1413 6064,-1413 6233,-1413 6233,-1413 6239,-1413 6245,-1419 6245,-1425 6245,-1425 6245,-1484 6245,-1484 6245,-1490 6239,-1496 6233,-1496\"/>\n<text text-anchor=\"start\" x=\"6060\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 0.347</text>\n<text text-anchor=\"start\" x=\"6111\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.487</text>\n<text text-anchor=\"start\" x=\"6101\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 110</text>\n<text text-anchor=\"start\" x=\"6100\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [46, 64]</text>\n<text text-anchor=\"start\" x=\"6119.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 260->261 -->\n<g id=\"edge261\" class=\"edge\"><title>260->261</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6108.01,-1531.91C6112.63,-1523.2 6117.55,-1513.9 6122.33,-1504.89\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6125.44,-1506.5 6127.03,-1496.02 6119.25,-1503.22 6125.44,-1506.5\"/>\n</g>\n<!-- 268 -->\n<g id=\"node269\" class=\"node\"><title>268</title>\n<path fill=\"#e78b48\" stroke=\"black\" d=\"M6649,-1496C6649,-1496 6550,-1496 6550,-1496 6544,-1496 6538,-1490 6538,-1484 6538,-1484 6538,-1425 6538,-1425 6538,-1419 6544,-1413 6550,-1413 6550,-1413 6649,-1413 6649,-1413 6655,-1413 6661,-1419 6661,-1425 6661,-1425 6661,-1484 6661,-1484 6661,-1490 6655,-1496 6649,-1496\"/>\n<text text-anchor=\"start\" x=\"6546\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ -0.094</text>\n<text text-anchor=\"start\" x=\"6562\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.132</text>\n<text text-anchor=\"start\" x=\"6552\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 197</text>\n<text text-anchor=\"start\" x=\"6546.5\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [183, 14]</text>\n<text text-anchor=\"start\" x=\"6570.5\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 260->268 -->\n<g id=\"edge268\" class=\"edge\"><title>260->268</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6148.16,-1535.31C6150.94,-1534.12 6153.73,-1533 6156.5,-1532 6282.44,-1486.35 6438.64,-1467.52 6527.91,-1460.07\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6528.24,-1463.56 6537.93,-1459.26 6527.68,-1456.58 6528.24,-1463.56\"/>\n</g>\n<!-- 262 -->\n<g id=\"node263\" class=\"node\"><title>262</title>\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M6204,-1377C6204,-1377 6093,-1377 6093,-1377 6087,-1377 6081,-1371 6081,-1365 6081,-1365 6081,-1306 6081,-1306 6081,-1300 6087,-1294 6093,-1294 6093,-1294 6204,-1294 6204,-1294 6210,-1294 6216,-1300 6216,-1306 6216,-1306 6216,-1365 6216,-1365 6216,-1371 6210,-1377 6204,-1377\"/>\n<text text-anchor=\"start\" x=\"6089\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ -0.011</text>\n<text text-anchor=\"start\" x=\"6115\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.06</text>\n<text text-anchor=\"start\" x=\"6105\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 65</text>\n<text text-anchor=\"start\" x=\"6104\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 63]</text>\n<text text-anchor=\"start\" x=\"6119.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 261->262 -->\n<g id=\"edge262\" class=\"edge\"><title>261->262</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6148.5,-1412.91C6148.5,-1404.65 6148.5,-1395.86 6148.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6152,-1387.02 6148.5,-1377.02 6145,-1387.02 6152,-1387.02\"/>\n</g>\n<!-- 265 -->\n<g id=\"node266\" class=\"node\"><title>265</title>\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M6377,-1377C6377,-1377 6274,-1377 6274,-1377 6268,-1377 6262,-1371 6262,-1365 6262,-1365 6262,-1306 6262,-1306 6262,-1300 6268,-1294 6274,-1294 6274,-1294 6377,-1294 6377,-1294 6383,-1294 6389,-1300 6389,-1306 6389,-1306 6389,-1365 6389,-1365 6389,-1371 6383,-1377 6377,-1377\"/>\n<text text-anchor=\"start\" x=\"6270\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"6288\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.043</text>\n<text text-anchor=\"start\" x=\"6282\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\n<text text-anchor=\"start\" x=\"6281\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [44, 1]</text>\n<text text-anchor=\"start\" x=\"6296.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 261->265 -->\n<g id=\"edge265\" class=\"edge\"><title>261->265</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6209.91,-1412.91C6224.6,-1403.2 6240.39,-1392.76 6255.44,-1382.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6257.79,-1385.45 6264.2,-1377.02 6253.93,-1379.62 6257.79,-1385.45\"/>\n</g>\n<!-- 263 -->\n<g id=\"node264\" class=\"node\"><title>263</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6132,-1250.5C6132,-1250.5 6051,-1250.5 6051,-1250.5 6045,-1250.5 6039,-1244.5 6039,-1238.5 6039,-1238.5 6039,-1194.5 6039,-1194.5 6039,-1188.5 6045,-1182.5 6051,-1182.5 6051,-1182.5 6132,-1182.5 6132,-1182.5 6138,-1182.5 6144,-1188.5 6144,-1194.5 6144,-1194.5 6144,-1238.5 6144,-1238.5 6144,-1244.5 6138,-1250.5 6132,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6062.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6048\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 63</text>\n<text text-anchor=\"start\" x=\"6047\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 63]</text>\n<text text-anchor=\"start\" x=\"6062.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 262->263 -->\n<g id=\"edge263\" class=\"edge\"><title>262->263</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6128.72,-1293.91C6123.35,-1282.87 6117.51,-1270.9 6112.09,-1259.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6115.18,-1258.12 6107.66,-1250.67 6108.89,-1261.19 6115.18,-1258.12\"/>\n</g>\n<!-- 264 -->\n<g id=\"node265\" class=\"node\"><title>264</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6247,-1250.5C6247,-1250.5 6174,-1250.5 6174,-1250.5 6168,-1250.5 6162,-1244.5 6162,-1238.5 6162,-1238.5 6162,-1194.5 6162,-1194.5 6162,-1188.5 6168,-1182.5 6174,-1182.5 6174,-1182.5 6247,-1182.5 6247,-1182.5 6253,-1182.5 6259,-1188.5 6259,-1194.5 6259,-1194.5 6259,-1238.5 6259,-1238.5 6259,-1244.5 6253,-1250.5 6247,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6181.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6171\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"6170\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"6181.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 262->264 -->\n<g id=\"edge264\" class=\"edge\"><title>262->264</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6170.01,-1293.91C6175.86,-1282.87 6182.2,-1270.9 6188.1,-1259.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6191.33,-1261.14 6192.92,-1250.67 6185.15,-1257.86 6191.33,-1261.14\"/>\n</g>\n<!-- 266 -->\n<g id=\"node267\" class=\"node\"><title>266</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6362,-1250.5C6362,-1250.5 6289,-1250.5 6289,-1250.5 6283,-1250.5 6277,-1244.5 6277,-1238.5 6277,-1238.5 6277,-1194.5 6277,-1194.5 6277,-1188.5 6283,-1182.5 6289,-1182.5 6289,-1182.5 6362,-1182.5 6362,-1182.5 6368,-1182.5 6374,-1188.5 6374,-1194.5 6374,-1194.5 6374,-1238.5 6374,-1238.5 6374,-1244.5 6368,-1250.5 6362,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6296.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6286\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6285\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"6296.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 265->266 -->\n<g id=\"edge266\" class=\"edge\"><title>265->266</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6325.5,-1293.91C6325.5,-1283.2 6325.5,-1271.62 6325.5,-1260.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6329,-1260.67 6325.5,-1250.67 6322,-1260.67 6329,-1260.67\"/>\n</g>\n<!-- 267 -->\n<g id=\"node268\" class=\"node\"><title>267</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6485,-1250.5C6485,-1250.5 6404,-1250.5 6404,-1250.5 6398,-1250.5 6392,-1244.5 6392,-1238.5 6392,-1238.5 6392,-1194.5 6392,-1194.5 6392,-1188.5 6398,-1182.5 6404,-1182.5 6404,-1182.5 6485,-1182.5 6485,-1182.5 6491,-1182.5 6497,-1188.5 6497,-1194.5 6497,-1194.5 6497,-1238.5 6497,-1238.5 6497,-1244.5 6491,-1250.5 6485,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6415.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6401\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 44</text>\n<text text-anchor=\"start\" x=\"6400\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [44, 0]</text>\n<text text-anchor=\"start\" x=\"6415.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 265->267 -->\n<g id=\"edge267\" class=\"edge\"><title>265->267</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6366.79,-1293.91C6378.68,-1282.21 6391.65,-1269.46 6403.53,-1257.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6406.09,-1260.17 6410.77,-1250.67 6401.18,-1255.18 6406.09,-1260.17\"/>\n</g>\n<!-- 269 -->\n<g id=\"node270\" class=\"node\"><title>269</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M6651,-1377C6651,-1377 6548,-1377 6548,-1377 6542,-1377 6536,-1371 6536,-1365 6536,-1365 6536,-1306 6536,-1306 6536,-1300 6542,-1294 6548,-1294 6548,-1294 6651,-1294 6651,-1294 6657,-1294 6663,-1300 6663,-1306 6663,-1306 6663,-1365 6663,-1365 6663,-1371 6657,-1377 6651,-1377\"/>\n<text text-anchor=\"start\" x=\"6544\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ -0.01</text>\n<text text-anchor=\"start\" x=\"6562\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.034</text>\n<text text-anchor=\"start\" x=\"6552\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 173</text>\n<text text-anchor=\"start\" x=\"6551\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [170, 3]</text>\n<text text-anchor=\"start\" x=\"6570.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 268->269 -->\n<g id=\"edge269\" class=\"edge\"><title>268->269</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6599.5,-1412.91C6599.5,-1404.65 6599.5,-1395.86 6599.5,-1387.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6603,-1387.02 6599.5,-1377.02 6596,-1387.02 6603,-1387.02\"/>\n</g>\n<!-- 272 -->\n<g id=\"node273\" class=\"node\"><title>272</title>\n<path fill=\"#fbece1\" stroke=\"black\" d=\"M6921,-1377C6921,-1377 6730,-1377 6730,-1377 6724,-1377 6718,-1371 6718,-1365 6718,-1365 6718,-1306 6718,-1306 6718,-1300 6724,-1294 6730,-1294 6730,-1294 6921,-1294 6921,-1294 6927,-1294 6933,-1300 6933,-1306 6933,-1306 6933,-1365 6933,-1365 6933,-1371 6927,-1377 6921,-1377\"/>\n<text text-anchor=\"start\" x=\"6726\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ -0.254</text>\n<text text-anchor=\"start\" x=\"6788\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.497</text>\n<text text-anchor=\"start\" x=\"6782\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\n<text text-anchor=\"start\" x=\"6777\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 11]</text>\n<text text-anchor=\"start\" x=\"6796.5\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 268->272 -->\n<g id=\"edge272\" class=\"edge\"><title>268->272</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6661.26,-1421.53C6684.99,-1409.24 6712.55,-1394.98 6738.23,-1381.68\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6739.96,-1384.73 6747.23,-1377.02 6736.74,-1378.51 6739.96,-1384.73\"/>\n</g>\n<!-- 270 -->\n<g id=\"node271\" class=\"node\"><title>270</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6600,-1250.5C6600,-1250.5 6527,-1250.5 6527,-1250.5 6521,-1250.5 6515,-1244.5 6515,-1238.5 6515,-1238.5 6515,-1194.5 6515,-1194.5 6515,-1188.5 6521,-1182.5 6527,-1182.5 6527,-1182.5 6600,-1182.5 6600,-1182.5 6606,-1182.5 6612,-1188.5 6612,-1194.5 6612,-1194.5 6612,-1238.5 6612,-1238.5 6612,-1244.5 6606,-1250.5 6600,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6534.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6524\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"6523\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"6534.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 269->270 -->\n<g id=\"edge270\" class=\"edge\"><title>269->270</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6587.01,-1293.91C6583.68,-1283.09 6580.08,-1271.38 6576.71,-1260.44\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6579.99,-1259.2 6573.71,-1250.67 6573.3,-1261.25 6579.99,-1259.2\"/>\n</g>\n<!-- 271 -->\n<g id=\"node272\" class=\"node\"><title>271</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6731,-1250.5C6731,-1250.5 6642,-1250.5 6642,-1250.5 6636,-1250.5 6630,-1244.5 6630,-1238.5 6630,-1238.5 6630,-1194.5 6630,-1194.5 6630,-1188.5 6636,-1182.5 6642,-1182.5 6642,-1182.5 6731,-1182.5 6731,-1182.5 6737,-1182.5 6743,-1188.5 6743,-1194.5 6743,-1194.5 6743,-1238.5 6743,-1238.5 6743,-1244.5 6737,-1250.5 6731,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6657.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6639\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 170</text>\n<text text-anchor=\"start\" x=\"6638\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [170, 0]</text>\n<text text-anchor=\"start\" x=\"6657.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 269->271 -->\n<g id=\"edge271\" class=\"edge\"><title>269->271</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6629.68,-1293.91C6638.14,-1282.54 6647.33,-1270.18 6655.81,-1258.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6658.68,-1260.78 6661.84,-1250.67 6653.06,-1256.6 6658.68,-1260.78\"/>\n</g>\n<!-- 273 -->\n<g id=\"node274\" class=\"node\"><title>273</title>\n<path fill=\"#5dafea\" stroke=\"black\" d=\"M6877.5,-1258C6877.5,-1258 6773.5,-1258 6773.5,-1258 6767.5,-1258 6761.5,-1252 6761.5,-1246 6761.5,-1246 6761.5,-1187 6761.5,-1187 6761.5,-1181 6767.5,-1175 6773.5,-1175 6773.5,-1175 6877.5,-1175 6877.5,-1175 6883.5,-1175 6889.5,-1181 6889.5,-1187 6889.5,-1187 6889.5,-1246 6889.5,-1246 6889.5,-1252 6883.5,-1258 6877.5,-1258\"/>\n<text text-anchor=\"start\" x=\"6769.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 6.674</text>\n<text text-anchor=\"start\" x=\"6792\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.26</text>\n<text text-anchor=\"start\" x=\"6782\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"6781\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 11]</text>\n<text text-anchor=\"start\" x=\"6796.5\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 272->273 -->\n<g id=\"edge273\" class=\"edge\"><title>272->273</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6825.5,-1293.91C6825.5,-1285.65 6825.5,-1276.86 6825.5,-1268.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6829,-1268.02 6825.5,-1258.02 6822,-1268.02 6829,-1268.02\"/>\n</g>\n<!-- 278 -->\n<g id=\"node279\" class=\"node\"><title>278</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7001,-1250.5C7001,-1250.5 6920,-1250.5 6920,-1250.5 6914,-1250.5 6908,-1244.5 6908,-1238.5 6908,-1238.5 6908,-1194.5 6908,-1194.5 6908,-1188.5 6914,-1182.5 6920,-1182.5 6920,-1182.5 7001,-1182.5 7001,-1182.5 7007,-1182.5 7013,-1188.5 7013,-1194.5 7013,-1194.5 7013,-1238.5 7013,-1238.5 7013,-1244.5 7007,-1250.5 7001,-1250.5\"/>\n<text text-anchor=\"start\" x=\"6931.5\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6917\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\n<text text-anchor=\"start\" x=\"6916\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 0]</text>\n<text text-anchor=\"start\" x=\"6931.5\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 272->278 -->\n<g id=\"edge278\" class=\"edge\"><title>272->278</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6872.34,-1293.91C6885.96,-1282.1 6900.83,-1269.22 6914.4,-1257.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6916.97,-1259.86 6922.23,-1250.67 6912.38,-1254.57 6916.97,-1259.86\"/>\n</g>\n<!-- 274 -->\n<g id=\"node275\" class=\"node\"><title>274</title>\n<path fill=\"#4ba6e7\" stroke=\"black\" d=\"M6806,-1139C6806,-1139 6725,-1139 6725,-1139 6719,-1139 6713,-1133 6713,-1127 6713,-1127 6713,-1068 6713,-1068 6713,-1062 6719,-1056 6725,-1056 6725,-1056 6806,-1056 6806,-1056 6812,-1056 6818,-1062 6818,-1068 6818,-1068 6818,-1127 6818,-1127 6818,-1133 6812,-1139 6806,-1139\"/>\n<text text-anchor=\"start\" x=\"6725.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 11.514</text>\n<text text-anchor=\"start\" x=\"6728\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.153</text>\n<text text-anchor=\"start\" x=\"6722\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"6721\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 11]</text>\n<text text-anchor=\"start\" x=\"6736.5\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 273->274 -->\n<g id=\"edge274\" class=\"edge\"><title>273->274</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6804.68,-1174.91C6800.26,-1166.29 6795.55,-1157.09 6790.97,-1148.17\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6793.96,-1146.32 6786.28,-1139.02 6787.73,-1149.52 6793.96,-1146.32\"/>\n</g>\n<!-- 277 -->\n<g id=\"node278\" class=\"node\"><title>277</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6921,-1131.5C6921,-1131.5 6848,-1131.5 6848,-1131.5 6842,-1131.5 6836,-1125.5 6836,-1119.5 6836,-1119.5 6836,-1075.5 6836,-1075.5 6836,-1069.5 6842,-1063.5 6848,-1063.5 6848,-1063.5 6921,-1063.5 6921,-1063.5 6927,-1063.5 6933,-1069.5 6933,-1075.5 6933,-1075.5 6933,-1119.5 6933,-1119.5 6933,-1125.5 6927,-1131.5 6921,-1131.5\"/>\n<text text-anchor=\"start\" x=\"6855.5\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6845\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6844\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6855.5\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 273->277 -->\n<g id=\"edge277\" class=\"edge\"><title>273->277</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6845.97,-1174.91C6851.53,-1163.87 6857.57,-1151.9 6863.18,-1140.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6866.4,-1142.17 6867.77,-1131.67 6860.15,-1139.02 6866.4,-1142.17\"/>\n</g>\n<!-- 275 -->\n<g id=\"node276\" class=\"node\"><title>275</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6746,-1012.5C6746,-1012.5 6665,-1012.5 6665,-1012.5 6659,-1012.5 6653,-1006.5 6653,-1000.5 6653,-1000.5 6653,-956.5 6653,-956.5 6653,-950.5 6659,-944.5 6665,-944.5 6665,-944.5 6746,-944.5 6746,-944.5 6752,-944.5 6758,-950.5 6758,-956.5 6758,-956.5 6758,-1000.5 6758,-1000.5 6758,-1006.5 6752,-1012.5 6746,-1012.5\"/>\n<text text-anchor=\"start\" x=\"6676.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6662\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\n<text text-anchor=\"start\" x=\"6661\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\n<text text-anchor=\"start\" x=\"6676.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 274->275 -->\n<g id=\"edge275\" class=\"edge\"><title>274->275</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6744.68,-1055.91C6739.02,-1044.87 6732.88,-1032.9 6727.18,-1021.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6730.19,-1019.97 6722.51,-1012.67 6723.96,-1023.16 6730.19,-1019.97\"/>\n</g>\n<!-- 276 -->\n<g id=\"node277\" class=\"node\"><title>276</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6861,-1012.5C6861,-1012.5 6788,-1012.5 6788,-1012.5 6782,-1012.5 6776,-1006.5 6776,-1000.5 6776,-1000.5 6776,-956.5 6776,-956.5 6776,-950.5 6782,-944.5 6788,-944.5 6788,-944.5 6861,-944.5 6861,-944.5 6867,-944.5 6873,-950.5 6873,-956.5 6873,-956.5 6873,-1000.5 6873,-1000.5 6873,-1006.5 6867,-1012.5 6861,-1012.5\"/>\n<text text-anchor=\"start\" x=\"6795.5\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6785\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6784\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6795.5\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 274->276 -->\n<g id=\"edge276\" class=\"edge\"><title>274->276</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6785.97,-1055.91C6791.53,-1044.87 6797.57,-1032.9 6803.18,-1021.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6806.4,-1023.17 6807.77,-1012.67 6800.15,-1020.02 6806.4,-1023.17\"/>\n</g>\n<!-- 281 -->\n<g id=\"node282\" class=\"node\"><title>281</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6200,-1726.5C6200,-1726.5 6119,-1726.5 6119,-1726.5 6113,-1726.5 6107,-1720.5 6107,-1714.5 6107,-1714.5 6107,-1670.5 6107,-1670.5 6107,-1664.5 6113,-1658.5 6119,-1658.5 6119,-1658.5 6200,-1658.5 6200,-1658.5 6206,-1658.5 6212,-1664.5 6212,-1670.5 6212,-1670.5 6212,-1714.5 6212,-1714.5 6212,-1720.5 6206,-1726.5 6200,-1726.5\"/>\n<text text-anchor=\"start\" x=\"6130.5\" y=\"-1711.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6116\" y=\"-1696.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\n<text text-anchor=\"start\" x=\"6115\" y=\"-1681.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [27, 0]</text>\n<text text-anchor=\"start\" x=\"6130.5\" y=\"-1666.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 0</text>\n</g>\n<!-- 280->281 -->\n<g id=\"edge281\" class=\"edge\"><title>280->281</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6159.5,-1769.91C6159.5,-1759.2 6159.5,-1747.62 6159.5,-1736.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6163,-1736.67 6159.5,-1726.67 6156,-1736.67 6163,-1736.67\"/>\n</g>\n<!-- 282 -->\n<g id=\"node283\" class=\"node\"><title>282</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6331,-1726.5C6331,-1726.5 6242,-1726.5 6242,-1726.5 6236,-1726.5 6230,-1720.5 6230,-1714.5 6230,-1714.5 6230,-1670.5 6230,-1670.5 6230,-1664.5 6236,-1658.5 6242,-1658.5 6242,-1658.5 6331,-1658.5 6331,-1658.5 6337,-1658.5 6343,-1664.5 6343,-1670.5 6343,-1670.5 6343,-1714.5 6343,-1714.5 6343,-1720.5 6337,-1726.5 6331,-1726.5\"/>\n<text text-anchor=\"start\" x=\"6257.5\" y=\"-1711.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">gini = 0.0</text>\n<text text-anchor=\"start\" x=\"6239\" y=\"-1696.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 356</text>\n<text text-anchor=\"start\" x=\"6238\" y=\"-1681.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 356]</text>\n<text text-anchor=\"start\" x=\"6257.5\" y=\"-1666.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = 1</text>\n</g>\n<!-- 280->282 -->\n<g id=\"edge282\" class=\"edge\"><title>280->282</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6203.56,-1769.91C6216.38,-1758.1 6230.36,-1745.22 6243.14,-1733.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6245.52,-1736.02 6250.5,-1726.67 6240.77,-1730.87 6245.52,-1736.02\"/>\n</g>\n</g>\n</svg>\n",
+ "text/plain": [
+ "<graphviz.sources.Source at 0x1b83d28e8b0>"
+ ]
+ },
+ "execution_count": 11,
+ "metadata": {},
+ "output_type": "execute_result"
+ }
+ ],
+ "source": [
+ "from IPython import display\n",
+ "import graphviz\n",
+ "import os\n",
+ "\n",
+ "os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
+ "# 시각화\n",
+ "dot_data = tree.export_graphviz(clf, # 의사결정나무 모형 대입\n",
+ " out_file = None, # file로 변환할 것인가\n",
+ " feature_names = colname, # feature 이름\n",
+ " class_names = [\"0\", \"1\"], # target 이름\n",
+ " filled = True, # 그림에 색상을 넣을것인가\n",
+ " rounded = True, # 반올림을 진행할 것인가\n",
+ " special_characters = True) # 특수문자를 사용하나\n",
+ "\n",
+ "graph = graphviz.Source(dot_data) \n",
+ "graph"
+ ]
+ },
+ {
+ "cell_type": "code",
+ "execution_count": null,
+ "metadata": {},
+ "outputs": [],
+ "source": []
+ }
+ ],
+ "metadata": {
+ "interpreter": {
+ "hash": "201ef9045d1e569690d4ef19acedf47659d611d6c0ceca4c00974770fb24d6e6"
+ },
+ "kernelspec": {
+ "display_name": "Python 3.8.5 64-bit ('base': conda)",
+ "name": "python3"
+ },
+ "language_info": {
+ "codemirror_mode": {
+ "name": "ipython",
+ "version": 3
+ },
+ "file_extension": ".py",
+ "mimetype": "text/x-python",
+ "name": "python",
+ "nbconvert_exporter": "python",
+ "pygments_lexer": "ipython3",
+ "version": "3.8.5"
+ },
+ "orig_nbformat": 4
+ },
+ "nbformat": 4,
+ "nbformat_minor": 2
+}
diff --git a/experiment/decision tree classifier/output/output.svg b/experiment/decision tree classifier/output/output.svg
new file mode 100644
index 0000000000000000000000000000000000000000..99aa1656329635bb009b4f7cba7538497934b766
--- /dev/null
+++ b/experiment/decision tree classifier/output/output.svg
@@ -0,0 +1,3830 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
+ "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
+<!-- Generated by graphviz version 2.38.0 (20140413.2041)
+ -->
+<!-- Title: Tree Pages: 1 -->
+<svg width="7021pt" height="2099pt"
+ viewBox="0.00 0.00 7021.00 2099.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
+<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 2095)">
+<title>Tree</title>
+<polygon fill="white" stroke="none" points="-4,4 -4,-2095 7017,-2095 7017,4 -4,4"/>
+<!-- 0 -->
+<g id="node1" class="node"><title>0</title>
+<path fill="#fcefe6" stroke="black" d="M4909,-2091C4909,-2091 4770,-2091 4770,-2091 4764,-2091 4758,-2085 4758,-2079 4758,-2079 4758,-2020 4758,-2020 4758,-2014 4764,-2008 4770,-2008 4770,-2008 4909,-2008 4909,-2008 4915,-2008 4921,-2014 4921,-2020 4921,-2020 4921,-2079 4921,-2079 4921,-2085 4915,-2091 4909,-2091"/>
+<text text-anchor="start" x="4784" y="-2075.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="4802" y="-2060.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.498</text>
+<text text-anchor="start" x="4783.5" y="-2045.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 25192</text>
+<text text-anchor="start" x="4766" y="-2030.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13449, 11743]</text>
+<text text-anchor="start" x="4810.5" y="-2015.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 1 -->
+<g id="node2" class="node"><title>1</title>
+<path fill="#4aa6e7" stroke="black" d="M4693,-1972C4693,-1972 4524,-1972 4524,-1972 4518,-1972 4512,-1966 4512,-1960 4512,-1960 4512,-1901 4512,-1901 4512,-1895 4518,-1889 4524,-1889 4524,-1889 4693,-1889 4693,-1889 4699,-1889 4705,-1895 4705,-1901 4705,-1901 4705,-1960 4705,-1960 4705,-1966 4699,-1972 4693,-1972"/>
+<text text-anchor="start" x="4520" y="-1956.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.844</text>
+<text text-anchor="start" x="4571" y="-1941.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.147</text>
+<text text-anchor="start" x="4552.5" y="-1926.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11644</text>
+<text text-anchor="start" x="4543.5" y="-1911.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [932, 10712]</text>
+<text text-anchor="start" x="4579.5" y="-1896.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 0->1 -->
+<g id="edge1" class="edge"><title>0->1</title>
+<path fill="none" stroke="black" d="M4759.36,-2007.91C4739.38,-1997.79 4717.84,-1986.88 4697.46,-1976.56"/>
+<polygon fill="black" stroke="black" points="4699.01,-1973.42 4688.5,-1972.02 4695.84,-1979.66 4699.01,-1973.42"/>
+<text text-anchor="middle" x="4696.29" y="-1992.08" font-family="Helvetica,sans-Serif" font-size="14.00">True</text>
+</g>
+<!-- 116 -->
+<g id="node117" class="node"><title>116</title>
+<path fill="#e78b49" stroke="black" d="M5905,-1972C5905,-1972 5774,-1972 5774,-1972 5768,-1972 5762,-1966 5762,-1960 5762,-1960 5762,-1901 5762,-1901 5762,-1895 5768,-1889 5774,-1889 5774,-1889 5905,-1889 5905,-1889 5911,-1889 5917,-1895 5917,-1901 5917,-1901 5917,-1960 5917,-1960 5917,-1966 5911,-1972 5905,-1972"/>
+<text text-anchor="start" x="5782.5" y="-1956.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 4.185</text>
+<text text-anchor="start" x="5802" y="-1941.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.141</text>
+<text text-anchor="start" x="5783.5" y="-1926.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13548</text>
+<text text-anchor="start" x="5770" y="-1911.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12517, 1031]</text>
+<text text-anchor="start" x="5810.5" y="-1896.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 0->116 -->
+<g id="edge116" class="edge"><title>0->116</title>
+<path fill="none" stroke="black" d="M4921.33,-2038.93C5107.27,-2017.17 5560.22,-1964.18 5751.72,-1941.77"/>
+<polygon fill="black" stroke="black" points="5752.22,-1945.24 5761.74,-1940.6 5751.4,-1938.28 5752.22,-1945.24"/>
+<text text-anchor="middle" x="5746.24" y="-1956.51" font-family="Helvetica,sans-Serif" font-size="14.00">False</text>
+</g>
+<!-- 2 -->
+<g id="node3" class="node"><title>2</title>
+<path fill="#43a2e6" stroke="black" d="M3990.5,-1853C3990.5,-1853 3868.5,-1853 3868.5,-1853 3862.5,-1853 3856.5,-1847 3856.5,-1841 3856.5,-1841 3856.5,-1782 3856.5,-1782 3856.5,-1776 3862.5,-1770 3868.5,-1770 3868.5,-1770 3990.5,-1770 3990.5,-1770 3996.5,-1770 4002.5,-1776 4002.5,-1782 4002.5,-1782 4002.5,-1841 4002.5,-1841 4002.5,-1847 3996.5,-1853 3990.5,-1853"/>
+<text text-anchor="start" x="3870" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.039</text>
+<text text-anchor="start" x="3892" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.092</text>
+<text text-anchor="start" x="3873.5" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11157</text>
+<text text-anchor="start" x="3864.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [542, 10615]</text>
+<text text-anchor="start" x="3900.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 1->2 -->
+<g id="edge2" class="edge"><title>1->2</title>
+<path fill="none" stroke="black" d="M4511.94,-1912.86C4378.26,-1889.83 4139.05,-1848.61 4012.8,-1826.85"/>
+<polygon fill="black" stroke="black" points="4013.25,-1823.38 4002.8,-1825.13 4012.06,-1830.28 4013.25,-1823.38"/>
+</g>
+<!-- 111 -->
+<g id="node112" class="node"><title>111</title>
+<path fill="#eba06a" stroke="black" d="M4660,-1853C4660,-1853 4557,-1853 4557,-1853 4551,-1853 4545,-1847 4545,-1841 4545,-1841 4545,-1782 4545,-1782 4545,-1776 4551,-1770 4557,-1770 4557,-1770 4660,-1770 4660,-1770 4666,-1770 4672,-1776 4672,-1782 4672,-1782 4672,-1841 4672,-1841 4672,-1847 4666,-1853 4660,-1853"/>
+<text text-anchor="start" x="4553" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="4571" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.319</text>
+<text text-anchor="start" x="4561" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 487</text>
+<text text-anchor="start" x="4555.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [390, 97]</text>
+<text text-anchor="start" x="4579.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 1->111 -->
+<g id="edge111" class="edge"><title>1->111</title>
+<path fill="none" stroke="black" d="M4608.5,-1888.91C4608.5,-1880.65 4608.5,-1871.86 4608.5,-1863.3"/>
+<polygon fill="black" stroke="black" points="4612,-1863.02 4608.5,-1853.02 4605,-1863.02 4612,-1863.02"/>
+</g>
+<!-- 3 -->
+<g id="node4" class="node"><title>3</title>
+<path fill="#40a0e6" stroke="black" d="M3213.5,-1734C3213.5,-1734 3091.5,-1734 3091.5,-1734 3085.5,-1734 3079.5,-1728 3079.5,-1722 3079.5,-1722 3079.5,-1663 3079.5,-1663 3079.5,-1657 3085.5,-1651 3091.5,-1651 3091.5,-1651 3213.5,-1651 3213.5,-1651 3219.5,-1651 3225.5,-1657 3225.5,-1663 3225.5,-1663 3225.5,-1722 3225.5,-1722 3225.5,-1728 3219.5,-1734 3213.5,-1734"/>
+<text text-anchor="start" x="3095" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
+<text text-anchor="start" x="3115" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.066</text>
+<text text-anchor="start" x="3096.5" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10943</text>
+<text text-anchor="start" x="3087.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [371, 10572]</text>
+<text text-anchor="start" x="3123.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 2->3 -->
+<g id="edge3" class="edge"><title>2->3</title>
+<path fill="none" stroke="black" d="M3856.4,-1799.49C3711.55,-1777.68 3388.87,-1729.09 3235.95,-1706.07"/>
+<polygon fill="black" stroke="black" points="3236.1,-1702.55 3225.69,-1704.52 3235.05,-1709.47 3236.1,-1702.55"/>
+</g>
+<!-- 92 -->
+<g id="node93" class="node"><title>92</title>
+<path fill="#eca16b" stroke="black" d="M4016.5,-1734C4016.5,-1734 3842.5,-1734 3842.5,-1734 3836.5,-1734 3830.5,-1728 3830.5,-1722 3830.5,-1722 3830.5,-1663 3830.5,-1663 3830.5,-1657 3836.5,-1651 3842.5,-1651 3842.5,-1651 4016.5,-1651 4016.5,-1651 4022.5,-1651 4028.5,-1657 4028.5,-1663 4028.5,-1663 4028.5,-1722 4028.5,-1722 4028.5,-1728 4022.5,-1734 4016.5,-1734"/>
+<text text-anchor="start" x="3838.5" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.089</text>
+<text text-anchor="start" x="3892" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.321</text>
+<text text-anchor="start" x="3882" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 214</text>
+<text text-anchor="start" x="3876.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [171, 43]</text>
+<text text-anchor="start" x="3900.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 2->92 -->
+<g id="edge92" class="edge"><title>2->92</title>
+<path fill="none" stroke="black" d="M3929.5,-1769.91C3929.5,-1761.65 3929.5,-1752.86 3929.5,-1744.3"/>
+<polygon fill="black" stroke="black" points="3933,-1744.02 3929.5,-1734.02 3926,-1744.02 3933,-1744.02"/>
+</g>
+<!-- 4 -->
+<g id="node5" class="node"><title>4</title>
+<path fill="#3fa0e6" stroke="black" d="M2688.5,-1615C2688.5,-1615 2482.5,-1615 2482.5,-1615 2476.5,-1615 2470.5,-1609 2470.5,-1603 2470.5,-1603 2470.5,-1544 2470.5,-1544 2470.5,-1538 2476.5,-1532 2482.5,-1532 2482.5,-1532 2688.5,-1532 2688.5,-1532 2694.5,-1532 2700.5,-1538 2700.5,-1544 2700.5,-1544 2700.5,-1603 2700.5,-1603 2700.5,-1609 2694.5,-1615 2688.5,-1615"/>
+<text text-anchor="start" x="2478.5" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ -0.456</text>
+<text text-anchor="start" x="2548" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.054</text>
+<text text-anchor="start" x="2529.5" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10872</text>
+<text text-anchor="start" x="2520.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [304, 10568]</text>
+<text text-anchor="start" x="2556.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 3->4 -->
+<g id="edge4" class="edge"><title>3->4</title>
+<path fill="none" stroke="black" d="M3079.25,-1676.38C2986.04,-1657.15 2823.6,-1623.63 2710.61,-1600.32"/>
+<polygon fill="black" stroke="black" points="2711.02,-1596.83 2700.51,-1598.23 2709.6,-1603.68 2711.02,-1596.83"/>
+</g>
+<!-- 89 -->
+<g id="node90" class="node"><title>89</title>
+<path fill="#e78945" stroke="black" d="M3246,-1615C3246,-1615 3059,-1615 3059,-1615 3053,-1615 3047,-1609 3047,-1603 3047,-1603 3047,-1544 3047,-1544 3047,-1538 3053,-1532 3059,-1532 3059,-1532 3246,-1532 3246,-1532 3252,-1532 3258,-1538 3258,-1544 3258,-1544 3258,-1603 3258,-1603 3258,-1609 3252,-1615 3246,-1615"/>
+<text text-anchor="start" x="3055" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 3.566</text>
+<text text-anchor="start" x="3115" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.106</text>
+<text text-anchor="start" x="3109" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 71</text>
+<text text-anchor="start" x="3108" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [67, 4]</text>
+<text text-anchor="start" x="3123.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 3->89 -->
+<g id="edge89" class="edge"><title>3->89</title>
+<path fill="none" stroke="black" d="M3152.5,-1650.91C3152.5,-1642.65 3152.5,-1633.86 3152.5,-1625.3"/>
+<polygon fill="black" stroke="black" points="3156,-1625.02 3152.5,-1615.02 3149,-1625.02 3156,-1625.02"/>
+</g>
+<!-- 5 -->
+<g id="node6" class="node"><title>5</title>
+<path fill="#3a9ee5" stroke="black" d="M1398.5,-1496C1398.5,-1496 1292.5,-1496 1292.5,-1496 1286.5,-1496 1280.5,-1490 1280.5,-1484 1280.5,-1484 1280.5,-1425 1280.5,-1425 1280.5,-1419 1286.5,-1413 1292.5,-1413 1292.5,-1413 1398.5,-1413 1398.5,-1413 1404.5,-1413 1410.5,-1419 1410.5,-1425 1410.5,-1425 1410.5,-1484 1410.5,-1484 1410.5,-1490 1404.5,-1496 1398.5,-1496"/>
+<text text-anchor="start" x="1290" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="1308" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.013</text>
+<text text-anchor="start" x="1294" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9718</text>
+<text text-anchor="start" x="1288.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [63, 9655]</text>
+<text text-anchor="start" x="1316.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 4->5 -->
+<g id="edge5" class="edge"><title>4->5</title>
+<path fill="none" stroke="black" d="M2470.24,-1561.62C2219.45,-1537.96 1630.02,-1482.35 1420.8,-1462.6"/>
+<polygon fill="black" stroke="black" points="1421.11,-1459.12 1410.83,-1461.66 1420.45,-1466.09 1421.11,-1459.12"/>
+</g>
+<!-- 48 -->
+<g id="node49" class="node"><title>48</title>
+<path fill="#6db7ec" stroke="black" d="M2688.5,-1496C2688.5,-1496 2482.5,-1496 2482.5,-1496 2476.5,-1496 2470.5,-1490 2470.5,-1484 2470.5,-1484 2470.5,-1425 2470.5,-1425 2470.5,-1419 2476.5,-1413 2482.5,-1413 2482.5,-1413 2688.5,-1413 2688.5,-1413 2694.5,-1413 2700.5,-1419 2700.5,-1425 2700.5,-1425 2700.5,-1484 2700.5,-1484 2700.5,-1490 2694.5,-1496 2688.5,-1496"/>
+<text text-anchor="start" x="2478.5" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_rerror_rate ≤ -0.295</text>
+<text text-anchor="start" x="2552" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.33</text>
+<text text-anchor="start" x="2534" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1154</text>
+<text text-anchor="start" x="2528.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [241, 913]</text>
+<text text-anchor="start" x="2556.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 4->48 -->
+<g id="edge48" class="edge"><title>4->48</title>
+<path fill="none" stroke="black" d="M2585.5,-1531.91C2585.5,-1523.65 2585.5,-1514.86 2585.5,-1506.3"/>
+<polygon fill="black" stroke="black" points="2589,-1506.02 2585.5,-1496.02 2582,-1506.02 2589,-1506.02"/>
+</g>
+<!-- 6 -->
+<g id="node7" class="node"><title>6</title>
+<path fill="#3a9de5" stroke="black" d="M1064.5,-1377C1064.5,-1377 958.5,-1377 958.5,-1377 952.5,-1377 946.5,-1371 946.5,-1365 946.5,-1365 946.5,-1306 946.5,-1306 946.5,-1300 952.5,-1294 958.5,-1294 958.5,-1294 1064.5,-1294 1064.5,-1294 1070.5,-1294 1076.5,-1300 1076.5,-1306 1076.5,-1306 1076.5,-1365 1076.5,-1365 1076.5,-1371 1070.5,-1377 1064.5,-1377"/>
+<text text-anchor="start" x="970" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ -0.69</text>
+<text text-anchor="start" x="974" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
+<text text-anchor="start" x="960" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9549</text>
+<text text-anchor="start" x="954.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [33, 9516]</text>
+<text text-anchor="start" x="982.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 5->6 -->
+<g id="edge6" class="edge"><title>5->6</title>
+<path fill="none" stroke="black" d="M1280.31,-1430.66C1224.56,-1411.13 1144.34,-1383.03 1086.05,-1362.61"/>
+<polygon fill="black" stroke="black" points="1087.12,-1359.28 1076.53,-1359.28 1084.81,-1365.89 1087.12,-1359.28"/>
+</g>
+<!-- 35 -->
+<g id="node36" class="node"><title>35</title>
+<path fill="#64b2eb" stroke="black" d="M1397,-1377C1397,-1377 1294,-1377 1294,-1377 1288,-1377 1282,-1371 1282,-1365 1282,-1365 1282,-1306 1282,-1306 1282,-1300 1288,-1294 1294,-1294 1294,-1294 1397,-1294 1397,-1294 1403,-1294 1409,-1300 1409,-1306 1409,-1306 1409,-1365 1409,-1365 1409,-1371 1403,-1377 1397,-1377"/>
+<text text-anchor="start" x="1290" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="1308" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.292</text>
+<text text-anchor="start" x="1298" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 169</text>
+<text text-anchor="start" x="1292.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 139]</text>
+<text text-anchor="start" x="1316.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 5->35 -->
+<g id="edge35" class="edge"><title>5->35</title>
+<path fill="none" stroke="black" d="M1345.5,-1412.91C1345.5,-1404.65 1345.5,-1395.86 1345.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="1349,-1387.02 1345.5,-1377.02 1342,-1387.02 1349,-1387.02"/>
+</g>
+<!-- 7 -->
+<g id="node8" class="node"><title>7</title>
+<path fill="#42a2e6" stroke="black" d="M897,-1258C897,-1258 706,-1258 706,-1258 700,-1258 694,-1252 694,-1246 694,-1246 694,-1187 694,-1187 694,-1181 700,-1175 706,-1175 706,-1175 897,-1175 897,-1175 903,-1175 909,-1181 909,-1187 909,-1187 909,-1246 909,-1246 909,-1252 903,-1258 897,-1258"/>
+<text text-anchor="start" x="702" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ -0.094</text>
+<text text-anchor="start" x="764" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.084</text>
+<text text-anchor="start" x="754" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 747</text>
+<text text-anchor="start" x="748.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [33, 714]</text>
+<text text-anchor="start" x="772.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 6->7 -->
+<g id="edge7" class="edge"><title>6->7</title>
+<path fill="none" stroke="black" d="M946.493,-1298.28C926.467,-1287.12 904.158,-1274.7 883.162,-1263"/>
+<polygon fill="black" stroke="black" points="884.693,-1259.84 874.254,-1258.03 881.286,-1265.96 884.693,-1259.84"/>
+</g>
+<!-- 34 -->
+<g id="node35" class="node"><title>34</title>
+<path fill="#399de5" stroke="black" d="M1060.5,-1250.5C1060.5,-1250.5 962.5,-1250.5 962.5,-1250.5 956.5,-1250.5 950.5,-1244.5 950.5,-1238.5 950.5,-1238.5 950.5,-1194.5 950.5,-1194.5 950.5,-1188.5 956.5,-1182.5 962.5,-1182.5 962.5,-1182.5 1060.5,-1182.5 1060.5,-1182.5 1066.5,-1182.5 1072.5,-1188.5 1072.5,-1194.5 1072.5,-1194.5 1072.5,-1238.5 1072.5,-1238.5 1072.5,-1244.5 1066.5,-1250.5 1060.5,-1250.5"/>
+<text text-anchor="start" x="982.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="960" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8802</text>
+<text text-anchor="start" x="958.5" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 8802]</text>
+<text text-anchor="start" x="982.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 6->34 -->
+<g id="edge34" class="edge"><title>6->34</title>
+<path fill="none" stroke="black" d="M1011.5,-1293.91C1011.5,-1283.2 1011.5,-1271.62 1011.5,-1260.78"/>
+<polygon fill="black" stroke="black" points="1015,-1260.67 1011.5,-1250.67 1008,-1260.67 1015,-1260.67"/>
+</g>
+<!-- 8 -->
+<g id="node9" class="node"><title>8</title>
+<path fill="#a7d3f3" stroke="black" d="M648,-1139C648,-1139 471,-1139 471,-1139 465,-1139 459,-1133 459,-1127 459,-1127 459,-1068 459,-1068 459,-1062 465,-1056 471,-1056 471,-1056 648,-1056 648,-1056 654,-1056 660,-1062 660,-1068 660,-1068 660,-1127 660,-1127 660,-1133 654,-1139 648,-1139"/>
+<text text-anchor="start" x="467" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ 1.536</text>
+<text text-anchor="start" x="522" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.459</text>
+<text text-anchor="start" x="516" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 56</text>
+<text text-anchor="start" x="511" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [20, 36]</text>
+<text text-anchor="start" x="530.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 7->8 -->
+<g id="edge8" class="edge"><title>7->8</title>
+<path fill="none" stroke="black" d="M717.539,-1174.91C696.516,-1164.74 673.842,-1153.78 652.412,-1143.42"/>
+<polygon fill="black" stroke="black" points="653.839,-1140.22 643.312,-1139.02 650.792,-1146.52 653.839,-1140.22"/>
+</g>
+<!-- 19 -->
+<g id="node20" class="node"><title>19</title>
+<path fill="#3d9fe5" stroke="black" d="M900.5,-1139C900.5,-1139 702.5,-1139 702.5,-1139 696.5,-1139 690.5,-1133 690.5,-1127 690.5,-1127 690.5,-1068 690.5,-1068 690.5,-1062 696.5,-1056 702.5,-1056 702.5,-1056 900.5,-1056 900.5,-1056 906.5,-1056 912.5,-1062 912.5,-1068 912.5,-1068 912.5,-1127 912.5,-1127 912.5,-1133 906.5,-1139 900.5,-1139"/>
+<text text-anchor="start" x="698.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ -0.69</text>
+<text text-anchor="start" x="764" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.037</text>
+<text text-anchor="start" x="754" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 691</text>
+<text text-anchor="start" x="748.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13, 678]</text>
+<text text-anchor="start" x="772.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 7->19 -->
+<g id="edge19" class="edge"><title>7->19</title>
+<path fill="none" stroke="black" d="M801.5,-1174.91C801.5,-1166.65 801.5,-1157.86 801.5,-1149.3"/>
+<polygon fill="black" stroke="black" points="805,-1149.02 801.5,-1139.02 798,-1149.02 805,-1149.02"/>
+</g>
+<!-- 9 -->
+<g id="node10" class="node"><title>9</title>
+<path fill="#f2c09c" stroke="black" d="M477,-1020C477,-1020 304,-1020 304,-1020 298,-1020 292,-1014 292,-1008 292,-1008 292,-949 292,-949 292,-943 298,-937 304,-937 304,-937 477,-937 477,-937 483,-937 489,-943 489,-949 489,-949 489,-1008 489,-1008 489,-1014 483,-1020 477,-1020"/>
+<text text-anchor="start" x="300" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -1.017</text>
+<text text-anchor="start" x="353" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="347" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 30</text>
+<text text-anchor="start" x="342" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [20, 10]</text>
+<text text-anchor="start" x="361.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 8->9 -->
+<g id="edge9" class="edge"><title>8->9</title>
+<path fill="none" stroke="black" d="M500.866,-1055.91C486.84,-1046.2 471.762,-1035.76 457.394,-1025.81"/>
+<polygon fill="black" stroke="black" points="459.244,-1022.84 449.03,-1020.02 455.26,-1028.59 459.244,-1022.84"/>
+</g>
+<!-- 18 -->
+<g id="node19" class="node"><title>18</title>
+<path fill="#399de5" stroke="black" d="M600,-1012.5C600,-1012.5 519,-1012.5 519,-1012.5 513,-1012.5 507,-1006.5 507,-1000.5 507,-1000.5 507,-956.5 507,-956.5 507,-950.5 513,-944.5 519,-944.5 519,-944.5 600,-944.5 600,-944.5 606,-944.5 612,-950.5 612,-956.5 612,-956.5 612,-1000.5 612,-1000.5 612,-1006.5 606,-1012.5 600,-1012.5"/>
+<text text-anchor="start" x="530.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="516" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 26</text>
+<text text-anchor="start" x="515" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 26]</text>
+<text text-anchor="start" x="530.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 8->18 -->
+<g id="edge18" class="edge"><title>8->18</title>
+<path fill="none" stroke="black" d="M559.5,-1055.91C559.5,-1045.2 559.5,-1033.62 559.5,-1022.78"/>
+<polygon fill="black" stroke="black" points="563,-1022.67 559.5,-1012.67 556,-1022.67 563,-1022.67"/>
+</g>
+<!-- 10 -->
+<g id="node11" class="node"><title>10</title>
+<path fill="#91c9f1" stroke="black" d="M309,-901C309,-901 130,-901 130,-901 124,-901 118,-895 118,-889 118,-889 118,-830 118,-830 118,-824 124,-818 130,-818 130,-818 309,-818 309,-818 315,-818 321,-824 321,-830 321,-830 321,-889 321,-889 321,-895 315,-901 309,-901"/>
+<text text-anchor="start" x="126" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ -0.336</text>
+<text text-anchor="start" x="182" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.426</text>
+<text text-anchor="start" x="176" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13</text>
+<text text-anchor="start" x="179" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 9]</text>
+<text text-anchor="start" x="190.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 9->10 -->
+<g id="edge10" class="edge"><title>9->10</title>
+<path fill="none" stroke="black" d="M331.172,-936.907C316.98,-927.197 301.724,-916.758 287.186,-906.811"/>
+<polygon fill="black" stroke="black" points="288.952,-903.779 278.723,-901.021 284.999,-909.556 288.952,-903.779"/>
+</g>
+<!-- 15 -->
+<g id="node16" class="node"><title>15</title>
+<path fill="#e78945" stroke="black" d="M454,-901C454,-901 351,-901 351,-901 345,-901 339,-895 339,-889 339,-889 339,-830 339,-830 339,-824 345,-818 351,-818 351,-818 454,-818 454,-818 460,-818 466,-824 466,-830 466,-830 466,-889 466,-889 466,-895 460,-901 454,-901"/>
+<text text-anchor="start" x="347" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="365" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.111</text>
+<text text-anchor="start" x="359" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 17</text>
+<text text-anchor="start" x="358" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [16, 1]</text>
+<text text-anchor="start" x="373.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 9->15 -->
+<g id="edge15" class="edge"><title>9->15</title>
+<path fill="none" stroke="black" d="M394.663,-936.907C395.52,-928.558 396.431,-919.671 397.318,-911.02"/>
+<polygon fill="black" stroke="black" points="400.805,-911.326 398.344,-901.021 393.842,-910.611 400.805,-911.326"/>
+</g>
+<!-- 11 -->
+<g id="node12" class="node"><title>11</title>
+<path fill="#f2c09c" stroke="black" d="M157,-782C157,-782 54,-782 54,-782 48,-782 42,-776 42,-770 42,-770 42,-711 42,-711 42,-705 48,-699 54,-699 54,-699 157,-699 157,-699 163,-699 169,-705 169,-711 169,-711 169,-770 169,-770 169,-776 163,-782 157,-782"/>
+<text text-anchor="start" x="50" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="68" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="66" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="65" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
+<text text-anchor="start" x="76.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 10->11 -->
+<g id="edge11" class="edge"><title>10->11</title>
+<path fill="none" stroke="black" d="M179.948,-817.907C170.929,-808.651 161.265,-798.732 151.986,-789.209"/>
+<polygon fill="black" stroke="black" points="154.467,-786.741 144.982,-782.021 149.454,-791.626 154.467,-786.741"/>
+</g>
+<!-- 14 -->
+<g id="node15" class="node"><title>14</title>
+<path fill="#399de5" stroke="black" d="M272,-774.5C272,-774.5 199,-774.5 199,-774.5 193,-774.5 187,-768.5 187,-762.5 187,-762.5 187,-718.5 187,-718.5 187,-712.5 193,-706.5 199,-706.5 199,-706.5 272,-706.5 272,-706.5 278,-706.5 284,-712.5 284,-718.5 284,-718.5 284,-762.5 284,-762.5 284,-768.5 278,-774.5 272,-774.5"/>
+<text text-anchor="start" x="206.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="196" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="195" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 7]</text>
+<text text-anchor="start" x="206.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 10->14 -->
+<g id="edge14" class="edge"><title>10->14</title>
+<path fill="none" stroke="black" d="M225.051,-817.907C226.515,-807.204 228.1,-795.615 229.582,-784.776"/>
+<polygon fill="black" stroke="black" points="233.077,-785.049 230.964,-774.667 226.142,-784.1 233.077,-785.049"/>
+</g>
+<!-- 12 -->
+<g id="node13" class="node"><title>12</title>
+<path fill="#e58139" stroke="black" d="M85,-655.5C85,-655.5 12,-655.5 12,-655.5 6,-655.5 0,-649.5 0,-643.5 0,-643.5 0,-599.5 0,-599.5 0,-593.5 6,-587.5 12,-587.5 12,-587.5 85,-587.5 85,-587.5 91,-587.5 97,-593.5 97,-599.5 97,-599.5 97,-643.5 97,-643.5 97,-649.5 91,-655.5 85,-655.5"/>
+<text text-anchor="start" x="19.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="9" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="8" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
+<text text-anchor="start" x="19.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 11->12 -->
+<g id="edge12" class="edge"><title>11->12</title>
+<path fill="none" stroke="black" d="M85.7241,-698.907C80.3484,-687.873 74.5143,-675.898 69.0944,-664.773"/>
+<polygon fill="black" stroke="black" points="72.1845,-663.124 64.6583,-655.667 65.8915,-666.19 72.1845,-663.124"/>
+</g>
+<!-- 13 -->
+<g id="node14" class="node"><title>13</title>
+<path fill="#399de5" stroke="black" d="M200,-655.5C200,-655.5 127,-655.5 127,-655.5 121,-655.5 115,-649.5 115,-643.5 115,-643.5 115,-599.5 115,-599.5 115,-593.5 121,-587.5 127,-587.5 127,-587.5 200,-587.5 200,-587.5 206,-587.5 212,-593.5 212,-599.5 212,-599.5 212,-643.5 212,-643.5 212,-649.5 206,-655.5 200,-655.5"/>
+<text text-anchor="start" x="134.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="124" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="123" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="134.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 11->13 -->
+<g id="edge13" class="edge"><title>11->13</title>
+<path fill="none" stroke="black" d="M125.623,-698.907C131.093,-687.873 137.029,-675.898 142.544,-664.773"/>
+<polygon fill="black" stroke="black" points="145.753,-666.181 147.058,-655.667 139.481,-663.072 145.753,-666.181"/>
+</g>
+<!-- 16 -->
+<g id="node17" class="node"><title>16</title>
+<path fill="#e58139" stroke="black" d="M411,-774.5C411,-774.5 330,-774.5 330,-774.5 324,-774.5 318,-768.5 318,-762.5 318,-762.5 318,-718.5 318,-718.5 318,-712.5 324,-706.5 330,-706.5 330,-706.5 411,-706.5 411,-706.5 417,-706.5 423,-712.5 423,-718.5 423,-718.5 423,-762.5 423,-762.5 423,-768.5 417,-774.5 411,-774.5"/>
+<text text-anchor="start" x="341.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="327" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 16</text>
+<text text-anchor="start" x="326" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [16, 0]</text>
+<text text-anchor="start" x="341.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 15->16 -->
+<g id="edge16" class="edge"><title>15->16</title>
+<path fill="none" stroke="black" d="M391.398,-817.907C388.44,-807.094 385.235,-795.376 382.245,-784.441"/>
+<polygon fill="black" stroke="black" points="385.586,-783.389 379.571,-774.667 378.834,-785.236 385.586,-783.389"/>
+</g>
+<!-- 17 -->
+<g id="node18" class="node"><title>17</title>
+<path fill="#399de5" stroke="black" d="M526,-774.5C526,-774.5 453,-774.5 453,-774.5 447,-774.5 441,-768.5 441,-762.5 441,-762.5 441,-718.5 441,-718.5 441,-712.5 447,-706.5 453,-706.5 453,-706.5 526,-706.5 526,-706.5 532,-706.5 538,-712.5 538,-718.5 538,-718.5 538,-762.5 538,-762.5 538,-768.5 532,-774.5 526,-774.5"/>
+<text text-anchor="start" x="460.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="450" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="449" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="460.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 15->17 -->
+<g id="edge17" class="edge"><title>15->17</title>
+<path fill="none" stroke="black" d="M432.684,-817.907C441.136,-806.542 450.329,-794.178 458.809,-782.774"/>
+<polygon fill="black" stroke="black" points="461.679,-784.78 464.837,-774.667 456.062,-780.603 461.679,-784.78"/>
+</g>
+<!-- 20 -->
+<g id="node21" class="node"><title>20</title>
+<path fill="#3c9ee5" stroke="black" d="M842.5,-1020C842.5,-1020 642.5,-1020 642.5,-1020 636.5,-1020 630.5,-1014 630.5,-1008 630.5,-1008 630.5,-949 630.5,-949 630.5,-943 636.5,-937 642.5,-937 642.5,-937 842.5,-937 842.5,-937 848.5,-937 854.5,-943 854.5,-949 854.5,-949 854.5,-1008 854.5,-1008 854.5,-1014 848.5,-1020 842.5,-1020"/>
+<text text-anchor="start" x="638.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.56</text>
+<text text-anchor="start" x="705" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.026</text>
+<text text-anchor="start" x="695" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 684</text>
+<text text-anchor="start" x="694" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 675]</text>
+<text text-anchor="start" x="713.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 19->20 -->
+<g id="edge20" class="edge"><title>19->20</title>
+<path fill="none" stroke="black" d="M781.03,-1055.91C776.683,-1047.29 772.046,-1038.09 767.55,-1029.17"/>
+<polygon fill="black" stroke="black" points="770.561,-1027.37 762.934,-1020.02 764.311,-1030.53 770.561,-1027.37"/>
+</g>
+<!-- 31 -->
+<g id="node32" class="node"><title>31</title>
+<path fill="#f8e0ce" stroke="black" d="M1120.5,-1020C1120.5,-1020 884.5,-1020 884.5,-1020 878.5,-1020 872.5,-1014 872.5,-1008 872.5,-1008 872.5,-949 872.5,-949 872.5,-943 878.5,-937 884.5,-937 884.5,-937 1120.5,-937 1120.5,-937 1126.5,-937 1132.5,-943 1132.5,-949 1132.5,-949 1132.5,-1008 1132.5,-1008 1132.5,-1014 1126.5,-1020 1120.5,-1020"/>
+<text text-anchor="start" x="880.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 0.138</text>
+<text text-anchor="start" x="969" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.49</text>
+<text text-anchor="start" x="963" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="962" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 3]</text>
+<text text-anchor="start" x="973.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 19->31 -->
+<g id="edge31" class="edge"><title>19->31</title>
+<path fill="none" stroke="black" d="M871.236,-1055.91C888.23,-1046.02 906.522,-1035.37 923.897,-1025.25"/>
+<polygon fill="black" stroke="black" points="926.006,-1028.08 932.887,-1020.02 922.484,-1022.03 926.006,-1028.08"/>
+</g>
+<!-- 21 -->
+<g id="node22" class="node"><title>21</title>
+<path fill="#399de5" stroke="black" d="M598,-893.5C598,-893.5 509,-893.5 509,-893.5 503,-893.5 497,-887.5 497,-881.5 497,-881.5 497,-837.5 497,-837.5 497,-831.5 503,-825.5 509,-825.5 509,-825.5 598,-825.5 598,-825.5 604,-825.5 610,-831.5 610,-837.5 610,-837.5 610,-881.5 610,-881.5 610,-887.5 604,-893.5 598,-893.5"/>
+<text text-anchor="start" x="524.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="506" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 602</text>
+<text text-anchor="start" x="505" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 602]</text>
+<text text-anchor="start" x="524.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 20->21 -->
+<g id="edge21" class="edge"><title>20->21</title>
+<path fill="none" stroke="black" d="M676.927,-936.907C657.053,-924.604 635.288,-911.131 615.645,-898.971"/>
+<polygon fill="black" stroke="black" points="617.422,-895.955 607.077,-893.667 613.738,-901.906 617.422,-895.955"/>
+</g>
+<!-- 22 -->
+<g id="node23" class="node"><title>22</title>
+<path fill="#51a9e8" stroke="black" d="M844.5,-901C844.5,-901 640.5,-901 640.5,-901 634.5,-901 628.5,-895 628.5,-889 628.5,-889 628.5,-830 628.5,-830 628.5,-824 634.5,-818 640.5,-818 640.5,-818 844.5,-818 844.5,-818 850.5,-818 856.5,-824 856.5,-830 856.5,-830 856.5,-889 856.5,-889 856.5,-895 850.5,-901 844.5,-901"/>
+<text text-anchor="start" x="636.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ 1.245</text>
+<text text-anchor="start" x="705" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.195</text>
+<text text-anchor="start" x="699" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 82</text>
+<text text-anchor="start" x="698" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 73]</text>
+<text text-anchor="start" x="713.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 20->22 -->
+<g id="edge22" class="edge"><title>20->22</title>
+<path fill="none" stroke="black" d="M742.5,-936.907C742.5,-928.649 742.5,-919.864 742.5,-911.302"/>
+<polygon fill="black" stroke="black" points="746,-911.021 742.5,-901.021 739,-911.021 746,-911.021"/>
+</g>
+<!-- 23 -->
+<g id="node24" class="node"><title>23</title>
+<path fill="#e58139" stroke="black" d="M711,-774.5C711,-774.5 638,-774.5 638,-774.5 632,-774.5 626,-768.5 626,-762.5 626,-762.5 626,-718.5 626,-718.5 626,-712.5 632,-706.5 638,-706.5 638,-706.5 711,-706.5 711,-706.5 717,-706.5 723,-712.5 723,-718.5 723,-718.5 723,-762.5 723,-762.5 723,-768.5 717,-774.5 711,-774.5"/>
+<text text-anchor="start" x="645.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="635" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="634" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 0]</text>
+<text text-anchor="start" x="645.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 22->23 -->
+<g id="edge23" class="edge"><title>22->23</title>
+<path fill="none" stroke="black" d="M718.908,-817.907C712.43,-806.763 705.395,-794.658 698.875,-783.439"/>
+<polygon fill="black" stroke="black" points="701.828,-781.554 693.777,-774.667 695.775,-785.072 701.828,-781.554"/>
+</g>
+<!-- 24 -->
+<g id="node25" class="node"><title>24</title>
+<path fill="#3ea0e6" stroke="black" d="M867.5,-782C867.5,-782 753.5,-782 753.5,-782 747.5,-782 741.5,-776 741.5,-770 741.5,-770 741.5,-711 741.5,-711 741.5,-705 747.5,-699 753.5,-699 753.5,-699 867.5,-699 867.5,-699 873.5,-699 879.5,-705 879.5,-711 879.5,-711 879.5,-770 879.5,-770 879.5,-776 873.5,-782 867.5,-782"/>
+<text text-anchor="start" x="749.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">serror_rate ≤ 1.037</text>
+<text text-anchor="start" x="773" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.052</text>
+<text text-anchor="start" x="767" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 75</text>
+<text text-anchor="start" x="766" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 73]</text>
+<text text-anchor="start" x="781.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 22->24 -->
+<g id="edge24" class="edge"><title>22->24</title>
+<path fill="none" stroke="black" d="M766.092,-817.907C771.156,-809.195 776.56,-799.897 781.793,-790.893"/>
+<polygon fill="black" stroke="black" points="784.951,-792.425 786.949,-782.021 778.898,-788.908 784.951,-792.425"/>
+</g>
+<!-- 25 -->
+<g id="node26" class="node"><title>25</title>
+<path fill="#e58139" stroke="black" d="M762,-655.5C762,-655.5 689,-655.5 689,-655.5 683,-655.5 677,-649.5 677,-643.5 677,-643.5 677,-599.5 677,-599.5 677,-593.5 683,-587.5 689,-587.5 689,-587.5 762,-587.5 762,-587.5 768,-587.5 774,-593.5 774,-599.5 774,-599.5 774,-643.5 774,-643.5 774,-649.5 768,-655.5 762,-655.5"/>
+<text text-anchor="start" x="696.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="686" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="685" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="696.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 24->25 -->
+<g id="edge25" class="edge"><title>24->25</title>
+<path fill="none" stroke="black" d="M781.01,-698.907C772.753,-687.542 763.771,-675.178 755.485,-663.774"/>
+<polygon fill="black" stroke="black" points="758.305,-661.7 749.596,-655.667 752.642,-665.814 758.305,-661.7"/>
+</g>
+<!-- 26 -->
+<g id="node27" class="node"><title>26</title>
+<path fill="#3c9ee5" stroke="black" d="M986.5,-663C986.5,-663 804.5,-663 804.5,-663 798.5,-663 792.5,-657 792.5,-651 792.5,-651 792.5,-592 792.5,-592 792.5,-586 798.5,-580 804.5,-580 804.5,-580 986.5,-580 986.5,-580 992.5,-580 998.5,-586 998.5,-592 998.5,-592 998.5,-651 998.5,-651 998.5,-657 992.5,-663 986.5,-663"/>
+<text text-anchor="start" x="800.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ -0.586</text>
+<text text-anchor="start" x="858" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.027</text>
+<text text-anchor="start" x="852" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 74</text>
+<text text-anchor="start" x="851" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 73]</text>
+<text text-anchor="start" x="866.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 24->26 -->
+<g id="edge26" class="edge"><title>24->26</title>
+<path fill="none" stroke="black" d="M839.99,-698.907C846.451,-690.014 853.357,-680.509 860.024,-671.331"/>
+<polygon fill="black" stroke="black" points="863.016,-673.168 866.062,-663.021 857.353,-669.054 863.016,-673.168"/>
+</g>
+<!-- 27 -->
+<g id="node28" class="node"><title>27</title>
+<path fill="#9ccef2" stroke="black" d="M901,-544C901,-544 714,-544 714,-544 708,-544 702,-538 702,-532 702,-532 702,-473 702,-473 702,-467 708,-461 714,-461 714,-461 901,-461 901,-461 907,-461 913,-467 913,-473 913,-473 913,-532 913,-532 913,-538 907,-544 901,-544"/>
+<text text-anchor="start" x="710" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 2.497</text>
+<text text-anchor="start" x="770" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="768" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="767" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
+<text text-anchor="start" x="778.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 26->27 -->
+<g id="edge27" class="edge"><title>26->27</title>
+<path fill="none" stroke="black" d="M864.969,-579.907C858.211,-570.923 850.985,-561.315 844.016,-552.05"/>
+<polygon fill="black" stroke="black" points="846.785,-549.909 837.977,-544.021 841.191,-554.116 846.785,-549.909"/>
+</g>
+<!-- 30 -->
+<g id="node31" class="node"><title>30</title>
+<path fill="#399de5" stroke="black" d="M1024,-536.5C1024,-536.5 943,-536.5 943,-536.5 937,-536.5 931,-530.5 931,-524.5 931,-524.5 931,-480.5 931,-480.5 931,-474.5 937,-468.5 943,-468.5 943,-468.5 1024,-468.5 1024,-468.5 1030,-468.5 1036,-474.5 1036,-480.5 1036,-480.5 1036,-524.5 1036,-524.5 1036,-530.5 1030,-536.5 1024,-536.5"/>
+<text text-anchor="start" x="954.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="940" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 71</text>
+<text text-anchor="start" x="939" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 71]</text>
+<text text-anchor="start" x="954.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 26->30 -->
+<g id="edge30" class="edge"><title>26->30</title>
+<path fill="none" stroke="black" d="M926.031,-579.907C934.58,-568.542 943.879,-556.178 952.456,-544.774"/>
+<polygon fill="black" stroke="black" points="955.34,-546.763 958.554,-536.667 949.746,-542.555 955.34,-546.763"/>
+</g>
+<!-- 28 -->
+<g id="node29" class="node"><title>28</title>
+<path fill="#e58139" stroke="black" d="M787,-417.5C787,-417.5 714,-417.5 714,-417.5 708,-417.5 702,-411.5 702,-405.5 702,-405.5 702,-361.5 702,-361.5 702,-355.5 708,-349.5 714,-349.5 714,-349.5 787,-349.5 787,-349.5 793,-349.5 799,-355.5 799,-361.5 799,-361.5 799,-405.5 799,-405.5 799,-411.5 793,-417.5 787,-417.5"/>
+<text text-anchor="start" x="721.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="711" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="710" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="721.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 27->28 -->
+<g id="edge28" class="edge"><title>27->28</title>
+<path fill="none" stroke="black" d="M787.724,-460.907C782.348,-449.873 776.514,-437.898 771.094,-426.773"/>
+<polygon fill="black" stroke="black" points="774.184,-425.124 766.658,-417.667 767.892,-428.19 774.184,-425.124"/>
+</g>
+<!-- 29 -->
+<g id="node30" class="node"><title>29</title>
+<path fill="#399de5" stroke="black" d="M902,-417.5C902,-417.5 829,-417.5 829,-417.5 823,-417.5 817,-411.5 817,-405.5 817,-405.5 817,-361.5 817,-361.5 817,-355.5 823,-349.5 829,-349.5 829,-349.5 902,-349.5 902,-349.5 908,-349.5 914,-355.5 914,-361.5 914,-361.5 914,-405.5 914,-405.5 914,-411.5 908,-417.5 902,-417.5"/>
+<text text-anchor="start" x="836.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="826" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="825" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="836.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 27->29 -->
+<g id="edge29" class="edge"><title>27->29</title>
+<path fill="none" stroke="black" d="M827.623,-460.907C833.093,-449.873 839.029,-437.898 844.544,-426.773"/>
+<polygon fill="black" stroke="black" points="847.753,-428.181 849.058,-417.667 841.481,-425.072 847.753,-428.181"/>
+</g>
+<!-- 32 -->
+<g id="node33" class="node"><title>32</title>
+<path fill="#e58139" stroke="black" d="M960,-893.5C960,-893.5 887,-893.5 887,-893.5 881,-893.5 875,-887.5 875,-881.5 875,-881.5 875,-837.5 875,-837.5 875,-831.5 881,-825.5 887,-825.5 887,-825.5 960,-825.5 960,-825.5 966,-825.5 972,-831.5 972,-837.5 972,-837.5 972,-881.5 972,-881.5 972,-887.5 966,-893.5 960,-893.5"/>
+<text text-anchor="start" x="894.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="884" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="883" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
+<text text-anchor="start" x="894.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 31->32 -->
+<g id="edge32" class="edge"><title>31->32</title>
+<path fill="none" stroke="black" d="M975.091,-936.907C967.492,-925.652 959.231,-913.418 951.593,-902.106"/>
+<polygon fill="black" stroke="black" points="954.391,-899.996 945.895,-893.667 948.59,-903.913 954.391,-899.996"/>
+</g>
+<!-- 33 -->
+<g id="node34" class="node"><title>33</title>
+<path fill="#399de5" stroke="black" d="M1075,-893.5C1075,-893.5 1002,-893.5 1002,-893.5 996,-893.5 990,-887.5 990,-881.5 990,-881.5 990,-837.5 990,-837.5 990,-831.5 996,-825.5 1002,-825.5 1002,-825.5 1075,-825.5 1075,-825.5 1081,-825.5 1087,-831.5 1087,-837.5 1087,-837.5 1087,-881.5 1087,-881.5 1087,-887.5 1081,-893.5 1075,-893.5"/>
+<text text-anchor="start" x="1009.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="999" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="998" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="1009.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 31->33 -->
+<g id="edge33" class="edge"><title>31->33</title>
+<path fill="none" stroke="black" d="M1014.99,-936.907C1018.32,-926.094 1021.92,-914.376 1025.29,-903.441"/>
+<polygon fill="black" stroke="black" points="1028.7,-904.254 1028.29,-893.667 1022.01,-902.195 1028.7,-904.254"/>
+</g>
+<!-- 36 -->
+<g id="node37" class="node"><title>36</title>
+<path fill="#e89050" stroke="black" d="M1331.5,-1258C1331.5,-1258 1125.5,-1258 1125.5,-1258 1119.5,-1258 1113.5,-1252 1113.5,-1246 1113.5,-1246 1113.5,-1187 1113.5,-1187 1113.5,-1181 1119.5,-1175 1125.5,-1175 1125.5,-1175 1331.5,-1175 1331.5,-1175 1337.5,-1175 1343.5,-1181 1343.5,-1187 1343.5,-1187 1343.5,-1246 1343.5,-1246 1343.5,-1252 1337.5,-1258 1331.5,-1258"/>
+<text text-anchor="start" x="1121.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ -1.124</text>
+<text text-anchor="start" x="1191" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.185</text>
+<text text-anchor="start" x="1185" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 29</text>
+<text text-anchor="start" x="1184" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [26, 3]</text>
+<text text-anchor="start" x="1199.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 35->36 -->
+<g id="edge36" class="edge"><title>35->36</title>
+<path fill="none" stroke="black" d="M1304.91,-1293.91C1295.65,-1284.65 1285.73,-1274.73 1276.21,-1265.21"/>
+<polygon fill="black" stroke="black" points="1278.57,-1262.62 1269.02,-1258.02 1273.62,-1267.57 1278.57,-1262.62"/>
+</g>
+<!-- 39 -->
+<g id="node40" class="node"><title>39</title>
+<path fill="#3fa0e6" stroke="black" d="M1551,-1258C1551,-1258 1374,-1258 1374,-1258 1368,-1258 1362,-1252 1362,-1246 1362,-1246 1362,-1187 1362,-1187 1362,-1181 1368,-1175 1374,-1175 1374,-1175 1551,-1175 1551,-1175 1557,-1175 1563,-1181 1563,-1187 1563,-1187 1563,-1246 1563,-1246 1563,-1252 1557,-1258 1551,-1258"/>
+<text text-anchor="start" x="1370" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ 0.301</text>
+<text text-anchor="start" x="1425" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.056</text>
+<text text-anchor="start" x="1415" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 140</text>
+<text text-anchor="start" x="1414" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 136]</text>
+<text text-anchor="start" x="1433.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 35->39 -->
+<g id="edge39" class="edge"><title>35->39</title>
+<path fill="none" stroke="black" d="M1386.09,-1293.91C1395.35,-1284.65 1405.27,-1274.73 1414.79,-1265.21"/>
+<polygon fill="black" stroke="black" points="1417.38,-1267.57 1421.98,-1258.02 1412.43,-1262.62 1417.38,-1267.57"/>
+</g>
+<!-- 37 -->
+<g id="node38" class="node"><title>37</title>
+<path fill="#399de5" stroke="black" d="M1156,-1131.5C1156,-1131.5 1083,-1131.5 1083,-1131.5 1077,-1131.5 1071,-1125.5 1071,-1119.5 1071,-1119.5 1071,-1075.5 1071,-1075.5 1071,-1069.5 1077,-1063.5 1083,-1063.5 1083,-1063.5 1156,-1063.5 1156,-1063.5 1162,-1063.5 1168,-1069.5 1168,-1075.5 1168,-1075.5 1168,-1119.5 1168,-1119.5 1168,-1125.5 1162,-1131.5 1156,-1131.5"/>
+<text text-anchor="start" x="1090.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1080" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="1079" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="1090.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 36->37 -->
+<g id="edge37" class="edge"><title>36->37</title>
+<path fill="none" stroke="black" d="M1190.68,-1174.91C1179.89,-1163.32 1168.13,-1150.7 1157.33,-1139.11"/>
+<polygon fill="black" stroke="black" points="1159.78,-1136.6 1150.4,-1131.67 1154.65,-1141.37 1159.78,-1136.6"/>
+</g>
+<!-- 38 -->
+<g id="node39" class="node"><title>38</title>
+<path fill="#e58139" stroke="black" d="M1279,-1131.5C1279,-1131.5 1198,-1131.5 1198,-1131.5 1192,-1131.5 1186,-1125.5 1186,-1119.5 1186,-1119.5 1186,-1075.5 1186,-1075.5 1186,-1069.5 1192,-1063.5 1198,-1063.5 1198,-1063.5 1279,-1063.5 1279,-1063.5 1285,-1063.5 1291,-1069.5 1291,-1075.5 1291,-1075.5 1291,-1119.5 1291,-1119.5 1291,-1125.5 1285,-1131.5 1279,-1131.5"/>
+<text text-anchor="start" x="1209.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1195" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 26</text>
+<text text-anchor="start" x="1194" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [26, 0]</text>
+<text text-anchor="start" x="1209.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 36->38 -->
+<g id="edge38" class="edge"><title>36->38</title>
+<path fill="none" stroke="black" d="M1231.97,-1174.91C1232.88,-1164.2 1233.87,-1152.62 1234.8,-1141.78"/>
+<polygon fill="black" stroke="black" points="1238.3,-1141.93 1235.67,-1131.67 1231.33,-1141.33 1238.3,-1141.93"/>
+</g>
+<!-- 40 -->
+<g id="node41" class="node"><title>40</title>
+<path fill="#3c9ee5" stroke="black" d="M1557,-1139C1557,-1139 1330,-1139 1330,-1139 1324,-1139 1318,-1133 1318,-1127 1318,-1127 1318,-1068 1318,-1068 1318,-1062 1324,-1056 1330,-1056 1330,-1056 1557,-1056 1557,-1056 1563,-1056 1569,-1062 1569,-1068 1569,-1068 1569,-1127 1569,-1127 1569,-1133 1563,-1139 1557,-1139"/>
+<text text-anchor="start" x="1326" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ -0.152</text>
+<text text-anchor="start" x="1406" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.029</text>
+<text text-anchor="start" x="1396" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 138</text>
+<text text-anchor="start" x="1395" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 136]</text>
+<text text-anchor="start" x="1414.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 39->40 -->
+<g id="edge40" class="edge"><title>39->40</title>
+<path fill="none" stroke="black" d="M1455.91,-1174.91C1454.55,-1166.56 1453.11,-1157.67 1451.7,-1149.02"/>
+<polygon fill="black" stroke="black" points="1455.14,-1148.33 1450.08,-1139.02 1448.23,-1149.45 1455.14,-1148.33"/>
+</g>
+<!-- 47 -->
+<g id="node48" class="node"><title>47</title>
+<path fill="#e58139" stroke="black" d="M1672,-1131.5C1672,-1131.5 1599,-1131.5 1599,-1131.5 1593,-1131.5 1587,-1125.5 1587,-1119.5 1587,-1119.5 1587,-1075.5 1587,-1075.5 1587,-1069.5 1593,-1063.5 1599,-1063.5 1599,-1063.5 1672,-1063.5 1672,-1063.5 1678,-1063.5 1684,-1069.5 1684,-1075.5 1684,-1075.5 1684,-1119.5 1684,-1119.5 1684,-1125.5 1678,-1131.5 1672,-1131.5"/>
+<text text-anchor="start" x="1606.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1596" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="1595" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="1606.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 39->47 -->
+<g id="edge47" class="edge"><title>39->47</title>
+<path fill="none" stroke="black" d="M1524.14,-1174.86C1541.46,-1163.35 1560.26,-1150.75 1577.5,-1139 1578.28,-1138.47 1579.06,-1137.94 1579.85,-1137.4"/>
+<polygon fill="black" stroke="black" points="1582.14,-1140.07 1588.4,-1131.52 1578.17,-1134.3 1582.14,-1140.07"/>
+</g>
+<!-- 41 -->
+<g id="node42" class="node"><title>41</title>
+<path fill="#3a9ee5" stroke="black" d="M1382,-1020C1382,-1020 1279,-1020 1279,-1020 1273,-1020 1267,-1014 1267,-1008 1267,-1008 1267,-949 1267,-949 1267,-943 1273,-937 1279,-937 1279,-937 1382,-937 1382,-937 1388,-937 1394,-943 1394,-949 1394,-949 1394,-1008 1394,-1008 1394,-1014 1388,-1020 1382,-1020"/>
+<text text-anchor="start" x="1275" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="1293" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.014</text>
+<text text-anchor="start" x="1283" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 137</text>
+<text text-anchor="start" x="1282" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 136]</text>
+<text text-anchor="start" x="1301.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 40->41 -->
+<g id="edge41" class="edge"><title>40->41</title>
+<path fill="none" stroke="black" d="M1404.3,-1055.91C1395.44,-1046.74 1385.96,-1036.93 1376.85,-1027.49"/>
+<polygon fill="black" stroke="black" points="1379.1,-1024.78 1369.64,-1020.02 1374.07,-1029.65 1379.1,-1024.78"/>
+</g>
+<!-- 46 -->
+<g id="node47" class="node"><title>46</title>
+<path fill="#e58139" stroke="black" d="M1497,-1012.5C1497,-1012.5 1424,-1012.5 1424,-1012.5 1418,-1012.5 1412,-1006.5 1412,-1000.5 1412,-1000.5 1412,-956.5 1412,-956.5 1412,-950.5 1418,-944.5 1424,-944.5 1424,-944.5 1497,-944.5 1497,-944.5 1503,-944.5 1509,-950.5 1509,-956.5 1509,-956.5 1509,-1000.5 1509,-1000.5 1509,-1006.5 1503,-1012.5 1497,-1012.5"/>
+<text text-anchor="start" x="1431.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1421" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="1420" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="1431.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 40->46 -->
+<g id="edge46" class="edge"><title>40->46</title>
+<path fill="none" stroke="black" d="M1449.4,-1055.91C1450.95,-1045.2 1452.64,-1033.62 1454.21,-1022.78"/>
+<polygon fill="black" stroke="black" points="1457.71,-1023.07 1455.68,-1012.67 1450.78,-1022.06 1457.71,-1023.07"/>
+</g>
+<!-- 42 -->
+<g id="node43" class="node"><title>42</title>
+<path fill="#5aade9" stroke="black" d="M1290,-901C1290,-901 1117,-901 1117,-901 1111,-901 1105,-895 1105,-889 1105,-889 1105,-830 1105,-830 1105,-824 1111,-818 1117,-818 1117,-818 1290,-818 1290,-818 1296,-818 1302,-824 1302,-830 1302,-830 1302,-889 1302,-889 1302,-895 1296,-901 1290,-901"/>
+<text text-anchor="start" x="1113" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.823</text>
+<text text-anchor="start" x="1166" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
+<text text-anchor="start" x="1164" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="1163" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 6]</text>
+<text text-anchor="start" x="1174.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 41->42 -->
+<g id="edge42" class="edge"><title>41->42</title>
+<path fill="none" stroke="black" d="M1286.44,-936.907C1276.29,-927.56 1265.41,-917.538 1254.98,-907.929"/>
+<polygon fill="black" stroke="black" points="1257.21,-905.222 1247.48,-901.021 1252.47,-910.371 1257.21,-905.222"/>
+</g>
+<!-- 45 -->
+<g id="node46" class="node"><title>45</title>
+<path fill="#399de5" stroke="black" d="M1421,-893.5C1421,-893.5 1332,-893.5 1332,-893.5 1326,-893.5 1320,-887.5 1320,-881.5 1320,-881.5 1320,-837.5 1320,-837.5 1320,-831.5 1326,-825.5 1332,-825.5 1332,-825.5 1421,-825.5 1421,-825.5 1427,-825.5 1433,-831.5 1433,-837.5 1433,-837.5 1433,-881.5 1433,-881.5 1433,-887.5 1427,-893.5 1421,-893.5"/>
+<text text-anchor="start" x="1347.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1329" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 130</text>
+<text text-anchor="start" x="1328" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 130]</text>
+<text text-anchor="start" x="1347.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 41->45 -->
+<g id="edge45" class="edge"><title>41->45</title>
+<path fill="none" stroke="black" d="M1346.46,-936.907C1350.75,-925.983 1355.41,-914.137 1359.75,-903.107"/>
+<polygon fill="black" stroke="black" points="1363.06,-904.254 1363.46,-893.667 1356.54,-901.693 1363.06,-904.254"/>
+</g>
+<!-- 43 -->
+<g id="node44" class="node"><title>43</title>
+<path fill="#399de5" stroke="black" d="M1182,-774.5C1182,-774.5 1109,-774.5 1109,-774.5 1103,-774.5 1097,-768.5 1097,-762.5 1097,-762.5 1097,-718.5 1097,-718.5 1097,-712.5 1103,-706.5 1109,-706.5 1109,-706.5 1182,-706.5 1182,-706.5 1188,-706.5 1194,-712.5 1194,-718.5 1194,-718.5 1194,-762.5 1194,-762.5 1194,-768.5 1188,-774.5 1182,-774.5"/>
+<text text-anchor="start" x="1116.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1106" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="1105" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
+<text text-anchor="start" x="1116.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 42->43 -->
+<g id="edge43" class="edge"><title>42->43</title>
+<path fill="none" stroke="black" d="M1183.38,-817.907C1177.91,-806.873 1171.97,-794.898 1166.46,-783.773"/>
+<polygon fill="black" stroke="black" points="1169.52,-782.072 1161.94,-774.667 1163.25,-785.181 1169.52,-782.072"/>
+</g>
+<!-- 44 -->
+<g id="node45" class="node"><title>44</title>
+<path fill="#e58139" stroke="black" d="M1297,-774.5C1297,-774.5 1224,-774.5 1224,-774.5 1218,-774.5 1212,-768.5 1212,-762.5 1212,-762.5 1212,-718.5 1212,-718.5 1212,-712.5 1218,-706.5 1224,-706.5 1224,-706.5 1297,-706.5 1297,-706.5 1303,-706.5 1309,-712.5 1309,-718.5 1309,-718.5 1309,-762.5 1309,-762.5 1309,-768.5 1303,-774.5 1297,-774.5"/>
+<text text-anchor="start" x="1231.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1221" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="1220" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="1231.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 42->44 -->
+<g id="edge44" class="edge"><title>42->44</title>
+<path fill="none" stroke="black" d="M1223.28,-817.907C1228.65,-806.873 1234.49,-794.898 1239.91,-783.773"/>
+<polygon fill="black" stroke="black" points="1243.11,-785.19 1244.34,-774.667 1236.82,-782.124 1243.11,-785.19"/>
+</g>
+<!-- 49 -->
+<g id="node50" class="node"><title>49</title>
+<path fill="#41a1e6" stroke="black" d="M2553.5,-1377C2553.5,-1377 2317.5,-1377 2317.5,-1377 2311.5,-1377 2305.5,-1371 2305.5,-1365 2305.5,-1365 2305.5,-1306 2305.5,-1306 2305.5,-1300 2311.5,-1294 2317.5,-1294 2317.5,-1294 2553.5,-1294 2553.5,-1294 2559.5,-1294 2565.5,-1300 2565.5,-1306 2565.5,-1306 2565.5,-1365 2565.5,-1365 2565.5,-1371 2559.5,-1377 2553.5,-1377"/>
+<text text-anchor="start" x="2313.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 0.641</text>
+<text text-anchor="start" x="2398" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.077</text>
+<text text-anchor="start" x="2388" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 942</text>
+<text text-anchor="start" x="2382.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [38, 904]</text>
+<text text-anchor="start" x="2406.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 48->49 -->
+<g id="edge49" class="edge"><title>48->49</title>
+<path fill="none" stroke="black" d="M2533.46,-1412.91C2521.24,-1403.38 2508.13,-1393.15 2495.59,-1383.37"/>
+<polygon fill="black" stroke="black" points="2497.49,-1380.41 2487.45,-1377.02 2493.18,-1385.93 2497.49,-1380.41"/>
+</g>
+<!-- 80 -->
+<g id="node81" class="node"><title>80</title>
+<path fill="#e68742" stroke="black" d="M3032.5,-1377C3032.5,-1377 2904.5,-1377 2904.5,-1377 2898.5,-1377 2892.5,-1371 2892.5,-1365 2892.5,-1365 2892.5,-1306 2892.5,-1306 2892.5,-1300 2898.5,-1294 2904.5,-1294 2904.5,-1294 3032.5,-1294 3032.5,-1294 3038.5,-1294 3044.5,-1300 3044.5,-1306 3044.5,-1306 3044.5,-1365 3044.5,-1365 3044.5,-1371 3038.5,-1377 3032.5,-1377"/>
+<text text-anchor="start" x="2900.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">diff_srv_rate ≤ -0.181</text>
+<text text-anchor="start" x="2931" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.081</text>
+<text text-anchor="start" x="2921" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 212</text>
+<text text-anchor="start" x="2920" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 9]</text>
+<text text-anchor="start" x="2939.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 48->80 -->
+<g id="edge80" class="edge"><title>48->80</title>
+<path fill="none" stroke="black" d="M2700.67,-1418.32C2759.05,-1400.48 2828.75,-1379.19 2882.41,-1362.8"/>
+<polygon fill="black" stroke="black" points="2883.69,-1366.07 2892.24,-1359.8 2881.65,-1359.37 2883.69,-1366.07"/>
+</g>
+<!-- 50 -->
+<g id="node51" class="node"><title>50</title>
+<path fill="#80c0ee" stroke="black" d="M2106,-1258C2106,-1258 2017,-1258 2017,-1258 2011,-1258 2005,-1252 2005,-1246 2005,-1246 2005,-1187 2005,-1187 2005,-1181 2011,-1175 2017,-1175 2017,-1175 2106,-1175 2106,-1175 2112,-1175 2118,-1181 2118,-1187 2118,-1187 2118,-1246 2118,-1246 2118,-1252 2112,-1258 2106,-1258"/>
+<text text-anchor="start" x="2016" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ -0.707</text>
+<text text-anchor="start" x="2024" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.388</text>
+<text text-anchor="start" x="2014" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 114</text>
+<text text-anchor="start" x="2013" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 84]</text>
+<text text-anchor="start" x="2032.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 49->50 -->
+<g id="edge50" class="edge"><title>49->50</title>
+<path fill="none" stroke="black" d="M2306,-1293.99C2245.85,-1275.17 2176.91,-1253.6 2127.6,-1238.18"/>
+<polygon fill="black" stroke="black" points="2128.59,-1234.82 2118,-1235.18 2126.5,-1241.5 2128.59,-1234.82"/>
+</g>
+<!-- 59 -->
+<g id="node60" class="node"><title>59</title>
+<path fill="#3b9ee5" stroke="black" d="M2540,-1258C2540,-1258 2331,-1258 2331,-1258 2325,-1258 2319,-1252 2319,-1246 2319,-1246 2319,-1187 2319,-1187 2319,-1181 2325,-1175 2331,-1175 2331,-1175 2540,-1175 2540,-1175 2546,-1175 2552,-1181 2552,-1187 2552,-1187 2552,-1246 2552,-1246 2552,-1252 2546,-1258 2540,-1258"/>
+<text text-anchor="start" x="2327" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.605</text>
+<text text-anchor="start" x="2398" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.019</text>
+<text text-anchor="start" x="2388" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 828</text>
+<text text-anchor="start" x="2387" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8, 820]</text>
+<text text-anchor="start" x="2406.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 49->59 -->
+<g id="edge59" class="edge"><title>49->59</title>
+<path fill="none" stroke="black" d="M2435.5,-1293.91C2435.5,-1285.65 2435.5,-1276.86 2435.5,-1268.3"/>
+<polygon fill="black" stroke="black" points="2439,-1268.02 2435.5,-1258.02 2432,-1268.02 2439,-1268.02"/>
+</g>
+<!-- 51 -->
+<g id="node52" class="node"><title>51</title>
+<path fill="#eb9e67" stroke="black" d="M1929,-1139C1929,-1139 1720,-1139 1720,-1139 1714,-1139 1708,-1133 1708,-1127 1708,-1127 1708,-1068 1708,-1068 1708,-1062 1714,-1056 1720,-1056 1720,-1056 1929,-1056 1929,-1056 1935,-1056 1941,-1062 1941,-1068 1941,-1068 1941,-1127 1941,-1127 1941,-1133 1935,-1139 1929,-1139"/>
+<text text-anchor="start" x="1716" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.347</text>
+<text text-anchor="start" x="1787" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.307</text>
+<text text-anchor="start" x="1781" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 37</text>
+<text text-anchor="start" x="1780" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 7]</text>
+<text text-anchor="start" x="1795.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 50->51 -->
+<g id="edge51" class="edge"><title>50->51</title>
+<path fill="none" stroke="black" d="M2004.73,-1187.48C1978.17,-1174.36 1945.88,-1158.42 1916,-1143.67"/>
+<polygon fill="black" stroke="black" points="1917.33,-1140.42 1906.81,-1139.13 1914.23,-1146.7 1917.33,-1140.42"/>
+</g>
+<!-- 58 -->
+<g id="node59" class="node"><title>58</title>
+<path fill="#399de5" stroke="black" d="M2102,-1131.5C2102,-1131.5 2021,-1131.5 2021,-1131.5 2015,-1131.5 2009,-1125.5 2009,-1119.5 2009,-1119.5 2009,-1075.5 2009,-1075.5 2009,-1069.5 2015,-1063.5 2021,-1063.5 2021,-1063.5 2102,-1063.5 2102,-1063.5 2108,-1063.5 2114,-1069.5 2114,-1075.5 2114,-1075.5 2114,-1119.5 2114,-1119.5 2114,-1125.5 2108,-1131.5 2102,-1131.5"/>
+<text text-anchor="start" x="2032.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2018" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 77</text>
+<text text-anchor="start" x="2017" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 77]</text>
+<text text-anchor="start" x="2032.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 50->58 -->
+<g id="edge58" class="edge"><title>50->58</title>
+<path fill="none" stroke="black" d="M2061.5,-1174.91C2061.5,-1164.2 2061.5,-1152.62 2061.5,-1141.78"/>
+<polygon fill="black" stroke="black" points="2065,-1141.67 2061.5,-1131.67 2058,-1141.67 2065,-1141.67"/>
+</g>
+<!-- 52 -->
+<g id="node53" class="node"><title>52</title>
+<path fill="#e68540" stroke="black" d="M1672,-1020C1672,-1020 1573,-1020 1573,-1020 1567,-1020 1561,-1014 1561,-1008 1561,-1008 1561,-949 1561,-949 1561,-943 1567,-937 1573,-937 1573,-937 1672,-937 1672,-937 1678,-937 1684,-943 1684,-949 1684,-949 1684,-1008 1684,-1008 1684,-1014 1678,-1020 1672,-1020"/>
+<text text-anchor="start" x="1569" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.112</text>
+<text text-anchor="start" x="1585" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.064</text>
+<text text-anchor="start" x="1579" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 30</text>
+<text text-anchor="start" x="1578" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [29, 1]</text>
+<text text-anchor="start" x="1593.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 51->52 -->
+<g id="edge52" class="edge"><title>51->52</title>
+<path fill="none" stroke="black" d="M1754.42,-1055.91C1734.47,-1044.35 1712.73,-1031.76 1692.77,-1020.2"/>
+<polygon fill="black" stroke="black" points="1694.44,-1017.13 1684.04,-1015.14 1690.93,-1023.18 1694.44,-1017.13"/>
+</g>
+<!-- 55 -->
+<g id="node56" class="node"><title>55</title>
+<path fill="#5aade9" stroke="black" d="M1918,-1020C1918,-1020 1731,-1020 1731,-1020 1725,-1020 1719,-1014 1719,-1008 1719,-1008 1719,-949 1719,-949 1719,-943 1725,-937 1731,-937 1731,-937 1918,-937 1918,-937 1924,-937 1930,-943 1930,-949 1930,-949 1930,-1008 1930,-1008 1930,-1014 1924,-1020 1918,-1020"/>
+<text text-anchor="start" x="1727" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 0.975</text>
+<text text-anchor="start" x="1787" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
+<text text-anchor="start" x="1785" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="1784" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 6]</text>
+<text text-anchor="start" x="1795.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 51->55 -->
+<g id="edge55" class="edge"><title>51->55</title>
+<path fill="none" stroke="black" d="M1824.5,-1055.91C1824.5,-1047.65 1824.5,-1038.86 1824.5,-1030.3"/>
+<polygon fill="black" stroke="black" points="1828,-1030.02 1824.5,-1020.02 1821,-1030.02 1828,-1030.02"/>
+</g>
+<!-- 53 -->
+<g id="node54" class="node"><title>53</title>
+<path fill="#e58139" stroke="black" d="M1544,-893.5C1544,-893.5 1463,-893.5 1463,-893.5 1457,-893.5 1451,-887.5 1451,-881.5 1451,-881.5 1451,-837.5 1451,-837.5 1451,-831.5 1457,-825.5 1463,-825.5 1463,-825.5 1544,-825.5 1544,-825.5 1550,-825.5 1556,-831.5 1556,-837.5 1556,-837.5 1556,-881.5 1556,-881.5 1556,-887.5 1550,-893.5 1544,-893.5"/>
+<text text-anchor="start" x="1474.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1460" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 29</text>
+<text text-anchor="start" x="1459" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [29, 0]</text>
+<text text-anchor="start" x="1474.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 52->53 -->
+<g id="edge53" class="edge"><title>52->53</title>
+<path fill="none" stroke="black" d="M1581.21,-936.907C1569.32,-925.211 1556.35,-912.457 1544.47,-900.78"/>
+<polygon fill="black" stroke="black" points="1546.82,-898.182 1537.23,-893.667 1541.91,-903.174 1546.82,-898.182"/>
+</g>
+<!-- 54 -->
+<g id="node55" class="node"><title>54</title>
+<path fill="#399de5" stroke="black" d="M1659,-893.5C1659,-893.5 1586,-893.5 1586,-893.5 1580,-893.5 1574,-887.5 1574,-881.5 1574,-881.5 1574,-837.5 1574,-837.5 1574,-831.5 1580,-825.5 1586,-825.5 1586,-825.5 1659,-825.5 1659,-825.5 1665,-825.5 1671,-831.5 1671,-837.5 1671,-837.5 1671,-881.5 1671,-881.5 1671,-887.5 1665,-893.5 1659,-893.5"/>
+<text text-anchor="start" x="1593.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1583" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="1582" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="1593.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 52->54 -->
+<g id="edge54" class="edge"><title>52->54</title>
+<path fill="none" stroke="black" d="M1622.5,-936.907C1622.5,-926.204 1622.5,-914.615 1622.5,-903.776"/>
+<polygon fill="black" stroke="black" points="1626,-903.667 1622.5,-893.667 1619,-903.667 1626,-903.667"/>
+</g>
+<!-- 56 -->
+<g id="node57" class="node"><title>56</title>
+<path fill="#399de5" stroke="black" d="M1774,-893.5C1774,-893.5 1701,-893.5 1701,-893.5 1695,-893.5 1689,-887.5 1689,-881.5 1689,-881.5 1689,-837.5 1689,-837.5 1689,-831.5 1695,-825.5 1701,-825.5 1701,-825.5 1774,-825.5 1774,-825.5 1780,-825.5 1786,-831.5 1786,-837.5 1786,-837.5 1786,-881.5 1786,-881.5 1786,-887.5 1780,-893.5 1774,-893.5"/>
+<text text-anchor="start" x="1708.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1698" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="1697" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
+<text text-anchor="start" x="1708.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 55->56 -->
+<g id="edge56" class="edge"><title>55->56</title>
+<path fill="none" stroke="black" d="M1794.32,-936.907C1785.86,-925.542 1776.67,-913.178 1768.19,-901.774"/>
+<polygon fill="black" stroke="black" points="1770.94,-899.603 1762.16,-893.667 1765.32,-903.78 1770.94,-899.603"/>
+</g>
+<!-- 57 -->
+<g id="node58" class="node"><title>57</title>
+<path fill="#e58139" stroke="black" d="M1889,-893.5C1889,-893.5 1816,-893.5 1816,-893.5 1810,-893.5 1804,-887.5 1804,-881.5 1804,-881.5 1804,-837.5 1804,-837.5 1804,-831.5 1810,-825.5 1816,-825.5 1816,-825.5 1889,-825.5 1889,-825.5 1895,-825.5 1901,-831.5 1901,-837.5 1901,-837.5 1901,-881.5 1901,-881.5 1901,-887.5 1895,-893.5 1889,-893.5"/>
+<text text-anchor="start" x="1823.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1813" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="1812" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="1823.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 55->57 -->
+<g id="edge57" class="edge"><title>55->57</title>
+<path fill="none" stroke="black" d="M1834.21,-936.907C1836.8,-926.094 1839.61,-914.376 1842.22,-903.441"/>
+<polygon fill="black" stroke="black" points="1845.64,-904.207 1844.56,-893.667 1838.83,-902.578 1845.64,-904.207"/>
+</g>
+<!-- 60 -->
+<g id="node61" class="node"><title>60</title>
+<path fill="#3a9de5" stroke="black" d="M2382,-1139C2382,-1139 2209,-1139 2209,-1139 2203,-1139 2197,-1133 2197,-1127 2197,-1127 2197,-1068 2197,-1068 2197,-1062 2203,-1056 2209,-1056 2209,-1056 2382,-1056 2382,-1056 2388,-1056 2394,-1062 2394,-1068 2394,-1068 2394,-1127 2394,-1127 2394,-1133 2388,-1139 2382,-1139"/>
+<text text-anchor="start" x="2205" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -1.026</text>
+<text text-anchor="start" x="2262" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.01</text>
+<text text-anchor="start" x="2248" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 819</text>
+<text text-anchor="start" x="2247" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 815]</text>
+<text text-anchor="start" x="2266.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 59->60 -->
+<g id="edge60" class="edge"><title>59->60</title>
+<path fill="none" stroke="black" d="M2386.93,-1174.91C2375.63,-1165.47 2363.52,-1155.34 2351.92,-1145.65"/>
+<polygon fill="black" stroke="black" points="2353.9,-1142.75 2343.99,-1139.02 2349.42,-1148.12 2353.9,-1142.75"/>
+</g>
+<!-- 71 -->
+<g id="node72" class="node"><title>71</title>
+<path fill="#d7ebfa" stroke="black" d="M2647.5,-1139C2647.5,-1139 2501.5,-1139 2501.5,-1139 2495.5,-1139 2489.5,-1133 2489.5,-1127 2489.5,-1127 2489.5,-1068 2489.5,-1068 2489.5,-1062 2495.5,-1056 2501.5,-1056 2501.5,-1056 2647.5,-1056 2647.5,-1056 2653.5,-1056 2659.5,-1062 2659.5,-1068 2659.5,-1068 2659.5,-1127 2659.5,-1127 2659.5,-1133 2653.5,-1139 2647.5,-1139"/>
+<text text-anchor="start" x="2497.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -1.778</text>
+<text text-anchor="start" x="2537" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.494</text>
+<text text-anchor="start" x="2535" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
+<text text-anchor="start" x="2534" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 5]</text>
+<text text-anchor="start" x="2545.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 59->71 -->
+<g id="edge71" class="edge"><title>59->71</title>
+<path fill="none" stroke="black" d="M2483.73,-1174.91C2494.94,-1165.47 2506.97,-1155.34 2518.49,-1145.65"/>
+<polygon fill="black" stroke="black" points="2520.96,-1148.14 2526.36,-1139.02 2516.46,-1142.78 2520.96,-1148.14"/>
+</g>
+<!-- 61 -->
+<g id="node62" class="node"><title>61</title>
+<path fill="#7bbeee" stroke="black" d="M2134,-1020C2134,-1020 2031,-1020 2031,-1020 2025,-1020 2019,-1014 2019,-1008 2019,-1008 2019,-949 2019,-949 2019,-943 2025,-937 2031,-937 2031,-937 2134,-937 2134,-937 2140,-937 2146,-943 2146,-949 2146,-949 2146,-1008 2146,-1008 2146,-1014 2140,-1020 2134,-1020"/>
+<text text-anchor="start" x="2027" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="2045" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
+<text text-anchor="start" x="2043" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="2042" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 3]</text>
+<text text-anchor="start" x="2053.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 60->61 -->
+<g id="edge61" class="edge"><title>60->61</title>
+<path fill="none" stroke="black" d="M2221.6,-1055.91C2200.15,-1044.13 2176.75,-1031.27 2155.37,-1019.53"/>
+<polygon fill="black" stroke="black" points="2156.79,-1016.31 2146.34,-1014.57 2153.42,-1022.45 2156.79,-1016.31"/>
+</g>
+<!-- 64 -->
+<g id="node65" class="node"><title>64</title>
+<path fill="#3a9de5" stroke="black" d="M2413.5,-1020C2413.5,-1020 2177.5,-1020 2177.5,-1020 2171.5,-1020 2165.5,-1014 2165.5,-1008 2165.5,-1008 2165.5,-949 2165.5,-949 2165.5,-943 2171.5,-937 2177.5,-937 2177.5,-937 2413.5,-937 2413.5,-937 2419.5,-937 2425.5,-943 2425.5,-949 2425.5,-949 2425.5,-1008 2425.5,-1008 2425.5,-1014 2419.5,-1020 2413.5,-1020"/>
+<text text-anchor="start" x="2173.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.614</text>
+<text text-anchor="start" x="2258" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
+<text text-anchor="start" x="2248" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 815</text>
+<text text-anchor="start" x="2247" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 812]</text>
+<text text-anchor="start" x="2266.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 60->64 -->
+<g id="edge64" class="edge"><title>60->64</title>
+<path fill="none" stroke="black" d="M2295.5,-1055.91C2295.5,-1047.65 2295.5,-1038.86 2295.5,-1030.3"/>
+<polygon fill="black" stroke="black" points="2299,-1030.02 2295.5,-1020.02 2292,-1030.02 2299,-1030.02"/>
+</g>
+<!-- 62 -->
+<g id="node63" class="node"><title>62</title>
+<path fill="#399de5" stroke="black" d="M2004,-893.5C2004,-893.5 1931,-893.5 1931,-893.5 1925,-893.5 1919,-887.5 1919,-881.5 1919,-881.5 1919,-837.5 1919,-837.5 1919,-831.5 1925,-825.5 1931,-825.5 1931,-825.5 2004,-825.5 2004,-825.5 2010,-825.5 2016,-831.5 2016,-837.5 2016,-837.5 2016,-881.5 2016,-881.5 2016,-887.5 2010,-893.5 2004,-893.5"/>
+<text text-anchor="start" x="1938.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="1928" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="1927" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="1938.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 61->62 -->
+<g id="edge62" class="edge"><title>61->62</title>
+<path fill="none" stroke="black" d="M2042.6,-936.907C2031.21,-925.321 2018.81,-912.698 2007.42,-901.111"/>
+<polygon fill="black" stroke="black" points="2009.61,-898.345 2000.1,-893.667 2004.61,-903.252 2009.61,-898.345"/>
+</g>
+<!-- 63 -->
+<g id="node64" class="node"><title>63</title>
+<path fill="#ffffff" stroke="black" d="M2119,-893.5C2119,-893.5 2046,-893.5 2046,-893.5 2040,-893.5 2034,-887.5 2034,-881.5 2034,-881.5 2034,-837.5 2034,-837.5 2034,-831.5 2040,-825.5 2046,-825.5 2046,-825.5 2119,-825.5 2119,-825.5 2125,-825.5 2131,-831.5 2131,-837.5 2131,-837.5 2131,-881.5 2131,-881.5 2131,-887.5 2125,-893.5 2119,-893.5"/>
+<text text-anchor="start" x="2053.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="2043" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="2042" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="2053.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 61->63 -->
+<g id="edge63" class="edge"><title>61->63</title>
+<path fill="none" stroke="black" d="M2082.5,-936.907C2082.5,-926.204 2082.5,-914.615 2082.5,-903.776"/>
+<polygon fill="black" stroke="black" points="2086,-903.667 2082.5,-893.667 2079,-903.667 2086,-903.667"/>
+</g>
+<!-- 65 -->
+<g id="node66" class="node"><title>65</title>
+<path fill="#45a3e7" stroke="black" d="M2388,-901C2388,-901 2161,-901 2161,-901 2155,-901 2149,-895 2149,-889 2149,-889 2149,-830 2149,-830 2149,-824 2155,-818 2161,-818 2161,-818 2388,-818 2388,-818 2394,-818 2400,-824 2400,-830 2400,-830 2400,-889 2400,-889 2400,-895 2394,-901 2388,-901"/>
+<text text-anchor="start" x="2157" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ -0.198</text>
+<text text-anchor="start" x="2237" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.111</text>
+<text text-anchor="start" x="2231" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 51</text>
+<text text-anchor="start" x="2230" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 48]</text>
+<text text-anchor="start" x="2245.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 64->65 -->
+<g id="edge65" class="edge"><title>64->65</title>
+<path fill="none" stroke="black" d="M2288.21,-936.907C2286.72,-928.558 2285.12,-919.671 2283.57,-911.02"/>
+<polygon fill="black" stroke="black" points="2286.98,-910.245 2281.77,-901.021 2280.09,-911.482 2286.98,-910.245"/>
+</g>
+<!-- 70 -->
+<g id="node71" class="node"><title>70</title>
+<path fill="#399de5" stroke="black" d="M2519,-893.5C2519,-893.5 2430,-893.5 2430,-893.5 2424,-893.5 2418,-887.5 2418,-881.5 2418,-881.5 2418,-837.5 2418,-837.5 2418,-831.5 2424,-825.5 2430,-825.5 2430,-825.5 2519,-825.5 2519,-825.5 2525,-825.5 2531,-831.5 2531,-837.5 2531,-837.5 2531,-881.5 2531,-881.5 2531,-887.5 2525,-893.5 2519,-893.5"/>
+<text text-anchor="start" x="2445.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2427" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 764</text>
+<text text-anchor="start" x="2426" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 764]</text>
+<text text-anchor="start" x="2445.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 64->70 -->
+<g id="edge70" class="edge"><title>64->70</title>
+<path fill="none" stroke="black" d="M2357.6,-936.907C2376.26,-924.714 2396.67,-911.373 2415.14,-899.298"/>
+<polygon fill="black" stroke="black" points="2417.3,-902.068 2423.76,-893.667 2413.47,-896.209 2417.3,-902.068"/>
+</g>
+<!-- 66 -->
+<g id="node67" class="node"><title>66</title>
+<path fill="#399de5" stroke="black" d="M2168,-774.5C2168,-774.5 2087,-774.5 2087,-774.5 2081,-774.5 2075,-768.5 2075,-762.5 2075,-762.5 2075,-718.5 2075,-718.5 2075,-712.5 2081,-706.5 2087,-706.5 2087,-706.5 2168,-706.5 2168,-706.5 2174,-706.5 2180,-712.5 2180,-718.5 2180,-718.5 2180,-762.5 2180,-762.5 2180,-768.5 2174,-774.5 2168,-774.5"/>
+<text text-anchor="start" x="2098.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2084" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 47</text>
+<text text-anchor="start" x="2083" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 47]</text>
+<text text-anchor="start" x="2098.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 65->66 -->
+<g id="edge66" class="edge"><title>65->66</title>
+<path fill="none" stroke="black" d="M2223.5,-817.907C2208.53,-805.99 2192.17,-792.976 2177.28,-781.12"/>
+<polygon fill="black" stroke="black" points="2179.18,-778.156 2169.17,-774.667 2174.82,-783.633 2179.18,-778.156"/>
+</g>
+<!-- 67 -->
+<g id="node68" class="node"><title>67</title>
+<path fill="#eeab7b" stroke="black" d="M2397,-782C2397,-782 2210,-782 2210,-782 2204,-782 2198,-776 2198,-770 2198,-770 2198,-711 2198,-711 2198,-705 2204,-699 2210,-699 2210,-699 2397,-699 2397,-699 2403,-699 2409,-705 2409,-711 2409,-711 2409,-770 2409,-770 2409,-776 2403,-782 2397,-782"/>
+<text text-anchor="start" x="2206" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 2.417</text>
+<text text-anchor="start" x="2266" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
+<text text-anchor="start" x="2264" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="2263" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 1]</text>
+<text text-anchor="start" x="2274.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 65->67 -->
+<g id="edge67" class="edge"><title>65->67</title>
+<path fill="none" stroke="black" d="M2284.56,-817.907C2286.65,-809.468 2288.88,-800.477 2291.05,-791.738"/>
+<polygon fill="black" stroke="black" points="2294.45,-792.569 2293.46,-782.021 2287.65,-790.885 2294.45,-792.569"/>
+</g>
+<!-- 68 -->
+<g id="node69" class="node"><title>68</title>
+<path fill="#e58139" stroke="black" d="M2240,-655.5C2240,-655.5 2167,-655.5 2167,-655.5 2161,-655.5 2155,-649.5 2155,-643.5 2155,-643.5 2155,-599.5 2155,-599.5 2155,-593.5 2161,-587.5 2167,-587.5 2167,-587.5 2240,-587.5 2240,-587.5 2246,-587.5 2252,-593.5 2252,-599.5 2252,-599.5 2252,-643.5 2252,-643.5 2252,-649.5 2246,-655.5 2240,-655.5"/>
+<text text-anchor="start" x="2174.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2164" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="2163" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
+<text text-anchor="start" x="2174.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 67->68 -->
+<g id="edge68" class="edge"><title>67->68</title>
+<path fill="none" stroke="black" d="M2268.81,-698.907C2259,-687.432 2248.32,-674.938 2238.49,-663.442"/>
+<polygon fill="black" stroke="black" points="2241.01,-660.995 2231.85,-655.667 2235.68,-665.543 2241.01,-660.995"/>
+</g>
+<!-- 69 -->
+<g id="node70" class="node"><title>69</title>
+<path fill="#399de5" stroke="black" d="M2355,-655.5C2355,-655.5 2282,-655.5 2282,-655.5 2276,-655.5 2270,-649.5 2270,-643.5 2270,-643.5 2270,-599.5 2270,-599.5 2270,-593.5 2276,-587.5 2282,-587.5 2282,-587.5 2355,-587.5 2355,-587.5 2361,-587.5 2367,-593.5 2367,-599.5 2367,-599.5 2367,-643.5 2367,-643.5 2367,-649.5 2361,-655.5 2355,-655.5"/>
+<text text-anchor="start" x="2289.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2279" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2278" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="2289.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 67->69 -->
+<g id="edge69" class="edge"><title>67->69</title>
+<path fill="none" stroke="black" d="M2308.7,-698.907C2310.08,-688.204 2311.56,-676.615 2312.95,-665.776"/>
+<polygon fill="black" stroke="black" points="2316.45,-666.031 2314.25,-655.667 2309.5,-665.141 2316.45,-666.031"/>
+</g>
+<!-- 72 -->
+<g id="node73" class="node"><title>72</title>
+<path fill="#f2c09c" stroke="black" d="M2692.5,-1020C2692.5,-1020 2456.5,-1020 2456.5,-1020 2450.5,-1020 2444.5,-1014 2444.5,-1008 2444.5,-1008 2444.5,-949 2444.5,-949 2444.5,-943 2450.5,-937 2456.5,-937 2456.5,-937 2692.5,-937 2692.5,-937 2698.5,-937 2704.5,-943 2704.5,-949 2704.5,-949 2704.5,-1008 2704.5,-1008 2704.5,-1014 2698.5,-1020 2692.5,-1020"/>
+<text text-anchor="start" x="2452.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.419</text>
+<text text-anchor="start" x="2537" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="2535" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="2534" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
+<text text-anchor="start" x="2545.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 71->72 -->
+<g id="edge72" class="edge"><title>71->72</title>
+<path fill="none" stroke="black" d="M2574.5,-1055.91C2574.5,-1047.65 2574.5,-1038.86 2574.5,-1030.3"/>
+<polygon fill="black" stroke="black" points="2578,-1030.02 2574.5,-1020.02 2571,-1030.02 2578,-1030.02"/>
+</g>
+<!-- 79 -->
+<g id="node80" class="node"><title>79</title>
+<path fill="#399de5" stroke="black" d="M2808,-1012.5C2808,-1012.5 2735,-1012.5 2735,-1012.5 2729,-1012.5 2723,-1006.5 2723,-1000.5 2723,-1000.5 2723,-956.5 2723,-956.5 2723,-950.5 2729,-944.5 2735,-944.5 2735,-944.5 2808,-944.5 2808,-944.5 2814,-944.5 2820,-950.5 2820,-956.5 2820,-956.5 2820,-1000.5 2820,-1000.5 2820,-1006.5 2814,-1012.5 2808,-1012.5"/>
+<text text-anchor="start" x="2742.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2732" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="2731" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="2742.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 71->79 -->
+<g id="edge79" class="edge"><title>71->79</title>
+<path fill="none" stroke="black" d="M2651.82,-1055.85C2672.13,-1044.66 2693.85,-1032.22 2713.5,-1020 2714.44,-1019.42 2715.38,-1018.82 2716.33,-1018.22"/>
+<polygon fill="black" stroke="black" points="2718.45,-1021.02 2724.94,-1012.65 2714.64,-1015.15 2718.45,-1021.02"/>
+</g>
+<!-- 73 -->
+<g id="node74" class="node"><title>73</title>
+<path fill="#399de5" stroke="black" d="M2634,-893.5C2634,-893.5 2561,-893.5 2561,-893.5 2555,-893.5 2549,-887.5 2549,-881.5 2549,-881.5 2549,-837.5 2549,-837.5 2549,-831.5 2555,-825.5 2561,-825.5 2561,-825.5 2634,-825.5 2634,-825.5 2640,-825.5 2646,-831.5 2646,-837.5 2646,-837.5 2646,-881.5 2646,-881.5 2646,-887.5 2640,-893.5 2634,-893.5"/>
+<text text-anchor="start" x="2568.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2558" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2557" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="2568.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 72->73 -->
+<g id="edge73" class="edge"><title>72->73</title>
+<path fill="none" stroke="black" d="M2582.48,-936.907C2584.58,-926.204 2586.86,-914.615 2588.99,-903.776"/>
+<polygon fill="black" stroke="black" points="2592.49,-904.154 2590.98,-893.667 2585.62,-902.804 2592.49,-904.154"/>
+</g>
+<!-- 74 -->
+<g id="node75" class="node"><title>74</title>
+<path fill="#eca06a" stroke="black" d="M2786.5,-901C2786.5,-901 2676.5,-901 2676.5,-901 2670.5,-901 2664.5,-895 2664.5,-889 2664.5,-889 2664.5,-830 2664.5,-830 2664.5,-824 2670.5,-818 2676.5,-818 2676.5,-818 2786.5,-818 2786.5,-818 2792.5,-818 2798.5,-824 2798.5,-830 2798.5,-830 2798.5,-889 2798.5,-889 2798.5,-895 2792.5,-901 2786.5,-901"/>
+<text text-anchor="start" x="2672.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ -0.362</text>
+<text text-anchor="start" x="2698" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.32</text>
+<text text-anchor="start" x="2692" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="2691" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 1]</text>
+<text text-anchor="start" x="2702.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 72->74 -->
+<g id="edge74" class="edge"><title>72->74</title>
+<path fill="none" stroke="black" d="M2628.97,-936.907C2641.88,-927.288 2655.75,-916.953 2668.98,-907.09"/>
+<polygon fill="black" stroke="black" points="2671.2,-909.803 2677.13,-901.021 2667.02,-904.19 2671.2,-909.803"/>
+</g>
+<!-- 75 -->
+<g id="node76" class="node"><title>75</title>
+<path fill="#ffffff" stroke="black" d="M2649,-782C2649,-782 2476,-782 2476,-782 2470,-782 2464,-776 2464,-770 2464,-770 2464,-711 2464,-711 2464,-705 2470,-699 2476,-699 2476,-699 2649,-699 2649,-699 2655,-699 2661,-705 2661,-711 2661,-711 2661,-770 2661,-770 2661,-776 2655,-782 2649,-782"/>
+<text text-anchor="start" x="2472" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.999</text>
+<text text-anchor="start" x="2533.5" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="2523" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="2522" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="2533.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 74->75 -->
+<g id="edge75" class="edge"><title>74->75</title>
+<path fill="none" stroke="black" d="M2672.87,-817.907C2658.84,-808.197 2643.76,-797.758 2629.39,-787.811"/>
+<polygon fill="black" stroke="black" points="2631.24,-784.835 2621.03,-782.021 2627.26,-790.591 2631.24,-784.835"/>
+</g>
+<!-- 78 -->
+<g id="node79" class="node"><title>78</title>
+<path fill="#e58139" stroke="black" d="M2768,-774.5C2768,-774.5 2695,-774.5 2695,-774.5 2689,-774.5 2683,-768.5 2683,-762.5 2683,-762.5 2683,-718.5 2683,-718.5 2683,-712.5 2689,-706.5 2695,-706.5 2695,-706.5 2768,-706.5 2768,-706.5 2774,-706.5 2780,-712.5 2780,-718.5 2780,-718.5 2780,-762.5 2780,-762.5 2780,-768.5 2774,-774.5 2768,-774.5"/>
+<text text-anchor="start" x="2702.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2692" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="2691" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
+<text text-anchor="start" x="2702.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 74->78 -->
+<g id="edge78" class="edge"><title>74->78</title>
+<path fill="none" stroke="black" d="M2731.5,-817.907C2731.5,-807.204 2731.5,-795.615 2731.5,-784.776"/>
+<polygon fill="black" stroke="black" points="2735,-784.667 2731.5,-774.667 2728,-784.667 2735,-784.667"/>
+</g>
+<!-- 76 -->
+<g id="node77" class="node"><title>76</title>
+<path fill="#e58139" stroke="black" d="M2484,-655.5C2484,-655.5 2411,-655.5 2411,-655.5 2405,-655.5 2399,-649.5 2399,-643.5 2399,-643.5 2399,-599.5 2399,-599.5 2399,-593.5 2405,-587.5 2411,-587.5 2411,-587.5 2484,-587.5 2484,-587.5 2490,-587.5 2496,-593.5 2496,-599.5 2496,-599.5 2496,-643.5 2496,-643.5 2496,-649.5 2490,-655.5 2484,-655.5"/>
+<text text-anchor="start" x="2418.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2408" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2407" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="2418.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 75->76 -->
+<g id="edge76" class="edge"><title>75->76</title>
+<path fill="none" stroke="black" d="M2522.6,-698.907C2511.21,-687.321 2498.81,-674.698 2487.42,-663.111"/>
+<polygon fill="black" stroke="black" points="2489.61,-660.345 2480.1,-655.667 2484.61,-665.252 2489.61,-660.345"/>
+</g>
+<!-- 77 -->
+<g id="node78" class="node"><title>77</title>
+<path fill="#399de5" stroke="black" d="M2599,-655.5C2599,-655.5 2526,-655.5 2526,-655.5 2520,-655.5 2514,-649.5 2514,-643.5 2514,-643.5 2514,-599.5 2514,-599.5 2514,-593.5 2520,-587.5 2526,-587.5 2526,-587.5 2599,-587.5 2599,-587.5 2605,-587.5 2611,-593.5 2611,-599.5 2611,-599.5 2611,-643.5 2611,-643.5 2611,-649.5 2605,-655.5 2599,-655.5"/>
+<text text-anchor="start" x="2533.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2523" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2522" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="2533.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 75->77 -->
+<g id="edge77" class="edge"><title>75->77</title>
+<path fill="none" stroke="black" d="M2562.5,-698.907C2562.5,-688.204 2562.5,-676.615 2562.5,-665.776"/>
+<polygon fill="black" stroke="black" points="2566,-665.667 2562.5,-655.667 2559,-665.667 2566,-665.667"/>
+</g>
+<!-- 81 -->
+<g id="node82" class="node"><title>81</title>
+<path fill="#e5833c" stroke="black" d="M3058,-1258C3058,-1258 2879,-1258 2879,-1258 2873,-1258 2867,-1252 2867,-1246 2867,-1246 2867,-1187 2867,-1187 2867,-1181 2873,-1175 2879,-1175 2879,-1175 3058,-1175 3058,-1175 3064,-1175 3070,-1181 3070,-1187 3070,-1187 3070,-1246 3070,-1246 3070,-1252 3064,-1258 3058,-1258"/>
+<text text-anchor="start" x="2875" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 4.02</text>
+<text text-anchor="start" x="2931" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.029</text>
+<text text-anchor="start" x="2921" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 206</text>
+<text text-anchor="start" x="2920" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 3]</text>
+<text text-anchor="start" x="2939.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 80->81 -->
+<g id="edge81" class="edge"><title>80->81</title>
+<path fill="none" stroke="black" d="M2968.5,-1293.91C2968.5,-1285.65 2968.5,-1276.86 2968.5,-1268.3"/>
+<polygon fill="black" stroke="black" points="2972,-1268.02 2968.5,-1258.02 2965,-1268.02 2972,-1268.02"/>
+</g>
+<!-- 88 -->
+<g id="node89" class="node"><title>88</title>
+<path fill="#399de5" stroke="black" d="M3173,-1250.5C3173,-1250.5 3100,-1250.5 3100,-1250.5 3094,-1250.5 3088,-1244.5 3088,-1238.5 3088,-1238.5 3088,-1194.5 3088,-1194.5 3088,-1188.5 3094,-1182.5 3100,-1182.5 3100,-1182.5 3173,-1182.5 3173,-1182.5 3179,-1182.5 3185,-1188.5 3185,-1194.5 3185,-1194.5 3185,-1238.5 3185,-1238.5 3185,-1244.5 3179,-1250.5 3173,-1250.5"/>
+<text text-anchor="start" x="3107.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3097" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="3096" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
+<text text-anchor="start" x="3107.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 80->88 -->
+<g id="edge88" class="edge"><title>80->88</title>
+<path fill="none" stroke="black" d="M3027.03,-1293.83C3043.67,-1282.26 3061.8,-1269.64 3078.5,-1258 3079.25,-1257.48 3080,-1256.95 3080.76,-1256.42"/>
+<polygon fill="black" stroke="black" points="3082.83,-1259.25 3089.03,-1250.66 3078.82,-1253.51 3082.83,-1259.25"/>
+</g>
+<!-- 82 -->
+<g id="node83" class="node"><title>82</title>
+<path fill="#e5823b" stroke="black" d="M3071.5,-1139C3071.5,-1139 2865.5,-1139 2865.5,-1139 2859.5,-1139 2853.5,-1133 2853.5,-1127 2853.5,-1127 2853.5,-1068 2853.5,-1068 2853.5,-1062 2859.5,-1056 2865.5,-1056 2865.5,-1056 3071.5,-1056 3071.5,-1056 3077.5,-1056 3083.5,-1062 3083.5,-1068 3083.5,-1068 3083.5,-1127 3083.5,-1127 3083.5,-1133 3077.5,-1139 3071.5,-1139"/>
+<text text-anchor="start" x="2861.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_rerror_rate ≤ -0.012</text>
+<text text-anchor="start" x="2931" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.019</text>
+<text text-anchor="start" x="2921" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 205</text>
+<text text-anchor="start" x="2920" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 2]</text>
+<text text-anchor="start" x="2939.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 81->82 -->
+<g id="edge82" class="edge"><title>81->82</title>
+<path fill="none" stroke="black" d="M2968.5,-1174.91C2968.5,-1166.65 2968.5,-1157.86 2968.5,-1149.3"/>
+<polygon fill="black" stroke="black" points="2972,-1149.02 2968.5,-1139.02 2965,-1149.02 2972,-1149.02"/>
+</g>
+<!-- 87 -->
+<g id="node88" class="node"><title>87</title>
+<path fill="#399de5" stroke="black" d="M3187,-1131.5C3187,-1131.5 3114,-1131.5 3114,-1131.5 3108,-1131.5 3102,-1125.5 3102,-1119.5 3102,-1119.5 3102,-1075.5 3102,-1075.5 3102,-1069.5 3108,-1063.5 3114,-1063.5 3114,-1063.5 3187,-1063.5 3187,-1063.5 3193,-1063.5 3199,-1069.5 3199,-1075.5 3199,-1075.5 3199,-1119.5 3199,-1119.5 3199,-1125.5 3193,-1131.5 3187,-1131.5"/>
+<text text-anchor="start" x="3121.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3111" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3110" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="3121.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 81->87 -->
+<g id="edge87" class="edge"><title>81->87</title>
+<path fill="none" stroke="black" d="M3035.87,-1174.9C3054.36,-1163.49 3074.32,-1150.94 3092.5,-1139 3093.29,-1138.48 3094.08,-1137.96 3094.87,-1137.44"/>
+<polygon fill="black" stroke="black" points="3097.13,-1140.14 3103.49,-1131.66 3093.23,-1134.32 3097.13,-1140.14"/>
+</g>
+<!-- 83 -->
+<g id="node84" class="node"><title>83</title>
+<path fill="#f2c09c" stroke="black" d="M3086.5,-1020C3086.5,-1020 2850.5,-1020 2850.5,-1020 2844.5,-1020 2838.5,-1014 2838.5,-1008 2838.5,-1008 2838.5,-949 2838.5,-949 2838.5,-943 2844.5,-937 2850.5,-937 2850.5,-937 3086.5,-937 3086.5,-937 3092.5,-937 3098.5,-943 3098.5,-949 3098.5,-949 3098.5,-1008 3098.5,-1008 3098.5,-1014 3092.5,-1020 3086.5,-1020"/>
+<text text-anchor="start" x="2846.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.289</text>
+<text text-anchor="start" x="2931" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="2929" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="2928" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
+<text text-anchor="start" x="2939.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 82->83 -->
+<g id="edge83" class="edge"><title>82->83</title>
+<path fill="none" stroke="black" d="M2968.5,-1055.91C2968.5,-1047.65 2968.5,-1038.86 2968.5,-1030.3"/>
+<polygon fill="black" stroke="black" points="2972,-1030.02 2968.5,-1020.02 2965,-1030.02 2972,-1030.02"/>
+</g>
+<!-- 86 -->
+<g id="node87" class="node"><title>86</title>
+<path fill="#e58139" stroke="black" d="M3218,-1012.5C3218,-1012.5 3129,-1012.5 3129,-1012.5 3123,-1012.5 3117,-1006.5 3117,-1000.5 3117,-1000.5 3117,-956.5 3117,-956.5 3117,-950.5 3123,-944.5 3129,-944.5 3129,-944.5 3218,-944.5 3218,-944.5 3224,-944.5 3230,-950.5 3230,-956.5 3230,-956.5 3230,-1000.5 3230,-1000.5 3230,-1006.5 3224,-1012.5 3218,-1012.5"/>
+<text text-anchor="start" x="3144.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3126" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 199</text>
+<text text-anchor="start" x="3125" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [199, 0]</text>
+<text text-anchor="start" x="3144.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 82->86 -->
+<g id="edge86" class="edge"><title>82->86</title>
+<path fill="none" stroke="black" d="M3043.89,-1055.85C3064.62,-1044.45 3087.02,-1031.91 3107.5,-1020 3108.77,-1019.26 3110.05,-1018.51 3111.35,-1017.75"/>
+<polygon fill="black" stroke="black" points="3113.14,-1020.76 3119.96,-1012.65 3109.57,-1014.74 3113.14,-1020.76"/>
+</g>
+<!-- 84 -->
+<g id="node85" class="node"><title>84</title>
+<path fill="#e58139" stroke="black" d="M2905,-893.5C2905,-893.5 2832,-893.5 2832,-893.5 2826,-893.5 2820,-887.5 2820,-881.5 2820,-881.5 2820,-837.5 2820,-837.5 2820,-831.5 2826,-825.5 2832,-825.5 2832,-825.5 2905,-825.5 2905,-825.5 2911,-825.5 2917,-831.5 2917,-837.5 2917,-837.5 2917,-881.5 2917,-881.5 2917,-887.5 2911,-893.5 2905,-893.5"/>
+<text text-anchor="start" x="2839.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2829" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="2828" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
+<text text-anchor="start" x="2839.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 83->84 -->
+<g id="edge84" class="edge"><title>83->84</title>
+<path fill="none" stroke="black" d="M2933.81,-936.907C2924,-925.432 2913.32,-912.938 2903.49,-901.442"/>
+<polygon fill="black" stroke="black" points="2906.01,-898.995 2896.85,-893.667 2900.68,-903.543 2906.01,-898.995"/>
+</g>
+<!-- 85 -->
+<g id="node86" class="node"><title>85</title>
+<path fill="#399de5" stroke="black" d="M3020,-893.5C3020,-893.5 2947,-893.5 2947,-893.5 2941,-893.5 2935,-887.5 2935,-881.5 2935,-881.5 2935,-837.5 2935,-837.5 2935,-831.5 2941,-825.5 2947,-825.5 2947,-825.5 3020,-825.5 3020,-825.5 3026,-825.5 3032,-831.5 3032,-837.5 3032,-837.5 3032,-881.5 3032,-881.5 3032,-887.5 3026,-893.5 3020,-893.5"/>
+<text text-anchor="start" x="2954.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2944" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="2943" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="2954.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 83->85 -->
+<g id="edge85" class="edge"><title>83->85</title>
+<path fill="none" stroke="black" d="M2973.7,-936.907C2975.08,-926.204 2976.56,-914.615 2977.95,-903.776"/>
+<polygon fill="black" stroke="black" points="2981.45,-904.031 2979.25,-893.667 2974.5,-903.141 2981.45,-904.031"/>
+</g>
+<!-- 90 -->
+<g id="node91" class="node"><title>90</title>
+<path fill="#e58139" stroke="black" d="M3133,-1488.5C3133,-1488.5 3052,-1488.5 3052,-1488.5 3046,-1488.5 3040,-1482.5 3040,-1476.5 3040,-1476.5 3040,-1432.5 3040,-1432.5 3040,-1426.5 3046,-1420.5 3052,-1420.5 3052,-1420.5 3133,-1420.5 3133,-1420.5 3139,-1420.5 3145,-1426.5 3145,-1432.5 3145,-1432.5 3145,-1476.5 3145,-1476.5 3145,-1482.5 3139,-1488.5 3133,-1488.5"/>
+<text text-anchor="start" x="3063.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3049" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 67</text>
+<text text-anchor="start" x="3048" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [67, 0]</text>
+<text text-anchor="start" x="3063.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 89->90 -->
+<g id="edge90" class="edge"><title>89->90</title>
+<path fill="none" stroke="black" d="M3131.68,-1531.91C3126.02,-1520.87 3119.88,-1508.9 3114.18,-1497.77"/>
+<polygon fill="black" stroke="black" points="3117.19,-1495.97 3109.51,-1488.67 3110.96,-1499.16 3117.19,-1495.97"/>
+</g>
+<!-- 91 -->
+<g id="node92" class="node"><title>91</title>
+<path fill="#399de5" stroke="black" d="M3248,-1488.5C3248,-1488.5 3175,-1488.5 3175,-1488.5 3169,-1488.5 3163,-1482.5 3163,-1476.5 3163,-1476.5 3163,-1432.5 3163,-1432.5 3163,-1426.5 3169,-1420.5 3175,-1420.5 3175,-1420.5 3248,-1420.5 3248,-1420.5 3254,-1420.5 3260,-1426.5 3260,-1432.5 3260,-1432.5 3260,-1476.5 3260,-1476.5 3260,-1482.5 3254,-1488.5 3248,-1488.5"/>
+<text text-anchor="start" x="3182.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3172" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="3171" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
+<text text-anchor="start" x="3182.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 89->91 -->
+<g id="edge91" class="edge"><title>89->91</title>
+<path fill="none" stroke="black" d="M3172.97,-1531.91C3178.53,-1520.87 3184.57,-1508.9 3190.18,-1497.77"/>
+<polygon fill="black" stroke="black" points="3193.4,-1499.17 3194.77,-1488.67 3187.15,-1496.02 3193.4,-1499.17"/>
+</g>
+<!-- 93 -->
+<g id="node94" class="node"><title>93</title>
+<path fill="#e78c4b" stroke="black" d="M3889,-1615C3889,-1615 3778,-1615 3778,-1615 3772,-1615 3766,-1609 3766,-1603 3766,-1603 3766,-1544 3766,-1544 3766,-1538 3772,-1532 3778,-1532 3778,-1532 3889,-1532 3889,-1532 3895,-1532 3901,-1538 3901,-1544 3901,-1544 3901,-1603 3901,-1603 3901,-1609 3895,-1615 3889,-1615"/>
+<text text-anchor="start" x="3774" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.025</text>
+<text text-anchor="start" x="3800" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.15</text>
+<text text-anchor="start" x="3786" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 183</text>
+<text text-anchor="start" x="3780.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [168, 15]</text>
+<text text-anchor="start" x="3804.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 92->93 -->
+<g id="edge93" class="edge"><title>92->93</title>
+<path fill="none" stroke="black" d="M3896.19,-1650.91C3888.75,-1641.83 3880.78,-1632.12 3873.11,-1622.77"/>
+<polygon fill="black" stroke="black" points="3875.8,-1620.53 3866.75,-1615.02 3870.39,-1624.97 3875.8,-1620.53"/>
+</g>
+<!-- 108 -->
+<g id="node109" class="node"><title>108</title>
+<path fill="#4ea8e8" stroke="black" d="M4118,-1615C4118,-1615 3931,-1615 3931,-1615 3925,-1615 3919,-1609 3919,-1603 3919,-1603 3919,-1544 3919,-1544 3919,-1538 3925,-1532 3931,-1532 3931,-1532 4118,-1532 4118,-1532 4124,-1532 4130,-1538 4130,-1544 4130,-1544 4130,-1603 4130,-1603 4130,-1609 4124,-1615 4118,-1615"/>
+<text text-anchor="start" x="3927" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 0.307</text>
+<text text-anchor="start" x="3987" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.175</text>
+<text text-anchor="start" x="3981" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 31</text>
+<text text-anchor="start" x="3980" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 28]</text>
+<text text-anchor="start" x="3995.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 92->108 -->
+<g id="edge108" class="edge"><title>92->108</title>
+<path fill="none" stroke="black" d="M3962.46,-1650.91C3969.75,-1641.92 3977.56,-1632.32 3985.08,-1623.05"/>
+<polygon fill="black" stroke="black" points="3988.01,-1624.99 3991.6,-1615.02 3982.58,-1620.58 3988.01,-1624.99"/>
+</g>
+<!-- 94 -->
+<g id="node95" class="node"><title>94</title>
+<path fill="#e6853f" stroke="black" d="M3679,-1496C3679,-1496 3590,-1496 3590,-1496 3584,-1496 3578,-1490 3578,-1484 3578,-1484 3578,-1425 3578,-1425 3578,-1419 3584,-1413 3590,-1413 3590,-1413 3679,-1413 3679,-1413 3685,-1413 3691,-1419 3691,-1425 3691,-1425 3691,-1484 3691,-1484 3691,-1490 3685,-1496 3679,-1496"/>
+<text text-anchor="start" x="3589" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ -0.698</text>
+<text text-anchor="start" x="3597" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.058</text>
+<text text-anchor="start" x="3587" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 167</text>
+<text text-anchor="start" x="3586" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [162, 5]</text>
+<text text-anchor="start" x="3605.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 93->94 -->
+<g id="edge94" class="edge"><title>93->94</title>
+<path fill="none" stroke="black" d="M3765.85,-1532.73C3744.46,-1520.15 3720.87,-1506.28 3699.66,-1493.81"/>
+<polygon fill="black" stroke="black" points="3701.43,-1490.79 3691.04,-1488.74 3697.89,-1496.83 3701.43,-1490.79"/>
+</g>
+<!-- 103 -->
+<g id="node104" class="node"><title>103</title>
+<path fill="#b0d8f5" stroke="black" d="M3937.5,-1496C3937.5,-1496 3735.5,-1496 3735.5,-1496 3729.5,-1496 3723.5,-1490 3723.5,-1484 3723.5,-1484 3723.5,-1425 3723.5,-1425 3723.5,-1419 3729.5,-1413 3735.5,-1413 3735.5,-1413 3937.5,-1413 3937.5,-1413 3943.5,-1413 3949.5,-1419 3949.5,-1425 3949.5,-1425 3949.5,-1484 3949.5,-1484 3949.5,-1490 3943.5,-1496 3937.5,-1496"/>
+<text text-anchor="start" x="3731.5" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.724</text>
+<text text-anchor="start" x="3799" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.469</text>
+<text text-anchor="start" x="3793" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 16</text>
+<text text-anchor="start" x="3792" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 10]</text>
+<text text-anchor="start" x="3807.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 93->103 -->
+<g id="edge103" class="edge"><title>93->103</title>
+<path fill="none" stroke="black" d="M3834.54,-1531.91C3834.75,-1523.56 3834.98,-1514.67 3835.2,-1506.02"/>
+<polygon fill="black" stroke="black" points="3838.7,-1506.11 3835.46,-1496.02 3831.71,-1505.93 3838.7,-1506.11"/>
+</g>
+<!-- 95 -->
+<g id="node96" class="node"><title>95</title>
+<path fill="#e5833b" stroke="black" d="M3519,-1377C3519,-1377 3346,-1377 3346,-1377 3340,-1377 3334,-1371 3334,-1365 3334,-1365 3334,-1306 3334,-1306 3334,-1300 3340,-1294 3346,-1294 3346,-1294 3519,-1294 3519,-1294 3525,-1294 3531,-1300 3531,-1306 3531,-1306 3531,-1365 3531,-1365 3531,-1371 3525,-1377 3519,-1377"/>
+<text text-anchor="start" x="3342" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -1.026</text>
+<text text-anchor="start" x="3395" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.024</text>
+<text text-anchor="start" x="3385" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 162</text>
+<text text-anchor="start" x="3384" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [160, 2]</text>
+<text text-anchor="start" x="3403.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 94->95 -->
+<g id="edge95" class="edge"><title>94->95</title>
+<path fill="none" stroke="black" d="M3577.96,-1420.75C3557.36,-1408.82 3533.66,-1395.09 3511.46,-1382.24"/>
+<polygon fill="black" stroke="black" points="3513.12,-1379.15 3502.71,-1377.17 3509.61,-1385.21 3513.12,-1379.15"/>
+</g>
+<!-- 100 -->
+<g id="node101" class="node"><title>100</title>
+<path fill="#bddef6" stroke="black" d="M3707.5,-1377C3707.5,-1377 3561.5,-1377 3561.5,-1377 3555.5,-1377 3549.5,-1371 3549.5,-1365 3549.5,-1365 3549.5,-1306 3549.5,-1306 3549.5,-1300 3555.5,-1294 3561.5,-1294 3561.5,-1294 3707.5,-1294 3707.5,-1294 3713.5,-1294 3719.5,-1300 3719.5,-1306 3719.5,-1306 3719.5,-1365 3719.5,-1365 3719.5,-1371 3713.5,-1377 3707.5,-1377"/>
+<text text-anchor="start" x="3557.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -0.945</text>
+<text text-anchor="start" x="3601" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.48</text>
+<text text-anchor="start" x="3595" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="3594" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 3]</text>
+<text text-anchor="start" x="3605.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 94->100 -->
+<g id="edge100" class="edge"><title>94->100</title>
+<path fill="none" stroke="black" d="M3634.5,-1412.91C3634.5,-1404.65 3634.5,-1395.86 3634.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="3638,-1387.02 3634.5,-1377.02 3631,-1387.02 3638,-1387.02"/>
+</g>
+<!-- 96 -->
+<g id="node97" class="node"><title>96</title>
+<path fill="#eb9d65" stroke="black" d="M3370.5,-1258C3370.5,-1258 3246.5,-1258 3246.5,-1258 3240.5,-1258 3234.5,-1252 3234.5,-1246 3234.5,-1246 3234.5,-1187 3234.5,-1187 3234.5,-1181 3240.5,-1175 3246.5,-1175 3246.5,-1175 3370.5,-1175 3370.5,-1175 3376.5,-1175 3382.5,-1181 3382.5,-1187 3382.5,-1187 3382.5,-1246 3382.5,-1246 3382.5,-1252 3376.5,-1258 3370.5,-1258"/>
+<text text-anchor="start" x="3242.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">diff_srv_rate ≤ 2.451</text>
+<text text-anchor="start" x="3271" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.298</text>
+<text text-anchor="start" x="3265" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
+<text text-anchor="start" x="3268" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 2]</text>
+<text text-anchor="start" x="3279.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 95->96 -->
+<g id="edge96" class="edge"><title>95->96</title>
+<path fill="none" stroke="black" d="M3389.48,-1293.91C3379.57,-1284.56 3368.95,-1274.54 3358.77,-1264.93"/>
+<polygon fill="black" stroke="black" points="3361.12,-1262.34 3351.45,-1258.02 3356.32,-1267.43 3361.12,-1262.34"/>
+</g>
+<!-- 99 -->
+<g id="node100" class="node"><title>99</title>
+<path fill="#e58139" stroke="black" d="M3502,-1250.5C3502,-1250.5 3413,-1250.5 3413,-1250.5 3407,-1250.5 3401,-1244.5 3401,-1238.5 3401,-1238.5 3401,-1194.5 3401,-1194.5 3401,-1188.5 3407,-1182.5 3413,-1182.5 3413,-1182.5 3502,-1182.5 3502,-1182.5 3508,-1182.5 3514,-1188.5 3514,-1194.5 3514,-1194.5 3514,-1238.5 3514,-1238.5 3514,-1244.5 3508,-1250.5 3502,-1250.5"/>
+<text text-anchor="start" x="3428.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3410" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 151</text>
+<text text-anchor="start" x="3409" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [151, 0]</text>
+<text text-anchor="start" x="3428.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 95->99 -->
+<g id="edge99" class="edge"><title>95->99</title>
+<path fill="none" stroke="black" d="M3441.17,-1293.91C3443.46,-1283.2 3445.94,-1271.62 3448.25,-1260.78"/>
+<polygon fill="black" stroke="black" points="3451.75,-1261.18 3450.41,-1250.67 3444.9,-1259.71 3451.75,-1261.18"/>
+</g>
+<!-- 97 -->
+<g id="node98" class="node"><title>97</title>
+<path fill="#e58139" stroke="black" d="M3323,-1131.5C3323,-1131.5 3250,-1131.5 3250,-1131.5 3244,-1131.5 3238,-1125.5 3238,-1119.5 3238,-1119.5 3238,-1075.5 3238,-1075.5 3238,-1069.5 3244,-1063.5 3250,-1063.5 3250,-1063.5 3323,-1063.5 3323,-1063.5 3329,-1063.5 3335,-1069.5 3335,-1075.5 3335,-1075.5 3335,-1119.5 3335,-1119.5 3335,-1125.5 3329,-1131.5 3323,-1131.5"/>
+<text text-anchor="start" x="3257.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3247" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
+<text text-anchor="start" x="3246" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 0]</text>
+<text text-anchor="start" x="3257.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 96->97 -->
+<g id="edge97" class="edge"><title>96->97</title>
+<path fill="none" stroke="black" d="M3300.87,-1174.91C3298.85,-1164.2 3296.68,-1152.62 3294.64,-1141.78"/>
+<polygon fill="black" stroke="black" points="3298.02,-1140.85 3292.74,-1131.67 3291.14,-1142.14 3298.02,-1140.85"/>
+</g>
+<!-- 98 -->
+<g id="node99" class="node"><title>98</title>
+<path fill="#399de5" stroke="black" d="M3438,-1131.5C3438,-1131.5 3365,-1131.5 3365,-1131.5 3359,-1131.5 3353,-1125.5 3353,-1119.5 3353,-1119.5 3353,-1075.5 3353,-1075.5 3353,-1069.5 3359,-1063.5 3365,-1063.5 3365,-1063.5 3438,-1063.5 3438,-1063.5 3444,-1063.5 3450,-1069.5 3450,-1075.5 3450,-1075.5 3450,-1119.5 3450,-1119.5 3450,-1125.5 3444,-1131.5 3438,-1131.5"/>
+<text text-anchor="start" x="3372.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3362" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3361" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="3372.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 96->98 -->
+<g id="edge98" class="edge"><title>96->98</title>
+<path fill="none" stroke="black" d="M3340.77,-1174.91C3349.8,-1163.54 3359.63,-1151.18 3368.69,-1139.77"/>
+<polygon fill="black" stroke="black" points="3371.65,-1141.67 3375.14,-1131.67 3366.17,-1137.32 3371.65,-1141.67"/>
+</g>
+<!-- 101 -->
+<g id="node102" class="node"><title>101</title>
+<path fill="#e58139" stroke="black" d="M3630,-1250.5C3630,-1250.5 3557,-1250.5 3557,-1250.5 3551,-1250.5 3545,-1244.5 3545,-1238.5 3545,-1238.5 3545,-1194.5 3545,-1194.5 3545,-1188.5 3551,-1182.5 3557,-1182.5 3557,-1182.5 3630,-1182.5 3630,-1182.5 3636,-1182.5 3642,-1188.5 3642,-1194.5 3642,-1194.5 3642,-1238.5 3642,-1238.5 3642,-1244.5 3636,-1250.5 3630,-1250.5"/>
+<text text-anchor="start" x="3564.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3554" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3553" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="3564.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 100->101 -->
+<g id="edge101" class="edge"><title>100->101</title>
+<path fill="none" stroke="black" d="M3620.28,-1293.91C3616.45,-1282.98 3612.3,-1271.14 3608.43,-1260.11"/>
+<polygon fill="black" stroke="black" points="3611.73,-1258.95 3605.12,-1250.67 3605.13,-1261.26 3611.73,-1258.95"/>
+</g>
+<!-- 102 -->
+<g id="node103" class="node"><title>102</title>
+<path fill="#399de5" stroke="black" d="M3745,-1250.5C3745,-1250.5 3672,-1250.5 3672,-1250.5 3666,-1250.5 3660,-1244.5 3660,-1238.5 3660,-1238.5 3660,-1194.5 3660,-1194.5 3660,-1188.5 3666,-1182.5 3672,-1182.5 3672,-1182.5 3745,-1182.5 3745,-1182.5 3751,-1182.5 3757,-1188.5 3757,-1194.5 3757,-1194.5 3757,-1238.5 3757,-1238.5 3757,-1244.5 3751,-1250.5 3745,-1250.5"/>
+<text text-anchor="start" x="3679.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3669" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="3668" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="3679.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 100->102 -->
+<g id="edge102" class="edge"><title>100->102</title>
+<path fill="none" stroke="black" d="M3660.17,-1293.91C3667.22,-1282.76 3674.88,-1270.66 3681.97,-1259.44"/>
+<polygon fill="black" stroke="black" points="3685.14,-1260.99 3687.52,-1250.67 3679.22,-1257.25 3685.14,-1260.99"/>
+</g>
+<!-- 104 -->
+<g id="node105" class="node"><title>104</title>
+<path fill="#e9965a" stroke="black" d="M3923,-1377C3923,-1377 3750,-1377 3750,-1377 3744,-1377 3738,-1371 3738,-1365 3738,-1365 3738,-1306 3738,-1306 3738,-1300 3744,-1294 3750,-1294 3750,-1294 3923,-1294 3923,-1294 3929,-1294 3935,-1300 3935,-1306 3935,-1306 3935,-1365 3935,-1365 3935,-1371 3929,-1377 3923,-1377"/>
+<text text-anchor="start" x="3746" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.733</text>
+<text text-anchor="start" x="3799" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
+<text text-anchor="start" x="3797" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="3796" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 1]</text>
+<text text-anchor="start" x="3807.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 103->104 -->
+<g id="edge104" class="edge"><title>103->104</title>
+<path fill="none" stroke="black" d="M3836.5,-1412.91C3836.5,-1404.65 3836.5,-1395.86 3836.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="3840,-1387.02 3836.5,-1377.02 3833,-1387.02 3840,-1387.02"/>
+</g>
+<!-- 107 -->
+<g id="node108" class="node"><title>107</title>
+<path fill="#399de5" stroke="black" d="M4038,-1369.5C4038,-1369.5 3965,-1369.5 3965,-1369.5 3959,-1369.5 3953,-1363.5 3953,-1357.5 3953,-1357.5 3953,-1313.5 3953,-1313.5 3953,-1307.5 3959,-1301.5 3965,-1301.5 3965,-1301.5 4038,-1301.5 4038,-1301.5 4044,-1301.5 4050,-1307.5 4050,-1313.5 4050,-1313.5 4050,-1357.5 4050,-1357.5 4050,-1363.5 4044,-1369.5 4038,-1369.5"/>
+<text text-anchor="start" x="3972.5" y="-1354.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3962" y="-1339.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
+<text text-anchor="start" x="3961" y="-1324.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 9]</text>
+<text text-anchor="start" x="3972.5" y="-1309.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 103->107 -->
+<g id="edge107" class="edge"><title>103->107</title>
+<path fill="none" stroke="black" d="M3893.75,-1412.91C3910.86,-1400.77 3929.59,-1387.49 3946.55,-1375.46"/>
+<polygon fill="black" stroke="black" points="3948.59,-1378.31 3954.73,-1369.67 3944.54,-1372.6 3948.59,-1378.31"/>
+</g>
+<!-- 105 -->
+<g id="node106" class="node"><title>105</title>
+<path fill="#399de5" stroke="black" d="M3866,-1250.5C3866,-1250.5 3793,-1250.5 3793,-1250.5 3787,-1250.5 3781,-1244.5 3781,-1238.5 3781,-1238.5 3781,-1194.5 3781,-1194.5 3781,-1188.5 3787,-1182.5 3793,-1182.5 3793,-1182.5 3866,-1182.5 3866,-1182.5 3872,-1182.5 3878,-1188.5 3878,-1194.5 3878,-1194.5 3878,-1238.5 3878,-1238.5 3878,-1244.5 3872,-1250.5 3866,-1250.5"/>
+<text text-anchor="start" x="3800.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3790" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3789" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="3800.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 104->105 -->
+<g id="edge105" class="edge"><title>104->105</title>
+<path fill="none" stroke="black" d="M3834.07,-1293.91C3833.43,-1283.2 3832.74,-1271.62 3832.09,-1260.78"/>
+<polygon fill="black" stroke="black" points="3835.58,-1260.44 3831.48,-1250.67 3828.59,-1260.86 3835.58,-1260.44"/>
+</g>
+<!-- 106 -->
+<g id="node107" class="node"><title>106</title>
+<path fill="#e58139" stroke="black" d="M3981,-1250.5C3981,-1250.5 3908,-1250.5 3908,-1250.5 3902,-1250.5 3896,-1244.5 3896,-1238.5 3896,-1238.5 3896,-1194.5 3896,-1194.5 3896,-1188.5 3902,-1182.5 3908,-1182.5 3908,-1182.5 3981,-1182.5 3981,-1182.5 3987,-1182.5 3993,-1188.5 3993,-1194.5 3993,-1194.5 3993,-1238.5 3993,-1238.5 3993,-1244.5 3987,-1250.5 3981,-1250.5"/>
+<text text-anchor="start" x="3915.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3905" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="3904" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 0]</text>
+<text text-anchor="start" x="3915.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 104->106 -->
+<g id="edge106" class="edge"><title>104->106</title>
+<path fill="none" stroke="black" d="M3873.97,-1293.91C3884.67,-1282.32 3896.32,-1269.7 3907.01,-1258.11"/>
+<polygon fill="black" stroke="black" points="3909.67,-1260.39 3913.88,-1250.67 3904.53,-1255.64 3909.67,-1260.39"/>
+</g>
+<!-- 109 -->
+<g id="node110" class="node"><title>109</title>
+<path fill="#e58139" stroke="black" d="M4056,-1488.5C4056,-1488.5 3983,-1488.5 3983,-1488.5 3977,-1488.5 3971,-1482.5 3971,-1476.5 3971,-1476.5 3971,-1432.5 3971,-1432.5 3971,-1426.5 3977,-1420.5 3983,-1420.5 3983,-1420.5 4056,-1420.5 4056,-1420.5 4062,-1420.5 4068,-1426.5 4068,-1432.5 4068,-1432.5 4068,-1476.5 4068,-1476.5 4068,-1482.5 4062,-1488.5 4056,-1488.5"/>
+<text text-anchor="start" x="3990.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3980" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="3979" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
+<text text-anchor="start" x="3990.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 108->109 -->
+<g id="edge109" class="edge"><title>108->109</title>
+<path fill="none" stroke="black" d="M4022.77,-1531.91C4022.31,-1521.2 4021.81,-1509.62 4021.35,-1498.78"/>
+<polygon fill="black" stroke="black" points="4024.84,-1498.51 4020.92,-1488.67 4017.85,-1498.81 4024.84,-1498.51"/>
+</g>
+<!-- 110 -->
+<g id="node111" class="node"><title>110</title>
+<path fill="#399de5" stroke="black" d="M4179,-1488.5C4179,-1488.5 4098,-1488.5 4098,-1488.5 4092,-1488.5 4086,-1482.5 4086,-1476.5 4086,-1476.5 4086,-1432.5 4086,-1432.5 4086,-1426.5 4092,-1420.5 4098,-1420.5 4098,-1420.5 4179,-1420.5 4179,-1420.5 4185,-1420.5 4191,-1426.5 4191,-1432.5 4191,-1432.5 4191,-1476.5 4191,-1476.5 4191,-1482.5 4185,-1488.5 4179,-1488.5"/>
+<text text-anchor="start" x="4109.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4095" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 28</text>
+<text text-anchor="start" x="4094" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 28]</text>
+<text text-anchor="start" x="4109.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 108->110 -->
+<g id="edge110" class="edge"><title>108->110</title>
+<path fill="none" stroke="black" d="M4064.05,-1531.91C4075.34,-1520.32 4087.64,-1507.7 4098.93,-1496.11"/>
+<polygon fill="black" stroke="black" points="4101.71,-1498.27 4106.18,-1488.67 4096.7,-1493.39 4101.71,-1498.27"/>
+</g>
+<!-- 112 -->
+<g id="node113" class="node"><title>112</title>
+<path fill="#e58139" stroke="black" d="M4582,-1726.5C4582,-1726.5 4493,-1726.5 4493,-1726.5 4487,-1726.5 4481,-1720.5 4481,-1714.5 4481,-1714.5 4481,-1670.5 4481,-1670.5 4481,-1664.5 4487,-1658.5 4493,-1658.5 4493,-1658.5 4582,-1658.5 4582,-1658.5 4588,-1658.5 4594,-1664.5 4594,-1670.5 4594,-1670.5 4594,-1714.5 4594,-1714.5 4594,-1720.5 4588,-1726.5 4582,-1726.5"/>
+<text text-anchor="start" x="4508.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4490" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 376</text>
+<text text-anchor="start" x="4489" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [376, 0]</text>
+<text text-anchor="start" x="4508.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 111->112 -->
+<g id="edge112" class="edge"><title>111->112</title>
+<path fill="none" stroke="black" d="M4583.87,-1769.91C4577.1,-1758.76 4569.76,-1746.66 4562.95,-1735.44"/>
+<polygon fill="black" stroke="black" points="4565.81,-1733.4 4557.63,-1726.67 4559.82,-1737.03 4565.81,-1733.4"/>
+</g>
+<!-- 113 -->
+<g id="node114" class="node"><title>113</title>
+<path fill="#56abe9" stroke="black" d="M4735,-1734C4735,-1734 4624,-1734 4624,-1734 4618,-1734 4612,-1728 4612,-1722 4612,-1722 4612,-1663 4612,-1663 4612,-1657 4618,-1651 4624,-1651 4624,-1651 4735,-1651 4735,-1651 4741,-1651 4747,-1657 4747,-1663 4747,-1663 4747,-1722 4747,-1722 4747,-1728 4741,-1734 4735,-1734"/>
+<text text-anchor="start" x="4620" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.039</text>
+<text text-anchor="start" x="4646" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.22</text>
+<text text-anchor="start" x="4632" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 111</text>
+<text text-anchor="start" x="4631" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 97]</text>
+<text text-anchor="start" x="4650.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 111->113 -->
+<g id="edge113" class="edge"><title>111->113</title>
+<path fill="none" stroke="black" d="M4633.13,-1769.91C4638.47,-1761.1 4644.18,-1751.7 4649.7,-1742.61"/>
+<polygon fill="black" stroke="black" points="4652.71,-1744.39 4654.91,-1734.02 4646.73,-1740.75 4652.71,-1744.39"/>
+</g>
+<!-- 114 -->
+<g id="node115" class="node"><title>114</title>
+<path fill="#399de5" stroke="black" d="M4659,-1607.5C4659,-1607.5 4578,-1607.5 4578,-1607.5 4572,-1607.5 4566,-1601.5 4566,-1595.5 4566,-1595.5 4566,-1551.5 4566,-1551.5 4566,-1545.5 4572,-1539.5 4578,-1539.5 4578,-1539.5 4659,-1539.5 4659,-1539.5 4665,-1539.5 4671,-1545.5 4671,-1551.5 4671,-1551.5 4671,-1595.5 4671,-1595.5 4671,-1601.5 4665,-1607.5 4659,-1607.5"/>
+<text text-anchor="start" x="4589.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4575" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 97</text>
+<text text-anchor="start" x="4574" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 97]</text>
+<text text-anchor="start" x="4589.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 113->114 -->
+<g id="edge114" class="edge"><title>113->114</title>
+<path fill="none" stroke="black" d="M4658.34,-1650.91C4652.58,-1639.87 4646.34,-1627.9 4640.54,-1616.77"/>
+<polygon fill="black" stroke="black" points="4643.52,-1614.92 4635.79,-1607.67 4637.31,-1618.15 4643.52,-1614.92"/>
+</g>
+<!-- 115 -->
+<g id="node116" class="node"><title>115</title>
+<path fill="#e58139" stroke="black" d="M4782,-1607.5C4782,-1607.5 4701,-1607.5 4701,-1607.5 4695,-1607.5 4689,-1601.5 4689,-1595.5 4689,-1595.5 4689,-1551.5 4689,-1551.5 4689,-1545.5 4695,-1539.5 4701,-1539.5 4701,-1539.5 4782,-1539.5 4782,-1539.5 4788,-1539.5 4794,-1545.5 4794,-1551.5 4794,-1551.5 4794,-1595.5 4794,-1595.5 4794,-1601.5 4788,-1607.5 4782,-1607.5"/>
+<text text-anchor="start" x="4712.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4698" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
+<text text-anchor="start" x="4697" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 0]</text>
+<text text-anchor="start" x="4712.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 113->115 -->
+<g id="edge115" class="edge"><title>113->115</title>
+<path fill="none" stroke="black" d="M4701.01,-1650.91C4706.86,-1639.87 4713.2,-1627.9 4719.1,-1616.77"/>
+<polygon fill="black" stroke="black" points="4722.33,-1618.14 4723.92,-1607.67 4716.15,-1614.86 4722.33,-1618.14"/>
+</g>
+<!-- 117 -->
+<g id="node118" class="node"><title>117</title>
+<path fill="#e68844" stroke="black" d="M5900.5,-1853C5900.5,-1853 5778.5,-1853 5778.5,-1853 5772.5,-1853 5766.5,-1847 5766.5,-1841 5766.5,-1841 5766.5,-1782 5766.5,-1782 5766.5,-1776 5772.5,-1770 5778.5,-1770 5778.5,-1770 5900.5,-1770 5900.5,-1770 5906.5,-1770 5912.5,-1776 5912.5,-1782 5912.5,-1782 5912.5,-1841 5912.5,-1841 5912.5,-1847 5906.5,-1853 5900.5,-1853"/>
+<text text-anchor="start" x="5807.5" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 0.14</text>
+<text text-anchor="start" x="5802" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.097</text>
+<text text-anchor="start" x="5783.5" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13165</text>
+<text text-anchor="start" x="5774.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12490, 675]</text>
+<text text-anchor="start" x="5810.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 116->117 -->
+<g id="edge117" class="edge"><title>116->117</title>
+<path fill="none" stroke="black" d="M5839.5,-1888.91C5839.5,-1880.65 5839.5,-1871.86 5839.5,-1863.3"/>
+<polygon fill="black" stroke="black" points="5843,-1863.02 5839.5,-1853.02 5836,-1863.02 5843,-1863.02"/>
+</g>
+<!-- 280 -->
+<g id="node281" class="node"><title>280</title>
+<path fill="#48a4e7" stroke="black" d="M6211,-1853C6211,-1853 6108,-1853 6108,-1853 6102,-1853 6096,-1847 6096,-1841 6096,-1841 6096,-1782 6096,-1782 6096,-1776 6102,-1770 6108,-1770 6108,-1770 6211,-1770 6211,-1770 6217,-1770 6223,-1776 6223,-1782 6223,-1782 6223,-1841 6223,-1841 6223,-1847 6217,-1853 6211,-1853"/>
+<text text-anchor="start" x="6104" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="6122" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.131</text>
+<text text-anchor="start" x="6112" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 383</text>
+<text text-anchor="start" x="6106.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [27, 356]</text>
+<text text-anchor="start" x="6130.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 116->280 -->
+<g id="edge280" class="edge"><title>116->280</title>
+<path fill="none" stroke="black" d="M5917.37,-1901.03C5968.82,-1882.22 6035.8,-1857.73 6086.27,-1839.27"/>
+<polygon fill="black" stroke="black" points="6087.63,-1842.5 6095.82,-1835.78 6085.22,-1835.93 6087.63,-1842.5"/>
+</g>
+<!-- 118 -->
+<g id="node119" class="node"><title>118</title>
+<path fill="#e6853f" stroke="black" d="M5792.5,-1734C5792.5,-1734 5556.5,-1734 5556.5,-1734 5550.5,-1734 5544.5,-1728 5544.5,-1722 5544.5,-1722 5544.5,-1663 5544.5,-1663 5544.5,-1657 5550.5,-1651 5556.5,-1651 5556.5,-1651 5792.5,-1651 5792.5,-1651 5798.5,-1651 5804.5,-1657 5804.5,-1663 5804.5,-1663 5804.5,-1722 5804.5,-1722 5804.5,-1728 5798.5,-1734 5792.5,-1734"/>
+<text text-anchor="start" x="5552.5" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 2.749</text>
+<text text-anchor="start" x="5641" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.06</text>
+<text text-anchor="start" x="5618.5" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12653</text>
+<text text-anchor="start" x="5609.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12261, 392]</text>
+<text text-anchor="start" x="5645.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 117->118 -->
+<g id="edge118" class="edge"><title>117->118</title>
+<path fill="none" stroke="black" d="M5782.25,-1769.91C5768.56,-1760.2 5753.84,-1749.76 5739.81,-1739.81"/>
+<polygon fill="black" stroke="black" points="5741.83,-1736.95 5731.64,-1734.02 5737.78,-1742.66 5741.83,-1736.95"/>
+</g>
+<!-- 259 -->
+<g id="node260" class="node"><title>259</title>
+<path fill="#d9ecfa" stroke="black" d="M6077,-1734C6077,-1734 5966,-1734 5966,-1734 5960,-1734 5954,-1728 5954,-1722 5954,-1722 5954,-1663 5954,-1663 5954,-1657 5960,-1651 5966,-1651 5966,-1651 6077,-1651 6077,-1651 6083,-1651 6089,-1657 6089,-1663 6089,-1663 6089,-1722 6089,-1722 6089,-1728 6083,-1734 6077,-1734"/>
+<text text-anchor="start" x="5962" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.008</text>
+<text text-anchor="start" x="5984" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.494</text>
+<text text-anchor="start" x="5974" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 512</text>
+<text text-anchor="start" x="5964.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [229, 283]</text>
+<text text-anchor="start" x="5992.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 117->259 -->
+<g id="edge259" class="edge"><title>117->259</title>
+<path fill="none" stroke="black" d="M5902.64,-1769.91C5917.89,-1760.11 5934.29,-1749.56 5949.89,-1739.53"/>
+<polygon fill="black" stroke="black" points="5951.95,-1742.37 5958.47,-1734.02 5948.16,-1736.48 5951.95,-1742.37"/>
+</g>
+<!-- 119 -->
+<g id="node120" class="node"><title>119</title>
+<path fill="#e5833c" stroke="black" d="M5328,-1615C5328,-1615 5189,-1615 5189,-1615 5183,-1615 5177,-1609 5177,-1603 5177,-1603 5177,-1544 5177,-1544 5177,-1538 5183,-1532 5189,-1532 5189,-1532 5328,-1532 5328,-1532 5334,-1532 5340,-1538 5340,-1544 5340,-1544 5340,-1603 5340,-1603 5340,-1609 5334,-1615 5328,-1615"/>
+<text text-anchor="start" x="5185" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">wrong_fragment ≤ 1.83</text>
+<text text-anchor="start" x="5221" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.027</text>
+<text text-anchor="start" x="5202.5" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12051</text>
+<text text-anchor="start" x="5193.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11884, 167]</text>
+<text text-anchor="start" x="5229.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 118->119 -->
+<g id="edge119" class="edge"><title>118->119</title>
+<path fill="none" stroke="black" d="M5544.3,-1654.88C5481.22,-1637.14 5406.97,-1616.26 5349.97,-1600.23"/>
+<polygon fill="black" stroke="black" points="5350.83,-1596.83 5340.26,-1597.49 5348.94,-1603.57 5350.83,-1596.83"/>
+</g>
+<!-- 210 -->
+<g id="node211" class="node"><title>210</title>
+<path fill="#f5ccaf" stroke="black" d="M5727.5,-1615C5727.5,-1615 5621.5,-1615 5621.5,-1615 5615.5,-1615 5609.5,-1609 5609.5,-1603 5609.5,-1603 5609.5,-1544 5609.5,-1544 5609.5,-1538 5615.5,-1532 5621.5,-1532 5621.5,-1532 5727.5,-1532 5727.5,-1532 5733.5,-1532 5739.5,-1538 5739.5,-1544 5739.5,-1544 5739.5,-1603 5739.5,-1603 5739.5,-1609 5733.5,-1615 5727.5,-1615"/>
+<text text-anchor="start" x="5619" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="5637" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.468</text>
+<text text-anchor="start" x="5627" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 602</text>
+<text text-anchor="start" x="5617.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [377, 225]</text>
+<text text-anchor="start" x="5645.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 118->210 -->
+<g id="edge210" class="edge"><title>118->210</title>
+<path fill="none" stroke="black" d="M5674.5,-1650.91C5674.5,-1642.65 5674.5,-1633.86 5674.5,-1625.3"/>
+<polygon fill="black" stroke="black" points="5678,-1625.02 5674.5,-1615.02 5671,-1625.02 5678,-1625.02"/>
+</g>
+<!-- 120 -->
+<g id="node121" class="node"><title>120</title>
+<path fill="#e5833b" stroke="black" d="M4866.5,-1496C4866.5,-1496 4744.5,-1496 4744.5,-1496 4738.5,-1496 4732.5,-1490 4732.5,-1484 4732.5,-1484 4732.5,-1425 4732.5,-1425 4732.5,-1419 4738.5,-1413 4744.5,-1413 4744.5,-1413 4866.5,-1413 4866.5,-1413 4872.5,-1413 4878.5,-1419 4878.5,-1425 4878.5,-1425 4878.5,-1484 4878.5,-1484 4878.5,-1490 4872.5,-1496 4866.5,-1496"/>
+<text text-anchor="start" x="4746" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.039</text>
+<text text-anchor="start" x="4768" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.024</text>
+<text text-anchor="start" x="4749.5" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12028</text>
+<text text-anchor="start" x="4740.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11884, 144]</text>
+<text text-anchor="start" x="4776.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 119->120 -->
+<g id="edge120" class="edge"><title>119->120</title>
+<path fill="none" stroke="black" d="M5176.99,-1551.45C5095.48,-1530.39 4970.75,-1498.18 4888.66,-1476.98"/>
+<polygon fill="black" stroke="black" points="4889.42,-1473.56 4878.87,-1474.45 4887.67,-1480.34 4889.42,-1473.56"/>
+</g>
+<!-- 209 -->
+<g id="node210" class="node"><title>209</title>
+<path fill="#399de5" stroke="black" d="M5299,-1488.5C5299,-1488.5 5218,-1488.5 5218,-1488.5 5212,-1488.5 5206,-1482.5 5206,-1476.5 5206,-1476.5 5206,-1432.5 5206,-1432.5 5206,-1426.5 5212,-1420.5 5218,-1420.5 5218,-1420.5 5299,-1420.5 5299,-1420.5 5305,-1420.5 5311,-1426.5 5311,-1432.5 5311,-1432.5 5311,-1476.5 5311,-1476.5 5311,-1482.5 5305,-1488.5 5299,-1488.5"/>
+<text text-anchor="start" x="5229.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5215" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 23</text>
+<text text-anchor="start" x="5214" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 23]</text>
+<text text-anchor="start" x="5229.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 119->209 -->
+<g id="edge209" class="edge"><title>119->209</title>
+<path fill="none" stroke="black" d="M5258.5,-1531.91C5258.5,-1521.2 5258.5,-1509.62 5258.5,-1498.78"/>
+<polygon fill="black" stroke="black" points="5262,-1498.67 5258.5,-1488.67 5255,-1498.67 5262,-1498.67"/>
+</g>
+<!-- 121 -->
+<g id="node122" class="node"><title>121</title>
+<path fill="#e88e4d" stroke="black" d="M4618.5,-1377C4618.5,-1377 4504.5,-1377 4504.5,-1377 4498.5,-1377 4492.5,-1371 4492.5,-1365 4492.5,-1365 4492.5,-1306 4492.5,-1306 4492.5,-1300 4498.5,-1294 4504.5,-1294 4504.5,-1294 4618.5,-1294 4618.5,-1294 4624.5,-1294 4630.5,-1300 4630.5,-1306 4630.5,-1306 4630.5,-1365 4630.5,-1365 4630.5,-1371 4624.5,-1377 4618.5,-1377"/>
+<text text-anchor="start" x="4504.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 0.149</text>
+<text text-anchor="start" x="4524" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.167</text>
+<text text-anchor="start" x="4510" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1417</text>
+<text text-anchor="start" x="4500.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1287, 130]</text>
+<text text-anchor="start" x="4532.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 120->121 -->
+<g id="edge121" class="edge"><title>120->121</title>
+<path fill="none" stroke="black" d="M4732.29,-1418.4C4703.16,-1404.43 4669.58,-1388.33 4639.95,-1374.12"/>
+<polygon fill="black" stroke="black" points="4641.42,-1370.94 4630.89,-1369.77 4638.4,-1377.25 4641.42,-1370.94"/>
+</g>
+<!-- 170 -->
+<g id="node171" class="node"><title>170</title>
+<path fill="#e58139" stroke="black" d="M4862.5,-1377C4862.5,-1377 4748.5,-1377 4748.5,-1377 4742.5,-1377 4736.5,-1371 4736.5,-1365 4736.5,-1365 4736.5,-1306 4736.5,-1306 4736.5,-1300 4742.5,-1294 4748.5,-1294 4748.5,-1294 4862.5,-1294 4862.5,-1294 4868.5,-1294 4874.5,-1300 4874.5,-1306 4874.5,-1306 4874.5,-1365 4874.5,-1365 4874.5,-1371 4868.5,-1377 4862.5,-1377"/>
+<text text-anchor="start" x="4746" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">rerror_rate ≤ 0.114</text>
+<text text-anchor="start" x="4768" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.003</text>
+<text text-anchor="start" x="4749.5" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10611</text>
+<text text-anchor="start" x="4744.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10597, 14]</text>
+<text text-anchor="start" x="4776.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 120->170 -->
+<g id="edge170" class="edge"><title>120->170</title>
+<path fill="none" stroke="black" d="M4805.5,-1412.91C4805.5,-1404.65 4805.5,-1395.86 4805.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="4809,-1387.02 4805.5,-1377.02 4802,-1387.02 4809,-1387.02"/>
+</g>
+<!-- 122 -->
+<g id="node123" class="node"><title>122</title>
+<path fill="#e68742" stroke="black" d="M4223.5,-1258C4223.5,-1258 4029.5,-1258 4029.5,-1258 4023.5,-1258 4017.5,-1252 4017.5,-1246 4017.5,-1246 4017.5,-1187 4017.5,-1187 4017.5,-1181 4023.5,-1175 4029.5,-1175 4029.5,-1175 4223.5,-1175 4223.5,-1175 4229.5,-1175 4235.5,-1181 4235.5,-1187 4235.5,-1187 4235.5,-1246 4235.5,-1246 4235.5,-1252 4229.5,-1258 4223.5,-1258"/>
+<text text-anchor="start" x="4025.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.68</text>
+<text text-anchor="start" x="4089" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.086</text>
+<text text-anchor="start" x="4075" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1348</text>
+<text text-anchor="start" x="4069.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1287, 61]</text>
+<text text-anchor="start" x="4097.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 121->122 -->
+<g id="edge122" class="edge"><title>121->122</title>
+<path fill="none" stroke="black" d="M4492.09,-1315.83C4425.84,-1298.01 4324.69,-1270.81 4245.56,-1249.52"/>
+<polygon fill="black" stroke="black" points="4246.1,-1246.04 4235.53,-1246.83 4244.28,-1252.8 4246.1,-1246.04"/>
+</g>
+<!-- 169 -->
+<g id="node170" class="node"><title>169</title>
+<path fill="#399de5" stroke="black" d="M4602,-1250.5C4602,-1250.5 4521,-1250.5 4521,-1250.5 4515,-1250.5 4509,-1244.5 4509,-1238.5 4509,-1238.5 4509,-1194.5 4509,-1194.5 4509,-1188.5 4515,-1182.5 4521,-1182.5 4521,-1182.5 4602,-1182.5 4602,-1182.5 4608,-1182.5 4614,-1188.5 4614,-1194.5 4614,-1194.5 4614,-1238.5 4614,-1238.5 4614,-1244.5 4608,-1250.5 4602,-1250.5"/>
+<text text-anchor="start" x="4532.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4518" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 69</text>
+<text text-anchor="start" x="4517" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 69]</text>
+<text text-anchor="start" x="4532.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 121->169 -->
+<g id="edge169" class="edge"><title>121->169</title>
+<path fill="none" stroke="black" d="M4561.5,-1293.91C4561.5,-1283.2 4561.5,-1271.62 4561.5,-1260.78"/>
+<polygon fill="black" stroke="black" points="4565,-1260.67 4561.5,-1250.67 4558,-1260.67 4565,-1260.67"/>
+</g>
+<!-- 123 -->
+<g id="node124" class="node"><title>123</title>
+<path fill="#e5833d" stroke="black" d="M3800.5,-1139C3800.5,-1139 3694.5,-1139 3694.5,-1139 3688.5,-1139 3682.5,-1133 3682.5,-1127 3682.5,-1127 3682.5,-1068 3682.5,-1068 3682.5,-1062 3688.5,-1056 3694.5,-1056 3694.5,-1056 3800.5,-1056 3800.5,-1056 3806.5,-1056 3812.5,-1062 3812.5,-1068 3812.5,-1068 3812.5,-1127 3812.5,-1127 3812.5,-1133 3806.5,-1139 3800.5,-1139"/>
+<text text-anchor="start" x="3698" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.11</text>
+<text text-anchor="start" x="3710" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.036</text>
+<text text-anchor="start" x="3696" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1249</text>
+<text text-anchor="start" x="3690.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1226, 23]</text>
+<text text-anchor="start" x="3718.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 122->123 -->
+<g id="edge123" class="edge"><title>122->123</title>
+<path fill="none" stroke="black" d="M4017.47,-1180.03C4012.07,-1178.32 4006.73,-1176.63 4001.5,-1175 3941.44,-1156.23 3873.13,-1135.7 3822.49,-1120.64"/>
+<polygon fill="black" stroke="black" points="3823.19,-1117.2 3812.6,-1117.7 3821.19,-1123.91 3823.19,-1117.2"/>
+</g>
+<!-- 162 -->
+<g id="node163" class="node"><title>162</title>
+<path fill="#f5cfb4" stroke="black" d="M4199.5,-1139C4199.5,-1139 4053.5,-1139 4053.5,-1139 4047.5,-1139 4041.5,-1133 4041.5,-1127 4041.5,-1127 4041.5,-1068 4041.5,-1068 4041.5,-1062 4047.5,-1056 4053.5,-1056 4053.5,-1056 4199.5,-1056 4199.5,-1056 4205.5,-1056 4211.5,-1062 4211.5,-1068 4211.5,-1068 4211.5,-1127 4211.5,-1127 4211.5,-1133 4205.5,-1139 4199.5,-1139"/>
+<text text-anchor="start" x="4049.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -1.354</text>
+<text text-anchor="start" x="4089" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.473</text>
+<text text-anchor="start" x="4083" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 99</text>
+<text text-anchor="start" x="4078" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [61, 38]</text>
+<text text-anchor="start" x="4097.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 122->162 -->
+<g id="edge162" class="edge"><title>122->162</title>
+<path fill="none" stroke="black" d="M4126.5,-1174.91C4126.5,-1166.65 4126.5,-1157.86 4126.5,-1149.3"/>
+<polygon fill="black" stroke="black" points="4130,-1149.02 4126.5,-1139.02 4123,-1149.02 4130,-1149.02"/>
+</g>
+<!-- 124 -->
+<g id="node125" class="node"><title>124</title>
+<path fill="#e5833c" stroke="black" d="M3520.5,-1020C3520.5,-1020 3414.5,-1020 3414.5,-1020 3408.5,-1020 3402.5,-1014 3402.5,-1008 3402.5,-1008 3402.5,-949 3402.5,-949 3402.5,-943 3408.5,-937 3414.5,-937 3414.5,-937 3520.5,-937 3520.5,-937 3526.5,-937 3532.5,-943 3532.5,-949 3532.5,-949 3532.5,-1008 3532.5,-1008 3532.5,-1014 3526.5,-1020 3520.5,-1020"/>
+<text text-anchor="start" x="3412" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="3430" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.032</text>
+<text text-anchor="start" x="3416" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1246</text>
+<text text-anchor="start" x="3410.5" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1226, 20]</text>
+<text text-anchor="start" x="3438.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 123->124 -->
+<g id="edge124" class="edge"><title>123->124</title>
+<path fill="none" stroke="black" d="M3682.21,-1069.22C3640.35,-1051.73 3585.9,-1028.98 3542.31,-1010.76"/>
+<polygon fill="black" stroke="black" points="3543.47,-1007.45 3532.9,-1006.83 3540.78,-1013.91 3543.47,-1007.45"/>
+</g>
+<!-- 161 -->
+<g id="node162" class="node"><title>161</title>
+<path fill="#399de5" stroke="black" d="M3784,-1012.5C3784,-1012.5 3711,-1012.5 3711,-1012.5 3705,-1012.5 3699,-1006.5 3699,-1000.5 3699,-1000.5 3699,-956.5 3699,-956.5 3699,-950.5 3705,-944.5 3711,-944.5 3711,-944.5 3784,-944.5 3784,-944.5 3790,-944.5 3796,-950.5 3796,-956.5 3796,-956.5 3796,-1000.5 3796,-1000.5 3796,-1006.5 3790,-1012.5 3784,-1012.5"/>
+<text text-anchor="start" x="3718.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3708" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="3707" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="3718.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 123->161 -->
+<g id="edge161" class="edge"><title>123->161</title>
+<path fill="none" stroke="black" d="M3747.5,-1055.91C3747.5,-1045.2 3747.5,-1033.62 3747.5,-1022.78"/>
+<polygon fill="black" stroke="black" points="3751,-1022.67 3747.5,-1012.67 3744,-1022.67 3751,-1022.67"/>
+</g>
+<!-- 125 -->
+<g id="node126" class="node"><title>125</title>
+<path fill="#e68641" stroke="black" d="M3188,-901C3188,-901 3085,-901 3085,-901 3079,-901 3073,-895 3073,-889 3073,-889 3073,-830 3073,-830 3073,-824 3079,-818 3085,-818 3085,-818 3188,-818 3188,-818 3194,-818 3200,-824 3200,-830 3200,-830 3200,-889 3200,-889 3200,-895 3194,-901 3188,-901"/>
+<text text-anchor="start" x="3081" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="3099" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.078</text>
+<text text-anchor="start" x="3089" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 271</text>
+<text text-anchor="start" x="3083.5" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [260, 11]</text>
+<text text-anchor="start" x="3107.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 124->125 -->
+<g id="edge125" class="edge"><title>124->125</title>
+<path fill="none" stroke="black" d="M3402.5,-954.524C3347.15,-934.959 3267.66,-906.862 3210,-886.482"/>
+<polygon fill="black" stroke="black" points="3210.82,-883.058 3200.23,-883.025 3208.49,-889.658 3210.82,-883.058"/>
+</g>
+<!-- 132 -->
+<g id="node133" class="node"><title>132</title>
+<path fill="#e5823b" stroke="black" d="M3578.5,-901C3578.5,-901 3356.5,-901 3356.5,-901 3350.5,-901 3344.5,-895 3344.5,-889 3344.5,-889 3344.5,-830 3344.5,-830 3344.5,-824 3350.5,-818 3356.5,-818 3356.5,-818 3578.5,-818 3578.5,-818 3584.5,-818 3590.5,-824 3590.5,-830 3590.5,-830 3590.5,-889 3590.5,-889 3590.5,-895 3584.5,-901 3578.5,-901"/>
+<text text-anchor="start" x="3352.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ 1.114</text>
+<text text-anchor="start" x="3430" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.018</text>
+<text text-anchor="start" x="3420" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 975</text>
+<text text-anchor="start" x="3419" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [966, 9]</text>
+<text text-anchor="start" x="3438.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 124->132 -->
+<g id="edge132" class="edge"><title>124->132</title>
+<path fill="none" stroke="black" d="M3467.5,-936.907C3467.5,-928.649 3467.5,-919.864 3467.5,-911.302"/>
+<polygon fill="black" stroke="black" points="3471,-911.021 3467.5,-901.021 3464,-911.021 3471,-911.021"/>
+</g>
+<!-- 126 -->
+<g id="node127" class="node"><title>126</title>
+<path fill="#e5813a" stroke="black" d="M3037.5,-782C3037.5,-782 2891.5,-782 2891.5,-782 2885.5,-782 2879.5,-776 2879.5,-770 2879.5,-770 2879.5,-711 2879.5,-711 2879.5,-705 2885.5,-699 2891.5,-699 2891.5,-699 3037.5,-699 3037.5,-699 3043.5,-699 3049.5,-705 3049.5,-711 3049.5,-711 3049.5,-770 3049.5,-770 3049.5,-776 3043.5,-782 3037.5,-782"/>
+<text text-anchor="start" x="2887.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -1.768</text>
+<text text-anchor="start" x="2927" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.008</text>
+<text text-anchor="start" x="2917" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 261</text>
+<text text-anchor="start" x="2916" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [260, 1]</text>
+<text text-anchor="start" x="2935.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 125->126 -->
+<g id="edge126" class="edge"><title>125->126</title>
+<path fill="none" stroke="black" d="M3076.83,-817.907C3062.55,-808.197 3047.2,-797.758 3032.58,-787.811"/>
+<polygon fill="black" stroke="black" points="3034.31,-784.751 3024.07,-782.021 3030.37,-790.539 3034.31,-784.751"/>
+</g>
+<!-- 131 -->
+<g id="node132" class="node"><title>131</title>
+<path fill="#399de5" stroke="black" d="M3177,-774.5C3177,-774.5 3096,-774.5 3096,-774.5 3090,-774.5 3084,-768.5 3084,-762.5 3084,-762.5 3084,-718.5 3084,-718.5 3084,-712.5 3090,-706.5 3096,-706.5 3096,-706.5 3177,-706.5 3177,-706.5 3183,-706.5 3189,-712.5 3189,-718.5 3189,-718.5 3189,-762.5 3189,-762.5 3189,-768.5 3183,-774.5 3177,-774.5"/>
+<text text-anchor="start" x="3107.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3093" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10</text>
+<text text-anchor="start" x="3092" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 10]</text>
+<text text-anchor="start" x="3107.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 125->131 -->
+<g id="edge131" class="edge"><title>125->131</title>
+<path fill="none" stroke="black" d="M3136.5,-817.907C3136.5,-807.204 3136.5,-795.615 3136.5,-784.776"/>
+<polygon fill="black" stroke="black" points="3140,-784.667 3136.5,-774.667 3133,-784.667 3140,-784.667"/>
+</g>
+<!-- 127 -->
+<g id="node128" class="node"><title>127</title>
+<path fill="#f2c09c" stroke="black" d="M2877.5,-663C2877.5,-663 2641.5,-663 2641.5,-663 2635.5,-663 2629.5,-657 2629.5,-651 2629.5,-651 2629.5,-592 2629.5,-592 2629.5,-586 2635.5,-580 2641.5,-580 2641.5,-580 2877.5,-580 2877.5,-580 2883.5,-580 2889.5,-586 2889.5,-592 2889.5,-592 2889.5,-651 2889.5,-651 2889.5,-657 2883.5,-663 2877.5,-663"/>
+<text text-anchor="start" x="2637.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.419</text>
+<text text-anchor="start" x="2722" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="2720" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="2719" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 1]</text>
+<text text-anchor="start" x="2730.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 126->127 -->
+<g id="edge127" class="edge"><title>126->127</title>
+<path fill="none" stroke="black" d="M2893.38,-698.907C2876.04,-689.016 2857.39,-678.368 2839.67,-668.254"/>
+<polygon fill="black" stroke="black" points="2840.92,-664.938 2830.5,-663.021 2837.45,-671.017 2840.92,-664.938"/>
+</g>
+<!-- 130 -->
+<g id="node131" class="node"><title>130</title>
+<path fill="#e58139" stroke="black" d="M3009,-655.5C3009,-655.5 2920,-655.5 2920,-655.5 2914,-655.5 2908,-649.5 2908,-643.5 2908,-643.5 2908,-599.5 2908,-599.5 2908,-593.5 2914,-587.5 2920,-587.5 2920,-587.5 3009,-587.5 3009,-587.5 3015,-587.5 3021,-593.5 3021,-599.5 3021,-599.5 3021,-643.5 3021,-643.5 3021,-649.5 3015,-655.5 3009,-655.5"/>
+<text text-anchor="start" x="2935.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2917" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 258</text>
+<text text-anchor="start" x="2916" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [258, 0]</text>
+<text text-anchor="start" x="2935.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 126->130 -->
+<g id="edge130" class="edge"><title>126->130</title>
+<path fill="none" stroke="black" d="M2964.5,-698.907C2964.5,-688.204 2964.5,-676.615 2964.5,-665.776"/>
+<polygon fill="black" stroke="black" points="2968,-665.667 2964.5,-655.667 2961,-665.667 2968,-665.667"/>
+</g>
+<!-- 128 -->
+<g id="node129" class="node"><title>128</title>
+<path fill="#e58139" stroke="black" d="M2681,-536.5C2681,-536.5 2608,-536.5 2608,-536.5 2602,-536.5 2596,-530.5 2596,-524.5 2596,-524.5 2596,-480.5 2596,-480.5 2596,-474.5 2602,-468.5 2608,-468.5 2608,-468.5 2681,-468.5 2681,-468.5 2687,-468.5 2693,-474.5 2693,-480.5 2693,-480.5 2693,-524.5 2693,-524.5 2693,-530.5 2687,-536.5 2681,-536.5"/>
+<text text-anchor="start" x="2615.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2605" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="2604" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="2615.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 127->128 -->
+<g id="edge128" class="edge"><title>127->128</title>
+<path fill="none" stroke="black" d="M2719.6,-579.907C2708.21,-568.321 2695.81,-555.698 2684.42,-544.111"/>
+<polygon fill="black" stroke="black" points="2686.61,-541.345 2677.1,-536.667 2681.61,-546.252 2686.61,-541.345"/>
+</g>
+<!-- 129 -->
+<g id="node130" class="node"><title>129</title>
+<path fill="#399de5" stroke="black" d="M2796,-536.5C2796,-536.5 2723,-536.5 2723,-536.5 2717,-536.5 2711,-530.5 2711,-524.5 2711,-524.5 2711,-480.5 2711,-480.5 2711,-474.5 2717,-468.5 2723,-468.5 2723,-468.5 2796,-468.5 2796,-468.5 2802,-468.5 2808,-474.5 2808,-480.5 2808,-480.5 2808,-524.5 2808,-524.5 2808,-530.5 2802,-536.5 2796,-536.5"/>
+<text text-anchor="start" x="2730.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2720" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2719" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="2730.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 127->129 -->
+<g id="edge129" class="edge"><title>127->129</title>
+<path fill="none" stroke="black" d="M2759.5,-579.907C2759.5,-569.204 2759.5,-557.615 2759.5,-546.776"/>
+<polygon fill="black" stroke="black" points="2763,-546.667 2759.5,-536.667 2756,-546.667 2763,-546.667"/>
+</g>
+<!-- 133 -->
+<g id="node134" class="node"><title>133</title>
+<path fill="#e5823b" stroke="black" d="M3457.5,-782C3457.5,-782 3225.5,-782 3225.5,-782 3219.5,-782 3213.5,-776 3213.5,-770 3213.5,-770 3213.5,-711 3213.5,-711 3213.5,-705 3219.5,-699 3225.5,-699 3225.5,-699 3457.5,-699 3457.5,-699 3463.5,-699 3469.5,-705 3469.5,-711 3469.5,-711 3469.5,-770 3469.5,-770 3469.5,-776 3463.5,-782 3457.5,-782"/>
+<text text-anchor="start" x="3221.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ -0.17</text>
+<text text-anchor="start" x="3304" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.016</text>
+<text text-anchor="start" x="3294" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 971</text>
+<text text-anchor="start" x="3293" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [963, 8]</text>
+<text text-anchor="start" x="3312.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 132->133 -->
+<g id="edge133" class="edge"><title>132->133</title>
+<path fill="none" stroke="black" d="M3423.78,-817.907C3413.72,-808.56 3402.93,-798.538 3392.58,-788.929"/>
+<polygon fill="black" stroke="black" points="3394.85,-786.261 3385.14,-782.021 3390.08,-791.39 3394.85,-786.261"/>
+</g>
+<!-- 158 -->
+<g id="node159" class="node"><title>158</title>
+<path fill="#eeab7b" stroke="black" d="M3673,-782C3673,-782 3500,-782 3500,-782 3494,-782 3488,-776 3488,-770 3488,-770 3488,-711 3488,-711 3488,-705 3494,-699 3500,-699 3500,-699 3673,-699 3673,-699 3679,-699 3685,-705 3685,-711 3685,-711 3685,-770 3685,-770 3685,-776 3679,-782 3673,-782"/>
+<text text-anchor="start" x="3496" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.814</text>
+<text text-anchor="start" x="3549" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
+<text text-anchor="start" x="3547" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="3546" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 1]</text>
+<text text-anchor="start" x="3557.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 132->158 -->
+<g id="edge158" class="edge"><title>132->158</title>
+<path fill="none" stroke="black" d="M3508.79,-817.907C3518.2,-808.651 3528.29,-798.732 3537.98,-789.209"/>
+<polygon fill="black" stroke="black" points="3540.61,-791.527 3545.29,-782.021 3535.7,-786.536 3540.61,-791.527"/>
+</g>
+<!-- 134 -->
+<g id="node135" class="node"><title>134</title>
+<path fill="#e68641" stroke="black" d="M3161.5,-663C3161.5,-663 3051.5,-663 3051.5,-663 3045.5,-663 3039.5,-657 3039.5,-651 3039.5,-651 3039.5,-592 3039.5,-592 3039.5,-586 3045.5,-580 3051.5,-580 3051.5,-580 3161.5,-580 3161.5,-580 3167.5,-580 3173.5,-586 3173.5,-592 3173.5,-592 3173.5,-651 3173.5,-651 3173.5,-657 3167.5,-663 3161.5,-663"/>
+<text text-anchor="start" x="3047.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ -0.168</text>
+<text text-anchor="start" x="3069" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.072</text>
+<text text-anchor="start" x="3059" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 134</text>
+<text text-anchor="start" x="3058" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [129, 5]</text>
+<text text-anchor="start" x="3077.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 133->134 -->
+<g id="edge134" class="edge"><title>133->134</title>
+<path fill="none" stroke="black" d="M3259.97,-698.907C3234.94,-686.446 3207.5,-672.784 3182.83,-660.502"/>
+<polygon fill="black" stroke="black" points="3184.39,-657.368 3173.88,-656.045 3181.27,-663.635 3184.39,-657.368"/>
+</g>
+<!-- 143 -->
+<g id="node144" class="node"><title>143</title>
+<path fill="#e5813a" stroke="black" d="M3449,-663C3449,-663 3240,-663 3240,-663 3234,-663 3228,-657 3228,-651 3228,-651 3228,-592 3228,-592 3228,-586 3234,-580 3240,-580 3240,-580 3449,-580 3449,-580 3455,-580 3461,-586 3461,-592 3461,-592 3461,-651 3461,-651 3461,-657 3455,-663 3449,-663"/>
+<text text-anchor="start" x="3236" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.549</text>
+<text text-anchor="start" x="3307" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
+<text text-anchor="start" x="3297" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 837</text>
+<text text-anchor="start" x="3296" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [834, 3]</text>
+<text text-anchor="start" x="3315.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 133->143 -->
+<g id="edge143" class="edge"><title>133->143</title>
+<path fill="none" stroke="black" d="M3342.54,-698.907C3342.75,-690.558 3342.98,-681.671 3343.2,-673.02"/>
+<polygon fill="black" stroke="black" points="3346.7,-673.107 3343.46,-663.021 3339.71,-672.928 3346.7,-673.107"/>
+</g>
+<!-- 135 -->
+<g id="node136" class="node"><title>135</title>
+<path fill="#e5823b" stroke="black" d="M2948.5,-544C2948.5,-544 2838.5,-544 2838.5,-544 2832.5,-544 2826.5,-538 2826.5,-532 2826.5,-532 2826.5,-473 2826.5,-473 2826.5,-467 2832.5,-461 2838.5,-461 2838.5,-461 2948.5,-461 2948.5,-461 2954.5,-461 2960.5,-467 2960.5,-473 2960.5,-473 2960.5,-532 2960.5,-532 2960.5,-538 2954.5,-544 2948.5,-544"/>
+<text text-anchor="start" x="2834.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ -0.224</text>
+<text text-anchor="start" x="2856" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.016</text>
+<text text-anchor="start" x="2846" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 128</text>
+<text text-anchor="start" x="2845" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [127, 1]</text>
+<text text-anchor="start" x="2864.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 134->135 -->
+<g id="edge135" class="edge"><title>134->135</title>
+<path fill="none" stroke="black" d="M3039.4,-583.641C3017.22,-571.46 2992.39,-557.821 2969.59,-545.297"/>
+<polygon fill="black" stroke="black" points="2971.08,-542.121 2960.63,-540.375 2967.71,-548.257 2971.08,-542.121"/>
+</g>
+<!-- 140 -->
+<g id="node141" class="node"><title>140</title>
+<path fill="#9ccef2" stroke="black" d="M3202,-544C3202,-544 3011,-544 3011,-544 3005,-544 2999,-538 2999,-532 2999,-532 2999,-473 2999,-473 2999,-467 3005,-461 3011,-461 3011,-461 3202,-461 3202,-461 3208,-461 3214,-467 3214,-473 3214,-473 3214,-532 3214,-532 3214,-538 3208,-544 3202,-544"/>
+<text text-anchor="start" x="3007" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ -0.201</text>
+<text text-anchor="start" x="3069" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="3067" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="3066" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 4]</text>
+<text text-anchor="start" x="3077.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 134->140 -->
+<g id="edge140" class="edge"><title>134->140</title>
+<path fill="none" stroke="black" d="M3106.5,-579.907C3106.5,-571.649 3106.5,-562.864 3106.5,-554.302"/>
+<polygon fill="black" stroke="black" points="3110,-554.021 3106.5,-544.021 3103,-554.021 3110,-554.021"/>
+</g>
+<!-- 136 -->
+<g id="node137" class="node"><title>136</title>
+<path fill="#e58139" stroke="black" d="M2698,-417.5C2698,-417.5 2609,-417.5 2609,-417.5 2603,-417.5 2597,-411.5 2597,-405.5 2597,-405.5 2597,-361.5 2597,-361.5 2597,-355.5 2603,-349.5 2609,-349.5 2609,-349.5 2698,-349.5 2698,-349.5 2704,-349.5 2710,-355.5 2710,-361.5 2710,-361.5 2710,-405.5 2710,-405.5 2710,-411.5 2704,-417.5 2698,-417.5"/>
+<text text-anchor="start" x="2624.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2606" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 122</text>
+<text text-anchor="start" x="2605" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [122, 0]</text>
+<text text-anchor="start" x="2624.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 135->136 -->
+<g id="edge136" class="edge"><title>135->136</title>
+<path fill="none" stroke="black" d="M2826.14,-465.428C2822.9,-463.895 2819.67,-462.411 2816.5,-461 2774.1,-442.159 2760.19,-445.376 2718.5,-425 2716.75,-424.146 2714.99,-423.258 2713.23,-422.341"/>
+<polygon fill="black" stroke="black" points="2714.85,-419.24 2704.39,-417.558 2711.52,-425.396 2714.85,-419.24"/>
+</g>
+<!-- 137 -->
+<g id="node138" class="node"><title>137</title>
+<path fill="#ea9a61" stroke="black" d="M2913,-425C2913,-425 2740,-425 2740,-425 2734,-425 2728,-419 2728,-413 2728,-413 2728,-354 2728,-354 2728,-348 2734,-342 2740,-342 2740,-342 2913,-342 2913,-342 2919,-342 2925,-348 2925,-354 2925,-354 2925,-413 2925,-413 2925,-419 2919,-425 2913,-425"/>
+<text text-anchor="start" x="2736" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.922</text>
+<text text-anchor="start" x="2789" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
+<text text-anchor="start" x="2787" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="2786" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 1]</text>
+<text text-anchor="start" x="2797.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 135->137 -->
+<g id="edge137" class="edge"><title>135->137</title>
+<path fill="none" stroke="black" d="M2870.25,-460.907C2865.27,-452.195 2859.94,-442.897 2854.79,-433.893"/>
+<polygon fill="black" stroke="black" points="2857.71,-431.959 2849.7,-425.021 2851.64,-435.438 2857.71,-431.959"/>
+</g>
+<!-- 138 -->
+<g id="node139" class="node"><title>138</title>
+<path fill="#399de5" stroke="black" d="M2806,-298.5C2806,-298.5 2733,-298.5 2733,-298.5 2727,-298.5 2721,-292.5 2721,-286.5 2721,-286.5 2721,-242.5 2721,-242.5 2721,-236.5 2727,-230.5 2733,-230.5 2733,-230.5 2806,-230.5 2806,-230.5 2812,-230.5 2818,-236.5 2818,-242.5 2818,-242.5 2818,-286.5 2818,-286.5 2818,-292.5 2812,-298.5 2806,-298.5"/>
+<text text-anchor="start" x="2740.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2730" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="2729" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="2740.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 137->138 -->
+<g id="edge138" class="edge"><title>137->138</title>
+<path fill="none" stroke="black" d="M2806.72,-341.907C2801.35,-330.873 2795.51,-318.898 2790.09,-307.773"/>
+<polygon fill="black" stroke="black" points="2793.18,-306.124 2785.66,-298.667 2786.89,-309.19 2793.18,-306.124"/>
+</g>
+<!-- 139 -->
+<g id="node140" class="node"><title>139</title>
+<path fill="#e58139" stroke="black" d="M2921,-298.5C2921,-298.5 2848,-298.5 2848,-298.5 2842,-298.5 2836,-292.5 2836,-286.5 2836,-286.5 2836,-242.5 2836,-242.5 2836,-236.5 2842,-230.5 2848,-230.5 2848,-230.5 2921,-230.5 2921,-230.5 2927,-230.5 2933,-236.5 2933,-242.5 2933,-242.5 2933,-286.5 2933,-286.5 2933,-292.5 2927,-298.5 2921,-298.5"/>
+<text text-anchor="start" x="2855.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2845" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="2844" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
+<text text-anchor="start" x="2855.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 137->139 -->
+<g id="edge139" class="edge"><title>137->139</title>
+<path fill="none" stroke="black" d="M2846.62,-341.907C2852.09,-330.873 2858.03,-318.898 2863.54,-307.773"/>
+<polygon fill="black" stroke="black" points="2866.75,-309.181 2868.06,-298.667 2860.48,-306.072 2866.75,-309.181"/>
+</g>
+<!-- 141 -->
+<g id="node142" class="node"><title>141</title>
+<path fill="#399de5" stroke="black" d="M3028,-417.5C3028,-417.5 2955,-417.5 2955,-417.5 2949,-417.5 2943,-411.5 2943,-405.5 2943,-405.5 2943,-361.5 2943,-361.5 2943,-355.5 2949,-349.5 2955,-349.5 2955,-349.5 3028,-349.5 3028,-349.5 3034,-349.5 3040,-355.5 3040,-361.5 3040,-361.5 3040,-405.5 3040,-405.5 3040,-411.5 3034,-417.5 3028,-417.5"/>
+<text text-anchor="start" x="2962.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="2952" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="2951" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
+<text text-anchor="start" x="2962.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 140->141 -->
+<g id="edge141" class="edge"><title>140->141</title>
+<path fill="none" stroke="black" d="M3066.6,-460.907C3055.21,-449.321 3042.81,-436.698 3031.42,-425.111"/>
+<polygon fill="black" stroke="black" points="3033.61,-422.345 3024.1,-417.667 3028.61,-427.252 3033.61,-422.345"/>
+</g>
+<!-- 142 -->
+<g id="node143" class="node"><title>142</title>
+<path fill="#e58139" stroke="black" d="M3143,-417.5C3143,-417.5 3070,-417.5 3070,-417.5 3064,-417.5 3058,-411.5 3058,-405.5 3058,-405.5 3058,-361.5 3058,-361.5 3058,-355.5 3064,-349.5 3070,-349.5 3070,-349.5 3143,-349.5 3143,-349.5 3149,-349.5 3155,-355.5 3155,-361.5 3155,-361.5 3155,-405.5 3155,-405.5 3155,-411.5 3149,-417.5 3143,-417.5"/>
+<text text-anchor="start" x="3077.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3067" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3066" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="3077.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 140->142 -->
+<g id="edge142" class="edge"><title>140->142</title>
+<path fill="none" stroke="black" d="M3106.5,-460.907C3106.5,-450.204 3106.5,-438.615 3106.5,-427.776"/>
+<polygon fill="black" stroke="black" points="3110,-427.667 3106.5,-417.667 3103,-427.667 3110,-427.667"/>
+</g>
+<!-- 144 -->
+<g id="node145" class="node"><title>144</title>
+<path fill="#e58139" stroke="black" d="M3431,-544C3431,-544 3258,-544 3258,-544 3252,-544 3246,-538 3246,-532 3246,-532 3246,-473 3246,-473 3246,-467 3252,-461 3258,-461 3258,-461 3431,-461 3431,-461 3437,-461 3443,-467 3443,-473 3443,-473 3443,-532 3443,-532 3443,-538 3437,-544 3431,-544"/>
+<text text-anchor="start" x="3254" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.258</text>
+<text text-anchor="start" x="3307" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
+<text text-anchor="start" x="3297" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 813</text>
+<text text-anchor="start" x="3296" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [812, 1]</text>
+<text text-anchor="start" x="3315.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 143->144 -->
+<g id="edge144" class="edge"><title>143->144</title>
+<path fill="none" stroke="black" d="M3344.5,-579.907C3344.5,-571.649 3344.5,-562.864 3344.5,-554.302"/>
+<polygon fill="black" stroke="black" points="3348,-554.021 3344.5,-544.021 3341,-554.021 3348,-554.021"/>
+</g>
+<!-- 153 -->
+<g id="node154" class="node"><title>153</title>
+<path fill="#e78c4b" stroke="black" d="M3658,-544C3658,-544 3485,-544 3485,-544 3479,-544 3473,-538 3473,-532 3473,-532 3473,-473 3473,-473 3473,-467 3479,-461 3485,-461 3485,-461 3658,-461 3658,-461 3664,-461 3670,-467 3670,-473 3670,-473 3670,-532 3670,-532 3670,-538 3664,-544 3658,-544"/>
+<text text-anchor="start" x="3481" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.294</text>
+<text text-anchor="start" x="3534" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
+<text text-anchor="start" x="3528" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
+<text text-anchor="start" x="3527" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [22, 2]</text>
+<text text-anchor="start" x="3542.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 143->153 -->
+<g id="edge153" class="edge"><title>143->153</title>
+<path fill="none" stroke="black" d="M3423.26,-579.907C3442.8,-569.834 3463.87,-558.977 3483.81,-548.698"/>
+<polygon fill="black" stroke="black" points="3485.6,-551.713 3492.88,-544.021 3482.39,-545.491 3485.6,-551.713"/>
+</g>
+<!-- 145 -->
+<g id="node146" class="node"><title>145</title>
+<path fill="#e58139" stroke="black" d="M3274,-417.5C3274,-417.5 3185,-417.5 3185,-417.5 3179,-417.5 3173,-411.5 3173,-405.5 3173,-405.5 3173,-361.5 3173,-361.5 3173,-355.5 3179,-349.5 3185,-349.5 3185,-349.5 3274,-349.5 3274,-349.5 3280,-349.5 3286,-355.5 3286,-361.5 3286,-361.5 3286,-405.5 3286,-405.5 3286,-411.5 3280,-417.5 3274,-417.5"/>
+<text text-anchor="start" x="3200.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3182" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 609</text>
+<text text-anchor="start" x="3181" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [609, 0]</text>
+<text text-anchor="start" x="3200.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 144->145 -->
+<g id="edge145" class="edge"><title>144->145</title>
+<path fill="none" stroke="black" d="M3304.6,-460.907C3293.21,-449.321 3280.81,-436.698 3269.42,-425.111"/>
+<polygon fill="black" stroke="black" points="3271.61,-422.345 3262.1,-417.667 3266.61,-427.252 3271.61,-422.345"/>
+</g>
+<!-- 146 -->
+<g id="node147" class="node"><title>146</title>
+<path fill="#e5823a" stroke="black" d="M3489,-425C3489,-425 3316,-425 3316,-425 3310,-425 3304,-419 3304,-413 3304,-413 3304,-354 3304,-354 3304,-348 3310,-342 3316,-342 3316,-342 3489,-342 3489,-342 3495,-342 3501,-348 3501,-354 3501,-354 3501,-413 3501,-413 3501,-419 3495,-425 3489,-425"/>
+<text text-anchor="start" x="3312" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.249</text>
+<text text-anchor="start" x="3369" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.01</text>
+<text text-anchor="start" x="3355" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 204</text>
+<text text-anchor="start" x="3354" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 1]</text>
+<text text-anchor="start" x="3373.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 144->146 -->
+<g id="edge146" class="edge"><title>144->146</title>
+<path fill="none" stroke="black" d="M3364.62,-460.907C3368.9,-452.286 3373.46,-443.09 3377.87,-434.175"/>
+<polygon fill="black" stroke="black" points="3381.11,-435.535 3382.41,-425.021 3374.84,-432.426 3381.11,-435.535"/>
+</g>
+<!-- 147 -->
+<g id="node148" class="node"><title>147</title>
+<path fill="#e88f4f" stroke="black" d="M3394.5,-306C3394.5,-306 3252.5,-306 3252.5,-306 3246.5,-306 3240.5,-300 3240.5,-294 3240.5,-294 3240.5,-235 3240.5,-235 3240.5,-229 3246.5,-223 3252.5,-223 3252.5,-223 3394.5,-223 3394.5,-223 3400.5,-223 3406.5,-229 3406.5,-235 3406.5,-235 3406.5,-294 3406.5,-294 3406.5,-300 3400.5,-306 3394.5,-306"/>
+<text text-anchor="start" x="3248.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ 0.394</text>
+<text text-anchor="start" x="3290" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.18</text>
+<text text-anchor="start" x="3280" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10</text>
+<text text-anchor="start" x="3283" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 1]</text>
+<text text-anchor="start" x="3294.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 146->147 -->
+<g id="edge147" class="edge"><title>146->147</title>
+<path fill="none" stroke="black" d="M3375.09,-341.907C3369.09,-333.014 3362.67,-323.509 3356.47,-314.331"/>
+<polygon fill="black" stroke="black" points="3359.36,-312.35 3350.86,-306.021 3353.56,-316.267 3359.36,-312.35"/>
+</g>
+<!-- 152 -->
+<g id="node153" class="node"><title>152</title>
+<path fill="#e58139" stroke="black" d="M3526,-298.5C3526,-298.5 3437,-298.5 3437,-298.5 3431,-298.5 3425,-292.5 3425,-286.5 3425,-286.5 3425,-242.5 3425,-242.5 3425,-236.5 3431,-230.5 3437,-230.5 3437,-230.5 3526,-230.5 3526,-230.5 3532,-230.5 3538,-236.5 3538,-242.5 3538,-242.5 3538,-286.5 3538,-286.5 3538,-292.5 3532,-298.5 3526,-298.5"/>
+<text text-anchor="start" x="3452.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3434" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 194</text>
+<text text-anchor="start" x="3433" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [194, 0]</text>
+<text text-anchor="start" x="3452.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 146->152 -->
+<g id="edge152" class="edge"><title>146->152</title>
+<path fill="none" stroke="black" d="M3429.91,-341.907C3437.51,-330.652 3445.77,-318.418 3453.41,-307.106"/>
+<polygon fill="black" stroke="black" points="3456.41,-308.913 3459.11,-298.667 3450.61,-304.996 3456.41,-308.913"/>
+</g>
+<!-- 148 -->
+<g id="node149" class="node"><title>148</title>
+<path fill="#e58139" stroke="black" d="M3285,-179.5C3285,-179.5 3212,-179.5 3212,-179.5 3206,-179.5 3200,-173.5 3200,-167.5 3200,-167.5 3200,-123.5 3200,-123.5 3200,-117.5 3206,-111.5 3212,-111.5 3212,-111.5 3285,-111.5 3285,-111.5 3291,-111.5 3297,-117.5 3297,-123.5 3297,-123.5 3297,-167.5 3297,-167.5 3297,-173.5 3291,-179.5 3285,-179.5"/>
+<text text-anchor="start" x="3219.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3209" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
+<text text-anchor="start" x="3208" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8, 0]</text>
+<text text-anchor="start" x="3219.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 147->148 -->
+<g id="edge148" class="edge"><title>147->148</title>
+<path fill="none" stroke="black" d="M3297.48,-222.907C3290.26,-211.652 3282.42,-199.418 3275.17,-188.106"/>
+<polygon fill="black" stroke="black" points="3278.1,-186.197 3269.76,-179.667 3272.21,-189.975 3278.1,-186.197"/>
+</g>
+<!-- 149 -->
+<g id="node150" class="node"><title>149</title>
+<path fill="#ffffff" stroke="black" d="M3469.5,-187C3469.5,-187 3327.5,-187 3327.5,-187 3321.5,-187 3315.5,-181 3315.5,-175 3315.5,-175 3315.5,-116 3315.5,-116 3315.5,-110 3321.5,-104 3327.5,-104 3327.5,-104 3469.5,-104 3469.5,-104 3475.5,-104 3481.5,-110 3481.5,-116 3481.5,-116 3481.5,-175 3481.5,-175 3481.5,-181 3475.5,-187 3469.5,-187"/>
+<text text-anchor="start" x="3323.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ 0.581</text>
+<text text-anchor="start" x="3369.5" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="3359" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3358" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="3369.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 147->149 -->
+<g id="edge149" class="edge"><title>147->149</title>
+<path fill="none" stroke="black" d="M3349.52,-222.907C3355.16,-214.105 3361.19,-204.703 3367.02,-195.612"/>
+<polygon fill="black" stroke="black" points="3370.07,-197.328 3372.53,-187.021 3364.18,-193.551 3370.07,-197.328"/>
+</g>
+<!-- 150 -->
+<g id="node151" class="node"><title>150</title>
+<path fill="#399de5" stroke="black" d="M3377,-68C3377,-68 3304,-68 3304,-68 3298,-68 3292,-62 3292,-56 3292,-56 3292,-12 3292,-12 3292,-6 3298,-0 3304,-0 3304,-0 3377,-0 3377,-0 3383,-0 3389,-6 3389,-12 3389,-12 3389,-56 3389,-56 3389,-62 3383,-68 3377,-68"/>
+<text text-anchor="start" x="3311.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3301" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3300" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="3311.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 149->150 -->
+<g id="edge150" class="edge"><title>149->150</title>
+<path fill="none" stroke="black" d="M3376.9,-103.726C3372.31,-95.0615 3367.46,-85.8962 3362.84,-77.1802"/>
+<polygon fill="black" stroke="black" points="3365.91,-75.4982 3358.14,-68.2996 3359.73,-78.7748 3365.91,-75.4982"/>
+</g>
+<!-- 151 -->
+<g id="node152" class="node"><title>151</title>
+<path fill="#e58139" stroke="black" d="M3492,-68C3492,-68 3419,-68 3419,-68 3413,-68 3407,-62 3407,-56 3407,-56 3407,-12 3407,-12 3407,-6 3413,-0 3419,-0 3419,-0 3492,-0 3492,-0 3498,-0 3504,-6 3504,-12 3504,-12 3504,-56 3504,-56 3504,-62 3498,-68 3492,-68"/>
+<text text-anchor="start" x="3426.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3416" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3415" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="3426.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 149->151 -->
+<g id="edge151" class="edge"><title>149->151</title>
+<path fill="none" stroke="black" d="M3419.72,-103.726C3424.24,-95.0615 3429.01,-85.8962 3433.54,-77.1802"/>
+<polygon fill="black" stroke="black" points="3436.65,-78.7859 3438.17,-68.2996 3430.44,-75.5537 3436.65,-78.7859"/>
+</g>
+<!-- 154 -->
+<g id="node155" class="node"><title>154</title>
+<path fill="#e58139" stroke="black" d="M3612,-417.5C3612,-417.5 3531,-417.5 3531,-417.5 3525,-417.5 3519,-411.5 3519,-405.5 3519,-405.5 3519,-361.5 3519,-361.5 3519,-355.5 3525,-349.5 3531,-349.5 3531,-349.5 3612,-349.5 3612,-349.5 3618,-349.5 3624,-355.5 3624,-361.5 3624,-361.5 3624,-405.5 3624,-405.5 3624,-411.5 3618,-417.5 3612,-417.5"/>
+<text text-anchor="start" x="3542.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3528" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 21</text>
+<text text-anchor="start" x="3527" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [21, 0]</text>
+<text text-anchor="start" x="3542.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 153->154 -->
+<g id="edge154" class="edge"><title>153->154</title>
+<path fill="none" stroke="black" d="M3571.5,-460.907C3571.5,-450.204 3571.5,-438.615 3571.5,-427.776"/>
+<polygon fill="black" stroke="black" points="3575,-427.667 3571.5,-417.667 3568,-427.667 3575,-427.667"/>
+</g>
+<!-- 155 -->
+<g id="node156" class="node"><title>155</title>
+<path fill="#9ccef2" stroke="black" d="M3800.5,-425C3800.5,-425 3654.5,-425 3654.5,-425 3648.5,-425 3642.5,-419 3642.5,-413 3642.5,-413 3642.5,-354 3642.5,-354 3642.5,-348 3648.5,-342 3654.5,-342 3654.5,-342 3800.5,-342 3800.5,-342 3806.5,-342 3812.5,-348 3812.5,-354 3812.5,-354 3812.5,-413 3812.5,-413 3812.5,-419 3806.5,-425 3800.5,-425"/>
+<text text-anchor="start" x="3650.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -0.122</text>
+<text text-anchor="start" x="3690" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="3688" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="3687" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
+<text text-anchor="start" x="3698.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 153->155 -->
+<g id="edge155" class="edge"><title>153->155</title>
+<path fill="none" stroke="black" d="M3625.62,-460.907C3638.45,-451.288 3652.23,-440.953 3665.38,-431.09"/>
+<polygon fill="black" stroke="black" points="3667.57,-433.821 3673.47,-425.021 3663.37,-428.221 3667.57,-433.821"/>
+</g>
+<!-- 156 -->
+<g id="node157" class="node"><title>156</title>
+<path fill="#e58139" stroke="black" d="M3747,-298.5C3747,-298.5 3674,-298.5 3674,-298.5 3668,-298.5 3662,-292.5 3662,-286.5 3662,-286.5 3662,-242.5 3662,-242.5 3662,-236.5 3668,-230.5 3674,-230.5 3674,-230.5 3747,-230.5 3747,-230.5 3753,-230.5 3759,-236.5 3759,-242.5 3759,-242.5 3759,-286.5 3759,-286.5 3759,-292.5 3753,-298.5 3747,-298.5"/>
+<text text-anchor="start" x="3681.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3671" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3670" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="3681.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 155->156 -->
+<g id="edge156" class="edge"><title>155->156</title>
+<path fill="none" stroke="black" d="M3721.6,-341.907C3720.05,-331.204 3718.36,-319.615 3716.79,-308.776"/>
+<polygon fill="black" stroke="black" points="3720.22,-308.06 3715.32,-298.667 3713.29,-309.066 3720.22,-308.06"/>
+</g>
+<!-- 157 -->
+<g id="node158" class="node"><title>157</title>
+<path fill="#399de5" stroke="black" d="M3862,-298.5C3862,-298.5 3789,-298.5 3789,-298.5 3783,-298.5 3777,-292.5 3777,-286.5 3777,-286.5 3777,-242.5 3777,-242.5 3777,-236.5 3783,-230.5 3789,-230.5 3789,-230.5 3862,-230.5 3862,-230.5 3868,-230.5 3874,-236.5 3874,-242.5 3874,-242.5 3874,-286.5 3874,-286.5 3874,-292.5 3868,-298.5 3862,-298.5"/>
+<text text-anchor="start" x="3796.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3786" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3785" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="3796.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 155->157 -->
+<g id="edge157" class="edge"><title>155->157</title>
+<path fill="none" stroke="black" d="M3761.5,-341.907C3771.11,-330.432 3781.58,-317.938 3791.21,-306.442"/>
+<polygon fill="black" stroke="black" points="3793.98,-308.58 3797.72,-298.667 3788.61,-304.086 3793.98,-308.58"/>
+</g>
+<!-- 159 -->
+<g id="node160" class="node"><title>159</title>
+<path fill="#e58139" stroke="black" d="M3595,-655.5C3595,-655.5 3522,-655.5 3522,-655.5 3516,-655.5 3510,-649.5 3510,-643.5 3510,-643.5 3510,-599.5 3510,-599.5 3510,-593.5 3516,-587.5 3522,-587.5 3522,-587.5 3595,-587.5 3595,-587.5 3601,-587.5 3607,-593.5 3607,-599.5 3607,-599.5 3607,-643.5 3607,-643.5 3607,-649.5 3601,-655.5 3595,-655.5"/>
+<text text-anchor="start" x="3529.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3519" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="3518" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
+<text text-anchor="start" x="3529.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 158->159 -->
+<g id="edge159" class="edge"><title>158->159</title>
+<path fill="none" stroke="black" d="M3576.79,-698.907C3574.2,-688.094 3571.39,-676.376 3568.78,-665.441"/>
+<polygon fill="black" stroke="black" points="3572.17,-664.578 3566.44,-655.667 3565.36,-666.207 3572.17,-664.578"/>
+</g>
+<!-- 160 -->
+<g id="node161" class="node"><title>160</title>
+<path fill="#399de5" stroke="black" d="M3710,-655.5C3710,-655.5 3637,-655.5 3637,-655.5 3631,-655.5 3625,-649.5 3625,-643.5 3625,-643.5 3625,-599.5 3625,-599.5 3625,-593.5 3631,-587.5 3637,-587.5 3637,-587.5 3710,-587.5 3710,-587.5 3716,-587.5 3722,-593.5 3722,-599.5 3722,-599.5 3722,-643.5 3722,-643.5 3722,-649.5 3716,-655.5 3710,-655.5"/>
+<text text-anchor="start" x="3644.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3634" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="3633" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="3644.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 158->160 -->
+<g id="edge160" class="edge"><title>158->160</title>
+<path fill="none" stroke="black" d="M3616.68,-698.907C3625.14,-687.542 3634.33,-675.178 3642.81,-663.774"/>
+<polygon fill="black" stroke="black" points="3645.68,-665.78 3648.84,-655.667 3640.06,-661.603 3645.68,-665.78"/>
+</g>
+<!-- 163 -->
+<g id="node164" class="node"><title>163</title>
+<path fill="#e58139" stroke="black" d="M4036,-1012.5C4036,-1012.5 3955,-1012.5 3955,-1012.5 3949,-1012.5 3943,-1006.5 3943,-1000.5 3943,-1000.5 3943,-956.5 3943,-956.5 3943,-950.5 3949,-944.5 3955,-944.5 3955,-944.5 4036,-944.5 4036,-944.5 4042,-944.5 4048,-950.5 4048,-956.5 4048,-956.5 4048,-1000.5 4048,-1000.5 4048,-1006.5 4042,-1012.5 4036,-1012.5"/>
+<text text-anchor="start" x="3966.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3952" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 46</text>
+<text text-anchor="start" x="3951" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [46, 0]</text>
+<text text-anchor="start" x="3966.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 162->163 -->
+<g id="edge163" class="edge"><title>162->163</title>
+<path fill="none" stroke="black" d="M4081.05,-1055.91C4067.83,-1044.1 4053.4,-1031.22 4040.23,-1019.45"/>
+<polygon fill="black" stroke="black" points="4042.43,-1016.72 4032.64,-1012.67 4037.76,-1021.94 4042.43,-1016.72"/>
+</g>
+<!-- 164 -->
+<g id="node165" class="node"><title>164</title>
+<path fill="#87c4ef" stroke="black" d="M4181,-1020C4181,-1020 4078,-1020 4078,-1020 4072,-1020 4066,-1014 4066,-1008 4066,-1008 4066,-949 4066,-949 4066,-943 4072,-937 4078,-937 4078,-937 4181,-937 4181,-937 4187,-937 4193,-943 4193,-949 4193,-949 4193,-1008 4193,-1008 4193,-1014 4187,-1020 4181,-1020"/>
+<text text-anchor="start" x="4074" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="4092" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.406</text>
+<text text-anchor="start" x="4086" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 53</text>
+<text text-anchor="start" x="4081" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [15, 38]</text>
+<text text-anchor="start" x="4100.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 162->164 -->
+<g id="edge164" class="edge"><title>162->164</title>
+<path fill="none" stroke="black" d="M4127.54,-1055.91C4127.75,-1047.56 4127.98,-1038.67 4128.2,-1030.02"/>
+<polygon fill="black" stroke="black" points="4131.7,-1030.11 4128.46,-1020.02 4124.71,-1029.93 4131.7,-1030.11"/>
+</g>
+<!-- 165 -->
+<g id="node166" class="node"><title>165</title>
+<path fill="#e58139" stroke="black" d="M3974,-893.5C3974,-893.5 3893,-893.5 3893,-893.5 3887,-893.5 3881,-887.5 3881,-881.5 3881,-881.5 3881,-837.5 3881,-837.5 3881,-831.5 3887,-825.5 3893,-825.5 3893,-825.5 3974,-825.5 3974,-825.5 3980,-825.5 3986,-831.5 3986,-837.5 3986,-837.5 3986,-881.5 3986,-881.5 3986,-887.5 3980,-893.5 3974,-893.5"/>
+<text text-anchor="start" x="3904.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3890" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
+<text text-anchor="start" x="3889" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 0]</text>
+<text text-anchor="start" x="3904.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 164->165 -->
+<g id="edge165" class="edge"><title>164->165</title>
+<path fill="none" stroke="black" d="M4065.91,-942.029C4037.78,-926.222 4008.04,-909.319 3994.5,-901 3993.4,-900.326 3992.3,-899.643 3991.19,-898.951"/>
+<polygon fill="black" stroke="black" points="3992.9,-895.897 3982.58,-893.516 3989.17,-901.815 3992.9,-895.897"/>
+</g>
+<!-- 166 -->
+<g id="node167" class="node"><title>166</title>
+<path fill="#3ea0e6" stroke="black" d="M4243,-901C4243,-901 4016,-901 4016,-901 4010,-901 4004,-895 4004,-889 4004,-889 4004,-830 4004,-830 4004,-824 4010,-818 4016,-818 4016,-818 4243,-818 4243,-818 4249,-818 4255,-824 4255,-830 4255,-830 4255,-889 4255,-889 4255,-895 4249,-901 4243,-901"/>
+<text text-anchor="start" x="4012" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ -0.107</text>
+<text text-anchor="start" x="4096" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.05</text>
+<text text-anchor="start" x="4086" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 39</text>
+<text text-anchor="start" x="4085" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 38]</text>
+<text text-anchor="start" x="4100.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 164->166 -->
+<g id="edge166" class="edge"><title>164->166</title>
+<path fill="none" stroke="black" d="M4129.5,-936.907C4129.5,-928.649 4129.5,-919.864 4129.5,-911.302"/>
+<polygon fill="black" stroke="black" points="4133,-911.021 4129.5,-901.021 4126,-911.021 4133,-911.021"/>
+</g>
+<!-- 167 -->
+<g id="node168" class="node"><title>167</title>
+<path fill="#399de5" stroke="black" d="M4058,-774.5C4058,-774.5 3977,-774.5 3977,-774.5 3971,-774.5 3965,-768.5 3965,-762.5 3965,-762.5 3965,-718.5 3965,-718.5 3965,-712.5 3971,-706.5 3977,-706.5 3977,-706.5 4058,-706.5 4058,-706.5 4064,-706.5 4070,-712.5 4070,-718.5 4070,-718.5 4070,-762.5 4070,-762.5 4070,-768.5 4064,-774.5 4058,-774.5"/>
+<text text-anchor="start" x="3988.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3974" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 38</text>
+<text text-anchor="start" x="3973" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 38]</text>
+<text text-anchor="start" x="3988.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 166->167 -->
+<g id="edge167" class="edge"><title>166->167</title>
+<path fill="none" stroke="black" d="M4090.64,-817.907C4079.55,-806.321 4067.47,-793.698 4056.38,-782.111"/>
+<polygon fill="black" stroke="black" points="4058.69,-779.47 4049.25,-774.667 4053.64,-784.311 4058.69,-779.47"/>
+</g>
+<!-- 168 -->
+<g id="node169" class="node"><title>168</title>
+<path fill="#e58139" stroke="black" d="M4173,-774.5C4173,-774.5 4100,-774.5 4100,-774.5 4094,-774.5 4088,-768.5 4088,-762.5 4088,-762.5 4088,-718.5 4088,-718.5 4088,-712.5 4094,-706.5 4100,-706.5 4100,-706.5 4173,-706.5 4173,-706.5 4179,-706.5 4185,-712.5 4185,-718.5 4185,-718.5 4185,-762.5 4185,-762.5 4185,-768.5 4179,-774.5 4173,-774.5"/>
+<text text-anchor="start" x="4107.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4097" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4096" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="4107.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 166->168 -->
+<g id="edge168" class="edge"><title>166->168</title>
+<path fill="none" stroke="black" d="M4131.93,-817.907C4132.57,-807.204 4133.26,-795.615 4133.91,-784.776"/>
+<polygon fill="black" stroke="black" points="4137.41,-784.858 4134.52,-774.667 4130.42,-784.44 4137.41,-784.858"/>
+</g>
+<!-- 171 -->
+<g id="node172" class="node"><title>171</title>
+<path fill="#e58139" stroke="black" d="M4827,-1258C4827,-1258 4690,-1258 4690,-1258 4684,-1258 4678,-1252 4678,-1246 4678,-1246 4678,-1187 4678,-1187 4678,-1181 4684,-1175 4690,-1175 4690,-1175 4827,-1175 4827,-1175 4833,-1175 4839,-1181 4839,-1187 4839,-1187 4839,-1246 4839,-1246 4839,-1252 4833,-1258 4827,-1258"/>
+<text text-anchor="start" x="4686" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">is_guest_login ≤ 5.161</text>
+<text text-anchor="start" x="4721" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
+<text text-anchor="start" x="4702.5" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10554</text>
+<text text-anchor="start" x="4701.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10545, 9]</text>
+<text text-anchor="start" x="4729.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 170->171 -->
+<g id="edge171" class="edge"><title>170->171</title>
+<path fill="none" stroke="black" d="M4789.19,-1293.91C4785.77,-1285.38 4782.11,-1276.28 4778.57,-1267.46"/>
+<polygon fill="black" stroke="black" points="4781.75,-1266 4774.78,-1258.02 4775.26,-1268.6 4781.75,-1266"/>
+</g>
+<!-- 204 -->
+<g id="node205" class="node"><title>204</title>
+<path fill="#e88d4c" stroke="black" d="M5004,-1258C5004,-1258 4877,-1258 4877,-1258 4871,-1258 4865,-1252 4865,-1246 4865,-1246 4865,-1187 4865,-1187 4865,-1181 4871,-1175 4877,-1175 4877,-1175 5004,-1175 5004,-1175 5010,-1175 5016,-1181 5016,-1187 5016,-1187 5016,-1246 5016,-1246 5016,-1252 5010,-1258 5004,-1258"/>
+<text text-anchor="start" x="4873" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">same_srv_rate ≤ -0.9</text>
+<text text-anchor="start" x="4907" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.16</text>
+<text text-anchor="start" x="4897" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 57</text>
+<text text-anchor="start" x="4896" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 5]</text>
+<text text-anchor="start" x="4911.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 170->204 -->
+<g id="edge204" class="edge"><title>170->204</title>
+<path fill="none" stroke="black" d="M4852.34,-1293.91C4863.23,-1284.47 4874.91,-1274.34 4886.1,-1264.65"/>
+<polygon fill="black" stroke="black" points="4888.48,-1267.22 4893.75,-1258.02 4883.9,-1261.93 4888.48,-1267.22"/>
+</g>
+<!-- 172 -->
+<g id="node173" class="node"><title>172</title>
+<path fill="#e58139" stroke="black" d="M4613,-1139C4613,-1139 4426,-1139 4426,-1139 4420,-1139 4414,-1133 4414,-1127 4414,-1127 4414,-1068 4414,-1068 4414,-1062 4420,-1056 4426,-1056 4426,-1056 4613,-1056 4613,-1056 4619,-1056 4625,-1062 4625,-1068 4625,-1068 4625,-1127 4625,-1127 4625,-1133 4619,-1139 4613,-1139"/>
+<text text-anchor="start" x="4422" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 4.607</text>
+<text text-anchor="start" x="4482" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
+<text text-anchor="start" x="4463.5" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10552</text>
+<text text-anchor="start" x="4462.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10544, 8]</text>
+<text text-anchor="start" x="4490.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 171->172 -->
+<g id="edge172" class="edge"><title>171->172</title>
+<path fill="none" stroke="black" d="M4677.92,-1176.05C4656.69,-1165.66 4633.63,-1154.37 4611.84,-1143.7"/>
+<polygon fill="black" stroke="black" points="4613.11,-1140.43 4602.59,-1139.17 4610.03,-1146.71 4613.11,-1140.43"/>
+</g>
+<!-- 201 -->
+<g id="node202" class="node"><title>201</title>
+<path fill="#ffffff" stroke="black" d="M4861.5,-1139C4861.5,-1139 4655.5,-1139 4655.5,-1139 4649.5,-1139 4643.5,-1133 4643.5,-1127 4643.5,-1127 4643.5,-1068 4643.5,-1068 4643.5,-1062 4649.5,-1056 4655.5,-1056 4655.5,-1056 4861.5,-1056 4861.5,-1056 4867.5,-1056 4873.5,-1062 4873.5,-1068 4873.5,-1068 4873.5,-1127 4873.5,-1127 4873.5,-1133 4867.5,-1139 4861.5,-1139"/>
+<text text-anchor="start" x="4651.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ -0.857</text>
+<text text-anchor="start" x="4729.5" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="4719" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="4718" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="4729.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 171->201 -->
+<g id="edge201" class="edge"><title>171->201</title>
+<path fill="none" stroke="black" d="M4758.5,-1174.91C4758.5,-1166.65 4758.5,-1157.86 4758.5,-1149.3"/>
+<polygon fill="black" stroke="black" points="4762,-1149.02 4758.5,-1139.02 4755,-1149.02 4762,-1149.02"/>
+</g>
+<!-- 173 -->
+<g id="node174" class="node"><title>173</title>
+<path fill="#e58139" stroke="black" d="M4446,-1020C4446,-1020 4339,-1020 4339,-1020 4333,-1020 4327,-1014 4327,-1008 4327,-1008 4327,-949 4327,-949 4327,-943 4333,-937 4339,-937 4339,-937 4446,-937 4446,-937 4452,-937 4458,-943 4458,-949 4458,-949 4458,-1008 4458,-1008 4458,-1014 4452,-1020 4446,-1020"/>
+<text text-anchor="start" x="4335" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ 7.252</text>
+<text text-anchor="start" x="4355" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
+<text text-anchor="start" x="4336.5" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10549</text>
+<text text-anchor="start" x="4335.5" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10542, 7]</text>
+<text text-anchor="start" x="4363.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 172->173 -->
+<g id="edge173" class="edge"><title>172->173</title>
+<path fill="none" stroke="black" d="M4475.44,-1055.91C4465.29,-1046.56 4454.41,-1036.54 4443.98,-1026.93"/>
+<polygon fill="black" stroke="black" points="4446.21,-1024.22 4436.48,-1020.02 4441.47,-1029.37 4446.21,-1024.22"/>
+</g>
+<!-- 198 -->
+<g id="node199" class="node"><title>198</title>
+<path fill="#f2c09c" stroke="black" d="M4661,-1020C4661,-1020 4488,-1020 4488,-1020 4482,-1020 4476,-1014 4476,-1008 4476,-1008 4476,-949 4476,-949 4476,-943 4482,-937 4488,-937 4488,-937 4661,-937 4661,-937 4667,-937 4673,-943 4673,-949 4673,-949 4673,-1008 4673,-1008 4673,-1014 4667,-1020 4661,-1020"/>
+<text text-anchor="start" x="4484" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_file_creations ≤ 16.966</text>
+<text text-anchor="start" x="4537" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="4535" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="4534" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 1]</text>
+<text text-anchor="start" x="4545.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 172->198 -->
+<g id="edge198" class="edge"><title>172->198</title>
+<path fill="none" stroke="black" d="M4538.58,-1055.91C4542.63,-1047.29 4546.96,-1038.09 4551.15,-1029.17"/>
+<polygon fill="black" stroke="black" points="4554.36,-1030.56 4555.45,-1020.02 4548.03,-1027.58 4554.36,-1030.56"/>
+</g>
+<!-- 174 -->
+<g id="node175" class="node"><title>174</title>
+<path fill="#e58139" stroke="black" d="M4392.5,-901C4392.5,-901 4286.5,-901 4286.5,-901 4280.5,-901 4274.5,-895 4274.5,-889 4274.5,-889 4274.5,-830 4274.5,-830 4274.5,-824 4280.5,-818 4286.5,-818 4286.5,-818 4392.5,-818 4392.5,-818 4398.5,-818 4404.5,-824 4404.5,-830 4404.5,-830 4404.5,-889 4404.5,-889 4404.5,-895 4398.5,-901 4392.5,-901"/>
+<text text-anchor="start" x="4283.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 0.413</text>
+<text text-anchor="start" x="4302" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
+<text text-anchor="start" x="4283.5" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10543</text>
+<text text-anchor="start" x="4282.5" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10537, 6]</text>
+<text text-anchor="start" x="4310.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 173->174 -->
+<g id="edge174" class="edge"><title>173->174</title>
+<path fill="none" stroke="black" d="M4374.11,-936.907C4370.21,-928.286 4366.04,-919.09 4362,-910.175"/>
+<polygon fill="black" stroke="black" points="4365.17,-908.686 4357.86,-901.021 4358.79,-911.574 4365.17,-908.686"/>
+</g>
+<!-- 195 -->
+<g id="node196" class="node"><title>195</title>
+<path fill="#ea9a61" stroke="black" d="M4548.5,-901C4548.5,-901 4434.5,-901 4434.5,-901 4428.5,-901 4422.5,-895 4422.5,-889 4422.5,-889 4422.5,-830 4422.5,-830 4422.5,-824 4428.5,-818 4434.5,-818 4434.5,-818 4548.5,-818 4548.5,-818 4554.5,-818 4560.5,-824 4560.5,-830 4560.5,-830 4560.5,-889 4560.5,-889 4560.5,-895 4554.5,-901 4548.5,-901"/>
+<text text-anchor="start" x="4430.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">serror_rate ≤ 0.478</text>
+<text text-anchor="start" x="4454" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
+<text text-anchor="start" x="4452" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="4451" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 1]</text>
+<text text-anchor="start" x="4462.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 173->195 -->
+<g id="edge195" class="edge"><title>173->195</title>
+<path fill="none" stroke="black" d="M4426.85,-936.907C4434.53,-927.832 4442.74,-918.121 4450.66,-908.769"/>
+<polygon fill="black" stroke="black" points="4453.43,-910.916 4457.21,-901.021 4448.08,-906.394 4453.43,-910.916"/>
+</g>
+<!-- 175 -->
+<g id="node176" class="node"><title>175</title>
+<path fill="#e58139" stroke="black" d="M4427.5,-782C4427.5,-782 4223.5,-782 4223.5,-782 4217.5,-782 4211.5,-776 4211.5,-770 4211.5,-770 4211.5,-711 4211.5,-711 4211.5,-705 4217.5,-699 4223.5,-699 4223.5,-699 4427.5,-699 4427.5,-699 4433.5,-699 4439.5,-705 4439.5,-711 4439.5,-711 4439.5,-770 4439.5,-770 4439.5,-776 4433.5,-782 4427.5,-782"/>
+<text text-anchor="start" x="4219.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ 0.056</text>
+<text text-anchor="start" x="4288" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
+<text text-anchor="start" x="4269.5" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10531</text>
+<text text-anchor="start" x="4268.5" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10526, 5]</text>
+<text text-anchor="start" x="4296.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 174->175 -->
+<g id="edge175" class="edge"><title>174->175</title>
+<path fill="none" stroke="black" d="M4334.64,-817.907C4333.64,-809.558 4332.58,-800.671 4331.55,-792.02"/>
+<polygon fill="black" stroke="black" points="4335.01,-791.534 4330.35,-782.021 4328.06,-792.366 4335.01,-791.534"/>
+</g>
+<!-- 192 -->
+<g id="node193" class="node"><title>192</title>
+<path fill="#e78c4b" stroke="black" d="M4609.5,-782C4609.5,-782 4469.5,-782 4469.5,-782 4463.5,-782 4457.5,-776 4457.5,-770 4457.5,-770 4457.5,-711 4457.5,-711 4457.5,-705 4463.5,-699 4469.5,-699 4469.5,-699 4609.5,-699 4609.5,-699 4615.5,-699 4621.5,-705 4621.5,-711 4621.5,-711 4621.5,-770 4621.5,-770 4621.5,-776 4615.5,-782 4609.5,-782"/>
+<text text-anchor="start" x="4465.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">su_attempted ≤ 10.222</text>
+<text text-anchor="start" x="4502" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
+<text text-anchor="start" x="4496" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12</text>
+<text text-anchor="start" x="4495" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 1]</text>
+<text text-anchor="start" x="4510.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 174->192 -->
+<g id="edge192" class="edge"><title>174->192</title>
+<path fill="none" stroke="black" d="M4404.71,-820.352C4422.82,-809.759 4442.66,-798.15 4461.43,-787.174"/>
+<polygon fill="black" stroke="black" points="4463.38,-790.084 4470.25,-782.013 4459.85,-784.042 4463.38,-790.084"/>
+</g>
+<!-- 176 -->
+<g id="node177" class="node"><title>176</title>
+<path fill="#e58139" stroke="black" d="M4313,-663C4313,-663 4206,-663 4206,-663 4200,-663 4194,-657 4194,-651 4194,-651 4194,-592 4194,-592 4194,-586 4200,-580 4206,-580 4206,-580 4313,-580 4313,-580 4319,-580 4325,-586 4325,-592 4325,-592 4325,-651 4325,-651 4325,-657 4319,-663 4313,-663"/>
+<text text-anchor="start" x="4202" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 0.006</text>
+<text text-anchor="start" x="4222" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
+<text text-anchor="start" x="4203.5" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10469</text>
+<text text-anchor="start" x="4202.5" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10466, 3]</text>
+<text text-anchor="start" x="4230.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 175->176 -->
+<g id="edge176" class="edge"><title>175->176</title>
+<path fill="none" stroke="black" d="M4302.6,-698.907C4297.69,-690.195 4292.44,-680.897 4287.36,-671.893"/>
+<polygon fill="black" stroke="black" points="4290.32,-670.011 4282.36,-663.021 4284.22,-673.45 4290.32,-670.011"/>
+</g>
+<!-- 187 -->
+<g id="node188" class="node"><title>187</title>
+<path fill="#e68540" stroke="black" d="M4462,-663C4462,-663 4355,-663 4355,-663 4349,-663 4343,-657 4343,-651 4343,-651 4343,-592 4343,-592 4343,-586 4349,-580 4355,-580 4355,-580 4462,-580 4462,-580 4468,-580 4474,-586 4474,-592 4474,-592 4474,-651 4474,-651 4474,-657 4468,-663 4462,-663"/>
+<text text-anchor="start" x="4351" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
+<text text-anchor="start" x="4371" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.062</text>
+<text text-anchor="start" x="4365" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 62</text>
+<text text-anchor="start" x="4364" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [60, 2]</text>
+<text text-anchor="start" x="4379.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 175->187 -->
+<g id="edge187" class="edge"><title>175->187</title>
+<path fill="none" stroke="black" d="M4354.3,-698.907C4360.61,-690.014 4367.35,-680.509 4373.86,-671.331"/>
+<polygon fill="black" stroke="black" points="4376.82,-673.202 4379.75,-663.021 4371.11,-669.152 4376.82,-673.202"/>
+</g>
+<!-- 177 -->
+<g id="node178" class="node"><title>177</title>
+<path fill="#e58139" stroke="black" d="M4134.5,-544C4134.5,-544 3960.5,-544 3960.5,-544 3954.5,-544 3948.5,-538 3948.5,-532 3948.5,-532 3948.5,-473 3948.5,-473 3948.5,-467 3954.5,-461 3960.5,-461 3960.5,-461 4134.5,-461 4134.5,-461 4140.5,-461 4146.5,-467 4146.5,-473 4146.5,-473 4146.5,-532 4146.5,-532 4146.5,-538 4140.5,-544 4134.5,-544"/>
+<text text-anchor="start" x="3956.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.612</text>
+<text text-anchor="start" x="4018.5" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3991.5" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10451</text>
+<text text-anchor="start" x="3990.5" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10449, 2]</text>
+<text text-anchor="start" x="4018.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 176->177 -->
+<g id="edge177" class="edge"><title>176->177</title>
+<path fill="none" stroke="black" d="M4193.87,-584.282C4173.66,-573.124 4151.14,-560.695 4129.94,-548.997"/>
+<polygon fill="black" stroke="black" points="4131.39,-545.802 4120.95,-544.034 4128.01,-551.93 4131.39,-545.802"/>
+</g>
+<!-- 184 -->
+<g id="node185" class="node"><title>184</title>
+<path fill="#e78845" stroke="black" d="M4346,-544C4346,-544 4177,-544 4177,-544 4171,-544 4165,-538 4165,-532 4165,-532 4165,-473 4165,-473 4165,-467 4171,-461 4177,-461 4177,-461 4346,-461 4346,-461 4352,-461 4358,-467 4358,-473 4358,-473 4358,-532 4358,-532 4358,-538 4352,-544 4346,-544"/>
+<text text-anchor="start" x="4173" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 1.224</text>
+<text text-anchor="start" x="4224" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.105</text>
+<text text-anchor="start" x="4218" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 18</text>
+<text text-anchor="start" x="4217" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [17, 1]</text>
+<text text-anchor="start" x="4232.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 176->184 -->
+<g id="edge184" class="edge"><title>176->184</title>
+<path fill="none" stroke="black" d="M4260.19,-579.907C4260.34,-571.558 4260.49,-562.671 4260.64,-554.02"/>
+<polygon fill="black" stroke="black" points="4264.14,-554.079 4260.81,-544.021 4257.14,-553.959 4264.14,-554.079"/>
+</g>
+<!-- 178 -->
+<g id="node179" class="node"><title>178</title>
+<path fill="#e58139" stroke="black" d="M3948.5,-417.5C3948.5,-417.5 3842.5,-417.5 3842.5,-417.5 3836.5,-417.5 3830.5,-411.5 3830.5,-405.5 3830.5,-405.5 3830.5,-361.5 3830.5,-361.5 3830.5,-355.5 3836.5,-349.5 3842.5,-349.5 3842.5,-349.5 3948.5,-349.5 3948.5,-349.5 3954.5,-349.5 3960.5,-355.5 3960.5,-361.5 3960.5,-361.5 3960.5,-405.5 3960.5,-405.5 3960.5,-411.5 3954.5,-417.5 3948.5,-417.5"/>
+<text text-anchor="start" x="3866.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3839.5" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10361</text>
+<text text-anchor="start" x="3838.5" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10361, 0]</text>
+<text text-anchor="start" x="3866.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 177->178 -->
+<g id="edge178" class="edge"><title>177->178</title>
+<path fill="none" stroke="black" d="M3994.76,-460.907C3979.14,-448.88 3962.06,-435.735 3946.54,-423.791"/>
+<polygon fill="black" stroke="black" points="3948.65,-420.993 3938.59,-417.667 3944.38,-426.54 3948.65,-420.993"/>
+</g>
+<!-- 179 -->
+<g id="node180" class="node"><title>179</title>
+<path fill="#e6843d" stroke="black" d="M4164.5,-425C4164.5,-425 3990.5,-425 3990.5,-425 3984.5,-425 3978.5,-419 3978.5,-413 3978.5,-413 3978.5,-354 3978.5,-354 3978.5,-348 3984.5,-342 3990.5,-342 3990.5,-342 4164.5,-342 4164.5,-342 4170.5,-342 4176.5,-348 4176.5,-354 4176.5,-354 4176.5,-413 4176.5,-413 4176.5,-419 4170.5,-425 4164.5,-425"/>
+<text text-anchor="start" x="3986.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.677</text>
+<text text-anchor="start" x="4040" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.043</text>
+<text text-anchor="start" x="4034" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 90</text>
+<text text-anchor="start" x="4033" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [88, 2]</text>
+<text text-anchor="start" x="4048.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 177->179 -->
+<g id="edge179" class="edge"><title>177->179</title>
+<path fill="none" stroke="black" d="M4057.91,-460.907C4060.07,-452.468 4062.38,-443.477 4064.62,-434.738"/>
+<polygon fill="black" stroke="black" points="4068.02,-435.577 4067.11,-425.021 4061.24,-433.838 4068.02,-435.577"/>
+</g>
+<!-- 180 -->
+<g id="node181" class="node"><title>180</title>
+<path fill="#efb388" stroke="black" d="M4012,-306C4012,-306 3913,-306 3913,-306 3907,-306 3901,-300 3901,-294 3901,-294 3901,-235 3901,-235 3901,-229 3907,-223 3913,-223 3913,-223 4012,-223 4012,-223 4018,-223 4024,-229 4024,-235 4024,-235 4024,-294 4024,-294 4024,-300 4018,-306 4012,-306"/>
+<text text-anchor="start" x="3909" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.113</text>
+<text text-anchor="start" x="3925" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.408</text>
+<text text-anchor="start" x="3923" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="3922" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 2]</text>
+<text text-anchor="start" x="3933.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 179->180 -->
+<g id="edge180" class="edge"><title>179->180</title>
+<path fill="none" stroke="black" d="M4037.6,-341.907C4028.5,-332.651 4018.75,-322.732 4009.39,-313.209"/>
+<polygon fill="black" stroke="black" points="4011.83,-310.699 4002.33,-306.021 4006.84,-315.606 4011.83,-310.699"/>
+</g>
+<!-- 183 -->
+<g id="node184" class="node"><title>183</title>
+<path fill="#e58139" stroke="black" d="M4135,-298.5C4135,-298.5 4054,-298.5 4054,-298.5 4048,-298.5 4042,-292.5 4042,-286.5 4042,-286.5 4042,-242.5 4042,-242.5 4042,-236.5 4048,-230.5 4054,-230.5 4054,-230.5 4135,-230.5 4135,-230.5 4141,-230.5 4147,-236.5 4147,-242.5 4147,-242.5 4147,-286.5 4147,-286.5 4147,-292.5 4141,-298.5 4135,-298.5"/>
+<text text-anchor="start" x="4065.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4051" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 83</text>
+<text text-anchor="start" x="4050" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [83, 0]</text>
+<text text-anchor="start" x="4065.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 179->183 -->
+<g id="edge183" class="edge"><title>179->183</title>
+<path fill="none" stroke="black" d="M4083.4,-341.907C4084.95,-331.204 4086.64,-319.615 4088.21,-308.776"/>
+<polygon fill="black" stroke="black" points="4091.71,-309.066 4089.68,-298.667 4084.78,-308.06 4091.71,-309.066"/>
+</g>
+<!-- 181 -->
+<g id="node182" class="node"><title>181</title>
+<path fill="#e58139" stroke="black" d="M3941,-179.5C3941,-179.5 3868,-179.5 3868,-179.5 3862,-179.5 3856,-173.5 3856,-167.5 3856,-167.5 3856,-123.5 3856,-123.5 3856,-117.5 3862,-111.5 3868,-111.5 3868,-111.5 3941,-111.5 3941,-111.5 3947,-111.5 3953,-117.5 3953,-123.5 3953,-123.5 3953,-167.5 3953,-167.5 3953,-173.5 3947,-179.5 3941,-179.5"/>
+<text text-anchor="start" x="3875.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3865" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="3864" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
+<text text-anchor="start" x="3875.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 180->181 -->
+<g id="edge181" class="edge"><title>180->181</title>
+<path fill="none" stroke="black" d="M3942.38,-222.907C3936.91,-211.873 3930.97,-199.898 3925.46,-188.773"/>
+<polygon fill="black" stroke="black" points="3928.52,-187.072 3920.94,-179.667 3922.25,-190.181 3928.52,-187.072"/>
+</g>
+<!-- 182 -->
+<g id="node183" class="node"><title>182</title>
+<path fill="#399de5" stroke="black" d="M4056,-179.5C4056,-179.5 3983,-179.5 3983,-179.5 3977,-179.5 3971,-173.5 3971,-167.5 3971,-167.5 3971,-123.5 3971,-123.5 3971,-117.5 3977,-111.5 3983,-111.5 3983,-111.5 4056,-111.5 4056,-111.5 4062,-111.5 4068,-117.5 4068,-123.5 4068,-123.5 4068,-167.5 4068,-167.5 4068,-173.5 4062,-179.5 4056,-179.5"/>
+<text text-anchor="start" x="3990.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="3980" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="3979" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="3990.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 180->182 -->
+<g id="edge182" class="edge"><title>180->182</title>
+<path fill="none" stroke="black" d="M3982.28,-222.907C3987.65,-211.873 3993.49,-199.898 3998.91,-188.773"/>
+<polygon fill="black" stroke="black" points="4002.11,-190.19 4003.34,-179.667 3995.82,-187.124 4002.11,-190.19"/>
+</g>
+<!-- 185 -->
+<g id="node186" class="node"><title>185</title>
+<path fill="#e58139" stroke="black" d="M4288,-417.5C4288,-417.5 4207,-417.5 4207,-417.5 4201,-417.5 4195,-411.5 4195,-405.5 4195,-405.5 4195,-361.5 4195,-361.5 4195,-355.5 4201,-349.5 4207,-349.5 4207,-349.5 4288,-349.5 4288,-349.5 4294,-349.5 4300,-355.5 4300,-361.5 4300,-361.5 4300,-405.5 4300,-405.5 4300,-411.5 4294,-417.5 4288,-417.5"/>
+<text text-anchor="start" x="4218.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4204" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 17</text>
+<text text-anchor="start" x="4203" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [17, 0]</text>
+<text text-anchor="start" x="4218.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 184->185 -->
+<g id="edge185" class="edge"><title>184->185</title>
+<path fill="none" stroke="black" d="M4256.64,-460.907C4255.36,-450.204 4253.98,-438.615 4252.68,-427.776"/>
+<polygon fill="black" stroke="black" points="4256.13,-427.18 4251.47,-417.667 4249.18,-428.012 4256.13,-427.18"/>
+</g>
+<!-- 186 -->
+<g id="node187" class="node"><title>186</title>
+<path fill="#399de5" stroke="black" d="M4403,-417.5C4403,-417.5 4330,-417.5 4330,-417.5 4324,-417.5 4318,-411.5 4318,-405.5 4318,-405.5 4318,-361.5 4318,-361.5 4318,-355.5 4324,-349.5 4330,-349.5 4330,-349.5 4403,-349.5 4403,-349.5 4409,-349.5 4415,-355.5 4415,-361.5 4415,-361.5 4415,-405.5 4415,-405.5 4415,-411.5 4409,-417.5 4403,-417.5"/>
+<text text-anchor="start" x="4337.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4327" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4326" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="4337.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 184->186 -->
+<g id="edge186" class="edge"><title>184->186</title>
+<path fill="none" stroke="black" d="M4297.93,-460.907C4308.33,-449.321 4319.66,-436.698 4330.05,-425.111"/>
+<polygon fill="black" stroke="black" points="4332.66,-427.447 4336.73,-417.667 4327.45,-422.772 4332.66,-427.447"/>
+</g>
+<!-- 188 -->
+<g id="node189" class="node"><title>188</title>
+<path fill="#9ccef2" stroke="black" d="M4561,-544C4561,-544 4388,-544 4388,-544 4382,-544 4376,-538 4376,-532 4376,-532 4376,-473 4376,-473 4376,-467 4382,-461 4388,-461 4388,-461 4561,-461 4561,-461 4567,-461 4573,-467 4573,-473 4573,-473 4573,-532 4573,-532 4573,-538 4567,-544 4561,-544"/>
+<text text-anchor="start" x="4384" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.529</text>
+<text text-anchor="start" x="4437" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="4435" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="4434" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
+<text text-anchor="start" x="4445.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 187->188 -->
+<g id="edge188" class="edge"><title>187->188</title>
+<path fill="none" stroke="black" d="M4431.4,-579.907C4436.31,-571.195 4441.56,-561.897 4446.64,-552.893"/>
+<polygon fill="black" stroke="black" points="4449.78,-554.45 4451.64,-544.021 4443.68,-551.011 4449.78,-554.45"/>
+</g>
+<!-- 191 -->
+<g id="node192" class="node"><title>191</title>
+<path fill="#e58139" stroke="black" d="M4684,-536.5C4684,-536.5 4603,-536.5 4603,-536.5 4597,-536.5 4591,-530.5 4591,-524.5 4591,-524.5 4591,-480.5 4591,-480.5 4591,-474.5 4597,-468.5 4603,-468.5 4603,-468.5 4684,-468.5 4684,-468.5 4690,-468.5 4696,-474.5 4696,-480.5 4696,-480.5 4696,-524.5 4696,-524.5 4696,-530.5 4690,-536.5 4684,-536.5"/>
+<text text-anchor="start" x="4614.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4600" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 59</text>
+<text text-anchor="start" x="4599" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [59, 0]</text>
+<text text-anchor="start" x="4614.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 187->191 -->
+<g id="edge191" class="edge"><title>187->191</title>
+<path fill="none" stroke="black" d="M4474,-583.977C4476.86,-582.6 4479.7,-581.267 4482.5,-580 4525.16,-560.706 4539.63,-564.94 4581.5,-544 4583.04,-543.229 4584.59,-542.428 4586.15,-541.602"/>
+<polygon fill="black" stroke="black" points="4588.02,-544.563 4595.05,-536.632 4584.61,-538.451 4588.02,-544.563"/>
+</g>
+<!-- 189 -->
+<g id="node190" class="node"><title>189</title>
+<path fill="#399de5" stroke="black" d="M4518,-417.5C4518,-417.5 4445,-417.5 4445,-417.5 4439,-417.5 4433,-411.5 4433,-405.5 4433,-405.5 4433,-361.5 4433,-361.5 4433,-355.5 4439,-349.5 4445,-349.5 4445,-349.5 4518,-349.5 4518,-349.5 4524,-349.5 4530,-355.5 4530,-361.5 4530,-361.5 4530,-405.5 4530,-405.5 4530,-411.5 4524,-417.5 4518,-417.5"/>
+<text text-anchor="start" x="4452.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4442" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="4441" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
+<text text-anchor="start" x="4452.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 188->189 -->
+<g id="edge189" class="edge"><title>188->189</title>
+<path fill="none" stroke="black" d="M4476.93,-460.907C4477.57,-450.204 4478.26,-438.615 4478.91,-427.776"/>
+<polygon fill="black" stroke="black" points="4482.41,-427.858 4479.52,-417.667 4475.42,-427.44 4482.41,-427.858"/>
+</g>
+<!-- 190 -->
+<g id="node191" class="node"><title>190</title>
+<path fill="#e58139" stroke="black" d="M4633,-417.5C4633,-417.5 4560,-417.5 4560,-417.5 4554,-417.5 4548,-411.5 4548,-405.5 4548,-405.5 4548,-361.5 4548,-361.5 4548,-355.5 4554,-349.5 4560,-349.5 4560,-349.5 4633,-349.5 4633,-349.5 4639,-349.5 4645,-355.5 4645,-361.5 4645,-361.5 4645,-405.5 4645,-405.5 4645,-411.5 4639,-417.5 4633,-417.5"/>
+<text text-anchor="start" x="4567.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4557" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4556" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="4567.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 188->190 -->
+<g id="edge190" class="edge"><title>188->190</title>
+<path fill="none" stroke="black" d="M4516.83,-460.907C4529.02,-449.211 4542.32,-436.457 4554.5,-424.78"/>
+<polygon fill="black" stroke="black" points="4557.12,-427.115 4561.92,-417.667 4552.28,-422.062 4557.12,-427.115"/>
+</g>
+<!-- 193 -->
+<g id="node194" class="node"><title>193</title>
+<path fill="#399de5" stroke="black" d="M4577,-655.5C4577,-655.5 4504,-655.5 4504,-655.5 4498,-655.5 4492,-649.5 4492,-643.5 4492,-643.5 4492,-599.5 4492,-599.5 4492,-593.5 4498,-587.5 4504,-587.5 4504,-587.5 4577,-587.5 4577,-587.5 4583,-587.5 4589,-593.5 4589,-599.5 4589,-599.5 4589,-643.5 4589,-643.5 4589,-649.5 4583,-655.5 4577,-655.5"/>
+<text text-anchor="start" x="4511.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4501" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4500" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="4511.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 192->193 -->
+<g id="edge193" class="edge"><title>192->193</title>
+<path fill="none" stroke="black" d="M4539.85,-698.907C4539.94,-688.204 4540.04,-676.615 4540.13,-665.776"/>
+<polygon fill="black" stroke="black" points="4543.63,-665.697 4540.22,-655.667 4536.63,-665.637 4543.63,-665.697"/>
+</g>
+<!-- 194 -->
+<g id="node195" class="node"><title>194</title>
+<path fill="#e58139" stroke="black" d="M4700,-655.5C4700,-655.5 4619,-655.5 4619,-655.5 4613,-655.5 4607,-649.5 4607,-643.5 4607,-643.5 4607,-599.5 4607,-599.5 4607,-593.5 4613,-587.5 4619,-587.5 4619,-587.5 4700,-587.5 4700,-587.5 4706,-587.5 4712,-593.5 4712,-599.5 4712,-599.5 4712,-643.5 4712,-643.5 4712,-649.5 4706,-655.5 4700,-655.5"/>
+<text text-anchor="start" x="4630.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4616" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
+<text text-anchor="start" x="4615" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 0]</text>
+<text text-anchor="start" x="4630.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 192->194 -->
+<g id="edge194" class="edge"><title>192->194</title>
+<path fill="none" stroke="black" d="M4581.13,-698.907C4593.13,-687.211 4606.21,-674.457 4618.19,-662.78"/>
+<polygon fill="black" stroke="black" points="4620.77,-665.154 4625.48,-655.667 4615.88,-660.142 4620.77,-665.154"/>
+</g>
+<!-- 196 -->
+<g id="node197" class="node"><title>196</title>
+<path fill="#e58139" stroke="black" d="M4725,-774.5C4725,-774.5 4652,-774.5 4652,-774.5 4646,-774.5 4640,-768.5 4640,-762.5 4640,-762.5 4640,-718.5 4640,-718.5 4640,-712.5 4646,-706.5 4652,-706.5 4652,-706.5 4725,-706.5 4725,-706.5 4731,-706.5 4737,-712.5 4737,-718.5 4737,-718.5 4737,-762.5 4737,-762.5 4737,-768.5 4731,-774.5 4725,-774.5"/>
+<text text-anchor="start" x="4659.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4649" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="4648" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
+<text text-anchor="start" x="4659.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 195->196 -->
+<g id="edge196" class="edge"><title>195->196</title>
+<path fill="none" stroke="black" d="M4560.56,-822.376C4583.15,-810.065 4608.16,-795.892 4630.5,-782 4631.44,-781.416 4632.38,-780.824 4633.33,-780.223"/>
+<polygon fill="black" stroke="black" points="4635.45,-783.024 4641.94,-774.65 4631.64,-777.148 4635.45,-783.024"/>
+</g>
+<!-- 197 -->
+<g id="node198" class="node"><title>197</title>
+<path fill="#399de5" stroke="black" d="M4840,-774.5C4840,-774.5 4767,-774.5 4767,-774.5 4761,-774.5 4755,-768.5 4755,-762.5 4755,-762.5 4755,-718.5 4755,-718.5 4755,-712.5 4761,-706.5 4767,-706.5 4767,-706.5 4840,-706.5 4840,-706.5 4846,-706.5 4852,-712.5 4852,-718.5 4852,-718.5 4852,-762.5 4852,-762.5 4852,-768.5 4846,-774.5 4840,-774.5"/>
+<text text-anchor="start" x="4774.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4764" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4763" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="4774.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 195->197 -->
+<g id="edge197" class="edge"><title>195->197</title>
+<path fill="none" stroke="black" d="M4560.81,-821.3C4563.72,-820.125 4566.62,-819.019 4569.5,-818 4644.76,-791.348 4672.14,-813.508 4745.5,-782 4747.32,-781.218 4749.14,-780.375 4750.95,-779.48"/>
+<polygon fill="black" stroke="black" points="4752.8,-782.46 4759.94,-774.628 4749.48,-776.301 4752.8,-782.46"/>
+</g>
+<!-- 199 -->
+<g id="node200" class="node"><title>199</title>
+<path fill="#e58139" stroke="black" d="M4664,-893.5C4664,-893.5 4591,-893.5 4591,-893.5 4585,-893.5 4579,-887.5 4579,-881.5 4579,-881.5 4579,-837.5 4579,-837.5 4579,-831.5 4585,-825.5 4591,-825.5 4591,-825.5 4664,-825.5 4664,-825.5 4670,-825.5 4676,-831.5 4676,-837.5 4676,-837.5 4676,-881.5 4676,-881.5 4676,-887.5 4670,-893.5 4664,-893.5"/>
+<text text-anchor="start" x="4598.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4588" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="4587" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="4598.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 198->199 -->
+<g id="edge199" class="edge"><title>198->199</title>
+<path fill="none" stroke="black" d="M4592.89,-936.907C4597.84,-925.983 4603.2,-914.137 4608.2,-903.107"/>
+<polygon fill="black" stroke="black" points="4611.54,-904.22 4612.48,-893.667 4605.16,-901.332 4611.54,-904.22"/>
+</g>
+<!-- 200 -->
+<g id="node201" class="node"><title>200</title>
+<path fill="#399de5" stroke="black" d="M4779,-893.5C4779,-893.5 4706,-893.5 4706,-893.5 4700,-893.5 4694,-887.5 4694,-881.5 4694,-881.5 4694,-837.5 4694,-837.5 4694,-831.5 4700,-825.5 4706,-825.5 4706,-825.5 4779,-825.5 4779,-825.5 4785,-825.5 4791,-831.5 4791,-837.5 4791,-837.5 4791,-881.5 4791,-881.5 4791,-887.5 4785,-893.5 4779,-893.5"/>
+<text text-anchor="start" x="4713.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4703" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4702" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="4713.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 198->200 -->
+<g id="edge200" class="edge"><title>198->200</title>
+<path fill="none" stroke="black" d="M4633.03,-936.826C4649.67,-925.256 4667.8,-912.637 4684.5,-901 4685.25,-900.478 4686,-899.952 4686.76,-899.422"/>
+<polygon fill="black" stroke="black" points="4688.83,-902.251 4695.03,-893.661 4684.82,-896.51 4688.83,-902.251"/>
+</g>
+<!-- 202 -->
+<g id="node203" class="node"><title>202</title>
+<path fill="#399de5" stroke="black" d="M4776,-1012.5C4776,-1012.5 4703,-1012.5 4703,-1012.5 4697,-1012.5 4691,-1006.5 4691,-1000.5 4691,-1000.5 4691,-956.5 4691,-956.5 4691,-950.5 4697,-944.5 4703,-944.5 4703,-944.5 4776,-944.5 4776,-944.5 4782,-944.5 4788,-950.5 4788,-956.5 4788,-956.5 4788,-1000.5 4788,-1000.5 4788,-1006.5 4782,-1012.5 4776,-1012.5"/>
+<text text-anchor="start" x="4710.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4700" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4699" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="4710.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 201->202 -->
+<g id="edge202" class="edge"><title>201->202</title>
+<path fill="none" stroke="black" d="M4751.91,-1055.91C4750.17,-1045.2 4748.29,-1033.62 4746.53,-1022.78"/>
+<polygon fill="black" stroke="black" points="4749.94,-1021.98 4744.89,-1012.67 4743.03,-1023.1 4749.94,-1021.98"/>
+</g>
+<!-- 203 -->
+<g id="node204" class="node"><title>203</title>
+<path fill="#e58139" stroke="black" d="M4891,-1012.5C4891,-1012.5 4818,-1012.5 4818,-1012.5 4812,-1012.5 4806,-1006.5 4806,-1000.5 4806,-1000.5 4806,-956.5 4806,-956.5 4806,-950.5 4812,-944.5 4818,-944.5 4818,-944.5 4891,-944.5 4891,-944.5 4897,-944.5 4903,-950.5 4903,-956.5 4903,-956.5 4903,-1000.5 4903,-1000.5 4903,-1006.5 4897,-1012.5 4891,-1012.5"/>
+<text text-anchor="start" x="4825.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4815" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="4814" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="4825.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 201->203 -->
+<g id="edge203" class="edge"><title>201->203</title>
+<path fill="none" stroke="black" d="M4791.81,-1055.91C4801.22,-1044.43 4811.47,-1031.94 4820.91,-1020.44"/>
+<polygon fill="black" stroke="black" points="4823.65,-1022.62 4827.29,-1012.67 4818.24,-1018.18 4823.65,-1022.62"/>
+</g>
+<!-- 205 -->
+<g id="node206" class="node"><title>205</title>
+<path fill="#399de5" stroke="black" d="M4977,-1131.5C4977,-1131.5 4904,-1131.5 4904,-1131.5 4898,-1131.5 4892,-1125.5 4892,-1119.5 4892,-1119.5 4892,-1075.5 4892,-1075.5 4892,-1069.5 4898,-1063.5 4904,-1063.5 4904,-1063.5 4977,-1063.5 4977,-1063.5 4983,-1063.5 4989,-1069.5 4989,-1075.5 4989,-1075.5 4989,-1119.5 4989,-1119.5 4989,-1125.5 4983,-1131.5 4977,-1131.5"/>
+<text text-anchor="start" x="4911.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4901" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="4900" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
+<text text-anchor="start" x="4911.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 204->205 -->
+<g id="edge205" class="edge"><title>204->205</title>
+<path fill="none" stroke="black" d="M4940.5,-1174.91C4940.5,-1164.2 4940.5,-1152.62 4940.5,-1141.78"/>
+<polygon fill="black" stroke="black" points="4944,-1141.67 4940.5,-1131.67 4937,-1141.67 4944,-1141.67"/>
+</g>
+<!-- 206 -->
+<g id="node207" class="node"><title>206</title>
+<path fill="#e6833d" stroke="black" d="M5126,-1139C5126,-1139 5019,-1139 5019,-1139 5013,-1139 5007,-1133 5007,-1127 5007,-1127 5007,-1068 5007,-1068 5007,-1062 5013,-1056 5019,-1056 5019,-1056 5126,-1056 5126,-1056 5132,-1056 5138,-1062 5138,-1068 5138,-1068 5138,-1127 5138,-1127 5138,-1133 5132,-1139 5126,-1139"/>
+<text text-anchor="start" x="5015" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 0.004</text>
+<text text-anchor="start" x="5035" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.037</text>
+<text text-anchor="start" x="5029" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 53</text>
+<text text-anchor="start" x="5028" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 1]</text>
+<text text-anchor="start" x="5043.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 204->206 -->
+<g id="edge206" class="edge"><title>204->206</title>
+<path fill="none" stroke="black" d="M4986.3,-1174.91C4996.84,-1165.56 5008.15,-1155.54 5018.99,-1145.93"/>
+<polygon fill="black" stroke="black" points="5021.62,-1148.27 5026.78,-1139.02 5016.98,-1143.03 5021.62,-1148.27"/>
+</g>
+<!-- 207 -->
+<g id="node208" class="node"><title>207</title>
+<path fill="#e58139" stroke="black" d="M5014,-1012.5C5014,-1012.5 4933,-1012.5 4933,-1012.5 4927,-1012.5 4921,-1006.5 4921,-1000.5 4921,-1000.5 4921,-956.5 4921,-956.5 4921,-950.5 4927,-944.5 4933,-944.5 4933,-944.5 5014,-944.5 5014,-944.5 5020,-944.5 5026,-950.5 5026,-956.5 5026,-956.5 5026,-1000.5 5026,-1000.5 5026,-1006.5 5020,-1012.5 5014,-1012.5"/>
+<text text-anchor="start" x="4944.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="4930" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 52</text>
+<text text-anchor="start" x="4929" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 0]</text>
+<text text-anchor="start" x="4944.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 206->207 -->
+<g id="edge207" class="edge"><title>206->207</title>
+<path fill="none" stroke="black" d="M5038.15,-1055.91C5028.44,-1044.43 5017.87,-1031.94 5008.14,-1020.44"/>
+<polygon fill="black" stroke="black" points="5010.7,-1018.04 5001.56,-1012.67 5005.35,-1022.56 5010.7,-1018.04"/>
+</g>
+<!-- 208 -->
+<g id="node209" class="node"><title>208</title>
+<path fill="#399de5" stroke="black" d="M5129,-1012.5C5129,-1012.5 5056,-1012.5 5056,-1012.5 5050,-1012.5 5044,-1006.5 5044,-1000.5 5044,-1000.5 5044,-956.5 5044,-956.5 5044,-950.5 5050,-944.5 5056,-944.5 5056,-944.5 5129,-944.5 5129,-944.5 5135,-944.5 5141,-950.5 5141,-956.5 5141,-956.5 5141,-1000.5 5141,-1000.5 5141,-1006.5 5135,-1012.5 5129,-1012.5"/>
+<text text-anchor="start" x="5063.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5053" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5052" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="5063.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 206->208 -->
+<g id="edge208" class="edge"><title>206->208</title>
+<path fill="none" stroke="black" d="M5079.44,-1055.91C5081.27,-1045.2 5083.25,-1033.62 5085.1,-1022.78"/>
+<polygon fill="black" stroke="black" points="5088.6,-1023.11 5086.83,-1012.67 5081.7,-1021.93 5088.6,-1023.11"/>
+</g>
+<!-- 211 -->
+<g id="node212" class="node"><title>211</title>
+<path fill="#e68742" stroke="black" d="M5746,-1496C5746,-1496 5537,-1496 5537,-1496 5531,-1496 5525,-1490 5525,-1484 5525,-1484 5525,-1425 5525,-1425 5525,-1419 5531,-1413 5537,-1413 5537,-1413 5746,-1413 5746,-1413 5752,-1413 5758,-1419 5758,-1425 5758,-1425 5758,-1484 5758,-1484 5758,-1490 5752,-1496 5746,-1496"/>
+<text text-anchor="start" x="5533" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.594</text>
+<text text-anchor="start" x="5604" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.085</text>
+<text text-anchor="start" x="5594" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 292</text>
+<text text-anchor="start" x="5588.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [279, 13]</text>
+<text text-anchor="start" x="5612.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 210->211 -->
+<g id="edge211" class="edge"><title>210->211</title>
+<path fill="none" stroke="black" d="M5663.05,-1531.91C5660.67,-1523.47 5658.13,-1514.48 5655.67,-1505.74"/>
+<polygon fill="black" stroke="black" points="5659.01,-1504.7 5652.93,-1496.02 5652.28,-1506.6 5659.01,-1504.7"/>
+</g>
+<!-- 234 -->
+<g id="node235" class="node"><title>234</title>
+<path fill="#95caf1" stroke="black" d="M5899,-1496C5899,-1496 5788,-1496 5788,-1496 5782,-1496 5776,-1490 5776,-1484 5776,-1484 5776,-1425 5776,-1425 5776,-1419 5782,-1413 5788,-1413 5788,-1413 5899,-1413 5899,-1413 5905,-1413 5911,-1419 5911,-1425 5911,-1425 5911,-1484 5911,-1484 5911,-1490 5905,-1496 5899,-1496"/>
+<text text-anchor="start" x="5784" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.039</text>
+<text text-anchor="start" x="5806" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.432</text>
+<text text-anchor="start" x="5796" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 310</text>
+<text text-anchor="start" x="5790.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [98, 212]</text>
+<text text-anchor="start" x="5814.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 210->234 -->
+<g id="edge234" class="edge"><title>210->234</title>
+<path fill="none" stroke="black" d="M5733.13,-1531.91C5747.16,-1522.2 5762.24,-1511.76 5776.61,-1501.81"/>
+<polygon fill="black" stroke="black" points="5778.74,-1504.59 5784.97,-1496.02 5774.76,-1498.84 5778.74,-1504.59"/>
+</g>
+<!-- 212 -->
+<g id="node213" class="node"><title>212</title>
+<path fill="#e6853f" stroke="black" d="M5526.5,-1377C5526.5,-1377 5352.5,-1377 5352.5,-1377 5346.5,-1377 5340.5,-1371 5340.5,-1365 5340.5,-1365 5340.5,-1306 5340.5,-1306 5340.5,-1300 5346.5,-1294 5352.5,-1294 5352.5,-1294 5526.5,-1294 5526.5,-1294 5532.5,-1294 5538.5,-1300 5538.5,-1306 5538.5,-1306 5538.5,-1365 5538.5,-1365 5538.5,-1371 5532.5,-1377 5526.5,-1377"/>
+<text text-anchor="start" x="5348.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.024</text>
+<text text-anchor="start" x="5402" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.061</text>
+<text text-anchor="start" x="5392" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 286</text>
+<text text-anchor="start" x="5391" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [277, 9]</text>
+<text text-anchor="start" x="5410.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 211->212 -->
+<g id="edge212" class="edge"><title>211->212</title>
+<path fill="none" stroke="black" d="M5571.42,-1412.91C5554.34,-1403.02 5535.96,-1392.37 5518.49,-1382.25"/>
+<polygon fill="black" stroke="black" points="5519.87,-1379 5509.46,-1377.02 5516.36,-1385.06 5519.87,-1379"/>
+</g>
+<!-- 231 -->
+<g id="node232" class="node"><title>231</title>
+<path fill="#9ccef2" stroke="black" d="M5726,-1377C5726,-1377 5569,-1377 5569,-1377 5563,-1377 5557,-1371 5557,-1365 5557,-1365 5557,-1306 5557,-1306 5557,-1300 5563,-1294 5569,-1294 5569,-1294 5726,-1294 5726,-1294 5732,-1294 5738,-1300 5738,-1306 5738,-1306 5738,-1365 5738,-1365 5738,-1371 5732,-1377 5726,-1377"/>
+<text text-anchor="start" x="5565" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.8</text>
+<text text-anchor="start" x="5610" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
+<text text-anchor="start" x="5608" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="5607" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 4]</text>
+<text text-anchor="start" x="5618.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 211->231 -->
+<g id="edge231" class="edge"><title>211->231</title>
+<path fill="none" stroke="black" d="M5643.58,-1412.91C5644.01,-1404.56 5644.47,-1395.67 5644.91,-1387.02"/>
+<polygon fill="black" stroke="black" points="5648.41,-1387.19 5645.42,-1377.02 5641.41,-1386.83 5648.41,-1387.19"/>
+</g>
+<!-- 213 -->
+<g id="node214" class="node"><title>213</title>
+<path fill="#e6853f" stroke="black" d="M5365,-1258C5365,-1258 5192,-1258 5192,-1258 5186,-1258 5180,-1252 5180,-1246 5180,-1246 5180,-1187 5180,-1187 5180,-1181 5186,-1175 5192,-1175 5192,-1175 5365,-1175 5365,-1175 5371,-1175 5377,-1181 5377,-1187 5377,-1187 5377,-1246 5377,-1246 5377,-1252 5371,-1258 5365,-1258"/>
+<text text-anchor="start" x="5188" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.638</text>
+<text text-anchor="start" x="5241" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.055</text>
+<text text-anchor="start" x="5231" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 285</text>
+<text text-anchor="start" x="5230" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [277, 8]</text>
+<text text-anchor="start" x="5249.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 212->213 -->
+<g id="edge213" class="edge"><title>212->213</title>
+<path fill="none" stroke="black" d="M5383.64,-1293.91C5370.4,-1284.29 5356.18,-1273.95 5342.61,-1264.09"/>
+<polygon fill="black" stroke="black" points="5344.41,-1261.07 5334.26,-1258.02 5340.29,-1266.73 5344.41,-1261.07"/>
+</g>
+<!-- 230 -->
+<g id="node231" class="node"><title>230</title>
+<path fill="#399de5" stroke="black" d="M5480,-1250.5C5480,-1250.5 5407,-1250.5 5407,-1250.5 5401,-1250.5 5395,-1244.5 5395,-1238.5 5395,-1238.5 5395,-1194.5 5395,-1194.5 5395,-1188.5 5401,-1182.5 5407,-1182.5 5407,-1182.5 5480,-1182.5 5480,-1182.5 5486,-1182.5 5492,-1188.5 5492,-1194.5 5492,-1194.5 5492,-1238.5 5492,-1238.5 5492,-1244.5 5486,-1250.5 5480,-1250.5"/>
+<text text-anchor="start" x="5414.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5404" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5403" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="5414.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 212->230 -->
+<g id="edge230" class="edge"><title>212->230</title>
+<path fill="none" stroke="black" d="M5440.89,-1293.91C5441.25,-1283.2 5441.65,-1271.62 5442.02,-1260.78"/>
+<polygon fill="black" stroke="black" points="5445.52,-1260.78 5442.37,-1250.67 5438.53,-1260.54 5445.52,-1260.78"/>
+</g>
+<!-- 214 -->
+<g id="node215" class="node"><title>214</title>
+<path fill="#e78c4a" stroke="black" d="M5316,-1139C5316,-1139 5213,-1139 5213,-1139 5207,-1139 5201,-1133 5201,-1127 5201,-1127 5201,-1068 5201,-1068 5201,-1062 5207,-1056 5213,-1056 5213,-1056 5316,-1056 5316,-1056 5322,-1056 5328,-1062 5328,-1068 5328,-1068 5328,-1127 5328,-1127 5328,-1133 5322,-1139 5316,-1139"/>
+<text text-anchor="start" x="5209" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="5227" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.143</text>
+<text text-anchor="start" x="5217" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 103</text>
+<text text-anchor="start" x="5220" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [95, 8]</text>
+<text text-anchor="start" x="5235.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 213->214 -->
+<g id="edge214" class="edge"><title>213->214</title>
+<path fill="none" stroke="black" d="M5273.64,-1174.91C5272.64,-1166.56 5271.58,-1157.67 5270.55,-1149.02"/>
+<polygon fill="black" stroke="black" points="5274.01,-1148.53 5269.35,-1139.02 5267.06,-1149.37 5274.01,-1148.53"/>
+</g>
+<!-- 229 -->
+<g id="node230" class="node"><title>229</title>
+<path fill="#e58139" stroke="black" d="M5447,-1131.5C5447,-1131.5 5358,-1131.5 5358,-1131.5 5352,-1131.5 5346,-1125.5 5346,-1119.5 5346,-1119.5 5346,-1075.5 5346,-1075.5 5346,-1069.5 5352,-1063.5 5358,-1063.5 5358,-1063.5 5447,-1063.5 5447,-1063.5 5453,-1063.5 5459,-1069.5 5459,-1075.5 5459,-1075.5 5459,-1119.5 5459,-1119.5 5459,-1125.5 5453,-1131.5 5447,-1131.5"/>
+<text text-anchor="start" x="5373.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5355" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 182</text>
+<text text-anchor="start" x="5354" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [182, 0]</text>
+<text text-anchor="start" x="5373.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 213->229 -->
+<g id="edge229" class="edge"><title>213->229</title>
+<path fill="none" stroke="black" d="M5321.52,-1174.91C5333.92,-1163.21 5347.43,-1150.46 5359.81,-1138.78"/>
+<polygon fill="black" stroke="black" points="5362.48,-1141.08 5367.35,-1131.67 5357.67,-1135.98 5362.48,-1141.08"/>
+</g>
+<!-- 215 -->
+<g id="node216" class="node"><title>215</title>
+<path fill="#e5823b" stroke="black" d="M5344,-1020C5344,-1020 5171,-1020 5171,-1020 5165,-1020 5159,-1014 5159,-1008 5159,-1008 5159,-949 5159,-949 5159,-943 5165,-937 5171,-937 5171,-937 5344,-937 5344,-937 5350,-937 5356,-943 5356,-949 5356,-949 5356,-1008 5356,-1008 5356,-1014 5350,-1020 5344,-1020"/>
+<text text-anchor="start" x="5167" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.724</text>
+<text text-anchor="start" x="5220" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.022</text>
+<text text-anchor="start" x="5214" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 89</text>
+<text text-anchor="start" x="5213" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [88, 1]</text>
+<text text-anchor="start" x="5228.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 214->215 -->
+<g id="edge215" class="edge"><title>214->215</title>
+<path fill="none" stroke="black" d="M5262.07,-1055.91C5261.57,-1047.56 5261.04,-1038.67 5260.52,-1030.02"/>
+<polygon fill="black" stroke="black" points="5264.02,-1029.79 5259.92,-1020.02 5257.03,-1030.21 5264.02,-1029.79"/>
+</g>
+<!-- 220 -->
+<g id="node221" class="node"><title>220</title>
+<path fill="#ffffff" stroke="black" d="M5532.5,-1020C5532.5,-1020 5386.5,-1020 5386.5,-1020 5380.5,-1020 5374.5,-1014 5374.5,-1008 5374.5,-1008 5374.5,-949 5374.5,-949 5374.5,-943 5380.5,-937 5386.5,-937 5386.5,-937 5532.5,-937 5532.5,-937 5538.5,-937 5544.5,-943 5544.5,-949 5544.5,-949 5544.5,-1008 5544.5,-1008 5544.5,-1014 5538.5,-1020 5532.5,-1020"/>
+<text text-anchor="start" x="5382.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ -1.809</text>
+<text text-anchor="start" x="5430.5" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="5416" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
+<text text-anchor="start" x="5419" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 7]</text>
+<text text-anchor="start" x="5430.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 214->220 -->
+<g id="edge220" class="edge"><title>214->220</title>
+<path fill="none" stroke="black" d="M5328.08,-1058.35C5345.65,-1047.81 5364.91,-1036.25 5383.13,-1025.32"/>
+<polygon fill="black" stroke="black" points="5385.2,-1028.16 5391.98,-1020.01 5381.6,-1022.16 5385.2,-1028.16"/>
+</g>
+<!-- 216 -->
+<g id="node217" class="node"><title>216</title>
+<path fill="#e58139" stroke="black" d="M5161,-893.5C5161,-893.5 5080,-893.5 5080,-893.5 5074,-893.5 5068,-887.5 5068,-881.5 5068,-881.5 5068,-837.5 5068,-837.5 5068,-831.5 5074,-825.5 5080,-825.5 5080,-825.5 5161,-825.5 5161,-825.5 5167,-825.5 5173,-831.5 5173,-837.5 5173,-837.5 5173,-881.5 5173,-881.5 5173,-887.5 5167,-893.5 5161,-893.5"/>
+<text text-anchor="start" x="5091.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5077" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 87</text>
+<text text-anchor="start" x="5076" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [87, 0]</text>
+<text text-anchor="start" x="5091.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 215->216 -->
+<g id="edge216" class="edge"><title>215->216</title>
+<path fill="none" stroke="black" d="M5209.97,-936.907C5196.14,-925.101 5181.06,-912.217 5167.28,-900.45"/>
+<polygon fill="black" stroke="black" points="5169.21,-897.5 5159.34,-893.667 5164.67,-902.823 5169.21,-897.5"/>
+</g>
+<!-- 217 -->
+<g id="node218" class="node"><title>217</title>
+<path fill="#ffffff" stroke="black" d="M5310,-901C5310,-901 5203,-901 5203,-901 5197,-901 5191,-895 5191,-889 5191,-889 5191,-830 5191,-830 5191,-824 5197,-818 5203,-818 5203,-818 5310,-818 5310,-818 5316,-818 5322,-824 5322,-830 5322,-830 5322,-889 5322,-889 5322,-895 5316,-901 5310,-901"/>
+<text text-anchor="start" x="5199" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
+<text text-anchor="start" x="5227.5" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="5217" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="5216" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="5227.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 215->217 -->
+<g id="edge217" class="edge"><title>215->217</title>
+<path fill="none" stroke="black" d="M5257.15,-936.907C5257.08,-928.649 5257.01,-919.864 5256.93,-911.302"/>
+<polygon fill="black" stroke="black" points="5260.43,-910.99 5256.85,-901.021 5253.43,-911.05 5260.43,-910.99"/>
+</g>
+<!-- 218 -->
+<g id="node219" class="node"><title>218</title>
+<path fill="#e58139" stroke="black" d="M5175,-774.5C5175,-774.5 5102,-774.5 5102,-774.5 5096,-774.5 5090,-768.5 5090,-762.5 5090,-762.5 5090,-718.5 5090,-718.5 5090,-712.5 5096,-706.5 5102,-706.5 5102,-706.5 5175,-706.5 5175,-706.5 5181,-706.5 5187,-712.5 5187,-718.5 5187,-718.5 5187,-762.5 5187,-762.5 5187,-768.5 5181,-774.5 5175,-774.5"/>
+<text text-anchor="start" x="5109.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5099" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5098" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="5109.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 217->218 -->
+<g id="edge218" class="edge"><title>217->218</title>
+<path fill="none" stroke="black" d="M5215.56,-817.907C5203.76,-806.211 5190.9,-793.457 5179.12,-781.78"/>
+<polygon fill="black" stroke="black" points="5181.52,-779.222 5171.95,-774.667 5176.59,-784.193 5181.52,-779.222"/>
+</g>
+<!-- 219 -->
+<g id="node220" class="node"><title>219</title>
+<path fill="#399de5" stroke="black" d="M5290,-774.5C5290,-774.5 5217,-774.5 5217,-774.5 5211,-774.5 5205,-768.5 5205,-762.5 5205,-762.5 5205,-718.5 5205,-718.5 5205,-712.5 5211,-706.5 5217,-706.5 5217,-706.5 5290,-706.5 5290,-706.5 5296,-706.5 5302,-712.5 5302,-718.5 5302,-718.5 5302,-762.5 5302,-762.5 5302,-768.5 5296,-774.5 5290,-774.5"/>
+<text text-anchor="start" x="5224.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5214" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5213" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="5224.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 217->219 -->
+<g id="edge219" class="edge"><title>217->219</title>
+<path fill="none" stroke="black" d="M5255.46,-817.907C5255.18,-807.204 5254.89,-795.615 5254.61,-784.776"/>
+<polygon fill="black" stroke="black" points="5258.11,-784.574 5254.35,-774.667 5251.11,-784.753 5258.11,-784.574"/>
+</g>
+<!-- 221 -->
+<g id="node222" class="node"><title>221</title>
+<path fill="#eca572" stroke="black" d="M5483,-901C5483,-901 5380,-901 5380,-901 5374,-901 5368,-895 5368,-889 5368,-889 5368,-830 5368,-830 5368,-824 5374,-818 5380,-818 5380,-818 5483,-818 5483,-818 5489,-818 5495,-824 5495,-830 5495,-830 5495,-889 5495,-889 5495,-895 5489,-901 5483,-901"/>
+<text text-anchor="start" x="5376" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="5394" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.346</text>
+<text text-anchor="start" x="5392" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
+<text text-anchor="start" x="5391" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 2]</text>
+<text text-anchor="start" x="5402.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 220->221 -->
+<g id="edge221" class="edge"><title>220->221</title>
+<path fill="none" stroke="black" d="M5449.79,-936.907C5447.79,-928.558 5445.66,-919.671 5443.59,-911.02"/>
+<polygon fill="black" stroke="black" points="5446.93,-909.932 5441.2,-901.021 5440.12,-911.561 5446.93,-909.932"/>
+</g>
+<!-- 228 -->
+<g id="node229" class="node"><title>228</title>
+<path fill="#399de5" stroke="black" d="M5598,-893.5C5598,-893.5 5525,-893.5 5525,-893.5 5519,-893.5 5513,-887.5 5513,-881.5 5513,-881.5 5513,-837.5 5513,-837.5 5513,-831.5 5519,-825.5 5525,-825.5 5525,-825.5 5598,-825.5 5598,-825.5 5604,-825.5 5610,-831.5 5610,-837.5 5610,-837.5 5610,-881.5 5610,-881.5 5610,-887.5 5604,-893.5 5598,-893.5"/>
+<text text-anchor="start" x="5532.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5522" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="5521" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 5]</text>
+<text text-anchor="start" x="5532.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 220->228 -->
+<g id="edge228" class="edge"><title>220->228</title>
+<path fill="none" stroke="black" d="M5494.89,-936.907C5504.89,-925.432 5515.78,-912.938 5525.81,-901.442"/>
+<polygon fill="black" stroke="black" points="5528.65,-903.505 5532.59,-893.667 5523.38,-898.905 5528.65,-903.505"/>
+</g>
+<!-- 222 -->
+<g id="node223" class="node"><title>222</title>
+<path fill="#399de5" stroke="black" d="M5405,-774.5C5405,-774.5 5332,-774.5 5332,-774.5 5326,-774.5 5320,-768.5 5320,-762.5 5320,-762.5 5320,-718.5 5320,-718.5 5320,-712.5 5326,-706.5 5332,-706.5 5332,-706.5 5405,-706.5 5405,-706.5 5411,-706.5 5417,-712.5 5417,-718.5 5417,-718.5 5417,-762.5 5417,-762.5 5417,-768.5 5411,-774.5 5405,-774.5"/>
+<text text-anchor="start" x="5339.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5329" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5328" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="5339.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 221->222 -->
+<g id="edge222" class="edge"><title>221->222</title>
+<path fill="none" stroke="black" d="M5409.64,-817.907C5403.7,-806.873 5397.25,-794.898 5391.26,-783.773"/>
+<polygon fill="black" stroke="black" points="5394.18,-781.812 5386.36,-774.667 5388.02,-785.131 5394.18,-781.812"/>
+</g>
+<!-- 223 -->
+<g id="node224" class="node"><title>223</title>
+<path fill="#e99355" stroke="black" d="M5669.5,-782C5669.5,-782 5447.5,-782 5447.5,-782 5441.5,-782 5435.5,-776 5435.5,-770 5435.5,-770 5435.5,-711 5435.5,-711 5435.5,-705 5441.5,-699 5447.5,-699 5447.5,-699 5669.5,-699 5669.5,-699 5675.5,-699 5681.5,-705 5681.5,-711 5681.5,-711 5681.5,-770 5681.5,-770 5681.5,-776 5675.5,-782 5669.5,-782"/>
+<text text-anchor="start" x="5443.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ 0.933</text>
+<text text-anchor="start" x="5521" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.219</text>
+<text text-anchor="start" x="5519" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
+<text text-anchor="start" x="5518" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 1]</text>
+<text text-anchor="start" x="5529.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 221->223 -->
+<g id="edge223" class="edge"><title>221->223</title>
+<path fill="none" stroke="black" d="M5475.56,-817.907C5485.71,-808.56 5496.59,-798.538 5507.02,-788.929"/>
+<polygon fill="black" stroke="black" points="5509.53,-791.371 5514.52,-782.021 5504.79,-786.222 5509.53,-791.371"/>
+</g>
+<!-- 224 -->
+<g id="node225" class="node"><title>224</title>
+<path fill="#e58139" stroke="black" d="M5529,-655.5C5529,-655.5 5456,-655.5 5456,-655.5 5450,-655.5 5444,-649.5 5444,-643.5 5444,-643.5 5444,-599.5 5444,-599.5 5444,-593.5 5450,-587.5 5456,-587.5 5456,-587.5 5529,-587.5 5529,-587.5 5535,-587.5 5541,-593.5 5541,-599.5 5541,-599.5 5541,-643.5 5541,-643.5 5541,-649.5 5535,-655.5 5529,-655.5"/>
+<text text-anchor="start" x="5463.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5453" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="5452" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 0]</text>
+<text text-anchor="start" x="5463.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 223->224 -->
+<g id="edge224" class="edge"><title>223->224</title>
+<path fill="none" stroke="black" d="M5535.6,-698.907C5529.31,-687.763 5522.49,-675.658 5516.16,-664.439"/>
+<polygon fill="black" stroke="black" points="5519.17,-662.657 5511.21,-655.667 5513.07,-666.096 5519.17,-662.657"/>
+</g>
+<!-- 225 -->
+<g id="node226" class="node"><title>225</title>
+<path fill="#ffffff" stroke="black" d="M5678,-663C5678,-663 5571,-663 5571,-663 5565,-663 5559,-657 5559,-651 5559,-651 5559,-592 5559,-592 5559,-586 5565,-580 5571,-580 5571,-580 5678,-580 5678,-580 5684,-580 5690,-586 5690,-592 5690,-592 5690,-651 5690,-651 5690,-657 5684,-663 5678,-663"/>
+<text text-anchor="start" x="5567" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ 0.179</text>
+<text text-anchor="start" x="5595.5" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
+<text text-anchor="start" x="5585" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="5584" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
+<text text-anchor="start" x="5595.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 223->225 -->
+<g id="edge225" class="edge"><title>223->225</title>
+<path fill="none" stroke="black" d="M5581.4,-698.907C5586.31,-690.195 5591.56,-680.897 5596.64,-671.893"/>
+<polygon fill="black" stroke="black" points="5599.78,-673.45 5601.64,-663.021 5593.68,-670.011 5599.78,-673.45"/>
+</g>
+<!-- 226 -->
+<g id="node227" class="node"><title>226</title>
+<path fill="#399de5" stroke="black" d="M5603,-536.5C5603,-536.5 5530,-536.5 5530,-536.5 5524,-536.5 5518,-530.5 5518,-524.5 5518,-524.5 5518,-480.5 5518,-480.5 5518,-474.5 5524,-468.5 5530,-468.5 5530,-468.5 5603,-468.5 5603,-468.5 5609,-468.5 5615,-474.5 5615,-480.5 5615,-480.5 5615,-524.5 5615,-524.5 5615,-530.5 5609,-536.5 5603,-536.5"/>
+<text text-anchor="start" x="5537.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5527" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5526" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="5537.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 225->226 -->
+<g id="edge226" class="edge"><title>225->226</title>
+<path fill="none" stroke="black" d="M5604.38,-579.907C5598.91,-568.873 5592.97,-556.898 5587.46,-545.773"/>
+<polygon fill="black" stroke="black" points="5590.52,-544.072 5582.94,-536.667 5584.25,-547.181 5590.52,-544.072"/>
+</g>
+<!-- 227 -->
+<g id="node228" class="node"><title>227</title>
+<path fill="#e58139" stroke="black" d="M5718,-536.5C5718,-536.5 5645,-536.5 5645,-536.5 5639,-536.5 5633,-530.5 5633,-524.5 5633,-524.5 5633,-480.5 5633,-480.5 5633,-474.5 5639,-468.5 5645,-468.5 5645,-468.5 5718,-468.5 5718,-468.5 5724,-468.5 5730,-474.5 5730,-480.5 5730,-480.5 5730,-524.5 5730,-524.5 5730,-530.5 5724,-536.5 5718,-536.5"/>
+<text text-anchor="start" x="5652.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5642" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5641" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="5652.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 225->227 -->
+<g id="edge227" class="edge"><title>225->227</title>
+<path fill="none" stroke="black" d="M5644.28,-579.907C5649.65,-568.873 5655.49,-556.898 5660.91,-545.773"/>
+<polygon fill="black" stroke="black" points="5664.11,-547.19 5665.34,-536.667 5657.82,-544.124 5664.11,-547.19"/>
+</g>
+<!-- 232 -->
+<g id="node233" class="node"><title>232</title>
+<path fill="#e58139" stroke="black" d="M5602,-1250.5C5602,-1250.5 5529,-1250.5 5529,-1250.5 5523,-1250.5 5517,-1244.5 5517,-1238.5 5517,-1238.5 5517,-1194.5 5517,-1194.5 5517,-1188.5 5523,-1182.5 5529,-1182.5 5529,-1182.5 5602,-1182.5 5602,-1182.5 5608,-1182.5 5614,-1188.5 5614,-1194.5 5614,-1194.5 5614,-1238.5 5614,-1238.5 5614,-1244.5 5608,-1250.5 5602,-1250.5"/>
+<text text-anchor="start" x="5536.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5526" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="5525" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="5536.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 231->232 -->
+<g id="edge232" class="edge"><title>231->232</title>
+<path fill="none" stroke="black" d="M5619.05,-1293.91C5611.16,-1282.65 5602.59,-1270.42 5594.66,-1259.11"/>
+<polygon fill="black" stroke="black" points="5597.35,-1256.85 5588.75,-1250.67 5591.62,-1260.86 5597.35,-1256.85"/>
+</g>
+<!-- 233 -->
+<g id="node234" class="node"><title>233</title>
+<path fill="#399de5" stroke="black" d="M5717,-1250.5C5717,-1250.5 5644,-1250.5 5644,-1250.5 5638,-1250.5 5632,-1244.5 5632,-1238.5 5632,-1238.5 5632,-1194.5 5632,-1194.5 5632,-1188.5 5638,-1182.5 5644,-1182.5 5644,-1182.5 5717,-1182.5 5717,-1182.5 5723,-1182.5 5729,-1188.5 5729,-1194.5 5729,-1194.5 5729,-1238.5 5729,-1238.5 5729,-1244.5 5723,-1250.5 5717,-1250.5"/>
+<text text-anchor="start" x="5651.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5641" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="5640" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
+<text text-anchor="start" x="5651.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 231->233 -->
+<g id="edge233" class="edge"><title>231->233</title>
+<path fill="none" stroke="black" d="M5658.95,-1293.91C5662,-1283.09 5665.3,-1271.38 5668.39,-1260.44"/>
+<polygon fill="black" stroke="black" points="5671.8,-1261.24 5671.15,-1250.67 5665.06,-1259.34 5671.8,-1261.24"/>
+</g>
+<!-- 235 -->
+<g id="node236" class="node"><title>235</title>
+<path fill="#55abe9" stroke="black" d="M5886,-1377C5886,-1377 5775,-1377 5775,-1377 5769,-1377 5763,-1371 5763,-1365 5763,-1365 5763,-1306 5763,-1306 5763,-1300 5769,-1294 5775,-1294 5775,-1294 5886,-1294 5886,-1294 5892,-1294 5898,-1300 5898,-1306 5898,-1306 5898,-1365 5898,-1365 5898,-1371 5892,-1377 5886,-1377"/>
+<text text-anchor="start" x="5771" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.009</text>
+<text text-anchor="start" x="5793" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.217</text>
+<text text-anchor="start" x="5783" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 242</text>
+<text text-anchor="start" x="5777.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 212]</text>
+<text text-anchor="start" x="5801.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 234->235 -->
+<g id="edge235" class="edge"><title>234->235</title>
+<path fill="none" stroke="black" d="M5838.99,-1412.91C5838.06,-1404.56 5837.07,-1395.67 5836.11,-1387.02"/>
+<polygon fill="black" stroke="black" points="5839.59,-1386.57 5835,-1377.02 5832.63,-1387.35 5839.59,-1386.57"/>
+</g>
+<!-- 258 -->
+<g id="node259" class="node"><title>258</title>
+<path fill="#e58139" stroke="black" d="M6009,-1369.5C6009,-1369.5 5928,-1369.5 5928,-1369.5 5922,-1369.5 5916,-1363.5 5916,-1357.5 5916,-1357.5 5916,-1313.5 5916,-1313.5 5916,-1307.5 5922,-1301.5 5928,-1301.5 5928,-1301.5 6009,-1301.5 6009,-1301.5 6015,-1301.5 6021,-1307.5 6021,-1313.5 6021,-1313.5 6021,-1357.5 6021,-1357.5 6021,-1363.5 6015,-1369.5 6009,-1369.5"/>
+<text text-anchor="start" x="5939.5" y="-1354.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5925" y="-1339.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 68</text>
+<text text-anchor="start" x="5924" y="-1324.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [68, 0]</text>
+<text text-anchor="start" x="5939.5" y="-1309.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 234->258 -->
+<g id="edge258" class="edge"><title>234->258</title>
+<path fill="none" stroke="black" d="M5886.87,-1412.91C5899.36,-1401.21 5912.99,-1388.46 5925.47,-1376.78"/>
+<polygon fill="black" stroke="black" points="5928.16,-1379.06 5933.07,-1369.67 5923.37,-1373.95 5928.16,-1379.06"/>
+</g>
+<!-- 236 -->
+<g id="node237" class="node"><title>236</title>
+<path fill="#45a3e7" stroke="black" d="M5867.5,-1258C5867.5,-1258 5763.5,-1258 5763.5,-1258 5757.5,-1258 5751.5,-1252 5751.5,-1246 5751.5,-1246 5751.5,-1187 5751.5,-1187 5751.5,-1181 5757.5,-1175 5763.5,-1175 5763.5,-1175 5867.5,-1175 5867.5,-1175 5873.5,-1175 5879.5,-1181 5879.5,-1187 5879.5,-1187 5879.5,-1246 5879.5,-1246 5879.5,-1252 5873.5,-1258 5867.5,-1258"/>
+<text text-anchor="start" x="5759.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 0.196</text>
+<text text-anchor="start" x="5778" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.104</text>
+<text text-anchor="start" x="5768" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 218</text>
+<text text-anchor="start" x="5762.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12, 206]</text>
+<text text-anchor="start" x="5786.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 235->236 -->
+<g id="edge236" class="edge"><title>235->236</title>
+<path fill="none" stroke="black" d="M5825.3,-1293.91C5824.23,-1285.56 5823.09,-1276.67 5821.98,-1268.02"/>
+<polygon fill="black" stroke="black" points="5825.44,-1267.49 5820.69,-1258.02 5818.5,-1268.38 5825.44,-1267.49"/>
+</g>
+<!-- 255 -->
+<g id="node256" class="node"><title>255</title>
+<path fill="#eeab7b" stroke="black" d="M6009,-1258C6009,-1258 5910,-1258 5910,-1258 5904,-1258 5898,-1252 5898,-1246 5898,-1246 5898,-1187 5898,-1187 5898,-1181 5904,-1175 5910,-1175 5910,-1175 6009,-1175 6009,-1175 6015,-1175 6021,-1181 6021,-1187 6021,-1187 6021,-1246 6021,-1246 6021,-1252 6015,-1258 6009,-1258"/>
+<text text-anchor="start" x="5906" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.111</text>
+<text text-anchor="start" x="5922" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
+<text text-anchor="start" x="5916" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
+<text text-anchor="start" x="5915" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [18, 6]</text>
+<text text-anchor="start" x="5930.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 235->255 -->
+<g id="edge255" class="edge"><title>235->255</title>
+<path fill="none" stroke="black" d="M5875.26,-1293.91C5885.56,-1284.56 5896.61,-1274.54 5907.21,-1264.93"/>
+<polygon fill="black" stroke="black" points="5909.77,-1267.33 5914.82,-1258.02 5905.06,-1262.15 5909.77,-1267.33"/>
+</g>
+<!-- 237 -->
+<g id="node238" class="node"><title>237</title>
+<path fill="#40a0e6" stroke="black" d="M5763,-1139C5763,-1139 5660,-1139 5660,-1139 5654,-1139 5648,-1133 5648,-1127 5648,-1127 5648,-1068 5648,-1068 5648,-1062 5654,-1056 5660,-1056 5660,-1056 5763,-1056 5763,-1056 5769,-1056 5775,-1062 5775,-1068 5775,-1068 5775,-1127 5775,-1127 5775,-1133 5769,-1139 5763,-1139"/>
+<text text-anchor="start" x="5656" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="5674" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.064</text>
+<text text-anchor="start" x="5664" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 213</text>
+<text text-anchor="start" x="5663" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 206]</text>
+<text text-anchor="start" x="5682.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 236->237 -->
+<g id="edge237" class="edge"><title>236->237</title>
+<path fill="none" stroke="black" d="M5779.42,-1174.91C5771.35,-1165.83 5762.72,-1156.12 5754.41,-1146.77"/>
+<polygon fill="black" stroke="black" points="5756.78,-1144.17 5747.52,-1139.02 5751.55,-1148.82 5756.78,-1144.17"/>
+</g>
+<!-- 254 -->
+<g id="node255" class="node"><title>254</title>
+<path fill="#e58139" stroke="black" d="M5878,-1131.5C5878,-1131.5 5805,-1131.5 5805,-1131.5 5799,-1131.5 5793,-1125.5 5793,-1119.5 5793,-1119.5 5793,-1075.5 5793,-1075.5 5793,-1069.5 5799,-1063.5 5805,-1063.5 5805,-1063.5 5878,-1063.5 5878,-1063.5 5884,-1063.5 5890,-1069.5 5890,-1075.5 5890,-1075.5 5890,-1119.5 5890,-1119.5 5890,-1125.5 5884,-1131.5 5878,-1131.5"/>
+<text text-anchor="start" x="5812.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5802" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="5801" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
+<text text-anchor="start" x="5812.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 236->254 -->
+<g id="edge254" class="edge"><title>236->254</title>
+<path fill="none" stroke="black" d="M5824.52,-1174.91C5826.92,-1164.09 5829.53,-1152.38 5831.96,-1141.44"/>
+<polygon fill="black" stroke="black" points="5835.38,-1142.19 5834.13,-1131.67 5828.54,-1140.67 5835.38,-1142.19"/>
+</g>
+<!-- 238 -->
+<g id="node239" class="node"><title>238</title>
+<path fill="#3c9ee5" stroke="black" d="M5837,-1020C5837,-1020 5664,-1020 5664,-1020 5658,-1020 5652,-1014 5652,-1008 5652,-1008 5652,-949 5652,-949 5652,-943 5658,-937 5664,-937 5664,-937 5837,-937 5837,-937 5843,-937 5849,-943 5849,-949 5849,-949 5849,-1008 5849,-1008 5849,-1014 5843,-1020 5837,-1020"/>
+<text text-anchor="start" x="5660" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -1.008</text>
+<text text-anchor="start" x="5713" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.025</text>
+<text text-anchor="start" x="5703" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 159</text>
+<text text-anchor="start" x="5702" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 157]</text>
+<text text-anchor="start" x="5721.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 237->238 -->
+<g id="edge238" class="edge"><title>237->238</title>
+<path fill="none" stroke="black" d="M5725.03,-1055.91C5727.84,-1047.47 5730.84,-1038.48 5733.75,-1029.74"/>
+<polygon fill="black" stroke="black" points="5737.15,-1030.61 5736.99,-1020.02 5730.51,-1028.4 5737.15,-1030.61"/>
+</g>
+<!-- 247 -->
+<g id="node248" class="node"><title>247</title>
+<path fill="#4da7e8" stroke="black" d="M6220,-1020C6220,-1020 6117,-1020 6117,-1020 6111,-1020 6105,-1014 6105,-1008 6105,-1008 6105,-949 6105,-949 6105,-943 6111,-937 6117,-937 6117,-937 6220,-937 6220,-937 6226,-937 6232,-943 6232,-949 6232,-949 6232,-1008 6232,-1008 6232,-1014 6226,-1020 6220,-1020"/>
+<text text-anchor="start" x="6113" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="6131" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.168</text>
+<text text-anchor="start" x="6125" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 54</text>
+<text text-anchor="start" x="6124" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 49]</text>
+<text text-anchor="start" x="6139.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 237->247 -->
+<g id="edge247" class="edge"><title>237->247</title>
+<path fill="none" stroke="black" d="M5775.39,-1059.24C5778.1,-1058.08 5780.81,-1057 5783.5,-1056 5887.79,-1017.42 6015.55,-996.945 6094.49,-987.165"/>
+<polygon fill="black" stroke="black" points="6095.31,-990.591 6104.82,-985.912 6094.47,-983.641 6095.31,-990.591"/>
+</g>
+<!-- 239 -->
+<g id="node240" class="node"><title>239</title>
+<path fill="#7bbeee" stroke="black" d="M5837,-901C5837,-901 5664,-901 5664,-901 5658,-901 5652,-895 5652,-889 5652,-889 5652,-830 5652,-830 5652,-824 5658,-818 5664,-818 5664,-818 5837,-818 5837,-818 5843,-818 5849,-824 5849,-830 5849,-830 5849,-889 5849,-889 5849,-895 5843,-901 5837,-901"/>
+<text text-anchor="start" x="5660" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -1.017</text>
+<text text-anchor="start" x="5713" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
+<text text-anchor="start" x="5711" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="5710" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 3]</text>
+<text text-anchor="start" x="5721.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 238->239 -->
+<g id="edge239" class="edge"><title>238->239</title>
+<path fill="none" stroke="black" d="M5750.5,-936.907C5750.5,-928.649 5750.5,-919.864 5750.5,-911.302"/>
+<polygon fill="black" stroke="black" points="5754,-911.021 5750.5,-901.021 5747,-911.021 5754,-911.021"/>
+</g>
+<!-- 242 -->
+<g id="node243" class="node"><title>242</title>
+<path fill="#3a9ee5" stroke="black" d="M6090,-901C6090,-901 5881,-901 5881,-901 5875,-901 5869,-895 5869,-889 5869,-889 5869,-830 5869,-830 5869,-824 5875,-818 5881,-818 5881,-818 6090,-818 6090,-818 6096,-818 6102,-824 6102,-830 6102,-830 6102,-889 6102,-889 6102,-895 6096,-901 6090,-901"/>
+<text text-anchor="start" x="5877" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ -0.616</text>
+<text text-anchor="start" x="5948" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.013</text>
+<text text-anchor="start" x="5938" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 155</text>
+<text text-anchor="start" x="5937" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 154]</text>
+<text text-anchor="start" x="5956.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 238->242 -->
+<g id="edge242" class="edge"><title>238->242</title>
+<path fill="none" stroke="black" d="M5832.03,-936.907C5852.36,-926.789 5874.27,-915.879 5895,-905.559"/>
+<polygon fill="black" stroke="black" points="5896.72,-908.611 5904.11,-901.021 5893.6,-902.345 5896.72,-908.611"/>
+</g>
+<!-- 240 -->
+<g id="node241" class="node"><title>240</title>
+<path fill="#399de5" stroke="black" d="M5785,-774.5C5785,-774.5 5712,-774.5 5712,-774.5 5706,-774.5 5700,-768.5 5700,-762.5 5700,-762.5 5700,-718.5 5700,-718.5 5700,-712.5 5706,-706.5 5712,-706.5 5712,-706.5 5785,-706.5 5785,-706.5 5791,-706.5 5797,-712.5 5797,-718.5 5797,-718.5 5797,-762.5 5797,-762.5 5797,-768.5 5791,-774.5 5785,-774.5"/>
+<text text-anchor="start" x="5719.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5709" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="5708" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="5719.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 239->240 -->
+<g id="edge240" class="edge"><title>239->240</title>
+<path fill="none" stroke="black" d="M5749.81,-817.907C5749.62,-807.204 5749.43,-795.615 5749.24,-784.776"/>
+<polygon fill="black" stroke="black" points="5752.74,-784.606 5749.07,-774.667 5745.74,-784.725 5752.74,-784.606"/>
+</g>
+<!-- 241 -->
+<g id="node242" class="node"><title>241</title>
+<path fill="#e58139" stroke="black" d="M5900,-774.5C5900,-774.5 5827,-774.5 5827,-774.5 5821,-774.5 5815,-768.5 5815,-762.5 5815,-762.5 5815,-718.5 5815,-718.5 5815,-712.5 5821,-706.5 5827,-706.5 5827,-706.5 5900,-706.5 5900,-706.5 5906,-706.5 5912,-712.5 5912,-718.5 5912,-718.5 5912,-762.5 5912,-762.5 5912,-768.5 5906,-774.5 5900,-774.5"/>
+<text text-anchor="start" x="5834.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5824" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="5823" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="5834.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 239->241 -->
+<g id="edge241" class="edge"><title>239->241</title>
+<path fill="none" stroke="black" d="M5789.7,-817.907C5800.89,-806.321 5813.09,-793.698 5824.28,-782.111"/>
+<polygon fill="black" stroke="black" points="5827.04,-784.291 5831.47,-774.667 5822,-779.428 5827.04,-784.291"/>
+</g>
+<!-- 243 -->
+<g id="node244" class="node"><title>243</title>
+<path fill="#399de5" stroke="black" d="M6031,-774.5C6031,-774.5 5942,-774.5 5942,-774.5 5936,-774.5 5930,-768.5 5930,-762.5 5930,-762.5 5930,-718.5 5930,-718.5 5930,-712.5 5936,-706.5 5942,-706.5 5942,-706.5 6031,-706.5 6031,-706.5 6037,-706.5 6043,-712.5 6043,-718.5 6043,-718.5 6043,-762.5 6043,-762.5 6043,-768.5 6037,-774.5 6031,-774.5"/>
+<text text-anchor="start" x="5957.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5939" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 147</text>
+<text text-anchor="start" x="5938" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 147]</text>
+<text text-anchor="start" x="5957.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 242->243 -->
+<g id="edge243" class="edge"><title>242->243</title>
+<path fill="none" stroke="black" d="M5985.85,-817.907C5985.94,-807.204 5986.04,-795.615 5986.13,-784.776"/>
+<polygon fill="black" stroke="black" points="5989.63,-784.697 5986.22,-774.667 5982.63,-784.637 5989.63,-784.697"/>
+</g>
+<!-- 244 -->
+<g id="node245" class="node"><title>244</title>
+<path fill="#55abe9" stroke="black" d="M6246,-782C6246,-782 6073,-782 6073,-782 6067,-782 6061,-776 6061,-770 6061,-770 6061,-711 6061,-711 6061,-705 6067,-699 6073,-699 6073,-699 6246,-699 6246,-699 6252,-699 6258,-705 6258,-711 6258,-711 6258,-770 6258,-770 6258,-776 6252,-782 6246,-782"/>
+<text text-anchor="start" x="6069" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ -0.362</text>
+<text text-anchor="start" x="6122" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.219</text>
+<text text-anchor="start" x="6120" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
+<text text-anchor="start" x="6119" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 7]</text>
+<text text-anchor="start" x="6130.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 242->244 -->
+<g id="edge244" class="edge"><title>242->244</title>
+<path fill="none" stroke="black" d="M6045.87,-817.907C6060.31,-808.197 6075.83,-797.758 6090.63,-787.811"/>
+<polygon fill="black" stroke="black" points="6092.89,-790.505 6099.24,-782.021 6088.99,-784.696 6092.89,-790.505"/>
+</g>
+<!-- 245 -->
+<g id="node246" class="node"><title>245</title>
+<path fill="#399de5" stroke="black" d="M6094,-655.5C6094,-655.5 6021,-655.5 6021,-655.5 6015,-655.5 6009,-649.5 6009,-643.5 6009,-643.5 6009,-599.5 6009,-599.5 6009,-593.5 6015,-587.5 6021,-587.5 6021,-587.5 6094,-587.5 6094,-587.5 6100,-587.5 6106,-593.5 6106,-599.5 6106,-599.5 6106,-643.5 6106,-643.5 6106,-649.5 6100,-655.5 6094,-655.5"/>
+<text text-anchor="start" x="6028.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6018" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
+<text text-anchor="start" x="6017" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 7]</text>
+<text text-anchor="start" x="6028.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 244->245 -->
+<g id="edge245" class="edge"><title>244->245</title>
+<path fill="none" stroke="black" d="M6124.11,-698.907C6114.11,-687.432 6103.22,-674.938 6093.19,-663.442"/>
+<polygon fill="black" stroke="black" points="6095.62,-660.905 6086.41,-655.667 6090.35,-665.505 6095.62,-660.905"/>
+</g>
+<!-- 246 -->
+<g id="node247" class="node"><title>246</title>
+<path fill="#e58139" stroke="black" d="M6209,-655.5C6209,-655.5 6136,-655.5 6136,-655.5 6130,-655.5 6124,-649.5 6124,-643.5 6124,-643.5 6124,-599.5 6124,-599.5 6124,-593.5 6130,-587.5 6136,-587.5 6136,-587.5 6209,-587.5 6209,-587.5 6215,-587.5 6221,-593.5 6221,-599.5 6221,-599.5 6221,-643.5 6221,-643.5 6221,-649.5 6215,-655.5 6209,-655.5"/>
+<text text-anchor="start" x="6143.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6133" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="6132" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="6143.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 244->246 -->
+<g id="edge246" class="edge"><title>244->246</title>
+<path fill="none" stroke="black" d="M6164.01,-698.907C6165.2,-688.204 6166.49,-676.615 6167.69,-665.776"/>
+<polygon fill="black" stroke="black" points="6171.19,-665.992 6168.81,-655.667 6164.23,-665.219 6171.19,-665.992"/>
+</g>
+<!-- 248 -->
+<g id="node249" class="node"><title>248</title>
+<path fill="#e58139" stroke="black" d="M6205,-893.5C6205,-893.5 6132,-893.5 6132,-893.5 6126,-893.5 6120,-887.5 6120,-881.5 6120,-881.5 6120,-837.5 6120,-837.5 6120,-831.5 6126,-825.5 6132,-825.5 6132,-825.5 6205,-825.5 6205,-825.5 6211,-825.5 6217,-831.5 6217,-837.5 6217,-837.5 6217,-881.5 6217,-881.5 6217,-887.5 6211,-893.5 6205,-893.5"/>
+<text text-anchor="start" x="6139.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6129" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
+<text text-anchor="start" x="6128" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
+<text text-anchor="start" x="6139.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 247->248 -->
+<g id="edge248" class="edge"><title>247->248</title>
+<path fill="none" stroke="black" d="M6168.5,-936.907C6168.5,-926.204 6168.5,-914.615 6168.5,-903.776"/>
+<polygon fill="black" stroke="black" points="6172,-903.667 6168.5,-893.667 6165,-903.667 6172,-903.667"/>
+</g>
+<!-- 249 -->
+<g id="node250" class="node"><title>249</title>
+<path fill="#3d9fe6" stroke="black" d="M6416,-901C6416,-901 6247,-901 6247,-901 6241,-901 6235,-895 6235,-889 6235,-889 6235,-830 6235,-830 6235,-824 6241,-818 6247,-818 6247,-818 6416,-818 6416,-818 6422,-818 6428,-824 6428,-830 6428,-830 6428,-889 6428,-889 6428,-895 6422,-901 6416,-901"/>
+<text text-anchor="start" x="6243" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.004</text>
+<text text-anchor="start" x="6294" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.039</text>
+<text text-anchor="start" x="6288" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 50</text>
+<text text-anchor="start" x="6287" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 49]</text>
+<text text-anchor="start" x="6302.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 247->249 -->
+<g id="edge249" class="edge"><title>247->249</title>
+<path fill="none" stroke="black" d="M6225.05,-936.907C6238.45,-927.288 6252.85,-916.953 6266.59,-907.09"/>
+<polygon fill="black" stroke="black" points="6268.97,-909.695 6275.05,-901.021 6264.88,-904.009 6268.97,-909.695"/>
+</g>
+<!-- 250 -->
+<g id="node251" class="node"><title>250</title>
+<path fill="#61b1ea" stroke="black" d="M6366,-782C6366,-782 6291,-782 6291,-782 6285,-782 6279,-776 6279,-770 6279,-770 6279,-711 6279,-711 6279,-705 6285,-699 6291,-699 6291,-699 6366,-699 6366,-699 6372,-699 6378,-705 6378,-711 6378,-711 6378,-770 6378,-770 6378,-776 6372,-782 6366,-782"/>
+<text text-anchor="start" x="6287" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ -0.69</text>
+<text text-anchor="start" x="6291" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
+<text text-anchor="start" x="6289" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="6288" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 5]</text>
+<text text-anchor="start" x="6299.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 249->250 -->
+<g id="edge250" class="edge"><title>249->250</title>
+<path fill="none" stroke="black" d="M6330.46,-817.907C6330.25,-809.558 6330.02,-800.671 6329.8,-792.02"/>
+<polygon fill="black" stroke="black" points="6333.29,-791.928 6329.54,-782.021 6326.3,-792.107 6333.29,-791.928"/>
+</g>
+<!-- 253 -->
+<g id="node254" class="node"><title>253</title>
+<path fill="#399de5" stroke="black" d="M6489,-774.5C6489,-774.5 6408,-774.5 6408,-774.5 6402,-774.5 6396,-768.5 6396,-762.5 6396,-762.5 6396,-718.5 6396,-718.5 6396,-712.5 6402,-706.5 6408,-706.5 6408,-706.5 6489,-706.5 6489,-706.5 6495,-706.5 6501,-712.5 6501,-718.5 6501,-718.5 6501,-762.5 6501,-762.5 6501,-768.5 6495,-774.5 6489,-774.5"/>
+<text text-anchor="start" x="6419.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6405" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 44</text>
+<text text-anchor="start" x="6404" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 44]</text>
+<text text-anchor="start" x="6419.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 249->253 -->
+<g id="edge253" class="edge"><title>249->253</title>
+<path fill="none" stroke="black" d="M6372.09,-817.907C6383.79,-806.211 6396.54,-793.457 6408.22,-781.78"/>
+<polygon fill="black" stroke="black" points="6410.74,-784.213 6415.33,-774.667 6405.79,-779.263 6410.74,-784.213"/>
+</g>
+<!-- 251 -->
+<g id="node252" class="node"><title>251</title>
+<path fill="#399de5" stroke="black" d="M6351,-655.5C6351,-655.5 6278,-655.5 6278,-655.5 6272,-655.5 6266,-649.5 6266,-643.5 6266,-643.5 6266,-599.5 6266,-599.5 6266,-593.5 6272,-587.5 6278,-587.5 6278,-587.5 6351,-587.5 6351,-587.5 6357,-587.5 6363,-593.5 6363,-599.5 6363,-599.5 6363,-643.5 6363,-643.5 6363,-649.5 6357,-655.5 6351,-655.5"/>
+<text text-anchor="start" x="6285.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6275" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
+<text text-anchor="start" x="6274" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 5]</text>
+<text text-anchor="start" x="6285.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 250->251 -->
+<g id="edge251" class="edge"><title>250->251</title>
+<path fill="none" stroke="black" d="M6323.64,-698.907C6322.36,-688.204 6320.98,-676.615 6319.68,-665.776"/>
+<polygon fill="black" stroke="black" points="6323.13,-665.18 6318.47,-655.667 6316.18,-666.012 6323.13,-665.18"/>
+</g>
+<!-- 252 -->
+<g id="node253" class="node"><title>252</title>
+<path fill="#e58139" stroke="black" d="M6466,-655.5C6466,-655.5 6393,-655.5 6393,-655.5 6387,-655.5 6381,-649.5 6381,-643.5 6381,-643.5 6381,-599.5 6381,-599.5 6381,-593.5 6387,-587.5 6393,-587.5 6393,-587.5 6466,-587.5 6466,-587.5 6472,-587.5 6478,-593.5 6478,-599.5 6478,-599.5 6478,-643.5 6478,-643.5 6478,-649.5 6472,-655.5 6466,-655.5"/>
+<text text-anchor="start" x="6400.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6390" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="6389" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="6400.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 250->252 -->
+<g id="edge252" class="edge"><title>250->252</title>
+<path fill="none" stroke="black" d="M6363.54,-698.907C6373.45,-687.432 6384.23,-674.938 6394.16,-663.442"/>
+<polygon fill="black" stroke="black" points="6396.98,-665.524 6400.87,-655.667 6391.68,-660.95 6396.98,-665.524"/>
+</g>
+<!-- 256 -->
+<g id="node257" class="node"><title>256</title>
+<path fill="#e58139" stroke="black" d="M6001,-1131.5C6001,-1131.5 5920,-1131.5 5920,-1131.5 5914,-1131.5 5908,-1125.5 5908,-1119.5 5908,-1119.5 5908,-1075.5 5908,-1075.5 5908,-1069.5 5914,-1063.5 5920,-1063.5 5920,-1063.5 6001,-1063.5 6001,-1063.5 6007,-1063.5 6013,-1069.5 6013,-1075.5 6013,-1075.5 6013,-1119.5 6013,-1119.5 6013,-1125.5 6007,-1131.5 6001,-1131.5"/>
+<text text-anchor="start" x="5931.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="5917" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 18</text>
+<text text-anchor="start" x="5916" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [18, 0]</text>
+<text text-anchor="start" x="5931.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 255->256 -->
+<g id="edge256" class="edge"><title>255->256</title>
+<path fill="none" stroke="black" d="M5959.85,-1174.91C5959.94,-1164.2 5960.04,-1152.62 5960.13,-1141.78"/>
+<polygon fill="black" stroke="black" points="5963.63,-1141.7 5960.22,-1131.67 5956.63,-1141.64 5963.63,-1141.7"/>
+</g>
+<!-- 257 -->
+<g id="node258" class="node"><title>257</title>
+<path fill="#399de5" stroke="black" d="M6116,-1131.5C6116,-1131.5 6043,-1131.5 6043,-1131.5 6037,-1131.5 6031,-1125.5 6031,-1119.5 6031,-1119.5 6031,-1075.5 6031,-1075.5 6031,-1069.5 6037,-1063.5 6043,-1063.5 6043,-1063.5 6116,-1063.5 6116,-1063.5 6122,-1063.5 6128,-1069.5 6128,-1075.5 6128,-1075.5 6128,-1119.5 6128,-1119.5 6128,-1125.5 6122,-1131.5 6116,-1131.5"/>
+<text text-anchor="start" x="6050.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6040" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
+<text text-anchor="start" x="6039" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
+<text text-anchor="start" x="6050.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 255->257 -->
+<g id="edge257" class="edge"><title>255->257</title>
+<path fill="none" stroke="black" d="M6001.13,-1174.91C6013.13,-1163.21 6026.21,-1150.46 6038.19,-1138.78"/>
+<polygon fill="black" stroke="black" points="6040.77,-1141.15 6045.48,-1131.67 6035.88,-1136.14 6040.77,-1141.15"/>
+</g>
+<!-- 260 -->
+<g id="node261" class="node"><title>260</title>
+<path fill="#eeac7c" stroke="black" d="M6136,-1615C6136,-1615 6037,-1615 6037,-1615 6031,-1615 6025,-1609 6025,-1603 6025,-1603 6025,-1544 6025,-1544 6025,-1538 6031,-1532 6037,-1532 6037,-1532 6136,-1532 6136,-1532 6142,-1532 6148,-1538 6148,-1544 6148,-1544 6148,-1603 6148,-1603 6148,-1609 6142,-1615 6136,-1615"/>
+<text text-anchor="start" x="6033" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.112</text>
+<text text-anchor="start" x="6049" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.379</text>
+<text text-anchor="start" x="6039" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 307</text>
+<text text-anchor="start" x="6033.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [229, 78]</text>
+<text text-anchor="start" x="6057.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 259->260 -->
+<g id="edge260" class="edge"><title>259->260</title>
+<path fill="none" stroke="black" d="M6044.05,-1650.91C6048.89,-1642.2 6054.06,-1632.9 6059.06,-1623.89"/>
+<polygon fill="black" stroke="black" points="6062.19,-1625.46 6063.99,-1615.02 6056.07,-1622.06 6062.19,-1625.46"/>
+</g>
+<!-- 279 -->
+<g id="node280" class="node"><title>279</title>
+<path fill="#399de5" stroke="black" d="M6267,-1607.5C6267,-1607.5 6178,-1607.5 6178,-1607.5 6172,-1607.5 6166,-1601.5 6166,-1595.5 6166,-1595.5 6166,-1551.5 6166,-1551.5 6166,-1545.5 6172,-1539.5 6178,-1539.5 6178,-1539.5 6267,-1539.5 6267,-1539.5 6273,-1539.5 6279,-1545.5 6279,-1551.5 6279,-1551.5 6279,-1595.5 6279,-1595.5 6279,-1601.5 6273,-1607.5 6267,-1607.5"/>
+<text text-anchor="start" x="6193.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6175" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 205</text>
+<text text-anchor="start" x="6174" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 205]</text>
+<text text-anchor="start" x="6193.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 259->279 -->
+<g id="edge279" class="edge"><title>259->279</title>
+<path fill="none" stroke="black" d="M6089.06,-1653.83C6110.69,-1641.6 6134.69,-1627.87 6156.5,-1615 6157.77,-1614.25 6159.05,-1613.5 6160.33,-1612.73"/>
+<polygon fill="black" stroke="black" points="6162.14,-1615.73 6168.92,-1607.59 6158.55,-1609.72 6162.14,-1615.73"/>
+</g>
+<!-- 261 -->
+<g id="node262" class="node"><title>261</title>
+<path fill="#c7e3f8" stroke="black" d="M6233,-1496C6233,-1496 6064,-1496 6064,-1496 6058,-1496 6052,-1490 6052,-1484 6052,-1484 6052,-1425 6052,-1425 6052,-1419 6058,-1413 6064,-1413 6064,-1413 6233,-1413 6233,-1413 6239,-1413 6245,-1419 6245,-1425 6245,-1425 6245,-1484 6245,-1484 6245,-1490 6239,-1496 6233,-1496"/>
+<text text-anchor="start" x="6060" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.347</text>
+<text text-anchor="start" x="6111" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.487</text>
+<text text-anchor="start" x="6101" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 110</text>
+<text text-anchor="start" x="6100" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [46, 64]</text>
+<text text-anchor="start" x="6119.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 260->261 -->
+<g id="edge261" class="edge"><title>260->261</title>
+<path fill="none" stroke="black" d="M6108.01,-1531.91C6112.63,-1523.2 6117.55,-1513.9 6122.33,-1504.89"/>
+<polygon fill="black" stroke="black" points="6125.44,-1506.5 6127.03,-1496.02 6119.25,-1503.22 6125.44,-1506.5"/>
+</g>
+<!-- 268 -->
+<g id="node269" class="node"><title>268</title>
+<path fill="#e78b48" stroke="black" d="M6649,-1496C6649,-1496 6550,-1496 6550,-1496 6544,-1496 6538,-1490 6538,-1484 6538,-1484 6538,-1425 6538,-1425 6538,-1419 6544,-1413 6550,-1413 6550,-1413 6649,-1413 6649,-1413 6655,-1413 6661,-1419 6661,-1425 6661,-1425 6661,-1484 6661,-1484 6661,-1490 6655,-1496 6649,-1496"/>
+<text text-anchor="start" x="6546" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ -0.094</text>
+<text text-anchor="start" x="6562" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.132</text>
+<text text-anchor="start" x="6552" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 197</text>
+<text text-anchor="start" x="6546.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [183, 14]</text>
+<text text-anchor="start" x="6570.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 260->268 -->
+<g id="edge268" class="edge"><title>260->268</title>
+<path fill="none" stroke="black" d="M6148.16,-1535.31C6150.94,-1534.12 6153.73,-1533 6156.5,-1532 6282.44,-1486.35 6438.64,-1467.52 6527.91,-1460.07"/>
+<polygon fill="black" stroke="black" points="6528.24,-1463.56 6537.93,-1459.26 6527.68,-1456.58 6528.24,-1463.56"/>
+</g>
+<!-- 262 -->
+<g id="node263" class="node"><title>262</title>
+<path fill="#3fa0e6" stroke="black" d="M6204,-1377C6204,-1377 6093,-1377 6093,-1377 6087,-1377 6081,-1371 6081,-1365 6081,-1365 6081,-1306 6081,-1306 6081,-1300 6087,-1294 6093,-1294 6093,-1294 6204,-1294 6204,-1294 6210,-1294 6216,-1300 6216,-1306 6216,-1306 6216,-1365 6216,-1365 6216,-1371 6210,-1377 6204,-1377"/>
+<text text-anchor="start" x="6089" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ -0.011</text>
+<text text-anchor="start" x="6115" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.06</text>
+<text text-anchor="start" x="6105" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 65</text>
+<text text-anchor="start" x="6104" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 63]</text>
+<text text-anchor="start" x="6119.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 261->262 -->
+<g id="edge262" class="edge"><title>261->262</title>
+<path fill="none" stroke="black" d="M6148.5,-1412.91C6148.5,-1404.65 6148.5,-1395.86 6148.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="6152,-1387.02 6148.5,-1377.02 6145,-1387.02 6152,-1387.02"/>
+</g>
+<!-- 265 -->
+<g id="node266" class="node"><title>265</title>
+<path fill="#e6843d" stroke="black" d="M6377,-1377C6377,-1377 6274,-1377 6274,-1377 6268,-1377 6262,-1371 6262,-1365 6262,-1365 6262,-1306 6262,-1306 6262,-1300 6268,-1294 6274,-1294 6274,-1294 6377,-1294 6377,-1294 6383,-1294 6389,-1300 6389,-1306 6389,-1306 6389,-1365 6389,-1365 6389,-1371 6383,-1377 6377,-1377"/>
+<text text-anchor="start" x="6270" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="6288" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.043</text>
+<text text-anchor="start" x="6282" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 45</text>
+<text text-anchor="start" x="6281" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [44, 1]</text>
+<text text-anchor="start" x="6296.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 261->265 -->
+<g id="edge265" class="edge"><title>261->265</title>
+<path fill="none" stroke="black" d="M6209.91,-1412.91C6224.6,-1403.2 6240.39,-1392.76 6255.44,-1382.81"/>
+<polygon fill="black" stroke="black" points="6257.79,-1385.45 6264.2,-1377.02 6253.93,-1379.62 6257.79,-1385.45"/>
+</g>
+<!-- 263 -->
+<g id="node264" class="node"><title>263</title>
+<path fill="#399de5" stroke="black" d="M6132,-1250.5C6132,-1250.5 6051,-1250.5 6051,-1250.5 6045,-1250.5 6039,-1244.5 6039,-1238.5 6039,-1238.5 6039,-1194.5 6039,-1194.5 6039,-1188.5 6045,-1182.5 6051,-1182.5 6051,-1182.5 6132,-1182.5 6132,-1182.5 6138,-1182.5 6144,-1188.5 6144,-1194.5 6144,-1194.5 6144,-1238.5 6144,-1238.5 6144,-1244.5 6138,-1250.5 6132,-1250.5"/>
+<text text-anchor="start" x="6062.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6048" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 63</text>
+<text text-anchor="start" x="6047" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 63]</text>
+<text text-anchor="start" x="6062.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 262->263 -->
+<g id="edge263" class="edge"><title>262->263</title>
+<path fill="none" stroke="black" d="M6128.72,-1293.91C6123.35,-1282.87 6117.51,-1270.9 6112.09,-1259.77"/>
+<polygon fill="black" stroke="black" points="6115.18,-1258.12 6107.66,-1250.67 6108.89,-1261.19 6115.18,-1258.12"/>
+</g>
+<!-- 264 -->
+<g id="node265" class="node"><title>264</title>
+<path fill="#e58139" stroke="black" d="M6247,-1250.5C6247,-1250.5 6174,-1250.5 6174,-1250.5 6168,-1250.5 6162,-1244.5 6162,-1238.5 6162,-1238.5 6162,-1194.5 6162,-1194.5 6162,-1188.5 6168,-1182.5 6174,-1182.5 6174,-1182.5 6247,-1182.5 6247,-1182.5 6253,-1182.5 6259,-1188.5 6259,-1194.5 6259,-1194.5 6259,-1238.5 6259,-1238.5 6259,-1244.5 6253,-1250.5 6247,-1250.5"/>
+<text text-anchor="start" x="6181.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6171" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
+<text text-anchor="start" x="6170" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
+<text text-anchor="start" x="6181.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 262->264 -->
+<g id="edge264" class="edge"><title>262->264</title>
+<path fill="none" stroke="black" d="M6170.01,-1293.91C6175.86,-1282.87 6182.2,-1270.9 6188.1,-1259.77"/>
+<polygon fill="black" stroke="black" points="6191.33,-1261.14 6192.92,-1250.67 6185.15,-1257.86 6191.33,-1261.14"/>
+</g>
+<!-- 266 -->
+<g id="node267" class="node"><title>266</title>
+<path fill="#399de5" stroke="black" d="M6362,-1250.5C6362,-1250.5 6289,-1250.5 6289,-1250.5 6283,-1250.5 6277,-1244.5 6277,-1238.5 6277,-1238.5 6277,-1194.5 6277,-1194.5 6277,-1188.5 6283,-1182.5 6289,-1182.5 6289,-1182.5 6362,-1182.5 6362,-1182.5 6368,-1182.5 6374,-1188.5 6374,-1194.5 6374,-1194.5 6374,-1238.5 6374,-1238.5 6374,-1244.5 6368,-1250.5 6362,-1250.5"/>
+<text text-anchor="start" x="6296.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6286" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="6285" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
+<text text-anchor="start" x="6296.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 265->266 -->
+<g id="edge266" class="edge"><title>265->266</title>
+<path fill="none" stroke="black" d="M6325.5,-1293.91C6325.5,-1283.2 6325.5,-1271.62 6325.5,-1260.78"/>
+<polygon fill="black" stroke="black" points="6329,-1260.67 6325.5,-1250.67 6322,-1260.67 6329,-1260.67"/>
+</g>
+<!-- 267 -->
+<g id="node268" class="node"><title>267</title>
+<path fill="#e58139" stroke="black" d="M6485,-1250.5C6485,-1250.5 6404,-1250.5 6404,-1250.5 6398,-1250.5 6392,-1244.5 6392,-1238.5 6392,-1238.5 6392,-1194.5 6392,-1194.5 6392,-1188.5 6398,-1182.5 6404,-1182.5 6404,-1182.5 6485,-1182.5 6485,-1182.5 6491,-1182.5 6497,-1188.5 6497,-1194.5 6497,-1194.5 6497,-1238.5 6497,-1238.5 6497,-1244.5 6491,-1250.5 6485,-1250.5"/>
+<text text-anchor="start" x="6415.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6401" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 44</text>
+<text text-anchor="start" x="6400" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [44, 0]</text>
+<text text-anchor="start" x="6415.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 265->267 -->
+<g id="edge267" class="edge"><title>265->267</title>
+<path fill="none" stroke="black" d="M6366.79,-1293.91C6378.68,-1282.21 6391.65,-1269.46 6403.53,-1257.78"/>
+<polygon fill="black" stroke="black" points="6406.09,-1260.17 6410.77,-1250.67 6401.18,-1255.18 6406.09,-1260.17"/>
+</g>
+<!-- 269 -->
+<g id="node270" class="node"><title>269</title>
+<path fill="#e5833c" stroke="black" d="M6651,-1377C6651,-1377 6548,-1377 6548,-1377 6542,-1377 6536,-1371 6536,-1365 6536,-1365 6536,-1306 6536,-1306 6536,-1300 6542,-1294 6548,-1294 6548,-1294 6651,-1294 6651,-1294 6657,-1294 6663,-1300 6663,-1306 6663,-1306 6663,-1365 6663,-1365 6663,-1371 6657,-1377 6651,-1377"/>
+<text text-anchor="start" x="6544" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ -0.01</text>
+<text text-anchor="start" x="6562" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.034</text>
+<text text-anchor="start" x="6552" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 173</text>
+<text text-anchor="start" x="6551" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [170, 3]</text>
+<text text-anchor="start" x="6570.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 268->269 -->
+<g id="edge269" class="edge"><title>268->269</title>
+<path fill="none" stroke="black" d="M6599.5,-1412.91C6599.5,-1404.65 6599.5,-1395.86 6599.5,-1387.3"/>
+<polygon fill="black" stroke="black" points="6603,-1387.02 6599.5,-1377.02 6596,-1387.02 6603,-1387.02"/>
+</g>
+<!-- 272 -->
+<g id="node273" class="node"><title>272</title>
+<path fill="#fbece1" stroke="black" d="M6921,-1377C6921,-1377 6730,-1377 6730,-1377 6724,-1377 6718,-1371 6718,-1365 6718,-1365 6718,-1306 6718,-1306 6718,-1300 6724,-1294 6730,-1294 6730,-1294 6921,-1294 6921,-1294 6927,-1294 6933,-1300 6933,-1306 6933,-1306 6933,-1365 6933,-1365 6933,-1371 6927,-1377 6921,-1377"/>
+<text text-anchor="start" x="6726" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ -0.254</text>
+<text text-anchor="start" x="6788" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.497</text>
+<text text-anchor="start" x="6782" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
+<text text-anchor="start" x="6777" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13, 11]</text>
+<text text-anchor="start" x="6796.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 268->272 -->
+<g id="edge272" class="edge"><title>268->272</title>
+<path fill="none" stroke="black" d="M6661.26,-1421.53C6684.99,-1409.24 6712.55,-1394.98 6738.23,-1381.68"/>
+<polygon fill="black" stroke="black" points="6739.96,-1384.73 6747.23,-1377.02 6736.74,-1378.51 6739.96,-1384.73"/>
+</g>
+<!-- 270 -->
+<g id="node271" class="node"><title>270</title>
+<path fill="#399de5" stroke="black" d="M6600,-1250.5C6600,-1250.5 6527,-1250.5 6527,-1250.5 6521,-1250.5 6515,-1244.5 6515,-1238.5 6515,-1238.5 6515,-1194.5 6515,-1194.5 6515,-1188.5 6521,-1182.5 6527,-1182.5 6527,-1182.5 6600,-1182.5 6600,-1182.5 6606,-1182.5 6612,-1188.5 6612,-1194.5 6612,-1194.5 6612,-1238.5 6612,-1238.5 6612,-1244.5 6606,-1250.5 6600,-1250.5"/>
+<text text-anchor="start" x="6534.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6524" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
+<text text-anchor="start" x="6523" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
+<text text-anchor="start" x="6534.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 269->270 -->
+<g id="edge270" class="edge"><title>269->270</title>
+<path fill="none" stroke="black" d="M6587.01,-1293.91C6583.68,-1283.09 6580.08,-1271.38 6576.71,-1260.44"/>
+<polygon fill="black" stroke="black" points="6579.99,-1259.2 6573.71,-1250.67 6573.3,-1261.25 6579.99,-1259.2"/>
+</g>
+<!-- 271 -->
+<g id="node272" class="node"><title>271</title>
+<path fill="#e58139" stroke="black" d="M6731,-1250.5C6731,-1250.5 6642,-1250.5 6642,-1250.5 6636,-1250.5 6630,-1244.5 6630,-1238.5 6630,-1238.5 6630,-1194.5 6630,-1194.5 6630,-1188.5 6636,-1182.5 6642,-1182.5 6642,-1182.5 6731,-1182.5 6731,-1182.5 6737,-1182.5 6743,-1188.5 6743,-1194.5 6743,-1194.5 6743,-1238.5 6743,-1238.5 6743,-1244.5 6737,-1250.5 6731,-1250.5"/>
+<text text-anchor="start" x="6657.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6639" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 170</text>
+<text text-anchor="start" x="6638" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [170, 0]</text>
+<text text-anchor="start" x="6657.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 269->271 -->
+<g id="edge271" class="edge"><title>269->271</title>
+<path fill="none" stroke="black" d="M6629.68,-1293.91C6638.14,-1282.54 6647.33,-1270.18 6655.81,-1258.77"/>
+<polygon fill="black" stroke="black" points="6658.68,-1260.78 6661.84,-1250.67 6653.06,-1256.6 6658.68,-1260.78"/>
+</g>
+<!-- 273 -->
+<g id="node274" class="node"><title>273</title>
+<path fill="#5dafea" stroke="black" d="M6877.5,-1258C6877.5,-1258 6773.5,-1258 6773.5,-1258 6767.5,-1258 6761.5,-1252 6761.5,-1246 6761.5,-1246 6761.5,-1187 6761.5,-1187 6761.5,-1181 6767.5,-1175 6773.5,-1175 6773.5,-1175 6877.5,-1175 6877.5,-1175 6883.5,-1175 6889.5,-1181 6889.5,-1187 6889.5,-1187 6889.5,-1246 6889.5,-1246 6889.5,-1252 6883.5,-1258 6877.5,-1258"/>
+<text text-anchor="start" x="6769.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 6.674</text>
+<text text-anchor="start" x="6792" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.26</text>
+<text text-anchor="start" x="6782" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13</text>
+<text text-anchor="start" x="6781" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 11]</text>
+<text text-anchor="start" x="6796.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 272->273 -->
+<g id="edge273" class="edge"><title>272->273</title>
+<path fill="none" stroke="black" d="M6825.5,-1293.91C6825.5,-1285.65 6825.5,-1276.86 6825.5,-1268.3"/>
+<polygon fill="black" stroke="black" points="6829,-1268.02 6825.5,-1258.02 6822,-1268.02 6829,-1268.02"/>
+</g>
+<!-- 278 -->
+<g id="node279" class="node"><title>278</title>
+<path fill="#e58139" stroke="black" d="M7001,-1250.5C7001,-1250.5 6920,-1250.5 6920,-1250.5 6914,-1250.5 6908,-1244.5 6908,-1238.5 6908,-1238.5 6908,-1194.5 6908,-1194.5 6908,-1188.5 6914,-1182.5 6920,-1182.5 6920,-1182.5 7001,-1182.5 7001,-1182.5 7007,-1182.5 7013,-1188.5 7013,-1194.5 7013,-1194.5 7013,-1238.5 7013,-1238.5 7013,-1244.5 7007,-1250.5 7001,-1250.5"/>
+<text text-anchor="start" x="6931.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6917" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
+<text text-anchor="start" x="6916" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 0]</text>
+<text text-anchor="start" x="6931.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 272->278 -->
+<g id="edge278" class="edge"><title>272->278</title>
+<path fill="none" stroke="black" d="M6872.34,-1293.91C6885.96,-1282.1 6900.83,-1269.22 6914.4,-1257.45"/>
+<polygon fill="black" stroke="black" points="6916.97,-1259.86 6922.23,-1250.67 6912.38,-1254.57 6916.97,-1259.86"/>
+</g>
+<!-- 274 -->
+<g id="node275" class="node"><title>274</title>
+<path fill="#4ba6e7" stroke="black" d="M6806,-1139C6806,-1139 6725,-1139 6725,-1139 6719,-1139 6713,-1133 6713,-1127 6713,-1127 6713,-1068 6713,-1068 6713,-1062 6719,-1056 6725,-1056 6725,-1056 6806,-1056 6806,-1056 6812,-1056 6818,-1062 6818,-1068 6818,-1068 6818,-1127 6818,-1127 6818,-1133 6812,-1139 6806,-1139"/>
+<text text-anchor="start" x="6725.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 11.514</text>
+<text text-anchor="start" x="6728" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
+<text text-anchor="start" x="6722" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12</text>
+<text text-anchor="start" x="6721" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 11]</text>
+<text text-anchor="start" x="6736.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 273->274 -->
+<g id="edge274" class="edge"><title>273->274</title>
+<path fill="none" stroke="black" d="M6804.68,-1174.91C6800.26,-1166.29 6795.55,-1157.09 6790.97,-1148.17"/>
+<polygon fill="black" stroke="black" points="6793.96,-1146.32 6786.28,-1139.02 6787.73,-1149.52 6793.96,-1146.32"/>
+</g>
+<!-- 277 -->
+<g id="node278" class="node"><title>277</title>
+<path fill="#e58139" stroke="black" d="M6921,-1131.5C6921,-1131.5 6848,-1131.5 6848,-1131.5 6842,-1131.5 6836,-1125.5 6836,-1119.5 6836,-1119.5 6836,-1075.5 6836,-1075.5 6836,-1069.5 6842,-1063.5 6848,-1063.5 6848,-1063.5 6921,-1063.5 6921,-1063.5 6927,-1063.5 6933,-1069.5 6933,-1075.5 6933,-1075.5 6933,-1119.5 6933,-1119.5 6933,-1125.5 6927,-1131.5 6921,-1131.5"/>
+<text text-anchor="start" x="6855.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6845" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="6844" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="6855.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 273->277 -->
+<g id="edge277" class="edge"><title>273->277</title>
+<path fill="none" stroke="black" d="M6845.97,-1174.91C6851.53,-1163.87 6857.57,-1151.9 6863.18,-1140.77"/>
+<polygon fill="black" stroke="black" points="6866.4,-1142.17 6867.77,-1131.67 6860.15,-1139.02 6866.4,-1142.17"/>
+</g>
+<!-- 275 -->
+<g id="node276" class="node"><title>275</title>
+<path fill="#399de5" stroke="black" d="M6746,-1012.5C6746,-1012.5 6665,-1012.5 6665,-1012.5 6659,-1012.5 6653,-1006.5 6653,-1000.5 6653,-1000.5 6653,-956.5 6653,-956.5 6653,-950.5 6659,-944.5 6665,-944.5 6665,-944.5 6746,-944.5 6746,-944.5 6752,-944.5 6758,-950.5 6758,-956.5 6758,-956.5 6758,-1000.5 6758,-1000.5 6758,-1006.5 6752,-1012.5 6746,-1012.5"/>
+<text text-anchor="start" x="6676.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6662" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
+<text text-anchor="start" x="6661" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 11]</text>
+<text text-anchor="start" x="6676.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 274->275 -->
+<g id="edge275" class="edge"><title>274->275</title>
+<path fill="none" stroke="black" d="M6744.68,-1055.91C6739.02,-1044.87 6732.88,-1032.9 6727.18,-1021.77"/>
+<polygon fill="black" stroke="black" points="6730.19,-1019.97 6722.51,-1012.67 6723.96,-1023.16 6730.19,-1019.97"/>
+</g>
+<!-- 276 -->
+<g id="node277" class="node"><title>276</title>
+<path fill="#e58139" stroke="black" d="M6861,-1012.5C6861,-1012.5 6788,-1012.5 6788,-1012.5 6782,-1012.5 6776,-1006.5 6776,-1000.5 6776,-1000.5 6776,-956.5 6776,-956.5 6776,-950.5 6782,-944.5 6788,-944.5 6788,-944.5 6861,-944.5 6861,-944.5 6867,-944.5 6873,-950.5 6873,-956.5 6873,-956.5 6873,-1000.5 6873,-1000.5 6873,-1006.5 6867,-1012.5 6861,-1012.5"/>
+<text text-anchor="start" x="6795.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6785" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
+<text text-anchor="start" x="6784" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
+<text text-anchor="start" x="6795.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 274->276 -->
+<g id="edge276" class="edge"><title>274->276</title>
+<path fill="none" stroke="black" d="M6785.97,-1055.91C6791.53,-1044.87 6797.57,-1032.9 6803.18,-1021.77"/>
+<polygon fill="black" stroke="black" points="6806.4,-1023.17 6807.77,-1012.67 6800.15,-1020.02 6806.4,-1023.17"/>
+</g>
+<!-- 281 -->
+<g id="node282" class="node"><title>281</title>
+<path fill="#e58139" stroke="black" d="M6200,-1726.5C6200,-1726.5 6119,-1726.5 6119,-1726.5 6113,-1726.5 6107,-1720.5 6107,-1714.5 6107,-1714.5 6107,-1670.5 6107,-1670.5 6107,-1664.5 6113,-1658.5 6119,-1658.5 6119,-1658.5 6200,-1658.5 6200,-1658.5 6206,-1658.5 6212,-1664.5 6212,-1670.5 6212,-1670.5 6212,-1714.5 6212,-1714.5 6212,-1720.5 6206,-1726.5 6200,-1726.5"/>
+<text text-anchor="start" x="6130.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6116" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 27</text>
+<text text-anchor="start" x="6115" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [27, 0]</text>
+<text text-anchor="start" x="6130.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
+</g>
+<!-- 280->281 -->
+<g id="edge281" class="edge"><title>280->281</title>
+<path fill="none" stroke="black" d="M6159.5,-1769.91C6159.5,-1759.2 6159.5,-1747.62 6159.5,-1736.78"/>
+<polygon fill="black" stroke="black" points="6163,-1736.67 6159.5,-1726.67 6156,-1736.67 6163,-1736.67"/>
+</g>
+<!-- 282 -->
+<g id="node283" class="node"><title>282</title>
+<path fill="#399de5" stroke="black" d="M6331,-1726.5C6331,-1726.5 6242,-1726.5 6242,-1726.5 6236,-1726.5 6230,-1720.5 6230,-1714.5 6230,-1714.5 6230,-1670.5 6230,-1670.5 6230,-1664.5 6236,-1658.5 6242,-1658.5 6242,-1658.5 6331,-1658.5 6331,-1658.5 6337,-1658.5 6343,-1664.5 6343,-1670.5 6343,-1670.5 6343,-1714.5 6343,-1714.5 6343,-1720.5 6337,-1726.5 6331,-1726.5"/>
+<text text-anchor="start" x="6257.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
+<text text-anchor="start" x="6239" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 356</text>
+<text text-anchor="start" x="6238" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 356]</text>
+<text text-anchor="start" x="6257.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
+</g>
+<!-- 280->282 -->
+<g id="edge282" class="edge"><title>280->282</title>
+<path fill="none" stroke="black" d="M6203.56,-1769.91C6216.38,-1758.1 6230.36,-1745.22 6243.14,-1733.45"/>
+<polygon fill="black" stroke="black" points="6245.52,-1736.02 6250.5,-1726.67 6240.77,-1730.87 6245.52,-1736.02"/>
+</g>
+</g>
+</svg>