diff --git a/experiment/decision tree classifier/DecisionTree.ipynb b/experiment/decision tree classifier/DecisionTree.ipynb
index d13f8e285cf481aa8af4f02abec3b39ef462f3ed..935cf92ef4f69686330e7b2dff70a6840a027888 100644
--- a/experiment/decision tree classifier/DecisionTree.ipynb	
+++ b/experiment/decision tree classifier/DecisionTree.ipynb	
@@ -2,7 +2,7 @@
  "cells": [
   {
    "cell_type": "code",
-   "execution_count": 1,
+   "execution_count": 14,
    "metadata": {},
    "outputs": [
     {
@@ -60,10 +60,10 @@
     }
    ],
    "source": [
-    "from sklearn import tree\n",
     "from sklearn.model_selection import train_test_split\n",
     "import numpy as np \n",
     "import pandas as pd\n",
+    "import matplotlib.pyplot as plt\n",
     "\n",
     "\n",
     "df = pd.read_csv(\"../../dataset/DM_data.csv\")\n",
@@ -73,7 +73,7 @@
   },
   {
    "cell_type": "code",
-   "execution_count": 6,
+   "execution_count": 15,
    "metadata": {},
    "outputs": [
     {
@@ -81,77 +81,77 @@
      "output_type": "stream",
      "text": [
       "<class 'pandas.core.frame.DataFrame'>\n",
-      "RangeIndex: 20153 entries, 0 to 20152\n",
+      "RangeIndex: 17634 entries, 0 to 17633\n",
       "Data columns (total 38 columns):\n",
       " #   Column                       Non-Null Count  Dtype  \n",
       "---  ------                       --------------  -----  \n",
-      " 0   duration                     20153 non-null  int64  \n",
-      " 1   protocol_type                20153 non-null  int64  \n",
-      " 2   service                      20153 non-null  int64  \n",
-      " 3   flag                         20153 non-null  int64  \n",
-      " 4   src_bytes                    20153 non-null  int64  \n",
-      " 5   dst_bytes                    20153 non-null  int64  \n",
-      " 6   land                         20153 non-null  int64  \n",
-      " 7   wrong_fragment               20153 non-null  int64  \n",
-      " 8   hot                          20153 non-null  int64  \n",
-      " 9   num_failed_logins            20153 non-null  int64  \n",
-      " 10  logged_in                    20153 non-null  int64  \n",
-      " 11  num_compromised              20153 non-null  int64  \n",
-      " 12  root_shell                   20153 non-null  int64  \n",
-      " 13  su_attempted                 20153 non-null  int64  \n",
-      " 14  num_root                     20153 non-null  int64  \n",
-      " 15  num_file_creations           20153 non-null  int64  \n",
-      " 16  num_shells                   20153 non-null  int64  \n",
-      " 17  num_access_files             20153 non-null  int64  \n",
-      " 18  is_guest_login               20153 non-null  int64  \n",
-      " 19  count                        20153 non-null  int64  \n",
-      " 20  srv_count                    20153 non-null  int64  \n",
-      " 21  serror_rate                  20153 non-null  float64\n",
-      " 22  srv_serror_rate              20153 non-null  float64\n",
-      " 23  rerror_rate                  20153 non-null  float64\n",
-      " 24  srv_rerror_rate              20153 non-null  float64\n",
-      " 25  same_srv_rate                20153 non-null  float64\n",
-      " 26  diff_srv_rate                20153 non-null  float64\n",
-      " 27  srv_diff_host_rate           20153 non-null  float64\n",
-      " 28  dst_host_count               20153 non-null  int64  \n",
-      " 29  dst_host_srv_count           20153 non-null  int64  \n",
-      " 30  dst_host_same_srv_rate       20153 non-null  float64\n",
-      " 31  dst_host_diff_srv_rate       20153 non-null  float64\n",
-      " 32  dst_host_same_src_port_rate  20153 non-null  float64\n",
-      " 33  dst_host_srv_diff_host_rate  20153 non-null  float64\n",
-      " 34  dst_host_serror_rate         20153 non-null  float64\n",
-      " 35  dst_host_srv_serror_rate     20153 non-null  float64\n",
-      " 36  dst_host_rerror_rate         20153 non-null  float64\n",
-      " 37  dst_host_srv_rerror_rate     20153 non-null  float64\n",
+      " 0   duration                     17634 non-null  int64  \n",
+      " 1   protocol_type                17634 non-null  int64  \n",
+      " 2   service                      17634 non-null  int64  \n",
+      " 3   flag                         17634 non-null  int64  \n",
+      " 4   src_bytes                    17634 non-null  int64  \n",
+      " 5   dst_bytes                    17634 non-null  int64  \n",
+      " 6   land                         17634 non-null  int64  \n",
+      " 7   wrong_fragment               17634 non-null  int64  \n",
+      " 8   hot                          17634 non-null  int64  \n",
+      " 9   num_failed_logins            17634 non-null  int64  \n",
+      " 10  logged_in                    17634 non-null  int64  \n",
+      " 11  num_compromised              17634 non-null  int64  \n",
+      " 12  root_shell                   17634 non-null  int64  \n",
+      " 13  su_attempted                 17634 non-null  int64  \n",
+      " 14  num_root                     17634 non-null  int64  \n",
+      " 15  num_file_creations           17634 non-null  int64  \n",
+      " 16  num_shells                   17634 non-null  int64  \n",
+      " 17  num_access_files             17634 non-null  int64  \n",
+      " 18  is_guest_login               17634 non-null  int64  \n",
+      " 19  count                        17634 non-null  int64  \n",
+      " 20  srv_count                    17634 non-null  int64  \n",
+      " 21  serror_rate                  17634 non-null  float64\n",
+      " 22  srv_serror_rate              17634 non-null  float64\n",
+      " 23  rerror_rate                  17634 non-null  float64\n",
+      " 24  srv_rerror_rate              17634 non-null  float64\n",
+      " 25  same_srv_rate                17634 non-null  float64\n",
+      " 26  diff_srv_rate                17634 non-null  float64\n",
+      " 27  srv_diff_host_rate           17634 non-null  float64\n",
+      " 28  dst_host_count               17634 non-null  int64  \n",
+      " 29  dst_host_srv_count           17634 non-null  int64  \n",
+      " 30  dst_host_same_srv_rate       17634 non-null  float64\n",
+      " 31  dst_host_diff_srv_rate       17634 non-null  float64\n",
+      " 32  dst_host_same_src_port_rate  17634 non-null  float64\n",
+      " 33  dst_host_srv_diff_host_rate  17634 non-null  float64\n",
+      " 34  dst_host_serror_rate         17634 non-null  float64\n",
+      " 35  dst_host_srv_serror_rate     17634 non-null  float64\n",
+      " 36  dst_host_rerror_rate         17634 non-null  float64\n",
+      " 37  dst_host_srv_rerror_rate     17634 non-null  float64\n",
       "dtypes: float64(15), int64(23)\n",
-      "memory usage: 5.8 MB\n"
+      "memory usage: 5.1 MB\n"
      ]
     }
    ],
    "source": [
     "X, y = df.drop(columns=[\"class\", \"index_num\"]), df['class']\n",
-    "X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.2, shuffle=True, random_state=42)\n",
+    "X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.3, shuffle=True, random_state=0)\n",
     "X_train.reset_index(drop=True, inplace=True)\n",
     "X_test.reset_index(drop=True, inplace=True)\n",
     "y_train.reset_index(drop=True, inplace=True)\n",
-    "X_test.reset_index(drop=True, inplace=True)\n",
+    "y_test.reset_index(drop=True, inplace=True)\n",
     "\n",
     "X_train.info()"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 7,
+   "execution_count": 16,
    "metadata": {},
    "outputs": [
     {
      "name": "stdout",
      "output_type": "stream",
      "text": [
-      "Shape of X_train: (20153, 38)\n",
-      "Shape of X_test: (5039, 38)\n",
-      "Shape of y_train: (20153,)\n",
-      "Shape of y_test: (5039,)\n"
+      "Shape of X_train: (17634, 38)\n",
+      "Shape of X_test: (7558, 38)\n",
+      "Shape of y_train: (17634,)\n",
+      "Shape of y_test: (7558,)\n"
      ]
     }
    ],
@@ -162,116 +162,192 @@
   },
   {
    "cell_type": "code",
-   "execution_count": 8,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "clf1 = tree.DecisionTreeClassifier()\n",
-    "clf1 = clf1.fit(X_train, y_train)"
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": 10,
+   "execution_count": 17,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "depth: 1  0.9183646467319396\n",
+      "depth: 2  0.9311987298227045\n",
+      "depth: 3  0.9650701243715268\n",
+      "depth: 4  0.9781688277322043\n",
+      "depth: 5  0.9871659169092353\n",
+      "depth: 6  0.9917967716327071\n",
+      "depth: 7  0.992590632442445\n",
+      "depth: 8  0.9956337655464409\n",
+      "depth: 9  0.9961630060862662\n",
+      "depth: 10  0.9965599364911352\n",
+      "depth: 11  0.9964276263561789\n",
+      "depth: 12  0.9964276263561789\n",
+      "depth: 13  0.9964276263561789\n",
+      "depth: 14  0.9964276263561789\n",
+      "depth: 15  0.9964276263561789\n",
+      "depth: 16  0.9964276263561789\n",
+      "depth: 17  0.9964276263561789\n",
+      "depth: 18  0.9964276263561789\n",
+      "depth: 19  0.9964276263561789\n",
+      "depth: 20  0.9964276263561789\n"
+     ]
+    }
+   ],
    "source": [
-    "from IPython import display\n",
-    "import graphviz\n",
-    "import os\n",
+    "from sklearn.tree import DecisionTreeClassifier\n",
+    "from sklearn.metrics import accuracy_score\n",
     "\n",
-    "os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
-    "# 시각화\n",
-    "dot_data1 = tree.export_graphviz(clf1,\n",
-    "                               out_file = None,\n",
-    "                               feature_names = X_train.columns,\n",
-    "                               class_names = [\"0\", \"1\"],\n",
-    "                               filled = True,\n",
-    "                               rounded = True,\n",
-    "                               special_characters = True)\n",
+    "clf_vector = list()\n",
     "\n",
-    "graph1 = graphviz.Source(dot_data1)"
+    "for m_depth_iter in range(1, 21):\n",
+    "    clf_item = DecisionTreeClassifier(max_depth=m_depth_iter, random_state=0, criterion='entropy')\n",
+    "    clf_item.fit(X_train, y_train)\n",
+    "    clf_vector.append(clf_item)\n",
+    "\n",
+    "plot_vector = []\n",
+    "\n",
+    "for clf_item in clf_vector:\n",
+    "    clf_y_pred = clf_item.predict(X_test)\n",
+    "    accu = accuracy_score(y_test, clf_y_pred)\n",
+    "    plot_vector.append([clf_item.max_depth, accu])\n",
+    "    print(f\"depth: {clf_item.max_depth}  {accu}\")"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 12,
+   "execution_count": 18,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "data": {
+      "image/png": "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",
+      "text/plain": [
+       "<Figure size 432x288 with 1 Axes>"
+      ]
+     },
+     "metadata": {
+      "needs_background": "light"
+     },
+     "output_type": "display_data"
+    }
+   ],
    "source": [
-    "clf2 = tree.DecisionTreeClassifier(criterion = \"entropy\")\n",
-    "clf2 = clf2.fit(X_train, y_train)"
+    "plot_vec = pd.DataFrame(plot_vector)\n",
+    "depth_x = plot_vec[:][0]\n",
+    "plt.xlabel('Max Depth')\n",
+    "plt.title('Decision Tree Max Depth Metric')\n",
+    "plt.plot(depth_x, plot_vec[:][1], 'r', label='accuracy')\n",
+    "plt.grid(True)\n",
+    "plt.legend()\n",
+    "plt.savefig('./output/decision tree max depth.png')\n",
+    "plt.show()"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 30,
+   "execution_count": 5,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "data": {
+      "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\r\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\r\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\r\n -->\r\n<!-- Title: Tree Pages: 1 -->\r\n<svg width=\"4955pt\" height=\"1385pt\"\r\n viewBox=\"0.00 0.00 4955.00 1385.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\r\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1381)\">\r\n<title>Tree</title>\r\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1381 4951,-1381 4951,4 -4,4\"/>\r\n<!-- 0 -->\r\n<g id=\"node1\" class=\"node\"><title>0</title>\r\n<path fill=\"#fcefe7\" stroke=\"black\" d=\"M2914,-1377C2914,-1377 2792,-1377 2792,-1377 2786,-1377 2780,-1371 2780,-1365 2780,-1365 2780,-1306 2780,-1306 2780,-1300 2786,-1294 2792,-1294 2792,-1294 2914,-1294 2914,-1294 2920,-1294 2926,-1300 2926,-1306 2926,-1306 2926,-1365 2926,-1365 2926,-1371 2920,-1377 2914,-1377\"/>\r\n<text text-anchor=\"start\" x=\"2800\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\r\n<text text-anchor=\"start\" x=\"2803\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.997</text>\r\n<text text-anchor=\"start\" x=\"2797\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17634</text>\r\n<text text-anchor=\"start\" x=\"2788\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9396, 8238]</text>\r\n<text text-anchor=\"start\" x=\"2806\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 1 -->\r\n<g id=\"node2\" class=\"node\"><title>1</title>\r\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M1982,-1258C1982,-1258 1868,-1258 1868,-1258 1862,-1258 1856,-1252 1856,-1246 1856,-1246 1856,-1187 1856,-1187 1856,-1181 1862,-1175 1868,-1175 1868,-1175 1982,-1175 1982,-1175 1988,-1175 1994,-1181 1994,-1187 1994,-1187 1994,-1246 1994,-1246 1994,-1252 1988,-1258 1982,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1890\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 8.5</text>\r\n<text text-anchor=\"start\" x=\"1875\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.393</text>\r\n<text text-anchor=\"start\" x=\"1873.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8156</text>\r\n<text text-anchor=\"start\" x=\"1864\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [632, 7524]</text>\r\n<text text-anchor=\"start\" x=\"1870\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 0&#45;&gt;1 -->\r\n<g id=\"edge1\" class=\"edge\"><title>0&#45;&gt;1</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2779.79,-1325.27C2608.29,-1303.65 2181.64,-1249.86 2004.28,-1227.5\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2004.59,-1224.01 1994.24,-1226.23 2003.72,-1230.95 2004.59,-1224.01\"/>\r\n<text text-anchor=\"middle\" x=\"2009.56\" y=\"-1242.28\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\r\n</g>\r\n<!-- 62 -->\r\n<g id=\"node63\" class=\"node\"><title>62</title>\r\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M3945.5,-1258C3945.5,-1258 3830.5,-1258 3830.5,-1258 3824.5,-1258 3818.5,-1252 3818.5,-1246 3818.5,-1246 3818.5,-1187 3818.5,-1187 3818.5,-1181 3824.5,-1175 3830.5,-1175 3830.5,-1175 3945.5,-1175 3945.5,-1175 3951.5,-1175 3957.5,-1181 3957.5,-1187 3957.5,-1187 3957.5,-1246 3957.5,-1246 3957.5,-1252 3951.5,-1258 3945.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3838\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.386</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9478</text>\r\n<text text-anchor=\"start\" x=\"3827\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8764, 714]</text>\r\n<text text-anchor=\"start\" x=\"3841\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 0&#45;&gt;62 -->\r\n<g id=\"edge62\" class=\"edge\"><title>0&#45;&gt;62</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2926.19,-1326.23C3114.25,-1304.97 3613.24,-1248.56 3808.28,-1226.51\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3808.91,-1229.96 3818.45,-1225.36 3808.12,-1223.01 3808.91,-1229.96\"/>\r\n<text text-anchor=\"middle\" x=\"3802.87\" y=\"-1241.21\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\r\n</g>\r\n<!-- 2 -->\r\n<g id=\"node3\" class=\"node\"><title>2</title>\r\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M1412,-1139C1412,-1139 1298,-1139 1298,-1139 1292,-1139 1286,-1133 1286,-1127 1286,-1127 1286,-1068 1286,-1068 1286,-1062 1292,-1056 1298,-1056 1298,-1056 1412,-1056 1412,-1056 1418,-1056 1424,-1062 1424,-1068 1424,-1068 1424,-1127 1424,-1127 1424,-1133 1418,-1139 1412,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1310\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 16.5</text>\r\n<text text-anchor=\"start\" x=\"1305\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\r\n<text text-anchor=\"start\" x=\"1303.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1775</text>\r\n<text text-anchor=\"start\" x=\"1294\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [610, 1165]</text>\r\n<text text-anchor=\"start\" x=\"1300\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1&#45;&gt;2 -->\r\n<g id=\"edge2\" class=\"edge\"><title>1&#45;&gt;2</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1855.96,-1201.33C1749.65,-1179.51 1546.44,-1137.8 1434.27,-1114.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1434.86,-1111.32 1424.37,-1112.74 1433.46,-1118.18 1434.86,-1111.32\"/>\r\n</g>\r\n<!-- 51 -->\r\n<g id=\"node52\" class=\"node\"><title>51</title>\r\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M2026,-1139C2026,-1139 1824,-1139 1824,-1139 1818,-1139 1812,-1133 1812,-1127 1812,-1127 1812,-1068 1812,-1068 1812,-1062 1818,-1056 1824,-1056 1824,-1056 2026,-1056 2026,-1056 2032,-1056 2038,-1062 2038,-1068 2038,-1068 2038,-1127 2038,-1127 2038,-1133 2032,-1139 2026,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1820\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.835</text>\r\n<text text-anchor=\"start\" x=\"1875\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.033</text>\r\n<text text-anchor=\"start\" x=\"1873.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6381</text>\r\n<text text-anchor=\"start\" x=\"1868\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 6359]</text>\r\n<text text-anchor=\"start\" x=\"1870\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1&#45;&gt;51 -->\r\n<g id=\"edge51\" class=\"edge\"><title>1&#45;&gt;51</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1925,-1174.91C1925,-1166.65 1925,-1157.86 1925,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1928.5,-1149.02 1925,-1139.02 1921.5,-1149.02 1928.5,-1149.02\"/>\r\n</g>\r\n<!-- 3 -->\r\n<g id=\"node4\" class=\"node\"><title>3</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M492,-1020C492,-1020 390,-1020 390,-1020 384,-1020 378,-1014 378,-1008 378,-1008 378,-949 378,-949 378,-943 384,-937 390,-937 390,-937 492,-937 492,-937 498,-937 504,-943 504,-949 504,-949 504,-1008 504,-1008 504,-1014 498,-1020 492,-1020\"/>\r\n<text text-anchor=\"start\" x=\"400\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"391\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.377</text>\r\n<text text-anchor=\"start\" x=\"389.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1028</text>\r\n<text text-anchor=\"start\" x=\"388\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 953]</text>\r\n<text text-anchor=\"start\" x=\"386\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 2&#45;&gt;3 -->\r\n<g id=\"edge3\" class=\"edge\"><title>2&#45;&gt;3</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1285.93,-1087.66C1117.52,-1066.1 686.994,-1010.99 514.298,-988.883\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"514.652,-985.4 504.289,-987.602 513.763,-992.343 514.652,-985.4\"/>\r\n</g>\r\n<!-- 16 -->\r\n<g id=\"node17\" class=\"node\"><title>16</title>\r\n<path fill=\"#efb387\" stroke=\"black\" d=\"M1456,-1020C1456,-1020 1254,-1020 1254,-1020 1248,-1020 1242,-1014 1242,-1008 1242,-1008 1242,-949 1242,-949 1242,-943 1248,-937 1254,-937 1254,-937 1456,-937 1456,-937 1462,-937 1468,-943 1468,-949 1468,-949 1468,-1008 1468,-1008 1468,-1014 1462,-1020 1456,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1250\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.535</text>\r\n<text text-anchor=\"start\" x=\"1305\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.861</text>\r\n<text text-anchor=\"start\" x=\"1307.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 747</text>\r\n<text text-anchor=\"start\" x=\"1298\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [535, 212]</text>\r\n<text text-anchor=\"start\" x=\"1308\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 2&#45;&gt;16 -->\r\n<g id=\"edge16\" class=\"edge\"><title>2&#45;&gt;16</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1355,-1055.91C1355,-1047.65 1355,-1038.86 1355,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1358.5,-1030.02 1355,-1020.02 1351.5,-1030.02 1358.5,-1030.02\"/>\r\n</g>\r\n<!-- 4 -->\r\n<g id=\"node5\" class=\"node\"><title>4</title>\r\n<path fill=\"#eda775\" stroke=\"black\" d=\"M251,-901C251,-901 159,-901 159,-901 153,-901 147,-895 147,-889 147,-889 147,-830 147,-830 147,-824 153,-818 159,-818 159,-818 251,-818 251,-818 257,-818 263,-824 263,-830 263,-830 263,-889 263,-889 263,-895 257,-901 251,-901\"/>\r\n<text text-anchor=\"start\" x=\"156\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"155\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.781</text>\r\n<text text-anchor=\"start\" x=\"161.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 95</text>\r\n<text text-anchor=\"start\" x=\"156.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [73, 22]</text>\r\n<text text-anchor=\"start\" x=\"158\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 3&#45;&gt;4 -->\r\n<g id=\"edge4\" class=\"edge\"><title>3&#45;&gt;4</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M377.756,-946.146C345.183,-929.998 305.457,-910.303 272.316,-893.873\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"273.669,-890.637 263.155,-889.331 270.56,-896.909 273.669,-890.637\"/>\r\n</g>\r\n<!-- 11 -->\r\n<g id=\"node12\" class=\"node\"><title>11</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M498,-901C498,-901 384,-901 384,-901 378,-901 372,-895 372,-889 372,-889 372,-830 372,-830 372,-824 378,-818 384,-818 384,-818 498,-818 498,-818 504,-818 510,-824 510,-830 510,-830 510,-889 510,-889 510,-895 504,-901 498,-901\"/>\r\n<text text-anchor=\"start\" x=\"380\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 0.835</text>\r\n<text text-anchor=\"start\" x=\"391\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.022</text>\r\n<text text-anchor=\"start\" x=\"393.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 933</text>\r\n<text text-anchor=\"start\" x=\"392.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 931]</text>\r\n<text text-anchor=\"start\" x=\"386\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 3&#45;&gt;11 -->\r\n<g id=\"edge11\" class=\"edge\"><title>3&#45;&gt;11</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M441,-936.907C441,-928.649 441,-919.864 441,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"444.5,-911.021 441,-901.021 437.5,-911.021 444.5,-911.021\"/>\r\n</g>\r\n<!-- 5 -->\r\n<g id=\"node6\" class=\"node\"><title>5</title>\r\n<path fill=\"#78bced\" stroke=\"black\" d=\"M120,-782C120,-782 18,-782 18,-782 12,-782 6,-776 6,-770 6,-770 6,-711 6,-711 6,-705 12,-699 18,-699 18,-699 120,-699 120,-699 126,-699 132,-705 132,-711 132,-711 132,-770 132,-770 132,-776 126,-782 120,-782\"/>\r\n<text text-anchor=\"start\" x=\"39.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"19\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.797</text>\r\n<text text-anchor=\"start\" x=\"25.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"24.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 22]</text>\r\n<text text-anchor=\"start\" x=\"14\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4&#45;&gt;5 -->\r\n<g id=\"edge5\" class=\"edge\"><title>4&#45;&gt;5</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M157.815,-817.907C146.845,-808.469 135.074,-798.343 123.806,-788.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"125.964,-785.889 116.101,-782.021 121.399,-791.196 125.964,-785.889\"/>\r\n</g>\r\n<!-- 10 -->\r\n<g id=\"node11\" class=\"node\"><title>10</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M248,-774.5C248,-774.5 162,-774.5 162,-774.5 156,-774.5 150,-768.5 150,-762.5 150,-762.5 150,-718.5 150,-718.5 150,-712.5 156,-706.5 162,-706.5 162,-706.5 248,-706.5 248,-706.5 254,-706.5 260,-712.5 260,-718.5 260,-718.5 260,-762.5 260,-762.5 260,-768.5 254,-774.5 248,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"163\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"161.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\r\n<text text-anchor=\"start\" x=\"160.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 0]</text>\r\n<text text-anchor=\"start\" x=\"158\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 4&#45;&gt;10 -->\r\n<g id=\"edge10\" class=\"edge\"><title>4&#45;&gt;10</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M205,-817.907C205,-807.204 205,-795.615 205,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"208.5,-784.667 205,-774.667 201.5,-784.667 208.5,-784.667\"/>\r\n</g>\r\n<!-- 6 -->\r\n<g id=\"node7\" class=\"node\"><title>6</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M114,-655.5C114,-655.5 12,-655.5 12,-655.5 6,-655.5 0,-649.5 0,-643.5 0,-643.5 0,-599.5 0,-599.5 0,-593.5 6,-587.5 12,-587.5 12,-587.5 114,-587.5 114,-587.5 120,-587.5 126,-593.5 126,-599.5 126,-599.5 126,-643.5 126,-643.5 126,-649.5 120,-655.5 114,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"21\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"19.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"18.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\r\n<text text-anchor=\"start\" x=\"8\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 5&#45;&gt;6 -->\r\n<g id=\"edge6\" class=\"edge\"><title>5&#45;&gt;6</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M66.9183,-698.907C66.3694,-688.204 65.7751,-676.615 65.2193,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"68.7085,-665.475 64.7009,-655.667 61.7177,-665.833 68.7085,-665.475\"/>\r\n</g>\r\n<!-- 7 -->\r\n<g id=\"node8\" class=\"node\"><title>7</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M290,-663C290,-663 156,-663 156,-663 150,-663 144,-657 144,-651 144,-651 144,-592 144,-592 144,-586 150,-580 156,-580 156,-580 290,-580 290,-580 296,-580 302,-586 302,-592 302,-592 302,-651 302,-651 302,-657 296,-663 290,-663\"/>\r\n<text text-anchor=\"start\" x=\"152\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 19.0</text>\r\n<text text-anchor=\"start\" x=\"181\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"179.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"182.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 7]</text>\r\n<text text-anchor=\"start\" x=\"176\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 5&#45;&gt;7 -->\r\n<g id=\"edge7\" class=\"edge\"><title>5&#45;&gt;7</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M122.43,-698.907C135.091,-689.288 148.694,-678.953 161.676,-669.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"163.82,-671.857 169.665,-663.021 159.585,-666.283 163.82,-671.857\"/>\r\n</g>\r\n<!-- 8 -->\r\n<g id=\"node9\" class=\"node\"><title>8</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M224,-536.5C224,-536.5 122,-536.5 122,-536.5 116,-536.5 110,-530.5 110,-524.5 110,-524.5 110,-480.5 110,-480.5 110,-474.5 116,-468.5 122,-468.5 122,-468.5 224,-468.5 224,-468.5 230,-468.5 236,-474.5 236,-480.5 236,-480.5 236,-524.5 236,-524.5 236,-530.5 230,-536.5 224,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"131\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"133.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"132.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"118\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 7&#45;&gt;8 -->\r\n<g id=\"edge8\" class=\"edge\"><title>7&#45;&gt;8</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M205.653,-579.907C200.984,-568.983 195.922,-557.137 191.208,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"194.322,-544.487 187.174,-536.667 187.885,-547.238 194.322,-544.487\"/>\r\n</g>\r\n<!-- 9 -->\r\n<g id=\"node10\" class=\"node\"><title>9</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M352,-536.5C352,-536.5 266,-536.5 266,-536.5 260,-536.5 254,-530.5 254,-524.5 254,-524.5 254,-480.5 254,-480.5 254,-474.5 260,-468.5 266,-468.5 266,-468.5 352,-468.5 352,-468.5 358,-468.5 364,-474.5 364,-480.5 364,-480.5 364,-524.5 364,-524.5 364,-530.5 358,-536.5 352,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"267\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"269.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"268.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\r\n<text text-anchor=\"start\" x=\"262\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7&#45;&gt;9 -->\r\n<g id=\"edge9\" class=\"edge\"><title>7&#45;&gt;9</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M252.837,-579.907C261.191,-568.542 270.279,-556.178 278.662,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"281.518,-546.797 284.621,-536.667 275.878,-542.652 281.518,-546.797\"/>\r\n</g>\r\n<!-- 12 -->\r\n<g id=\"node13\" class=\"node\"><title>12</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M392,-774.5C392,-774.5 290,-774.5 290,-774.5 284,-774.5 278,-768.5 278,-762.5 278,-762.5 278,-718.5 278,-718.5 278,-712.5 284,-706.5 290,-706.5 290,-706.5 392,-706.5 392,-706.5 398,-706.5 404,-712.5 404,-718.5 404,-718.5 404,-762.5 404,-762.5 404,-768.5 398,-774.5 392,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"299\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"293.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 891</text>\r\n<text text-anchor=\"start\" x=\"292.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 891]</text>\r\n<text text-anchor=\"start\" x=\"286\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11&#45;&gt;12 -->\r\n<g id=\"edge12\" class=\"edge\"><title>11&#45;&gt;12</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M406.305,-817.907C396.497,-806.432 385.819,-793.938 375.993,-782.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"378.506,-779.995 369.348,-774.667 373.184,-784.543 378.506,-779.995\"/>\r\n</g>\r\n<!-- 13 -->\r\n<g id=\"node14\" class=\"node\"><title>13</title>\r\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M628,-782C628,-782 434,-782 434,-782 428,-782 422,-776 422,-770 422,-770 422,-711 422,-711 422,-705 428,-699 434,-699 434,-699 628,-699 628,-699 634,-699 640,-705 640,-711 640,-711 640,-770 640,-770 640,-776 634,-782 628,-782\"/>\r\n<text text-anchor=\"start\" x=\"430\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"481\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"487.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\r\n<text text-anchor=\"start\" x=\"486.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 40]</text>\r\n<text text-anchor=\"start\" x=\"476\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11&#45;&gt;13 -->\r\n<g id=\"edge13\" class=\"edge\"><title>11&#45;&gt;13</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M472.225,-817.907C479.136,-808.923 486.527,-799.315 493.654,-790.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"496.507,-792.081 499.83,-782.021 490.959,-787.813 496.507,-792.081\"/>\r\n</g>\r\n<!-- 14 -->\r\n<g id=\"node15\" class=\"node\"><title>14</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M446,-655.5C446,-655.5 344,-655.5 344,-655.5 338,-655.5 332,-649.5 332,-643.5 332,-643.5 332,-599.5 332,-599.5 332,-593.5 338,-587.5 344,-587.5 344,-587.5 446,-587.5 446,-587.5 452,-587.5 458,-593.5 458,-599.5 458,-599.5 458,-643.5 458,-643.5 458,-649.5 452,-655.5 446,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"353\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"351.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 40</text>\r\n<text text-anchor=\"start\" x=\"350.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 40]</text>\r\n<text text-anchor=\"start\" x=\"340\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 13&#45;&gt;14 -->\r\n<g id=\"edge14\" class=\"edge\"><title>13&#45;&gt;14</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M483.815,-698.907C470.091,-687.101 455.115,-674.217 441.437,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"443.416,-659.535 433.553,-655.667 438.851,-664.842 443.416,-659.535\"/>\r\n</g>\r\n<!-- 15 -->\r\n<g id=\"node16\" class=\"node\"><title>15</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M574,-655.5C574,-655.5 488,-655.5 488,-655.5 482,-655.5 476,-649.5 476,-643.5 476,-643.5 476,-599.5 476,-599.5 476,-593.5 482,-587.5 488,-587.5 488,-587.5 574,-587.5 574,-587.5 580,-587.5 586,-593.5 586,-599.5 586,-599.5 586,-643.5 586,-643.5 586,-649.5 580,-655.5 574,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"489\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"491.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"490.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"484\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 13&#45;&gt;15 -->\r\n<g id=\"edge15\" class=\"edge\"><title>13&#45;&gt;15</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M531,-698.907C531,-688.204 531,-676.615 531,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"534.5,-665.667 531,-655.667 527.5,-665.667 534.5,-665.667\"/>\r\n</g>\r\n<!-- 17 -->\r\n<g id=\"node18\" class=\"node\"><title>17</title>\r\n<path fill=\"#b6dbf5\" stroke=\"black\" d=\"M1238,-901C1238,-901 1132,-901 1132,-901 1126,-901 1120,-895 1120,-889 1120,-889 1120,-830 1120,-830 1120,-824 1126,-818 1132,-818 1132,-818 1238,-818 1238,-818 1244,-818 1250,-824 1250,-830 1250,-830 1250,-889 1250,-889 1250,-895 1244,-901 1238,-901\"/>\r\n<text text-anchor=\"start\" x=\"1136\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"1135\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.963</text>\r\n<text text-anchor=\"start\" x=\"1137.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 326</text>\r\n<text text-anchor=\"start\" x=\"1128\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [126, 200]</text>\r\n<text text-anchor=\"start\" x=\"1130\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 16&#45;&gt;17 -->\r\n<g id=\"edge17\" class=\"edge\"><title>16&#45;&gt;17</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1296.02,-936.907C1281.91,-927.197 1266.74,-916.758 1252.29,-906.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1254.1,-903.807 1243.88,-901.021 1250.13,-909.573 1254.1,-903.807\"/>\r\n</g>\r\n<!-- 40 -->\r\n<g id=\"node41\" class=\"node\"><title>40</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M1603.5,-901C1603.5,-901 1442.5,-901 1442.5,-901 1436.5,-901 1430.5,-895 1430.5,-889 1430.5,-889 1430.5,-830 1430.5,-830 1430.5,-824 1436.5,-818 1442.5,-818 1442.5,-818 1603.5,-818 1603.5,-818 1609.5,-818 1615.5,-824 1615.5,-830 1615.5,-830 1615.5,-889 1615.5,-889 1615.5,-895 1609.5,-901 1603.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"1438.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 11.0</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\r\n<text text-anchor=\"start\" x=\"1475.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 421</text>\r\n<text text-anchor=\"start\" x=\"1470\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [409, 12]</text>\r\n<text text-anchor=\"start\" x=\"1476\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 16&#45;&gt;40 -->\r\n<g id=\"edge40\" class=\"edge\"><title>16&#45;&gt;40</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1413.29,-936.907C1427.23,-927.197 1442.22,-916.758 1456.5,-906.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1458.61,-909.608 1464.82,-901.021 1454.61,-903.864 1458.61,-909.608\"/>\r\n</g>\r\n<!-- 18 -->\r\n<g id=\"node19\" class=\"node\"><title>18</title>\r\n<path fill=\"#5baee9\" stroke=\"black\" d=\"M1005,-782C1005,-782 769,-782 769,-782 763,-782 757,-776 757,-770 757,-770 757,-711 757,-711 757,-705 763,-699 769,-699 769,-699 1005,-699 1005,-699 1011,-699 1017,-705 1017,-711 1017,-711 1017,-770 1017,-770 1017,-776 1011,-782 1005,-782\"/>\r\n<text text-anchor=\"start\" x=\"765\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.135</text>\r\n<text text-anchor=\"start\" x=\"837\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.598</text>\r\n<text text-anchor=\"start\" x=\"839.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 227</text>\r\n<text text-anchor=\"start\" x=\"834\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 194]</text>\r\n<text text-anchor=\"start\" x=\"832\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 17&#45;&gt;18 -->\r\n<g id=\"edge18\" class=\"edge\"><title>17&#45;&gt;18</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1119.97,-832.968C1084.78,-819.151 1040.31,-801.691 999.675,-785.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1000.84,-782.437 990.255,-782.04 998.285,-788.952 1000.84,-782.437\"/>\r\n</g>\r\n<!-- 33 -->\r\n<g id=\"node34\" class=\"node\"><title>33</title>\r\n<path fill=\"#e78946\" stroke=\"black\" d=\"M1261,-782C1261,-782 1109,-782 1109,-782 1103,-782 1097,-776 1097,-770 1097,-770 1097,-711 1097,-711 1097,-705 1103,-699 1109,-699 1109,-699 1261,-699 1261,-699 1267,-699 1273,-705 1273,-711 1273,-711 1273,-770 1273,-770 1273,-776 1267,-782 1261,-782\"/>\r\n<text text-anchor=\"start\" x=\"1105\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"1139\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.33</text>\r\n<text text-anchor=\"start\" x=\"1141.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\r\n<text text-anchor=\"start\" x=\"1140.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [93, 6]</text>\r\n<text text-anchor=\"start\" x=\"1138\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 17&#45;&gt;33 -->\r\n<g id=\"edge33\" class=\"edge\"><title>17&#45;&gt;33</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1185,-817.907C1185,-809.649 1185,-800.864 1185,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1188.5,-792.021 1185,-782.021 1181.5,-792.021 1188.5,-792.021\"/>\r\n</g>\r\n<!-- 19 -->\r\n<g id=\"node20\" class=\"node\"><title>19</title>\r\n<path fill=\"#8dc6f0\" stroke=\"black\" d=\"M793.5,-663C793.5,-663 616.5,-663 616.5,-663 610.5,-663 604.5,-657 604.5,-651 604.5,-651 604.5,-592 604.5,-592 604.5,-586 610.5,-580 616.5,-580 616.5,-580 793.5,-580 793.5,-580 799.5,-580 805.5,-586 805.5,-592 805.5,-592 805.5,-651 805.5,-651 805.5,-657 799.5,-663 793.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"612.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.955</text>\r\n<text text-anchor=\"start\" x=\"655\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.878</text>\r\n<text text-anchor=\"start\" x=\"657.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 111</text>\r\n<text text-anchor=\"start\" x=\"656.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 78]</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18&#45;&gt;19 -->\r\n<g id=\"edge19\" class=\"edge\"><title>18&#45;&gt;19</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M823.856,-698.907C808.61,-689.106 792.209,-678.563 776.606,-668.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"778.337,-665.484 768.032,-663.021 774.552,-671.373 778.337,-665.484\"/>\r\n</g>\r\n<!-- 32 -->\r\n<g id=\"node33\" class=\"node\"><title>32</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M938,-655.5C938,-655.5 836,-655.5 836,-655.5 830,-655.5 824,-649.5 824,-643.5 824,-643.5 824,-599.5 824,-599.5 824,-593.5 830,-587.5 836,-587.5 836,-587.5 938,-587.5 938,-587.5 944,-587.5 950,-593.5 950,-599.5 950,-599.5 950,-643.5 950,-643.5 950,-649.5 944,-655.5 938,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"845\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"839.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 116</text>\r\n<text text-anchor=\"start\" x=\"838.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 116]</text>\r\n<text text-anchor=\"start\" x=\"832\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18&#45;&gt;32 -->\r\n<g id=\"edge32\" class=\"edge\"><title>18&#45;&gt;32</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M887,-698.907C887,-688.204 887,-676.615 887,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"890.5,-665.667 887,-655.667 883.5,-665.667 890.5,-665.667\"/>\r\n</g>\r\n<!-- 20 -->\r\n<g id=\"node21\" class=\"node\"><title>20</title>\r\n<path fill=\"#f4caab\" stroke=\"black\" d=\"M633,-544C633,-544 459,-544 459,-544 453,-544 447,-538 447,-532 447,-532 447,-473 447,-473 447,-467 453,-461 459,-461 459,-461 633,-461 633,-461 639,-461 645,-467 645,-473 645,-473 645,-532 645,-532 645,-538 639,-544 633,-544\"/>\r\n<text text-anchor=\"start\" x=\"455\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.605</text>\r\n<text text-anchor=\"start\" x=\"496\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.947</text>\r\n<text text-anchor=\"start\" x=\"502.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 52</text>\r\n<text text-anchor=\"start\" x=\"497.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 19]</text>\r\n<text text-anchor=\"start\" x=\"499\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 19&#45;&gt;20 -->\r\n<g id=\"edge20\" class=\"edge\"><title>19&#45;&gt;20</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M649.836,-579.907C636.763,-570.288 622.719,-559.953 609.315,-550.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"611.196,-547.129 601.067,-544.021 607.047,-552.767 611.196,-547.129\"/>\r\n</g>\r\n<!-- 31 -->\r\n<g id=\"node32\" class=\"node\"><title>31</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M777,-536.5C777,-536.5 675,-536.5 675,-536.5 669,-536.5 663,-530.5 663,-524.5 663,-524.5 663,-480.5 663,-480.5 663,-474.5 669,-468.5 675,-468.5 675,-468.5 777,-468.5 777,-468.5 783,-468.5 789,-474.5 789,-480.5 789,-480.5 789,-524.5 789,-524.5 789,-530.5 783,-536.5 777,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"684\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"682.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 59</text>\r\n<text text-anchor=\"start\" x=\"681.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 59]</text>\r\n<text text-anchor=\"start\" x=\"671\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 19&#45;&gt;31 -->\r\n<g id=\"edge31\" class=\"edge\"><title>19&#45;&gt;31</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M712.286,-579.907C714.207,-569.204 716.287,-557.615 718.232,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"721.725,-547.128 720.047,-536.667 714.835,-545.891 721.725,-547.128\"/>\r\n</g>\r\n<!-- 21 -->\r\n<g id=\"node22\" class=\"node\"><title>21</title>\r\n<path fill=\"#eda775\" stroke=\"black\" d=\"M537.5,-425C537.5,-425 386.5,-425 386.5,-425 380.5,-425 374.5,-419 374.5,-413 374.5,-413 374.5,-354 374.5,-354 374.5,-348 380.5,-342 386.5,-342 386.5,-342 537.5,-342 537.5,-342 543.5,-342 549.5,-348 549.5,-354 549.5,-354 549.5,-413 549.5,-413 549.5,-419 543.5,-425 537.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"382.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.15</text>\r\n<text text-anchor=\"start\" x=\"412\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.782</text>\r\n<text text-anchor=\"start\" x=\"418.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"413.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 10]</text>\r\n<text text-anchor=\"start\" x=\"415\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 20&#45;&gt;21 -->\r\n<g id=\"edge21\" class=\"edge\"><title>20&#45;&gt;21</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M516.857,-460.907C510.471,-452.014 503.648,-442.509 497.058,-433.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"499.767,-431.103 491.092,-425.021 494.081,-435.185 499.767,-431.103\"/>\r\n</g>\r\n<!-- 30 -->\r\n<g id=\"node31\" class=\"node\"><title>30</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M682,-417.5C682,-417.5 580,-417.5 580,-417.5 574,-417.5 568,-411.5 568,-405.5 568,-405.5 568,-361.5 568,-361.5 568,-355.5 574,-349.5 580,-349.5 580,-349.5 682,-349.5 682,-349.5 688,-349.5 694,-355.5 694,-361.5 694,-361.5 694,-405.5 694,-405.5 694,-411.5 688,-417.5 682,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"589\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"591.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"590.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"576\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 20&#45;&gt;30 -->\r\n<g id=\"edge30\" class=\"edge\"><title>20&#45;&gt;30</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M575.49,-460.907C583.747,-449.542 592.729,-437.178 601.015,-425.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"603.858,-427.814 606.904,-417.667 598.195,-423.7 603.858,-427.814\"/>\r\n</g>\r\n<!-- 22 -->\r\n<g id=\"node23\" class=\"node\"><title>22</title>\r\n<path fill=\"#ea985d\" stroke=\"black\" d=\"M454,-306C454,-306 302,-306 302,-306 296,-306 290,-300 290,-294 290,-294 290,-235 290,-235 290,-229 296,-223 302,-223 302,-223 454,-223 454,-223 460,-223 466,-229 466,-235 466,-235 466,-294 466,-294 466,-300 460,-306 454,-306\"/>\r\n<text text-anchor=\"start\" x=\"298\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"328\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.619</text>\r\n<text text-anchor=\"start\" x=\"334.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 39</text>\r\n<text text-anchor=\"start\" x=\"333.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 6]</text>\r\n<text text-anchor=\"start\" x=\"331\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 21&#45;&gt;22 -->\r\n<g id=\"edge22\" class=\"edge\"><title>21&#45;&gt;22</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M432.857,-341.907C426.471,-333.014 419.648,-323.509 413.058,-314.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"415.767,-312.103 407.092,-306.021 410.081,-316.185 415.767,-312.103\"/>\r\n</g>\r\n<!-- 29 -->\r\n<g id=\"node30\" class=\"node\"><title>29</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M598,-298.5C598,-298.5 496,-298.5 496,-298.5 490,-298.5 484,-292.5 484,-286.5 484,-286.5 484,-242.5 484,-242.5 484,-236.5 490,-230.5 496,-230.5 496,-230.5 598,-230.5 598,-230.5 604,-230.5 610,-236.5 610,-242.5 610,-242.5 610,-286.5 610,-286.5 610,-292.5 604,-298.5 598,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"505\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"507.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"506.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"492\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 21&#45;&gt;29 -->\r\n<g id=\"edge29\" class=\"edge\"><title>21&#45;&gt;29</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M491.49,-341.907C499.747,-330.542 508.729,-318.178 517.015,-306.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"519.858,-308.814 522.904,-298.667 514.195,-304.7 519.858,-308.814\"/>\r\n</g>\r\n<!-- 23 -->\r\n<g id=\"node24\" class=\"node\"><title>23</title>\r\n<path fill=\"#d7ebfa\" stroke=\"black\" d=\"M364,-187C364,-187 222,-187 222,-187 216,-187 210,-181 210,-175 210,-175 210,-116 210,-116 210,-110 216,-104 222,-104 222,-104 364,-104 364,-104 370,-104 376,-110 376,-116 376,-116 376,-175 376,-175 376,-181 370,-187 364,-187\"/>\r\n<text text-anchor=\"start\" x=\"218\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 131.5</text>\r\n<text text-anchor=\"start\" x=\"243\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"253.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"252.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 5]</text>\r\n<text text-anchor=\"start\" x=\"238\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 22&#45;&gt;23 -->\r\n<g id=\"edge23\" class=\"edge\"><title>22&#45;&gt;23</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M348.51,-222.907C342.049,-214.014 335.143,-204.509 328.476,-195.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"331.147,-193.054 322.438,-187.021 325.484,-197.168 331.147,-193.054\"/>\r\n</g>\r\n<!-- 26 -->\r\n<g id=\"node27\" class=\"node\"><title>26</title>\r\n<path fill=\"#e68540\" stroke=\"black\" d=\"M521.5,-187C521.5,-187 406.5,-187 406.5,-187 400.5,-187 394.5,-181 394.5,-175 394.5,-175 394.5,-116 394.5,-116 394.5,-110 400.5,-104 406.5,-104 406.5,-104 521.5,-104 521.5,-104 527.5,-104 533.5,-110 533.5,-116 533.5,-116 533.5,-175 533.5,-175 533.5,-181 527.5,-187 521.5,-187\"/>\r\n<text text-anchor=\"start\" x=\"402.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"414\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.211</text>\r\n<text text-anchor=\"start\" x=\"420.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"419.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 1]</text>\r\n<text text-anchor=\"start\" x=\"417\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 22&#45;&gt;26 -->\r\n<g id=\"edge26\" class=\"edge\"><title>22&#45;&gt;26</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M407.837,-222.907C414.374,-214.014 421.361,-204.509 428.107,-195.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"431.113,-197.151 434.215,-187.021 425.473,-193.005 431.113,-197.151\"/>\r\n</g>\r\n<!-- 24 -->\r\n<g id=\"node25\" class=\"node\"><title>24</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M209,-68C209,-68 123,-68 123,-68 117,-68 111,-62 111,-56 111,-56 111,-12 111,-12 111,-6 117,-0 123,-0 123,-0 209,-0 209,-0 215,-0 221,-6 221,-12 221,-12 221,-56 221,-56 221,-62 215,-68 209,-68\"/>\r\n<text text-anchor=\"start\" x=\"124\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"126.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"125.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"119\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 23&#45;&gt;24 -->\r\n<g id=\"edge24\" class=\"edge\"><title>23&#45;&gt;24</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M245.71,-103.726C234.814,-94.3318 223.236,-84.349 212.379,-74.9883\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"214.481,-72.1789 204.621,-68.2996 209.91,-77.4804 214.481,-72.1789\"/>\r\n</g>\r\n<!-- 25 -->\r\n<g id=\"node26\" class=\"node\"><title>25</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M353,-68C353,-68 251,-68 251,-68 245,-68 239,-62 239,-56 239,-56 239,-12 239,-12 239,-6 245,-0 251,-0 251,-0 353,-0 353,-0 359,-0 365,-6 365,-12 365,-12 365,-56 365,-56 365,-62 359,-68 353,-68\"/>\r\n<text text-anchor=\"start\" x=\"260\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"262.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"261.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"247\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 23&#45;&gt;25 -->\r\n<g id=\"edge25\" class=\"edge\"><title>23&#45;&gt;25</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M296.351,-103.726C297.033,-95.4263 297.753,-86.6671 298.442,-78.2834\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"301.932,-78.5527 299.263,-68.2996 294.956,-77.9793 301.932,-78.5527\"/>\r\n</g>\r\n<!-- 27 -->\r\n<g id=\"node28\" class=\"node\"><title>27</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M490,-68C490,-68 404,-68 404,-68 398,-68 392,-62 392,-56 392,-56 392,-12 392,-12 392,-6 398,-0 404,-0 404,-0 490,-0 490,-0 496,-0 502,-6 502,-12 502,-12 502,-56 502,-56 502,-62 496,-68 490,-68\"/>\r\n<text text-anchor=\"start\" x=\"405\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"403.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"402.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"400\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 26&#45;&gt;27 -->\r\n<g id=\"edge27\" class=\"edge\"><title>26&#45;&gt;27</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M457.67,-103.726C456.381,-95.4263 455.021,-86.6671 453.72,-78.2834\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"457.163,-77.6442 452.17,-68.2996 450.245,-78.7182 457.163,-77.6442\"/>\r\n</g>\r\n<!-- 28 -->\r\n<g id=\"node29\" class=\"node\"><title>28</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M634,-68C634,-68 532,-68 532,-68 526,-68 520,-62 520,-56 520,-56 520,-12 520,-12 520,-6 526,-0 532,-0 532,-0 634,-0 634,-0 640,-0 646,-6 646,-12 646,-12 646,-56 646,-56 646,-62 640,-68 634,-68\"/>\r\n<text text-anchor=\"start\" x=\"541\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"543.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"542.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"528\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26&#45;&gt;28 -->\r\n<g id=\"edge28\" class=\"edge\"><title>26&#45;&gt;28</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M508.311,-103.726C518.422,-94.423 529.159,-84.5428 539.246,-75.2612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"541.823,-77.6464 546.811,-68.2996 537.083,-72.4953 541.823,-77.6464\"/>\r\n</g>\r\n<!-- 34 -->\r\n<g id=\"node35\" class=\"node\"><title>34</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M1159.5,-663C1159.5,-663 980.5,-663 980.5,-663 974.5,-663 968.5,-657 968.5,-651 968.5,-651 968.5,-592 968.5,-592 968.5,-586 974.5,-580 980.5,-580 980.5,-580 1159.5,-580 1159.5,-580 1165.5,-580 1171.5,-586 1171.5,-592 1171.5,-592 1171.5,-651 1171.5,-651 1171.5,-657 1165.5,-663 1159.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"976.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.65</text>\r\n<text text-anchor=\"start\" x=\"1024\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"1030.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1029.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"1015\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 33&#45;&gt;34 -->\r\n<g id=\"edge34\" class=\"edge\"><title>33&#45;&gt;34</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1145.1,-698.907C1136,-689.651 1126.25,-679.732 1116.89,-670.209\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1119.33,-667.699 1109.83,-663.021 1114.34,-672.606 1119.33,-667.699\"/>\r\n</g>\r\n<!-- 37 -->\r\n<g id=\"node38\" class=\"node\"><title>37</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M1294,-663C1294,-663 1202,-663 1202,-663 1196,-663 1190,-657 1190,-651 1190,-651 1190,-592 1190,-592 1190,-586 1196,-580 1202,-580 1202,-580 1294,-580 1294,-580 1300,-580 1306,-586 1306,-592 1306,-592 1306,-651 1306,-651 1306,-657 1300,-663 1294,-663\"/>\r\n<text text-anchor=\"start\" x=\"1213\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 7.0</text>\r\n<text text-anchor=\"start\" x=\"1198\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.086</text>\r\n<text text-anchor=\"start\" x=\"1204.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 93</text>\r\n<text text-anchor=\"start\" x=\"1203.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 1]</text>\r\n<text text-anchor=\"start\" x=\"1201\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 33&#45;&gt;37 -->\r\n<g id=\"edge37\" class=\"edge\"><title>33&#45;&gt;37</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1206.86,-698.907C1211.55,-690.195 1216.56,-680.897 1221.4,-671.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1224.52,-673.485 1226.18,-663.021 1218.36,-670.166 1224.52,-673.485\"/>\r\n</g>\r\n<!-- 35 -->\r\n<g id=\"node36\" class=\"node\"><title>35</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M963,-536.5C963,-536.5 861,-536.5 861,-536.5 855,-536.5 849,-530.5 849,-524.5 849,-524.5 849,-480.5 849,-480.5 849,-474.5 855,-468.5 861,-468.5 861,-468.5 963,-468.5 963,-468.5 969,-468.5 975,-474.5 975,-480.5 975,-480.5 975,-524.5 975,-524.5 975,-530.5 969,-536.5 963,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"870\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"872.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"871.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"857\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 34&#45;&gt;35 -->\r\n<g id=\"edge35\" class=\"edge\"><title>34&#45;&gt;35</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1015.18,-579.907C998.94,-567.88 981.189,-554.735 965.059,-542.791\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"966.909,-539.805 956.79,-536.667 962.743,-545.431 966.909,-539.805\"/>\r\n</g>\r\n<!-- 36 -->\r\n<g id=\"node37\" class=\"node\"><title>36</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1091,-536.5C1091,-536.5 1005,-536.5 1005,-536.5 999,-536.5 993,-530.5 993,-524.5 993,-524.5 993,-480.5 993,-480.5 993,-474.5 999,-468.5 1005,-468.5 1005,-468.5 1091,-468.5 1091,-468.5 1097,-468.5 1103,-474.5 1103,-480.5 1103,-480.5 1103,-524.5 1103,-524.5 1103,-530.5 1097,-536.5 1091,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1006\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1008.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1007.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1001\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 34&#45;&gt;36 -->\r\n<g id=\"edge36\" class=\"edge\"><title>34&#45;&gt;36</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1062.37,-579.907C1060.35,-569.204 1058.18,-557.615 1056.14,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1059.52,-545.848 1054.24,-536.667 1052.64,-547.142 1059.52,-545.848\"/>\r\n</g>\r\n<!-- 38 -->\r\n<g id=\"node39\" class=\"node\"><title>38</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1219,-536.5C1219,-536.5 1133,-536.5 1133,-536.5 1127,-536.5 1121,-530.5 1121,-524.5 1121,-524.5 1121,-480.5 1121,-480.5 1121,-474.5 1127,-468.5 1133,-468.5 1133,-468.5 1219,-468.5 1219,-468.5 1225,-468.5 1231,-474.5 1231,-480.5 1231,-480.5 1231,-524.5 1231,-524.5 1231,-530.5 1225,-536.5 1219,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1134\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1132.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 92</text>\r\n<text text-anchor=\"start\" x=\"1131.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 0]</text>\r\n<text text-anchor=\"start\" x=\"1129\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 37&#45;&gt;38 -->\r\n<g id=\"edge38\" class=\"edge\"><title>37&#45;&gt;38</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1223.02,-579.907C1216.16,-568.763 1208.71,-556.658 1201.81,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1204.63,-543.349 1196.41,-536.667 1198.67,-547.018 1204.63,-543.349\"/>\r\n</g>\r\n<!-- 39 -->\r\n<g id=\"node40\" class=\"node\"><title>39</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1363,-536.5C1363,-536.5 1261,-536.5 1261,-536.5 1255,-536.5 1249,-530.5 1249,-524.5 1249,-524.5 1249,-480.5 1249,-480.5 1249,-474.5 1255,-468.5 1261,-468.5 1261,-468.5 1363,-468.5 1363,-468.5 1369,-468.5 1375,-474.5 1375,-480.5 1375,-480.5 1375,-524.5 1375,-524.5 1375,-530.5 1369,-536.5 1363,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1270\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1272.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1271.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1257\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 37&#45;&gt;39 -->\r\n<g id=\"edge39\" class=\"edge\"><title>37&#45;&gt;39</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1270.2,-579.907C1276.24,-568.873 1282.79,-556.898 1288.88,-545.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1292.13,-547.12 1293.86,-536.667 1285.99,-543.76 1292.13,-547.12\"/>\r\n</g>\r\n<!-- 41 -->\r\n<g id=\"node42\" class=\"node\"><title>41</title>\r\n<path fill=\"#deeffb\" stroke=\"black\" d=\"M1574,-782C1574,-782 1472,-782 1472,-782 1466,-782 1460,-776 1460,-770 1460,-770 1460,-711 1460,-711 1460,-705 1466,-699 1472,-699 1472,-699 1574,-699 1574,-699 1580,-699 1586,-705 1586,-711 1586,-711 1586,-770 1586,-770 1586,-776 1580,-782 1574,-782\"/>\r\n<text text-anchor=\"start\" x=\"1474\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 22</text>\r\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 40&#45;&gt;41 -->\r\n<g id=\"edge41\" class=\"edge\"><title>40&#45;&gt;41</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-817.907C1523,-809.649 1523,-800.864 1523,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-792.021 1523,-782.021 1519.5,-792.021 1526.5,-792.021\"/>\r\n</g>\r\n<!-- 50 -->\r\n<g id=\"node51\" class=\"node\"><title>50</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1705.5,-774.5C1705.5,-774.5 1616.5,-774.5 1616.5,-774.5 1610.5,-774.5 1604.5,-768.5 1604.5,-762.5 1604.5,-762.5 1604.5,-718.5 1604.5,-718.5 1604.5,-712.5 1610.5,-706.5 1616.5,-706.5 1616.5,-706.5 1705.5,-706.5 1705.5,-706.5 1711.5,-706.5 1717.5,-712.5 1717.5,-718.5 1717.5,-718.5 1717.5,-762.5 1717.5,-762.5 1717.5,-768.5 1711.5,-774.5 1705.5,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1619\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1613.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 399</text>\r\n<text text-anchor=\"start\" x=\"1612.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [399, 0]</text>\r\n<text text-anchor=\"start\" x=\"1614\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 40&#45;&gt;50 -->\r\n<g id=\"edge50\" class=\"edge\"><title>40&#45;&gt;50</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1570.88,-817.907C1584.8,-806.101 1600,-793.217 1613.88,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1616.52,-783.803 1621.88,-774.667 1611.99,-778.464 1616.52,-783.803\"/>\r\n</g>\r\n<!-- 42 -->\r\n<g id=\"node43\" class=\"node\"><title>42</title>\r\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M1610,-663C1610,-663 1436,-663 1436,-663 1430,-663 1424,-657 1424,-651 1424,-651 1424,-592 1424,-592 1424,-586 1430,-580 1436,-580 1436,-580 1610,-580 1610,-580 1616,-580 1622,-586 1622,-592 1622,-592 1622,-651 1622,-651 1622,-657 1616,-663 1610,-663\"/>\r\n<text text-anchor=\"start\" x=\"1432\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.355</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"1478.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 41&#45;&gt;42 -->\r\n<g id=\"edge42\" class=\"edge\"><title>41&#45;&gt;42</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-698.907C1523,-690.649 1523,-681.864 1523,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-673.021 1523,-663.021 1519.5,-673.021 1526.5,-673.021\"/>\r\n</g>\r\n<!-- 49 -->\r\n<g id=\"node50\" class=\"node\"><title>49</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1738,-655.5C1738,-655.5 1652,-655.5 1652,-655.5 1646,-655.5 1640,-649.5 1640,-643.5 1640,-643.5 1640,-599.5 1640,-599.5 1640,-593.5 1646,-587.5 1652,-587.5 1652,-587.5 1738,-587.5 1738,-587.5 1744,-587.5 1750,-593.5 1750,-599.5 1750,-599.5 1750,-643.5 1750,-643.5 1750,-649.5 1744,-655.5 1738,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1653\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1655.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1654.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"1648\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41&#45;&gt;49 -->\r\n<g id=\"edge49\" class=\"edge\"><title>41&#45;&gt;49</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1582.67,-698.907C1600.52,-686.769 1620.04,-673.493 1637.72,-661.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1639.94,-664.185 1646.24,-655.667 1636,-658.397 1639.94,-664.185\"/>\r\n</g>\r\n<!-- 43 -->\r\n<g id=\"node44\" class=\"node\"><title>43</title>\r\n<path fill=\"#5aade9\" stroke=\"black\" d=\"M1641,-544C1641,-544 1405,-544 1405,-544 1399,-544 1393,-538 1393,-532 1393,-532 1393,-473 1393,-473 1393,-467 1399,-461 1405,-461 1405,-461 1641,-461 1641,-461 1647,-461 1653,-467 1653,-473 1653,-473 1653,-532 1653,-532 1653,-538 1647,-544 1641,-544\"/>\r\n<text text-anchor=\"start\" x=\"1401\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.265</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"1478.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 42&#45;&gt;43 -->\r\n<g id=\"edge43\" class=\"edge\"><title>42&#45;&gt;43</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-579.907C1523,-571.649 1523,-562.864 1523,-554.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-554.021 1523,-544.021 1519.5,-554.021 1526.5,-554.021\"/>\r\n</g>\r\n<!-- 48 -->\r\n<g id=\"node49\" class=\"node\"><title>48</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1769,-536.5C1769,-536.5 1683,-536.5 1683,-536.5 1677,-536.5 1671,-530.5 1671,-524.5 1671,-524.5 1671,-480.5 1671,-480.5 1671,-474.5 1677,-468.5 1683,-468.5 1683,-468.5 1769,-468.5 1769,-468.5 1775,-468.5 1781,-474.5 1781,-480.5 1781,-480.5 1781,-524.5 1781,-524.5 1781,-530.5 1775,-536.5 1769,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1684\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1686.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1685.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"1679\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 42&#45;&gt;48 -->\r\n<g id=\"edge48\" class=\"edge\"><title>42&#45;&gt;48</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1598.86,-579.842C1619.49,-568.491 1641.72,-555.98 1662,-544 1663.11,-543.342 1664.24,-542.674 1665.37,-541.999\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1667.38,-544.874 1674.12,-536.702 1663.75,-538.885 1667.38,-544.874\"/>\r\n</g>\r\n<!-- 44 -->\r\n<g id=\"node45\" class=\"node\"><title>44</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1450,-417.5C1450,-417.5 1364,-417.5 1364,-417.5 1358,-417.5 1352,-411.5 1352,-405.5 1352,-405.5 1352,-361.5 1352,-361.5 1352,-355.5 1358,-349.5 1364,-349.5 1364,-349.5 1450,-349.5 1450,-349.5 1456,-349.5 1462,-355.5 1462,-361.5 1462,-361.5 1462,-405.5 1462,-405.5 1462,-411.5 1456,-417.5 1450,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1365\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1367.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1366.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1360\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 43&#45;&gt;44 -->\r\n<g id=\"edge44\" class=\"edge\"><title>43&#45;&gt;44</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1482.75,-460.907C1471.16,-449.211 1458.51,-436.457 1446.94,-424.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1449.41,-422.304 1439.88,-417.667 1444.44,-427.233 1449.41,-422.304\"/>\r\n</g>\r\n<!-- 45 -->\r\n<g id=\"node46\" class=\"node\"><title>45</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M1594,-425C1594,-425 1492,-425 1492,-425 1486,-425 1480,-419 1480,-413 1480,-413 1480,-354 1480,-354 1480,-348 1486,-342 1492,-342 1492,-342 1594,-342 1594,-342 1600,-342 1606,-348 1606,-354 1606,-354 1606,-413 1606,-413 1606,-419 1600,-425 1594,-425\"/>\r\n<text text-anchor=\"start\" x=\"1490\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 19.0</text>\r\n<text text-anchor=\"start\" x=\"1493\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"1499.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\r\n<text text-anchor=\"start\" x=\"1498.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 12]</text>\r\n<text text-anchor=\"start\" x=\"1488\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 43&#45;&gt;45 -->\r\n<g id=\"edge45\" class=\"edge\"><title>43&#45;&gt;45</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1529.94,-460.907C1531.37,-452.558 1532.89,-443.671 1534.36,-435.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1537.84,-435.468 1536.07,-425.021 1530.94,-434.288 1537.84,-435.468\"/>\r\n</g>\r\n<!-- 46 -->\r\n<g id=\"node47\" class=\"node\"><title>46</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1494,-298.5C1494,-298.5 1392,-298.5 1392,-298.5 1386,-298.5 1380,-292.5 1380,-286.5 1380,-286.5 1380,-242.5 1380,-242.5 1380,-236.5 1386,-230.5 1392,-230.5 1392,-230.5 1494,-230.5 1494,-230.5 1500,-230.5 1506,-236.5 1506,-242.5 1506,-242.5 1506,-286.5 1506,-286.5 1506,-292.5 1500,-298.5 1494,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1401\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1399.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"1398.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\r\n<text text-anchor=\"start\" x=\"1388\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 45&#45;&gt;46 -->\r\n<g id=\"edge46\" class=\"edge\"><title>45&#45;&gt;46</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1508.31,-341.907C1498.5,-330.432 1487.82,-317.938 1477.99,-306.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1480.51,-303.995 1471.35,-298.667 1475.18,-308.543 1480.51,-303.995\"/>\r\n</g>\r\n<!-- 47 -->\r\n<g id=\"node48\" class=\"node\"><title>47</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1622,-298.5C1622,-298.5 1536,-298.5 1536,-298.5 1530,-298.5 1524,-292.5 1524,-286.5 1524,-286.5 1524,-242.5 1524,-242.5 1524,-236.5 1530,-230.5 1536,-230.5 1536,-230.5 1622,-230.5 1622,-230.5 1628,-230.5 1634,-236.5 1634,-242.5 1634,-242.5 1634,-286.5 1634,-286.5 1634,-292.5 1628,-298.5 1622,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1537\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1539.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1538.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1532\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 45&#45;&gt;47 -->\r\n<g id=\"edge47\" class=\"edge\"><title>45&#45;&gt;47</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1555.49,-341.907C1558.82,-331.094 1562.42,-319.376 1565.79,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1569.2,-309.254 1568.79,-298.667 1562.51,-307.195 1569.2,-309.254\"/>\r\n</g>\r\n<!-- 52 -->\r\n<g id=\"node53\" class=\"node\"><title>52</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1901.5,-1020C1901.5,-1020 1750.5,-1020 1750.5,-1020 1744.5,-1020 1738.5,-1014 1738.5,-1008 1738.5,-1008 1738.5,-949 1738.5,-949 1738.5,-943 1744.5,-937 1750.5,-937 1750.5,-937 1901.5,-937 1901.5,-937 1907.5,-937 1913.5,-943 1913.5,-949 1913.5,-949 1913.5,-1008 1913.5,-1008 1913.5,-1014 1907.5,-1020 1901.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1746.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.46</text>\r\n<text text-anchor=\"start\" x=\"1776\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.002</text>\r\n<text text-anchor=\"start\" x=\"1774.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6350</text>\r\n<text text-anchor=\"start\" x=\"1773\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 6349]</text>\r\n<text text-anchor=\"start\" x=\"1771\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 51&#45;&gt;52 -->\r\n<g id=\"edge52\" class=\"edge\"><title>51&#45;&gt;52</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1890.65,-1055.91C1882.97,-1046.83 1874.76,-1037.12 1866.84,-1027.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1869.42,-1025.39 1860.29,-1020.02 1864.07,-1029.92 1869.42,-1025.39\"/>\r\n</g>\r\n<!-- 57 -->\r\n<g id=\"node58\" class=\"node\"><title>57</title>\r\n<path fill=\"#f1bd97\" stroke=\"black\" d=\"M2104.5,-1020C2104.5,-1020 1943.5,-1020 1943.5,-1020 1937.5,-1020 1931.5,-1014 1931.5,-1008 1931.5,-1008 1931.5,-949 1931.5,-949 1931.5,-943 1937.5,-937 1943.5,-937 1943.5,-937 2104.5,-937 2104.5,-937 2110.5,-937 2116.5,-943 2116.5,-949 2116.5,-949 2116.5,-1008 2116.5,-1008 2116.5,-1014 2110.5,-1020 2104.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1939.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 66.5</text>\r\n<text text-anchor=\"start\" x=\"1974\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\r\n<text text-anchor=\"start\" x=\"1980.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"1975.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 10]</text>\r\n<text text-anchor=\"start\" x=\"1977\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 51&#45;&gt;57 -->\r\n<g id=\"edge57\" class=\"edge\"><title>51&#45;&gt;57</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1959.35,-1055.91C1967.03,-1046.83 1975.24,-1037.12 1983.16,-1027.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1985.93,-1029.92 1989.71,-1020.02 1980.58,-1025.39 1985.93,-1029.92\"/>\r\n</g>\r\n<!-- 53 -->\r\n<g id=\"node54\" class=\"node\"><title>53</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1749,-893.5C1749,-893.5 1647,-893.5 1647,-893.5 1641,-893.5 1635,-887.5 1635,-881.5 1635,-881.5 1635,-837.5 1635,-837.5 1635,-831.5 1641,-825.5 1647,-825.5 1647,-825.5 1749,-825.5 1749,-825.5 1755,-825.5 1761,-831.5 1761,-837.5 1761,-837.5 1761,-881.5 1761,-881.5 1761,-887.5 1755,-893.5 1749,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1656\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1646.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6348</text>\r\n<text text-anchor=\"start\" x=\"1645\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6348]</text>\r\n<text text-anchor=\"start\" x=\"1643\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 52&#45;&gt;53 -->\r\n<g id=\"edge53\" class=\"edge\"><title>52&#45;&gt;53</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1781.59,-936.907C1768.67,-925.101 1754.58,-912.217 1741.71,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1744.03,-897.83 1734.29,-893.667 1739.3,-902.997 1744.03,-897.83\"/>\r\n</g>\r\n<!-- 54 -->\r\n<g id=\"node55\" class=\"node\"><title>54</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1907,-901C1907,-901 1791,-901 1791,-901 1785,-901 1779,-895 1779,-889 1779,-889 1779,-830 1779,-830 1779,-824 1785,-818 1791,-818 1791,-818 1907,-818 1907,-818 1913,-818 1919,-824 1919,-830 1919,-830 1919,-889 1919,-889 1919,-895 1913,-901 1907,-901\"/>\r\n<text text-anchor=\"start\" x=\"1787\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.08</text>\r\n<text text-anchor=\"start\" x=\"1807\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1809.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1808.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1802\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 52&#45;&gt;54 -->\r\n<g id=\"edge54\" class=\"edge\"><title>52&#45;&gt;54</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1833.98,-936.907C1835.62,-928.558 1837.37,-919.671 1839.07,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1842.54,-911.508 1841.03,-901.021 1835.67,-910.158 1842.54,-911.508\"/>\r\n</g>\r\n<!-- 55 -->\r\n<g id=\"node56\" class=\"node\"><title>55</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1839,-774.5C1839,-774.5 1753,-774.5 1753,-774.5 1747,-774.5 1741,-768.5 1741,-762.5 1741,-762.5 1741,-718.5 1741,-718.5 1741,-712.5 1747,-706.5 1753,-706.5 1753,-706.5 1839,-706.5 1839,-706.5 1845,-706.5 1851,-712.5 1851,-718.5 1851,-718.5 1851,-762.5 1851,-762.5 1851,-768.5 1845,-774.5 1839,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1754\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1756.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1755.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1749\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 54&#45;&gt;55 -->\r\n<g id=\"edge55\" class=\"edge\"><title>54&#45;&gt;55</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1830.61,-817.907C1825.66,-806.983 1820.3,-795.137 1815.3,-784.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1818.34,-782.332 1811.02,-774.667 1811.96,-785.22 1818.34,-782.332\"/>\r\n</g>\r\n<!-- 56 -->\r\n<g id=\"node57\" class=\"node\"><title>56</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1983,-774.5C1983,-774.5 1881,-774.5 1881,-774.5 1875,-774.5 1869,-768.5 1869,-762.5 1869,-762.5 1869,-718.5 1869,-718.5 1869,-712.5 1875,-706.5 1881,-706.5 1881,-706.5 1983,-706.5 1983,-706.5 1989,-706.5 1995,-712.5 1995,-718.5 1995,-718.5 1995,-762.5 1995,-762.5 1995,-768.5 1989,-774.5 1983,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1890\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1892.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1891.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1877\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 54&#45;&gt;56 -->\r\n<g id=\"edge56\" class=\"edge\"><title>54&#45;&gt;56</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1877.8,-817.907C1885.78,-806.652 1894.46,-794.418 1902.48,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1905.54,-784.848 1908.47,-774.667 1899.83,-780.798 1905.54,-784.848\"/>\r\n</g>\r\n<!-- 58 -->\r\n<g id=\"node59\" class=\"node\"><title>58</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2052,-893.5C2052,-893.5 1950,-893.5 1950,-893.5 1944,-893.5 1938,-887.5 1938,-881.5 1938,-881.5 1938,-837.5 1938,-837.5 1938,-831.5 1944,-825.5 1950,-825.5 1950,-825.5 2052,-825.5 2052,-825.5 2058,-825.5 2064,-831.5 2064,-837.5 2064,-837.5 2064,-881.5 2064,-881.5 2064,-887.5 2058,-893.5 2052,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1959\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1961.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"1960.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\r\n<text text-anchor=\"start\" x=\"1946\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 57&#45;&gt;58 -->\r\n<g id=\"edge58\" class=\"edge\"><title>57&#45;&gt;58</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2016.02,-936.907C2013.92,-926.204 2011.64,-914.615 2009.51,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2012.88,-902.804 2007.52,-893.667 2006.01,-904.154 2012.88,-902.804\"/>\r\n</g>\r\n<!-- 59 -->\r\n<g id=\"node60\" class=\"node\"><title>59</title>\r\n<path fill=\"#e78d4c\" stroke=\"black\" d=\"M2321.5,-901C2321.5,-901 2094.5,-901 2094.5,-901 2088.5,-901 2082.5,-895 2082.5,-889 2082.5,-889 2082.5,-830 2082.5,-830 2082.5,-824 2088.5,-818 2094.5,-818 2094.5,-818 2321.5,-818 2321.5,-818 2327.5,-818 2333.5,-824 2333.5,-830 2333.5,-830 2333.5,-889 2333.5,-889 2333.5,-895 2327.5,-901 2321.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2090.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.54</text>\r\n<text text-anchor=\"start\" x=\"2158\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.426</text>\r\n<text text-anchor=\"start\" x=\"2164.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"2163.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 2]</text>\r\n<text text-anchor=\"start\" x=\"2161\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57&#45;&gt;59 -->\r\n<g id=\"edge59\" class=\"edge\"><title>57&#45;&gt;59</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2087.84,-936.907C2103.25,-927.106 2119.83,-916.563 2135.61,-906.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2137.71,-909.34 2144.27,-901.021 2133.96,-903.433 2137.71,-909.34\"/>\r\n</g>\r\n<!-- 60 -->\r\n<g id=\"node61\" class=\"node\"><title>60</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2116,-774.5C2116,-774.5 2030,-774.5 2030,-774.5 2024,-774.5 2018,-768.5 2018,-762.5 2018,-762.5 2018,-718.5 2018,-718.5 2018,-712.5 2024,-706.5 2030,-706.5 2030,-706.5 2116,-706.5 2116,-706.5 2122,-706.5 2128,-712.5 2128,-718.5 2128,-718.5 2128,-762.5 2128,-762.5 2128,-768.5 2122,-774.5 2116,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2031\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2029.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"2028.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\r\n<text text-anchor=\"start\" x=\"2026\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 59&#45;&gt;60 -->\r\n<g id=\"edge60\" class=\"edge\"><title>59&#45;&gt;60</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2161.16,-817.907C2147.54,-806.101 2132.67,-793.217 2119.1,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2121.12,-778.571 2111.27,-774.667 2116.53,-783.861 2121.12,-778.571\"/>\r\n</g>\r\n<!-- 61 -->\r\n<g id=\"node62\" class=\"node\"><title>61</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2260,-774.5C2260,-774.5 2158,-774.5 2158,-774.5 2152,-774.5 2146,-768.5 2146,-762.5 2146,-762.5 2146,-718.5 2146,-718.5 2146,-712.5 2152,-706.5 2158,-706.5 2158,-706.5 2260,-706.5 2260,-706.5 2266,-706.5 2272,-712.5 2272,-718.5 2272,-718.5 2272,-762.5 2272,-762.5 2272,-768.5 2266,-774.5 2260,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2167\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2169.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2168.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2154\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 59&#45;&gt;61 -->\r\n<g id=\"edge61\" class=\"edge\"><title>59&#45;&gt;61</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2208.35,-817.907C2208.44,-807.204 2208.54,-795.615 2208.63,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2212.13,-784.697 2208.72,-774.667 2205.13,-784.637 2212.13,-784.697\"/>\r\n</g>\r\n<!-- 63 -->\r\n<g id=\"node64\" class=\"node\"><title>63</title>\r\n<path fill=\"#e68640\" stroke=\"black\" d=\"M3945,-1139C3945,-1139 3831,-1139 3831,-1139 3825,-1139 3819,-1133 3819,-1127 3819,-1127 3819,-1068 3819,-1068 3819,-1062 3825,-1056 3831,-1056 3831,-1056 3945,-1056 3945,-1056 3951,-1056 3957,-1062 3957,-1068 3957,-1068 3957,-1127 3957,-1127 3957,-1133 3951,-1139 3945,-1139\"/>\r\n<text text-anchor=\"start\" x=\"3860.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3838\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.219</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8883</text>\r\n<text text-anchor=\"start\" x=\"3827\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8572, 311]</text>\r\n<text text-anchor=\"start\" x=\"3841\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 62&#45;&gt;63 -->\r\n<g id=\"edge63\" class=\"edge\"><title>62&#45;&gt;63</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3888,-1174.91C3888,-1166.65 3888,-1157.86 3888,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3891.5,-1149.02 3888,-1139.02 3884.5,-1149.02 3891.5,-1149.02\"/>\r\n</g>\r\n<!-- 138 -->\r\n<g id=\"node139\" class=\"node\"><title>138</title>\r\n<path fill=\"#97ccf1\" stroke=\"black\" d=\"M4596.5,-1139C4596.5,-1139 4489.5,-1139 4489.5,-1139 4483.5,-1139 4477.5,-1133 4477.5,-1127 4477.5,-1127 4477.5,-1068 4477.5,-1068 4477.5,-1062 4483.5,-1056 4489.5,-1056 4489.5,-1056 4596.5,-1056 4596.5,-1056 4602.5,-1056 4608.5,-1062 4608.5,-1068 4608.5,-1068 4608.5,-1127 4608.5,-1127 4608.5,-1133 4602.5,-1139 4596.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"4485.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 351.5</text>\r\n<text text-anchor=\"start\" x=\"4493\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 595</text>\r\n<text text-anchor=\"start\" x=\"4486\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 403]</text>\r\n<text text-anchor=\"start\" x=\"4488\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 62&#45;&gt;138 -->\r\n<g id=\"edge138\" class=\"edge\"><title>62&#45;&gt;138</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3957.79,-1203.03C4081.67,-1180.91 4339,-1134.94 4467.12,-1112.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4468.01,-1115.45 4477.24,-1110.25 4466.78,-1108.56 4468.01,-1115.45\"/>\r\n</g>\r\n<!-- 64 -->\r\n<g id=\"node65\" class=\"node\"><title>64</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3609,-1020C3609,-1020 3495,-1020 3495,-1020 3489,-1020 3483,-1014 3483,-1008 3483,-1008 3483,-949 3483,-949 3483,-943 3489,-937 3495,-937 3495,-937 3609,-937 3609,-937 3615,-937 3621,-943 3621,-949 3621,-949 3621,-1008 3621,-1008 3621,-1014 3615,-1020 3609,-1020\"/>\r\n<text text-anchor=\"start\" x=\"3503\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"3502\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.108</text>\r\n<text text-anchor=\"start\" x=\"3500.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8542</text>\r\n<text text-anchor=\"start\" x=\"3491\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8420, 122]</text>\r\n<text text-anchor=\"start\" x=\"3505\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 63&#45;&gt;64 -->\r\n<g id=\"edge64\" class=\"edge\"><title>63&#45;&gt;64</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3818.79,-1072.4C3764.13,-1053.37 3687.82,-1026.8 3630.81,-1006.94\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3631.72,-1003.55 3621.12,-1003.57 3629.42,-1010.16 3631.72,-1003.55\"/>\r\n</g>\r\n<!-- 121 -->\r\n<g id=\"node122\" class=\"node\"><title>121</title>\r\n<path fill=\"#d8ecfa\" stroke=\"black\" d=\"M4317.5,-1020C4317.5,-1020 4202.5,-1020 4202.5,-1020 4196.5,-1020 4190.5,-1014 4190.5,-1008 4190.5,-1008 4190.5,-949 4190.5,-949 4190.5,-943 4196.5,-937 4202.5,-937 4202.5,-937 4317.5,-937 4317.5,-937 4323.5,-937 4329.5,-943 4329.5,-949 4329.5,-949 4329.5,-1008 4329.5,-1008 4329.5,-1014 4323.5,-1020 4317.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4198.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 6052.0</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"4212.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 341</text>\r\n<text text-anchor=\"start\" x=\"4203\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 189]</text>\r\n<text text-anchor=\"start\" x=\"4205\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 63&#45;&gt;121 -->\r\n<g id=\"edge121\" class=\"edge\"><title>63&#45;&gt;121</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3957.1,-1074.77C4020.48,-1054.83 4114.33,-1025.32 4180.73,-1004.43\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4181.84,-1007.75 4190.33,-1001.41 4179.74,-1001.08 4181.84,-1007.75\"/>\r\n</g>\r\n<!-- 65 -->\r\n<g id=\"node66\" class=\"node\"><title>65</title>\r\n<path fill=\"#e99355\" stroke=\"black\" d=\"M2974,-901C2974,-901 2772,-901 2772,-901 2766,-901 2760,-895 2760,-889 2760,-889 2760,-830 2760,-830 2760,-824 2766,-818 2772,-818 2772,-818 2974,-818 2974,-818 2980,-818 2986,-824 2986,-830 2986,-830 2986,-889 2986,-889 2986,-895 2980,-901 2974,-901\"/>\r\n<text text-anchor=\"start\" x=\"2768\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.825</text>\r\n<text text-anchor=\"start\" x=\"2823\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.541</text>\r\n<text text-anchor=\"start\" x=\"2825.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 911</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [798, 113]</text>\r\n<text text-anchor=\"start\" x=\"2826\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 64&#45;&gt;65 -->\r\n<g id=\"edge65\" class=\"edge\"><title>64&#45;&gt;65</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3482.84,-965.583C3368.61,-945.9 3139,-906.335 2996.41,-881.766\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2996.75,-878.272 2986.3,-880.023 2995.56,-885.17 2996.75,-878.272\"/>\r\n</g>\r\n<!-- 102 -->\r\n<g id=\"node103\" class=\"node\"><title>102</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3639,-901C3639,-901 3465,-901 3465,-901 3459,-901 3453,-895 3453,-889 3453,-889 3453,-830 3453,-830 3453,-824 3459,-818 3465,-818 3465,-818 3639,-818 3639,-818 3645,-818 3651,-824 3651,-830 3651,-830 3651,-889 3651,-889 3651,-895 3645,-901 3639,-901\"/>\r\n<text text-anchor=\"start\" x=\"3461\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"3502\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.013</text>\r\n<text text-anchor=\"start\" x=\"3500.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7631</text>\r\n<text text-anchor=\"start\" x=\"3499\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7622, 9]</text>\r\n<text text-anchor=\"start\" x=\"3505\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 64&#45;&gt;102 -->\r\n<g id=\"edge102\" class=\"edge\"><title>64&#45;&gt;102</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3552,-936.907C3552,-928.649 3552,-919.864 3552,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3555.5,-911.021 3552,-901.021 3548.5,-911.021 3555.5,-911.021\"/>\r\n</g>\r\n<!-- 66 -->\r\n<g id=\"node67\" class=\"node\"><title>66</title>\r\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M2400,-782C2400,-782 2302,-782 2302,-782 2296,-782 2290,-776 2290,-770 2290,-770 2290,-711 2290,-711 2290,-705 2296,-699 2302,-699 2302,-699 2400,-699 2400,-699 2406,-699 2412,-705 2412,-711 2412,-711 2412,-770 2412,-770 2412,-776 2406,-782 2400,-782\"/>\r\n<text text-anchor=\"start\" x=\"2310\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"2301\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.142</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 746</text>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [731, 15]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 65&#45;&gt;66 -->\r\n<g id=\"edge66\" class=\"edge\"><title>65&#45;&gt;66</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2759.73,-833.113C2657.09,-810.107 2509,-776.913 2422.11,-757.438\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2422.86,-754.021 2412.34,-755.249 2421.33,-760.851 2422.86,-754.021\"/>\r\n</g>\r\n<!-- 85 -->\r\n<g id=\"node86\" class=\"node\"><title>85</title>\r\n<path fill=\"#c0e0f7\" stroke=\"black\" d=\"M2980,-782C2980,-782 2766,-782 2766,-782 2760,-782 2754,-776 2754,-770 2754,-770 2754,-711 2754,-711 2754,-705 2760,-699 2766,-699 2766,-699 2980,-699 2980,-699 2986,-699 2992,-705 2992,-711 2992,-711 2992,-770 2992,-770 2992,-776 2986,-782 2980,-782\"/>\r\n<text text-anchor=\"start\" x=\"2762\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.06</text>\r\n<text text-anchor=\"start\" x=\"2823\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.974</text>\r\n<text text-anchor=\"start\" x=\"2825.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 165</text>\r\n<text text-anchor=\"start\" x=\"2824.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 98]</text>\r\n<text text-anchor=\"start\" x=\"2818\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 65&#45;&gt;85 -->\r\n<g id=\"edge85\" class=\"edge\"><title>65&#45;&gt;85</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2873,-817.907C2873,-809.649 2873,-800.864 2873,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2876.5,-792.021 2873,-782.021 2869.5,-792.021 2876.5,-792.021\"/>\r\n</g>\r\n<!-- 67 -->\r\n<g id=\"node68\" class=\"node\"><title>67</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2056.5,-663C2056.5,-663 1967.5,-663 1967.5,-663 1961.5,-663 1955.5,-657 1955.5,-651 1955.5,-651 1955.5,-592 1955.5,-592 1955.5,-586 1961.5,-580 1967.5,-580 1967.5,-580 2056.5,-580 2056.5,-580 2062.5,-580 2068.5,-586 2068.5,-592 2068.5,-592 2068.5,-651 2068.5,-651 2068.5,-657 2062.5,-663 2056.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"1969\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 8.0</text>\r\n<text text-anchor=\"start\" x=\"1966\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.06</text>\r\n<text text-anchor=\"start\" x=\"1964.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 575</text>\r\n<text text-anchor=\"start\" x=\"1963.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 4]</text>\r\n<text text-anchor=\"start\" x=\"1965\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 66&#45;&gt;67 -->\r\n<g id=\"edge67\" class=\"edge\"><title>66&#45;&gt;67</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2289.98,-703.053C2286.98,-701.62 2283.97,-700.26 2281,-699 2214.29,-670.735 2133.96,-649.43 2078.55,-636.574\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2079.03,-633.093 2068.5,-634.272 2077.47,-639.917 2079.03,-633.093\"/>\r\n</g>\r\n<!-- 74 -->\r\n<g id=\"node75\" class=\"node\"><title>74</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M2400,-663C2400,-663 2302,-663 2302,-663 2296,-663 2290,-657 2290,-651 2290,-651 2290,-592 2290,-592 2290,-586 2296,-580 2302,-580 2302,-580 2400,-580 2400,-580 2406,-580 2412,-586 2412,-592 2412,-592 2412,-651 2412,-651 2412,-657 2406,-663 2400,-663\"/>\r\n<text text-anchor=\"start\" x=\"2310\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"2301\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.344</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 171</text>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [160, 11]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 66&#45;&gt;74 -->\r\n<g id=\"edge74\" class=\"edge\"><title>66&#45;&gt;74</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2351,-698.907C2351,-690.649 2351,-681.864 2351,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2354.5,-673.021 2351,-663.021 2347.5,-673.021 2354.5,-673.021\"/>\r\n</g>\r\n<!-- 68 -->\r\n<g id=\"node69\" class=\"node\"><title>68</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M1918.5,-544C1918.5,-544 1811.5,-544 1811.5,-544 1805.5,-544 1799.5,-538 1799.5,-532 1799.5,-532 1799.5,-473 1799.5,-473 1799.5,-467 1805.5,-461 1811.5,-461 1811.5,-461 1918.5,-461 1918.5,-461 1924.5,-461 1930.5,-467 1930.5,-473 1930.5,-473 1930.5,-532 1930.5,-532 1930.5,-538 1924.5,-544 1918.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"1807.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 353.5</text>\r\n<text text-anchor=\"start\" x=\"1815\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\r\n<text text-anchor=\"start\" x=\"1817.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 574</text>\r\n<text text-anchor=\"start\" x=\"1816.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 3]</text>\r\n<text text-anchor=\"start\" x=\"1818\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 67&#45;&gt;68 -->\r\n<g id=\"edge68\" class=\"edge\"><title>67&#45;&gt;68</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1961,-579.907C1949.03,-570.379 1936.17,-560.148 1923.89,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1925.91,-547.51 1915.91,-544.021 1921.56,-552.987 1925.91,-547.51\"/>\r\n</g>\r\n<!-- 73 -->\r\n<g id=\"node74\" class=\"node\"><title>73</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2063,-536.5C2063,-536.5 1961,-536.5 1961,-536.5 1955,-536.5 1949,-530.5 1949,-524.5 1949,-524.5 1949,-480.5 1949,-480.5 1949,-474.5 1955,-468.5 1961,-468.5 1961,-468.5 2063,-468.5 2063,-468.5 2069,-468.5 2075,-474.5 2075,-480.5 2075,-480.5 2075,-524.5 2075,-524.5 2075,-530.5 2069,-536.5 2063,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1970\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1972.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1971.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1957\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67&#45;&gt;73 -->\r\n<g id=\"edge73\" class=\"edge\"><title>67&#45;&gt;73</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2012,-579.907C2012,-569.204 2012,-557.615 2012,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2015.5,-546.667 2012,-536.667 2008.5,-546.667 2015.5,-546.667\"/>\r\n</g>\r\n<!-- 69 -->\r\n<g id=\"node70\" class=\"node\"><title>69</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M1783.5,-425C1783.5,-425 1676.5,-425 1676.5,-425 1670.5,-425 1664.5,-419 1664.5,-413 1664.5,-413 1664.5,-354 1664.5,-354 1664.5,-348 1670.5,-342 1676.5,-342 1676.5,-342 1783.5,-342 1783.5,-342 1789.5,-342 1795.5,-348 1795.5,-354 1795.5,-354 1795.5,-413 1795.5,-413 1795.5,-419 1789.5,-425 1783.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"1672.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 326.5</text>\r\n<text text-anchor=\"start\" x=\"1680\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.161</text>\r\n<text text-anchor=\"start\" x=\"1682.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 127</text>\r\n<text text-anchor=\"start\" x=\"1681.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 3]</text>\r\n<text text-anchor=\"start\" x=\"1683\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 68&#45;&gt;69 -->\r\n<g id=\"edge69\" class=\"edge\"><title>68&#45;&gt;69</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1818.16,-460.907C1807.27,-451.469 1795.59,-441.343 1784.4,-431.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1786.6,-428.925 1776.75,-425.021 1782.02,-434.215 1786.6,-428.925\"/>\r\n</g>\r\n<!-- 72 -->\r\n<g id=\"node73\" class=\"node\"><title>72</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1914.5,-417.5C1914.5,-417.5 1825.5,-417.5 1825.5,-417.5 1819.5,-417.5 1813.5,-411.5 1813.5,-405.5 1813.5,-405.5 1813.5,-361.5 1813.5,-361.5 1813.5,-355.5 1819.5,-349.5 1825.5,-349.5 1825.5,-349.5 1914.5,-349.5 1914.5,-349.5 1920.5,-349.5 1926.5,-355.5 1926.5,-361.5 1926.5,-361.5 1926.5,-405.5 1926.5,-405.5 1926.5,-411.5 1920.5,-417.5 1914.5,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1828\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1822.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 447</text>\r\n<text text-anchor=\"start\" x=\"1821.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [447, 0]</text>\r\n<text text-anchor=\"start\" x=\"1823\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 68&#45;&gt;72 -->\r\n<g id=\"edge72\" class=\"edge\"><title>68&#45;&gt;72</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1866.73,-460.907C1867.19,-450.204 1867.69,-438.615 1868.15,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1871.65,-427.807 1868.58,-417.667 1864.66,-427.508 1871.65,-427.807\"/>\r\n</g>\r\n<!-- 70 -->\r\n<g id=\"node71\" class=\"node\"><title>70</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1763.5,-298.5C1763.5,-298.5 1674.5,-298.5 1674.5,-298.5 1668.5,-298.5 1662.5,-292.5 1662.5,-286.5 1662.5,-286.5 1662.5,-242.5 1662.5,-242.5 1662.5,-236.5 1668.5,-230.5 1674.5,-230.5 1674.5,-230.5 1763.5,-230.5 1763.5,-230.5 1769.5,-230.5 1775.5,-236.5 1775.5,-242.5 1775.5,-242.5 1775.5,-286.5 1775.5,-286.5 1775.5,-292.5 1769.5,-298.5 1763.5,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1677\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1671.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 124</text>\r\n<text text-anchor=\"start\" x=\"1670.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 0]</text>\r\n<text text-anchor=\"start\" x=\"1672\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 69&#45;&gt;70 -->\r\n<g id=\"edge70\" class=\"edge\"><title>69&#45;&gt;70</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1726.18,-341.907C1725.18,-331.204 1724.09,-319.615 1723.07,-308.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1726.54,-308.295 1722.12,-298.667 1719.57,-308.951 1726.54,-308.295\"/>\r\n</g>\r\n<!-- 71 -->\r\n<g id=\"node72\" class=\"node\"><title>71</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1908,-298.5C1908,-298.5 1806,-298.5 1806,-298.5 1800,-298.5 1794,-292.5 1794,-286.5 1794,-286.5 1794,-242.5 1794,-242.5 1794,-236.5 1800,-230.5 1806,-230.5 1806,-230.5 1908,-230.5 1908,-230.5 1914,-230.5 1920,-236.5 1920,-242.5 1920,-242.5 1920,-286.5 1920,-286.5 1920,-292.5 1914,-298.5 1908,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1815\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1817.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"1816.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"1802\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69&#45;&gt;71 -->\r\n<g id=\"edge71\" class=\"edge\"><title>69&#45;&gt;71</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1774.06,-341.907C1786.88,-330.101 1800.86,-317.217 1813.64,-305.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1816.02,-308.017 1821,-298.667 1811.27,-302.868 1816.02,-308.017\"/>\r\n</g>\r\n<!-- 75 -->\r\n<g id=\"node76\" class=\"node\"><title>75</title>\r\n<path fill=\"#e9f4fc\" stroke=\"black\" d=\"M2212.5,-544C2212.5,-544 2105.5,-544 2105.5,-544 2099.5,-544 2093.5,-538 2093.5,-532 2093.5,-532 2093.5,-473 2093.5,-473 2093.5,-467 2099.5,-461 2105.5,-461 2105.5,-461 2212.5,-461 2212.5,-461 2218.5,-461 2224.5,-467 2224.5,-473 2224.5,-473 2224.5,-532 2224.5,-532 2224.5,-538 2218.5,-544 2212.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2101.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 102.5</text>\r\n<text text-anchor=\"start\" x=\"2109\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"2115.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"2118.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 9]</text>\r\n<text text-anchor=\"start\" x=\"2104\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 74&#45;&gt;75 -->\r\n<g id=\"edge75\" class=\"edge\"><title>74&#45;&gt;75</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2289.99,-583.32C2271.89,-572.295 2251.88,-560.1 2233.06,-548.629\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2234.86,-545.631 2224.5,-543.416 2231.22,-551.609 2234.86,-545.631\"/>\r\n</g>\r\n<!-- 78 -->\r\n<g id=\"node79\" class=\"node\"><title>78</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M2447.5,-544C2447.5,-544 2254.5,-544 2254.5,-544 2248.5,-544 2242.5,-538 2242.5,-532 2242.5,-532 2242.5,-473 2242.5,-473 2242.5,-467 2248.5,-461 2254.5,-461 2254.5,-461 2447.5,-461 2447.5,-461 2453.5,-461 2459.5,-467 2459.5,-473 2459.5,-473 2459.5,-532 2459.5,-532 2459.5,-538 2453.5,-544 2447.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2250.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.25</text>\r\n<text text-anchor=\"start\" x=\"2309\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.1</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 154</text>\r\n<text text-anchor=\"start\" x=\"2302.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 2]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 74&#45;&gt;78 -->\r\n<g id=\"edge78\" class=\"edge\"><title>74&#45;&gt;78</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2351,-579.907C2351,-571.649 2351,-562.864 2351,-554.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2354.5,-554.021 2351,-544.021 2347.5,-554.021 2354.5,-554.021\"/>\r\n</g>\r\n<!-- 76 -->\r\n<g id=\"node77\" class=\"node\"><title>76</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2069,-417.5C2069,-417.5 1967,-417.5 1967,-417.5 1961,-417.5 1955,-411.5 1955,-405.5 1955,-405.5 1955,-361.5 1955,-361.5 1955,-355.5 1961,-349.5 1967,-349.5 1967,-349.5 2069,-349.5 2069,-349.5 2075,-349.5 2081,-355.5 2081,-361.5 2081,-361.5 2081,-405.5 2081,-405.5 2081,-411.5 2075,-417.5 2069,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1976\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1978.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"1977.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"1963\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 75&#45;&gt;76 -->\r\n<g id=\"edge76\" class=\"edge\"><title>75&#45;&gt;76</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2110.08,-460.907C2095.72,-448.99 2080.03,-435.976 2065.75,-424.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2067.9,-421.359 2057.97,-417.667 2063.43,-426.746 2067.9,-421.359\"/>\r\n</g>\r\n<!-- 77 -->\r\n<g id=\"node78\" class=\"node\"><title>77</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2197,-417.5C2197,-417.5 2111,-417.5 2111,-417.5 2105,-417.5 2099,-411.5 2099,-405.5 2099,-405.5 2099,-361.5 2099,-361.5 2099,-355.5 2105,-349.5 2111,-349.5 2111,-349.5 2197,-349.5 2197,-349.5 2203,-349.5 2209,-355.5 2209,-361.5 2209,-361.5 2209,-405.5 2209,-405.5 2209,-411.5 2203,-417.5 2197,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2112\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2114.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"2113.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\r\n<text text-anchor=\"start\" x=\"2107\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 75&#45;&gt;77 -->\r\n<g id=\"edge77\" class=\"edge\"><title>75&#45;&gt;77</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2157.27,-460.907C2156.81,-450.204 2156.31,-438.615 2155.85,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2159.34,-427.508 2155.42,-417.667 2152.35,-427.807 2159.34,-427.508\"/>\r\n</g>\r\n<!-- 79 -->\r\n<g id=\"node80\" class=\"node\"><title>79</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2364.5,-425C2364.5,-425 2239.5,-425 2239.5,-425 2233.5,-425 2227.5,-419 2227.5,-413 2227.5,-413 2227.5,-354 2227.5,-354 2227.5,-348 2233.5,-342 2239.5,-342 2239.5,-342 2364.5,-342 2364.5,-342 2370.5,-342 2376.5,-348 2376.5,-354 2376.5,-354 2376.5,-413 2376.5,-413 2376.5,-419 2370.5,-425 2364.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"2235.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"2252\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.057</text>\r\n<text text-anchor=\"start\" x=\"2254.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 153</text>\r\n<text text-anchor=\"start\" x=\"2253.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 1]</text>\r\n<text text-anchor=\"start\" x=\"2255\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 78&#45;&gt;79 -->\r\n<g id=\"edge79\" class=\"edge\"><title>78&#45;&gt;79</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2334,-460.907C2330.43,-452.377 2326.62,-443.284 2322.92,-434.456\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2326.06,-432.893 2318.97,-425.021 2319.6,-435.597 2326.06,-432.893\"/>\r\n</g>\r\n<!-- 84 -->\r\n<g id=\"node85\" class=\"node\"><title>84</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2509,-417.5C2509,-417.5 2407,-417.5 2407,-417.5 2401,-417.5 2395,-411.5 2395,-405.5 2395,-405.5 2395,-361.5 2395,-361.5 2395,-355.5 2401,-349.5 2407,-349.5 2407,-349.5 2509,-349.5 2509,-349.5 2515,-349.5 2521,-355.5 2521,-361.5 2521,-361.5 2521,-405.5 2521,-405.5 2521,-411.5 2515,-417.5 2509,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2416\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2418.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2417.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2403\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 78&#45;&gt;84 -->\r\n<g id=\"edge84\" class=\"edge\"><title>78&#45;&gt;84</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2388.12,-460.907C2398.72,-449.321 2410.26,-436.698 2420.86,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2423.5,-427.408 2427.67,-417.667 2418.34,-422.684 2423.5,-427.408\"/>\r\n</g>\r\n<!-- 80 -->\r\n<g id=\"node81\" class=\"node\"><title>80</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2253.5,-306C2253.5,-306 2146.5,-306 2146.5,-306 2140.5,-306 2134.5,-300 2134.5,-294 2134.5,-294 2134.5,-235 2134.5,-235 2134.5,-229 2140.5,-223 2146.5,-223 2146.5,-223 2253.5,-223 2253.5,-223 2259.5,-223 2265.5,-229 2265.5,-235 2265.5,-235 2265.5,-294 2265.5,-294 2265.5,-300 2259.5,-306 2253.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"2142.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 239.5</text>\r\n<text text-anchor=\"start\" x=\"2150\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2160.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2159.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"2153\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79&#45;&gt;80 -->\r\n<g id=\"edge80\" class=\"edge\"><title>79&#45;&gt;80</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2266.61,-341.907C2258.7,-332.832 2250.23,-323.121 2242.08,-313.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2244.54,-311.259 2235.33,-306.021 2239.26,-315.859 2244.54,-311.259\"/>\r\n</g>\r\n<!-- 83 -->\r\n<g id=\"node84\" class=\"node\"><title>83</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2384.5,-298.5C2384.5,-298.5 2295.5,-298.5 2295.5,-298.5 2289.5,-298.5 2283.5,-292.5 2283.5,-286.5 2283.5,-286.5 2283.5,-242.5 2283.5,-242.5 2283.5,-236.5 2289.5,-230.5 2295.5,-230.5 2295.5,-230.5 2384.5,-230.5 2384.5,-230.5 2390.5,-230.5 2396.5,-236.5 2396.5,-242.5 2396.5,-242.5 2396.5,-286.5 2396.5,-286.5 2396.5,-292.5 2390.5,-298.5 2384.5,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2292.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 150</text>\r\n<text text-anchor=\"start\" x=\"2291.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [150, 0]</text>\r\n<text text-anchor=\"start\" x=\"2293\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79&#45;&gt;83 -->\r\n<g id=\"edge83\" class=\"edge\"><title>79&#45;&gt;83</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2315.18,-341.907C2318.7,-331.094 2322.5,-319.376 2326.05,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2329.47,-309.259 2329.23,-298.667 2322.81,-307.097 2329.47,-309.259\"/>\r\n</g>\r\n<!-- 81 -->\r\n<g id=\"node82\" class=\"node\"><title>81</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2145,-179.5C2145,-179.5 2059,-179.5 2059,-179.5 2053,-179.5 2047,-173.5 2047,-167.5 2047,-167.5 2047,-123.5 2047,-123.5 2047,-117.5 2053,-111.5 2059,-111.5 2059,-111.5 2145,-111.5 2145,-111.5 2151,-111.5 2157,-117.5 2157,-123.5 2157,-123.5 2157,-167.5 2157,-167.5 2157,-173.5 2151,-179.5 2145,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2060\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2062.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2061.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"2055\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 80&#45;&gt;81 -->\r\n<g id=\"edge81\" class=\"edge\"><title>80&#45;&gt;81</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2166,-222.907C2156.39,-211.432 2145.92,-198.938 2136.29,-187.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2138.89,-185.086 2129.78,-179.667 2133.52,-189.58 2138.89,-185.086\"/>\r\n</g>\r\n<!-- 82 -->\r\n<g id=\"node83\" class=\"node\"><title>82</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2289,-179.5C2289,-179.5 2187,-179.5 2187,-179.5 2181,-179.5 2175,-173.5 2175,-167.5 2175,-167.5 2175,-123.5 2175,-123.5 2175,-117.5 2181,-111.5 2187,-111.5 2187,-111.5 2289,-111.5 2289,-111.5 2295,-111.5 2301,-117.5 2301,-123.5 2301,-123.5 2301,-167.5 2301,-167.5 2301,-173.5 2295,-179.5 2289,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2196\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2198.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2197.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2183\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 80&#45;&gt;82 -->\r\n<g id=\"edge82\" class=\"edge\"><title>80&#45;&gt;82</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2213.18,-222.907C2216.7,-212.094 2220.5,-200.376 2224.05,-189.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2227.47,-190.259 2227.23,-179.667 2220.81,-188.097 2227.47,-190.259\"/>\r\n</g>\r\n<!-- 86 -->\r\n<g id=\"node87\" class=\"node\"><title>86</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2882,-663C2882,-663 2660,-663 2660,-663 2654,-663 2648,-657 2648,-651 2648,-651 2648,-592 2648,-592 2648,-586 2654,-580 2660,-580 2660,-580 2882,-580 2882,-580 2888,-580 2894,-586 2894,-592 2894,-592 2894,-651 2894,-651 2894,-657 2888,-663 2882,-663\"/>\r\n<text text-anchor=\"start\" x=\"2656\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"2721\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2727.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\r\n<text text-anchor=\"start\" x=\"2722.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 33]</text>\r\n<text text-anchor=\"start\" x=\"2724\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 85&#45;&gt;86 -->\r\n<g id=\"edge86\" class=\"edge\"><title>85&#45;&gt;86</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2837.61,-698.907C2829.7,-689.832 2821.23,-680.121 2813.08,-670.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2815.54,-668.259 2806.33,-663.021 2810.26,-672.859 2815.54,-668.259\"/>\r\n</g>\r\n<!-- 99 -->\r\n<g id=\"node100\" class=\"node\"><title>99</title>\r\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M3026,-663C3026,-663 2924,-663 2924,-663 2918,-663 2912,-657 2912,-651 2912,-651 2912,-592 2912,-592 2912,-586 2918,-580 2924,-580 2924,-580 3026,-580 3026,-580 3032,-580 3038,-586 3038,-592 3038,-592 3038,-651 3038,-651 3038,-657 3032,-663 3026,-663\"/>\r\n<text text-anchor=\"start\" x=\"2927\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"2925\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\r\n<text text-anchor=\"start\" x=\"2931.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\r\n<text text-anchor=\"start\" x=\"2930.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 65]</text>\r\n<text text-anchor=\"start\" x=\"2920\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 85&#45;&gt;99 -->\r\n<g id=\"edge99\" class=\"edge\"><title>85&#45;&gt;99</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2908.39,-698.907C2916.3,-689.832 2924.77,-680.121 2932.92,-670.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2935.74,-672.859 2939.67,-663.021 2930.46,-668.259 2935.74,-672.859\"/>\r\n</g>\r\n<!-- 87 -->\r\n<g id=\"node88\" class=\"node\"><title>87</title>\r\n<path fill=\"#ecf6fd\" stroke=\"black\" d=\"M2715.5,-544C2715.5,-544 2608.5,-544 2608.5,-544 2602.5,-544 2596.5,-538 2596.5,-532 2596.5,-532 2596.5,-473 2596.5,-473 2596.5,-467 2602.5,-461 2608.5,-461 2608.5,-461 2715.5,-461 2715.5,-461 2721.5,-461 2727.5,-467 2727.5,-473 2727.5,-473 2727.5,-532 2727.5,-532 2727.5,-538 2721.5,-544 2715.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2604.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 189.5</text>\r\n<text text-anchor=\"start\" x=\"2612\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"2618.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 61</text>\r\n<text text-anchor=\"start\" x=\"2613.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 32]</text>\r\n<text text-anchor=\"start\" x=\"2607\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 86&#45;&gt;87 -->\r\n<g id=\"edge87\" class=\"edge\"><title>86&#45;&gt;87</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2733.18,-579.907C2724.64,-570.742 2715.5,-560.927 2706.71,-551.489\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2709.13,-548.952 2699.75,-544.021 2704.01,-553.723 2709.13,-548.952\"/>\r\n</g>\r\n<!-- 96 -->\r\n<g id=\"node97\" class=\"node\"><title>96</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M2850,-544C2850,-544 2758,-544 2758,-544 2752,-544 2746,-538 2746,-532 2746,-532 2746,-473 2746,-473 2746,-467 2752,-461 2758,-461 2758,-461 2850,-461 2850,-461 2856,-461 2862,-467 2862,-473 2862,-473 2862,-532 2862,-532 2862,-538 2856,-544 2850,-544\"/>\r\n<text text-anchor=\"start\" x=\"2761\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 7.0</text>\r\n<text text-anchor=\"start\" x=\"2754\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.176</text>\r\n<text text-anchor=\"start\" x=\"2760.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"2759.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 1]</text>\r\n<text text-anchor=\"start\" x=\"2757\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 86&#45;&gt;96 -->\r\n<g id=\"edge96\" class=\"edge\"><title>86&#45;&gt;96</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2782.45,-579.907C2784.83,-571.468 2787.37,-562.477 2789.83,-553.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2793.22,-554.595 2792.57,-544.021 2786.49,-552.695 2793.22,-554.595\"/>\r\n</g>\r\n<!-- 88 -->\r\n<g id=\"node89\" class=\"node\"><title>88</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2637,-417.5C2637,-417.5 2551,-417.5 2551,-417.5 2545,-417.5 2539,-411.5 2539,-405.5 2539,-405.5 2539,-361.5 2539,-361.5 2539,-355.5 2545,-349.5 2551,-349.5 2551,-349.5 2637,-349.5 2637,-349.5 2643,-349.5 2649,-355.5 2649,-361.5 2649,-361.5 2649,-405.5 2649,-405.5 2649,-411.5 2643,-417.5 2637,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2552\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2550.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"2549.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\r\n<text text-anchor=\"start\" x=\"2547\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 87&#45;&gt;88 -->\r\n<g id=\"edge88\" class=\"edge\"><title>87&#45;&gt;88</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2638.41,-460.907C2631.93,-449.763 2624.9,-437.658 2618.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2621.33,-424.554 2613.28,-417.667 2615.28,-428.072 2621.33,-424.554\"/>\r\n</g>\r\n<!-- 89 -->\r\n<g id=\"node90\" class=\"node\"><title>89</title>\r\n<path fill=\"#96cbf1\" stroke=\"black\" d=\"M2786.5,-425C2786.5,-425 2679.5,-425 2679.5,-425 2673.5,-425 2667.5,-419 2667.5,-413 2667.5,-413 2667.5,-354 2667.5,-354 2667.5,-348 2673.5,-342 2679.5,-342 2679.5,-342 2786.5,-342 2786.5,-342 2792.5,-342 2798.5,-348 2798.5,-354 2798.5,-354 2798.5,-413 2798.5,-413 2798.5,-419 2792.5,-425 2786.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"2675.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 358.5</text>\r\n<text text-anchor=\"start\" x=\"2683\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.903</text>\r\n<text text-anchor=\"start\" x=\"2689.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\r\n<text text-anchor=\"start\" x=\"2684.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [15, 32]</text>\r\n<text text-anchor=\"start\" x=\"2678\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 87&#45;&gt;89 -->\r\n<g id=\"edge89\" class=\"edge\"><title>87&#45;&gt;89</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2686.63,-460.907C2691.97,-452.105 2697.68,-442.703 2703.2,-433.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2706.21,-435.386 2708.41,-425.021 2700.23,-431.754 2706.21,-435.386\"/>\r\n</g>\r\n<!-- 90 -->\r\n<g id=\"node91\" class=\"node\"><title>90</title>\r\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M2631,-306C2631,-306 2529,-306 2529,-306 2523,-306 2517,-300 2517,-294 2517,-294 2517,-235 2517,-235 2517,-229 2523,-223 2529,-223 2529,-223 2631,-223 2631,-223 2637,-223 2643,-229 2643,-235 2643,-235 2643,-294 2643,-294 2643,-300 2637,-306 2631,-306\"/>\r\n<text text-anchor=\"start\" x=\"2532\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2530\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.206</text>\r\n<text text-anchor=\"start\" x=\"2536.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"2535.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 30]</text>\r\n<text text-anchor=\"start\" x=\"2525\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 89&#45;&gt;90 -->\r\n<g id=\"edge90\" class=\"edge\"><title>89&#45;&gt;90</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2679.92,-341.907C2667.46,-332.379 2654.08,-322.148 2641.29,-312.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2643.06,-309.315 2632.99,-306.021 2638.81,-314.876 2643.06,-309.315\"/>\r\n</g>\r\n<!-- 93 -->\r\n<g id=\"node94\" class=\"node\"><title>93</title>\r\n<path fill=\"#e99355\" stroke=\"black\" d=\"M2796.5,-306C2796.5,-306 2673.5,-306 2673.5,-306 2667.5,-306 2661.5,-300 2661.5,-294 2661.5,-294 2661.5,-235 2661.5,-235 2661.5,-229 2667.5,-223 2673.5,-223 2673.5,-223 2796.5,-223 2796.5,-223 2802.5,-223 2808.5,-229 2808.5,-235 2808.5,-235 2808.5,-294 2808.5,-294 2808.5,-300 2802.5,-306 2796.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"2669.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 32877.5</text>\r\n<text text-anchor=\"start\" x=\"2685\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"2691.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"2690.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 2]</text>\r\n<text text-anchor=\"start\" x=\"2688\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 89&#45;&gt;93 -->\r\n<g id=\"edge93\" class=\"edge\"><title>89&#45;&gt;93</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2733.69,-341.907C2733.84,-333.558 2733.99,-324.671 2734.14,-316.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2737.64,-316.079 2734.31,-306.021 2730.64,-315.959 2737.64,-316.079\"/>\r\n</g>\r\n<!-- 91 -->\r\n<g id=\"node92\" class=\"node\"><title>91</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2502,-179.5C2502,-179.5 2400,-179.5 2400,-179.5 2394,-179.5 2388,-173.5 2388,-167.5 2388,-167.5 2388,-123.5 2388,-123.5 2388,-117.5 2394,-111.5 2400,-111.5 2400,-111.5 2502,-111.5 2502,-111.5 2508,-111.5 2514,-117.5 2514,-123.5 2514,-123.5 2514,-167.5 2514,-167.5 2514,-173.5 2508,-179.5 2502,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2409\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2407.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 30]</text>\r\n<text text-anchor=\"start\" x=\"2396\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90&#45;&gt;91 -->\r\n<g id=\"edge91\" class=\"edge\"><title>90&#45;&gt;91</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2535.24,-222.907C2522.23,-211.101 2508.02,-198.217 2495.05,-186.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2497.33,-183.793 2487.57,-179.667 2492.62,-188.978 2497.33,-183.793\"/>\r\n</g>\r\n<!-- 92 -->\r\n<g id=\"node93\" class=\"node\"><title>92</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2630,-179.5C2630,-179.5 2544,-179.5 2544,-179.5 2538,-179.5 2532,-173.5 2532,-167.5 2532,-167.5 2532,-123.5 2532,-123.5 2532,-117.5 2538,-111.5 2544,-111.5 2544,-111.5 2630,-111.5 2630,-111.5 2636,-111.5 2642,-117.5 2642,-123.5 2642,-123.5 2642,-167.5 2642,-167.5 2642,-173.5 2636,-179.5 2630,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2545\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2547.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2546.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2540\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 90&#45;&gt;92 -->\r\n<g id=\"edge92\" class=\"edge\"><title>90&#45;&gt;92</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2582.43,-222.907C2583.07,-212.204 2583.76,-200.615 2584.41,-189.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2587.91,-189.858 2585.02,-179.667 2580.92,-189.44 2587.91,-189.858\"/>\r\n</g>\r\n<!-- 94 -->\r\n<g id=\"node95\" class=\"node\"><title>94</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2771,-179.5C2771,-179.5 2685,-179.5 2685,-179.5 2679,-179.5 2673,-173.5 2673,-167.5 2673,-167.5 2673,-123.5 2673,-123.5 2673,-117.5 2679,-111.5 2685,-111.5 2685,-111.5 2771,-111.5 2771,-111.5 2777,-111.5 2783,-117.5 2783,-123.5 2783,-123.5 2783,-167.5 2783,-167.5 2783,-173.5 2777,-179.5 2771,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2686\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2684.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"2683.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\r\n<text text-anchor=\"start\" x=\"2681\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 93&#45;&gt;94 -->\r\n<g id=\"edge94\" class=\"edge\"><title>93&#45;&gt;94</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2732.57,-222.907C2731.93,-212.204 2731.24,-200.615 2730.59,-189.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2734.08,-189.44 2729.98,-179.667 2727.09,-189.858 2734.08,-189.44\"/>\r\n</g>\r\n<!-- 95 -->\r\n<g id=\"node96\" class=\"node\"><title>95</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2915,-179.5C2915,-179.5 2813,-179.5 2813,-179.5 2807,-179.5 2801,-173.5 2801,-167.5 2801,-167.5 2801,-123.5 2801,-123.5 2801,-117.5 2807,-111.5 2813,-111.5 2813,-111.5 2915,-111.5 2915,-111.5 2921,-111.5 2927,-117.5 2927,-123.5 2927,-123.5 2927,-167.5 2927,-167.5 2927,-173.5 2921,-179.5 2915,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2822\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2824.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2823.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2809\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 93&#45;&gt;95 -->\r\n<g id=\"edge95\" class=\"edge\"><title>93&#45;&gt;95</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2779.76,-222.907C2792.77,-211.101 2806.98,-198.217 2819.95,-186.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2822.38,-188.978 2827.43,-179.667 2817.67,-183.793 2822.38,-188.978\"/>\r\n</g>\r\n<!-- 97 -->\r\n<g id=\"node98\" class=\"node\"><title>97</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2915,-417.5C2915,-417.5 2829,-417.5 2829,-417.5 2823,-417.5 2817,-411.5 2817,-405.5 2817,-405.5 2817,-361.5 2817,-361.5 2817,-355.5 2823,-349.5 2829,-349.5 2829,-349.5 2915,-349.5 2915,-349.5 2921,-349.5 2927,-355.5 2927,-361.5 2927,-361.5 2927,-405.5 2927,-405.5 2927,-411.5 2921,-417.5 2915,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2830\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2828.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\r\n<text text-anchor=\"start\" x=\"2827.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 0]</text>\r\n<text text-anchor=\"start\" x=\"2825\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 96&#45;&gt;97 -->\r\n<g id=\"edge97\" class=\"edge\"><title>96&#45;&gt;97</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2827.59,-460.907C2834.07,-449.763 2841.1,-437.658 2847.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2850.72,-428.072 2852.72,-417.667 2844.67,-424.554 2850.72,-428.072\"/>\r\n</g>\r\n<!-- 98 -->\r\n<g id=\"node99\" class=\"node\"><title>98</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3059,-417.5C3059,-417.5 2957,-417.5 2957,-417.5 2951,-417.5 2945,-411.5 2945,-405.5 2945,-405.5 2945,-361.5 2945,-361.5 2945,-355.5 2951,-349.5 2957,-349.5 2957,-349.5 3059,-349.5 3059,-349.5 3065,-349.5 3071,-355.5 3071,-361.5 3071,-361.5 3071,-405.5 3071,-405.5 3071,-411.5 3065,-417.5 3059,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2966\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2968.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2967.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2953\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 96&#45;&gt;98 -->\r\n<g id=\"edge98\" class=\"edge\"><title>96&#45;&gt;98</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2862.02,-466.242C2865.05,-464.458 2868.06,-462.702 2871,-461 2899.58,-444.455 2907.16,-441.095 2936,-425 2937.33,-424.257 2938.67,-423.507 2940.03,-422.75\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2942.06,-425.623 2949.08,-417.685 2938.64,-419.514 2942.06,-425.623\"/>\r\n</g>\r\n<!-- 100 -->\r\n<g id=\"node101\" class=\"node\"><title>100</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2994,-536.5C2994,-536.5 2892,-536.5 2892,-536.5 2886,-536.5 2880,-530.5 2880,-524.5 2880,-524.5 2880,-480.5 2880,-480.5 2880,-474.5 2886,-468.5 2892,-468.5 2892,-468.5 2994,-468.5 2994,-468.5 3000,-468.5 3006,-474.5 3006,-480.5 3006,-480.5 3006,-524.5 3006,-524.5 3006,-530.5 3000,-536.5 2994,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2901\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2899.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 65</text>\r\n<text text-anchor=\"start\" x=\"2898.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 65]</text>\r\n<text text-anchor=\"start\" x=\"2888\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 99&#45;&gt;100 -->\r\n<g id=\"edge100\" class=\"edge\"><title>99&#45;&gt;100</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2963.9,-579.907C2960.94,-569.094 2957.74,-557.376 2954.74,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2958.09,-545.389 2952.07,-536.667 2951.33,-547.236 2958.09,-545.389\"/>\r\n</g>\r\n<!-- 101 -->\r\n<g id=\"node102\" class=\"node\"><title>101</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3122,-536.5C3122,-536.5 3036,-536.5 3036,-536.5 3030,-536.5 3024,-530.5 3024,-524.5 3024,-524.5 3024,-480.5 3024,-480.5 3024,-474.5 3030,-468.5 3036,-468.5 3036,-468.5 3122,-468.5 3122,-468.5 3128,-468.5 3134,-474.5 3134,-480.5 3134,-480.5 3134,-524.5 3134,-524.5 3134,-530.5 3128,-536.5 3122,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3037\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3039.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3038.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3032\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 99&#45;&gt;101 -->\r\n<g id=\"edge101\" class=\"edge\"><title>99&#45;&gt;101</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3011.08,-579.907C3021.28,-568.432 3032.39,-555.938 3042.61,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3045.49,-546.466 3049.52,-536.667 3040.26,-541.816 3045.49,-546.466\"/>\r\n</g>\r\n<!-- 103 -->\r\n<g id=\"node104\" class=\"node\"><title>103</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3521,-782C3521,-782 3333,-782 3333,-782 3327,-782 3321,-776 3321,-770 3321,-770 3321,-711 3321,-711 3321,-705 3327,-699 3333,-699 3333,-699 3521,-699 3521,-699 3527,-699 3533,-705 3533,-711 3533,-711 3533,-770 3533,-770 3533,-776 3527,-782 3521,-782\"/>\r\n<text text-anchor=\"start\" x=\"3329\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.3</text>\r\n<text text-anchor=\"start\" x=\"3377\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.005</text>\r\n<text text-anchor=\"start\" x=\"3375.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7367</text>\r\n<text text-anchor=\"start\" x=\"3374\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7364, 3]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102&#45;&gt;103 -->\r\n<g id=\"edge103\" class=\"edge\"><title>102&#45;&gt;103</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3508.63,-817.907C3498.65,-808.56 3487.94,-798.538 3477.67,-788.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3479.98,-786.299 3470.29,-782.021 3475.2,-791.41 3479.98,-786.299\"/>\r\n</g>\r\n<!-- 110 -->\r\n<g id=\"node111\" class=\"node\"><title>110</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M3735,-782C3735,-782 3583,-782 3583,-782 3577,-782 3571,-776 3571,-770 3571,-770 3571,-711 3571,-711 3571,-705 3577,-699 3583,-699 3583,-699 3735,-699 3735,-699 3741,-699 3747,-705 3747,-711 3747,-711 3747,-770 3747,-770 3747,-776 3741,-782 3735,-782\"/>\r\n<text text-anchor=\"start\" x=\"3579\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3609\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.156</text>\r\n<text text-anchor=\"start\" x=\"3611.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 264</text>\r\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [258, 6]</text>\r\n<text text-anchor=\"start\" x=\"3612\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102&#45;&gt;110 -->\r\n<g id=\"edge110\" class=\"edge\"><title>102&#45;&gt;110</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3589.12,-817.907C3597.51,-808.742 3606.48,-798.927 3615.11,-789.489\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3617.78,-791.762 3621.94,-782.021 3612.61,-787.038 3617.78,-791.762\"/>\r\n</g>\r\n<!-- 104 -->\r\n<g id=\"node105\" class=\"node\"><title>104</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3339,-655.5C3339,-655.5 3241,-655.5 3241,-655.5 3235,-655.5 3229,-649.5 3229,-643.5 3229,-643.5 3229,-599.5 3229,-599.5 3229,-593.5 3235,-587.5 3241,-587.5 3241,-587.5 3339,-587.5 3339,-587.5 3345,-587.5 3351,-593.5 3351,-599.5 3351,-599.5 3351,-643.5 3351,-643.5 3351,-649.5 3345,-655.5 3339,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3248\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3238.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7321</text>\r\n<text text-anchor=\"start\" x=\"3237\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7321, 0]</text>\r\n<text text-anchor=\"start\" x=\"3243\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103&#45;&gt;104 -->\r\n<g id=\"edge104\" class=\"edge\"><title>103&#45;&gt;104</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3379.47,-698.907C3365.64,-687.101 3350.56,-674.217 3336.78,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3338.71,-659.5 3328.84,-655.667 3334.17,-664.823 3338.71,-659.5\"/>\r\n</g>\r\n<!-- 105 -->\r\n<g id=\"node106\" class=\"node\"><title>105</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M3473,-663C3473,-663 3381,-663 3381,-663 3375,-663 3369,-657 3369,-651 3369,-651 3369,-592 3369,-592 3369,-586 3375,-580 3381,-580 3381,-580 3473,-580 3473,-580 3479,-580 3485,-586 3485,-592 3485,-592 3485,-651 3485,-651 3485,-657 3479,-663 3473,-663\"/>\r\n<text text-anchor=\"start\" x=\"3377.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3377\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.348</text>\r\n<text text-anchor=\"start\" x=\"3383.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 46</text>\r\n<text text-anchor=\"start\" x=\"3382.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [43, 3]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103&#45;&gt;105 -->\r\n<g id=\"edge105\" class=\"edge\"><title>103&#45;&gt;105</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3427,-698.907C3427,-690.649 3427,-681.864 3427,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3430.5,-673.021 3427,-663.021 3423.5,-673.021 3430.5,-673.021\"/>\r\n</g>\r\n<!-- 106 -->\r\n<g id=\"node107\" class=\"node\"><title>106</title>\r\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M3341.5,-544C3341.5,-544 3164.5,-544 3164.5,-544 3158.5,-544 3152.5,-538 3152.5,-532 3152.5,-532 3152.5,-473 3152.5,-473 3152.5,-467 3158.5,-461 3164.5,-461 3164.5,-461 3341.5,-461 3341.5,-461 3347.5,-461 3353.5,-467 3353.5,-473 3353.5,-473 3353.5,-532 3353.5,-532 3353.5,-538 3347.5,-544 3341.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3160.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.675</text>\r\n<text text-anchor=\"start\" x=\"3203\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"3213.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3212.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\r\n<text text-anchor=\"start\" x=\"3198\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 105&#45;&gt;106 -->\r\n<g id=\"edge106\" class=\"edge\"><title>105&#45;&gt;106</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3368.58,-581.215C3353.58,-571.133 3337.31,-560.194 3321.85,-549.793\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3323.6,-546.755 3313.35,-544.08 3319.69,-552.564 3323.6,-546.755\"/>\r\n</g>\r\n<!-- 109 -->\r\n<g id=\"node110\" class=\"node\"><title>109</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3470,-536.5C3470,-536.5 3384,-536.5 3384,-536.5 3378,-536.5 3372,-530.5 3372,-524.5 3372,-524.5 3372,-480.5 3372,-480.5 3372,-474.5 3378,-468.5 3384,-468.5 3384,-468.5 3470,-468.5 3470,-468.5 3476,-468.5 3482,-474.5 3482,-480.5 3482,-480.5 3482,-524.5 3482,-524.5 3482,-530.5 3476,-536.5 3470,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3385\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3383.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\r\n<text text-anchor=\"start\" x=\"3382.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 105&#45;&gt;109 -->\r\n<g id=\"edge109\" class=\"edge\"><title>105&#45;&gt;109</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3427,-579.907C3427,-569.204 3427,-557.615 3427,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3430.5,-546.667 3427,-536.667 3423.5,-546.667 3430.5,-546.667\"/>\r\n</g>\r\n<!-- 107 -->\r\n<g id=\"node108\" class=\"node\"><title>107</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3254,-417.5C3254,-417.5 3152,-417.5 3152,-417.5 3146,-417.5 3140,-411.5 3140,-405.5 3140,-405.5 3140,-361.5 3140,-361.5 3140,-355.5 3146,-349.5 3152,-349.5 3152,-349.5 3254,-349.5 3254,-349.5 3260,-349.5 3266,-355.5 3266,-361.5 3266,-361.5 3266,-405.5 3266,-405.5 3266,-411.5 3260,-417.5 3254,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3161\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3163.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3162.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"3148\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 106&#45;&gt;107 -->\r\n<g id=\"edge107\" class=\"edge\"><title>106&#45;&gt;107</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3235.65,-460.907C3230.98,-449.983 3225.92,-438.137 3221.21,-427.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3224.32,-425.487 3217.17,-417.667 3217.89,-428.238 3224.32,-425.487\"/>\r\n</g>\r\n<!-- 108 -->\r\n<g id=\"node109\" class=\"node\"><title>108</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3382,-417.5C3382,-417.5 3296,-417.5 3296,-417.5 3290,-417.5 3284,-411.5 3284,-405.5 3284,-405.5 3284,-361.5 3284,-361.5 3284,-355.5 3290,-349.5 3296,-349.5 3296,-349.5 3382,-349.5 3382,-349.5 3388,-349.5 3394,-355.5 3394,-361.5 3394,-361.5 3394,-405.5 3394,-405.5 3394,-411.5 3388,-417.5 3382,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3297\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3299.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3298.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3292\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 106&#45;&gt;108 -->\r\n<g id=\"edge108\" class=\"edge\"><title>106&#45;&gt;108</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3282.84,-460.907C3291.19,-449.542 3300.28,-437.178 3308.66,-425.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3311.52,-427.797 3314.62,-417.667 3305.88,-423.652 3311.52,-427.797\"/>\r\n</g>\r\n<!-- 111 -->\r\n<g id=\"node112\" class=\"node\"><title>111</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3710,-663C3710,-663 3608,-663 3608,-663 3602,-663 3596,-657 3596,-651 3596,-651 3596,-592 3596,-592 3596,-586 3602,-580 3608,-580 3608,-580 3710,-580 3710,-580 3716,-580 3722,-586 3722,-592 3722,-592 3722,-651 3722,-651 3722,-657 3716,-663 3710,-663\"/>\r\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3609\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"3619.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3618.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"3604\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 110&#45;&gt;111 -->\r\n<g id=\"edge111\" class=\"edge\"><title>110&#45;&gt;111</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3659,-698.907C3659,-690.649 3659,-681.864 3659,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3662.5,-673.021 3659,-663.021 3655.5,-673.021 3662.5,-673.021\"/>\r\n</g>\r\n<!-- 114 -->\r\n<g id=\"node115\" class=\"node\"><title>114</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3886.5,-663C3886.5,-663 3771.5,-663 3771.5,-663 3765.5,-663 3759.5,-657 3759.5,-651 3759.5,-651 3759.5,-592 3759.5,-592 3759.5,-586 3765.5,-580 3771.5,-580 3771.5,-580 3886.5,-580 3886.5,-580 3892.5,-580 3898.5,-586 3898.5,-592 3898.5,-592 3898.5,-651 3898.5,-651 3898.5,-657 3892.5,-663 3886.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"3767.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1695.0</text>\r\n<text text-anchor=\"start\" x=\"3779\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.114</text>\r\n<text text-anchor=\"start\" x=\"3781.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 261</text>\r\n<text text-anchor=\"start\" x=\"3780.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [257, 4]</text>\r\n<text text-anchor=\"start\" x=\"3782\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110&#45;&gt;114 -->\r\n<g id=\"edge114\" class=\"edge\"><title>110&#45;&gt;114</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3717.98,-698.907C3732.09,-689.197 3747.26,-678.758 3761.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3763.87,-671.573 3770.12,-663.021 3759.9,-665.807 3763.87,-671.573\"/>\r\n</g>\r\n<!-- 112 -->\r\n<g id=\"node113\" class=\"node\"><title>112</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3614,-536.5C3614,-536.5 3512,-536.5 3512,-536.5 3506,-536.5 3500,-530.5 3500,-524.5 3500,-524.5 3500,-480.5 3500,-480.5 3500,-474.5 3506,-468.5 3512,-468.5 3512,-468.5 3614,-468.5 3614,-468.5 3620,-468.5 3626,-474.5 3626,-480.5 3626,-480.5 3626,-524.5 3626,-524.5 3626,-530.5 3620,-536.5 3614,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3521\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3523.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3522.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"3508\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 111&#45;&gt;112 -->\r\n<g id=\"edge112\" class=\"edge\"><title>111&#45;&gt;112</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3625.69,-579.907C3616.28,-568.432 3606.03,-555.938 3596.59,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3599.26,-542.178 3590.21,-536.667 3593.85,-546.618 3599.26,-542.178\"/>\r\n</g>\r\n<!-- 113 -->\r\n<g id=\"node114\" class=\"node\"><title>113</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3742,-536.5C3742,-536.5 3656,-536.5 3656,-536.5 3650,-536.5 3644,-530.5 3644,-524.5 3644,-524.5 3644,-480.5 3644,-480.5 3644,-474.5 3650,-468.5 3656,-468.5 3656,-468.5 3742,-468.5 3742,-468.5 3748,-468.5 3754,-474.5 3754,-480.5 3754,-480.5 3754,-524.5 3754,-524.5 3754,-530.5 3748,-536.5 3742,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3657\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3659.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3658.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3652\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 111&#45;&gt;113 -->\r\n<g id=\"edge113\" class=\"edge\"><title>111&#45;&gt;113</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3672.88,-579.907C3676.57,-569.094 3680.58,-557.376 3684.32,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3687.74,-547.261 3687.66,-536.667 3681.11,-544.997 3687.74,-547.261\"/>\r\n</g>\r\n<!-- 115 -->\r\n<g id=\"node116\" class=\"node\"><title>115</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3873.5,-536.5C3873.5,-536.5 3784.5,-536.5 3784.5,-536.5 3778.5,-536.5 3772.5,-530.5 3772.5,-524.5 3772.5,-524.5 3772.5,-480.5 3772.5,-480.5 3772.5,-474.5 3778.5,-468.5 3784.5,-468.5 3784.5,-468.5 3873.5,-468.5 3873.5,-468.5 3879.5,-468.5 3885.5,-474.5 3885.5,-480.5 3885.5,-480.5 3885.5,-524.5 3885.5,-524.5 3885.5,-530.5 3879.5,-536.5 3873.5,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3787\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3781.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 230</text>\r\n<text text-anchor=\"start\" x=\"3780.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [230, 0]</text>\r\n<text text-anchor=\"start\" x=\"3782\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114&#45;&gt;115 -->\r\n<g id=\"edge115\" class=\"edge\"><title>114&#45;&gt;115</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3829,-579.907C3829,-569.204 3829,-557.615 3829,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3832.5,-546.667 3829,-536.667 3825.5,-546.667 3832.5,-546.667\"/>\r\n</g>\r\n<!-- 116 -->\r\n<g id=\"node117\" class=\"node\"><title>116</title>\r\n<path fill=\"#e99456\" stroke=\"black\" d=\"M4084.5,-544C4084.5,-544 3915.5,-544 3915.5,-544 3909.5,-544 3903.5,-538 3903.5,-532 3903.5,-532 3903.5,-473 3903.5,-473 3903.5,-467 3909.5,-461 3915.5,-461 3915.5,-461 4084.5,-461 4084.5,-461 4090.5,-461 4096.5,-467 4096.5,-473 4096.5,-473 4096.5,-532 4096.5,-532 4096.5,-538 4090.5,-544 4084.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3911.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 123.5</text>\r\n<text text-anchor=\"start\" x=\"3950\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.555</text>\r\n<text text-anchor=\"start\" x=\"3956.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"3955.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [27, 4]</text>\r\n<text text-anchor=\"start\" x=\"3953\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114&#45;&gt;116 -->\r\n<g id=\"edge116\" class=\"edge\"><title>114&#45;&gt;116</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3888.33,-579.907C3902.52,-570.197 3917.78,-559.758 3932.31,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3934.5,-552.556 3940.78,-544.021 3930.55,-546.779 3934.5,-552.556\"/>\r\n</g>\r\n<!-- 117 -->\r\n<g id=\"node118\" class=\"node\"><title>117</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3965,-417.5C3965,-417.5 3879,-417.5 3879,-417.5 3873,-417.5 3867,-411.5 3867,-405.5 3867,-405.5 3867,-361.5 3867,-361.5 3867,-355.5 3873,-349.5 3879,-349.5 3879,-349.5 3965,-349.5 3965,-349.5 3971,-349.5 3977,-355.5 3977,-361.5 3977,-361.5 3977,-405.5 3977,-405.5 3977,-411.5 3971,-417.5 3965,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3880\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3878.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25</text>\r\n<text text-anchor=\"start\" x=\"3877.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [25, 0]</text>\r\n<text text-anchor=\"start\" x=\"3875\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 116&#45;&gt;117 -->\r\n<g id=\"edge117\" class=\"edge\"><title>116&#45;&gt;117</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3972.94,-460.907C3965.43,-449.652 3957.28,-437.418 3949.74,-426.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3952.57,-424.046 3944.11,-417.667 3946.75,-427.929 3952.57,-424.046\"/>\r\n</g>\r\n<!-- 118 -->\r\n<g id=\"node119\" class=\"node\"><title>118</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M4149,-425C4149,-425 4007,-425 4007,-425 4001,-425 3995,-419 3995,-413 3995,-413 3995,-354 3995,-354 3995,-348 4001,-342 4007,-342 4007,-342 4149,-342 4149,-342 4155,-342 4161,-348 4161,-354 4161,-354 4161,-413 4161,-413 4161,-419 4155,-425 4149,-425\"/>\r\n<text text-anchor=\"start\" x=\"4003\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 145.0</text>\r\n<text text-anchor=\"start\" x=\"4028\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"4038.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"4037.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\r\n<text text-anchor=\"start\" x=\"4023\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 116&#45;&gt;118 -->\r\n<g id=\"edge118\" class=\"edge\"><title>116&#45;&gt;118</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4027.06,-460.907C4032.93,-452.105 4039.2,-442.703 4045.26,-433.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4048.35,-435.283 4050.99,-425.021 4042.53,-431.4 4048.35,-435.283\"/>\r\n</g>\r\n<!-- 119 -->\r\n<g id=\"node120\" class=\"node\"><title>119</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4053,-298.5C4053,-298.5 3967,-298.5 3967,-298.5 3961,-298.5 3955,-292.5 3955,-286.5 3955,-286.5 3955,-242.5 3955,-242.5 3955,-236.5 3961,-230.5 3967,-230.5 3967,-230.5 4053,-230.5 4053,-230.5 4059,-230.5 4065,-236.5 4065,-242.5 4065,-242.5 4065,-286.5 4065,-286.5 4065,-292.5 4059,-298.5 4053,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3968\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3970.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3969.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"3963\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 118&#45;&gt;119 -->\r\n<g id=\"edge119\" class=\"edge\"><title>118&#45;&gt;119</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4054.41,-341.907C4047.93,-330.763 4040.9,-318.658 4034.37,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4037.33,-305.554 4029.28,-298.667 4031.28,-309.072 4037.33,-305.554\"/>\r\n</g>\r\n<!-- 120 -->\r\n<g id=\"node121\" class=\"node\"><title>120</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4197,-298.5C4197,-298.5 4095,-298.5 4095,-298.5 4089,-298.5 4083,-292.5 4083,-286.5 4083,-286.5 4083,-242.5 4083,-242.5 4083,-236.5 4089,-230.5 4095,-230.5 4095,-230.5 4197,-230.5 4197,-230.5 4203,-230.5 4209,-236.5 4209,-242.5 4209,-242.5 4209,-286.5 4209,-286.5 4209,-292.5 4203,-298.5 4197,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"4104\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4106.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4105.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"4091\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 118&#45;&gt;120 -->\r\n<g id=\"edge120\" class=\"edge\"><title>118&#45;&gt;120</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4101.59,-341.907C4108.07,-330.763 4115.1,-318.658 4121.63,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4124.72,-309.072 4126.72,-298.667 4118.67,-305.554 4124.72,-309.072\"/>\r\n</g>\r\n<!-- 122 -->\r\n<g id=\"node123\" class=\"node\"><title>122</title>\r\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M4309,-901C4309,-901 4211,-901 4211,-901 4205,-901 4199,-895 4199,-889 4199,-889 4199,-830 4199,-830 4199,-824 4205,-818 4211,-818 4211,-818 4309,-818 4309,-818 4315,-818 4321,-824 4321,-830 4321,-830 4321,-889 4321,-889 4321,-895 4315,-901 4309,-901\"/>\r\n<text text-anchor=\"start\" x=\"4217\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.813</text>\r\n<text text-anchor=\"start\" x=\"4212.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 203</text>\r\n<text text-anchor=\"start\" x=\"4207\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 51]</text>\r\n<text text-anchor=\"start\" x=\"4213\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 121&#45;&gt;122 -->\r\n<g id=\"edge122\" class=\"edge\"><title>121&#45;&gt;122</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4260,-936.907C4260,-928.649 4260,-919.864 4260,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4263.5,-911.021 4260,-901.021 4256.5,-911.021 4263.5,-911.021\"/>\r\n</g>\r\n<!-- 137 -->\r\n<g id=\"node138\" class=\"node\"><title>137</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4453,-893.5C4453,-893.5 4351,-893.5 4351,-893.5 4345,-893.5 4339,-887.5 4339,-881.5 4339,-881.5 4339,-837.5 4339,-837.5 4339,-831.5 4345,-825.5 4351,-825.5 4351,-825.5 4453,-825.5 4453,-825.5 4459,-825.5 4465,-831.5 4465,-837.5 4465,-837.5 4465,-881.5 4465,-881.5 4465,-887.5 4459,-893.5 4453,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4360\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4354.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 138</text>\r\n<text text-anchor=\"start\" x=\"4353.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 138]</text>\r\n<text text-anchor=\"start\" x=\"4347\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 121&#45;&gt;137 -->\r\n<g id=\"edge137\" class=\"edge\"><title>121&#45;&gt;137</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4309.27,-936.907C4323.73,-924.99 4339.53,-911.976 4353.91,-900.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4356.25,-902.727 4361.75,-893.667 4351.8,-897.325 4356.25,-902.727\"/>\r\n</g>\r\n<!-- 123 -->\r\n<g id=\"node124\" class=\"node\"><title>123</title>\r\n<path fill=\"#dbedfa\" stroke=\"black\" d=\"M4344.5,-782C4344.5,-782 4175.5,-782 4175.5,-782 4169.5,-782 4163.5,-776 4163.5,-770 4163.5,-770 4163.5,-711 4163.5,-711 4163.5,-705 4169.5,-699 4175.5,-699 4175.5,-699 4344.5,-699 4344.5,-699 4350.5,-699 4356.5,-705 4356.5,-711 4356.5,-711 4356.5,-770 4356.5,-770 4356.5,-776 4350.5,-782 4344.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4171.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 152.0</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.993</text>\r\n<text text-anchor=\"start\" x=\"4216.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 80</text>\r\n<text text-anchor=\"start\" x=\"4211.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 44]</text>\r\n<text text-anchor=\"start\" x=\"4205\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 122&#45;&gt;123 -->\r\n<g id=\"edge123\" class=\"edge\"><title>122&#45;&gt;123</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4260,-817.907C4260,-809.649 4260,-800.864 4260,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4263.5,-792.021 4260,-782.021 4256.5,-792.021 4263.5,-792.021\"/>\r\n</g>\r\n<!-- 130 -->\r\n<g id=\"node131\" class=\"node\"><title>130</title>\r\n<path fill=\"#e78945\" stroke=\"black\" d=\"M4632,-782C4632,-782 4540,-782 4540,-782 4534,-782 4528,-776 4528,-770 4528,-770 4528,-711 4528,-711 4528,-705 4534,-699 4540,-699 4540,-699 4632,-699 4632,-699 4638,-699 4644,-705 4644,-711 4644,-711 4644,-770 4644,-770 4644,-776 4638,-782 4632,-782\"/>\r\n<text text-anchor=\"start\" x=\"4539\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 97.5</text>\r\n<text text-anchor=\"start\" x=\"4536\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.315</text>\r\n<text text-anchor=\"start\" x=\"4538.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 123</text>\r\n<text text-anchor=\"start\" x=\"4537.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [116, 7]</text>\r\n<text text-anchor=\"start\" x=\"4539\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 122&#45;&gt;130 -->\r\n<g id=\"edge130\" class=\"edge\"><title>122&#45;&gt;130</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4321.04,-822.102C4324.04,-820.656 4327.04,-819.28 4330,-818 4391.72,-791.363 4465.59,-770.37 4518.08,-757.166\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4519.1,-760.521 4527.96,-754.711 4517.41,-753.728 4519.1,-760.521\"/>\r\n</g>\r\n<!-- 124 -->\r\n<g id=\"node125\" class=\"node\"><title>124</title>\r\n<path fill=\"#42a2e6\" stroke=\"black\" d=\"M4316.5,-663C4316.5,-663 4201.5,-663 4201.5,-663 4195.5,-663 4189.5,-657 4189.5,-651 4189.5,-651 4189.5,-592 4189.5,-592 4189.5,-586 4195.5,-580 4201.5,-580 4201.5,-580 4316.5,-580 4316.5,-580 4322.5,-580 4328.5,-586 4328.5,-592 4328.5,-592 4328.5,-651 4328.5,-651 4328.5,-657 4322.5,-663 4316.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4197.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2522.0</text>\r\n<text text-anchor=\"start\" x=\"4209\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.262</text>\r\n<text text-anchor=\"start\" x=\"4215.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\r\n<text text-anchor=\"start\" x=\"4214.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 43]</text>\r\n<text text-anchor=\"start\" x=\"4204\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 123&#45;&gt;124 -->\r\n<g id=\"edge124\" class=\"edge\"><title>123&#45;&gt;124</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4259.65,-698.907C4259.58,-690.649 4259.51,-681.864 4259.43,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4262.93,-672.99 4259.35,-663.021 4255.93,-673.05 4262.93,-672.99\"/>\r\n</g>\r\n<!-- 127 -->\r\n<g id=\"node128\" class=\"node\"><title>127</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4501.5,-663C4501.5,-663 4358.5,-663 4358.5,-663 4352.5,-663 4346.5,-657 4346.5,-651 4346.5,-651 4346.5,-592 4346.5,-592 4346.5,-586 4352.5,-580 4358.5,-580 4358.5,-580 4501.5,-580 4501.5,-580 4507.5,-580 4513.5,-586 4513.5,-592 4513.5,-592 4513.5,-651 4513.5,-651 4513.5,-657 4507.5,-663 4501.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4354.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_access_files ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"4380\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\r\n<text text-anchor=\"start\" x=\"4386.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 35</text>\r\n<text text-anchor=\"start\" x=\"4385.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 1]</text>\r\n<text text-anchor=\"start\" x=\"4383\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 123&#45;&gt;127 -->\r\n<g id=\"edge127\" class=\"edge\"><title>123&#45;&gt;127</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4318.98,-698.907C4333.09,-689.197 4348.26,-678.758 4362.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4364.87,-671.573 4371.12,-663.021 4360.9,-665.807 4364.87,-671.573\"/>\r\n</g>\r\n<!-- 125 -->\r\n<g id=\"node126\" class=\"node\"><title>125</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4229,-536.5C4229,-536.5 4127,-536.5 4127,-536.5 4121,-536.5 4115,-530.5 4115,-524.5 4115,-524.5 4115,-480.5 4115,-480.5 4115,-474.5 4121,-468.5 4127,-468.5 4127,-468.5 4229,-468.5 4229,-468.5 4235,-468.5 4241,-474.5 4241,-480.5 4241,-480.5 4241,-524.5 4241,-524.5 4241,-530.5 4235,-536.5 4229,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4136\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4134.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"4133.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 43]</text>\r\n<text text-anchor=\"start\" x=\"4123\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 124&#45;&gt;125 -->\r\n<g id=\"edge125\" class=\"edge\"><title>124&#45;&gt;125</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4230.9,-579.907C4223.11,-568.652 4214.64,-556.418 4206.8,-545.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4209.53,-542.897 4200.96,-536.667 4203.78,-546.881 4209.53,-542.897\"/>\r\n</g>\r\n<!-- 126 -->\r\n<g id=\"node127\" class=\"node\"><title>126</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4357,-536.5C4357,-536.5 4271,-536.5 4271,-536.5 4265,-536.5 4259,-530.5 4259,-524.5 4259,-524.5 4259,-480.5 4259,-480.5 4259,-474.5 4265,-468.5 4271,-468.5 4271,-468.5 4357,-468.5 4357,-468.5 4363,-468.5 4369,-474.5 4369,-480.5 4369,-480.5 4369,-524.5 4369,-524.5 4369,-530.5 4363,-536.5 4357,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4272\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4274.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4273.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4267\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 124&#45;&gt;126 -->\r\n<g id=\"edge126\" class=\"edge\"><title>124&#45;&gt;126</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4278.08,-579.907C4283.27,-568.873 4288.9,-556.898 4294.13,-545.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4297.32,-547.206 4298.41,-536.667 4290.99,-544.228 4297.32,-547.206\"/>\r\n</g>\r\n<!-- 128 -->\r\n<g id=\"node129\" class=\"node\"><title>128</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4485,-536.5C4485,-536.5 4399,-536.5 4399,-536.5 4393,-536.5 4387,-530.5 4387,-524.5 4387,-524.5 4387,-480.5 4387,-480.5 4387,-474.5 4393,-468.5 4399,-468.5 4399,-468.5 4485,-468.5 4485,-468.5 4491,-468.5 4497,-474.5 4497,-480.5 4497,-480.5 4497,-524.5 4497,-524.5 4497,-530.5 4491,-536.5 4485,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4400\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4398.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 34</text>\r\n<text text-anchor=\"start\" x=\"4397.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 0]</text>\r\n<text text-anchor=\"start\" x=\"4395\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 127&#45;&gt;128 -->\r\n<g id=\"edge128\" class=\"edge\"><title>127&#45;&gt;128</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4434.16,-579.907C4435.26,-569.204 4436.45,-557.615 4437.56,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4441.06,-546.972 4438.6,-536.667 4434.1,-546.258 4441.06,-546.972\"/>\r\n</g>\r\n<!-- 129 -->\r\n<g id=\"node130\" class=\"node\"><title>129</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4629,-536.5C4629,-536.5 4527,-536.5 4527,-536.5 4521,-536.5 4515,-530.5 4515,-524.5 4515,-524.5 4515,-480.5 4515,-480.5 4515,-474.5 4521,-468.5 4527,-468.5 4527,-468.5 4629,-468.5 4629,-468.5 4635,-468.5 4641,-474.5 4641,-480.5 4641,-480.5 4641,-524.5 4641,-524.5 4641,-530.5 4635,-536.5 4629,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4536\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4538.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4537.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4523\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127&#45;&gt;129 -->\r\n<g id=\"edge129\" class=\"edge\"><title>127&#45;&gt;129</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4481.35,-579.907C4496.42,-567.99 4512.89,-554.976 4527.88,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4530.37,-545.614 4536.05,-536.667 4526.03,-540.123 4530.37,-545.614\"/>\r\n</g>\r\n<!-- 131 -->\r\n<g id=\"node132\" class=\"node\"><title>131</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4632.5,-655.5C4632.5,-655.5 4543.5,-655.5 4543.5,-655.5 4537.5,-655.5 4531.5,-649.5 4531.5,-643.5 4531.5,-643.5 4531.5,-599.5 4531.5,-599.5 4531.5,-593.5 4537.5,-587.5 4543.5,-587.5 4543.5,-587.5 4632.5,-587.5 4632.5,-587.5 4638.5,-587.5 4644.5,-593.5 4644.5,-599.5 4644.5,-599.5 4644.5,-643.5 4644.5,-643.5 4644.5,-649.5 4638.5,-655.5 4632.5,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4546\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4540.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\r\n<text text-anchor=\"start\" x=\"4539.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [106, 0]</text>\r\n<text text-anchor=\"start\" x=\"4541\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130&#45;&gt;131 -->\r\n<g id=\"edge131\" class=\"edge\"><title>130&#45;&gt;131</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4586.69,-698.907C4586.88,-688.204 4587.07,-676.615 4587.26,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4590.76,-665.725 4587.43,-655.667 4583.76,-665.606 4590.76,-665.725\"/>\r\n</g>\r\n<!-- 132 -->\r\n<g id=\"node133\" class=\"node\"><title>132</title>\r\n<path fill=\"#f7d9c4\" stroke=\"black\" d=\"M4861.5,-663C4861.5,-663 4674.5,-663 4674.5,-663 4668.5,-663 4662.5,-657 4662.5,-651 4662.5,-651 4662.5,-592 4662.5,-592 4662.5,-586 4668.5,-580 4674.5,-580 4674.5,-580 4861.5,-580 4861.5,-580 4867.5,-580 4873.5,-586 4873.5,-592 4873.5,-592 4873.5,-651 4873.5,-651 4873.5,-657 4867.5,-663 4861.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4670.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\r\n<text text-anchor=\"start\" x=\"4718\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.977</text>\r\n<text text-anchor=\"start\" x=\"4724.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"4723.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 7]</text>\r\n<text text-anchor=\"start\" x=\"4721\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130&#45;&gt;132 -->\r\n<g id=\"edge132\" class=\"edge\"><title>130&#45;&gt;132</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4644.09,-702.159C4660.71,-691.469 4679.04,-679.69 4696.38,-668.543\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4698.28,-671.481 4704.8,-663.13 4694.49,-665.593 4698.28,-671.481\"/>\r\n</g>\r\n<!-- 133 -->\r\n<g id=\"node134\" class=\"node\"><title>133</title>\r\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M4806.5,-544C4806.5,-544 4683.5,-544 4683.5,-544 4677.5,-544 4671.5,-538 4671.5,-532 4671.5,-532 4671.5,-473 4671.5,-473 4671.5,-467 4677.5,-461 4683.5,-461 4683.5,-461 4806.5,-461 4806.5,-461 4812.5,-461 4818.5,-467 4818.5,-473 4818.5,-473 4818.5,-532 4818.5,-532 4818.5,-538 4812.5,-544 4806.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4679.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 25291.5</text>\r\n<text text-anchor=\"start\" x=\"4695\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"4705.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"4704.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 7]</text>\r\n<text text-anchor=\"start\" x=\"4690\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 132&#45;&gt;133 -->\r\n<g id=\"edge133\" class=\"edge\"><title>132&#45;&gt;133</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4760.02,-579.907C4758.38,-571.558 4756.63,-562.671 4754.93,-554.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4758.33,-553.158 4752.97,-544.021 4751.46,-554.508 4758.33,-553.158\"/>\r\n</g>\r\n<!-- 136 -->\r\n<g id=\"node137\" class=\"node\"><title>136</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4935,-536.5C4935,-536.5 4849,-536.5 4849,-536.5 4843,-536.5 4837,-530.5 4837,-524.5 4837,-524.5 4837,-480.5 4837,-480.5 4837,-474.5 4843,-468.5 4849,-468.5 4849,-468.5 4935,-468.5 4935,-468.5 4941,-468.5 4947,-474.5 4947,-480.5 4947,-480.5 4947,-524.5 4947,-524.5 4947,-530.5 4941,-536.5 4935,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4850\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4852.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"4851.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"4845\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 132&#45;&gt;136 -->\r\n<g id=\"edge136\" class=\"edge\"><title>132&#45;&gt;136</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4811.02,-579.907C4823.42,-568.211 4836.93,-555.457 4849.31,-543.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4851.98,-546.075 4856.85,-536.667 4847.17,-540.984 4851.98,-546.075\"/>\r\n</g>\r\n<!-- 134 -->\r\n<g id=\"node135\" class=\"node\"><title>134</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4728,-417.5C4728,-417.5 4626,-417.5 4626,-417.5 4620,-417.5 4614,-411.5 4614,-405.5 4614,-405.5 4614,-361.5 4614,-361.5 4614,-355.5 4620,-349.5 4626,-349.5 4626,-349.5 4728,-349.5 4728,-349.5 4734,-349.5 4740,-355.5 4740,-361.5 4740,-361.5 4740,-405.5 4740,-405.5 4740,-411.5 4734,-417.5 4728,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4635\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4637.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"4636.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"4622\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 133&#45;&gt;134 -->\r\n<g id=\"edge134\" class=\"edge\"><title>133&#45;&gt;134</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4721.41,-460.907C4714.93,-449.763 4707.9,-437.658 4701.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4704.33,-424.554 4696.28,-417.667 4698.28,-428.072 4704.33,-424.554\"/>\r\n</g>\r\n<!-- 135 -->\r\n<g id=\"node136\" class=\"node\"><title>135</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4856,-417.5C4856,-417.5 4770,-417.5 4770,-417.5 4764,-417.5 4758,-411.5 4758,-405.5 4758,-405.5 4758,-361.5 4758,-361.5 4758,-355.5 4764,-349.5 4770,-349.5 4770,-349.5 4856,-349.5 4856,-349.5 4862,-349.5 4868,-355.5 4868,-361.5 4868,-361.5 4868,-405.5 4868,-405.5 4868,-411.5 4862,-417.5 4856,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4771\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4773.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4772.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4766\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 133&#45;&gt;135 -->\r\n<g id=\"edge135\" class=\"edge\"><title>133&#45;&gt;135</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4768.59,-460.907C4775.07,-449.763 4782.1,-437.658 4788.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4791.72,-428.072 4793.72,-417.667 4785.67,-424.554 4791.72,-428.072\"/>\r\n</g>\r\n<!-- 139 -->\r\n<g id=\"node140\" class=\"node\"><title>139</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M4632.5,-1020C4632.5,-1020 4453.5,-1020 4453.5,-1020 4447.5,-1020 4441.5,-1014 4441.5,-1008 4441.5,-1008 4441.5,-949 4441.5,-949 4441.5,-943 4447.5,-937 4453.5,-937 4453.5,-937 4632.5,-937 4632.5,-937 4638.5,-937 4644.5,-943 4644.5,-949 4644.5,-949 4644.5,-1008 4644.5,-1008 4644.5,-1014 4638.5,-1020 4632.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4449.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.33</text>\r\n<text text-anchor=\"start\" x=\"4493\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 193</text>\r\n<text text-anchor=\"start\" x=\"4494.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 1]</text>\r\n<text text-anchor=\"start\" x=\"4496\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 138&#45;&gt;139 -->\r\n<g id=\"edge139\" class=\"edge\"><title>138&#45;&gt;139</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4543,-1055.91C4543,-1047.65 4543,-1038.86 4543,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.5,-1030.02 4543,-1020.02 4539.5,-1030.02 4546.5,-1030.02\"/>\r\n</g>\r\n<!-- 144 -->\r\n<g id=\"node145\" class=\"node\"><title>144</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4777,-1012.5C4777,-1012.5 4675,-1012.5 4675,-1012.5 4669,-1012.5 4663,-1006.5 4663,-1000.5 4663,-1000.5 4663,-956.5 4663,-956.5 4663,-950.5 4669,-944.5 4675,-944.5 4675,-944.5 4777,-944.5 4777,-944.5 4783,-944.5 4789,-950.5 4789,-956.5 4789,-956.5 4789,-1000.5 4789,-1000.5 4789,-1006.5 4783,-1012.5 4777,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"4684\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4678.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 402</text>\r\n<text text-anchor=\"start\" x=\"4677.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 402]</text>\r\n<text text-anchor=\"start\" x=\"4671\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 138&#45;&gt;144 -->\r\n<g id=\"edge144\" class=\"edge\"><title>138&#45;&gt;144</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4606.49,-1055.91C4625.65,-1043.66 4646.62,-1030.25 4665.57,-1018.13\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4667.58,-1021 4674.12,-1012.67 4663.81,-1015.1 4667.58,-1021\"/>\r\n</g>\r\n<!-- 140 -->\r\n<g id=\"node141\" class=\"node\"><title>140</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4587.5,-893.5C4587.5,-893.5 4498.5,-893.5 4498.5,-893.5 4492.5,-893.5 4486.5,-887.5 4486.5,-881.5 4486.5,-881.5 4486.5,-837.5 4486.5,-837.5 4486.5,-831.5 4492.5,-825.5 4498.5,-825.5 4498.5,-825.5 4587.5,-825.5 4587.5,-825.5 4593.5,-825.5 4599.5,-831.5 4599.5,-837.5 4599.5,-837.5 4599.5,-881.5 4599.5,-881.5 4599.5,-887.5 4593.5,-893.5 4587.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4501\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 190</text>\r\n<text text-anchor=\"start\" x=\"4494.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [190, 0]</text>\r\n<text text-anchor=\"start\" x=\"4496\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139&#45;&gt;140 -->\r\n<g id=\"edge140\" class=\"edge\"><title>139&#45;&gt;140</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4543,-936.907C4543,-926.204 4543,-914.615 4543,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.5,-903.667 4543,-893.667 4539.5,-903.667 4546.5,-903.667\"/>\r\n</g>\r\n<!-- 141 -->\r\n<g id=\"node142\" class=\"node\"><title>141</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M4814.5,-901C4814.5,-901 4635.5,-901 4635.5,-901 4629.5,-901 4623.5,-895 4623.5,-889 4623.5,-889 4623.5,-830 4623.5,-830 4623.5,-824 4629.5,-818 4635.5,-818 4635.5,-818 4814.5,-818 4814.5,-818 4820.5,-818 4826.5,-824 4826.5,-830 4826.5,-830 4826.5,-889 4826.5,-889 4826.5,-895 4820.5,-901 4814.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"4631.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.72</text>\r\n<text text-anchor=\"start\" x=\"4675\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"4685.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"4678\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139&#45;&gt;141 -->\r\n<g id=\"edge141\" class=\"edge\"><title>139&#45;&gt;141</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4606.14,-936.907C4621.39,-927.106 4637.79,-916.563 4653.39,-906.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4655.45,-909.373 4661.97,-901.021 4651.66,-903.484 4655.45,-909.373\"/>\r\n</g>\r\n<!-- 142 -->\r\n<g id=\"node143\" class=\"node\"><title>142</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4776,-774.5C4776,-774.5 4674,-774.5 4674,-774.5 4668,-774.5 4662,-768.5 4662,-762.5 4662,-762.5 4662,-718.5 4662,-718.5 4662,-712.5 4668,-706.5 4674,-706.5 4674,-706.5 4776,-706.5 4776,-706.5 4782,-706.5 4788,-712.5 4788,-718.5 4788,-718.5 4788,-762.5 4788,-762.5 4788,-768.5 4782,-774.5 4776,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"4683\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4685.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4670\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 141&#45;&gt;142 -->\r\n<g id=\"edge142\" class=\"edge\"><title>141&#45;&gt;142</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4725,-817.907C4725,-807.204 4725,-795.615 4725,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4728.5,-784.667 4725,-774.667 4721.5,-784.667 4728.5,-784.667\"/>\r\n</g>\r\n<!-- 143 -->\r\n<g id=\"node144\" class=\"node\"><title>143</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4904,-774.5C4904,-774.5 4818,-774.5 4818,-774.5 4812,-774.5 4806,-768.5 4806,-762.5 4806,-762.5 4806,-718.5 4806,-718.5 4806,-712.5 4812,-706.5 4818,-706.5 4818,-706.5 4904,-706.5 4904,-706.5 4910,-706.5 4916,-712.5 4916,-718.5 4916,-718.5 4916,-762.5 4916,-762.5 4916,-768.5 4910,-774.5 4904,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"4819\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4821.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4820.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4814\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 141&#45;&gt;143 -->\r\n<g id=\"edge143\" class=\"edge\"><title>141&#45;&gt;143</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4772.18,-817.907C4785.91,-806.101 4800.89,-793.217 4814.56,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4817.15,-783.842 4822.45,-774.667 4812.58,-778.535 4817.15,-783.842\"/>\r\n</g>\r\n</g>\r\n</svg>\r\n",
+      "text/plain": [
+       "<graphviz.files.Source at 0x1fea954b608>"
+      ]
+     },
+     "execution_count": 5,
+     "metadata": {},
+     "output_type": "execute_result"
+    }
+   ],
    "source": [
-    "dot_data2 = tree.export_graphviz(clf2,\n",
+    "from IPython import display\n",
+    "from sklearn import tree\n",
+    "import graphviz\n",
+    "import os\n",
+    "\n",
+    "os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
+    "# 시각화\n",
+    "dot_data = tree.export_graphviz(clf_vector[12],\n",
     "                               out_file = None,\n",
     "                               feature_names = X_train.columns,\n",
-    "                               class_names = [\"0\", \"1\"],\n",
+    "                               class_names = [\"Normal\", \"Abnormal\"],\n",
     "                               filled = True,\n",
     "                               rounded = True,\n",
     "                               special_characters = True)\n",
     "\n",
-    "graph2 = graphviz.Source(dot_data2)\n",
-    "#graph2"
-   ]
-  },
-  {
-   "cell_type": "code",
-   "execution_count": 15,
-   "metadata": {},
-   "outputs": [],
-   "source": [
-    "clf1_y_pred = clf1.predict(X_test)\n",
-    "clf2_y_pred = clf2.predict(X_test)"
+    "graph = graphviz.Source(dot_data)\n",
+    "graph.render('./output/decision tree', format='jpg')\n",
+    "graph"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 18,
+   "execution_count": 19,
    "metadata": {},
    "outputs": [
     {
-     "data": {
-      "text/plain": [
-       "(0.9953625632377741, 0.99830866807611, 0.9968334388853705, None)"
-      ]
-     },
-     "execution_count": 18,
-     "metadata": {},
-     "output_type": "execute_result"
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "accuracy:  0.9964276263561789\n",
+      "precision: 0.9958128078817734\n",
+      "racall:    0.9975326918332099\n",
+      "f1 score:  0.9966720078885738\n",
+      "error rate: 0.003572373643821117\n"
+     ]
     }
    ],
    "source": [
-    "from sklearn.metrics import precision_recall_fscore_support\n",
+    "from sklearn.metrics import confusion_matrix\n",
+    "\n",
+    "clf_y_pred = clf_vector[12].predict(X_test)\n",
+    "\n",
+    "conf_mat = confusion_matrix(y_test, clf_y_pred)\n",
+    "accuracy = (conf_mat[0][0]+conf_mat[1][1])/conf_mat.sum()\n",
+    "precision = conf_mat[0][0]/(conf_mat[0][0]+conf_mat[1][0])\n",
+    "recall = conf_mat[0][0]/(conf_mat[0][0]+conf_mat[0][1])\n",
+    "f1 = 2*(precision*recall)/(precision+recall)\n",
+    "error_rate = (conf_mat[0][1]+conf_mat[1][0])/conf_mat.sum()\n",
+    "\n",
     "\n",
-    "precision_recall_fscore_support(y_test, clf1_y_pred, average=\"binary\")"
+    "\n",
+    "print(f'accuracy:  {accuracy}')\n",
+    "print(f'precision: {precision}')\n",
+    "print(f'racall:    {recall}')\n",
+    "print(f'f1 score:  {f1}')\n",
+    "print(f'error rate: {error_rate}')"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 19,
+   "execution_count": 7,
    "metadata": {},
    "outputs": [
     {
      "data": {
+      "image/png": "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",
       "text/plain": [
-       "(0.9957788096243141, 0.9974630021141649, 0.9966201943388256, None)"
+       "<Figure size 432x288 with 1 Axes>"
       ]
      },
-     "execution_count": 19,
-     "metadata": {},
-     "output_type": "execute_result"
+     "metadata": {
+      "needs_background": "light"
+     },
+     "output_type": "display_data"
     }
    ],
    "source": [
-    "precision_recall_fscore_support(y_test, clf2_y_pred, average=\"binary\")"
+    "from sklearn.metrics import plot_roc_curve\n",
+    "\n",
+    "roc_curve = plot_roc_curve(clf_vector[13], X_test, y_test)"
    ]
+  },
+  {
+   "cell_type": "code",
+   "execution_count": null,
+   "metadata": {},
+   "outputs": [],
+   "source": []
   }
  ],
  "metadata": {
@@ -292,7 +368,7 @@
    "name": "python",
    "nbconvert_exporter": "python",
    "pygments_lexer": "ipython3",
-   "version": "3.8.5"
+   "version": "3.7.6"
   },
   "orig_nbformat": 4
  },
diff --git a/experiment/decision tree classifier/output/decision tree b/experiment/decision tree classifier/output/decision tree
new file mode 100644
index 0000000000000000000000000000000000000000..ebefd0584901b936590b2625ac2b44234e695af0
--- /dev/null
+++ b/experiment/decision tree classifier/output/decision tree	
@@ -0,0 +1,293 @@
+digraph Tree {
+node [shape=box, style="filled, rounded", color="black", fontname=helvetica] ;
+edge [fontname=helvetica] ;
+0 [label=<src_bytes &le; 28.5<br/>entropy = 0.997<br/>samples = 17634<br/>value = [9396, 8238]<br/>class = Normal>, fillcolor="#fcefe7"] ;
+1 [label=<count &le; 8.5<br/>entropy = 0.393<br/>samples = 8156<br/>value = [632, 7524]<br/>class = Abnormal>, fillcolor="#4aa5e7"] ;
+0 -> 1 [labeldistance=2.5, labelangle=45, headlabel="True"] ;
+2 [label=<service &le; 16.5<br/>entropy = 0.928<br/>samples = 1775<br/>value = [610, 1165]<br/>class = Abnormal>, fillcolor="#a1d0f3"] ;
+1 -> 2 ;
+3 [label=<service &le; 1.5<br/>entropy = 0.377<br/>samples = 1028<br/>value = [75, 953]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
+2 -> 3 ;
+4 [label=<src_bytes &le; 4.5<br/>entropy = 0.781<br/>samples = 95<br/>value = [73, 22]<br/>class = Normal>, fillcolor="#eda775"] ;
+3 -> 4 ;
+5 [label=<flag &le; 5.5<br/>entropy = 0.797<br/>samples = 29<br/>value = [7, 22]<br/>class = Abnormal>, fillcolor="#78bced"] ;
+4 -> 5 ;
+6 [label=<entropy = 0.0<br/>samples = 15<br/>value = [0, 15]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+5 -> 6 ;
+7 [label=<dst_host_count &le; 19.0<br/>entropy = 1.0<br/>samples = 14<br/>value = [7, 7]<br/>class = Normal>, fillcolor="#ffffff"] ;
+5 -> 7 ;
+8 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+7 -> 8 ;
+9 [label=<entropy = 0.0<br/>samples = 7<br/>value = [7, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+7 -> 9 ;
+10 [label=<entropy = 0.0<br/>samples = 66<br/>value = [66, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+4 -> 10 ;
+11 [label=<serror_rate &le; 0.835<br/>entropy = 0.022<br/>samples = 933<br/>value = [2, 931]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+3 -> 11 ;
+12 [label=<entropy = 0.0<br/>samples = 891<br/>value = [0, 891]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+11 -> 12 ;
+13 [label=<dst_host_same_srv_rate &le; 0.44<br/>entropy = 0.276<br/>samples = 42<br/>value = [2, 40]<br/>class = Abnormal>, fillcolor="#43a2e6"] ;
+11 -> 13 ;
+14 [label=<entropy = 0.0<br/>samples = 40<br/>value = [0, 40]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+13 -> 14 ;
+15 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+13 -> 15 ;
+16 [label=<dst_host_same_srv_rate &le; 0.535<br/>entropy = 0.861<br/>samples = 747<br/>value = [535, 212]<br/>class = Normal>, fillcolor="#efb387"] ;
+2 -> 16 ;
+17 [label=<src_bytes &le; 5.5<br/>entropy = 0.963<br/>samples = 326<br/>value = [126, 200]<br/>class = Abnormal>, fillcolor="#b6dbf5"] ;
+16 -> 17 ;
+18 [label=<dst_host_same_src_port_rate &le; 0.135<br/>entropy = 0.598<br/>samples = 227<br/>value = [33, 194]<br/>class = Abnormal>, fillcolor="#5baee9"] ;
+17 -> 18 ;
+19 [label=<dst_host_serror_rate &le; 0.955<br/>entropy = 0.878<br/>samples = 111<br/>value = [33, 78]<br/>class = Abnormal>, fillcolor="#8dc6f0"] ;
+18 -> 19 ;
+20 [label=<dst_host_rerror_rate &le; 0.605<br/>entropy = 0.947<br/>samples = 52<br/>value = [33, 19]<br/>class = Normal>, fillcolor="#f4caab"] ;
+19 -> 20 ;
+21 [label=<srv_diff_host_rate &le; 0.15<br/>entropy = 0.782<br/>samples = 43<br/>value = [33, 10]<br/>class = Normal>, fillcolor="#eda775"] ;
+20 -> 21 ;
+22 [label=<dst_host_srv_count &le; 1.5<br/>entropy = 0.619<br/>samples = 39<br/>value = [33, 6]<br/>class = Normal>, fillcolor="#ea985d"] ;
+21 -> 22 ;
+23 [label=<dst_host_count &le; 131.5<br/>entropy = 0.991<br/>samples = 9<br/>value = [4, 5]<br/>class = Abnormal>, fillcolor="#d7ebfa"] ;
+22 -> 23 ;
+24 [label=<entropy = 0.0<br/>samples = 4<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+23 -> 24 ;
+25 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+23 -> 25 ;
+26 [label=<protocol_type &le; 0.5<br/>entropy = 0.211<br/>samples = 30<br/>value = [29, 1]<br/>class = Normal>, fillcolor="#e68540"] ;
+22 -> 26 ;
+27 [label=<entropy = 0.0<br/>samples = 29<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+26 -> 27 ;
+28 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+26 -> 28 ;
+29 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+21 -> 29 ;
+30 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+20 -> 30 ;
+31 [label=<entropy = 0.0<br/>samples = 59<br/>value = [0, 59]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+19 -> 31 ;
+32 [label=<entropy = 0.0<br/>samples = 116<br/>value = [0, 116]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+18 -> 32 ;
+33 [label=<dst_host_srv_count &le; 1.5<br/>entropy = 0.33<br/>samples = 99<br/>value = [93, 6]<br/>class = Normal>, fillcolor="#e78946"] ;
+17 -> 33 ;
+34 [label=<dst_host_diff_srv_rate &le; 0.65<br/>entropy = 0.65<br/>samples = 6<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+33 -> 34 ;
+35 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+34 -> 35 ;
+36 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+34 -> 36 ;
+37 [label=<count &le; 7.0<br/>entropy = 0.086<br/>samples = 93<br/>value = [92, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
+33 -> 37 ;
+38 [label=<entropy = 0.0<br/>samples = 92<br/>value = [92, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+37 -> 38 ;
+39 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+37 -> 39 ;
+40 [label=<dst_host_srv_count &le; 11.0<br/>entropy = 0.187<br/>samples = 421<br/>value = [409, 12]<br/>class = Normal>, fillcolor="#e6853f"] ;
+16 -> 40 ;
+41 [label=<dst_bytes &le; 2.0<br/>entropy = 0.994<br/>samples = 22<br/>value = [10, 12]<br/>class = Abnormal>, fillcolor="#deeffb"] ;
+40 -> 41 ;
+42 [label=<dst_host_rerror_rate &le; 0.355<br/>entropy = 0.811<br/>samples = 16<br/>value = [4, 12]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
+41 -> 42 ;
+43 [label=<dst_host_same_src_port_rate &le; 0.265<br/>entropy = 0.592<br/>samples = 14<br/>value = [2, 12]<br/>class = Abnormal>, fillcolor="#5aade9"] ;
+42 -> 43 ;
+44 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+43 -> 44 ;
+45 [label=<src_bytes &le; 19.0<br/>entropy = 0.391<br/>samples = 13<br/>value = [1, 12]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
+43 -> 45 ;
+46 [label=<entropy = 0.0<br/>samples = 11<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+45 -> 46 ;
+47 [label=<entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+45 -> 47 ;
+48 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+42 -> 48 ;
+49 [label=<entropy = 0.0<br/>samples = 6<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+41 -> 49 ;
+50 [label=<entropy = 0.0<br/>samples = 399<br/>value = [399, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+40 -> 50 ;
+51 [label=<dst_host_same_srv_rate &le; 0.835<br/>entropy = 0.033<br/>samples = 6381<br/>value = [22, 6359]<br/>class = Abnormal>, fillcolor="#3a9de5"] ;
+1 -> 51 ;
+52 [label=<srv_diff_host_rate &le; 0.46<br/>entropy = 0.002<br/>samples = 6350<br/>value = [1, 6349]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+51 -> 52 ;
+53 [label=<entropy = 0.0<br/>samples = 6348<br/>value = [0, 6348]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+52 -> 53 ;
+54 [label=<diff_srv_rate &le; 0.08<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+52 -> 54 ;
+55 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+54 -> 55 ;
+56 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+54 -> 56 ;
+57 [label=<dst_host_srv_count &le; 66.5<br/>entropy = 0.907<br/>samples = 31<br/>value = [21, 10]<br/>class = Normal>, fillcolor="#f1bd97"] ;
+51 -> 57 ;
+58 [label=<entropy = 0.0<br/>samples = 8<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+57 -> 58 ;
+59 [label=<dst_host_same_src_port_rate &le; 0.54<br/>entropy = 0.426<br/>samples = 23<br/>value = [21, 2]<br/>class = Normal>, fillcolor="#e78d4c"] ;
+57 -> 59 ;
+60 [label=<entropy = 0.0<br/>samples = 21<br/>value = [21, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+59 -> 60 ;
+61 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+59 -> 61 ;
+62 [label=<protocol_type &le; 1.5<br/>entropy = 0.386<br/>samples = 9478<br/>value = [8764, 714]<br/>class = Normal>, fillcolor="#e78b49"] ;
+0 -> 62 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
+63 [label=<hot &le; 0.5<br/>entropy = 0.219<br/>samples = 8883<br/>value = [8572, 311]<br/>class = Normal>, fillcolor="#e68640"] ;
+62 -> 63 ;
+64 [label=<dst_bytes &le; 2.0<br/>entropy = 0.108<br/>samples = 8542<br/>value = [8420, 122]<br/>class = Normal>, fillcolor="#e5833c"] ;
+63 -> 64 ;
+65 [label=<dst_host_same_srv_rate &le; 0.825<br/>entropy = 0.541<br/>samples = 911<br/>value = [798, 113]<br/>class = Normal>, fillcolor="#e99355"] ;
+64 -> 65 ;
+66 [label=<service &le; 1.5<br/>entropy = 0.142<br/>samples = 746<br/>value = [731, 15]<br/>class = Normal>, fillcolor="#e6843d"] ;
+65 -> 66 ;
+67 [label=<duration &le; 8.0<br/>entropy = 0.06<br/>samples = 575<br/>value = [571, 4]<br/>class = Normal>, fillcolor="#e5823a"] ;
+66 -> 67 ;
+68 [label=<src_bytes &le; 353.5<br/>entropy = 0.047<br/>samples = 574<br/>value = [571, 3]<br/>class = Normal>, fillcolor="#e5823a"] ;
+67 -> 68 ;
+69 [label=<src_bytes &le; 326.5<br/>entropy = 0.161<br/>samples = 127<br/>value = [124, 3]<br/>class = Normal>, fillcolor="#e6843e"] ;
+68 -> 69 ;
+70 [label=<entropy = 0.0<br/>samples = 124<br/>value = [124, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+69 -> 70 ;
+71 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+69 -> 71 ;
+72 [label=<entropy = 0.0<br/>samples = 447<br/>value = [447, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+68 -> 72 ;
+73 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+67 -> 73 ;
+74 [label=<service &le; 9.5<br/>entropy = 0.344<br/>samples = 171<br/>value = [160, 11]<br/>class = Normal>, fillcolor="#e78a47"] ;
+66 -> 74 ;
+75 [label=<src_bytes &le; 102.5<br/>entropy = 0.998<br/>samples = 17<br/>value = [8, 9]<br/>class = Abnormal>, fillcolor="#e9f4fc"] ;
+74 -> 75 ;
+76 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+75 -> 76 ;
+77 [label=<entropy = 0.0<br/>samples = 8<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+75 -> 77 ;
+78 [label=<dst_host_srv_rerror_rate &le; 0.25<br/>entropy = 0.1<br/>samples = 154<br/>value = [152, 2]<br/>class = Normal>, fillcolor="#e5833c"] ;
+74 -> 78 ;
+79 [label=<dst_host_count &le; 5.5<br/>entropy = 0.057<br/>samples = 153<br/>value = [152, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
+78 -> 79 ;
+80 [label=<src_bytes &le; 239.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+79 -> 80 ;
+81 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+80 -> 81 ;
+82 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+80 -> 82 ;
+83 [label=<entropy = 0.0<br/>samples = 150<br/>value = [150, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+79 -> 83 ;
+84 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+78 -> 84 ;
+85 [label=<dst_host_srv_diff_host_rate &le; 0.06<br/>entropy = 0.974<br/>samples = 165<br/>value = [67, 98]<br/>class = Abnormal>, fillcolor="#c0e0f7"] ;
+65 -> 85 ;
+86 [label=<dst_host_srv_diff_host_rate &le; 0.005<br/>entropy = 0.918<br/>samples = 99<br/>value = [66, 33]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+85 -> 86 ;
+87 [label=<src_bytes &le; 189.5<br/>entropy = 0.998<br/>samples = 61<br/>value = [29, 32]<br/>class = Abnormal>, fillcolor="#ecf6fd"] ;
+86 -> 87 ;
+88 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+87 -> 88 ;
+89 [label=<src_bytes &le; 358.5<br/>entropy = 0.903<br/>samples = 47<br/>value = [15, 32]<br/>class = Abnormal>, fillcolor="#96cbf1"] ;
+87 -> 89 ;
+90 [label=<num_root &le; 0.5<br/>entropy = 0.206<br/>samples = 31<br/>value = [1, 30]<br/>class = Abnormal>, fillcolor="#40a0e6"] ;
+89 -> 90 ;
+91 [label=<entropy = 0.0<br/>samples = 30<br/>value = [0, 30]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+90 -> 91 ;
+92 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+90 -> 92 ;
+93 [label=<src_bytes &le; 32877.5<br/>entropy = 0.544<br/>samples = 16<br/>value = [14, 2]<br/>class = Normal>, fillcolor="#e99355"] ;
+89 -> 93 ;
+94 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+93 -> 94 ;
+95 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+93 -> 95 ;
+96 [label=<duration &le; 7.0<br/>entropy = 0.176<br/>samples = 38<br/>value = [37, 1]<br/>class = Normal>, fillcolor="#e6843e"] ;
+86 -> 96 ;
+97 [label=<entropy = 0.0<br/>samples = 37<br/>value = [37, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+96 -> 97 ;
+98 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+96 -> 98 ;
+99 [label=<num_root &le; 2.5<br/>entropy = 0.113<br/>samples = 66<br/>value = [1, 65]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
+85 -> 99 ;
+100 [label=<entropy = 0.0<br/>samples = 65<br/>value = [0, 65]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+99 -> 100 ;
+101 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+99 -> 101 ;
+102 [label=<dst_host_rerror_rate &le; 0.025<br/>entropy = 0.013<br/>samples = 7631<br/>value = [7622, 9]<br/>class = Normal>, fillcolor="#e58139"] ;
+64 -> 102 ;
+103 [label=<dst_host_srv_serror_rate &le; 0.3<br/>entropy = 0.005<br/>samples = 7367<br/>value = [7364, 3]<br/>class = Normal>, fillcolor="#e58139"] ;
+102 -> 103 ;
+104 [label=<entropy = 0.0<br/>samples = 7321<br/>value = [7321, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+103 -> 104 ;
+105 [label=<logged_in &le; 0.5<br/>entropy = 0.348<br/>samples = 46<br/>value = [43, 3]<br/>class = Normal>, fillcolor="#e78a47"] ;
+103 -> 105 ;
+106 [label=<dst_host_serror_rate &le; 0.675<br/>entropy = 0.811<br/>samples = 4<br/>value = [1, 3]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
+105 -> 106 ;
+107 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+106 -> 107 ;
+108 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+106 -> 108 ;
+109 [label=<entropy = 0.0<br/>samples = 42<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+105 -> 109 ;
+110 [label=<dst_host_srv_count &le; 1.5<br/>entropy = 0.156<br/>samples = 264<br/>value = [258, 6]<br/>class = Normal>, fillcolor="#e6843e"] ;
+102 -> 110 ;
+111 [label=<srv_count &le; 1.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+110 -> 111 ;
+112 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+111 -> 112 ;
+113 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+111 -> 113 ;
+114 [label=<src_bytes &le; 1695.0<br/>entropy = 0.114<br/>samples = 261<br/>value = [257, 4]<br/>class = Normal>, fillcolor="#e5833c"] ;
+110 -> 114 ;
+115 [label=<entropy = 0.0<br/>samples = 230<br/>value = [230, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+114 -> 115 ;
+116 [label=<dst_host_srv_count &le; 123.5<br/>entropy = 0.555<br/>samples = 31<br/>value = [27, 4]<br/>class = Normal>, fillcolor="#e99456"] ;
+114 -> 116 ;
+117 [label=<entropy = 0.0<br/>samples = 25<br/>value = [25, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+116 -> 117 ;
+118 [label=<dst_host_count &le; 145.0<br/>entropy = 0.918<br/>samples = 6<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+116 -> 118 ;
+119 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+118 -> 119 ;
+120 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+118 -> 120 ;
+121 [label=<src_bytes &le; 6052.0<br/>entropy = 0.991<br/>samples = 341<br/>value = [152, 189]<br/>class = Abnormal>, fillcolor="#d8ecfa"] ;
+63 -> 121 ;
+122 [label=<duration &le; 4.5<br/>entropy = 0.813<br/>samples = 203<br/>value = [152, 51]<br/>class = Normal>, fillcolor="#eeab7b"] ;
+121 -> 122 ;
+123 [label=<dst_host_srv_count &le; 152.0<br/>entropy = 0.993<br/>samples = 80<br/>value = [36, 44]<br/>class = Abnormal>, fillcolor="#dbedfa"] ;
+122 -> 123 ;
+124 [label=<dst_bytes &le; 2522.0<br/>entropy = 0.262<br/>samples = 45<br/>value = [2, 43]<br/>class = Abnormal>, fillcolor="#42a2e6"] ;
+123 -> 124 ;
+125 [label=<entropy = 0.0<br/>samples = 43<br/>value = [0, 43]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+124 -> 125 ;
+126 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+124 -> 126 ;
+127 [label=<num_access_files &le; 0.5<br/>entropy = 0.187<br/>samples = 35<br/>value = [34, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
+123 -> 127 ;
+128 [label=<entropy = 0.0<br/>samples = 34<br/>value = [34, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+127 -> 128 ;
+129 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+127 -> 129 ;
+130 [label=<duration &le; 97.5<br/>entropy = 0.315<br/>samples = 123<br/>value = [116, 7]<br/>class = Normal>, fillcolor="#e78945"] ;
+122 -> 130 ;
+131 [label=<entropy = 0.0<br/>samples = 106<br/>value = [106, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+130 -> 131 ;
+132 [label=<dst_host_diff_srv_rate &le; 0.035<br/>entropy = 0.977<br/>samples = 17<br/>value = [10, 7]<br/>class = Normal>, fillcolor="#f7d9c4"] ;
+130 -> 132 ;
+133 [label=<dst_bytes &le; 25291.5<br/>entropy = 0.544<br/>samples = 8<br/>value = [1, 7]<br/>class = Abnormal>, fillcolor="#55abe9"] ;
+132 -> 133 ;
+134 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+133 -> 134 ;
+135 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+133 -> 135 ;
+136 [label=<entropy = 0.0<br/>samples = 9<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+132 -> 136 ;
+137 [label=<entropy = 0.0<br/>samples = 138<br/>value = [0, 138]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+121 -> 137 ;
+138 [label=<src_bytes &le; 351.5<br/>entropy = 0.907<br/>samples = 595<br/>value = [192, 403]<br/>class = Abnormal>, fillcolor="#97ccf1"] ;
+62 -> 138 ;
+139 [label=<dst_host_diff_srv_rate &le; 0.33<br/>entropy = 0.047<br/>samples = 193<br/>value = [192, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
+138 -> 139 ;
+140 [label=<entropy = 0.0<br/>samples = 190<br/>value = [190, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+139 -> 140 ;
+141 [label=<dst_host_diff_srv_rate &le; 0.72<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+139 -> 141 ;
+142 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+141 -> 142 ;
+143 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+141 -> 143 ;
+144 [label=<entropy = 0.0<br/>samples = 402<br/>value = [0, 402]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+138 -> 144 ;
+}
diff --git a/experiment/decision tree classifier/output/decision tree max depth.png b/experiment/decision tree classifier/output/decision tree max depth.png
new file mode 100644
index 0000000000000000000000000000000000000000..109bc9e32fda9ed390a0353057c5d9408472e253
Binary files /dev/null and b/experiment/decision tree classifier/output/decision tree max depth.png differ
diff --git a/experiment/decision tree classifier/output/decision tree.jpg b/experiment/decision tree classifier/output/decision tree.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..6e9c8c9f6a92d8d3eec9d8a793fbc8fa7a9d0a2a
Binary files /dev/null and b/experiment/decision tree classifier/output/decision tree.jpg differ
diff --git a/experiment/decision tree classifier/output/default decision tree.svg b/experiment/decision tree classifier/output/default decision tree.svg
deleted file mode 100644
index 99aa1656329635bb009b4f7cba7538497934b766..0000000000000000000000000000000000000000
--- a/experiment/decision tree classifier/output/default decision tree.svg	
+++ /dev/null
@@ -1,3830 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 2.38.0 (20140413.2041)
- -->
-<!-- Title: Tree Pages: 1 -->
-<svg width="7021pt" height="2099pt"
- viewBox="0.00 0.00 7021.00 2099.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 2095)">
-<title>Tree</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-2095 7017,-2095 7017,4 -4,4"/>
-<!-- 0 -->
-<g id="node1" class="node"><title>0</title>
-<path fill="#fcefe6" stroke="black" d="M4909,-2091C4909,-2091 4770,-2091 4770,-2091 4764,-2091 4758,-2085 4758,-2079 4758,-2079 4758,-2020 4758,-2020 4758,-2014 4764,-2008 4770,-2008 4770,-2008 4909,-2008 4909,-2008 4915,-2008 4921,-2014 4921,-2020 4921,-2020 4921,-2079 4921,-2079 4921,-2085 4915,-2091 4909,-2091"/>
-<text text-anchor="start" x="4784" y="-2075.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="4802" y="-2060.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.498</text>
-<text text-anchor="start" x="4783.5" y="-2045.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 25192</text>
-<text text-anchor="start" x="4766" y="-2030.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13449, 11743]</text>
-<text text-anchor="start" x="4810.5" y="-2015.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 1 -->
-<g id="node2" class="node"><title>1</title>
-<path fill="#4aa6e7" stroke="black" d="M4693,-1972C4693,-1972 4524,-1972 4524,-1972 4518,-1972 4512,-1966 4512,-1960 4512,-1960 4512,-1901 4512,-1901 4512,-1895 4518,-1889 4524,-1889 4524,-1889 4693,-1889 4693,-1889 4699,-1889 4705,-1895 4705,-1901 4705,-1901 4705,-1960 4705,-1960 4705,-1966 4699,-1972 4693,-1972"/>
-<text text-anchor="start" x="4520" y="-1956.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.844</text>
-<text text-anchor="start" x="4571" y="-1941.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.147</text>
-<text text-anchor="start" x="4552.5" y="-1926.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11644</text>
-<text text-anchor="start" x="4543.5" y="-1911.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [932, 10712]</text>
-<text text-anchor="start" x="4579.5" y="-1896.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 0&#45;&gt;1 -->
-<g id="edge1" class="edge"><title>0&#45;&gt;1</title>
-<path fill="none" stroke="black" d="M4759.36,-2007.91C4739.38,-1997.79 4717.84,-1986.88 4697.46,-1976.56"/>
-<polygon fill="black" stroke="black" points="4699.01,-1973.42 4688.5,-1972.02 4695.84,-1979.66 4699.01,-1973.42"/>
-<text text-anchor="middle" x="4696.29" y="-1992.08" font-family="Helvetica,sans-Serif" font-size="14.00">True</text>
-</g>
-<!-- 116 -->
-<g id="node117" class="node"><title>116</title>
-<path fill="#e78b49" stroke="black" d="M5905,-1972C5905,-1972 5774,-1972 5774,-1972 5768,-1972 5762,-1966 5762,-1960 5762,-1960 5762,-1901 5762,-1901 5762,-1895 5768,-1889 5774,-1889 5774,-1889 5905,-1889 5905,-1889 5911,-1889 5917,-1895 5917,-1901 5917,-1901 5917,-1960 5917,-1960 5917,-1966 5911,-1972 5905,-1972"/>
-<text text-anchor="start" x="5782.5" y="-1956.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 4.185</text>
-<text text-anchor="start" x="5802" y="-1941.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.141</text>
-<text text-anchor="start" x="5783.5" y="-1926.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13548</text>
-<text text-anchor="start" x="5770" y="-1911.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12517, 1031]</text>
-<text text-anchor="start" x="5810.5" y="-1896.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 0&#45;&gt;116 -->
-<g id="edge116" class="edge"><title>0&#45;&gt;116</title>
-<path fill="none" stroke="black" d="M4921.33,-2038.93C5107.27,-2017.17 5560.22,-1964.18 5751.72,-1941.77"/>
-<polygon fill="black" stroke="black" points="5752.22,-1945.24 5761.74,-1940.6 5751.4,-1938.28 5752.22,-1945.24"/>
-<text text-anchor="middle" x="5746.24" y="-1956.51" font-family="Helvetica,sans-Serif" font-size="14.00">False</text>
-</g>
-<!-- 2 -->
-<g id="node3" class="node"><title>2</title>
-<path fill="#43a2e6" stroke="black" d="M3990.5,-1853C3990.5,-1853 3868.5,-1853 3868.5,-1853 3862.5,-1853 3856.5,-1847 3856.5,-1841 3856.5,-1841 3856.5,-1782 3856.5,-1782 3856.5,-1776 3862.5,-1770 3868.5,-1770 3868.5,-1770 3990.5,-1770 3990.5,-1770 3996.5,-1770 4002.5,-1776 4002.5,-1782 4002.5,-1782 4002.5,-1841 4002.5,-1841 4002.5,-1847 3996.5,-1853 3990.5,-1853"/>
-<text text-anchor="start" x="3870" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.039</text>
-<text text-anchor="start" x="3892" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.092</text>
-<text text-anchor="start" x="3873.5" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11157</text>
-<text text-anchor="start" x="3864.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [542, 10615]</text>
-<text text-anchor="start" x="3900.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 1&#45;&gt;2 -->
-<g id="edge2" class="edge"><title>1&#45;&gt;2</title>
-<path fill="none" stroke="black" d="M4511.94,-1912.86C4378.26,-1889.83 4139.05,-1848.61 4012.8,-1826.85"/>
-<polygon fill="black" stroke="black" points="4013.25,-1823.38 4002.8,-1825.13 4012.06,-1830.28 4013.25,-1823.38"/>
-</g>
-<!-- 111 -->
-<g id="node112" class="node"><title>111</title>
-<path fill="#eba06a" stroke="black" d="M4660,-1853C4660,-1853 4557,-1853 4557,-1853 4551,-1853 4545,-1847 4545,-1841 4545,-1841 4545,-1782 4545,-1782 4545,-1776 4551,-1770 4557,-1770 4557,-1770 4660,-1770 4660,-1770 4666,-1770 4672,-1776 4672,-1782 4672,-1782 4672,-1841 4672,-1841 4672,-1847 4666,-1853 4660,-1853"/>
-<text text-anchor="start" x="4553" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="4571" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.319</text>
-<text text-anchor="start" x="4561" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 487</text>
-<text text-anchor="start" x="4555.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [390, 97]</text>
-<text text-anchor="start" x="4579.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 1&#45;&gt;111 -->
-<g id="edge111" class="edge"><title>1&#45;&gt;111</title>
-<path fill="none" stroke="black" d="M4608.5,-1888.91C4608.5,-1880.65 4608.5,-1871.86 4608.5,-1863.3"/>
-<polygon fill="black" stroke="black" points="4612,-1863.02 4608.5,-1853.02 4605,-1863.02 4612,-1863.02"/>
-</g>
-<!-- 3 -->
-<g id="node4" class="node"><title>3</title>
-<path fill="#40a0e6" stroke="black" d="M3213.5,-1734C3213.5,-1734 3091.5,-1734 3091.5,-1734 3085.5,-1734 3079.5,-1728 3079.5,-1722 3079.5,-1722 3079.5,-1663 3079.5,-1663 3079.5,-1657 3085.5,-1651 3091.5,-1651 3091.5,-1651 3213.5,-1651 3213.5,-1651 3219.5,-1651 3225.5,-1657 3225.5,-1663 3225.5,-1663 3225.5,-1722 3225.5,-1722 3225.5,-1728 3219.5,-1734 3213.5,-1734"/>
-<text text-anchor="start" x="3095" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
-<text text-anchor="start" x="3115" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.066</text>
-<text text-anchor="start" x="3096.5" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10943</text>
-<text text-anchor="start" x="3087.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [371, 10572]</text>
-<text text-anchor="start" x="3123.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 2&#45;&gt;3 -->
-<g id="edge3" class="edge"><title>2&#45;&gt;3</title>
-<path fill="none" stroke="black" d="M3856.4,-1799.49C3711.55,-1777.68 3388.87,-1729.09 3235.95,-1706.07"/>
-<polygon fill="black" stroke="black" points="3236.1,-1702.55 3225.69,-1704.52 3235.05,-1709.47 3236.1,-1702.55"/>
-</g>
-<!-- 92 -->
-<g id="node93" class="node"><title>92</title>
-<path fill="#eca16b" stroke="black" d="M4016.5,-1734C4016.5,-1734 3842.5,-1734 3842.5,-1734 3836.5,-1734 3830.5,-1728 3830.5,-1722 3830.5,-1722 3830.5,-1663 3830.5,-1663 3830.5,-1657 3836.5,-1651 3842.5,-1651 3842.5,-1651 4016.5,-1651 4016.5,-1651 4022.5,-1651 4028.5,-1657 4028.5,-1663 4028.5,-1663 4028.5,-1722 4028.5,-1722 4028.5,-1728 4022.5,-1734 4016.5,-1734"/>
-<text text-anchor="start" x="3838.5" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.089</text>
-<text text-anchor="start" x="3892" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.321</text>
-<text text-anchor="start" x="3882" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 214</text>
-<text text-anchor="start" x="3876.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [171, 43]</text>
-<text text-anchor="start" x="3900.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 2&#45;&gt;92 -->
-<g id="edge92" class="edge"><title>2&#45;&gt;92</title>
-<path fill="none" stroke="black" d="M3929.5,-1769.91C3929.5,-1761.65 3929.5,-1752.86 3929.5,-1744.3"/>
-<polygon fill="black" stroke="black" points="3933,-1744.02 3929.5,-1734.02 3926,-1744.02 3933,-1744.02"/>
-</g>
-<!-- 4 -->
-<g id="node5" class="node"><title>4</title>
-<path fill="#3fa0e6" stroke="black" d="M2688.5,-1615C2688.5,-1615 2482.5,-1615 2482.5,-1615 2476.5,-1615 2470.5,-1609 2470.5,-1603 2470.5,-1603 2470.5,-1544 2470.5,-1544 2470.5,-1538 2476.5,-1532 2482.5,-1532 2482.5,-1532 2688.5,-1532 2688.5,-1532 2694.5,-1532 2700.5,-1538 2700.5,-1544 2700.5,-1544 2700.5,-1603 2700.5,-1603 2700.5,-1609 2694.5,-1615 2688.5,-1615"/>
-<text text-anchor="start" x="2478.5" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ &#45;0.456</text>
-<text text-anchor="start" x="2548" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.054</text>
-<text text-anchor="start" x="2529.5" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10872</text>
-<text text-anchor="start" x="2520.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [304, 10568]</text>
-<text text-anchor="start" x="2556.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 3&#45;&gt;4 -->
-<g id="edge4" class="edge"><title>3&#45;&gt;4</title>
-<path fill="none" stroke="black" d="M3079.25,-1676.38C2986.04,-1657.15 2823.6,-1623.63 2710.61,-1600.32"/>
-<polygon fill="black" stroke="black" points="2711.02,-1596.83 2700.51,-1598.23 2709.6,-1603.68 2711.02,-1596.83"/>
-</g>
-<!-- 89 -->
-<g id="node90" class="node"><title>89</title>
-<path fill="#e78945" stroke="black" d="M3246,-1615C3246,-1615 3059,-1615 3059,-1615 3053,-1615 3047,-1609 3047,-1603 3047,-1603 3047,-1544 3047,-1544 3047,-1538 3053,-1532 3059,-1532 3059,-1532 3246,-1532 3246,-1532 3252,-1532 3258,-1538 3258,-1544 3258,-1544 3258,-1603 3258,-1603 3258,-1609 3252,-1615 3246,-1615"/>
-<text text-anchor="start" x="3055" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 3.566</text>
-<text text-anchor="start" x="3115" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.106</text>
-<text text-anchor="start" x="3109" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 71</text>
-<text text-anchor="start" x="3108" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [67, 4]</text>
-<text text-anchor="start" x="3123.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 3&#45;&gt;89 -->
-<g id="edge89" class="edge"><title>3&#45;&gt;89</title>
-<path fill="none" stroke="black" d="M3152.5,-1650.91C3152.5,-1642.65 3152.5,-1633.86 3152.5,-1625.3"/>
-<polygon fill="black" stroke="black" points="3156,-1625.02 3152.5,-1615.02 3149,-1625.02 3156,-1625.02"/>
-</g>
-<!-- 5 -->
-<g id="node6" class="node"><title>5</title>
-<path fill="#3a9ee5" stroke="black" d="M1398.5,-1496C1398.5,-1496 1292.5,-1496 1292.5,-1496 1286.5,-1496 1280.5,-1490 1280.5,-1484 1280.5,-1484 1280.5,-1425 1280.5,-1425 1280.5,-1419 1286.5,-1413 1292.5,-1413 1292.5,-1413 1398.5,-1413 1398.5,-1413 1404.5,-1413 1410.5,-1419 1410.5,-1425 1410.5,-1425 1410.5,-1484 1410.5,-1484 1410.5,-1490 1404.5,-1496 1398.5,-1496"/>
-<text text-anchor="start" x="1290" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="1308" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.013</text>
-<text text-anchor="start" x="1294" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9718</text>
-<text text-anchor="start" x="1288.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [63, 9655]</text>
-<text text-anchor="start" x="1316.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 4&#45;&gt;5 -->
-<g id="edge5" class="edge"><title>4&#45;&gt;5</title>
-<path fill="none" stroke="black" d="M2470.24,-1561.62C2219.45,-1537.96 1630.02,-1482.35 1420.8,-1462.6"/>
-<polygon fill="black" stroke="black" points="1421.11,-1459.12 1410.83,-1461.66 1420.45,-1466.09 1421.11,-1459.12"/>
-</g>
-<!-- 48 -->
-<g id="node49" class="node"><title>48</title>
-<path fill="#6db7ec" stroke="black" d="M2688.5,-1496C2688.5,-1496 2482.5,-1496 2482.5,-1496 2476.5,-1496 2470.5,-1490 2470.5,-1484 2470.5,-1484 2470.5,-1425 2470.5,-1425 2470.5,-1419 2476.5,-1413 2482.5,-1413 2482.5,-1413 2688.5,-1413 2688.5,-1413 2694.5,-1413 2700.5,-1419 2700.5,-1425 2700.5,-1425 2700.5,-1484 2700.5,-1484 2700.5,-1490 2694.5,-1496 2688.5,-1496"/>
-<text text-anchor="start" x="2478.5" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_rerror_rate ≤ &#45;0.295</text>
-<text text-anchor="start" x="2552" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.33</text>
-<text text-anchor="start" x="2534" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1154</text>
-<text text-anchor="start" x="2528.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [241, 913]</text>
-<text text-anchor="start" x="2556.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 4&#45;&gt;48 -->
-<g id="edge48" class="edge"><title>4&#45;&gt;48</title>
-<path fill="none" stroke="black" d="M2585.5,-1531.91C2585.5,-1523.65 2585.5,-1514.86 2585.5,-1506.3"/>
-<polygon fill="black" stroke="black" points="2589,-1506.02 2585.5,-1496.02 2582,-1506.02 2589,-1506.02"/>
-</g>
-<!-- 6 -->
-<g id="node7" class="node"><title>6</title>
-<path fill="#3a9de5" stroke="black" d="M1064.5,-1377C1064.5,-1377 958.5,-1377 958.5,-1377 952.5,-1377 946.5,-1371 946.5,-1365 946.5,-1365 946.5,-1306 946.5,-1306 946.5,-1300 952.5,-1294 958.5,-1294 958.5,-1294 1064.5,-1294 1064.5,-1294 1070.5,-1294 1076.5,-1300 1076.5,-1306 1076.5,-1306 1076.5,-1365 1076.5,-1365 1076.5,-1371 1070.5,-1377 1064.5,-1377"/>
-<text text-anchor="start" x="970" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ &#45;0.69</text>
-<text text-anchor="start" x="974" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
-<text text-anchor="start" x="960" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9549</text>
-<text text-anchor="start" x="954.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [33, 9516]</text>
-<text text-anchor="start" x="982.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 5&#45;&gt;6 -->
-<g id="edge6" class="edge"><title>5&#45;&gt;6</title>
-<path fill="none" stroke="black" d="M1280.31,-1430.66C1224.56,-1411.13 1144.34,-1383.03 1086.05,-1362.61"/>
-<polygon fill="black" stroke="black" points="1087.12,-1359.28 1076.53,-1359.28 1084.81,-1365.89 1087.12,-1359.28"/>
-</g>
-<!-- 35 -->
-<g id="node36" class="node"><title>35</title>
-<path fill="#64b2eb" stroke="black" d="M1397,-1377C1397,-1377 1294,-1377 1294,-1377 1288,-1377 1282,-1371 1282,-1365 1282,-1365 1282,-1306 1282,-1306 1282,-1300 1288,-1294 1294,-1294 1294,-1294 1397,-1294 1397,-1294 1403,-1294 1409,-1300 1409,-1306 1409,-1306 1409,-1365 1409,-1365 1409,-1371 1403,-1377 1397,-1377"/>
-<text text-anchor="start" x="1290" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="1308" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.292</text>
-<text text-anchor="start" x="1298" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 169</text>
-<text text-anchor="start" x="1292.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 139]</text>
-<text text-anchor="start" x="1316.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 5&#45;&gt;35 -->
-<g id="edge35" class="edge"><title>5&#45;&gt;35</title>
-<path fill="none" stroke="black" d="M1345.5,-1412.91C1345.5,-1404.65 1345.5,-1395.86 1345.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="1349,-1387.02 1345.5,-1377.02 1342,-1387.02 1349,-1387.02"/>
-</g>
-<!-- 7 -->
-<g id="node8" class="node"><title>7</title>
-<path fill="#42a2e6" stroke="black" d="M897,-1258C897,-1258 706,-1258 706,-1258 700,-1258 694,-1252 694,-1246 694,-1246 694,-1187 694,-1187 694,-1181 700,-1175 706,-1175 706,-1175 897,-1175 897,-1175 903,-1175 909,-1181 909,-1187 909,-1187 909,-1246 909,-1246 909,-1252 903,-1258 897,-1258"/>
-<text text-anchor="start" x="702" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ &#45;0.094</text>
-<text text-anchor="start" x="764" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.084</text>
-<text text-anchor="start" x="754" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 747</text>
-<text text-anchor="start" x="748.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [33, 714]</text>
-<text text-anchor="start" x="772.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 6&#45;&gt;7 -->
-<g id="edge7" class="edge"><title>6&#45;&gt;7</title>
-<path fill="none" stroke="black" d="M946.493,-1298.28C926.467,-1287.12 904.158,-1274.7 883.162,-1263"/>
-<polygon fill="black" stroke="black" points="884.693,-1259.84 874.254,-1258.03 881.286,-1265.96 884.693,-1259.84"/>
-</g>
-<!-- 34 -->
-<g id="node35" class="node"><title>34</title>
-<path fill="#399de5" stroke="black" d="M1060.5,-1250.5C1060.5,-1250.5 962.5,-1250.5 962.5,-1250.5 956.5,-1250.5 950.5,-1244.5 950.5,-1238.5 950.5,-1238.5 950.5,-1194.5 950.5,-1194.5 950.5,-1188.5 956.5,-1182.5 962.5,-1182.5 962.5,-1182.5 1060.5,-1182.5 1060.5,-1182.5 1066.5,-1182.5 1072.5,-1188.5 1072.5,-1194.5 1072.5,-1194.5 1072.5,-1238.5 1072.5,-1238.5 1072.5,-1244.5 1066.5,-1250.5 1060.5,-1250.5"/>
-<text text-anchor="start" x="982.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="960" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8802</text>
-<text text-anchor="start" x="958.5" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 8802]</text>
-<text text-anchor="start" x="982.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 6&#45;&gt;34 -->
-<g id="edge34" class="edge"><title>6&#45;&gt;34</title>
-<path fill="none" stroke="black" d="M1011.5,-1293.91C1011.5,-1283.2 1011.5,-1271.62 1011.5,-1260.78"/>
-<polygon fill="black" stroke="black" points="1015,-1260.67 1011.5,-1250.67 1008,-1260.67 1015,-1260.67"/>
-</g>
-<!-- 8 -->
-<g id="node9" class="node"><title>8</title>
-<path fill="#a7d3f3" stroke="black" d="M648,-1139C648,-1139 471,-1139 471,-1139 465,-1139 459,-1133 459,-1127 459,-1127 459,-1068 459,-1068 459,-1062 465,-1056 471,-1056 471,-1056 648,-1056 648,-1056 654,-1056 660,-1062 660,-1068 660,-1068 660,-1127 660,-1127 660,-1133 654,-1139 648,-1139"/>
-<text text-anchor="start" x="467" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ 1.536</text>
-<text text-anchor="start" x="522" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.459</text>
-<text text-anchor="start" x="516" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 56</text>
-<text text-anchor="start" x="511" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [20, 36]</text>
-<text text-anchor="start" x="530.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 7&#45;&gt;8 -->
-<g id="edge8" class="edge"><title>7&#45;&gt;8</title>
-<path fill="none" stroke="black" d="M717.539,-1174.91C696.516,-1164.74 673.842,-1153.78 652.412,-1143.42"/>
-<polygon fill="black" stroke="black" points="653.839,-1140.22 643.312,-1139.02 650.792,-1146.52 653.839,-1140.22"/>
-</g>
-<!-- 19 -->
-<g id="node20" class="node"><title>19</title>
-<path fill="#3d9fe5" stroke="black" d="M900.5,-1139C900.5,-1139 702.5,-1139 702.5,-1139 696.5,-1139 690.5,-1133 690.5,-1127 690.5,-1127 690.5,-1068 690.5,-1068 690.5,-1062 696.5,-1056 702.5,-1056 702.5,-1056 900.5,-1056 900.5,-1056 906.5,-1056 912.5,-1062 912.5,-1068 912.5,-1068 912.5,-1127 912.5,-1127 912.5,-1133 906.5,-1139 900.5,-1139"/>
-<text text-anchor="start" x="698.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ &#45;0.69</text>
-<text text-anchor="start" x="764" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.037</text>
-<text text-anchor="start" x="754" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 691</text>
-<text text-anchor="start" x="748.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13, 678]</text>
-<text text-anchor="start" x="772.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 7&#45;&gt;19 -->
-<g id="edge19" class="edge"><title>7&#45;&gt;19</title>
-<path fill="none" stroke="black" d="M801.5,-1174.91C801.5,-1166.65 801.5,-1157.86 801.5,-1149.3"/>
-<polygon fill="black" stroke="black" points="805,-1149.02 801.5,-1139.02 798,-1149.02 805,-1149.02"/>
-</g>
-<!-- 9 -->
-<g id="node10" class="node"><title>9</title>
-<path fill="#f2c09c" stroke="black" d="M477,-1020C477,-1020 304,-1020 304,-1020 298,-1020 292,-1014 292,-1008 292,-1008 292,-949 292,-949 292,-943 298,-937 304,-937 304,-937 477,-937 477,-937 483,-937 489,-943 489,-949 489,-949 489,-1008 489,-1008 489,-1014 483,-1020 477,-1020"/>
-<text text-anchor="start" x="300" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;1.017</text>
-<text text-anchor="start" x="353" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="347" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 30</text>
-<text text-anchor="start" x="342" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [20, 10]</text>
-<text text-anchor="start" x="361.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 8&#45;&gt;9 -->
-<g id="edge9" class="edge"><title>8&#45;&gt;9</title>
-<path fill="none" stroke="black" d="M500.866,-1055.91C486.84,-1046.2 471.762,-1035.76 457.394,-1025.81"/>
-<polygon fill="black" stroke="black" points="459.244,-1022.84 449.03,-1020.02 455.26,-1028.59 459.244,-1022.84"/>
-</g>
-<!-- 18 -->
-<g id="node19" class="node"><title>18</title>
-<path fill="#399de5" stroke="black" d="M600,-1012.5C600,-1012.5 519,-1012.5 519,-1012.5 513,-1012.5 507,-1006.5 507,-1000.5 507,-1000.5 507,-956.5 507,-956.5 507,-950.5 513,-944.5 519,-944.5 519,-944.5 600,-944.5 600,-944.5 606,-944.5 612,-950.5 612,-956.5 612,-956.5 612,-1000.5 612,-1000.5 612,-1006.5 606,-1012.5 600,-1012.5"/>
-<text text-anchor="start" x="530.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="516" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 26</text>
-<text text-anchor="start" x="515" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 26]</text>
-<text text-anchor="start" x="530.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 8&#45;&gt;18 -->
-<g id="edge18" class="edge"><title>8&#45;&gt;18</title>
-<path fill="none" stroke="black" d="M559.5,-1055.91C559.5,-1045.2 559.5,-1033.62 559.5,-1022.78"/>
-<polygon fill="black" stroke="black" points="563,-1022.67 559.5,-1012.67 556,-1022.67 563,-1022.67"/>
-</g>
-<!-- 10 -->
-<g id="node11" class="node"><title>10</title>
-<path fill="#91c9f1" stroke="black" d="M309,-901C309,-901 130,-901 130,-901 124,-901 118,-895 118,-889 118,-889 118,-830 118,-830 118,-824 124,-818 130,-818 130,-818 309,-818 309,-818 315,-818 321,-824 321,-830 321,-830 321,-889 321,-889 321,-895 315,-901 309,-901"/>
-<text text-anchor="start" x="126" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ &#45;0.336</text>
-<text text-anchor="start" x="182" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.426</text>
-<text text-anchor="start" x="176" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13</text>
-<text text-anchor="start" x="179" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 9]</text>
-<text text-anchor="start" x="190.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 9&#45;&gt;10 -->
-<g id="edge10" class="edge"><title>9&#45;&gt;10</title>
-<path fill="none" stroke="black" d="M331.172,-936.907C316.98,-927.197 301.724,-916.758 287.186,-906.811"/>
-<polygon fill="black" stroke="black" points="288.952,-903.779 278.723,-901.021 284.999,-909.556 288.952,-903.779"/>
-</g>
-<!-- 15 -->
-<g id="node16" class="node"><title>15</title>
-<path fill="#e78945" stroke="black" d="M454,-901C454,-901 351,-901 351,-901 345,-901 339,-895 339,-889 339,-889 339,-830 339,-830 339,-824 345,-818 351,-818 351,-818 454,-818 454,-818 460,-818 466,-824 466,-830 466,-830 466,-889 466,-889 466,-895 460,-901 454,-901"/>
-<text text-anchor="start" x="347" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="365" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.111</text>
-<text text-anchor="start" x="359" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 17</text>
-<text text-anchor="start" x="358" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [16, 1]</text>
-<text text-anchor="start" x="373.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 9&#45;&gt;15 -->
-<g id="edge15" class="edge"><title>9&#45;&gt;15</title>
-<path fill="none" stroke="black" d="M394.663,-936.907C395.52,-928.558 396.431,-919.671 397.318,-911.02"/>
-<polygon fill="black" stroke="black" points="400.805,-911.326 398.344,-901.021 393.842,-910.611 400.805,-911.326"/>
-</g>
-<!-- 11 -->
-<g id="node12" class="node"><title>11</title>
-<path fill="#f2c09c" stroke="black" d="M157,-782C157,-782 54,-782 54,-782 48,-782 42,-776 42,-770 42,-770 42,-711 42,-711 42,-705 48,-699 54,-699 54,-699 157,-699 157,-699 163,-699 169,-705 169,-711 169,-711 169,-770 169,-770 169,-776 163,-782 157,-782"/>
-<text text-anchor="start" x="50" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="68" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="66" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="65" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
-<text text-anchor="start" x="76.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 10&#45;&gt;11 -->
-<g id="edge11" class="edge"><title>10&#45;&gt;11</title>
-<path fill="none" stroke="black" d="M179.948,-817.907C170.929,-808.651 161.265,-798.732 151.986,-789.209"/>
-<polygon fill="black" stroke="black" points="154.467,-786.741 144.982,-782.021 149.454,-791.626 154.467,-786.741"/>
-</g>
-<!-- 14 -->
-<g id="node15" class="node"><title>14</title>
-<path fill="#399de5" stroke="black" d="M272,-774.5C272,-774.5 199,-774.5 199,-774.5 193,-774.5 187,-768.5 187,-762.5 187,-762.5 187,-718.5 187,-718.5 187,-712.5 193,-706.5 199,-706.5 199,-706.5 272,-706.5 272,-706.5 278,-706.5 284,-712.5 284,-718.5 284,-718.5 284,-762.5 284,-762.5 284,-768.5 278,-774.5 272,-774.5"/>
-<text text-anchor="start" x="206.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="196" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="195" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 7]</text>
-<text text-anchor="start" x="206.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 10&#45;&gt;14 -->
-<g id="edge14" class="edge"><title>10&#45;&gt;14</title>
-<path fill="none" stroke="black" d="M225.051,-817.907C226.515,-807.204 228.1,-795.615 229.582,-784.776"/>
-<polygon fill="black" stroke="black" points="233.077,-785.049 230.964,-774.667 226.142,-784.1 233.077,-785.049"/>
-</g>
-<!-- 12 -->
-<g id="node13" class="node"><title>12</title>
-<path fill="#e58139" stroke="black" d="M85,-655.5C85,-655.5 12,-655.5 12,-655.5 6,-655.5 0,-649.5 0,-643.5 0,-643.5 0,-599.5 0,-599.5 0,-593.5 6,-587.5 12,-587.5 12,-587.5 85,-587.5 85,-587.5 91,-587.5 97,-593.5 97,-599.5 97,-599.5 97,-643.5 97,-643.5 97,-649.5 91,-655.5 85,-655.5"/>
-<text text-anchor="start" x="19.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="9" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="8" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
-<text text-anchor="start" x="19.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 11&#45;&gt;12 -->
-<g id="edge12" class="edge"><title>11&#45;&gt;12</title>
-<path fill="none" stroke="black" d="M85.7241,-698.907C80.3484,-687.873 74.5143,-675.898 69.0944,-664.773"/>
-<polygon fill="black" stroke="black" points="72.1845,-663.124 64.6583,-655.667 65.8915,-666.19 72.1845,-663.124"/>
-</g>
-<!-- 13 -->
-<g id="node14" class="node"><title>13</title>
-<path fill="#399de5" stroke="black" d="M200,-655.5C200,-655.5 127,-655.5 127,-655.5 121,-655.5 115,-649.5 115,-643.5 115,-643.5 115,-599.5 115,-599.5 115,-593.5 121,-587.5 127,-587.5 127,-587.5 200,-587.5 200,-587.5 206,-587.5 212,-593.5 212,-599.5 212,-599.5 212,-643.5 212,-643.5 212,-649.5 206,-655.5 200,-655.5"/>
-<text text-anchor="start" x="134.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="124" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="123" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="134.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 11&#45;&gt;13 -->
-<g id="edge13" class="edge"><title>11&#45;&gt;13</title>
-<path fill="none" stroke="black" d="M125.623,-698.907C131.093,-687.873 137.029,-675.898 142.544,-664.773"/>
-<polygon fill="black" stroke="black" points="145.753,-666.181 147.058,-655.667 139.481,-663.072 145.753,-666.181"/>
-</g>
-<!-- 16 -->
-<g id="node17" class="node"><title>16</title>
-<path fill="#e58139" stroke="black" d="M411,-774.5C411,-774.5 330,-774.5 330,-774.5 324,-774.5 318,-768.5 318,-762.5 318,-762.5 318,-718.5 318,-718.5 318,-712.5 324,-706.5 330,-706.5 330,-706.5 411,-706.5 411,-706.5 417,-706.5 423,-712.5 423,-718.5 423,-718.5 423,-762.5 423,-762.5 423,-768.5 417,-774.5 411,-774.5"/>
-<text text-anchor="start" x="341.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="327" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 16</text>
-<text text-anchor="start" x="326" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [16, 0]</text>
-<text text-anchor="start" x="341.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 15&#45;&gt;16 -->
-<g id="edge16" class="edge"><title>15&#45;&gt;16</title>
-<path fill="none" stroke="black" d="M391.398,-817.907C388.44,-807.094 385.235,-795.376 382.245,-784.441"/>
-<polygon fill="black" stroke="black" points="385.586,-783.389 379.571,-774.667 378.834,-785.236 385.586,-783.389"/>
-</g>
-<!-- 17 -->
-<g id="node18" class="node"><title>17</title>
-<path fill="#399de5" stroke="black" d="M526,-774.5C526,-774.5 453,-774.5 453,-774.5 447,-774.5 441,-768.5 441,-762.5 441,-762.5 441,-718.5 441,-718.5 441,-712.5 447,-706.5 453,-706.5 453,-706.5 526,-706.5 526,-706.5 532,-706.5 538,-712.5 538,-718.5 538,-718.5 538,-762.5 538,-762.5 538,-768.5 532,-774.5 526,-774.5"/>
-<text text-anchor="start" x="460.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="450" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="449" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="460.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 15&#45;&gt;17 -->
-<g id="edge17" class="edge"><title>15&#45;&gt;17</title>
-<path fill="none" stroke="black" d="M432.684,-817.907C441.136,-806.542 450.329,-794.178 458.809,-782.774"/>
-<polygon fill="black" stroke="black" points="461.679,-784.78 464.837,-774.667 456.062,-780.603 461.679,-784.78"/>
-</g>
-<!-- 20 -->
-<g id="node21" class="node"><title>20</title>
-<path fill="#3c9ee5" stroke="black" d="M842.5,-1020C842.5,-1020 642.5,-1020 642.5,-1020 636.5,-1020 630.5,-1014 630.5,-1008 630.5,-1008 630.5,-949 630.5,-949 630.5,-943 636.5,-937 642.5,-937 642.5,-937 842.5,-937 842.5,-937 848.5,-937 854.5,-943 854.5,-949 854.5,-949 854.5,-1008 854.5,-1008 854.5,-1014 848.5,-1020 842.5,-1020"/>
-<text text-anchor="start" x="638.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.56</text>
-<text text-anchor="start" x="705" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.026</text>
-<text text-anchor="start" x="695" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 684</text>
-<text text-anchor="start" x="694" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 675]</text>
-<text text-anchor="start" x="713.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 19&#45;&gt;20 -->
-<g id="edge20" class="edge"><title>19&#45;&gt;20</title>
-<path fill="none" stroke="black" d="M781.03,-1055.91C776.683,-1047.29 772.046,-1038.09 767.55,-1029.17"/>
-<polygon fill="black" stroke="black" points="770.561,-1027.37 762.934,-1020.02 764.311,-1030.53 770.561,-1027.37"/>
-</g>
-<!-- 31 -->
-<g id="node32" class="node"><title>31</title>
-<path fill="#f8e0ce" stroke="black" d="M1120.5,-1020C1120.5,-1020 884.5,-1020 884.5,-1020 878.5,-1020 872.5,-1014 872.5,-1008 872.5,-1008 872.5,-949 872.5,-949 872.5,-943 878.5,-937 884.5,-937 884.5,-937 1120.5,-937 1120.5,-937 1126.5,-937 1132.5,-943 1132.5,-949 1132.5,-949 1132.5,-1008 1132.5,-1008 1132.5,-1014 1126.5,-1020 1120.5,-1020"/>
-<text text-anchor="start" x="880.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 0.138</text>
-<text text-anchor="start" x="969" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.49</text>
-<text text-anchor="start" x="963" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="962" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 3]</text>
-<text text-anchor="start" x="973.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 19&#45;&gt;31 -->
-<g id="edge31" class="edge"><title>19&#45;&gt;31</title>
-<path fill="none" stroke="black" d="M871.236,-1055.91C888.23,-1046.02 906.522,-1035.37 923.897,-1025.25"/>
-<polygon fill="black" stroke="black" points="926.006,-1028.08 932.887,-1020.02 922.484,-1022.03 926.006,-1028.08"/>
-</g>
-<!-- 21 -->
-<g id="node22" class="node"><title>21</title>
-<path fill="#399de5" stroke="black" d="M598,-893.5C598,-893.5 509,-893.5 509,-893.5 503,-893.5 497,-887.5 497,-881.5 497,-881.5 497,-837.5 497,-837.5 497,-831.5 503,-825.5 509,-825.5 509,-825.5 598,-825.5 598,-825.5 604,-825.5 610,-831.5 610,-837.5 610,-837.5 610,-881.5 610,-881.5 610,-887.5 604,-893.5 598,-893.5"/>
-<text text-anchor="start" x="524.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="506" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 602</text>
-<text text-anchor="start" x="505" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 602]</text>
-<text text-anchor="start" x="524.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 20&#45;&gt;21 -->
-<g id="edge21" class="edge"><title>20&#45;&gt;21</title>
-<path fill="none" stroke="black" d="M676.927,-936.907C657.053,-924.604 635.288,-911.131 615.645,-898.971"/>
-<polygon fill="black" stroke="black" points="617.422,-895.955 607.077,-893.667 613.738,-901.906 617.422,-895.955"/>
-</g>
-<!-- 22 -->
-<g id="node23" class="node"><title>22</title>
-<path fill="#51a9e8" stroke="black" d="M844.5,-901C844.5,-901 640.5,-901 640.5,-901 634.5,-901 628.5,-895 628.5,-889 628.5,-889 628.5,-830 628.5,-830 628.5,-824 634.5,-818 640.5,-818 640.5,-818 844.5,-818 844.5,-818 850.5,-818 856.5,-824 856.5,-830 856.5,-830 856.5,-889 856.5,-889 856.5,-895 850.5,-901 844.5,-901"/>
-<text text-anchor="start" x="636.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ 1.245</text>
-<text text-anchor="start" x="705" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.195</text>
-<text text-anchor="start" x="699" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 82</text>
-<text text-anchor="start" x="698" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 73]</text>
-<text text-anchor="start" x="713.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 20&#45;&gt;22 -->
-<g id="edge22" class="edge"><title>20&#45;&gt;22</title>
-<path fill="none" stroke="black" d="M742.5,-936.907C742.5,-928.649 742.5,-919.864 742.5,-911.302"/>
-<polygon fill="black" stroke="black" points="746,-911.021 742.5,-901.021 739,-911.021 746,-911.021"/>
-</g>
-<!-- 23 -->
-<g id="node24" class="node"><title>23</title>
-<path fill="#e58139" stroke="black" d="M711,-774.5C711,-774.5 638,-774.5 638,-774.5 632,-774.5 626,-768.5 626,-762.5 626,-762.5 626,-718.5 626,-718.5 626,-712.5 632,-706.5 638,-706.5 638,-706.5 711,-706.5 711,-706.5 717,-706.5 723,-712.5 723,-718.5 723,-718.5 723,-762.5 723,-762.5 723,-768.5 717,-774.5 711,-774.5"/>
-<text text-anchor="start" x="645.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="635" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="634" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 0]</text>
-<text text-anchor="start" x="645.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 22&#45;&gt;23 -->
-<g id="edge23" class="edge"><title>22&#45;&gt;23</title>
-<path fill="none" stroke="black" d="M718.908,-817.907C712.43,-806.763 705.395,-794.658 698.875,-783.439"/>
-<polygon fill="black" stroke="black" points="701.828,-781.554 693.777,-774.667 695.775,-785.072 701.828,-781.554"/>
-</g>
-<!-- 24 -->
-<g id="node25" class="node"><title>24</title>
-<path fill="#3ea0e6" stroke="black" d="M867.5,-782C867.5,-782 753.5,-782 753.5,-782 747.5,-782 741.5,-776 741.5,-770 741.5,-770 741.5,-711 741.5,-711 741.5,-705 747.5,-699 753.5,-699 753.5,-699 867.5,-699 867.5,-699 873.5,-699 879.5,-705 879.5,-711 879.5,-711 879.5,-770 879.5,-770 879.5,-776 873.5,-782 867.5,-782"/>
-<text text-anchor="start" x="749.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">serror_rate ≤ 1.037</text>
-<text text-anchor="start" x="773" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.052</text>
-<text text-anchor="start" x="767" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 75</text>
-<text text-anchor="start" x="766" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 73]</text>
-<text text-anchor="start" x="781.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 22&#45;&gt;24 -->
-<g id="edge24" class="edge"><title>22&#45;&gt;24</title>
-<path fill="none" stroke="black" d="M766.092,-817.907C771.156,-809.195 776.56,-799.897 781.793,-790.893"/>
-<polygon fill="black" stroke="black" points="784.951,-792.425 786.949,-782.021 778.898,-788.908 784.951,-792.425"/>
-</g>
-<!-- 25 -->
-<g id="node26" class="node"><title>25</title>
-<path fill="#e58139" stroke="black" d="M762,-655.5C762,-655.5 689,-655.5 689,-655.5 683,-655.5 677,-649.5 677,-643.5 677,-643.5 677,-599.5 677,-599.5 677,-593.5 683,-587.5 689,-587.5 689,-587.5 762,-587.5 762,-587.5 768,-587.5 774,-593.5 774,-599.5 774,-599.5 774,-643.5 774,-643.5 774,-649.5 768,-655.5 762,-655.5"/>
-<text text-anchor="start" x="696.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="686" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="685" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="696.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 24&#45;&gt;25 -->
-<g id="edge25" class="edge"><title>24&#45;&gt;25</title>
-<path fill="none" stroke="black" d="M781.01,-698.907C772.753,-687.542 763.771,-675.178 755.485,-663.774"/>
-<polygon fill="black" stroke="black" points="758.305,-661.7 749.596,-655.667 752.642,-665.814 758.305,-661.7"/>
-</g>
-<!-- 26 -->
-<g id="node27" class="node"><title>26</title>
-<path fill="#3c9ee5" stroke="black" d="M986.5,-663C986.5,-663 804.5,-663 804.5,-663 798.5,-663 792.5,-657 792.5,-651 792.5,-651 792.5,-592 792.5,-592 792.5,-586 798.5,-580 804.5,-580 804.5,-580 986.5,-580 986.5,-580 992.5,-580 998.5,-586 998.5,-592 998.5,-592 998.5,-651 998.5,-651 998.5,-657 992.5,-663 986.5,-663"/>
-<text text-anchor="start" x="800.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ &#45;0.586</text>
-<text text-anchor="start" x="858" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.027</text>
-<text text-anchor="start" x="852" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 74</text>
-<text text-anchor="start" x="851" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 73]</text>
-<text text-anchor="start" x="866.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 24&#45;&gt;26 -->
-<g id="edge26" class="edge"><title>24&#45;&gt;26</title>
-<path fill="none" stroke="black" d="M839.99,-698.907C846.451,-690.014 853.357,-680.509 860.024,-671.331"/>
-<polygon fill="black" stroke="black" points="863.016,-673.168 866.062,-663.021 857.353,-669.054 863.016,-673.168"/>
-</g>
-<!-- 27 -->
-<g id="node28" class="node"><title>27</title>
-<path fill="#9ccef2" stroke="black" d="M901,-544C901,-544 714,-544 714,-544 708,-544 702,-538 702,-532 702,-532 702,-473 702,-473 702,-467 708,-461 714,-461 714,-461 901,-461 901,-461 907,-461 913,-467 913,-473 913,-473 913,-532 913,-532 913,-538 907,-544 901,-544"/>
-<text text-anchor="start" x="710" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 2.497</text>
-<text text-anchor="start" x="770" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="768" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="767" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
-<text text-anchor="start" x="778.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 26&#45;&gt;27 -->
-<g id="edge27" class="edge"><title>26&#45;&gt;27</title>
-<path fill="none" stroke="black" d="M864.969,-579.907C858.211,-570.923 850.985,-561.315 844.016,-552.05"/>
-<polygon fill="black" stroke="black" points="846.785,-549.909 837.977,-544.021 841.191,-554.116 846.785,-549.909"/>
-</g>
-<!-- 30 -->
-<g id="node31" class="node"><title>30</title>
-<path fill="#399de5" stroke="black" d="M1024,-536.5C1024,-536.5 943,-536.5 943,-536.5 937,-536.5 931,-530.5 931,-524.5 931,-524.5 931,-480.5 931,-480.5 931,-474.5 937,-468.5 943,-468.5 943,-468.5 1024,-468.5 1024,-468.5 1030,-468.5 1036,-474.5 1036,-480.5 1036,-480.5 1036,-524.5 1036,-524.5 1036,-530.5 1030,-536.5 1024,-536.5"/>
-<text text-anchor="start" x="954.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="940" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 71</text>
-<text text-anchor="start" x="939" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 71]</text>
-<text text-anchor="start" x="954.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 26&#45;&gt;30 -->
-<g id="edge30" class="edge"><title>26&#45;&gt;30</title>
-<path fill="none" stroke="black" d="M926.031,-579.907C934.58,-568.542 943.879,-556.178 952.456,-544.774"/>
-<polygon fill="black" stroke="black" points="955.34,-546.763 958.554,-536.667 949.746,-542.555 955.34,-546.763"/>
-</g>
-<!-- 28 -->
-<g id="node29" class="node"><title>28</title>
-<path fill="#e58139" stroke="black" d="M787,-417.5C787,-417.5 714,-417.5 714,-417.5 708,-417.5 702,-411.5 702,-405.5 702,-405.5 702,-361.5 702,-361.5 702,-355.5 708,-349.5 714,-349.5 714,-349.5 787,-349.5 787,-349.5 793,-349.5 799,-355.5 799,-361.5 799,-361.5 799,-405.5 799,-405.5 799,-411.5 793,-417.5 787,-417.5"/>
-<text text-anchor="start" x="721.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="711" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="710" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="721.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 27&#45;&gt;28 -->
-<g id="edge28" class="edge"><title>27&#45;&gt;28</title>
-<path fill="none" stroke="black" d="M787.724,-460.907C782.348,-449.873 776.514,-437.898 771.094,-426.773"/>
-<polygon fill="black" stroke="black" points="774.184,-425.124 766.658,-417.667 767.892,-428.19 774.184,-425.124"/>
-</g>
-<!-- 29 -->
-<g id="node30" class="node"><title>29</title>
-<path fill="#399de5" stroke="black" d="M902,-417.5C902,-417.5 829,-417.5 829,-417.5 823,-417.5 817,-411.5 817,-405.5 817,-405.5 817,-361.5 817,-361.5 817,-355.5 823,-349.5 829,-349.5 829,-349.5 902,-349.5 902,-349.5 908,-349.5 914,-355.5 914,-361.5 914,-361.5 914,-405.5 914,-405.5 914,-411.5 908,-417.5 902,-417.5"/>
-<text text-anchor="start" x="836.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="826" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="825" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="836.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 27&#45;&gt;29 -->
-<g id="edge29" class="edge"><title>27&#45;&gt;29</title>
-<path fill="none" stroke="black" d="M827.623,-460.907C833.093,-449.873 839.029,-437.898 844.544,-426.773"/>
-<polygon fill="black" stroke="black" points="847.753,-428.181 849.058,-417.667 841.481,-425.072 847.753,-428.181"/>
-</g>
-<!-- 32 -->
-<g id="node33" class="node"><title>32</title>
-<path fill="#e58139" stroke="black" d="M960,-893.5C960,-893.5 887,-893.5 887,-893.5 881,-893.5 875,-887.5 875,-881.5 875,-881.5 875,-837.5 875,-837.5 875,-831.5 881,-825.5 887,-825.5 887,-825.5 960,-825.5 960,-825.5 966,-825.5 972,-831.5 972,-837.5 972,-837.5 972,-881.5 972,-881.5 972,-887.5 966,-893.5 960,-893.5"/>
-<text text-anchor="start" x="894.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="884" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="883" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
-<text text-anchor="start" x="894.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 31&#45;&gt;32 -->
-<g id="edge32" class="edge"><title>31&#45;&gt;32</title>
-<path fill="none" stroke="black" d="M975.091,-936.907C967.492,-925.652 959.231,-913.418 951.593,-902.106"/>
-<polygon fill="black" stroke="black" points="954.391,-899.996 945.895,-893.667 948.59,-903.913 954.391,-899.996"/>
-</g>
-<!-- 33 -->
-<g id="node34" class="node"><title>33</title>
-<path fill="#399de5" stroke="black" d="M1075,-893.5C1075,-893.5 1002,-893.5 1002,-893.5 996,-893.5 990,-887.5 990,-881.5 990,-881.5 990,-837.5 990,-837.5 990,-831.5 996,-825.5 1002,-825.5 1002,-825.5 1075,-825.5 1075,-825.5 1081,-825.5 1087,-831.5 1087,-837.5 1087,-837.5 1087,-881.5 1087,-881.5 1087,-887.5 1081,-893.5 1075,-893.5"/>
-<text text-anchor="start" x="1009.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="999" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="998" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="1009.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 31&#45;&gt;33 -->
-<g id="edge33" class="edge"><title>31&#45;&gt;33</title>
-<path fill="none" stroke="black" d="M1014.99,-936.907C1018.32,-926.094 1021.92,-914.376 1025.29,-903.441"/>
-<polygon fill="black" stroke="black" points="1028.7,-904.254 1028.29,-893.667 1022.01,-902.195 1028.7,-904.254"/>
-</g>
-<!-- 36 -->
-<g id="node37" class="node"><title>36</title>
-<path fill="#e89050" stroke="black" d="M1331.5,-1258C1331.5,-1258 1125.5,-1258 1125.5,-1258 1119.5,-1258 1113.5,-1252 1113.5,-1246 1113.5,-1246 1113.5,-1187 1113.5,-1187 1113.5,-1181 1119.5,-1175 1125.5,-1175 1125.5,-1175 1331.5,-1175 1331.5,-1175 1337.5,-1175 1343.5,-1181 1343.5,-1187 1343.5,-1187 1343.5,-1246 1343.5,-1246 1343.5,-1252 1337.5,-1258 1331.5,-1258"/>
-<text text-anchor="start" x="1121.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ &#45;1.124</text>
-<text text-anchor="start" x="1191" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.185</text>
-<text text-anchor="start" x="1185" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 29</text>
-<text text-anchor="start" x="1184" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [26, 3]</text>
-<text text-anchor="start" x="1199.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 35&#45;&gt;36 -->
-<g id="edge36" class="edge"><title>35&#45;&gt;36</title>
-<path fill="none" stroke="black" d="M1304.91,-1293.91C1295.65,-1284.65 1285.73,-1274.73 1276.21,-1265.21"/>
-<polygon fill="black" stroke="black" points="1278.57,-1262.62 1269.02,-1258.02 1273.62,-1267.57 1278.57,-1262.62"/>
-</g>
-<!-- 39 -->
-<g id="node40" class="node"><title>39</title>
-<path fill="#3fa0e6" stroke="black" d="M1551,-1258C1551,-1258 1374,-1258 1374,-1258 1368,-1258 1362,-1252 1362,-1246 1362,-1246 1362,-1187 1362,-1187 1362,-1181 1368,-1175 1374,-1175 1374,-1175 1551,-1175 1551,-1175 1557,-1175 1563,-1181 1563,-1187 1563,-1187 1563,-1246 1563,-1246 1563,-1252 1557,-1258 1551,-1258"/>
-<text text-anchor="start" x="1370" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ 0.301</text>
-<text text-anchor="start" x="1425" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.056</text>
-<text text-anchor="start" x="1415" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 140</text>
-<text text-anchor="start" x="1414" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 136]</text>
-<text text-anchor="start" x="1433.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 35&#45;&gt;39 -->
-<g id="edge39" class="edge"><title>35&#45;&gt;39</title>
-<path fill="none" stroke="black" d="M1386.09,-1293.91C1395.35,-1284.65 1405.27,-1274.73 1414.79,-1265.21"/>
-<polygon fill="black" stroke="black" points="1417.38,-1267.57 1421.98,-1258.02 1412.43,-1262.62 1417.38,-1267.57"/>
-</g>
-<!-- 37 -->
-<g id="node38" class="node"><title>37</title>
-<path fill="#399de5" stroke="black" d="M1156,-1131.5C1156,-1131.5 1083,-1131.5 1083,-1131.5 1077,-1131.5 1071,-1125.5 1071,-1119.5 1071,-1119.5 1071,-1075.5 1071,-1075.5 1071,-1069.5 1077,-1063.5 1083,-1063.5 1083,-1063.5 1156,-1063.5 1156,-1063.5 1162,-1063.5 1168,-1069.5 1168,-1075.5 1168,-1075.5 1168,-1119.5 1168,-1119.5 1168,-1125.5 1162,-1131.5 1156,-1131.5"/>
-<text text-anchor="start" x="1090.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1080" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="1079" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="1090.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 36&#45;&gt;37 -->
-<g id="edge37" class="edge"><title>36&#45;&gt;37</title>
-<path fill="none" stroke="black" d="M1190.68,-1174.91C1179.89,-1163.32 1168.13,-1150.7 1157.33,-1139.11"/>
-<polygon fill="black" stroke="black" points="1159.78,-1136.6 1150.4,-1131.67 1154.65,-1141.37 1159.78,-1136.6"/>
-</g>
-<!-- 38 -->
-<g id="node39" class="node"><title>38</title>
-<path fill="#e58139" stroke="black" d="M1279,-1131.5C1279,-1131.5 1198,-1131.5 1198,-1131.5 1192,-1131.5 1186,-1125.5 1186,-1119.5 1186,-1119.5 1186,-1075.5 1186,-1075.5 1186,-1069.5 1192,-1063.5 1198,-1063.5 1198,-1063.5 1279,-1063.5 1279,-1063.5 1285,-1063.5 1291,-1069.5 1291,-1075.5 1291,-1075.5 1291,-1119.5 1291,-1119.5 1291,-1125.5 1285,-1131.5 1279,-1131.5"/>
-<text text-anchor="start" x="1209.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1195" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 26</text>
-<text text-anchor="start" x="1194" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [26, 0]</text>
-<text text-anchor="start" x="1209.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 36&#45;&gt;38 -->
-<g id="edge38" class="edge"><title>36&#45;&gt;38</title>
-<path fill="none" stroke="black" d="M1231.97,-1174.91C1232.88,-1164.2 1233.87,-1152.62 1234.8,-1141.78"/>
-<polygon fill="black" stroke="black" points="1238.3,-1141.93 1235.67,-1131.67 1231.33,-1141.33 1238.3,-1141.93"/>
-</g>
-<!-- 40 -->
-<g id="node41" class="node"><title>40</title>
-<path fill="#3c9ee5" stroke="black" d="M1557,-1139C1557,-1139 1330,-1139 1330,-1139 1324,-1139 1318,-1133 1318,-1127 1318,-1127 1318,-1068 1318,-1068 1318,-1062 1324,-1056 1330,-1056 1330,-1056 1557,-1056 1557,-1056 1563,-1056 1569,-1062 1569,-1068 1569,-1068 1569,-1127 1569,-1127 1569,-1133 1563,-1139 1557,-1139"/>
-<text text-anchor="start" x="1326" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ &#45;0.152</text>
-<text text-anchor="start" x="1406" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.029</text>
-<text text-anchor="start" x="1396" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 138</text>
-<text text-anchor="start" x="1395" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 136]</text>
-<text text-anchor="start" x="1414.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 39&#45;&gt;40 -->
-<g id="edge40" class="edge"><title>39&#45;&gt;40</title>
-<path fill="none" stroke="black" d="M1455.91,-1174.91C1454.55,-1166.56 1453.11,-1157.67 1451.7,-1149.02"/>
-<polygon fill="black" stroke="black" points="1455.14,-1148.33 1450.08,-1139.02 1448.23,-1149.45 1455.14,-1148.33"/>
-</g>
-<!-- 47 -->
-<g id="node48" class="node"><title>47</title>
-<path fill="#e58139" stroke="black" d="M1672,-1131.5C1672,-1131.5 1599,-1131.5 1599,-1131.5 1593,-1131.5 1587,-1125.5 1587,-1119.5 1587,-1119.5 1587,-1075.5 1587,-1075.5 1587,-1069.5 1593,-1063.5 1599,-1063.5 1599,-1063.5 1672,-1063.5 1672,-1063.5 1678,-1063.5 1684,-1069.5 1684,-1075.5 1684,-1075.5 1684,-1119.5 1684,-1119.5 1684,-1125.5 1678,-1131.5 1672,-1131.5"/>
-<text text-anchor="start" x="1606.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1596" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="1595" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="1606.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 39&#45;&gt;47 -->
-<g id="edge47" class="edge"><title>39&#45;&gt;47</title>
-<path fill="none" stroke="black" d="M1524.14,-1174.86C1541.46,-1163.35 1560.26,-1150.75 1577.5,-1139 1578.28,-1138.47 1579.06,-1137.94 1579.85,-1137.4"/>
-<polygon fill="black" stroke="black" points="1582.14,-1140.07 1588.4,-1131.52 1578.17,-1134.3 1582.14,-1140.07"/>
-</g>
-<!-- 41 -->
-<g id="node42" class="node"><title>41</title>
-<path fill="#3a9ee5" stroke="black" d="M1382,-1020C1382,-1020 1279,-1020 1279,-1020 1273,-1020 1267,-1014 1267,-1008 1267,-1008 1267,-949 1267,-949 1267,-943 1273,-937 1279,-937 1279,-937 1382,-937 1382,-937 1388,-937 1394,-943 1394,-949 1394,-949 1394,-1008 1394,-1008 1394,-1014 1388,-1020 1382,-1020"/>
-<text text-anchor="start" x="1275" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="1293" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.014</text>
-<text text-anchor="start" x="1283" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 137</text>
-<text text-anchor="start" x="1282" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 136]</text>
-<text text-anchor="start" x="1301.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 40&#45;&gt;41 -->
-<g id="edge41" class="edge"><title>40&#45;&gt;41</title>
-<path fill="none" stroke="black" d="M1404.3,-1055.91C1395.44,-1046.74 1385.96,-1036.93 1376.85,-1027.49"/>
-<polygon fill="black" stroke="black" points="1379.1,-1024.78 1369.64,-1020.02 1374.07,-1029.65 1379.1,-1024.78"/>
-</g>
-<!-- 46 -->
-<g id="node47" class="node"><title>46</title>
-<path fill="#e58139" stroke="black" d="M1497,-1012.5C1497,-1012.5 1424,-1012.5 1424,-1012.5 1418,-1012.5 1412,-1006.5 1412,-1000.5 1412,-1000.5 1412,-956.5 1412,-956.5 1412,-950.5 1418,-944.5 1424,-944.5 1424,-944.5 1497,-944.5 1497,-944.5 1503,-944.5 1509,-950.5 1509,-956.5 1509,-956.5 1509,-1000.5 1509,-1000.5 1509,-1006.5 1503,-1012.5 1497,-1012.5"/>
-<text text-anchor="start" x="1431.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1421" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="1420" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="1431.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 40&#45;&gt;46 -->
-<g id="edge46" class="edge"><title>40&#45;&gt;46</title>
-<path fill="none" stroke="black" d="M1449.4,-1055.91C1450.95,-1045.2 1452.64,-1033.62 1454.21,-1022.78"/>
-<polygon fill="black" stroke="black" points="1457.71,-1023.07 1455.68,-1012.67 1450.78,-1022.06 1457.71,-1023.07"/>
-</g>
-<!-- 42 -->
-<g id="node43" class="node"><title>42</title>
-<path fill="#5aade9" stroke="black" d="M1290,-901C1290,-901 1117,-901 1117,-901 1111,-901 1105,-895 1105,-889 1105,-889 1105,-830 1105,-830 1105,-824 1111,-818 1117,-818 1117,-818 1290,-818 1290,-818 1296,-818 1302,-824 1302,-830 1302,-830 1302,-889 1302,-889 1302,-895 1296,-901 1290,-901"/>
-<text text-anchor="start" x="1113" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.823</text>
-<text text-anchor="start" x="1166" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
-<text text-anchor="start" x="1164" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="1163" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 6]</text>
-<text text-anchor="start" x="1174.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 41&#45;&gt;42 -->
-<g id="edge42" class="edge"><title>41&#45;&gt;42</title>
-<path fill="none" stroke="black" d="M1286.44,-936.907C1276.29,-927.56 1265.41,-917.538 1254.98,-907.929"/>
-<polygon fill="black" stroke="black" points="1257.21,-905.222 1247.48,-901.021 1252.47,-910.371 1257.21,-905.222"/>
-</g>
-<!-- 45 -->
-<g id="node46" class="node"><title>45</title>
-<path fill="#399de5" stroke="black" d="M1421,-893.5C1421,-893.5 1332,-893.5 1332,-893.5 1326,-893.5 1320,-887.5 1320,-881.5 1320,-881.5 1320,-837.5 1320,-837.5 1320,-831.5 1326,-825.5 1332,-825.5 1332,-825.5 1421,-825.5 1421,-825.5 1427,-825.5 1433,-831.5 1433,-837.5 1433,-837.5 1433,-881.5 1433,-881.5 1433,-887.5 1427,-893.5 1421,-893.5"/>
-<text text-anchor="start" x="1347.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1329" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 130</text>
-<text text-anchor="start" x="1328" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 130]</text>
-<text text-anchor="start" x="1347.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 41&#45;&gt;45 -->
-<g id="edge45" class="edge"><title>41&#45;&gt;45</title>
-<path fill="none" stroke="black" d="M1346.46,-936.907C1350.75,-925.983 1355.41,-914.137 1359.75,-903.107"/>
-<polygon fill="black" stroke="black" points="1363.06,-904.254 1363.46,-893.667 1356.54,-901.693 1363.06,-904.254"/>
-</g>
-<!-- 43 -->
-<g id="node44" class="node"><title>43</title>
-<path fill="#399de5" stroke="black" d="M1182,-774.5C1182,-774.5 1109,-774.5 1109,-774.5 1103,-774.5 1097,-768.5 1097,-762.5 1097,-762.5 1097,-718.5 1097,-718.5 1097,-712.5 1103,-706.5 1109,-706.5 1109,-706.5 1182,-706.5 1182,-706.5 1188,-706.5 1194,-712.5 1194,-718.5 1194,-718.5 1194,-762.5 1194,-762.5 1194,-768.5 1188,-774.5 1182,-774.5"/>
-<text text-anchor="start" x="1116.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1106" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="1105" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
-<text text-anchor="start" x="1116.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 42&#45;&gt;43 -->
-<g id="edge43" class="edge"><title>42&#45;&gt;43</title>
-<path fill="none" stroke="black" d="M1183.38,-817.907C1177.91,-806.873 1171.97,-794.898 1166.46,-783.773"/>
-<polygon fill="black" stroke="black" points="1169.52,-782.072 1161.94,-774.667 1163.25,-785.181 1169.52,-782.072"/>
-</g>
-<!-- 44 -->
-<g id="node45" class="node"><title>44</title>
-<path fill="#e58139" stroke="black" d="M1297,-774.5C1297,-774.5 1224,-774.5 1224,-774.5 1218,-774.5 1212,-768.5 1212,-762.5 1212,-762.5 1212,-718.5 1212,-718.5 1212,-712.5 1218,-706.5 1224,-706.5 1224,-706.5 1297,-706.5 1297,-706.5 1303,-706.5 1309,-712.5 1309,-718.5 1309,-718.5 1309,-762.5 1309,-762.5 1309,-768.5 1303,-774.5 1297,-774.5"/>
-<text text-anchor="start" x="1231.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1221" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="1220" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="1231.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 42&#45;&gt;44 -->
-<g id="edge44" class="edge"><title>42&#45;&gt;44</title>
-<path fill="none" stroke="black" d="M1223.28,-817.907C1228.65,-806.873 1234.49,-794.898 1239.91,-783.773"/>
-<polygon fill="black" stroke="black" points="1243.11,-785.19 1244.34,-774.667 1236.82,-782.124 1243.11,-785.19"/>
-</g>
-<!-- 49 -->
-<g id="node50" class="node"><title>49</title>
-<path fill="#41a1e6" stroke="black" d="M2553.5,-1377C2553.5,-1377 2317.5,-1377 2317.5,-1377 2311.5,-1377 2305.5,-1371 2305.5,-1365 2305.5,-1365 2305.5,-1306 2305.5,-1306 2305.5,-1300 2311.5,-1294 2317.5,-1294 2317.5,-1294 2553.5,-1294 2553.5,-1294 2559.5,-1294 2565.5,-1300 2565.5,-1306 2565.5,-1306 2565.5,-1365 2565.5,-1365 2565.5,-1371 2559.5,-1377 2553.5,-1377"/>
-<text text-anchor="start" x="2313.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 0.641</text>
-<text text-anchor="start" x="2398" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.077</text>
-<text text-anchor="start" x="2388" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 942</text>
-<text text-anchor="start" x="2382.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [38, 904]</text>
-<text text-anchor="start" x="2406.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 48&#45;&gt;49 -->
-<g id="edge49" class="edge"><title>48&#45;&gt;49</title>
-<path fill="none" stroke="black" d="M2533.46,-1412.91C2521.24,-1403.38 2508.13,-1393.15 2495.59,-1383.37"/>
-<polygon fill="black" stroke="black" points="2497.49,-1380.41 2487.45,-1377.02 2493.18,-1385.93 2497.49,-1380.41"/>
-</g>
-<!-- 80 -->
-<g id="node81" class="node"><title>80</title>
-<path fill="#e68742" stroke="black" d="M3032.5,-1377C3032.5,-1377 2904.5,-1377 2904.5,-1377 2898.5,-1377 2892.5,-1371 2892.5,-1365 2892.5,-1365 2892.5,-1306 2892.5,-1306 2892.5,-1300 2898.5,-1294 2904.5,-1294 2904.5,-1294 3032.5,-1294 3032.5,-1294 3038.5,-1294 3044.5,-1300 3044.5,-1306 3044.5,-1306 3044.5,-1365 3044.5,-1365 3044.5,-1371 3038.5,-1377 3032.5,-1377"/>
-<text text-anchor="start" x="2900.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">diff_srv_rate ≤ &#45;0.181</text>
-<text text-anchor="start" x="2931" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.081</text>
-<text text-anchor="start" x="2921" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 212</text>
-<text text-anchor="start" x="2920" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 9]</text>
-<text text-anchor="start" x="2939.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 48&#45;&gt;80 -->
-<g id="edge80" class="edge"><title>48&#45;&gt;80</title>
-<path fill="none" stroke="black" d="M2700.67,-1418.32C2759.05,-1400.48 2828.75,-1379.19 2882.41,-1362.8"/>
-<polygon fill="black" stroke="black" points="2883.69,-1366.07 2892.24,-1359.8 2881.65,-1359.37 2883.69,-1366.07"/>
-</g>
-<!-- 50 -->
-<g id="node51" class="node"><title>50</title>
-<path fill="#80c0ee" stroke="black" d="M2106,-1258C2106,-1258 2017,-1258 2017,-1258 2011,-1258 2005,-1252 2005,-1246 2005,-1246 2005,-1187 2005,-1187 2005,-1181 2011,-1175 2017,-1175 2017,-1175 2106,-1175 2106,-1175 2112,-1175 2118,-1181 2118,-1187 2118,-1187 2118,-1246 2118,-1246 2118,-1252 2112,-1258 2106,-1258"/>
-<text text-anchor="start" x="2016" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ &#45;0.707</text>
-<text text-anchor="start" x="2024" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.388</text>
-<text text-anchor="start" x="2014" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 114</text>
-<text text-anchor="start" x="2013" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 84]</text>
-<text text-anchor="start" x="2032.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 49&#45;&gt;50 -->
-<g id="edge50" class="edge"><title>49&#45;&gt;50</title>
-<path fill="none" stroke="black" d="M2306,-1293.99C2245.85,-1275.17 2176.91,-1253.6 2127.6,-1238.18"/>
-<polygon fill="black" stroke="black" points="2128.59,-1234.82 2118,-1235.18 2126.5,-1241.5 2128.59,-1234.82"/>
-</g>
-<!-- 59 -->
-<g id="node60" class="node"><title>59</title>
-<path fill="#3b9ee5" stroke="black" d="M2540,-1258C2540,-1258 2331,-1258 2331,-1258 2325,-1258 2319,-1252 2319,-1246 2319,-1246 2319,-1187 2319,-1187 2319,-1181 2325,-1175 2331,-1175 2331,-1175 2540,-1175 2540,-1175 2546,-1175 2552,-1181 2552,-1187 2552,-1187 2552,-1246 2552,-1246 2552,-1252 2546,-1258 2540,-1258"/>
-<text text-anchor="start" x="2327" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.605</text>
-<text text-anchor="start" x="2398" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.019</text>
-<text text-anchor="start" x="2388" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 828</text>
-<text text-anchor="start" x="2387" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8, 820]</text>
-<text text-anchor="start" x="2406.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 49&#45;&gt;59 -->
-<g id="edge59" class="edge"><title>49&#45;&gt;59</title>
-<path fill="none" stroke="black" d="M2435.5,-1293.91C2435.5,-1285.65 2435.5,-1276.86 2435.5,-1268.3"/>
-<polygon fill="black" stroke="black" points="2439,-1268.02 2435.5,-1258.02 2432,-1268.02 2439,-1268.02"/>
-</g>
-<!-- 51 -->
-<g id="node52" class="node"><title>51</title>
-<path fill="#eb9e67" stroke="black" d="M1929,-1139C1929,-1139 1720,-1139 1720,-1139 1714,-1139 1708,-1133 1708,-1127 1708,-1127 1708,-1068 1708,-1068 1708,-1062 1714,-1056 1720,-1056 1720,-1056 1929,-1056 1929,-1056 1935,-1056 1941,-1062 1941,-1068 1941,-1068 1941,-1127 1941,-1127 1941,-1133 1935,-1139 1929,-1139"/>
-<text text-anchor="start" x="1716" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.347</text>
-<text text-anchor="start" x="1787" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.307</text>
-<text text-anchor="start" x="1781" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 37</text>
-<text text-anchor="start" x="1780" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 7]</text>
-<text text-anchor="start" x="1795.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 50&#45;&gt;51 -->
-<g id="edge51" class="edge"><title>50&#45;&gt;51</title>
-<path fill="none" stroke="black" d="M2004.73,-1187.48C1978.17,-1174.36 1945.88,-1158.42 1916,-1143.67"/>
-<polygon fill="black" stroke="black" points="1917.33,-1140.42 1906.81,-1139.13 1914.23,-1146.7 1917.33,-1140.42"/>
-</g>
-<!-- 58 -->
-<g id="node59" class="node"><title>58</title>
-<path fill="#399de5" stroke="black" d="M2102,-1131.5C2102,-1131.5 2021,-1131.5 2021,-1131.5 2015,-1131.5 2009,-1125.5 2009,-1119.5 2009,-1119.5 2009,-1075.5 2009,-1075.5 2009,-1069.5 2015,-1063.5 2021,-1063.5 2021,-1063.5 2102,-1063.5 2102,-1063.5 2108,-1063.5 2114,-1069.5 2114,-1075.5 2114,-1075.5 2114,-1119.5 2114,-1119.5 2114,-1125.5 2108,-1131.5 2102,-1131.5"/>
-<text text-anchor="start" x="2032.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2018" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 77</text>
-<text text-anchor="start" x="2017" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 77]</text>
-<text text-anchor="start" x="2032.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 50&#45;&gt;58 -->
-<g id="edge58" class="edge"><title>50&#45;&gt;58</title>
-<path fill="none" stroke="black" d="M2061.5,-1174.91C2061.5,-1164.2 2061.5,-1152.62 2061.5,-1141.78"/>
-<polygon fill="black" stroke="black" points="2065,-1141.67 2061.5,-1131.67 2058,-1141.67 2065,-1141.67"/>
-</g>
-<!-- 52 -->
-<g id="node53" class="node"><title>52</title>
-<path fill="#e68540" stroke="black" d="M1672,-1020C1672,-1020 1573,-1020 1573,-1020 1567,-1020 1561,-1014 1561,-1008 1561,-1008 1561,-949 1561,-949 1561,-943 1567,-937 1573,-937 1573,-937 1672,-937 1672,-937 1678,-937 1684,-943 1684,-949 1684,-949 1684,-1008 1684,-1008 1684,-1014 1678,-1020 1672,-1020"/>
-<text text-anchor="start" x="1569" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.112</text>
-<text text-anchor="start" x="1585" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.064</text>
-<text text-anchor="start" x="1579" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 30</text>
-<text text-anchor="start" x="1578" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [29, 1]</text>
-<text text-anchor="start" x="1593.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 51&#45;&gt;52 -->
-<g id="edge52" class="edge"><title>51&#45;&gt;52</title>
-<path fill="none" stroke="black" d="M1754.42,-1055.91C1734.47,-1044.35 1712.73,-1031.76 1692.77,-1020.2"/>
-<polygon fill="black" stroke="black" points="1694.44,-1017.13 1684.04,-1015.14 1690.93,-1023.18 1694.44,-1017.13"/>
-</g>
-<!-- 55 -->
-<g id="node56" class="node"><title>55</title>
-<path fill="#5aade9" stroke="black" d="M1918,-1020C1918,-1020 1731,-1020 1731,-1020 1725,-1020 1719,-1014 1719,-1008 1719,-1008 1719,-949 1719,-949 1719,-943 1725,-937 1731,-937 1731,-937 1918,-937 1918,-937 1924,-937 1930,-943 1930,-949 1930,-949 1930,-1008 1930,-1008 1930,-1014 1924,-1020 1918,-1020"/>
-<text text-anchor="start" x="1727" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 0.975</text>
-<text text-anchor="start" x="1787" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
-<text text-anchor="start" x="1785" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="1784" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 6]</text>
-<text text-anchor="start" x="1795.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 51&#45;&gt;55 -->
-<g id="edge55" class="edge"><title>51&#45;&gt;55</title>
-<path fill="none" stroke="black" d="M1824.5,-1055.91C1824.5,-1047.65 1824.5,-1038.86 1824.5,-1030.3"/>
-<polygon fill="black" stroke="black" points="1828,-1030.02 1824.5,-1020.02 1821,-1030.02 1828,-1030.02"/>
-</g>
-<!-- 53 -->
-<g id="node54" class="node"><title>53</title>
-<path fill="#e58139" stroke="black" d="M1544,-893.5C1544,-893.5 1463,-893.5 1463,-893.5 1457,-893.5 1451,-887.5 1451,-881.5 1451,-881.5 1451,-837.5 1451,-837.5 1451,-831.5 1457,-825.5 1463,-825.5 1463,-825.5 1544,-825.5 1544,-825.5 1550,-825.5 1556,-831.5 1556,-837.5 1556,-837.5 1556,-881.5 1556,-881.5 1556,-887.5 1550,-893.5 1544,-893.5"/>
-<text text-anchor="start" x="1474.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1460" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 29</text>
-<text text-anchor="start" x="1459" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [29, 0]</text>
-<text text-anchor="start" x="1474.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 52&#45;&gt;53 -->
-<g id="edge53" class="edge"><title>52&#45;&gt;53</title>
-<path fill="none" stroke="black" d="M1581.21,-936.907C1569.32,-925.211 1556.35,-912.457 1544.47,-900.78"/>
-<polygon fill="black" stroke="black" points="1546.82,-898.182 1537.23,-893.667 1541.91,-903.174 1546.82,-898.182"/>
-</g>
-<!-- 54 -->
-<g id="node55" class="node"><title>54</title>
-<path fill="#399de5" stroke="black" d="M1659,-893.5C1659,-893.5 1586,-893.5 1586,-893.5 1580,-893.5 1574,-887.5 1574,-881.5 1574,-881.5 1574,-837.5 1574,-837.5 1574,-831.5 1580,-825.5 1586,-825.5 1586,-825.5 1659,-825.5 1659,-825.5 1665,-825.5 1671,-831.5 1671,-837.5 1671,-837.5 1671,-881.5 1671,-881.5 1671,-887.5 1665,-893.5 1659,-893.5"/>
-<text text-anchor="start" x="1593.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1583" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="1582" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="1593.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 52&#45;&gt;54 -->
-<g id="edge54" class="edge"><title>52&#45;&gt;54</title>
-<path fill="none" stroke="black" d="M1622.5,-936.907C1622.5,-926.204 1622.5,-914.615 1622.5,-903.776"/>
-<polygon fill="black" stroke="black" points="1626,-903.667 1622.5,-893.667 1619,-903.667 1626,-903.667"/>
-</g>
-<!-- 56 -->
-<g id="node57" class="node"><title>56</title>
-<path fill="#399de5" stroke="black" d="M1774,-893.5C1774,-893.5 1701,-893.5 1701,-893.5 1695,-893.5 1689,-887.5 1689,-881.5 1689,-881.5 1689,-837.5 1689,-837.5 1689,-831.5 1695,-825.5 1701,-825.5 1701,-825.5 1774,-825.5 1774,-825.5 1780,-825.5 1786,-831.5 1786,-837.5 1786,-837.5 1786,-881.5 1786,-881.5 1786,-887.5 1780,-893.5 1774,-893.5"/>
-<text text-anchor="start" x="1708.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1698" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="1697" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
-<text text-anchor="start" x="1708.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 55&#45;&gt;56 -->
-<g id="edge56" class="edge"><title>55&#45;&gt;56</title>
-<path fill="none" stroke="black" d="M1794.32,-936.907C1785.86,-925.542 1776.67,-913.178 1768.19,-901.774"/>
-<polygon fill="black" stroke="black" points="1770.94,-899.603 1762.16,-893.667 1765.32,-903.78 1770.94,-899.603"/>
-</g>
-<!-- 57 -->
-<g id="node58" class="node"><title>57</title>
-<path fill="#e58139" stroke="black" d="M1889,-893.5C1889,-893.5 1816,-893.5 1816,-893.5 1810,-893.5 1804,-887.5 1804,-881.5 1804,-881.5 1804,-837.5 1804,-837.5 1804,-831.5 1810,-825.5 1816,-825.5 1816,-825.5 1889,-825.5 1889,-825.5 1895,-825.5 1901,-831.5 1901,-837.5 1901,-837.5 1901,-881.5 1901,-881.5 1901,-887.5 1895,-893.5 1889,-893.5"/>
-<text text-anchor="start" x="1823.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1813" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="1812" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="1823.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 55&#45;&gt;57 -->
-<g id="edge57" class="edge"><title>55&#45;&gt;57</title>
-<path fill="none" stroke="black" d="M1834.21,-936.907C1836.8,-926.094 1839.61,-914.376 1842.22,-903.441"/>
-<polygon fill="black" stroke="black" points="1845.64,-904.207 1844.56,-893.667 1838.83,-902.578 1845.64,-904.207"/>
-</g>
-<!-- 60 -->
-<g id="node61" class="node"><title>60</title>
-<path fill="#3a9de5" stroke="black" d="M2382,-1139C2382,-1139 2209,-1139 2209,-1139 2203,-1139 2197,-1133 2197,-1127 2197,-1127 2197,-1068 2197,-1068 2197,-1062 2203,-1056 2209,-1056 2209,-1056 2382,-1056 2382,-1056 2388,-1056 2394,-1062 2394,-1068 2394,-1068 2394,-1127 2394,-1127 2394,-1133 2388,-1139 2382,-1139"/>
-<text text-anchor="start" x="2205" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;1.026</text>
-<text text-anchor="start" x="2262" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.01</text>
-<text text-anchor="start" x="2248" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 819</text>
-<text text-anchor="start" x="2247" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 815]</text>
-<text text-anchor="start" x="2266.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 59&#45;&gt;60 -->
-<g id="edge60" class="edge"><title>59&#45;&gt;60</title>
-<path fill="none" stroke="black" d="M2386.93,-1174.91C2375.63,-1165.47 2363.52,-1155.34 2351.92,-1145.65"/>
-<polygon fill="black" stroke="black" points="2353.9,-1142.75 2343.99,-1139.02 2349.42,-1148.12 2353.9,-1142.75"/>
-</g>
-<!-- 71 -->
-<g id="node72" class="node"><title>71</title>
-<path fill="#d7ebfa" stroke="black" d="M2647.5,-1139C2647.5,-1139 2501.5,-1139 2501.5,-1139 2495.5,-1139 2489.5,-1133 2489.5,-1127 2489.5,-1127 2489.5,-1068 2489.5,-1068 2489.5,-1062 2495.5,-1056 2501.5,-1056 2501.5,-1056 2647.5,-1056 2647.5,-1056 2653.5,-1056 2659.5,-1062 2659.5,-1068 2659.5,-1068 2659.5,-1127 2659.5,-1127 2659.5,-1133 2653.5,-1139 2647.5,-1139"/>
-<text text-anchor="start" x="2497.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;1.778</text>
-<text text-anchor="start" x="2537" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.494</text>
-<text text-anchor="start" x="2535" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
-<text text-anchor="start" x="2534" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 5]</text>
-<text text-anchor="start" x="2545.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 59&#45;&gt;71 -->
-<g id="edge71" class="edge"><title>59&#45;&gt;71</title>
-<path fill="none" stroke="black" d="M2483.73,-1174.91C2494.94,-1165.47 2506.97,-1155.34 2518.49,-1145.65"/>
-<polygon fill="black" stroke="black" points="2520.96,-1148.14 2526.36,-1139.02 2516.46,-1142.78 2520.96,-1148.14"/>
-</g>
-<!-- 61 -->
-<g id="node62" class="node"><title>61</title>
-<path fill="#7bbeee" stroke="black" d="M2134,-1020C2134,-1020 2031,-1020 2031,-1020 2025,-1020 2019,-1014 2019,-1008 2019,-1008 2019,-949 2019,-949 2019,-943 2025,-937 2031,-937 2031,-937 2134,-937 2134,-937 2140,-937 2146,-943 2146,-949 2146,-949 2146,-1008 2146,-1008 2146,-1014 2140,-1020 2134,-1020"/>
-<text text-anchor="start" x="2027" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="2045" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="2043" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="2042" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 3]</text>
-<text text-anchor="start" x="2053.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 60&#45;&gt;61 -->
-<g id="edge61" class="edge"><title>60&#45;&gt;61</title>
-<path fill="none" stroke="black" d="M2221.6,-1055.91C2200.15,-1044.13 2176.75,-1031.27 2155.37,-1019.53"/>
-<polygon fill="black" stroke="black" points="2156.79,-1016.31 2146.34,-1014.57 2153.42,-1022.45 2156.79,-1016.31"/>
-</g>
-<!-- 64 -->
-<g id="node65" class="node"><title>64</title>
-<path fill="#3a9de5" stroke="black" d="M2413.5,-1020C2413.5,-1020 2177.5,-1020 2177.5,-1020 2171.5,-1020 2165.5,-1014 2165.5,-1008 2165.5,-1008 2165.5,-949 2165.5,-949 2165.5,-943 2171.5,-937 2177.5,-937 2177.5,-937 2413.5,-937 2413.5,-937 2419.5,-937 2425.5,-943 2425.5,-949 2425.5,-949 2425.5,-1008 2425.5,-1008 2425.5,-1014 2419.5,-1020 2413.5,-1020"/>
-<text text-anchor="start" x="2173.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.614</text>
-<text text-anchor="start" x="2258" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
-<text text-anchor="start" x="2248" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 815</text>
-<text text-anchor="start" x="2247" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 812]</text>
-<text text-anchor="start" x="2266.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 60&#45;&gt;64 -->
-<g id="edge64" class="edge"><title>60&#45;&gt;64</title>
-<path fill="none" stroke="black" d="M2295.5,-1055.91C2295.5,-1047.65 2295.5,-1038.86 2295.5,-1030.3"/>
-<polygon fill="black" stroke="black" points="2299,-1030.02 2295.5,-1020.02 2292,-1030.02 2299,-1030.02"/>
-</g>
-<!-- 62 -->
-<g id="node63" class="node"><title>62</title>
-<path fill="#399de5" stroke="black" d="M2004,-893.5C2004,-893.5 1931,-893.5 1931,-893.5 1925,-893.5 1919,-887.5 1919,-881.5 1919,-881.5 1919,-837.5 1919,-837.5 1919,-831.5 1925,-825.5 1931,-825.5 1931,-825.5 2004,-825.5 2004,-825.5 2010,-825.5 2016,-831.5 2016,-837.5 2016,-837.5 2016,-881.5 2016,-881.5 2016,-887.5 2010,-893.5 2004,-893.5"/>
-<text text-anchor="start" x="1938.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1928" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="1927" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="1938.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 61&#45;&gt;62 -->
-<g id="edge62" class="edge"><title>61&#45;&gt;62</title>
-<path fill="none" stroke="black" d="M2042.6,-936.907C2031.21,-925.321 2018.81,-912.698 2007.42,-901.111"/>
-<polygon fill="black" stroke="black" points="2009.61,-898.345 2000.1,-893.667 2004.61,-903.252 2009.61,-898.345"/>
-</g>
-<!-- 63 -->
-<g id="node64" class="node"><title>63</title>
-<path fill="#ffffff" stroke="black" d="M2119,-893.5C2119,-893.5 2046,-893.5 2046,-893.5 2040,-893.5 2034,-887.5 2034,-881.5 2034,-881.5 2034,-837.5 2034,-837.5 2034,-831.5 2040,-825.5 2046,-825.5 2046,-825.5 2119,-825.5 2119,-825.5 2125,-825.5 2131,-831.5 2131,-837.5 2131,-837.5 2131,-881.5 2131,-881.5 2131,-887.5 2125,-893.5 2119,-893.5"/>
-<text text-anchor="start" x="2053.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="2043" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="2042" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="2053.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 61&#45;&gt;63 -->
-<g id="edge63" class="edge"><title>61&#45;&gt;63</title>
-<path fill="none" stroke="black" d="M2082.5,-936.907C2082.5,-926.204 2082.5,-914.615 2082.5,-903.776"/>
-<polygon fill="black" stroke="black" points="2086,-903.667 2082.5,-893.667 2079,-903.667 2086,-903.667"/>
-</g>
-<!-- 65 -->
-<g id="node66" class="node"><title>65</title>
-<path fill="#45a3e7" stroke="black" d="M2388,-901C2388,-901 2161,-901 2161,-901 2155,-901 2149,-895 2149,-889 2149,-889 2149,-830 2149,-830 2149,-824 2155,-818 2161,-818 2161,-818 2388,-818 2388,-818 2394,-818 2400,-824 2400,-830 2400,-830 2400,-889 2400,-889 2400,-895 2394,-901 2388,-901"/>
-<text text-anchor="start" x="2157" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ &#45;0.198</text>
-<text text-anchor="start" x="2237" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.111</text>
-<text text-anchor="start" x="2231" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 51</text>
-<text text-anchor="start" x="2230" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 48]</text>
-<text text-anchor="start" x="2245.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 64&#45;&gt;65 -->
-<g id="edge65" class="edge"><title>64&#45;&gt;65</title>
-<path fill="none" stroke="black" d="M2288.21,-936.907C2286.72,-928.558 2285.12,-919.671 2283.57,-911.02"/>
-<polygon fill="black" stroke="black" points="2286.98,-910.245 2281.77,-901.021 2280.09,-911.482 2286.98,-910.245"/>
-</g>
-<!-- 70 -->
-<g id="node71" class="node"><title>70</title>
-<path fill="#399de5" stroke="black" d="M2519,-893.5C2519,-893.5 2430,-893.5 2430,-893.5 2424,-893.5 2418,-887.5 2418,-881.5 2418,-881.5 2418,-837.5 2418,-837.5 2418,-831.5 2424,-825.5 2430,-825.5 2430,-825.5 2519,-825.5 2519,-825.5 2525,-825.5 2531,-831.5 2531,-837.5 2531,-837.5 2531,-881.5 2531,-881.5 2531,-887.5 2525,-893.5 2519,-893.5"/>
-<text text-anchor="start" x="2445.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2427" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 764</text>
-<text text-anchor="start" x="2426" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 764]</text>
-<text text-anchor="start" x="2445.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 64&#45;&gt;70 -->
-<g id="edge70" class="edge"><title>64&#45;&gt;70</title>
-<path fill="none" stroke="black" d="M2357.6,-936.907C2376.26,-924.714 2396.67,-911.373 2415.14,-899.298"/>
-<polygon fill="black" stroke="black" points="2417.3,-902.068 2423.76,-893.667 2413.47,-896.209 2417.3,-902.068"/>
-</g>
-<!-- 66 -->
-<g id="node67" class="node"><title>66</title>
-<path fill="#399de5" stroke="black" d="M2168,-774.5C2168,-774.5 2087,-774.5 2087,-774.5 2081,-774.5 2075,-768.5 2075,-762.5 2075,-762.5 2075,-718.5 2075,-718.5 2075,-712.5 2081,-706.5 2087,-706.5 2087,-706.5 2168,-706.5 2168,-706.5 2174,-706.5 2180,-712.5 2180,-718.5 2180,-718.5 2180,-762.5 2180,-762.5 2180,-768.5 2174,-774.5 2168,-774.5"/>
-<text text-anchor="start" x="2098.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2084" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 47</text>
-<text text-anchor="start" x="2083" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 47]</text>
-<text text-anchor="start" x="2098.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 65&#45;&gt;66 -->
-<g id="edge66" class="edge"><title>65&#45;&gt;66</title>
-<path fill="none" stroke="black" d="M2223.5,-817.907C2208.53,-805.99 2192.17,-792.976 2177.28,-781.12"/>
-<polygon fill="black" stroke="black" points="2179.18,-778.156 2169.17,-774.667 2174.82,-783.633 2179.18,-778.156"/>
-</g>
-<!-- 67 -->
-<g id="node68" class="node"><title>67</title>
-<path fill="#eeab7b" stroke="black" d="M2397,-782C2397,-782 2210,-782 2210,-782 2204,-782 2198,-776 2198,-770 2198,-770 2198,-711 2198,-711 2198,-705 2204,-699 2210,-699 2210,-699 2397,-699 2397,-699 2403,-699 2409,-705 2409,-711 2409,-711 2409,-770 2409,-770 2409,-776 2403,-782 2397,-782"/>
-<text text-anchor="start" x="2206" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 2.417</text>
-<text text-anchor="start" x="2266" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="2264" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="2263" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 1]</text>
-<text text-anchor="start" x="2274.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 65&#45;&gt;67 -->
-<g id="edge67" class="edge"><title>65&#45;&gt;67</title>
-<path fill="none" stroke="black" d="M2284.56,-817.907C2286.65,-809.468 2288.88,-800.477 2291.05,-791.738"/>
-<polygon fill="black" stroke="black" points="2294.45,-792.569 2293.46,-782.021 2287.65,-790.885 2294.45,-792.569"/>
-</g>
-<!-- 68 -->
-<g id="node69" class="node"><title>68</title>
-<path fill="#e58139" stroke="black" d="M2240,-655.5C2240,-655.5 2167,-655.5 2167,-655.5 2161,-655.5 2155,-649.5 2155,-643.5 2155,-643.5 2155,-599.5 2155,-599.5 2155,-593.5 2161,-587.5 2167,-587.5 2167,-587.5 2240,-587.5 2240,-587.5 2246,-587.5 2252,-593.5 2252,-599.5 2252,-599.5 2252,-643.5 2252,-643.5 2252,-649.5 2246,-655.5 2240,-655.5"/>
-<text text-anchor="start" x="2174.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2164" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="2163" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
-<text text-anchor="start" x="2174.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 67&#45;&gt;68 -->
-<g id="edge68" class="edge"><title>67&#45;&gt;68</title>
-<path fill="none" stroke="black" d="M2268.81,-698.907C2259,-687.432 2248.32,-674.938 2238.49,-663.442"/>
-<polygon fill="black" stroke="black" points="2241.01,-660.995 2231.85,-655.667 2235.68,-665.543 2241.01,-660.995"/>
-</g>
-<!-- 69 -->
-<g id="node70" class="node"><title>69</title>
-<path fill="#399de5" stroke="black" d="M2355,-655.5C2355,-655.5 2282,-655.5 2282,-655.5 2276,-655.5 2270,-649.5 2270,-643.5 2270,-643.5 2270,-599.5 2270,-599.5 2270,-593.5 2276,-587.5 2282,-587.5 2282,-587.5 2355,-587.5 2355,-587.5 2361,-587.5 2367,-593.5 2367,-599.5 2367,-599.5 2367,-643.5 2367,-643.5 2367,-649.5 2361,-655.5 2355,-655.5"/>
-<text text-anchor="start" x="2289.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2279" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2278" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="2289.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 67&#45;&gt;69 -->
-<g id="edge69" class="edge"><title>67&#45;&gt;69</title>
-<path fill="none" stroke="black" d="M2308.7,-698.907C2310.08,-688.204 2311.56,-676.615 2312.95,-665.776"/>
-<polygon fill="black" stroke="black" points="2316.45,-666.031 2314.25,-655.667 2309.5,-665.141 2316.45,-666.031"/>
-</g>
-<!-- 72 -->
-<g id="node73" class="node"><title>72</title>
-<path fill="#f2c09c" stroke="black" d="M2692.5,-1020C2692.5,-1020 2456.5,-1020 2456.5,-1020 2450.5,-1020 2444.5,-1014 2444.5,-1008 2444.5,-1008 2444.5,-949 2444.5,-949 2444.5,-943 2450.5,-937 2456.5,-937 2456.5,-937 2692.5,-937 2692.5,-937 2698.5,-937 2704.5,-943 2704.5,-949 2704.5,-949 2704.5,-1008 2704.5,-1008 2704.5,-1014 2698.5,-1020 2692.5,-1020"/>
-<text text-anchor="start" x="2452.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.419</text>
-<text text-anchor="start" x="2537" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="2535" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="2534" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
-<text text-anchor="start" x="2545.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 71&#45;&gt;72 -->
-<g id="edge72" class="edge"><title>71&#45;&gt;72</title>
-<path fill="none" stroke="black" d="M2574.5,-1055.91C2574.5,-1047.65 2574.5,-1038.86 2574.5,-1030.3"/>
-<polygon fill="black" stroke="black" points="2578,-1030.02 2574.5,-1020.02 2571,-1030.02 2578,-1030.02"/>
-</g>
-<!-- 79 -->
-<g id="node80" class="node"><title>79</title>
-<path fill="#399de5" stroke="black" d="M2808,-1012.5C2808,-1012.5 2735,-1012.5 2735,-1012.5 2729,-1012.5 2723,-1006.5 2723,-1000.5 2723,-1000.5 2723,-956.5 2723,-956.5 2723,-950.5 2729,-944.5 2735,-944.5 2735,-944.5 2808,-944.5 2808,-944.5 2814,-944.5 2820,-950.5 2820,-956.5 2820,-956.5 2820,-1000.5 2820,-1000.5 2820,-1006.5 2814,-1012.5 2808,-1012.5"/>
-<text text-anchor="start" x="2742.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2732" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="2731" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="2742.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 71&#45;&gt;79 -->
-<g id="edge79" class="edge"><title>71&#45;&gt;79</title>
-<path fill="none" stroke="black" d="M2651.82,-1055.85C2672.13,-1044.66 2693.85,-1032.22 2713.5,-1020 2714.44,-1019.42 2715.38,-1018.82 2716.33,-1018.22"/>
-<polygon fill="black" stroke="black" points="2718.45,-1021.02 2724.94,-1012.65 2714.64,-1015.15 2718.45,-1021.02"/>
-</g>
-<!-- 73 -->
-<g id="node74" class="node"><title>73</title>
-<path fill="#399de5" stroke="black" d="M2634,-893.5C2634,-893.5 2561,-893.5 2561,-893.5 2555,-893.5 2549,-887.5 2549,-881.5 2549,-881.5 2549,-837.5 2549,-837.5 2549,-831.5 2555,-825.5 2561,-825.5 2561,-825.5 2634,-825.5 2634,-825.5 2640,-825.5 2646,-831.5 2646,-837.5 2646,-837.5 2646,-881.5 2646,-881.5 2646,-887.5 2640,-893.5 2634,-893.5"/>
-<text text-anchor="start" x="2568.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2558" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2557" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="2568.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 72&#45;&gt;73 -->
-<g id="edge73" class="edge"><title>72&#45;&gt;73</title>
-<path fill="none" stroke="black" d="M2582.48,-936.907C2584.58,-926.204 2586.86,-914.615 2588.99,-903.776"/>
-<polygon fill="black" stroke="black" points="2592.49,-904.154 2590.98,-893.667 2585.62,-902.804 2592.49,-904.154"/>
-</g>
-<!-- 74 -->
-<g id="node75" class="node"><title>74</title>
-<path fill="#eca06a" stroke="black" d="M2786.5,-901C2786.5,-901 2676.5,-901 2676.5,-901 2670.5,-901 2664.5,-895 2664.5,-889 2664.5,-889 2664.5,-830 2664.5,-830 2664.5,-824 2670.5,-818 2676.5,-818 2676.5,-818 2786.5,-818 2786.5,-818 2792.5,-818 2798.5,-824 2798.5,-830 2798.5,-830 2798.5,-889 2798.5,-889 2798.5,-895 2792.5,-901 2786.5,-901"/>
-<text text-anchor="start" x="2672.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ &#45;0.362</text>
-<text text-anchor="start" x="2698" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.32</text>
-<text text-anchor="start" x="2692" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="2691" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 1]</text>
-<text text-anchor="start" x="2702.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 72&#45;&gt;74 -->
-<g id="edge74" class="edge"><title>72&#45;&gt;74</title>
-<path fill="none" stroke="black" d="M2628.97,-936.907C2641.88,-927.288 2655.75,-916.953 2668.98,-907.09"/>
-<polygon fill="black" stroke="black" points="2671.2,-909.803 2677.13,-901.021 2667.02,-904.19 2671.2,-909.803"/>
-</g>
-<!-- 75 -->
-<g id="node76" class="node"><title>75</title>
-<path fill="#ffffff" stroke="black" d="M2649,-782C2649,-782 2476,-782 2476,-782 2470,-782 2464,-776 2464,-770 2464,-770 2464,-711 2464,-711 2464,-705 2470,-699 2476,-699 2476,-699 2649,-699 2649,-699 2655,-699 2661,-705 2661,-711 2661,-711 2661,-770 2661,-770 2661,-776 2655,-782 2649,-782"/>
-<text text-anchor="start" x="2472" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.999</text>
-<text text-anchor="start" x="2533.5" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="2523" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="2522" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="2533.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 74&#45;&gt;75 -->
-<g id="edge75" class="edge"><title>74&#45;&gt;75</title>
-<path fill="none" stroke="black" d="M2672.87,-817.907C2658.84,-808.197 2643.76,-797.758 2629.39,-787.811"/>
-<polygon fill="black" stroke="black" points="2631.24,-784.835 2621.03,-782.021 2627.26,-790.591 2631.24,-784.835"/>
-</g>
-<!-- 78 -->
-<g id="node79" class="node"><title>78</title>
-<path fill="#e58139" stroke="black" d="M2768,-774.5C2768,-774.5 2695,-774.5 2695,-774.5 2689,-774.5 2683,-768.5 2683,-762.5 2683,-762.5 2683,-718.5 2683,-718.5 2683,-712.5 2689,-706.5 2695,-706.5 2695,-706.5 2768,-706.5 2768,-706.5 2774,-706.5 2780,-712.5 2780,-718.5 2780,-718.5 2780,-762.5 2780,-762.5 2780,-768.5 2774,-774.5 2768,-774.5"/>
-<text text-anchor="start" x="2702.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2692" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="2691" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
-<text text-anchor="start" x="2702.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 74&#45;&gt;78 -->
-<g id="edge78" class="edge"><title>74&#45;&gt;78</title>
-<path fill="none" stroke="black" d="M2731.5,-817.907C2731.5,-807.204 2731.5,-795.615 2731.5,-784.776"/>
-<polygon fill="black" stroke="black" points="2735,-784.667 2731.5,-774.667 2728,-784.667 2735,-784.667"/>
-</g>
-<!-- 76 -->
-<g id="node77" class="node"><title>76</title>
-<path fill="#e58139" stroke="black" d="M2484,-655.5C2484,-655.5 2411,-655.5 2411,-655.5 2405,-655.5 2399,-649.5 2399,-643.5 2399,-643.5 2399,-599.5 2399,-599.5 2399,-593.5 2405,-587.5 2411,-587.5 2411,-587.5 2484,-587.5 2484,-587.5 2490,-587.5 2496,-593.5 2496,-599.5 2496,-599.5 2496,-643.5 2496,-643.5 2496,-649.5 2490,-655.5 2484,-655.5"/>
-<text text-anchor="start" x="2418.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2408" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2407" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="2418.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 75&#45;&gt;76 -->
-<g id="edge76" class="edge"><title>75&#45;&gt;76</title>
-<path fill="none" stroke="black" d="M2522.6,-698.907C2511.21,-687.321 2498.81,-674.698 2487.42,-663.111"/>
-<polygon fill="black" stroke="black" points="2489.61,-660.345 2480.1,-655.667 2484.61,-665.252 2489.61,-660.345"/>
-</g>
-<!-- 77 -->
-<g id="node78" class="node"><title>77</title>
-<path fill="#399de5" stroke="black" d="M2599,-655.5C2599,-655.5 2526,-655.5 2526,-655.5 2520,-655.5 2514,-649.5 2514,-643.5 2514,-643.5 2514,-599.5 2514,-599.5 2514,-593.5 2520,-587.5 2526,-587.5 2526,-587.5 2599,-587.5 2599,-587.5 2605,-587.5 2611,-593.5 2611,-599.5 2611,-599.5 2611,-643.5 2611,-643.5 2611,-649.5 2605,-655.5 2599,-655.5"/>
-<text text-anchor="start" x="2533.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2523" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2522" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="2533.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 75&#45;&gt;77 -->
-<g id="edge77" class="edge"><title>75&#45;&gt;77</title>
-<path fill="none" stroke="black" d="M2562.5,-698.907C2562.5,-688.204 2562.5,-676.615 2562.5,-665.776"/>
-<polygon fill="black" stroke="black" points="2566,-665.667 2562.5,-655.667 2559,-665.667 2566,-665.667"/>
-</g>
-<!-- 81 -->
-<g id="node82" class="node"><title>81</title>
-<path fill="#e5833c" stroke="black" d="M3058,-1258C3058,-1258 2879,-1258 2879,-1258 2873,-1258 2867,-1252 2867,-1246 2867,-1246 2867,-1187 2867,-1187 2867,-1181 2873,-1175 2879,-1175 2879,-1175 3058,-1175 3058,-1175 3064,-1175 3070,-1181 3070,-1187 3070,-1187 3070,-1246 3070,-1246 3070,-1252 3064,-1258 3058,-1258"/>
-<text text-anchor="start" x="2875" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 4.02</text>
-<text text-anchor="start" x="2931" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.029</text>
-<text text-anchor="start" x="2921" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 206</text>
-<text text-anchor="start" x="2920" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 3]</text>
-<text text-anchor="start" x="2939.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 80&#45;&gt;81 -->
-<g id="edge81" class="edge"><title>80&#45;&gt;81</title>
-<path fill="none" stroke="black" d="M2968.5,-1293.91C2968.5,-1285.65 2968.5,-1276.86 2968.5,-1268.3"/>
-<polygon fill="black" stroke="black" points="2972,-1268.02 2968.5,-1258.02 2965,-1268.02 2972,-1268.02"/>
-</g>
-<!-- 88 -->
-<g id="node89" class="node"><title>88</title>
-<path fill="#399de5" stroke="black" d="M3173,-1250.5C3173,-1250.5 3100,-1250.5 3100,-1250.5 3094,-1250.5 3088,-1244.5 3088,-1238.5 3088,-1238.5 3088,-1194.5 3088,-1194.5 3088,-1188.5 3094,-1182.5 3100,-1182.5 3100,-1182.5 3173,-1182.5 3173,-1182.5 3179,-1182.5 3185,-1188.5 3185,-1194.5 3185,-1194.5 3185,-1238.5 3185,-1238.5 3185,-1244.5 3179,-1250.5 3173,-1250.5"/>
-<text text-anchor="start" x="3107.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3097" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="3096" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
-<text text-anchor="start" x="3107.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 80&#45;&gt;88 -->
-<g id="edge88" class="edge"><title>80&#45;&gt;88</title>
-<path fill="none" stroke="black" d="M3027.03,-1293.83C3043.67,-1282.26 3061.8,-1269.64 3078.5,-1258 3079.25,-1257.48 3080,-1256.95 3080.76,-1256.42"/>
-<polygon fill="black" stroke="black" points="3082.83,-1259.25 3089.03,-1250.66 3078.82,-1253.51 3082.83,-1259.25"/>
-</g>
-<!-- 82 -->
-<g id="node83" class="node"><title>82</title>
-<path fill="#e5823b" stroke="black" d="M3071.5,-1139C3071.5,-1139 2865.5,-1139 2865.5,-1139 2859.5,-1139 2853.5,-1133 2853.5,-1127 2853.5,-1127 2853.5,-1068 2853.5,-1068 2853.5,-1062 2859.5,-1056 2865.5,-1056 2865.5,-1056 3071.5,-1056 3071.5,-1056 3077.5,-1056 3083.5,-1062 3083.5,-1068 3083.5,-1068 3083.5,-1127 3083.5,-1127 3083.5,-1133 3077.5,-1139 3071.5,-1139"/>
-<text text-anchor="start" x="2861.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_rerror_rate ≤ &#45;0.012</text>
-<text text-anchor="start" x="2931" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.019</text>
-<text text-anchor="start" x="2921" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 205</text>
-<text text-anchor="start" x="2920" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 2]</text>
-<text text-anchor="start" x="2939.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 81&#45;&gt;82 -->
-<g id="edge82" class="edge"><title>81&#45;&gt;82</title>
-<path fill="none" stroke="black" d="M2968.5,-1174.91C2968.5,-1166.65 2968.5,-1157.86 2968.5,-1149.3"/>
-<polygon fill="black" stroke="black" points="2972,-1149.02 2968.5,-1139.02 2965,-1149.02 2972,-1149.02"/>
-</g>
-<!-- 87 -->
-<g id="node88" class="node"><title>87</title>
-<path fill="#399de5" stroke="black" d="M3187,-1131.5C3187,-1131.5 3114,-1131.5 3114,-1131.5 3108,-1131.5 3102,-1125.5 3102,-1119.5 3102,-1119.5 3102,-1075.5 3102,-1075.5 3102,-1069.5 3108,-1063.5 3114,-1063.5 3114,-1063.5 3187,-1063.5 3187,-1063.5 3193,-1063.5 3199,-1069.5 3199,-1075.5 3199,-1075.5 3199,-1119.5 3199,-1119.5 3199,-1125.5 3193,-1131.5 3187,-1131.5"/>
-<text text-anchor="start" x="3121.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3111" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3110" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="3121.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 81&#45;&gt;87 -->
-<g id="edge87" class="edge"><title>81&#45;&gt;87</title>
-<path fill="none" stroke="black" d="M3035.87,-1174.9C3054.36,-1163.49 3074.32,-1150.94 3092.5,-1139 3093.29,-1138.48 3094.08,-1137.96 3094.87,-1137.44"/>
-<polygon fill="black" stroke="black" points="3097.13,-1140.14 3103.49,-1131.66 3093.23,-1134.32 3097.13,-1140.14"/>
-</g>
-<!-- 83 -->
-<g id="node84" class="node"><title>83</title>
-<path fill="#f2c09c" stroke="black" d="M3086.5,-1020C3086.5,-1020 2850.5,-1020 2850.5,-1020 2844.5,-1020 2838.5,-1014 2838.5,-1008 2838.5,-1008 2838.5,-949 2838.5,-949 2838.5,-943 2844.5,-937 2850.5,-937 2850.5,-937 3086.5,-937 3086.5,-937 3092.5,-937 3098.5,-943 3098.5,-949 3098.5,-949 3098.5,-1008 3098.5,-1008 3098.5,-1014 3092.5,-1020 3086.5,-1020"/>
-<text text-anchor="start" x="2846.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.289</text>
-<text text-anchor="start" x="2931" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="2929" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="2928" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 2]</text>
-<text text-anchor="start" x="2939.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 82&#45;&gt;83 -->
-<g id="edge83" class="edge"><title>82&#45;&gt;83</title>
-<path fill="none" stroke="black" d="M2968.5,-1055.91C2968.5,-1047.65 2968.5,-1038.86 2968.5,-1030.3"/>
-<polygon fill="black" stroke="black" points="2972,-1030.02 2968.5,-1020.02 2965,-1030.02 2972,-1030.02"/>
-</g>
-<!-- 86 -->
-<g id="node87" class="node"><title>86</title>
-<path fill="#e58139" stroke="black" d="M3218,-1012.5C3218,-1012.5 3129,-1012.5 3129,-1012.5 3123,-1012.5 3117,-1006.5 3117,-1000.5 3117,-1000.5 3117,-956.5 3117,-956.5 3117,-950.5 3123,-944.5 3129,-944.5 3129,-944.5 3218,-944.5 3218,-944.5 3224,-944.5 3230,-950.5 3230,-956.5 3230,-956.5 3230,-1000.5 3230,-1000.5 3230,-1006.5 3224,-1012.5 3218,-1012.5"/>
-<text text-anchor="start" x="3144.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3126" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 199</text>
-<text text-anchor="start" x="3125" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [199, 0]</text>
-<text text-anchor="start" x="3144.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 82&#45;&gt;86 -->
-<g id="edge86" class="edge"><title>82&#45;&gt;86</title>
-<path fill="none" stroke="black" d="M3043.89,-1055.85C3064.62,-1044.45 3087.02,-1031.91 3107.5,-1020 3108.77,-1019.26 3110.05,-1018.51 3111.35,-1017.75"/>
-<polygon fill="black" stroke="black" points="3113.14,-1020.76 3119.96,-1012.65 3109.57,-1014.74 3113.14,-1020.76"/>
-</g>
-<!-- 84 -->
-<g id="node85" class="node"><title>84</title>
-<path fill="#e58139" stroke="black" d="M2905,-893.5C2905,-893.5 2832,-893.5 2832,-893.5 2826,-893.5 2820,-887.5 2820,-881.5 2820,-881.5 2820,-837.5 2820,-837.5 2820,-831.5 2826,-825.5 2832,-825.5 2832,-825.5 2905,-825.5 2905,-825.5 2911,-825.5 2917,-831.5 2917,-837.5 2917,-837.5 2917,-881.5 2917,-881.5 2917,-887.5 2911,-893.5 2905,-893.5"/>
-<text text-anchor="start" x="2839.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2829" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="2828" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
-<text text-anchor="start" x="2839.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 83&#45;&gt;84 -->
-<g id="edge84" class="edge"><title>83&#45;&gt;84</title>
-<path fill="none" stroke="black" d="M2933.81,-936.907C2924,-925.432 2913.32,-912.938 2903.49,-901.442"/>
-<polygon fill="black" stroke="black" points="2906.01,-898.995 2896.85,-893.667 2900.68,-903.543 2906.01,-898.995"/>
-</g>
-<!-- 85 -->
-<g id="node86" class="node"><title>85</title>
-<path fill="#399de5" stroke="black" d="M3020,-893.5C3020,-893.5 2947,-893.5 2947,-893.5 2941,-893.5 2935,-887.5 2935,-881.5 2935,-881.5 2935,-837.5 2935,-837.5 2935,-831.5 2941,-825.5 2947,-825.5 2947,-825.5 3020,-825.5 3020,-825.5 3026,-825.5 3032,-831.5 3032,-837.5 3032,-837.5 3032,-881.5 3032,-881.5 3032,-887.5 3026,-893.5 3020,-893.5"/>
-<text text-anchor="start" x="2954.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2944" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="2943" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="2954.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 83&#45;&gt;85 -->
-<g id="edge85" class="edge"><title>83&#45;&gt;85</title>
-<path fill="none" stroke="black" d="M2973.7,-936.907C2975.08,-926.204 2976.56,-914.615 2977.95,-903.776"/>
-<polygon fill="black" stroke="black" points="2981.45,-904.031 2979.25,-893.667 2974.5,-903.141 2981.45,-904.031"/>
-</g>
-<!-- 90 -->
-<g id="node91" class="node"><title>90</title>
-<path fill="#e58139" stroke="black" d="M3133,-1488.5C3133,-1488.5 3052,-1488.5 3052,-1488.5 3046,-1488.5 3040,-1482.5 3040,-1476.5 3040,-1476.5 3040,-1432.5 3040,-1432.5 3040,-1426.5 3046,-1420.5 3052,-1420.5 3052,-1420.5 3133,-1420.5 3133,-1420.5 3139,-1420.5 3145,-1426.5 3145,-1432.5 3145,-1432.5 3145,-1476.5 3145,-1476.5 3145,-1482.5 3139,-1488.5 3133,-1488.5"/>
-<text text-anchor="start" x="3063.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3049" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 67</text>
-<text text-anchor="start" x="3048" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [67, 0]</text>
-<text text-anchor="start" x="3063.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 89&#45;&gt;90 -->
-<g id="edge90" class="edge"><title>89&#45;&gt;90</title>
-<path fill="none" stroke="black" d="M3131.68,-1531.91C3126.02,-1520.87 3119.88,-1508.9 3114.18,-1497.77"/>
-<polygon fill="black" stroke="black" points="3117.19,-1495.97 3109.51,-1488.67 3110.96,-1499.16 3117.19,-1495.97"/>
-</g>
-<!-- 91 -->
-<g id="node92" class="node"><title>91</title>
-<path fill="#399de5" stroke="black" d="M3248,-1488.5C3248,-1488.5 3175,-1488.5 3175,-1488.5 3169,-1488.5 3163,-1482.5 3163,-1476.5 3163,-1476.5 3163,-1432.5 3163,-1432.5 3163,-1426.5 3169,-1420.5 3175,-1420.5 3175,-1420.5 3248,-1420.5 3248,-1420.5 3254,-1420.5 3260,-1426.5 3260,-1432.5 3260,-1432.5 3260,-1476.5 3260,-1476.5 3260,-1482.5 3254,-1488.5 3248,-1488.5"/>
-<text text-anchor="start" x="3182.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3172" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="3171" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
-<text text-anchor="start" x="3182.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 89&#45;&gt;91 -->
-<g id="edge91" class="edge"><title>89&#45;&gt;91</title>
-<path fill="none" stroke="black" d="M3172.97,-1531.91C3178.53,-1520.87 3184.57,-1508.9 3190.18,-1497.77"/>
-<polygon fill="black" stroke="black" points="3193.4,-1499.17 3194.77,-1488.67 3187.15,-1496.02 3193.4,-1499.17"/>
-</g>
-<!-- 93 -->
-<g id="node94" class="node"><title>93</title>
-<path fill="#e78c4b" stroke="black" d="M3889,-1615C3889,-1615 3778,-1615 3778,-1615 3772,-1615 3766,-1609 3766,-1603 3766,-1603 3766,-1544 3766,-1544 3766,-1538 3772,-1532 3778,-1532 3778,-1532 3889,-1532 3889,-1532 3895,-1532 3901,-1538 3901,-1544 3901,-1544 3901,-1603 3901,-1603 3901,-1609 3895,-1615 3889,-1615"/>
-<text text-anchor="start" x="3774" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.025</text>
-<text text-anchor="start" x="3800" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.15</text>
-<text text-anchor="start" x="3786" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 183</text>
-<text text-anchor="start" x="3780.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [168, 15]</text>
-<text text-anchor="start" x="3804.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 92&#45;&gt;93 -->
-<g id="edge93" class="edge"><title>92&#45;&gt;93</title>
-<path fill="none" stroke="black" d="M3896.19,-1650.91C3888.75,-1641.83 3880.78,-1632.12 3873.11,-1622.77"/>
-<polygon fill="black" stroke="black" points="3875.8,-1620.53 3866.75,-1615.02 3870.39,-1624.97 3875.8,-1620.53"/>
-</g>
-<!-- 108 -->
-<g id="node109" class="node"><title>108</title>
-<path fill="#4ea8e8" stroke="black" d="M4118,-1615C4118,-1615 3931,-1615 3931,-1615 3925,-1615 3919,-1609 3919,-1603 3919,-1603 3919,-1544 3919,-1544 3919,-1538 3925,-1532 3931,-1532 3931,-1532 4118,-1532 4118,-1532 4124,-1532 4130,-1538 4130,-1544 4130,-1544 4130,-1603 4130,-1603 4130,-1609 4124,-1615 4118,-1615"/>
-<text text-anchor="start" x="3927" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 0.307</text>
-<text text-anchor="start" x="3987" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.175</text>
-<text text-anchor="start" x="3981" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 31</text>
-<text text-anchor="start" x="3980" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 28]</text>
-<text text-anchor="start" x="3995.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 92&#45;&gt;108 -->
-<g id="edge108" class="edge"><title>92&#45;&gt;108</title>
-<path fill="none" stroke="black" d="M3962.46,-1650.91C3969.75,-1641.92 3977.56,-1632.32 3985.08,-1623.05"/>
-<polygon fill="black" stroke="black" points="3988.01,-1624.99 3991.6,-1615.02 3982.58,-1620.58 3988.01,-1624.99"/>
-</g>
-<!-- 94 -->
-<g id="node95" class="node"><title>94</title>
-<path fill="#e6853f" stroke="black" d="M3679,-1496C3679,-1496 3590,-1496 3590,-1496 3584,-1496 3578,-1490 3578,-1484 3578,-1484 3578,-1425 3578,-1425 3578,-1419 3584,-1413 3590,-1413 3590,-1413 3679,-1413 3679,-1413 3685,-1413 3691,-1419 3691,-1425 3691,-1425 3691,-1484 3691,-1484 3691,-1490 3685,-1496 3679,-1496"/>
-<text text-anchor="start" x="3589" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ &#45;0.698</text>
-<text text-anchor="start" x="3597" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.058</text>
-<text text-anchor="start" x="3587" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 167</text>
-<text text-anchor="start" x="3586" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [162, 5]</text>
-<text text-anchor="start" x="3605.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 93&#45;&gt;94 -->
-<g id="edge94" class="edge"><title>93&#45;&gt;94</title>
-<path fill="none" stroke="black" d="M3765.85,-1532.73C3744.46,-1520.15 3720.87,-1506.28 3699.66,-1493.81"/>
-<polygon fill="black" stroke="black" points="3701.43,-1490.79 3691.04,-1488.74 3697.89,-1496.83 3701.43,-1490.79"/>
-</g>
-<!-- 103 -->
-<g id="node104" class="node"><title>103</title>
-<path fill="#b0d8f5" stroke="black" d="M3937.5,-1496C3937.5,-1496 3735.5,-1496 3735.5,-1496 3729.5,-1496 3723.5,-1490 3723.5,-1484 3723.5,-1484 3723.5,-1425 3723.5,-1425 3723.5,-1419 3729.5,-1413 3735.5,-1413 3735.5,-1413 3937.5,-1413 3937.5,-1413 3943.5,-1413 3949.5,-1419 3949.5,-1425 3949.5,-1425 3949.5,-1484 3949.5,-1484 3949.5,-1490 3943.5,-1496 3937.5,-1496"/>
-<text text-anchor="start" x="3731.5" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.724</text>
-<text text-anchor="start" x="3799" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.469</text>
-<text text-anchor="start" x="3793" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 16</text>
-<text text-anchor="start" x="3792" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 10]</text>
-<text text-anchor="start" x="3807.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 93&#45;&gt;103 -->
-<g id="edge103" class="edge"><title>93&#45;&gt;103</title>
-<path fill="none" stroke="black" d="M3834.54,-1531.91C3834.75,-1523.56 3834.98,-1514.67 3835.2,-1506.02"/>
-<polygon fill="black" stroke="black" points="3838.7,-1506.11 3835.46,-1496.02 3831.71,-1505.93 3838.7,-1506.11"/>
-</g>
-<!-- 95 -->
-<g id="node96" class="node"><title>95</title>
-<path fill="#e5833b" stroke="black" d="M3519,-1377C3519,-1377 3346,-1377 3346,-1377 3340,-1377 3334,-1371 3334,-1365 3334,-1365 3334,-1306 3334,-1306 3334,-1300 3340,-1294 3346,-1294 3346,-1294 3519,-1294 3519,-1294 3525,-1294 3531,-1300 3531,-1306 3531,-1306 3531,-1365 3531,-1365 3531,-1371 3525,-1377 3519,-1377"/>
-<text text-anchor="start" x="3342" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;1.026</text>
-<text text-anchor="start" x="3395" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.024</text>
-<text text-anchor="start" x="3385" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 162</text>
-<text text-anchor="start" x="3384" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [160, 2]</text>
-<text text-anchor="start" x="3403.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 94&#45;&gt;95 -->
-<g id="edge95" class="edge"><title>94&#45;&gt;95</title>
-<path fill="none" stroke="black" d="M3577.96,-1420.75C3557.36,-1408.82 3533.66,-1395.09 3511.46,-1382.24"/>
-<polygon fill="black" stroke="black" points="3513.12,-1379.15 3502.71,-1377.17 3509.61,-1385.21 3513.12,-1379.15"/>
-</g>
-<!-- 100 -->
-<g id="node101" class="node"><title>100</title>
-<path fill="#bddef6" stroke="black" d="M3707.5,-1377C3707.5,-1377 3561.5,-1377 3561.5,-1377 3555.5,-1377 3549.5,-1371 3549.5,-1365 3549.5,-1365 3549.5,-1306 3549.5,-1306 3549.5,-1300 3555.5,-1294 3561.5,-1294 3561.5,-1294 3707.5,-1294 3707.5,-1294 3713.5,-1294 3719.5,-1300 3719.5,-1306 3719.5,-1306 3719.5,-1365 3719.5,-1365 3719.5,-1371 3713.5,-1377 3707.5,-1377"/>
-<text text-anchor="start" x="3557.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;0.945</text>
-<text text-anchor="start" x="3601" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.48</text>
-<text text-anchor="start" x="3595" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="3594" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 3]</text>
-<text text-anchor="start" x="3605.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 94&#45;&gt;100 -->
-<g id="edge100" class="edge"><title>94&#45;&gt;100</title>
-<path fill="none" stroke="black" d="M3634.5,-1412.91C3634.5,-1404.65 3634.5,-1395.86 3634.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="3638,-1387.02 3634.5,-1377.02 3631,-1387.02 3638,-1387.02"/>
-</g>
-<!-- 96 -->
-<g id="node97" class="node"><title>96</title>
-<path fill="#eb9d65" stroke="black" d="M3370.5,-1258C3370.5,-1258 3246.5,-1258 3246.5,-1258 3240.5,-1258 3234.5,-1252 3234.5,-1246 3234.5,-1246 3234.5,-1187 3234.5,-1187 3234.5,-1181 3240.5,-1175 3246.5,-1175 3246.5,-1175 3370.5,-1175 3370.5,-1175 3376.5,-1175 3382.5,-1181 3382.5,-1187 3382.5,-1187 3382.5,-1246 3382.5,-1246 3382.5,-1252 3376.5,-1258 3370.5,-1258"/>
-<text text-anchor="start" x="3242.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">diff_srv_rate ≤ 2.451</text>
-<text text-anchor="start" x="3271" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.298</text>
-<text text-anchor="start" x="3265" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
-<text text-anchor="start" x="3268" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 2]</text>
-<text text-anchor="start" x="3279.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 95&#45;&gt;96 -->
-<g id="edge96" class="edge"><title>95&#45;&gt;96</title>
-<path fill="none" stroke="black" d="M3389.48,-1293.91C3379.57,-1284.56 3368.95,-1274.54 3358.77,-1264.93"/>
-<polygon fill="black" stroke="black" points="3361.12,-1262.34 3351.45,-1258.02 3356.32,-1267.43 3361.12,-1262.34"/>
-</g>
-<!-- 99 -->
-<g id="node100" class="node"><title>99</title>
-<path fill="#e58139" stroke="black" d="M3502,-1250.5C3502,-1250.5 3413,-1250.5 3413,-1250.5 3407,-1250.5 3401,-1244.5 3401,-1238.5 3401,-1238.5 3401,-1194.5 3401,-1194.5 3401,-1188.5 3407,-1182.5 3413,-1182.5 3413,-1182.5 3502,-1182.5 3502,-1182.5 3508,-1182.5 3514,-1188.5 3514,-1194.5 3514,-1194.5 3514,-1238.5 3514,-1238.5 3514,-1244.5 3508,-1250.5 3502,-1250.5"/>
-<text text-anchor="start" x="3428.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3410" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 151</text>
-<text text-anchor="start" x="3409" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [151, 0]</text>
-<text text-anchor="start" x="3428.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 95&#45;&gt;99 -->
-<g id="edge99" class="edge"><title>95&#45;&gt;99</title>
-<path fill="none" stroke="black" d="M3441.17,-1293.91C3443.46,-1283.2 3445.94,-1271.62 3448.25,-1260.78"/>
-<polygon fill="black" stroke="black" points="3451.75,-1261.18 3450.41,-1250.67 3444.9,-1259.71 3451.75,-1261.18"/>
-</g>
-<!-- 97 -->
-<g id="node98" class="node"><title>97</title>
-<path fill="#e58139" stroke="black" d="M3323,-1131.5C3323,-1131.5 3250,-1131.5 3250,-1131.5 3244,-1131.5 3238,-1125.5 3238,-1119.5 3238,-1119.5 3238,-1075.5 3238,-1075.5 3238,-1069.5 3244,-1063.5 3250,-1063.5 3250,-1063.5 3323,-1063.5 3323,-1063.5 3329,-1063.5 3335,-1069.5 3335,-1075.5 3335,-1075.5 3335,-1119.5 3335,-1119.5 3335,-1125.5 3329,-1131.5 3323,-1131.5"/>
-<text text-anchor="start" x="3257.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3247" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
-<text text-anchor="start" x="3246" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 0]</text>
-<text text-anchor="start" x="3257.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 96&#45;&gt;97 -->
-<g id="edge97" class="edge"><title>96&#45;&gt;97</title>
-<path fill="none" stroke="black" d="M3300.87,-1174.91C3298.85,-1164.2 3296.68,-1152.62 3294.64,-1141.78"/>
-<polygon fill="black" stroke="black" points="3298.02,-1140.85 3292.74,-1131.67 3291.14,-1142.14 3298.02,-1140.85"/>
-</g>
-<!-- 98 -->
-<g id="node99" class="node"><title>98</title>
-<path fill="#399de5" stroke="black" d="M3438,-1131.5C3438,-1131.5 3365,-1131.5 3365,-1131.5 3359,-1131.5 3353,-1125.5 3353,-1119.5 3353,-1119.5 3353,-1075.5 3353,-1075.5 3353,-1069.5 3359,-1063.5 3365,-1063.5 3365,-1063.5 3438,-1063.5 3438,-1063.5 3444,-1063.5 3450,-1069.5 3450,-1075.5 3450,-1075.5 3450,-1119.5 3450,-1119.5 3450,-1125.5 3444,-1131.5 3438,-1131.5"/>
-<text text-anchor="start" x="3372.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3362" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3361" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="3372.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 96&#45;&gt;98 -->
-<g id="edge98" class="edge"><title>96&#45;&gt;98</title>
-<path fill="none" stroke="black" d="M3340.77,-1174.91C3349.8,-1163.54 3359.63,-1151.18 3368.69,-1139.77"/>
-<polygon fill="black" stroke="black" points="3371.65,-1141.67 3375.14,-1131.67 3366.17,-1137.32 3371.65,-1141.67"/>
-</g>
-<!-- 101 -->
-<g id="node102" class="node"><title>101</title>
-<path fill="#e58139" stroke="black" d="M3630,-1250.5C3630,-1250.5 3557,-1250.5 3557,-1250.5 3551,-1250.5 3545,-1244.5 3545,-1238.5 3545,-1238.5 3545,-1194.5 3545,-1194.5 3545,-1188.5 3551,-1182.5 3557,-1182.5 3557,-1182.5 3630,-1182.5 3630,-1182.5 3636,-1182.5 3642,-1188.5 3642,-1194.5 3642,-1194.5 3642,-1238.5 3642,-1238.5 3642,-1244.5 3636,-1250.5 3630,-1250.5"/>
-<text text-anchor="start" x="3564.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3554" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3553" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="3564.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 100&#45;&gt;101 -->
-<g id="edge101" class="edge"><title>100&#45;&gt;101</title>
-<path fill="none" stroke="black" d="M3620.28,-1293.91C3616.45,-1282.98 3612.3,-1271.14 3608.43,-1260.11"/>
-<polygon fill="black" stroke="black" points="3611.73,-1258.95 3605.12,-1250.67 3605.13,-1261.26 3611.73,-1258.95"/>
-</g>
-<!-- 102 -->
-<g id="node103" class="node"><title>102</title>
-<path fill="#399de5" stroke="black" d="M3745,-1250.5C3745,-1250.5 3672,-1250.5 3672,-1250.5 3666,-1250.5 3660,-1244.5 3660,-1238.5 3660,-1238.5 3660,-1194.5 3660,-1194.5 3660,-1188.5 3666,-1182.5 3672,-1182.5 3672,-1182.5 3745,-1182.5 3745,-1182.5 3751,-1182.5 3757,-1188.5 3757,-1194.5 3757,-1194.5 3757,-1238.5 3757,-1238.5 3757,-1244.5 3751,-1250.5 3745,-1250.5"/>
-<text text-anchor="start" x="3679.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3669" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="3668" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="3679.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 100&#45;&gt;102 -->
-<g id="edge102" class="edge"><title>100&#45;&gt;102</title>
-<path fill="none" stroke="black" d="M3660.17,-1293.91C3667.22,-1282.76 3674.88,-1270.66 3681.97,-1259.44"/>
-<polygon fill="black" stroke="black" points="3685.14,-1260.99 3687.52,-1250.67 3679.22,-1257.25 3685.14,-1260.99"/>
-</g>
-<!-- 104 -->
-<g id="node105" class="node"><title>104</title>
-<path fill="#e9965a" stroke="black" d="M3923,-1377C3923,-1377 3750,-1377 3750,-1377 3744,-1377 3738,-1371 3738,-1365 3738,-1365 3738,-1306 3738,-1306 3738,-1300 3744,-1294 3750,-1294 3750,-1294 3923,-1294 3923,-1294 3929,-1294 3935,-1300 3935,-1306 3935,-1306 3935,-1365 3935,-1365 3935,-1371 3929,-1377 3923,-1377"/>
-<text text-anchor="start" x="3746" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.733</text>
-<text text-anchor="start" x="3799" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.245</text>
-<text text-anchor="start" x="3797" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="3796" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 1]</text>
-<text text-anchor="start" x="3807.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 103&#45;&gt;104 -->
-<g id="edge104" class="edge"><title>103&#45;&gt;104</title>
-<path fill="none" stroke="black" d="M3836.5,-1412.91C3836.5,-1404.65 3836.5,-1395.86 3836.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="3840,-1387.02 3836.5,-1377.02 3833,-1387.02 3840,-1387.02"/>
-</g>
-<!-- 107 -->
-<g id="node108" class="node"><title>107</title>
-<path fill="#399de5" stroke="black" d="M4038,-1369.5C4038,-1369.5 3965,-1369.5 3965,-1369.5 3959,-1369.5 3953,-1363.5 3953,-1357.5 3953,-1357.5 3953,-1313.5 3953,-1313.5 3953,-1307.5 3959,-1301.5 3965,-1301.5 3965,-1301.5 4038,-1301.5 4038,-1301.5 4044,-1301.5 4050,-1307.5 4050,-1313.5 4050,-1313.5 4050,-1357.5 4050,-1357.5 4050,-1363.5 4044,-1369.5 4038,-1369.5"/>
-<text text-anchor="start" x="3972.5" y="-1354.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3962" y="-1339.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
-<text text-anchor="start" x="3961" y="-1324.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 9]</text>
-<text text-anchor="start" x="3972.5" y="-1309.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 103&#45;&gt;107 -->
-<g id="edge107" class="edge"><title>103&#45;&gt;107</title>
-<path fill="none" stroke="black" d="M3893.75,-1412.91C3910.86,-1400.77 3929.59,-1387.49 3946.55,-1375.46"/>
-<polygon fill="black" stroke="black" points="3948.59,-1378.31 3954.73,-1369.67 3944.54,-1372.6 3948.59,-1378.31"/>
-</g>
-<!-- 105 -->
-<g id="node106" class="node"><title>105</title>
-<path fill="#399de5" stroke="black" d="M3866,-1250.5C3866,-1250.5 3793,-1250.5 3793,-1250.5 3787,-1250.5 3781,-1244.5 3781,-1238.5 3781,-1238.5 3781,-1194.5 3781,-1194.5 3781,-1188.5 3787,-1182.5 3793,-1182.5 3793,-1182.5 3866,-1182.5 3866,-1182.5 3872,-1182.5 3878,-1188.5 3878,-1194.5 3878,-1194.5 3878,-1238.5 3878,-1238.5 3878,-1244.5 3872,-1250.5 3866,-1250.5"/>
-<text text-anchor="start" x="3800.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3790" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3789" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="3800.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 104&#45;&gt;105 -->
-<g id="edge105" class="edge"><title>104&#45;&gt;105</title>
-<path fill="none" stroke="black" d="M3834.07,-1293.91C3833.43,-1283.2 3832.74,-1271.62 3832.09,-1260.78"/>
-<polygon fill="black" stroke="black" points="3835.58,-1260.44 3831.48,-1250.67 3828.59,-1260.86 3835.58,-1260.44"/>
-</g>
-<!-- 106 -->
-<g id="node107" class="node"><title>106</title>
-<path fill="#e58139" stroke="black" d="M3981,-1250.5C3981,-1250.5 3908,-1250.5 3908,-1250.5 3902,-1250.5 3896,-1244.5 3896,-1238.5 3896,-1238.5 3896,-1194.5 3896,-1194.5 3896,-1188.5 3902,-1182.5 3908,-1182.5 3908,-1182.5 3981,-1182.5 3981,-1182.5 3987,-1182.5 3993,-1188.5 3993,-1194.5 3993,-1194.5 3993,-1238.5 3993,-1238.5 3993,-1244.5 3987,-1250.5 3981,-1250.5"/>
-<text text-anchor="start" x="3915.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3905" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="3904" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 0]</text>
-<text text-anchor="start" x="3915.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 104&#45;&gt;106 -->
-<g id="edge106" class="edge"><title>104&#45;&gt;106</title>
-<path fill="none" stroke="black" d="M3873.97,-1293.91C3884.67,-1282.32 3896.32,-1269.7 3907.01,-1258.11"/>
-<polygon fill="black" stroke="black" points="3909.67,-1260.39 3913.88,-1250.67 3904.53,-1255.64 3909.67,-1260.39"/>
-</g>
-<!-- 109 -->
-<g id="node110" class="node"><title>109</title>
-<path fill="#e58139" stroke="black" d="M4056,-1488.5C4056,-1488.5 3983,-1488.5 3983,-1488.5 3977,-1488.5 3971,-1482.5 3971,-1476.5 3971,-1476.5 3971,-1432.5 3971,-1432.5 3971,-1426.5 3977,-1420.5 3983,-1420.5 3983,-1420.5 4056,-1420.5 4056,-1420.5 4062,-1420.5 4068,-1426.5 4068,-1432.5 4068,-1432.5 4068,-1476.5 4068,-1476.5 4068,-1482.5 4062,-1488.5 4056,-1488.5"/>
-<text text-anchor="start" x="3990.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3980" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="3979" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
-<text text-anchor="start" x="3990.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 108&#45;&gt;109 -->
-<g id="edge109" class="edge"><title>108&#45;&gt;109</title>
-<path fill="none" stroke="black" d="M4022.77,-1531.91C4022.31,-1521.2 4021.81,-1509.62 4021.35,-1498.78"/>
-<polygon fill="black" stroke="black" points="4024.84,-1498.51 4020.92,-1488.67 4017.85,-1498.81 4024.84,-1498.51"/>
-</g>
-<!-- 110 -->
-<g id="node111" class="node"><title>110</title>
-<path fill="#399de5" stroke="black" d="M4179,-1488.5C4179,-1488.5 4098,-1488.5 4098,-1488.5 4092,-1488.5 4086,-1482.5 4086,-1476.5 4086,-1476.5 4086,-1432.5 4086,-1432.5 4086,-1426.5 4092,-1420.5 4098,-1420.5 4098,-1420.5 4179,-1420.5 4179,-1420.5 4185,-1420.5 4191,-1426.5 4191,-1432.5 4191,-1432.5 4191,-1476.5 4191,-1476.5 4191,-1482.5 4185,-1488.5 4179,-1488.5"/>
-<text text-anchor="start" x="4109.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4095" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 28</text>
-<text text-anchor="start" x="4094" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 28]</text>
-<text text-anchor="start" x="4109.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 108&#45;&gt;110 -->
-<g id="edge110" class="edge"><title>108&#45;&gt;110</title>
-<path fill="none" stroke="black" d="M4064.05,-1531.91C4075.34,-1520.32 4087.64,-1507.7 4098.93,-1496.11"/>
-<polygon fill="black" stroke="black" points="4101.71,-1498.27 4106.18,-1488.67 4096.7,-1493.39 4101.71,-1498.27"/>
-</g>
-<!-- 112 -->
-<g id="node113" class="node"><title>112</title>
-<path fill="#e58139" stroke="black" d="M4582,-1726.5C4582,-1726.5 4493,-1726.5 4493,-1726.5 4487,-1726.5 4481,-1720.5 4481,-1714.5 4481,-1714.5 4481,-1670.5 4481,-1670.5 4481,-1664.5 4487,-1658.5 4493,-1658.5 4493,-1658.5 4582,-1658.5 4582,-1658.5 4588,-1658.5 4594,-1664.5 4594,-1670.5 4594,-1670.5 4594,-1714.5 4594,-1714.5 4594,-1720.5 4588,-1726.5 4582,-1726.5"/>
-<text text-anchor="start" x="4508.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4490" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 376</text>
-<text text-anchor="start" x="4489" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [376, 0]</text>
-<text text-anchor="start" x="4508.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 111&#45;&gt;112 -->
-<g id="edge112" class="edge"><title>111&#45;&gt;112</title>
-<path fill="none" stroke="black" d="M4583.87,-1769.91C4577.1,-1758.76 4569.76,-1746.66 4562.95,-1735.44"/>
-<polygon fill="black" stroke="black" points="4565.81,-1733.4 4557.63,-1726.67 4559.82,-1737.03 4565.81,-1733.4"/>
-</g>
-<!-- 113 -->
-<g id="node114" class="node"><title>113</title>
-<path fill="#56abe9" stroke="black" d="M4735,-1734C4735,-1734 4624,-1734 4624,-1734 4618,-1734 4612,-1728 4612,-1722 4612,-1722 4612,-1663 4612,-1663 4612,-1657 4618,-1651 4624,-1651 4624,-1651 4735,-1651 4735,-1651 4741,-1651 4747,-1657 4747,-1663 4747,-1663 4747,-1722 4747,-1722 4747,-1728 4741,-1734 4735,-1734"/>
-<text text-anchor="start" x="4620" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.039</text>
-<text text-anchor="start" x="4646" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.22</text>
-<text text-anchor="start" x="4632" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 111</text>
-<text text-anchor="start" x="4631" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 97]</text>
-<text text-anchor="start" x="4650.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 111&#45;&gt;113 -->
-<g id="edge113" class="edge"><title>111&#45;&gt;113</title>
-<path fill="none" stroke="black" d="M4633.13,-1769.91C4638.47,-1761.1 4644.18,-1751.7 4649.7,-1742.61"/>
-<polygon fill="black" stroke="black" points="4652.71,-1744.39 4654.91,-1734.02 4646.73,-1740.75 4652.71,-1744.39"/>
-</g>
-<!-- 114 -->
-<g id="node115" class="node"><title>114</title>
-<path fill="#399de5" stroke="black" d="M4659,-1607.5C4659,-1607.5 4578,-1607.5 4578,-1607.5 4572,-1607.5 4566,-1601.5 4566,-1595.5 4566,-1595.5 4566,-1551.5 4566,-1551.5 4566,-1545.5 4572,-1539.5 4578,-1539.5 4578,-1539.5 4659,-1539.5 4659,-1539.5 4665,-1539.5 4671,-1545.5 4671,-1551.5 4671,-1551.5 4671,-1595.5 4671,-1595.5 4671,-1601.5 4665,-1607.5 4659,-1607.5"/>
-<text text-anchor="start" x="4589.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4575" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 97</text>
-<text text-anchor="start" x="4574" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 97]</text>
-<text text-anchor="start" x="4589.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 113&#45;&gt;114 -->
-<g id="edge114" class="edge"><title>113&#45;&gt;114</title>
-<path fill="none" stroke="black" d="M4658.34,-1650.91C4652.58,-1639.87 4646.34,-1627.9 4640.54,-1616.77"/>
-<polygon fill="black" stroke="black" points="4643.52,-1614.92 4635.79,-1607.67 4637.31,-1618.15 4643.52,-1614.92"/>
-</g>
-<!-- 115 -->
-<g id="node116" class="node"><title>115</title>
-<path fill="#e58139" stroke="black" d="M4782,-1607.5C4782,-1607.5 4701,-1607.5 4701,-1607.5 4695,-1607.5 4689,-1601.5 4689,-1595.5 4689,-1595.5 4689,-1551.5 4689,-1551.5 4689,-1545.5 4695,-1539.5 4701,-1539.5 4701,-1539.5 4782,-1539.5 4782,-1539.5 4788,-1539.5 4794,-1545.5 4794,-1551.5 4794,-1551.5 4794,-1595.5 4794,-1595.5 4794,-1601.5 4788,-1607.5 4782,-1607.5"/>
-<text text-anchor="start" x="4712.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4698" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
-<text text-anchor="start" x="4697" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 0]</text>
-<text text-anchor="start" x="4712.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 113&#45;&gt;115 -->
-<g id="edge115" class="edge"><title>113&#45;&gt;115</title>
-<path fill="none" stroke="black" d="M4701.01,-1650.91C4706.86,-1639.87 4713.2,-1627.9 4719.1,-1616.77"/>
-<polygon fill="black" stroke="black" points="4722.33,-1618.14 4723.92,-1607.67 4716.15,-1614.86 4722.33,-1618.14"/>
-</g>
-<!-- 117 -->
-<g id="node118" class="node"><title>117</title>
-<path fill="#e68844" stroke="black" d="M5900.5,-1853C5900.5,-1853 5778.5,-1853 5778.5,-1853 5772.5,-1853 5766.5,-1847 5766.5,-1841 5766.5,-1841 5766.5,-1782 5766.5,-1782 5766.5,-1776 5772.5,-1770 5778.5,-1770 5778.5,-1770 5900.5,-1770 5900.5,-1770 5906.5,-1770 5912.5,-1776 5912.5,-1782 5912.5,-1782 5912.5,-1841 5912.5,-1841 5912.5,-1847 5906.5,-1853 5900.5,-1853"/>
-<text text-anchor="start" x="5807.5" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 0.14</text>
-<text text-anchor="start" x="5802" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.097</text>
-<text text-anchor="start" x="5783.5" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13165</text>
-<text text-anchor="start" x="5774.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12490, 675]</text>
-<text text-anchor="start" x="5810.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 116&#45;&gt;117 -->
-<g id="edge117" class="edge"><title>116&#45;&gt;117</title>
-<path fill="none" stroke="black" d="M5839.5,-1888.91C5839.5,-1880.65 5839.5,-1871.86 5839.5,-1863.3"/>
-<polygon fill="black" stroke="black" points="5843,-1863.02 5839.5,-1853.02 5836,-1863.02 5843,-1863.02"/>
-</g>
-<!-- 280 -->
-<g id="node281" class="node"><title>280</title>
-<path fill="#48a4e7" stroke="black" d="M6211,-1853C6211,-1853 6108,-1853 6108,-1853 6102,-1853 6096,-1847 6096,-1841 6096,-1841 6096,-1782 6096,-1782 6096,-1776 6102,-1770 6108,-1770 6108,-1770 6211,-1770 6211,-1770 6217,-1770 6223,-1776 6223,-1782 6223,-1782 6223,-1841 6223,-1841 6223,-1847 6217,-1853 6211,-1853"/>
-<text text-anchor="start" x="6104" y="-1837.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="6122" y="-1822.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.131</text>
-<text text-anchor="start" x="6112" y="-1807.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 383</text>
-<text text-anchor="start" x="6106.5" y="-1792.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [27, 356]</text>
-<text text-anchor="start" x="6130.5" y="-1777.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 116&#45;&gt;280 -->
-<g id="edge280" class="edge"><title>116&#45;&gt;280</title>
-<path fill="none" stroke="black" d="M5917.37,-1901.03C5968.82,-1882.22 6035.8,-1857.73 6086.27,-1839.27"/>
-<polygon fill="black" stroke="black" points="6087.63,-1842.5 6095.82,-1835.78 6085.22,-1835.93 6087.63,-1842.5"/>
-</g>
-<!-- 118 -->
-<g id="node119" class="node"><title>118</title>
-<path fill="#e6853f" stroke="black" d="M5792.5,-1734C5792.5,-1734 5556.5,-1734 5556.5,-1734 5550.5,-1734 5544.5,-1728 5544.5,-1722 5544.5,-1722 5544.5,-1663 5544.5,-1663 5544.5,-1657 5550.5,-1651 5556.5,-1651 5556.5,-1651 5792.5,-1651 5792.5,-1651 5798.5,-1651 5804.5,-1657 5804.5,-1663 5804.5,-1663 5804.5,-1722 5804.5,-1722 5804.5,-1728 5798.5,-1734 5792.5,-1734"/>
-<text text-anchor="start" x="5552.5" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 2.749</text>
-<text text-anchor="start" x="5641" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.06</text>
-<text text-anchor="start" x="5618.5" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12653</text>
-<text text-anchor="start" x="5609.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12261, 392]</text>
-<text text-anchor="start" x="5645.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 117&#45;&gt;118 -->
-<g id="edge118" class="edge"><title>117&#45;&gt;118</title>
-<path fill="none" stroke="black" d="M5782.25,-1769.91C5768.56,-1760.2 5753.84,-1749.76 5739.81,-1739.81"/>
-<polygon fill="black" stroke="black" points="5741.83,-1736.95 5731.64,-1734.02 5737.78,-1742.66 5741.83,-1736.95"/>
-</g>
-<!-- 259 -->
-<g id="node260" class="node"><title>259</title>
-<path fill="#d9ecfa" stroke="black" d="M6077,-1734C6077,-1734 5966,-1734 5966,-1734 5960,-1734 5954,-1728 5954,-1722 5954,-1722 5954,-1663 5954,-1663 5954,-1657 5960,-1651 5966,-1651 5966,-1651 6077,-1651 6077,-1651 6083,-1651 6089,-1657 6089,-1663 6089,-1663 6089,-1722 6089,-1722 6089,-1728 6083,-1734 6077,-1734"/>
-<text text-anchor="start" x="5962" y="-1718.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.008</text>
-<text text-anchor="start" x="5984" y="-1703.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.494</text>
-<text text-anchor="start" x="5974" y="-1688.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 512</text>
-<text text-anchor="start" x="5964.5" y="-1673.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [229, 283]</text>
-<text text-anchor="start" x="5992.5" y="-1658.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 117&#45;&gt;259 -->
-<g id="edge259" class="edge"><title>117&#45;&gt;259</title>
-<path fill="none" stroke="black" d="M5902.64,-1769.91C5917.89,-1760.11 5934.29,-1749.56 5949.89,-1739.53"/>
-<polygon fill="black" stroke="black" points="5951.95,-1742.37 5958.47,-1734.02 5948.16,-1736.48 5951.95,-1742.37"/>
-</g>
-<!-- 119 -->
-<g id="node120" class="node"><title>119</title>
-<path fill="#e5833c" stroke="black" d="M5328,-1615C5328,-1615 5189,-1615 5189,-1615 5183,-1615 5177,-1609 5177,-1603 5177,-1603 5177,-1544 5177,-1544 5177,-1538 5183,-1532 5189,-1532 5189,-1532 5328,-1532 5328,-1532 5334,-1532 5340,-1538 5340,-1544 5340,-1544 5340,-1603 5340,-1603 5340,-1609 5334,-1615 5328,-1615"/>
-<text text-anchor="start" x="5185" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">wrong_fragment ≤ 1.83</text>
-<text text-anchor="start" x="5221" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.027</text>
-<text text-anchor="start" x="5202.5" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12051</text>
-<text text-anchor="start" x="5193.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11884, 167]</text>
-<text text-anchor="start" x="5229.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 118&#45;&gt;119 -->
-<g id="edge119" class="edge"><title>118&#45;&gt;119</title>
-<path fill="none" stroke="black" d="M5544.3,-1654.88C5481.22,-1637.14 5406.97,-1616.26 5349.97,-1600.23"/>
-<polygon fill="black" stroke="black" points="5350.83,-1596.83 5340.26,-1597.49 5348.94,-1603.57 5350.83,-1596.83"/>
-</g>
-<!-- 210 -->
-<g id="node211" class="node"><title>210</title>
-<path fill="#f5ccaf" stroke="black" d="M5727.5,-1615C5727.5,-1615 5621.5,-1615 5621.5,-1615 5615.5,-1615 5609.5,-1609 5609.5,-1603 5609.5,-1603 5609.5,-1544 5609.5,-1544 5609.5,-1538 5615.5,-1532 5621.5,-1532 5621.5,-1532 5727.5,-1532 5727.5,-1532 5733.5,-1532 5739.5,-1538 5739.5,-1544 5739.5,-1544 5739.5,-1603 5739.5,-1603 5739.5,-1609 5733.5,-1615 5727.5,-1615"/>
-<text text-anchor="start" x="5619" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="5637" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.468</text>
-<text text-anchor="start" x="5627" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 602</text>
-<text text-anchor="start" x="5617.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [377, 225]</text>
-<text text-anchor="start" x="5645.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 118&#45;&gt;210 -->
-<g id="edge210" class="edge"><title>118&#45;&gt;210</title>
-<path fill="none" stroke="black" d="M5674.5,-1650.91C5674.5,-1642.65 5674.5,-1633.86 5674.5,-1625.3"/>
-<polygon fill="black" stroke="black" points="5678,-1625.02 5674.5,-1615.02 5671,-1625.02 5678,-1625.02"/>
-</g>
-<!-- 120 -->
-<g id="node121" class="node"><title>120</title>
-<path fill="#e5833b" stroke="black" d="M4866.5,-1496C4866.5,-1496 4744.5,-1496 4744.5,-1496 4738.5,-1496 4732.5,-1490 4732.5,-1484 4732.5,-1484 4732.5,-1425 4732.5,-1425 4732.5,-1419 4738.5,-1413 4744.5,-1413 4744.5,-1413 4866.5,-1413 4866.5,-1413 4872.5,-1413 4878.5,-1419 4878.5,-1425 4878.5,-1425 4878.5,-1484 4878.5,-1484 4878.5,-1490 4872.5,-1496 4866.5,-1496"/>
-<text text-anchor="start" x="4746" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.039</text>
-<text text-anchor="start" x="4768" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.024</text>
-<text text-anchor="start" x="4749.5" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12028</text>
-<text text-anchor="start" x="4740.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11884, 144]</text>
-<text text-anchor="start" x="4776.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 119&#45;&gt;120 -->
-<g id="edge120" class="edge"><title>119&#45;&gt;120</title>
-<path fill="none" stroke="black" d="M5176.99,-1551.45C5095.48,-1530.39 4970.75,-1498.18 4888.66,-1476.98"/>
-<polygon fill="black" stroke="black" points="4889.42,-1473.56 4878.87,-1474.45 4887.67,-1480.34 4889.42,-1473.56"/>
-</g>
-<!-- 209 -->
-<g id="node210" class="node"><title>209</title>
-<path fill="#399de5" stroke="black" d="M5299,-1488.5C5299,-1488.5 5218,-1488.5 5218,-1488.5 5212,-1488.5 5206,-1482.5 5206,-1476.5 5206,-1476.5 5206,-1432.5 5206,-1432.5 5206,-1426.5 5212,-1420.5 5218,-1420.5 5218,-1420.5 5299,-1420.5 5299,-1420.5 5305,-1420.5 5311,-1426.5 5311,-1432.5 5311,-1432.5 5311,-1476.5 5311,-1476.5 5311,-1482.5 5305,-1488.5 5299,-1488.5"/>
-<text text-anchor="start" x="5229.5" y="-1473.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5215" y="-1458.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 23</text>
-<text text-anchor="start" x="5214" y="-1443.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 23]</text>
-<text text-anchor="start" x="5229.5" y="-1428.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 119&#45;&gt;209 -->
-<g id="edge209" class="edge"><title>119&#45;&gt;209</title>
-<path fill="none" stroke="black" d="M5258.5,-1531.91C5258.5,-1521.2 5258.5,-1509.62 5258.5,-1498.78"/>
-<polygon fill="black" stroke="black" points="5262,-1498.67 5258.5,-1488.67 5255,-1498.67 5262,-1498.67"/>
-</g>
-<!-- 121 -->
-<g id="node122" class="node"><title>121</title>
-<path fill="#e88e4d" stroke="black" d="M4618.5,-1377C4618.5,-1377 4504.5,-1377 4504.5,-1377 4498.5,-1377 4492.5,-1371 4492.5,-1365 4492.5,-1365 4492.5,-1306 4492.5,-1306 4492.5,-1300 4498.5,-1294 4504.5,-1294 4504.5,-1294 4618.5,-1294 4618.5,-1294 4624.5,-1294 4630.5,-1300 4630.5,-1306 4630.5,-1306 4630.5,-1365 4630.5,-1365 4630.5,-1371 4624.5,-1377 4618.5,-1377"/>
-<text text-anchor="start" x="4504.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 0.149</text>
-<text text-anchor="start" x="4524" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.167</text>
-<text text-anchor="start" x="4510" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1417</text>
-<text text-anchor="start" x="4500.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1287, 130]</text>
-<text text-anchor="start" x="4532.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 120&#45;&gt;121 -->
-<g id="edge121" class="edge"><title>120&#45;&gt;121</title>
-<path fill="none" stroke="black" d="M4732.29,-1418.4C4703.16,-1404.43 4669.58,-1388.33 4639.95,-1374.12"/>
-<polygon fill="black" stroke="black" points="4641.42,-1370.94 4630.89,-1369.77 4638.4,-1377.25 4641.42,-1370.94"/>
-</g>
-<!-- 170 -->
-<g id="node171" class="node"><title>170</title>
-<path fill="#e58139" stroke="black" d="M4862.5,-1377C4862.5,-1377 4748.5,-1377 4748.5,-1377 4742.5,-1377 4736.5,-1371 4736.5,-1365 4736.5,-1365 4736.5,-1306 4736.5,-1306 4736.5,-1300 4742.5,-1294 4748.5,-1294 4748.5,-1294 4862.5,-1294 4862.5,-1294 4868.5,-1294 4874.5,-1300 4874.5,-1306 4874.5,-1306 4874.5,-1365 4874.5,-1365 4874.5,-1371 4868.5,-1377 4862.5,-1377"/>
-<text text-anchor="start" x="4746" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">rerror_rate ≤ 0.114</text>
-<text text-anchor="start" x="4768" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.003</text>
-<text text-anchor="start" x="4749.5" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10611</text>
-<text text-anchor="start" x="4744.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10597, 14]</text>
-<text text-anchor="start" x="4776.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 120&#45;&gt;170 -->
-<g id="edge170" class="edge"><title>120&#45;&gt;170</title>
-<path fill="none" stroke="black" d="M4805.5,-1412.91C4805.5,-1404.65 4805.5,-1395.86 4805.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="4809,-1387.02 4805.5,-1377.02 4802,-1387.02 4809,-1387.02"/>
-</g>
-<!-- 122 -->
-<g id="node123" class="node"><title>122</title>
-<path fill="#e68742" stroke="black" d="M4223.5,-1258C4223.5,-1258 4029.5,-1258 4029.5,-1258 4023.5,-1258 4017.5,-1252 4017.5,-1246 4017.5,-1246 4017.5,-1187 4017.5,-1187 4017.5,-1181 4023.5,-1175 4029.5,-1175 4029.5,-1175 4223.5,-1175 4223.5,-1175 4229.5,-1175 4235.5,-1181 4235.5,-1187 4235.5,-1187 4235.5,-1246 4235.5,-1246 4235.5,-1252 4229.5,-1258 4223.5,-1258"/>
-<text text-anchor="start" x="4025.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.68</text>
-<text text-anchor="start" x="4089" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.086</text>
-<text text-anchor="start" x="4075" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1348</text>
-<text text-anchor="start" x="4069.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1287, 61]</text>
-<text text-anchor="start" x="4097.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 121&#45;&gt;122 -->
-<g id="edge122" class="edge"><title>121&#45;&gt;122</title>
-<path fill="none" stroke="black" d="M4492.09,-1315.83C4425.84,-1298.01 4324.69,-1270.81 4245.56,-1249.52"/>
-<polygon fill="black" stroke="black" points="4246.1,-1246.04 4235.53,-1246.83 4244.28,-1252.8 4246.1,-1246.04"/>
-</g>
-<!-- 169 -->
-<g id="node170" class="node"><title>169</title>
-<path fill="#399de5" stroke="black" d="M4602,-1250.5C4602,-1250.5 4521,-1250.5 4521,-1250.5 4515,-1250.5 4509,-1244.5 4509,-1238.5 4509,-1238.5 4509,-1194.5 4509,-1194.5 4509,-1188.5 4515,-1182.5 4521,-1182.5 4521,-1182.5 4602,-1182.5 4602,-1182.5 4608,-1182.5 4614,-1188.5 4614,-1194.5 4614,-1194.5 4614,-1238.5 4614,-1238.5 4614,-1244.5 4608,-1250.5 4602,-1250.5"/>
-<text text-anchor="start" x="4532.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4518" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 69</text>
-<text text-anchor="start" x="4517" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 69]</text>
-<text text-anchor="start" x="4532.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 121&#45;&gt;169 -->
-<g id="edge169" class="edge"><title>121&#45;&gt;169</title>
-<path fill="none" stroke="black" d="M4561.5,-1293.91C4561.5,-1283.2 4561.5,-1271.62 4561.5,-1260.78"/>
-<polygon fill="black" stroke="black" points="4565,-1260.67 4561.5,-1250.67 4558,-1260.67 4565,-1260.67"/>
-</g>
-<!-- 123 -->
-<g id="node124" class="node"><title>123</title>
-<path fill="#e5833d" stroke="black" d="M3800.5,-1139C3800.5,-1139 3694.5,-1139 3694.5,-1139 3688.5,-1139 3682.5,-1133 3682.5,-1127 3682.5,-1127 3682.5,-1068 3682.5,-1068 3682.5,-1062 3688.5,-1056 3694.5,-1056 3694.5,-1056 3800.5,-1056 3800.5,-1056 3806.5,-1056 3812.5,-1062 3812.5,-1068 3812.5,-1068 3812.5,-1127 3812.5,-1127 3812.5,-1133 3806.5,-1139 3800.5,-1139"/>
-<text text-anchor="start" x="3698" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.11</text>
-<text text-anchor="start" x="3710" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.036</text>
-<text text-anchor="start" x="3696" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1249</text>
-<text text-anchor="start" x="3690.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1226, 23]</text>
-<text text-anchor="start" x="3718.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 122&#45;&gt;123 -->
-<g id="edge123" class="edge"><title>122&#45;&gt;123</title>
-<path fill="none" stroke="black" d="M4017.47,-1180.03C4012.07,-1178.32 4006.73,-1176.63 4001.5,-1175 3941.44,-1156.23 3873.13,-1135.7 3822.49,-1120.64"/>
-<polygon fill="black" stroke="black" points="3823.19,-1117.2 3812.6,-1117.7 3821.19,-1123.91 3823.19,-1117.2"/>
-</g>
-<!-- 162 -->
-<g id="node163" class="node"><title>162</title>
-<path fill="#f5cfb4" stroke="black" d="M4199.5,-1139C4199.5,-1139 4053.5,-1139 4053.5,-1139 4047.5,-1139 4041.5,-1133 4041.5,-1127 4041.5,-1127 4041.5,-1068 4041.5,-1068 4041.5,-1062 4047.5,-1056 4053.5,-1056 4053.5,-1056 4199.5,-1056 4199.5,-1056 4205.5,-1056 4211.5,-1062 4211.5,-1068 4211.5,-1068 4211.5,-1127 4211.5,-1127 4211.5,-1133 4205.5,-1139 4199.5,-1139"/>
-<text text-anchor="start" x="4049.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;1.354</text>
-<text text-anchor="start" x="4089" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.473</text>
-<text text-anchor="start" x="4083" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 99</text>
-<text text-anchor="start" x="4078" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [61, 38]</text>
-<text text-anchor="start" x="4097.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 122&#45;&gt;162 -->
-<g id="edge162" class="edge"><title>122&#45;&gt;162</title>
-<path fill="none" stroke="black" d="M4126.5,-1174.91C4126.5,-1166.65 4126.5,-1157.86 4126.5,-1149.3"/>
-<polygon fill="black" stroke="black" points="4130,-1149.02 4126.5,-1139.02 4123,-1149.02 4130,-1149.02"/>
-</g>
-<!-- 124 -->
-<g id="node125" class="node"><title>124</title>
-<path fill="#e5833c" stroke="black" d="M3520.5,-1020C3520.5,-1020 3414.5,-1020 3414.5,-1020 3408.5,-1020 3402.5,-1014 3402.5,-1008 3402.5,-1008 3402.5,-949 3402.5,-949 3402.5,-943 3408.5,-937 3414.5,-937 3414.5,-937 3520.5,-937 3520.5,-937 3526.5,-937 3532.5,-943 3532.5,-949 3532.5,-949 3532.5,-1008 3532.5,-1008 3532.5,-1014 3526.5,-1020 3520.5,-1020"/>
-<text text-anchor="start" x="3412" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="3430" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.032</text>
-<text text-anchor="start" x="3416" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1246</text>
-<text text-anchor="start" x="3410.5" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1226, 20]</text>
-<text text-anchor="start" x="3438.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 123&#45;&gt;124 -->
-<g id="edge124" class="edge"><title>123&#45;&gt;124</title>
-<path fill="none" stroke="black" d="M3682.21,-1069.22C3640.35,-1051.73 3585.9,-1028.98 3542.31,-1010.76"/>
-<polygon fill="black" stroke="black" points="3543.47,-1007.45 3532.9,-1006.83 3540.78,-1013.91 3543.47,-1007.45"/>
-</g>
-<!-- 161 -->
-<g id="node162" class="node"><title>161</title>
-<path fill="#399de5" stroke="black" d="M3784,-1012.5C3784,-1012.5 3711,-1012.5 3711,-1012.5 3705,-1012.5 3699,-1006.5 3699,-1000.5 3699,-1000.5 3699,-956.5 3699,-956.5 3699,-950.5 3705,-944.5 3711,-944.5 3711,-944.5 3784,-944.5 3784,-944.5 3790,-944.5 3796,-950.5 3796,-956.5 3796,-956.5 3796,-1000.5 3796,-1000.5 3796,-1006.5 3790,-1012.5 3784,-1012.5"/>
-<text text-anchor="start" x="3718.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3708" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="3707" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="3718.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 123&#45;&gt;161 -->
-<g id="edge161" class="edge"><title>123&#45;&gt;161</title>
-<path fill="none" stroke="black" d="M3747.5,-1055.91C3747.5,-1045.2 3747.5,-1033.62 3747.5,-1022.78"/>
-<polygon fill="black" stroke="black" points="3751,-1022.67 3747.5,-1012.67 3744,-1022.67 3751,-1022.67"/>
-</g>
-<!-- 125 -->
-<g id="node126" class="node"><title>125</title>
-<path fill="#e68641" stroke="black" d="M3188,-901C3188,-901 3085,-901 3085,-901 3079,-901 3073,-895 3073,-889 3073,-889 3073,-830 3073,-830 3073,-824 3079,-818 3085,-818 3085,-818 3188,-818 3188,-818 3194,-818 3200,-824 3200,-830 3200,-830 3200,-889 3200,-889 3200,-895 3194,-901 3188,-901"/>
-<text text-anchor="start" x="3081" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="3099" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.078</text>
-<text text-anchor="start" x="3089" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 271</text>
-<text text-anchor="start" x="3083.5" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [260, 11]</text>
-<text text-anchor="start" x="3107.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 124&#45;&gt;125 -->
-<g id="edge125" class="edge"><title>124&#45;&gt;125</title>
-<path fill="none" stroke="black" d="M3402.5,-954.524C3347.15,-934.959 3267.66,-906.862 3210,-886.482"/>
-<polygon fill="black" stroke="black" points="3210.82,-883.058 3200.23,-883.025 3208.49,-889.658 3210.82,-883.058"/>
-</g>
-<!-- 132 -->
-<g id="node133" class="node"><title>132</title>
-<path fill="#e5823b" stroke="black" d="M3578.5,-901C3578.5,-901 3356.5,-901 3356.5,-901 3350.5,-901 3344.5,-895 3344.5,-889 3344.5,-889 3344.5,-830 3344.5,-830 3344.5,-824 3350.5,-818 3356.5,-818 3356.5,-818 3578.5,-818 3578.5,-818 3584.5,-818 3590.5,-824 3590.5,-830 3590.5,-830 3590.5,-889 3590.5,-889 3590.5,-895 3584.5,-901 3578.5,-901"/>
-<text text-anchor="start" x="3352.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ 1.114</text>
-<text text-anchor="start" x="3430" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.018</text>
-<text text-anchor="start" x="3420" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 975</text>
-<text text-anchor="start" x="3419" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [966, 9]</text>
-<text text-anchor="start" x="3438.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 124&#45;&gt;132 -->
-<g id="edge132" class="edge"><title>124&#45;&gt;132</title>
-<path fill="none" stroke="black" d="M3467.5,-936.907C3467.5,-928.649 3467.5,-919.864 3467.5,-911.302"/>
-<polygon fill="black" stroke="black" points="3471,-911.021 3467.5,-901.021 3464,-911.021 3471,-911.021"/>
-</g>
-<!-- 126 -->
-<g id="node127" class="node"><title>126</title>
-<path fill="#e5813a" stroke="black" d="M3037.5,-782C3037.5,-782 2891.5,-782 2891.5,-782 2885.5,-782 2879.5,-776 2879.5,-770 2879.5,-770 2879.5,-711 2879.5,-711 2879.5,-705 2885.5,-699 2891.5,-699 2891.5,-699 3037.5,-699 3037.5,-699 3043.5,-699 3049.5,-705 3049.5,-711 3049.5,-711 3049.5,-770 3049.5,-770 3049.5,-776 3043.5,-782 3037.5,-782"/>
-<text text-anchor="start" x="2887.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;1.768</text>
-<text text-anchor="start" x="2927" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.008</text>
-<text text-anchor="start" x="2917" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 261</text>
-<text text-anchor="start" x="2916" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [260, 1]</text>
-<text text-anchor="start" x="2935.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 125&#45;&gt;126 -->
-<g id="edge126" class="edge"><title>125&#45;&gt;126</title>
-<path fill="none" stroke="black" d="M3076.83,-817.907C3062.55,-808.197 3047.2,-797.758 3032.58,-787.811"/>
-<polygon fill="black" stroke="black" points="3034.31,-784.751 3024.07,-782.021 3030.37,-790.539 3034.31,-784.751"/>
-</g>
-<!-- 131 -->
-<g id="node132" class="node"><title>131</title>
-<path fill="#399de5" stroke="black" d="M3177,-774.5C3177,-774.5 3096,-774.5 3096,-774.5 3090,-774.5 3084,-768.5 3084,-762.5 3084,-762.5 3084,-718.5 3084,-718.5 3084,-712.5 3090,-706.5 3096,-706.5 3096,-706.5 3177,-706.5 3177,-706.5 3183,-706.5 3189,-712.5 3189,-718.5 3189,-718.5 3189,-762.5 3189,-762.5 3189,-768.5 3183,-774.5 3177,-774.5"/>
-<text text-anchor="start" x="3107.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3093" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10</text>
-<text text-anchor="start" x="3092" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 10]</text>
-<text text-anchor="start" x="3107.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 125&#45;&gt;131 -->
-<g id="edge131" class="edge"><title>125&#45;&gt;131</title>
-<path fill="none" stroke="black" d="M3136.5,-817.907C3136.5,-807.204 3136.5,-795.615 3136.5,-784.776"/>
-<polygon fill="black" stroke="black" points="3140,-784.667 3136.5,-774.667 3133,-784.667 3140,-784.667"/>
-</g>
-<!-- 127 -->
-<g id="node128" class="node"><title>127</title>
-<path fill="#f2c09c" stroke="black" d="M2877.5,-663C2877.5,-663 2641.5,-663 2641.5,-663 2635.5,-663 2629.5,-657 2629.5,-651 2629.5,-651 2629.5,-592 2629.5,-592 2629.5,-586 2635.5,-580 2641.5,-580 2641.5,-580 2877.5,-580 2877.5,-580 2883.5,-580 2889.5,-586 2889.5,-592 2889.5,-592 2889.5,-651 2889.5,-651 2889.5,-657 2883.5,-663 2877.5,-663"/>
-<text text-anchor="start" x="2637.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 1.419</text>
-<text text-anchor="start" x="2722" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="2720" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="2719" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 1]</text>
-<text text-anchor="start" x="2730.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 126&#45;&gt;127 -->
-<g id="edge127" class="edge"><title>126&#45;&gt;127</title>
-<path fill="none" stroke="black" d="M2893.38,-698.907C2876.04,-689.016 2857.39,-678.368 2839.67,-668.254"/>
-<polygon fill="black" stroke="black" points="2840.92,-664.938 2830.5,-663.021 2837.45,-671.017 2840.92,-664.938"/>
-</g>
-<!-- 130 -->
-<g id="node131" class="node"><title>130</title>
-<path fill="#e58139" stroke="black" d="M3009,-655.5C3009,-655.5 2920,-655.5 2920,-655.5 2914,-655.5 2908,-649.5 2908,-643.5 2908,-643.5 2908,-599.5 2908,-599.5 2908,-593.5 2914,-587.5 2920,-587.5 2920,-587.5 3009,-587.5 3009,-587.5 3015,-587.5 3021,-593.5 3021,-599.5 3021,-599.5 3021,-643.5 3021,-643.5 3021,-649.5 3015,-655.5 3009,-655.5"/>
-<text text-anchor="start" x="2935.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2917" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 258</text>
-<text text-anchor="start" x="2916" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [258, 0]</text>
-<text text-anchor="start" x="2935.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 126&#45;&gt;130 -->
-<g id="edge130" class="edge"><title>126&#45;&gt;130</title>
-<path fill="none" stroke="black" d="M2964.5,-698.907C2964.5,-688.204 2964.5,-676.615 2964.5,-665.776"/>
-<polygon fill="black" stroke="black" points="2968,-665.667 2964.5,-655.667 2961,-665.667 2968,-665.667"/>
-</g>
-<!-- 128 -->
-<g id="node129" class="node"><title>128</title>
-<path fill="#e58139" stroke="black" d="M2681,-536.5C2681,-536.5 2608,-536.5 2608,-536.5 2602,-536.5 2596,-530.5 2596,-524.5 2596,-524.5 2596,-480.5 2596,-480.5 2596,-474.5 2602,-468.5 2608,-468.5 2608,-468.5 2681,-468.5 2681,-468.5 2687,-468.5 2693,-474.5 2693,-480.5 2693,-480.5 2693,-524.5 2693,-524.5 2693,-530.5 2687,-536.5 2681,-536.5"/>
-<text text-anchor="start" x="2615.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2605" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="2604" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="2615.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 127&#45;&gt;128 -->
-<g id="edge128" class="edge"><title>127&#45;&gt;128</title>
-<path fill="none" stroke="black" d="M2719.6,-579.907C2708.21,-568.321 2695.81,-555.698 2684.42,-544.111"/>
-<polygon fill="black" stroke="black" points="2686.61,-541.345 2677.1,-536.667 2681.61,-546.252 2686.61,-541.345"/>
-</g>
-<!-- 129 -->
-<g id="node130" class="node"><title>129</title>
-<path fill="#399de5" stroke="black" d="M2796,-536.5C2796,-536.5 2723,-536.5 2723,-536.5 2717,-536.5 2711,-530.5 2711,-524.5 2711,-524.5 2711,-480.5 2711,-480.5 2711,-474.5 2717,-468.5 2723,-468.5 2723,-468.5 2796,-468.5 2796,-468.5 2802,-468.5 2808,-474.5 2808,-480.5 2808,-480.5 2808,-524.5 2808,-524.5 2808,-530.5 2802,-536.5 2796,-536.5"/>
-<text text-anchor="start" x="2730.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2720" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2719" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="2730.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 127&#45;&gt;129 -->
-<g id="edge129" class="edge"><title>127&#45;&gt;129</title>
-<path fill="none" stroke="black" d="M2759.5,-579.907C2759.5,-569.204 2759.5,-557.615 2759.5,-546.776"/>
-<polygon fill="black" stroke="black" points="2763,-546.667 2759.5,-536.667 2756,-546.667 2763,-546.667"/>
-</g>
-<!-- 133 -->
-<g id="node134" class="node"><title>133</title>
-<path fill="#e5823b" stroke="black" d="M3457.5,-782C3457.5,-782 3225.5,-782 3225.5,-782 3219.5,-782 3213.5,-776 3213.5,-770 3213.5,-770 3213.5,-711 3213.5,-711 3213.5,-705 3219.5,-699 3225.5,-699 3225.5,-699 3457.5,-699 3457.5,-699 3463.5,-699 3469.5,-705 3469.5,-711 3469.5,-711 3469.5,-770 3469.5,-770 3469.5,-776 3463.5,-782 3457.5,-782"/>
-<text text-anchor="start" x="3221.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ &#45;0.17</text>
-<text text-anchor="start" x="3304" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.016</text>
-<text text-anchor="start" x="3294" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 971</text>
-<text text-anchor="start" x="3293" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [963, 8]</text>
-<text text-anchor="start" x="3312.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 132&#45;&gt;133 -->
-<g id="edge133" class="edge"><title>132&#45;&gt;133</title>
-<path fill="none" stroke="black" d="M3423.78,-817.907C3413.72,-808.56 3402.93,-798.538 3392.58,-788.929"/>
-<polygon fill="black" stroke="black" points="3394.85,-786.261 3385.14,-782.021 3390.08,-791.39 3394.85,-786.261"/>
-</g>
-<!-- 158 -->
-<g id="node159" class="node"><title>158</title>
-<path fill="#eeab7b" stroke="black" d="M3673,-782C3673,-782 3500,-782 3500,-782 3494,-782 3488,-776 3488,-770 3488,-770 3488,-711 3488,-711 3488,-705 3494,-699 3500,-699 3500,-699 3673,-699 3673,-699 3679,-699 3685,-705 3685,-711 3685,-711 3685,-770 3685,-770 3685,-776 3679,-782 3673,-782"/>
-<text text-anchor="start" x="3496" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.814</text>
-<text text-anchor="start" x="3549" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="3547" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="3546" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 1]</text>
-<text text-anchor="start" x="3557.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 132&#45;&gt;158 -->
-<g id="edge158" class="edge"><title>132&#45;&gt;158</title>
-<path fill="none" stroke="black" d="M3508.79,-817.907C3518.2,-808.651 3528.29,-798.732 3537.98,-789.209"/>
-<polygon fill="black" stroke="black" points="3540.61,-791.527 3545.29,-782.021 3535.7,-786.536 3540.61,-791.527"/>
-</g>
-<!-- 134 -->
-<g id="node135" class="node"><title>134</title>
-<path fill="#e68641" stroke="black" d="M3161.5,-663C3161.5,-663 3051.5,-663 3051.5,-663 3045.5,-663 3039.5,-657 3039.5,-651 3039.5,-651 3039.5,-592 3039.5,-592 3039.5,-586 3045.5,-580 3051.5,-580 3051.5,-580 3161.5,-580 3161.5,-580 3167.5,-580 3173.5,-586 3173.5,-592 3173.5,-592 3173.5,-651 3173.5,-651 3173.5,-657 3167.5,-663 3161.5,-663"/>
-<text text-anchor="start" x="3047.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ &#45;0.168</text>
-<text text-anchor="start" x="3069" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.072</text>
-<text text-anchor="start" x="3059" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 134</text>
-<text text-anchor="start" x="3058" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [129, 5]</text>
-<text text-anchor="start" x="3077.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 133&#45;&gt;134 -->
-<g id="edge134" class="edge"><title>133&#45;&gt;134</title>
-<path fill="none" stroke="black" d="M3259.97,-698.907C3234.94,-686.446 3207.5,-672.784 3182.83,-660.502"/>
-<polygon fill="black" stroke="black" points="3184.39,-657.368 3173.88,-656.045 3181.27,-663.635 3184.39,-657.368"/>
-</g>
-<!-- 143 -->
-<g id="node144" class="node"><title>143</title>
-<path fill="#e5813a" stroke="black" d="M3449,-663C3449,-663 3240,-663 3240,-663 3234,-663 3228,-657 3228,-651 3228,-651 3228,-592 3228,-592 3228,-586 3234,-580 3240,-580 3240,-580 3449,-580 3449,-580 3455,-580 3461,-586 3461,-592 3461,-592 3461,-651 3461,-651 3461,-657 3455,-663 3449,-663"/>
-<text text-anchor="start" x="3236" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.549</text>
-<text text-anchor="start" x="3307" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
-<text text-anchor="start" x="3297" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 837</text>
-<text text-anchor="start" x="3296" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [834, 3]</text>
-<text text-anchor="start" x="3315.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 133&#45;&gt;143 -->
-<g id="edge143" class="edge"><title>133&#45;&gt;143</title>
-<path fill="none" stroke="black" d="M3342.54,-698.907C3342.75,-690.558 3342.98,-681.671 3343.2,-673.02"/>
-<polygon fill="black" stroke="black" points="3346.7,-673.107 3343.46,-663.021 3339.71,-672.928 3346.7,-673.107"/>
-</g>
-<!-- 135 -->
-<g id="node136" class="node"><title>135</title>
-<path fill="#e5823b" stroke="black" d="M2948.5,-544C2948.5,-544 2838.5,-544 2838.5,-544 2832.5,-544 2826.5,-538 2826.5,-532 2826.5,-532 2826.5,-473 2826.5,-473 2826.5,-467 2832.5,-461 2838.5,-461 2838.5,-461 2948.5,-461 2948.5,-461 2954.5,-461 2960.5,-467 2960.5,-473 2960.5,-473 2960.5,-532 2960.5,-532 2960.5,-538 2954.5,-544 2948.5,-544"/>
-<text text-anchor="start" x="2834.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ &#45;0.224</text>
-<text text-anchor="start" x="2856" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.016</text>
-<text text-anchor="start" x="2846" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 128</text>
-<text text-anchor="start" x="2845" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [127, 1]</text>
-<text text-anchor="start" x="2864.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 134&#45;&gt;135 -->
-<g id="edge135" class="edge"><title>134&#45;&gt;135</title>
-<path fill="none" stroke="black" d="M3039.4,-583.641C3017.22,-571.46 2992.39,-557.821 2969.59,-545.297"/>
-<polygon fill="black" stroke="black" points="2971.08,-542.121 2960.63,-540.375 2967.71,-548.257 2971.08,-542.121"/>
-</g>
-<!-- 140 -->
-<g id="node141" class="node"><title>140</title>
-<path fill="#9ccef2" stroke="black" d="M3202,-544C3202,-544 3011,-544 3011,-544 3005,-544 2999,-538 2999,-532 2999,-532 2999,-473 2999,-473 2999,-467 3005,-461 3011,-461 3011,-461 3202,-461 3202,-461 3208,-461 3214,-467 3214,-473 3214,-473 3214,-532 3214,-532 3214,-538 3208,-544 3202,-544"/>
-<text text-anchor="start" x="3007" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ &#45;0.201</text>
-<text text-anchor="start" x="3069" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="3067" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="3066" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 4]</text>
-<text text-anchor="start" x="3077.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 134&#45;&gt;140 -->
-<g id="edge140" class="edge"><title>134&#45;&gt;140</title>
-<path fill="none" stroke="black" d="M3106.5,-579.907C3106.5,-571.649 3106.5,-562.864 3106.5,-554.302"/>
-<polygon fill="black" stroke="black" points="3110,-554.021 3106.5,-544.021 3103,-554.021 3110,-554.021"/>
-</g>
-<!-- 136 -->
-<g id="node137" class="node"><title>136</title>
-<path fill="#e58139" stroke="black" d="M2698,-417.5C2698,-417.5 2609,-417.5 2609,-417.5 2603,-417.5 2597,-411.5 2597,-405.5 2597,-405.5 2597,-361.5 2597,-361.5 2597,-355.5 2603,-349.5 2609,-349.5 2609,-349.5 2698,-349.5 2698,-349.5 2704,-349.5 2710,-355.5 2710,-361.5 2710,-361.5 2710,-405.5 2710,-405.5 2710,-411.5 2704,-417.5 2698,-417.5"/>
-<text text-anchor="start" x="2624.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2606" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 122</text>
-<text text-anchor="start" x="2605" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [122, 0]</text>
-<text text-anchor="start" x="2624.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 135&#45;&gt;136 -->
-<g id="edge136" class="edge"><title>135&#45;&gt;136</title>
-<path fill="none" stroke="black" d="M2826.14,-465.428C2822.9,-463.895 2819.67,-462.411 2816.5,-461 2774.1,-442.159 2760.19,-445.376 2718.5,-425 2716.75,-424.146 2714.99,-423.258 2713.23,-422.341"/>
-<polygon fill="black" stroke="black" points="2714.85,-419.24 2704.39,-417.558 2711.52,-425.396 2714.85,-419.24"/>
-</g>
-<!-- 137 -->
-<g id="node138" class="node"><title>137</title>
-<path fill="#ea9a61" stroke="black" d="M2913,-425C2913,-425 2740,-425 2740,-425 2734,-425 2728,-419 2728,-413 2728,-413 2728,-354 2728,-354 2728,-348 2734,-342 2740,-342 2740,-342 2913,-342 2913,-342 2919,-342 2925,-348 2925,-354 2925,-354 2925,-413 2925,-413 2925,-419 2919,-425 2913,-425"/>
-<text text-anchor="start" x="2736" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.922</text>
-<text text-anchor="start" x="2789" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
-<text text-anchor="start" x="2787" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="2786" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 1]</text>
-<text text-anchor="start" x="2797.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 135&#45;&gt;137 -->
-<g id="edge137" class="edge"><title>135&#45;&gt;137</title>
-<path fill="none" stroke="black" d="M2870.25,-460.907C2865.27,-452.195 2859.94,-442.897 2854.79,-433.893"/>
-<polygon fill="black" stroke="black" points="2857.71,-431.959 2849.7,-425.021 2851.64,-435.438 2857.71,-431.959"/>
-</g>
-<!-- 138 -->
-<g id="node139" class="node"><title>138</title>
-<path fill="#399de5" stroke="black" d="M2806,-298.5C2806,-298.5 2733,-298.5 2733,-298.5 2727,-298.5 2721,-292.5 2721,-286.5 2721,-286.5 2721,-242.5 2721,-242.5 2721,-236.5 2727,-230.5 2733,-230.5 2733,-230.5 2806,-230.5 2806,-230.5 2812,-230.5 2818,-236.5 2818,-242.5 2818,-242.5 2818,-286.5 2818,-286.5 2818,-292.5 2812,-298.5 2806,-298.5"/>
-<text text-anchor="start" x="2740.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2730" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="2729" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="2740.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 137&#45;&gt;138 -->
-<g id="edge138" class="edge"><title>137&#45;&gt;138</title>
-<path fill="none" stroke="black" d="M2806.72,-341.907C2801.35,-330.873 2795.51,-318.898 2790.09,-307.773"/>
-<polygon fill="black" stroke="black" points="2793.18,-306.124 2785.66,-298.667 2786.89,-309.19 2793.18,-306.124"/>
-</g>
-<!-- 139 -->
-<g id="node140" class="node"><title>139</title>
-<path fill="#e58139" stroke="black" d="M2921,-298.5C2921,-298.5 2848,-298.5 2848,-298.5 2842,-298.5 2836,-292.5 2836,-286.5 2836,-286.5 2836,-242.5 2836,-242.5 2836,-236.5 2842,-230.5 2848,-230.5 2848,-230.5 2921,-230.5 2921,-230.5 2927,-230.5 2933,-236.5 2933,-242.5 2933,-242.5 2933,-286.5 2933,-286.5 2933,-292.5 2927,-298.5 2921,-298.5"/>
-<text text-anchor="start" x="2855.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2845" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="2844" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
-<text text-anchor="start" x="2855.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 137&#45;&gt;139 -->
-<g id="edge139" class="edge"><title>137&#45;&gt;139</title>
-<path fill="none" stroke="black" d="M2846.62,-341.907C2852.09,-330.873 2858.03,-318.898 2863.54,-307.773"/>
-<polygon fill="black" stroke="black" points="2866.75,-309.181 2868.06,-298.667 2860.48,-306.072 2866.75,-309.181"/>
-</g>
-<!-- 141 -->
-<g id="node142" class="node"><title>141</title>
-<path fill="#399de5" stroke="black" d="M3028,-417.5C3028,-417.5 2955,-417.5 2955,-417.5 2949,-417.5 2943,-411.5 2943,-405.5 2943,-405.5 2943,-361.5 2943,-361.5 2943,-355.5 2949,-349.5 2955,-349.5 2955,-349.5 3028,-349.5 3028,-349.5 3034,-349.5 3040,-355.5 3040,-361.5 3040,-361.5 3040,-405.5 3040,-405.5 3040,-411.5 3034,-417.5 3028,-417.5"/>
-<text text-anchor="start" x="2962.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2952" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="2951" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
-<text text-anchor="start" x="2962.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 140&#45;&gt;141 -->
-<g id="edge141" class="edge"><title>140&#45;&gt;141</title>
-<path fill="none" stroke="black" d="M3066.6,-460.907C3055.21,-449.321 3042.81,-436.698 3031.42,-425.111"/>
-<polygon fill="black" stroke="black" points="3033.61,-422.345 3024.1,-417.667 3028.61,-427.252 3033.61,-422.345"/>
-</g>
-<!-- 142 -->
-<g id="node143" class="node"><title>142</title>
-<path fill="#e58139" stroke="black" d="M3143,-417.5C3143,-417.5 3070,-417.5 3070,-417.5 3064,-417.5 3058,-411.5 3058,-405.5 3058,-405.5 3058,-361.5 3058,-361.5 3058,-355.5 3064,-349.5 3070,-349.5 3070,-349.5 3143,-349.5 3143,-349.5 3149,-349.5 3155,-355.5 3155,-361.5 3155,-361.5 3155,-405.5 3155,-405.5 3155,-411.5 3149,-417.5 3143,-417.5"/>
-<text text-anchor="start" x="3077.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3067" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3066" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="3077.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 140&#45;&gt;142 -->
-<g id="edge142" class="edge"><title>140&#45;&gt;142</title>
-<path fill="none" stroke="black" d="M3106.5,-460.907C3106.5,-450.204 3106.5,-438.615 3106.5,-427.776"/>
-<polygon fill="black" stroke="black" points="3110,-427.667 3106.5,-417.667 3103,-427.667 3110,-427.667"/>
-</g>
-<!-- 144 -->
-<g id="node145" class="node"><title>144</title>
-<path fill="#e58139" stroke="black" d="M3431,-544C3431,-544 3258,-544 3258,-544 3252,-544 3246,-538 3246,-532 3246,-532 3246,-473 3246,-473 3246,-467 3252,-461 3258,-461 3258,-461 3431,-461 3431,-461 3437,-461 3443,-467 3443,-473 3443,-473 3443,-532 3443,-532 3443,-538 3437,-544 3431,-544"/>
-<text text-anchor="start" x="3254" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.258</text>
-<text text-anchor="start" x="3307" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
-<text text-anchor="start" x="3297" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 813</text>
-<text text-anchor="start" x="3296" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [812, 1]</text>
-<text text-anchor="start" x="3315.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 143&#45;&gt;144 -->
-<g id="edge144" class="edge"><title>143&#45;&gt;144</title>
-<path fill="none" stroke="black" d="M3344.5,-579.907C3344.5,-571.649 3344.5,-562.864 3344.5,-554.302"/>
-<polygon fill="black" stroke="black" points="3348,-554.021 3344.5,-544.021 3341,-554.021 3348,-554.021"/>
-</g>
-<!-- 153 -->
-<g id="node154" class="node"><title>153</title>
-<path fill="#e78c4b" stroke="black" d="M3658,-544C3658,-544 3485,-544 3485,-544 3479,-544 3473,-538 3473,-532 3473,-532 3473,-473 3473,-473 3473,-467 3479,-461 3485,-461 3485,-461 3658,-461 3658,-461 3664,-461 3670,-467 3670,-473 3670,-473 3670,-532 3670,-532 3670,-538 3664,-544 3658,-544"/>
-<text text-anchor="start" x="3481" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.294</text>
-<text text-anchor="start" x="3534" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
-<text text-anchor="start" x="3528" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
-<text text-anchor="start" x="3527" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [22, 2]</text>
-<text text-anchor="start" x="3542.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 143&#45;&gt;153 -->
-<g id="edge153" class="edge"><title>143&#45;&gt;153</title>
-<path fill="none" stroke="black" d="M3423.26,-579.907C3442.8,-569.834 3463.87,-558.977 3483.81,-548.698"/>
-<polygon fill="black" stroke="black" points="3485.6,-551.713 3492.88,-544.021 3482.39,-545.491 3485.6,-551.713"/>
-</g>
-<!-- 145 -->
-<g id="node146" class="node"><title>145</title>
-<path fill="#e58139" stroke="black" d="M3274,-417.5C3274,-417.5 3185,-417.5 3185,-417.5 3179,-417.5 3173,-411.5 3173,-405.5 3173,-405.5 3173,-361.5 3173,-361.5 3173,-355.5 3179,-349.5 3185,-349.5 3185,-349.5 3274,-349.5 3274,-349.5 3280,-349.5 3286,-355.5 3286,-361.5 3286,-361.5 3286,-405.5 3286,-405.5 3286,-411.5 3280,-417.5 3274,-417.5"/>
-<text text-anchor="start" x="3200.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3182" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 609</text>
-<text text-anchor="start" x="3181" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [609, 0]</text>
-<text text-anchor="start" x="3200.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 144&#45;&gt;145 -->
-<g id="edge145" class="edge"><title>144&#45;&gt;145</title>
-<path fill="none" stroke="black" d="M3304.6,-460.907C3293.21,-449.321 3280.81,-436.698 3269.42,-425.111"/>
-<polygon fill="black" stroke="black" points="3271.61,-422.345 3262.1,-417.667 3266.61,-427.252 3271.61,-422.345"/>
-</g>
-<!-- 146 -->
-<g id="node147" class="node"><title>146</title>
-<path fill="#e5823a" stroke="black" d="M3489,-425C3489,-425 3316,-425 3316,-425 3310,-425 3304,-419 3304,-413 3304,-413 3304,-354 3304,-354 3304,-348 3310,-342 3316,-342 3316,-342 3489,-342 3489,-342 3495,-342 3501,-348 3501,-354 3501,-354 3501,-413 3501,-413 3501,-419 3495,-425 3489,-425"/>
-<text text-anchor="start" x="3312" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.249</text>
-<text text-anchor="start" x="3369" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.01</text>
-<text text-anchor="start" x="3355" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 204</text>
-<text text-anchor="start" x="3354" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [203, 1]</text>
-<text text-anchor="start" x="3373.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 144&#45;&gt;146 -->
-<g id="edge146" class="edge"><title>144&#45;&gt;146</title>
-<path fill="none" stroke="black" d="M3364.62,-460.907C3368.9,-452.286 3373.46,-443.09 3377.87,-434.175"/>
-<polygon fill="black" stroke="black" points="3381.11,-435.535 3382.41,-425.021 3374.84,-432.426 3381.11,-435.535"/>
-</g>
-<!-- 147 -->
-<g id="node148" class="node"><title>147</title>
-<path fill="#e88f4f" stroke="black" d="M3394.5,-306C3394.5,-306 3252.5,-306 3252.5,-306 3246.5,-306 3240.5,-300 3240.5,-294 3240.5,-294 3240.5,-235 3240.5,-235 3240.5,-229 3246.5,-223 3252.5,-223 3252.5,-223 3394.5,-223 3394.5,-223 3400.5,-223 3406.5,-229 3406.5,-235 3406.5,-235 3406.5,-294 3406.5,-294 3406.5,-300 3400.5,-306 3394.5,-306"/>
-<text text-anchor="start" x="3248.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ 0.394</text>
-<text text-anchor="start" x="3290" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.18</text>
-<text text-anchor="start" x="3280" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10</text>
-<text text-anchor="start" x="3283" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 1]</text>
-<text text-anchor="start" x="3294.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 146&#45;&gt;147 -->
-<g id="edge147" class="edge"><title>146&#45;&gt;147</title>
-<path fill="none" stroke="black" d="M3375.09,-341.907C3369.09,-333.014 3362.67,-323.509 3356.47,-314.331"/>
-<polygon fill="black" stroke="black" points="3359.36,-312.35 3350.86,-306.021 3353.56,-316.267 3359.36,-312.35"/>
-</g>
-<!-- 152 -->
-<g id="node153" class="node"><title>152</title>
-<path fill="#e58139" stroke="black" d="M3526,-298.5C3526,-298.5 3437,-298.5 3437,-298.5 3431,-298.5 3425,-292.5 3425,-286.5 3425,-286.5 3425,-242.5 3425,-242.5 3425,-236.5 3431,-230.5 3437,-230.5 3437,-230.5 3526,-230.5 3526,-230.5 3532,-230.5 3538,-236.5 3538,-242.5 3538,-242.5 3538,-286.5 3538,-286.5 3538,-292.5 3532,-298.5 3526,-298.5"/>
-<text text-anchor="start" x="3452.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3434" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 194</text>
-<text text-anchor="start" x="3433" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [194, 0]</text>
-<text text-anchor="start" x="3452.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 146&#45;&gt;152 -->
-<g id="edge152" class="edge"><title>146&#45;&gt;152</title>
-<path fill="none" stroke="black" d="M3429.91,-341.907C3437.51,-330.652 3445.77,-318.418 3453.41,-307.106"/>
-<polygon fill="black" stroke="black" points="3456.41,-308.913 3459.11,-298.667 3450.61,-304.996 3456.41,-308.913"/>
-</g>
-<!-- 148 -->
-<g id="node149" class="node"><title>148</title>
-<path fill="#e58139" stroke="black" d="M3285,-179.5C3285,-179.5 3212,-179.5 3212,-179.5 3206,-179.5 3200,-173.5 3200,-167.5 3200,-167.5 3200,-123.5 3200,-123.5 3200,-117.5 3206,-111.5 3212,-111.5 3212,-111.5 3285,-111.5 3285,-111.5 3291,-111.5 3297,-117.5 3297,-123.5 3297,-123.5 3297,-167.5 3297,-167.5 3297,-173.5 3291,-179.5 3285,-179.5"/>
-<text text-anchor="start" x="3219.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3209" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
-<text text-anchor="start" x="3208" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8, 0]</text>
-<text text-anchor="start" x="3219.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 147&#45;&gt;148 -->
-<g id="edge148" class="edge"><title>147&#45;&gt;148</title>
-<path fill="none" stroke="black" d="M3297.48,-222.907C3290.26,-211.652 3282.42,-199.418 3275.17,-188.106"/>
-<polygon fill="black" stroke="black" points="3278.1,-186.197 3269.76,-179.667 3272.21,-189.975 3278.1,-186.197"/>
-</g>
-<!-- 149 -->
-<g id="node150" class="node"><title>149</title>
-<path fill="#ffffff" stroke="black" d="M3469.5,-187C3469.5,-187 3327.5,-187 3327.5,-187 3321.5,-187 3315.5,-181 3315.5,-175 3315.5,-175 3315.5,-116 3315.5,-116 3315.5,-110 3321.5,-104 3327.5,-104 3327.5,-104 3469.5,-104 3469.5,-104 3475.5,-104 3481.5,-110 3481.5,-116 3481.5,-116 3481.5,-175 3481.5,-175 3481.5,-181 3475.5,-187 3469.5,-187"/>
-<text text-anchor="start" x="3323.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ 0.581</text>
-<text text-anchor="start" x="3369.5" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="3359" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3358" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="3369.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 147&#45;&gt;149 -->
-<g id="edge149" class="edge"><title>147&#45;&gt;149</title>
-<path fill="none" stroke="black" d="M3349.52,-222.907C3355.16,-214.105 3361.19,-204.703 3367.02,-195.612"/>
-<polygon fill="black" stroke="black" points="3370.07,-197.328 3372.53,-187.021 3364.18,-193.551 3370.07,-197.328"/>
-</g>
-<!-- 150 -->
-<g id="node151" class="node"><title>150</title>
-<path fill="#399de5" stroke="black" d="M3377,-68C3377,-68 3304,-68 3304,-68 3298,-68 3292,-62 3292,-56 3292,-56 3292,-12 3292,-12 3292,-6 3298,-0 3304,-0 3304,-0 3377,-0 3377,-0 3383,-0 3389,-6 3389,-12 3389,-12 3389,-56 3389,-56 3389,-62 3383,-68 3377,-68"/>
-<text text-anchor="start" x="3311.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3301" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3300" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="3311.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 149&#45;&gt;150 -->
-<g id="edge150" class="edge"><title>149&#45;&gt;150</title>
-<path fill="none" stroke="black" d="M3376.9,-103.726C3372.31,-95.0615 3367.46,-85.8962 3362.84,-77.1802"/>
-<polygon fill="black" stroke="black" points="3365.91,-75.4982 3358.14,-68.2996 3359.73,-78.7748 3365.91,-75.4982"/>
-</g>
-<!-- 151 -->
-<g id="node152" class="node"><title>151</title>
-<path fill="#e58139" stroke="black" d="M3492,-68C3492,-68 3419,-68 3419,-68 3413,-68 3407,-62 3407,-56 3407,-56 3407,-12 3407,-12 3407,-6 3413,-0 3419,-0 3419,-0 3492,-0 3492,-0 3498,-0 3504,-6 3504,-12 3504,-12 3504,-56 3504,-56 3504,-62 3498,-68 3492,-68"/>
-<text text-anchor="start" x="3426.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3416" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3415" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="3426.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 149&#45;&gt;151 -->
-<g id="edge151" class="edge"><title>149&#45;&gt;151</title>
-<path fill="none" stroke="black" d="M3419.72,-103.726C3424.24,-95.0615 3429.01,-85.8962 3433.54,-77.1802"/>
-<polygon fill="black" stroke="black" points="3436.65,-78.7859 3438.17,-68.2996 3430.44,-75.5537 3436.65,-78.7859"/>
-</g>
-<!-- 154 -->
-<g id="node155" class="node"><title>154</title>
-<path fill="#e58139" stroke="black" d="M3612,-417.5C3612,-417.5 3531,-417.5 3531,-417.5 3525,-417.5 3519,-411.5 3519,-405.5 3519,-405.5 3519,-361.5 3519,-361.5 3519,-355.5 3525,-349.5 3531,-349.5 3531,-349.5 3612,-349.5 3612,-349.5 3618,-349.5 3624,-355.5 3624,-361.5 3624,-361.5 3624,-405.5 3624,-405.5 3624,-411.5 3618,-417.5 3612,-417.5"/>
-<text text-anchor="start" x="3542.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3528" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 21</text>
-<text text-anchor="start" x="3527" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [21, 0]</text>
-<text text-anchor="start" x="3542.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 153&#45;&gt;154 -->
-<g id="edge154" class="edge"><title>153&#45;&gt;154</title>
-<path fill="none" stroke="black" d="M3571.5,-460.907C3571.5,-450.204 3571.5,-438.615 3571.5,-427.776"/>
-<polygon fill="black" stroke="black" points="3575,-427.667 3571.5,-417.667 3568,-427.667 3575,-427.667"/>
-</g>
-<!-- 155 -->
-<g id="node156" class="node"><title>155</title>
-<path fill="#9ccef2" stroke="black" d="M3800.5,-425C3800.5,-425 3654.5,-425 3654.5,-425 3648.5,-425 3642.5,-419 3642.5,-413 3642.5,-413 3642.5,-354 3642.5,-354 3642.5,-348 3648.5,-342 3654.5,-342 3654.5,-342 3800.5,-342 3800.5,-342 3806.5,-342 3812.5,-348 3812.5,-354 3812.5,-354 3812.5,-413 3812.5,-413 3812.5,-419 3806.5,-425 3800.5,-425"/>
-<text text-anchor="start" x="3650.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;0.122</text>
-<text text-anchor="start" x="3690" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="3688" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="3687" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
-<text text-anchor="start" x="3698.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 153&#45;&gt;155 -->
-<g id="edge155" class="edge"><title>153&#45;&gt;155</title>
-<path fill="none" stroke="black" d="M3625.62,-460.907C3638.45,-451.288 3652.23,-440.953 3665.38,-431.09"/>
-<polygon fill="black" stroke="black" points="3667.57,-433.821 3673.47,-425.021 3663.37,-428.221 3667.57,-433.821"/>
-</g>
-<!-- 156 -->
-<g id="node157" class="node"><title>156</title>
-<path fill="#e58139" stroke="black" d="M3747,-298.5C3747,-298.5 3674,-298.5 3674,-298.5 3668,-298.5 3662,-292.5 3662,-286.5 3662,-286.5 3662,-242.5 3662,-242.5 3662,-236.5 3668,-230.5 3674,-230.5 3674,-230.5 3747,-230.5 3747,-230.5 3753,-230.5 3759,-236.5 3759,-242.5 3759,-242.5 3759,-286.5 3759,-286.5 3759,-292.5 3753,-298.5 3747,-298.5"/>
-<text text-anchor="start" x="3681.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3671" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3670" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="3681.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 155&#45;&gt;156 -->
-<g id="edge156" class="edge"><title>155&#45;&gt;156</title>
-<path fill="none" stroke="black" d="M3721.6,-341.907C3720.05,-331.204 3718.36,-319.615 3716.79,-308.776"/>
-<polygon fill="black" stroke="black" points="3720.22,-308.06 3715.32,-298.667 3713.29,-309.066 3720.22,-308.06"/>
-</g>
-<!-- 157 -->
-<g id="node158" class="node"><title>157</title>
-<path fill="#399de5" stroke="black" d="M3862,-298.5C3862,-298.5 3789,-298.5 3789,-298.5 3783,-298.5 3777,-292.5 3777,-286.5 3777,-286.5 3777,-242.5 3777,-242.5 3777,-236.5 3783,-230.5 3789,-230.5 3789,-230.5 3862,-230.5 3862,-230.5 3868,-230.5 3874,-236.5 3874,-242.5 3874,-242.5 3874,-286.5 3874,-286.5 3874,-292.5 3868,-298.5 3862,-298.5"/>
-<text text-anchor="start" x="3796.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3786" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3785" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="3796.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 155&#45;&gt;157 -->
-<g id="edge157" class="edge"><title>155&#45;&gt;157</title>
-<path fill="none" stroke="black" d="M3761.5,-341.907C3771.11,-330.432 3781.58,-317.938 3791.21,-306.442"/>
-<polygon fill="black" stroke="black" points="3793.98,-308.58 3797.72,-298.667 3788.61,-304.086 3793.98,-308.58"/>
-</g>
-<!-- 159 -->
-<g id="node160" class="node"><title>159</title>
-<path fill="#e58139" stroke="black" d="M3595,-655.5C3595,-655.5 3522,-655.5 3522,-655.5 3516,-655.5 3510,-649.5 3510,-643.5 3510,-643.5 3510,-599.5 3510,-599.5 3510,-593.5 3516,-587.5 3522,-587.5 3522,-587.5 3595,-587.5 3595,-587.5 3601,-587.5 3607,-593.5 3607,-599.5 3607,-599.5 3607,-643.5 3607,-643.5 3607,-649.5 3601,-655.5 3595,-655.5"/>
-<text text-anchor="start" x="3529.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3519" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="3518" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 0]</text>
-<text text-anchor="start" x="3529.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 158&#45;&gt;159 -->
-<g id="edge159" class="edge"><title>158&#45;&gt;159</title>
-<path fill="none" stroke="black" d="M3576.79,-698.907C3574.2,-688.094 3571.39,-676.376 3568.78,-665.441"/>
-<polygon fill="black" stroke="black" points="3572.17,-664.578 3566.44,-655.667 3565.36,-666.207 3572.17,-664.578"/>
-</g>
-<!-- 160 -->
-<g id="node161" class="node"><title>160</title>
-<path fill="#399de5" stroke="black" d="M3710,-655.5C3710,-655.5 3637,-655.5 3637,-655.5 3631,-655.5 3625,-649.5 3625,-643.5 3625,-643.5 3625,-599.5 3625,-599.5 3625,-593.5 3631,-587.5 3637,-587.5 3637,-587.5 3710,-587.5 3710,-587.5 3716,-587.5 3722,-593.5 3722,-599.5 3722,-599.5 3722,-643.5 3722,-643.5 3722,-649.5 3716,-655.5 3710,-655.5"/>
-<text text-anchor="start" x="3644.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3634" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="3633" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="3644.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 158&#45;&gt;160 -->
-<g id="edge160" class="edge"><title>158&#45;&gt;160</title>
-<path fill="none" stroke="black" d="M3616.68,-698.907C3625.14,-687.542 3634.33,-675.178 3642.81,-663.774"/>
-<polygon fill="black" stroke="black" points="3645.68,-665.78 3648.84,-655.667 3640.06,-661.603 3645.68,-665.78"/>
-</g>
-<!-- 163 -->
-<g id="node164" class="node"><title>163</title>
-<path fill="#e58139" stroke="black" d="M4036,-1012.5C4036,-1012.5 3955,-1012.5 3955,-1012.5 3949,-1012.5 3943,-1006.5 3943,-1000.5 3943,-1000.5 3943,-956.5 3943,-956.5 3943,-950.5 3949,-944.5 3955,-944.5 3955,-944.5 4036,-944.5 4036,-944.5 4042,-944.5 4048,-950.5 4048,-956.5 4048,-956.5 4048,-1000.5 4048,-1000.5 4048,-1006.5 4042,-1012.5 4036,-1012.5"/>
-<text text-anchor="start" x="3966.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3952" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 46</text>
-<text text-anchor="start" x="3951" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [46, 0]</text>
-<text text-anchor="start" x="3966.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 162&#45;&gt;163 -->
-<g id="edge163" class="edge"><title>162&#45;&gt;163</title>
-<path fill="none" stroke="black" d="M4081.05,-1055.91C4067.83,-1044.1 4053.4,-1031.22 4040.23,-1019.45"/>
-<polygon fill="black" stroke="black" points="4042.43,-1016.72 4032.64,-1012.67 4037.76,-1021.94 4042.43,-1016.72"/>
-</g>
-<!-- 164 -->
-<g id="node165" class="node"><title>164</title>
-<path fill="#87c4ef" stroke="black" d="M4181,-1020C4181,-1020 4078,-1020 4078,-1020 4072,-1020 4066,-1014 4066,-1008 4066,-1008 4066,-949 4066,-949 4066,-943 4072,-937 4078,-937 4078,-937 4181,-937 4181,-937 4187,-937 4193,-943 4193,-949 4193,-949 4193,-1008 4193,-1008 4193,-1014 4187,-1020 4181,-1020"/>
-<text text-anchor="start" x="4074" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="4092" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.406</text>
-<text text-anchor="start" x="4086" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 53</text>
-<text text-anchor="start" x="4081" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [15, 38]</text>
-<text text-anchor="start" x="4100.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 162&#45;&gt;164 -->
-<g id="edge164" class="edge"><title>162&#45;&gt;164</title>
-<path fill="none" stroke="black" d="M4127.54,-1055.91C4127.75,-1047.56 4127.98,-1038.67 4128.2,-1030.02"/>
-<polygon fill="black" stroke="black" points="4131.7,-1030.11 4128.46,-1020.02 4124.71,-1029.93 4131.7,-1030.11"/>
-</g>
-<!-- 165 -->
-<g id="node166" class="node"><title>165</title>
-<path fill="#e58139" stroke="black" d="M3974,-893.5C3974,-893.5 3893,-893.5 3893,-893.5 3887,-893.5 3881,-887.5 3881,-881.5 3881,-881.5 3881,-837.5 3881,-837.5 3881,-831.5 3887,-825.5 3893,-825.5 3893,-825.5 3974,-825.5 3974,-825.5 3980,-825.5 3986,-831.5 3986,-837.5 3986,-837.5 3986,-881.5 3986,-881.5 3986,-887.5 3980,-893.5 3974,-893.5"/>
-<text text-anchor="start" x="3904.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3890" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
-<text text-anchor="start" x="3889" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 0]</text>
-<text text-anchor="start" x="3904.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 164&#45;&gt;165 -->
-<g id="edge165" class="edge"><title>164&#45;&gt;165</title>
-<path fill="none" stroke="black" d="M4065.91,-942.029C4037.78,-926.222 4008.04,-909.319 3994.5,-901 3993.4,-900.326 3992.3,-899.643 3991.19,-898.951"/>
-<polygon fill="black" stroke="black" points="3992.9,-895.897 3982.58,-893.516 3989.17,-901.815 3992.9,-895.897"/>
-</g>
-<!-- 166 -->
-<g id="node167" class="node"><title>166</title>
-<path fill="#3ea0e6" stroke="black" d="M4243,-901C4243,-901 4016,-901 4016,-901 4010,-901 4004,-895 4004,-889 4004,-889 4004,-830 4004,-830 4004,-824 4010,-818 4016,-818 4016,-818 4243,-818 4243,-818 4249,-818 4255,-824 4255,-830 4255,-830 4255,-889 4255,-889 4255,-895 4249,-901 4243,-901"/>
-<text text-anchor="start" x="4012" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ &#45;0.107</text>
-<text text-anchor="start" x="4096" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.05</text>
-<text text-anchor="start" x="4086" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 39</text>
-<text text-anchor="start" x="4085" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 38]</text>
-<text text-anchor="start" x="4100.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 164&#45;&gt;166 -->
-<g id="edge166" class="edge"><title>164&#45;&gt;166</title>
-<path fill="none" stroke="black" d="M4129.5,-936.907C4129.5,-928.649 4129.5,-919.864 4129.5,-911.302"/>
-<polygon fill="black" stroke="black" points="4133,-911.021 4129.5,-901.021 4126,-911.021 4133,-911.021"/>
-</g>
-<!-- 167 -->
-<g id="node168" class="node"><title>167</title>
-<path fill="#399de5" stroke="black" d="M4058,-774.5C4058,-774.5 3977,-774.5 3977,-774.5 3971,-774.5 3965,-768.5 3965,-762.5 3965,-762.5 3965,-718.5 3965,-718.5 3965,-712.5 3971,-706.5 3977,-706.5 3977,-706.5 4058,-706.5 4058,-706.5 4064,-706.5 4070,-712.5 4070,-718.5 4070,-718.5 4070,-762.5 4070,-762.5 4070,-768.5 4064,-774.5 4058,-774.5"/>
-<text text-anchor="start" x="3988.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3974" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 38</text>
-<text text-anchor="start" x="3973" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 38]</text>
-<text text-anchor="start" x="3988.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 166&#45;&gt;167 -->
-<g id="edge167" class="edge"><title>166&#45;&gt;167</title>
-<path fill="none" stroke="black" d="M4090.64,-817.907C4079.55,-806.321 4067.47,-793.698 4056.38,-782.111"/>
-<polygon fill="black" stroke="black" points="4058.69,-779.47 4049.25,-774.667 4053.64,-784.311 4058.69,-779.47"/>
-</g>
-<!-- 168 -->
-<g id="node169" class="node"><title>168</title>
-<path fill="#e58139" stroke="black" d="M4173,-774.5C4173,-774.5 4100,-774.5 4100,-774.5 4094,-774.5 4088,-768.5 4088,-762.5 4088,-762.5 4088,-718.5 4088,-718.5 4088,-712.5 4094,-706.5 4100,-706.5 4100,-706.5 4173,-706.5 4173,-706.5 4179,-706.5 4185,-712.5 4185,-718.5 4185,-718.5 4185,-762.5 4185,-762.5 4185,-768.5 4179,-774.5 4173,-774.5"/>
-<text text-anchor="start" x="4107.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4097" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4096" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="4107.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 166&#45;&gt;168 -->
-<g id="edge168" class="edge"><title>166&#45;&gt;168</title>
-<path fill="none" stroke="black" d="M4131.93,-817.907C4132.57,-807.204 4133.26,-795.615 4133.91,-784.776"/>
-<polygon fill="black" stroke="black" points="4137.41,-784.858 4134.52,-774.667 4130.42,-784.44 4137.41,-784.858"/>
-</g>
-<!-- 171 -->
-<g id="node172" class="node"><title>171</title>
-<path fill="#e58139" stroke="black" d="M4827,-1258C4827,-1258 4690,-1258 4690,-1258 4684,-1258 4678,-1252 4678,-1246 4678,-1246 4678,-1187 4678,-1187 4678,-1181 4684,-1175 4690,-1175 4690,-1175 4827,-1175 4827,-1175 4833,-1175 4839,-1181 4839,-1187 4839,-1187 4839,-1246 4839,-1246 4839,-1252 4833,-1258 4827,-1258"/>
-<text text-anchor="start" x="4686" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">is_guest_login ≤ 5.161</text>
-<text text-anchor="start" x="4721" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
-<text text-anchor="start" x="4702.5" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10554</text>
-<text text-anchor="start" x="4701.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10545, 9]</text>
-<text text-anchor="start" x="4729.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 170&#45;&gt;171 -->
-<g id="edge171" class="edge"><title>170&#45;&gt;171</title>
-<path fill="none" stroke="black" d="M4789.19,-1293.91C4785.77,-1285.38 4782.11,-1276.28 4778.57,-1267.46"/>
-<polygon fill="black" stroke="black" points="4781.75,-1266 4774.78,-1258.02 4775.26,-1268.6 4781.75,-1266"/>
-</g>
-<!-- 204 -->
-<g id="node205" class="node"><title>204</title>
-<path fill="#e88d4c" stroke="black" d="M5004,-1258C5004,-1258 4877,-1258 4877,-1258 4871,-1258 4865,-1252 4865,-1246 4865,-1246 4865,-1187 4865,-1187 4865,-1181 4871,-1175 4877,-1175 4877,-1175 5004,-1175 5004,-1175 5010,-1175 5016,-1181 5016,-1187 5016,-1187 5016,-1246 5016,-1246 5016,-1252 5010,-1258 5004,-1258"/>
-<text text-anchor="start" x="4873" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">same_srv_rate ≤ &#45;0.9</text>
-<text text-anchor="start" x="4907" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.16</text>
-<text text-anchor="start" x="4897" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 57</text>
-<text text-anchor="start" x="4896" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 5]</text>
-<text text-anchor="start" x="4911.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 170&#45;&gt;204 -->
-<g id="edge204" class="edge"><title>170&#45;&gt;204</title>
-<path fill="none" stroke="black" d="M4852.34,-1293.91C4863.23,-1284.47 4874.91,-1274.34 4886.1,-1264.65"/>
-<polygon fill="black" stroke="black" points="4888.48,-1267.22 4893.75,-1258.02 4883.9,-1261.93 4888.48,-1267.22"/>
-</g>
-<!-- 172 -->
-<g id="node173" class="node"><title>172</title>
-<path fill="#e58139" stroke="black" d="M4613,-1139C4613,-1139 4426,-1139 4426,-1139 4420,-1139 4414,-1133 4414,-1127 4414,-1127 4414,-1068 4414,-1068 4414,-1062 4420,-1056 4426,-1056 4426,-1056 4613,-1056 4613,-1056 4619,-1056 4625,-1062 4625,-1068 4625,-1068 4625,-1127 4625,-1127 4625,-1133 4619,-1139 4613,-1139"/>
-<text text-anchor="start" x="4422" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 4.607</text>
-<text text-anchor="start" x="4482" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.002</text>
-<text text-anchor="start" x="4463.5" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10552</text>
-<text text-anchor="start" x="4462.5" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10544, 8]</text>
-<text text-anchor="start" x="4490.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 171&#45;&gt;172 -->
-<g id="edge172" class="edge"><title>171&#45;&gt;172</title>
-<path fill="none" stroke="black" d="M4677.92,-1176.05C4656.69,-1165.66 4633.63,-1154.37 4611.84,-1143.7"/>
-<polygon fill="black" stroke="black" points="4613.11,-1140.43 4602.59,-1139.17 4610.03,-1146.71 4613.11,-1140.43"/>
-</g>
-<!-- 201 -->
-<g id="node202" class="node"><title>201</title>
-<path fill="#ffffff" stroke="black" d="M4861.5,-1139C4861.5,-1139 4655.5,-1139 4655.5,-1139 4649.5,-1139 4643.5,-1133 4643.5,-1127 4643.5,-1127 4643.5,-1068 4643.5,-1068 4643.5,-1062 4649.5,-1056 4655.5,-1056 4655.5,-1056 4861.5,-1056 4861.5,-1056 4867.5,-1056 4873.5,-1062 4873.5,-1068 4873.5,-1068 4873.5,-1127 4873.5,-1127 4873.5,-1133 4867.5,-1139 4861.5,-1139"/>
-<text text-anchor="start" x="4651.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ &#45;0.857</text>
-<text text-anchor="start" x="4729.5" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="4719" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="4718" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="4729.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 171&#45;&gt;201 -->
-<g id="edge201" class="edge"><title>171&#45;&gt;201</title>
-<path fill="none" stroke="black" d="M4758.5,-1174.91C4758.5,-1166.65 4758.5,-1157.86 4758.5,-1149.3"/>
-<polygon fill="black" stroke="black" points="4762,-1149.02 4758.5,-1139.02 4755,-1149.02 4762,-1149.02"/>
-</g>
-<!-- 173 -->
-<g id="node174" class="node"><title>173</title>
-<path fill="#e58139" stroke="black" d="M4446,-1020C4446,-1020 4339,-1020 4339,-1020 4333,-1020 4327,-1014 4327,-1008 4327,-1008 4327,-949 4327,-949 4327,-943 4333,-937 4339,-937 4339,-937 4446,-937 4446,-937 4452,-937 4458,-943 4458,-949 4458,-949 4458,-1008 4458,-1008 4458,-1014 4452,-1020 4446,-1020"/>
-<text text-anchor="start" x="4335" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ 7.252</text>
-<text text-anchor="start" x="4355" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
-<text text-anchor="start" x="4336.5" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10549</text>
-<text text-anchor="start" x="4335.5" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10542, 7]</text>
-<text text-anchor="start" x="4363.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 172&#45;&gt;173 -->
-<g id="edge173" class="edge"><title>172&#45;&gt;173</title>
-<path fill="none" stroke="black" d="M4475.44,-1055.91C4465.29,-1046.56 4454.41,-1036.54 4443.98,-1026.93"/>
-<polygon fill="black" stroke="black" points="4446.21,-1024.22 4436.48,-1020.02 4441.47,-1029.37 4446.21,-1024.22"/>
-</g>
-<!-- 198 -->
-<g id="node199" class="node"><title>198</title>
-<path fill="#f2c09c" stroke="black" d="M4661,-1020C4661,-1020 4488,-1020 4488,-1020 4482,-1020 4476,-1014 4476,-1008 4476,-1008 4476,-949 4476,-949 4476,-943 4482,-937 4488,-937 4488,-937 4661,-937 4661,-937 4667,-937 4673,-943 4673,-949 4673,-949 4673,-1008 4673,-1008 4673,-1014 4667,-1020 4661,-1020"/>
-<text text-anchor="start" x="4484" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_file_creations ≤ 16.966</text>
-<text text-anchor="start" x="4537" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="4535" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="4534" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 1]</text>
-<text text-anchor="start" x="4545.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 172&#45;&gt;198 -->
-<g id="edge198" class="edge"><title>172&#45;&gt;198</title>
-<path fill="none" stroke="black" d="M4538.58,-1055.91C4542.63,-1047.29 4546.96,-1038.09 4551.15,-1029.17"/>
-<polygon fill="black" stroke="black" points="4554.36,-1030.56 4555.45,-1020.02 4548.03,-1027.58 4554.36,-1030.56"/>
-</g>
-<!-- 174 -->
-<g id="node175" class="node"><title>174</title>
-<path fill="#e58139" stroke="black" d="M4392.5,-901C4392.5,-901 4286.5,-901 4286.5,-901 4280.5,-901 4274.5,-895 4274.5,-889 4274.5,-889 4274.5,-830 4274.5,-830 4274.5,-824 4280.5,-818 4286.5,-818 4286.5,-818 4392.5,-818 4392.5,-818 4398.5,-818 4404.5,-824 4404.5,-830 4404.5,-830 4404.5,-889 4404.5,-889 4404.5,-895 4398.5,-901 4392.5,-901"/>
-<text text-anchor="start" x="4283.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 0.413</text>
-<text text-anchor="start" x="4302" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
-<text text-anchor="start" x="4283.5" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10543</text>
-<text text-anchor="start" x="4282.5" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10537, 6]</text>
-<text text-anchor="start" x="4310.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 173&#45;&gt;174 -->
-<g id="edge174" class="edge"><title>173&#45;&gt;174</title>
-<path fill="none" stroke="black" d="M4374.11,-936.907C4370.21,-928.286 4366.04,-919.09 4362,-910.175"/>
-<polygon fill="black" stroke="black" points="4365.17,-908.686 4357.86,-901.021 4358.79,-911.574 4365.17,-908.686"/>
-</g>
-<!-- 195 -->
-<g id="node196" class="node"><title>195</title>
-<path fill="#ea9a61" stroke="black" d="M4548.5,-901C4548.5,-901 4434.5,-901 4434.5,-901 4428.5,-901 4422.5,-895 4422.5,-889 4422.5,-889 4422.5,-830 4422.5,-830 4422.5,-824 4428.5,-818 4434.5,-818 4434.5,-818 4548.5,-818 4548.5,-818 4554.5,-818 4560.5,-824 4560.5,-830 4560.5,-830 4560.5,-889 4560.5,-889 4560.5,-895 4554.5,-901 4548.5,-901"/>
-<text text-anchor="start" x="4430.5" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">serror_rate ≤ 0.478</text>
-<text text-anchor="start" x="4454" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
-<text text-anchor="start" x="4452" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="4451" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 1]</text>
-<text text-anchor="start" x="4462.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 173&#45;&gt;195 -->
-<g id="edge195" class="edge"><title>173&#45;&gt;195</title>
-<path fill="none" stroke="black" d="M4426.85,-936.907C4434.53,-927.832 4442.74,-918.121 4450.66,-908.769"/>
-<polygon fill="black" stroke="black" points="4453.43,-910.916 4457.21,-901.021 4448.08,-906.394 4453.43,-910.916"/>
-</g>
-<!-- 175 -->
-<g id="node176" class="node"><title>175</title>
-<path fill="#e58139" stroke="black" d="M4427.5,-782C4427.5,-782 4223.5,-782 4223.5,-782 4217.5,-782 4211.5,-776 4211.5,-770 4211.5,-770 4211.5,-711 4211.5,-711 4211.5,-705 4217.5,-699 4223.5,-699 4223.5,-699 4427.5,-699 4427.5,-699 4433.5,-699 4439.5,-705 4439.5,-711 4439.5,-711 4439.5,-770 4439.5,-770 4439.5,-776 4433.5,-782 4427.5,-782"/>
-<text text-anchor="start" x="4219.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ 0.056</text>
-<text text-anchor="start" x="4288" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
-<text text-anchor="start" x="4269.5" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10531</text>
-<text text-anchor="start" x="4268.5" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10526, 5]</text>
-<text text-anchor="start" x="4296.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 174&#45;&gt;175 -->
-<g id="edge175" class="edge"><title>174&#45;&gt;175</title>
-<path fill="none" stroke="black" d="M4334.64,-817.907C4333.64,-809.558 4332.58,-800.671 4331.55,-792.02"/>
-<polygon fill="black" stroke="black" points="4335.01,-791.534 4330.35,-782.021 4328.06,-792.366 4335.01,-791.534"/>
-</g>
-<!-- 192 -->
-<g id="node193" class="node"><title>192</title>
-<path fill="#e78c4b" stroke="black" d="M4609.5,-782C4609.5,-782 4469.5,-782 4469.5,-782 4463.5,-782 4457.5,-776 4457.5,-770 4457.5,-770 4457.5,-711 4457.5,-711 4457.5,-705 4463.5,-699 4469.5,-699 4469.5,-699 4609.5,-699 4609.5,-699 4615.5,-699 4621.5,-705 4621.5,-711 4621.5,-711 4621.5,-770 4621.5,-770 4621.5,-776 4615.5,-782 4609.5,-782"/>
-<text text-anchor="start" x="4465.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">su_attempted ≤ 10.222</text>
-<text text-anchor="start" x="4502" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
-<text text-anchor="start" x="4496" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12</text>
-<text text-anchor="start" x="4495" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 1]</text>
-<text text-anchor="start" x="4510.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 174&#45;&gt;192 -->
-<g id="edge192" class="edge"><title>174&#45;&gt;192</title>
-<path fill="none" stroke="black" d="M4404.71,-820.352C4422.82,-809.759 4442.66,-798.15 4461.43,-787.174"/>
-<polygon fill="black" stroke="black" points="4463.38,-790.084 4470.25,-782.013 4459.85,-784.042 4463.38,-790.084"/>
-</g>
-<!-- 176 -->
-<g id="node177" class="node"><title>176</title>
-<path fill="#e58139" stroke="black" d="M4313,-663C4313,-663 4206,-663 4206,-663 4200,-663 4194,-657 4194,-651 4194,-651 4194,-592 4194,-592 4194,-586 4200,-580 4206,-580 4206,-580 4313,-580 4313,-580 4319,-580 4325,-586 4325,-592 4325,-592 4325,-651 4325,-651 4325,-657 4319,-663 4313,-663"/>
-<text text-anchor="start" x="4202" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 0.006</text>
-<text text-anchor="start" x="4222" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.001</text>
-<text text-anchor="start" x="4203.5" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10469</text>
-<text text-anchor="start" x="4202.5" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10466, 3]</text>
-<text text-anchor="start" x="4230.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 175&#45;&gt;176 -->
-<g id="edge176" class="edge"><title>175&#45;&gt;176</title>
-<path fill="none" stroke="black" d="M4302.6,-698.907C4297.69,-690.195 4292.44,-680.897 4287.36,-671.893"/>
-<polygon fill="black" stroke="black" points="4290.32,-670.011 4282.36,-663.021 4284.22,-673.45 4290.32,-670.011"/>
-</g>
-<!-- 187 -->
-<g id="node188" class="node"><title>187</title>
-<path fill="#e68540" stroke="black" d="M4462,-663C4462,-663 4355,-663 4355,-663 4349,-663 4343,-657 4343,-651 4343,-651 4343,-592 4343,-592 4343,-586 4349,-580 4355,-580 4355,-580 4462,-580 4462,-580 4468,-580 4474,-586 4474,-592 4474,-592 4474,-651 4474,-651 4474,-657 4468,-663 4462,-663"/>
-<text text-anchor="start" x="4351" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
-<text text-anchor="start" x="4371" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.062</text>
-<text text-anchor="start" x="4365" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 62</text>
-<text text-anchor="start" x="4364" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [60, 2]</text>
-<text text-anchor="start" x="4379.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 175&#45;&gt;187 -->
-<g id="edge187" class="edge"><title>175&#45;&gt;187</title>
-<path fill="none" stroke="black" d="M4354.3,-698.907C4360.61,-690.014 4367.35,-680.509 4373.86,-671.331"/>
-<polygon fill="black" stroke="black" points="4376.82,-673.202 4379.75,-663.021 4371.11,-669.152 4376.82,-673.202"/>
-</g>
-<!-- 177 -->
-<g id="node178" class="node"><title>177</title>
-<path fill="#e58139" stroke="black" d="M4134.5,-544C4134.5,-544 3960.5,-544 3960.5,-544 3954.5,-544 3948.5,-538 3948.5,-532 3948.5,-532 3948.5,-473 3948.5,-473 3948.5,-467 3954.5,-461 3960.5,-461 3960.5,-461 4134.5,-461 4134.5,-461 4140.5,-461 4146.5,-467 4146.5,-473 4146.5,-473 4146.5,-532 4146.5,-532 4146.5,-538 4140.5,-544 4134.5,-544"/>
-<text text-anchor="start" x="3956.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.612</text>
-<text text-anchor="start" x="4018.5" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3991.5" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10451</text>
-<text text-anchor="start" x="3990.5" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10449, 2]</text>
-<text text-anchor="start" x="4018.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 176&#45;&gt;177 -->
-<g id="edge177" class="edge"><title>176&#45;&gt;177</title>
-<path fill="none" stroke="black" d="M4193.87,-584.282C4173.66,-573.124 4151.14,-560.695 4129.94,-548.997"/>
-<polygon fill="black" stroke="black" points="4131.39,-545.802 4120.95,-544.034 4128.01,-551.93 4131.39,-545.802"/>
-</g>
-<!-- 184 -->
-<g id="node185" class="node"><title>184</title>
-<path fill="#e78845" stroke="black" d="M4346,-544C4346,-544 4177,-544 4177,-544 4171,-544 4165,-538 4165,-532 4165,-532 4165,-473 4165,-473 4165,-467 4171,-461 4177,-461 4177,-461 4346,-461 4346,-461 4352,-461 4358,-467 4358,-473 4358,-473 4358,-532 4358,-532 4358,-538 4352,-544 4346,-544"/>
-<text text-anchor="start" x="4173" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 1.224</text>
-<text text-anchor="start" x="4224" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.105</text>
-<text text-anchor="start" x="4218" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 18</text>
-<text text-anchor="start" x="4217" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [17, 1]</text>
-<text text-anchor="start" x="4232.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 176&#45;&gt;184 -->
-<g id="edge184" class="edge"><title>176&#45;&gt;184</title>
-<path fill="none" stroke="black" d="M4260.19,-579.907C4260.34,-571.558 4260.49,-562.671 4260.64,-554.02"/>
-<polygon fill="black" stroke="black" points="4264.14,-554.079 4260.81,-544.021 4257.14,-553.959 4264.14,-554.079"/>
-</g>
-<!-- 178 -->
-<g id="node179" class="node"><title>178</title>
-<path fill="#e58139" stroke="black" d="M3948.5,-417.5C3948.5,-417.5 3842.5,-417.5 3842.5,-417.5 3836.5,-417.5 3830.5,-411.5 3830.5,-405.5 3830.5,-405.5 3830.5,-361.5 3830.5,-361.5 3830.5,-355.5 3836.5,-349.5 3842.5,-349.5 3842.5,-349.5 3948.5,-349.5 3948.5,-349.5 3954.5,-349.5 3960.5,-355.5 3960.5,-361.5 3960.5,-361.5 3960.5,-405.5 3960.5,-405.5 3960.5,-411.5 3954.5,-417.5 3948.5,-417.5"/>
-<text text-anchor="start" x="3866.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3839.5" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 10361</text>
-<text text-anchor="start" x="3838.5" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10361, 0]</text>
-<text text-anchor="start" x="3866.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 177&#45;&gt;178 -->
-<g id="edge178" class="edge"><title>177&#45;&gt;178</title>
-<path fill="none" stroke="black" d="M3994.76,-460.907C3979.14,-448.88 3962.06,-435.735 3946.54,-423.791"/>
-<polygon fill="black" stroke="black" points="3948.65,-420.993 3938.59,-417.667 3944.38,-426.54 3948.65,-420.993"/>
-</g>
-<!-- 179 -->
-<g id="node180" class="node"><title>179</title>
-<path fill="#e6843d" stroke="black" d="M4164.5,-425C4164.5,-425 3990.5,-425 3990.5,-425 3984.5,-425 3978.5,-419 3978.5,-413 3978.5,-413 3978.5,-354 3978.5,-354 3978.5,-348 3984.5,-342 3990.5,-342 3990.5,-342 4164.5,-342 4164.5,-342 4170.5,-342 4176.5,-348 4176.5,-354 4176.5,-354 4176.5,-413 4176.5,-413 4176.5,-419 4170.5,-425 4164.5,-425"/>
-<text text-anchor="start" x="3986.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.677</text>
-<text text-anchor="start" x="4040" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.043</text>
-<text text-anchor="start" x="4034" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 90</text>
-<text text-anchor="start" x="4033" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [88, 2]</text>
-<text text-anchor="start" x="4048.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 177&#45;&gt;179 -->
-<g id="edge179" class="edge"><title>177&#45;&gt;179</title>
-<path fill="none" stroke="black" d="M4057.91,-460.907C4060.07,-452.468 4062.38,-443.477 4064.62,-434.738"/>
-<polygon fill="black" stroke="black" points="4068.02,-435.577 4067.11,-425.021 4061.24,-433.838 4068.02,-435.577"/>
-</g>
-<!-- 180 -->
-<g id="node181" class="node"><title>180</title>
-<path fill="#efb388" stroke="black" d="M4012,-306C4012,-306 3913,-306 3913,-306 3907,-306 3901,-300 3901,-294 3901,-294 3901,-235 3901,-235 3901,-229 3907,-223 3913,-223 3913,-223 4012,-223 4012,-223 4018,-223 4024,-229 4024,-235 4024,-235 4024,-294 4024,-294 4024,-300 4018,-306 4012,-306"/>
-<text text-anchor="start" x="3909" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.113</text>
-<text text-anchor="start" x="3925" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.408</text>
-<text text-anchor="start" x="3923" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="3922" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 2]</text>
-<text text-anchor="start" x="3933.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 179&#45;&gt;180 -->
-<g id="edge180" class="edge"><title>179&#45;&gt;180</title>
-<path fill="none" stroke="black" d="M4037.6,-341.907C4028.5,-332.651 4018.75,-322.732 4009.39,-313.209"/>
-<polygon fill="black" stroke="black" points="4011.83,-310.699 4002.33,-306.021 4006.84,-315.606 4011.83,-310.699"/>
-</g>
-<!-- 183 -->
-<g id="node184" class="node"><title>183</title>
-<path fill="#e58139" stroke="black" d="M4135,-298.5C4135,-298.5 4054,-298.5 4054,-298.5 4048,-298.5 4042,-292.5 4042,-286.5 4042,-286.5 4042,-242.5 4042,-242.5 4042,-236.5 4048,-230.5 4054,-230.5 4054,-230.5 4135,-230.5 4135,-230.5 4141,-230.5 4147,-236.5 4147,-242.5 4147,-242.5 4147,-286.5 4147,-286.5 4147,-292.5 4141,-298.5 4135,-298.5"/>
-<text text-anchor="start" x="4065.5" y="-283.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4051" y="-268.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 83</text>
-<text text-anchor="start" x="4050" y="-253.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [83, 0]</text>
-<text text-anchor="start" x="4065.5" y="-238.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 179&#45;&gt;183 -->
-<g id="edge183" class="edge"><title>179&#45;&gt;183</title>
-<path fill="none" stroke="black" d="M4083.4,-341.907C4084.95,-331.204 4086.64,-319.615 4088.21,-308.776"/>
-<polygon fill="black" stroke="black" points="4091.71,-309.066 4089.68,-298.667 4084.78,-308.06 4091.71,-309.066"/>
-</g>
-<!-- 181 -->
-<g id="node182" class="node"><title>181</title>
-<path fill="#e58139" stroke="black" d="M3941,-179.5C3941,-179.5 3868,-179.5 3868,-179.5 3862,-179.5 3856,-173.5 3856,-167.5 3856,-167.5 3856,-123.5 3856,-123.5 3856,-117.5 3862,-111.5 3868,-111.5 3868,-111.5 3941,-111.5 3941,-111.5 3947,-111.5 3953,-117.5 3953,-123.5 3953,-123.5 3953,-167.5 3953,-167.5 3953,-173.5 3947,-179.5 3941,-179.5"/>
-<text text-anchor="start" x="3875.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3865" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="3864" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
-<text text-anchor="start" x="3875.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 180&#45;&gt;181 -->
-<g id="edge181" class="edge"><title>180&#45;&gt;181</title>
-<path fill="none" stroke="black" d="M3942.38,-222.907C3936.91,-211.873 3930.97,-199.898 3925.46,-188.773"/>
-<polygon fill="black" stroke="black" points="3928.52,-187.072 3920.94,-179.667 3922.25,-190.181 3928.52,-187.072"/>
-</g>
-<!-- 182 -->
-<g id="node183" class="node"><title>182</title>
-<path fill="#399de5" stroke="black" d="M4056,-179.5C4056,-179.5 3983,-179.5 3983,-179.5 3977,-179.5 3971,-173.5 3971,-167.5 3971,-167.5 3971,-123.5 3971,-123.5 3971,-117.5 3977,-111.5 3983,-111.5 3983,-111.5 4056,-111.5 4056,-111.5 4062,-111.5 4068,-117.5 4068,-123.5 4068,-123.5 4068,-167.5 4068,-167.5 4068,-173.5 4062,-179.5 4056,-179.5"/>
-<text text-anchor="start" x="3990.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3980" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="3979" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="3990.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 180&#45;&gt;182 -->
-<g id="edge182" class="edge"><title>180&#45;&gt;182</title>
-<path fill="none" stroke="black" d="M3982.28,-222.907C3987.65,-211.873 3993.49,-199.898 3998.91,-188.773"/>
-<polygon fill="black" stroke="black" points="4002.11,-190.19 4003.34,-179.667 3995.82,-187.124 4002.11,-190.19"/>
-</g>
-<!-- 185 -->
-<g id="node186" class="node"><title>185</title>
-<path fill="#e58139" stroke="black" d="M4288,-417.5C4288,-417.5 4207,-417.5 4207,-417.5 4201,-417.5 4195,-411.5 4195,-405.5 4195,-405.5 4195,-361.5 4195,-361.5 4195,-355.5 4201,-349.5 4207,-349.5 4207,-349.5 4288,-349.5 4288,-349.5 4294,-349.5 4300,-355.5 4300,-361.5 4300,-361.5 4300,-405.5 4300,-405.5 4300,-411.5 4294,-417.5 4288,-417.5"/>
-<text text-anchor="start" x="4218.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4204" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 17</text>
-<text text-anchor="start" x="4203" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [17, 0]</text>
-<text text-anchor="start" x="4218.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 184&#45;&gt;185 -->
-<g id="edge185" class="edge"><title>184&#45;&gt;185</title>
-<path fill="none" stroke="black" d="M4256.64,-460.907C4255.36,-450.204 4253.98,-438.615 4252.68,-427.776"/>
-<polygon fill="black" stroke="black" points="4256.13,-427.18 4251.47,-417.667 4249.18,-428.012 4256.13,-427.18"/>
-</g>
-<!-- 186 -->
-<g id="node187" class="node"><title>186</title>
-<path fill="#399de5" stroke="black" d="M4403,-417.5C4403,-417.5 4330,-417.5 4330,-417.5 4324,-417.5 4318,-411.5 4318,-405.5 4318,-405.5 4318,-361.5 4318,-361.5 4318,-355.5 4324,-349.5 4330,-349.5 4330,-349.5 4403,-349.5 4403,-349.5 4409,-349.5 4415,-355.5 4415,-361.5 4415,-361.5 4415,-405.5 4415,-405.5 4415,-411.5 4409,-417.5 4403,-417.5"/>
-<text text-anchor="start" x="4337.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4327" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4326" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="4337.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 184&#45;&gt;186 -->
-<g id="edge186" class="edge"><title>184&#45;&gt;186</title>
-<path fill="none" stroke="black" d="M4297.93,-460.907C4308.33,-449.321 4319.66,-436.698 4330.05,-425.111"/>
-<polygon fill="black" stroke="black" points="4332.66,-427.447 4336.73,-417.667 4327.45,-422.772 4332.66,-427.447"/>
-</g>
-<!-- 188 -->
-<g id="node189" class="node"><title>188</title>
-<path fill="#9ccef2" stroke="black" d="M4561,-544C4561,-544 4388,-544 4388,-544 4382,-544 4376,-538 4376,-532 4376,-532 4376,-473 4376,-473 4376,-467 4382,-461 4388,-461 4388,-461 4561,-461 4561,-461 4567,-461 4573,-467 4573,-473 4573,-473 4573,-532 4573,-532 4573,-538 4567,-544 4561,-544"/>
-<text text-anchor="start" x="4384" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.529</text>
-<text text-anchor="start" x="4437" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="4435" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="4434" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 2]</text>
-<text text-anchor="start" x="4445.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 187&#45;&gt;188 -->
-<g id="edge188" class="edge"><title>187&#45;&gt;188</title>
-<path fill="none" stroke="black" d="M4431.4,-579.907C4436.31,-571.195 4441.56,-561.897 4446.64,-552.893"/>
-<polygon fill="black" stroke="black" points="4449.78,-554.45 4451.64,-544.021 4443.68,-551.011 4449.78,-554.45"/>
-</g>
-<!-- 191 -->
-<g id="node192" class="node"><title>191</title>
-<path fill="#e58139" stroke="black" d="M4684,-536.5C4684,-536.5 4603,-536.5 4603,-536.5 4597,-536.5 4591,-530.5 4591,-524.5 4591,-524.5 4591,-480.5 4591,-480.5 4591,-474.5 4597,-468.5 4603,-468.5 4603,-468.5 4684,-468.5 4684,-468.5 4690,-468.5 4696,-474.5 4696,-480.5 4696,-480.5 4696,-524.5 4696,-524.5 4696,-530.5 4690,-536.5 4684,-536.5"/>
-<text text-anchor="start" x="4614.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4600" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 59</text>
-<text text-anchor="start" x="4599" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [59, 0]</text>
-<text text-anchor="start" x="4614.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 187&#45;&gt;191 -->
-<g id="edge191" class="edge"><title>187&#45;&gt;191</title>
-<path fill="none" stroke="black" d="M4474,-583.977C4476.86,-582.6 4479.7,-581.267 4482.5,-580 4525.16,-560.706 4539.63,-564.94 4581.5,-544 4583.04,-543.229 4584.59,-542.428 4586.15,-541.602"/>
-<polygon fill="black" stroke="black" points="4588.02,-544.563 4595.05,-536.632 4584.61,-538.451 4588.02,-544.563"/>
-</g>
-<!-- 189 -->
-<g id="node190" class="node"><title>189</title>
-<path fill="#399de5" stroke="black" d="M4518,-417.5C4518,-417.5 4445,-417.5 4445,-417.5 4439,-417.5 4433,-411.5 4433,-405.5 4433,-405.5 4433,-361.5 4433,-361.5 4433,-355.5 4439,-349.5 4445,-349.5 4445,-349.5 4518,-349.5 4518,-349.5 4524,-349.5 4530,-355.5 4530,-361.5 4530,-361.5 4530,-405.5 4530,-405.5 4530,-411.5 4524,-417.5 4518,-417.5"/>
-<text text-anchor="start" x="4452.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4442" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="4441" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 2]</text>
-<text text-anchor="start" x="4452.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 188&#45;&gt;189 -->
-<g id="edge189" class="edge"><title>188&#45;&gt;189</title>
-<path fill="none" stroke="black" d="M4476.93,-460.907C4477.57,-450.204 4478.26,-438.615 4478.91,-427.776"/>
-<polygon fill="black" stroke="black" points="4482.41,-427.858 4479.52,-417.667 4475.42,-427.44 4482.41,-427.858"/>
-</g>
-<!-- 190 -->
-<g id="node191" class="node"><title>190</title>
-<path fill="#e58139" stroke="black" d="M4633,-417.5C4633,-417.5 4560,-417.5 4560,-417.5 4554,-417.5 4548,-411.5 4548,-405.5 4548,-405.5 4548,-361.5 4548,-361.5 4548,-355.5 4554,-349.5 4560,-349.5 4560,-349.5 4633,-349.5 4633,-349.5 4639,-349.5 4645,-355.5 4645,-361.5 4645,-361.5 4645,-405.5 4645,-405.5 4645,-411.5 4639,-417.5 4633,-417.5"/>
-<text text-anchor="start" x="4567.5" y="-402.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4557" y="-387.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4556" y="-372.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="4567.5" y="-357.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 188&#45;&gt;190 -->
-<g id="edge190" class="edge"><title>188&#45;&gt;190</title>
-<path fill="none" stroke="black" d="M4516.83,-460.907C4529.02,-449.211 4542.32,-436.457 4554.5,-424.78"/>
-<polygon fill="black" stroke="black" points="4557.12,-427.115 4561.92,-417.667 4552.28,-422.062 4557.12,-427.115"/>
-</g>
-<!-- 193 -->
-<g id="node194" class="node"><title>193</title>
-<path fill="#399de5" stroke="black" d="M4577,-655.5C4577,-655.5 4504,-655.5 4504,-655.5 4498,-655.5 4492,-649.5 4492,-643.5 4492,-643.5 4492,-599.5 4492,-599.5 4492,-593.5 4498,-587.5 4504,-587.5 4504,-587.5 4577,-587.5 4577,-587.5 4583,-587.5 4589,-593.5 4589,-599.5 4589,-599.5 4589,-643.5 4589,-643.5 4589,-649.5 4583,-655.5 4577,-655.5"/>
-<text text-anchor="start" x="4511.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4501" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4500" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="4511.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 192&#45;&gt;193 -->
-<g id="edge193" class="edge"><title>192&#45;&gt;193</title>
-<path fill="none" stroke="black" d="M4539.85,-698.907C4539.94,-688.204 4540.04,-676.615 4540.13,-665.776"/>
-<polygon fill="black" stroke="black" points="4543.63,-665.697 4540.22,-655.667 4536.63,-665.637 4543.63,-665.697"/>
-</g>
-<!-- 194 -->
-<g id="node195" class="node"><title>194</title>
-<path fill="#e58139" stroke="black" d="M4700,-655.5C4700,-655.5 4619,-655.5 4619,-655.5 4613,-655.5 4607,-649.5 4607,-643.5 4607,-643.5 4607,-599.5 4607,-599.5 4607,-593.5 4613,-587.5 4619,-587.5 4619,-587.5 4700,-587.5 4700,-587.5 4706,-587.5 4712,-593.5 4712,-599.5 4712,-599.5 4712,-643.5 4712,-643.5 4712,-649.5 4706,-655.5 4700,-655.5"/>
-<text text-anchor="start" x="4630.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4616" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
-<text text-anchor="start" x="4615" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 0]</text>
-<text text-anchor="start" x="4630.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 192&#45;&gt;194 -->
-<g id="edge194" class="edge"><title>192&#45;&gt;194</title>
-<path fill="none" stroke="black" d="M4581.13,-698.907C4593.13,-687.211 4606.21,-674.457 4618.19,-662.78"/>
-<polygon fill="black" stroke="black" points="4620.77,-665.154 4625.48,-655.667 4615.88,-660.142 4620.77,-665.154"/>
-</g>
-<!-- 196 -->
-<g id="node197" class="node"><title>196</title>
-<path fill="#e58139" stroke="black" d="M4725,-774.5C4725,-774.5 4652,-774.5 4652,-774.5 4646,-774.5 4640,-768.5 4640,-762.5 4640,-762.5 4640,-718.5 4640,-718.5 4640,-712.5 4646,-706.5 4652,-706.5 4652,-706.5 4725,-706.5 4725,-706.5 4731,-706.5 4737,-712.5 4737,-718.5 4737,-718.5 4737,-762.5 4737,-762.5 4737,-768.5 4731,-774.5 4725,-774.5"/>
-<text text-anchor="start" x="4659.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4649" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="4648" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
-<text text-anchor="start" x="4659.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 195&#45;&gt;196 -->
-<g id="edge196" class="edge"><title>195&#45;&gt;196</title>
-<path fill="none" stroke="black" d="M4560.56,-822.376C4583.15,-810.065 4608.16,-795.892 4630.5,-782 4631.44,-781.416 4632.38,-780.824 4633.33,-780.223"/>
-<polygon fill="black" stroke="black" points="4635.45,-783.024 4641.94,-774.65 4631.64,-777.148 4635.45,-783.024"/>
-</g>
-<!-- 197 -->
-<g id="node198" class="node"><title>197</title>
-<path fill="#399de5" stroke="black" d="M4840,-774.5C4840,-774.5 4767,-774.5 4767,-774.5 4761,-774.5 4755,-768.5 4755,-762.5 4755,-762.5 4755,-718.5 4755,-718.5 4755,-712.5 4761,-706.5 4767,-706.5 4767,-706.5 4840,-706.5 4840,-706.5 4846,-706.5 4852,-712.5 4852,-718.5 4852,-718.5 4852,-762.5 4852,-762.5 4852,-768.5 4846,-774.5 4840,-774.5"/>
-<text text-anchor="start" x="4774.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4764" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4763" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="4774.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 195&#45;&gt;197 -->
-<g id="edge197" class="edge"><title>195&#45;&gt;197</title>
-<path fill="none" stroke="black" d="M4560.81,-821.3C4563.72,-820.125 4566.62,-819.019 4569.5,-818 4644.76,-791.348 4672.14,-813.508 4745.5,-782 4747.32,-781.218 4749.14,-780.375 4750.95,-779.48"/>
-<polygon fill="black" stroke="black" points="4752.8,-782.46 4759.94,-774.628 4749.48,-776.301 4752.8,-782.46"/>
-</g>
-<!-- 199 -->
-<g id="node200" class="node"><title>199</title>
-<path fill="#e58139" stroke="black" d="M4664,-893.5C4664,-893.5 4591,-893.5 4591,-893.5 4585,-893.5 4579,-887.5 4579,-881.5 4579,-881.5 4579,-837.5 4579,-837.5 4579,-831.5 4585,-825.5 4591,-825.5 4591,-825.5 4664,-825.5 4664,-825.5 4670,-825.5 4676,-831.5 4676,-837.5 4676,-837.5 4676,-881.5 4676,-881.5 4676,-887.5 4670,-893.5 4664,-893.5"/>
-<text text-anchor="start" x="4598.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4588" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="4587" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="4598.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 198&#45;&gt;199 -->
-<g id="edge199" class="edge"><title>198&#45;&gt;199</title>
-<path fill="none" stroke="black" d="M4592.89,-936.907C4597.84,-925.983 4603.2,-914.137 4608.2,-903.107"/>
-<polygon fill="black" stroke="black" points="4611.54,-904.22 4612.48,-893.667 4605.16,-901.332 4611.54,-904.22"/>
-</g>
-<!-- 200 -->
-<g id="node201" class="node"><title>200</title>
-<path fill="#399de5" stroke="black" d="M4779,-893.5C4779,-893.5 4706,-893.5 4706,-893.5 4700,-893.5 4694,-887.5 4694,-881.5 4694,-881.5 4694,-837.5 4694,-837.5 4694,-831.5 4700,-825.5 4706,-825.5 4706,-825.5 4779,-825.5 4779,-825.5 4785,-825.5 4791,-831.5 4791,-837.5 4791,-837.5 4791,-881.5 4791,-881.5 4791,-887.5 4785,-893.5 4779,-893.5"/>
-<text text-anchor="start" x="4713.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4703" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4702" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="4713.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 198&#45;&gt;200 -->
-<g id="edge200" class="edge"><title>198&#45;&gt;200</title>
-<path fill="none" stroke="black" d="M4633.03,-936.826C4649.67,-925.256 4667.8,-912.637 4684.5,-901 4685.25,-900.478 4686,-899.952 4686.76,-899.422"/>
-<polygon fill="black" stroke="black" points="4688.83,-902.251 4695.03,-893.661 4684.82,-896.51 4688.83,-902.251"/>
-</g>
-<!-- 202 -->
-<g id="node203" class="node"><title>202</title>
-<path fill="#399de5" stroke="black" d="M4776,-1012.5C4776,-1012.5 4703,-1012.5 4703,-1012.5 4697,-1012.5 4691,-1006.5 4691,-1000.5 4691,-1000.5 4691,-956.5 4691,-956.5 4691,-950.5 4697,-944.5 4703,-944.5 4703,-944.5 4776,-944.5 4776,-944.5 4782,-944.5 4788,-950.5 4788,-956.5 4788,-956.5 4788,-1000.5 4788,-1000.5 4788,-1006.5 4782,-1012.5 4776,-1012.5"/>
-<text text-anchor="start" x="4710.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4700" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4699" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="4710.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 201&#45;&gt;202 -->
-<g id="edge202" class="edge"><title>201&#45;&gt;202</title>
-<path fill="none" stroke="black" d="M4751.91,-1055.91C4750.17,-1045.2 4748.29,-1033.62 4746.53,-1022.78"/>
-<polygon fill="black" stroke="black" points="4749.94,-1021.98 4744.89,-1012.67 4743.03,-1023.1 4749.94,-1021.98"/>
-</g>
-<!-- 203 -->
-<g id="node204" class="node"><title>203</title>
-<path fill="#e58139" stroke="black" d="M4891,-1012.5C4891,-1012.5 4818,-1012.5 4818,-1012.5 4812,-1012.5 4806,-1006.5 4806,-1000.5 4806,-1000.5 4806,-956.5 4806,-956.5 4806,-950.5 4812,-944.5 4818,-944.5 4818,-944.5 4891,-944.5 4891,-944.5 4897,-944.5 4903,-950.5 4903,-956.5 4903,-956.5 4903,-1000.5 4903,-1000.5 4903,-1006.5 4897,-1012.5 4891,-1012.5"/>
-<text text-anchor="start" x="4825.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4815" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="4814" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="4825.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 201&#45;&gt;203 -->
-<g id="edge203" class="edge"><title>201&#45;&gt;203</title>
-<path fill="none" stroke="black" d="M4791.81,-1055.91C4801.22,-1044.43 4811.47,-1031.94 4820.91,-1020.44"/>
-<polygon fill="black" stroke="black" points="4823.65,-1022.62 4827.29,-1012.67 4818.24,-1018.18 4823.65,-1022.62"/>
-</g>
-<!-- 205 -->
-<g id="node206" class="node"><title>205</title>
-<path fill="#399de5" stroke="black" d="M4977,-1131.5C4977,-1131.5 4904,-1131.5 4904,-1131.5 4898,-1131.5 4892,-1125.5 4892,-1119.5 4892,-1119.5 4892,-1075.5 4892,-1075.5 4892,-1069.5 4898,-1063.5 4904,-1063.5 4904,-1063.5 4977,-1063.5 4977,-1063.5 4983,-1063.5 4989,-1069.5 4989,-1075.5 4989,-1075.5 4989,-1119.5 4989,-1119.5 4989,-1125.5 4983,-1131.5 4977,-1131.5"/>
-<text text-anchor="start" x="4911.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4901" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="4900" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
-<text text-anchor="start" x="4911.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 204&#45;&gt;205 -->
-<g id="edge205" class="edge"><title>204&#45;&gt;205</title>
-<path fill="none" stroke="black" d="M4940.5,-1174.91C4940.5,-1164.2 4940.5,-1152.62 4940.5,-1141.78"/>
-<polygon fill="black" stroke="black" points="4944,-1141.67 4940.5,-1131.67 4937,-1141.67 4944,-1141.67"/>
-</g>
-<!-- 206 -->
-<g id="node207" class="node"><title>206</title>
-<path fill="#e6833d" stroke="black" d="M5126,-1139C5126,-1139 5019,-1139 5019,-1139 5013,-1139 5007,-1133 5007,-1127 5007,-1127 5007,-1068 5007,-1068 5007,-1062 5013,-1056 5019,-1056 5019,-1056 5126,-1056 5126,-1056 5132,-1056 5138,-1062 5138,-1068 5138,-1068 5138,-1127 5138,-1127 5138,-1133 5132,-1139 5126,-1139"/>
-<text text-anchor="start" x="5015" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 0.004</text>
-<text text-anchor="start" x="5035" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.037</text>
-<text text-anchor="start" x="5029" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 53</text>
-<text text-anchor="start" x="5028" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 1]</text>
-<text text-anchor="start" x="5043.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 204&#45;&gt;206 -->
-<g id="edge206" class="edge"><title>204&#45;&gt;206</title>
-<path fill="none" stroke="black" d="M4986.3,-1174.91C4996.84,-1165.56 5008.15,-1155.54 5018.99,-1145.93"/>
-<polygon fill="black" stroke="black" points="5021.62,-1148.27 5026.78,-1139.02 5016.98,-1143.03 5021.62,-1148.27"/>
-</g>
-<!-- 207 -->
-<g id="node208" class="node"><title>207</title>
-<path fill="#e58139" stroke="black" d="M5014,-1012.5C5014,-1012.5 4933,-1012.5 4933,-1012.5 4927,-1012.5 4921,-1006.5 4921,-1000.5 4921,-1000.5 4921,-956.5 4921,-956.5 4921,-950.5 4927,-944.5 4933,-944.5 4933,-944.5 5014,-944.5 5014,-944.5 5020,-944.5 5026,-950.5 5026,-956.5 5026,-956.5 5026,-1000.5 5026,-1000.5 5026,-1006.5 5020,-1012.5 5014,-1012.5"/>
-<text text-anchor="start" x="4944.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="4930" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 52</text>
-<text text-anchor="start" x="4929" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [52, 0]</text>
-<text text-anchor="start" x="4944.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 206&#45;&gt;207 -->
-<g id="edge207" class="edge"><title>206&#45;&gt;207</title>
-<path fill="none" stroke="black" d="M5038.15,-1055.91C5028.44,-1044.43 5017.87,-1031.94 5008.14,-1020.44"/>
-<polygon fill="black" stroke="black" points="5010.7,-1018.04 5001.56,-1012.67 5005.35,-1022.56 5010.7,-1018.04"/>
-</g>
-<!-- 208 -->
-<g id="node209" class="node"><title>208</title>
-<path fill="#399de5" stroke="black" d="M5129,-1012.5C5129,-1012.5 5056,-1012.5 5056,-1012.5 5050,-1012.5 5044,-1006.5 5044,-1000.5 5044,-1000.5 5044,-956.5 5044,-956.5 5044,-950.5 5050,-944.5 5056,-944.5 5056,-944.5 5129,-944.5 5129,-944.5 5135,-944.5 5141,-950.5 5141,-956.5 5141,-956.5 5141,-1000.5 5141,-1000.5 5141,-1006.5 5135,-1012.5 5129,-1012.5"/>
-<text text-anchor="start" x="5063.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5053" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5052" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="5063.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 206&#45;&gt;208 -->
-<g id="edge208" class="edge"><title>206&#45;&gt;208</title>
-<path fill="none" stroke="black" d="M5079.44,-1055.91C5081.27,-1045.2 5083.25,-1033.62 5085.1,-1022.78"/>
-<polygon fill="black" stroke="black" points="5088.6,-1023.11 5086.83,-1012.67 5081.7,-1021.93 5088.6,-1023.11"/>
-</g>
-<!-- 211 -->
-<g id="node212" class="node"><title>211</title>
-<path fill="#e68742" stroke="black" d="M5746,-1496C5746,-1496 5537,-1496 5537,-1496 5531,-1496 5525,-1490 5525,-1484 5525,-1484 5525,-1425 5525,-1425 5525,-1419 5531,-1413 5537,-1413 5537,-1413 5746,-1413 5746,-1413 5752,-1413 5758,-1419 5758,-1425 5758,-1425 5758,-1484 5758,-1484 5758,-1490 5752,-1496 5746,-1496"/>
-<text text-anchor="start" x="5533" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.594</text>
-<text text-anchor="start" x="5604" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.085</text>
-<text text-anchor="start" x="5594" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 292</text>
-<text text-anchor="start" x="5588.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [279, 13]</text>
-<text text-anchor="start" x="5612.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 210&#45;&gt;211 -->
-<g id="edge211" class="edge"><title>210&#45;&gt;211</title>
-<path fill="none" stroke="black" d="M5663.05,-1531.91C5660.67,-1523.47 5658.13,-1514.48 5655.67,-1505.74"/>
-<polygon fill="black" stroke="black" points="5659.01,-1504.7 5652.93,-1496.02 5652.28,-1506.6 5659.01,-1504.7"/>
-</g>
-<!-- 234 -->
-<g id="node235" class="node"><title>234</title>
-<path fill="#95caf1" stroke="black" d="M5899,-1496C5899,-1496 5788,-1496 5788,-1496 5782,-1496 5776,-1490 5776,-1484 5776,-1484 5776,-1425 5776,-1425 5776,-1419 5782,-1413 5788,-1413 5788,-1413 5899,-1413 5899,-1413 5905,-1413 5911,-1419 5911,-1425 5911,-1425 5911,-1484 5911,-1484 5911,-1490 5905,-1496 5899,-1496"/>
-<text text-anchor="start" x="5784" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.039</text>
-<text text-anchor="start" x="5806" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.432</text>
-<text text-anchor="start" x="5796" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 310</text>
-<text text-anchor="start" x="5790.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [98, 212]</text>
-<text text-anchor="start" x="5814.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 210&#45;&gt;234 -->
-<g id="edge234" class="edge"><title>210&#45;&gt;234</title>
-<path fill="none" stroke="black" d="M5733.13,-1531.91C5747.16,-1522.2 5762.24,-1511.76 5776.61,-1501.81"/>
-<polygon fill="black" stroke="black" points="5778.74,-1504.59 5784.97,-1496.02 5774.76,-1498.84 5778.74,-1504.59"/>
-</g>
-<!-- 212 -->
-<g id="node213" class="node"><title>212</title>
-<path fill="#e6853f" stroke="black" d="M5526.5,-1377C5526.5,-1377 5352.5,-1377 5352.5,-1377 5346.5,-1377 5340.5,-1371 5340.5,-1365 5340.5,-1365 5340.5,-1306 5340.5,-1306 5340.5,-1300 5346.5,-1294 5352.5,-1294 5352.5,-1294 5526.5,-1294 5526.5,-1294 5532.5,-1294 5538.5,-1300 5538.5,-1306 5538.5,-1306 5538.5,-1365 5538.5,-1365 5538.5,-1371 5532.5,-1377 5526.5,-1377"/>
-<text text-anchor="start" x="5348.5" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_rerror_rate ≤ 0.024</text>
-<text text-anchor="start" x="5402" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.061</text>
-<text text-anchor="start" x="5392" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 286</text>
-<text text-anchor="start" x="5391" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [277, 9]</text>
-<text text-anchor="start" x="5410.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 211&#45;&gt;212 -->
-<g id="edge212" class="edge"><title>211&#45;&gt;212</title>
-<path fill="none" stroke="black" d="M5571.42,-1412.91C5554.34,-1403.02 5535.96,-1392.37 5518.49,-1382.25"/>
-<polygon fill="black" stroke="black" points="5519.87,-1379 5509.46,-1377.02 5516.36,-1385.06 5519.87,-1379"/>
-</g>
-<!-- 231 -->
-<g id="node232" class="node"><title>231</title>
-<path fill="#9ccef2" stroke="black" d="M5726,-1377C5726,-1377 5569,-1377 5569,-1377 5563,-1377 5557,-1371 5557,-1365 5557,-1365 5557,-1306 5557,-1306 5557,-1300 5563,-1294 5569,-1294 5569,-1294 5726,-1294 5726,-1294 5732,-1294 5738,-1300 5738,-1306 5738,-1306 5738,-1365 5738,-1365 5738,-1371 5732,-1377 5726,-1377"/>
-<text text-anchor="start" x="5565" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.8</text>
-<text text-anchor="start" x="5610" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.444</text>
-<text text-anchor="start" x="5608" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="5607" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 4]</text>
-<text text-anchor="start" x="5618.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 211&#45;&gt;231 -->
-<g id="edge231" class="edge"><title>211&#45;&gt;231</title>
-<path fill="none" stroke="black" d="M5643.58,-1412.91C5644.01,-1404.56 5644.47,-1395.67 5644.91,-1387.02"/>
-<polygon fill="black" stroke="black" points="5648.41,-1387.19 5645.42,-1377.02 5641.41,-1386.83 5648.41,-1387.19"/>
-</g>
-<!-- 213 -->
-<g id="node214" class="node"><title>213</title>
-<path fill="#e6853f" stroke="black" d="M5365,-1258C5365,-1258 5192,-1258 5192,-1258 5186,-1258 5180,-1252 5180,-1246 5180,-1246 5180,-1187 5180,-1187 5180,-1181 5186,-1175 5192,-1175 5192,-1175 5365,-1175 5365,-1175 5371,-1175 5377,-1181 5377,-1187 5377,-1187 5377,-1246 5377,-1246 5377,-1252 5371,-1258 5365,-1258"/>
-<text text-anchor="start" x="5188" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.638</text>
-<text text-anchor="start" x="5241" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.055</text>
-<text text-anchor="start" x="5231" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 285</text>
-<text text-anchor="start" x="5230" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [277, 8]</text>
-<text text-anchor="start" x="5249.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 212&#45;&gt;213 -->
-<g id="edge213" class="edge"><title>212&#45;&gt;213</title>
-<path fill="none" stroke="black" d="M5383.64,-1293.91C5370.4,-1284.29 5356.18,-1273.95 5342.61,-1264.09"/>
-<polygon fill="black" stroke="black" points="5344.41,-1261.07 5334.26,-1258.02 5340.29,-1266.73 5344.41,-1261.07"/>
-</g>
-<!-- 230 -->
-<g id="node231" class="node"><title>230</title>
-<path fill="#399de5" stroke="black" d="M5480,-1250.5C5480,-1250.5 5407,-1250.5 5407,-1250.5 5401,-1250.5 5395,-1244.5 5395,-1238.5 5395,-1238.5 5395,-1194.5 5395,-1194.5 5395,-1188.5 5401,-1182.5 5407,-1182.5 5407,-1182.5 5480,-1182.5 5480,-1182.5 5486,-1182.5 5492,-1188.5 5492,-1194.5 5492,-1194.5 5492,-1238.5 5492,-1238.5 5492,-1244.5 5486,-1250.5 5480,-1250.5"/>
-<text text-anchor="start" x="5414.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5404" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5403" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="5414.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 212&#45;&gt;230 -->
-<g id="edge230" class="edge"><title>212&#45;&gt;230</title>
-<path fill="none" stroke="black" d="M5440.89,-1293.91C5441.25,-1283.2 5441.65,-1271.62 5442.02,-1260.78"/>
-<polygon fill="black" stroke="black" points="5445.52,-1260.78 5442.37,-1250.67 5438.53,-1260.54 5445.52,-1260.78"/>
-</g>
-<!-- 214 -->
-<g id="node215" class="node"><title>214</title>
-<path fill="#e78c4a" stroke="black" d="M5316,-1139C5316,-1139 5213,-1139 5213,-1139 5207,-1139 5201,-1133 5201,-1127 5201,-1127 5201,-1068 5201,-1068 5201,-1062 5207,-1056 5213,-1056 5213,-1056 5316,-1056 5316,-1056 5322,-1056 5328,-1062 5328,-1068 5328,-1068 5328,-1127 5328,-1127 5328,-1133 5322,-1139 5316,-1139"/>
-<text text-anchor="start" x="5209" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="5227" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.143</text>
-<text text-anchor="start" x="5217" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 103</text>
-<text text-anchor="start" x="5220" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [95, 8]</text>
-<text text-anchor="start" x="5235.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 213&#45;&gt;214 -->
-<g id="edge214" class="edge"><title>213&#45;&gt;214</title>
-<path fill="none" stroke="black" d="M5273.64,-1174.91C5272.64,-1166.56 5271.58,-1157.67 5270.55,-1149.02"/>
-<polygon fill="black" stroke="black" points="5274.01,-1148.53 5269.35,-1139.02 5267.06,-1149.37 5274.01,-1148.53"/>
-</g>
-<!-- 229 -->
-<g id="node230" class="node"><title>229</title>
-<path fill="#e58139" stroke="black" d="M5447,-1131.5C5447,-1131.5 5358,-1131.5 5358,-1131.5 5352,-1131.5 5346,-1125.5 5346,-1119.5 5346,-1119.5 5346,-1075.5 5346,-1075.5 5346,-1069.5 5352,-1063.5 5358,-1063.5 5358,-1063.5 5447,-1063.5 5447,-1063.5 5453,-1063.5 5459,-1069.5 5459,-1075.5 5459,-1075.5 5459,-1119.5 5459,-1119.5 5459,-1125.5 5453,-1131.5 5447,-1131.5"/>
-<text text-anchor="start" x="5373.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5355" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 182</text>
-<text text-anchor="start" x="5354" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [182, 0]</text>
-<text text-anchor="start" x="5373.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 213&#45;&gt;229 -->
-<g id="edge229" class="edge"><title>213&#45;&gt;229</title>
-<path fill="none" stroke="black" d="M5321.52,-1174.91C5333.92,-1163.21 5347.43,-1150.46 5359.81,-1138.78"/>
-<polygon fill="black" stroke="black" points="5362.48,-1141.08 5367.35,-1131.67 5357.67,-1135.98 5362.48,-1141.08"/>
-</g>
-<!-- 215 -->
-<g id="node216" class="node"><title>215</title>
-<path fill="#e5823b" stroke="black" d="M5344,-1020C5344,-1020 5171,-1020 5171,-1020 5165,-1020 5159,-1014 5159,-1008 5159,-1008 5159,-949 5159,-949 5159,-943 5165,-937 5171,-937 5171,-937 5344,-937 5344,-937 5350,-937 5356,-943 5356,-949 5356,-949 5356,-1008 5356,-1008 5356,-1014 5350,-1020 5344,-1020"/>
-<text text-anchor="start" x="5167" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.724</text>
-<text text-anchor="start" x="5220" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.022</text>
-<text text-anchor="start" x="5214" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 89</text>
-<text text-anchor="start" x="5213" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [88, 1]</text>
-<text text-anchor="start" x="5228.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 214&#45;&gt;215 -->
-<g id="edge215" class="edge"><title>214&#45;&gt;215</title>
-<path fill="none" stroke="black" d="M5262.07,-1055.91C5261.57,-1047.56 5261.04,-1038.67 5260.52,-1030.02"/>
-<polygon fill="black" stroke="black" points="5264.02,-1029.79 5259.92,-1020.02 5257.03,-1030.21 5264.02,-1029.79"/>
-</g>
-<!-- 220 -->
-<g id="node221" class="node"><title>220</title>
-<path fill="#ffffff" stroke="black" d="M5532.5,-1020C5532.5,-1020 5386.5,-1020 5386.5,-1020 5380.5,-1020 5374.5,-1014 5374.5,-1008 5374.5,-1008 5374.5,-949 5374.5,-949 5374.5,-943 5380.5,-937 5386.5,-937 5386.5,-937 5532.5,-937 5532.5,-937 5538.5,-937 5544.5,-943 5544.5,-949 5544.5,-949 5544.5,-1008 5544.5,-1008 5544.5,-1014 5538.5,-1020 5532.5,-1020"/>
-<text text-anchor="start" x="5382.5" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ &#45;1.809</text>
-<text text-anchor="start" x="5430.5" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="5416" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 14</text>
-<text text-anchor="start" x="5419" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 7]</text>
-<text text-anchor="start" x="5430.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 214&#45;&gt;220 -->
-<g id="edge220" class="edge"><title>214&#45;&gt;220</title>
-<path fill="none" stroke="black" d="M5328.08,-1058.35C5345.65,-1047.81 5364.91,-1036.25 5383.13,-1025.32"/>
-<polygon fill="black" stroke="black" points="5385.2,-1028.16 5391.98,-1020.01 5381.6,-1022.16 5385.2,-1028.16"/>
-</g>
-<!-- 216 -->
-<g id="node217" class="node"><title>216</title>
-<path fill="#e58139" stroke="black" d="M5161,-893.5C5161,-893.5 5080,-893.5 5080,-893.5 5074,-893.5 5068,-887.5 5068,-881.5 5068,-881.5 5068,-837.5 5068,-837.5 5068,-831.5 5074,-825.5 5080,-825.5 5080,-825.5 5161,-825.5 5161,-825.5 5167,-825.5 5173,-831.5 5173,-837.5 5173,-837.5 5173,-881.5 5173,-881.5 5173,-887.5 5167,-893.5 5161,-893.5"/>
-<text text-anchor="start" x="5091.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5077" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 87</text>
-<text text-anchor="start" x="5076" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [87, 0]</text>
-<text text-anchor="start" x="5091.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 215&#45;&gt;216 -->
-<g id="edge216" class="edge"><title>215&#45;&gt;216</title>
-<path fill="none" stroke="black" d="M5209.97,-936.907C5196.14,-925.101 5181.06,-912.217 5167.28,-900.45"/>
-<polygon fill="black" stroke="black" points="5169.21,-897.5 5159.34,-893.667 5164.67,-902.823 5169.21,-897.5"/>
-</g>
-<!-- 217 -->
-<g id="node218" class="node"><title>217</title>
-<path fill="#ffffff" stroke="black" d="M5310,-901C5310,-901 5203,-901 5203,-901 5197,-901 5191,-895 5191,-889 5191,-889 5191,-830 5191,-830 5191,-824 5197,-818 5203,-818 5203,-818 5310,-818 5310,-818 5316,-818 5322,-824 5322,-830 5322,-830 5322,-889 5322,-889 5322,-895 5316,-901 5310,-901"/>
-<text text-anchor="start" x="5199" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">logged_in ≤ 0.215</text>
-<text text-anchor="start" x="5227.5" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="5217" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="5216" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="5227.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 215&#45;&gt;217 -->
-<g id="edge217" class="edge"><title>215&#45;&gt;217</title>
-<path fill="none" stroke="black" d="M5257.15,-936.907C5257.08,-928.649 5257.01,-919.864 5256.93,-911.302"/>
-<polygon fill="black" stroke="black" points="5260.43,-910.99 5256.85,-901.021 5253.43,-911.05 5260.43,-910.99"/>
-</g>
-<!-- 218 -->
-<g id="node219" class="node"><title>218</title>
-<path fill="#e58139" stroke="black" d="M5175,-774.5C5175,-774.5 5102,-774.5 5102,-774.5 5096,-774.5 5090,-768.5 5090,-762.5 5090,-762.5 5090,-718.5 5090,-718.5 5090,-712.5 5096,-706.5 5102,-706.5 5102,-706.5 5175,-706.5 5175,-706.5 5181,-706.5 5187,-712.5 5187,-718.5 5187,-718.5 5187,-762.5 5187,-762.5 5187,-768.5 5181,-774.5 5175,-774.5"/>
-<text text-anchor="start" x="5109.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5099" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5098" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="5109.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 217&#45;&gt;218 -->
-<g id="edge218" class="edge"><title>217&#45;&gt;218</title>
-<path fill="none" stroke="black" d="M5215.56,-817.907C5203.76,-806.211 5190.9,-793.457 5179.12,-781.78"/>
-<polygon fill="black" stroke="black" points="5181.52,-779.222 5171.95,-774.667 5176.59,-784.193 5181.52,-779.222"/>
-</g>
-<!-- 219 -->
-<g id="node220" class="node"><title>219</title>
-<path fill="#399de5" stroke="black" d="M5290,-774.5C5290,-774.5 5217,-774.5 5217,-774.5 5211,-774.5 5205,-768.5 5205,-762.5 5205,-762.5 5205,-718.5 5205,-718.5 5205,-712.5 5211,-706.5 5217,-706.5 5217,-706.5 5290,-706.5 5290,-706.5 5296,-706.5 5302,-712.5 5302,-718.5 5302,-718.5 5302,-762.5 5302,-762.5 5302,-768.5 5296,-774.5 5290,-774.5"/>
-<text text-anchor="start" x="5224.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5214" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5213" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="5224.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 217&#45;&gt;219 -->
-<g id="edge219" class="edge"><title>217&#45;&gt;219</title>
-<path fill="none" stroke="black" d="M5255.46,-817.907C5255.18,-807.204 5254.89,-795.615 5254.61,-784.776"/>
-<polygon fill="black" stroke="black" points="5258.11,-784.574 5254.35,-774.667 5251.11,-784.753 5258.11,-784.574"/>
-</g>
-<!-- 221 -->
-<g id="node222" class="node"><title>221</title>
-<path fill="#eca572" stroke="black" d="M5483,-901C5483,-901 5380,-901 5380,-901 5374,-901 5368,-895 5368,-889 5368,-889 5368,-830 5368,-830 5368,-824 5374,-818 5380,-818 5380,-818 5483,-818 5483,-818 5489,-818 5495,-824 5495,-830 5495,-830 5495,-889 5495,-889 5495,-895 5489,-901 5483,-901"/>
-<text text-anchor="start" x="5376" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="5394" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.346</text>
-<text text-anchor="start" x="5392" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 9</text>
-<text text-anchor="start" x="5391" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 2]</text>
-<text text-anchor="start" x="5402.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 220&#45;&gt;221 -->
-<g id="edge221" class="edge"><title>220&#45;&gt;221</title>
-<path fill="none" stroke="black" d="M5449.79,-936.907C5447.79,-928.558 5445.66,-919.671 5443.59,-911.02"/>
-<polygon fill="black" stroke="black" points="5446.93,-909.932 5441.2,-901.021 5440.12,-911.561 5446.93,-909.932"/>
-</g>
-<!-- 228 -->
-<g id="node229" class="node"><title>228</title>
-<path fill="#399de5" stroke="black" d="M5598,-893.5C5598,-893.5 5525,-893.5 5525,-893.5 5519,-893.5 5513,-887.5 5513,-881.5 5513,-881.5 5513,-837.5 5513,-837.5 5513,-831.5 5519,-825.5 5525,-825.5 5525,-825.5 5598,-825.5 5598,-825.5 5604,-825.5 5610,-831.5 5610,-837.5 5610,-837.5 5610,-881.5 5610,-881.5 5610,-887.5 5604,-893.5 5598,-893.5"/>
-<text text-anchor="start" x="5532.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5522" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="5521" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 5]</text>
-<text text-anchor="start" x="5532.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 220&#45;&gt;228 -->
-<g id="edge228" class="edge"><title>220&#45;&gt;228</title>
-<path fill="none" stroke="black" d="M5494.89,-936.907C5504.89,-925.432 5515.78,-912.938 5525.81,-901.442"/>
-<polygon fill="black" stroke="black" points="5528.65,-903.505 5532.59,-893.667 5523.38,-898.905 5528.65,-903.505"/>
-</g>
-<!-- 222 -->
-<g id="node223" class="node"><title>222</title>
-<path fill="#399de5" stroke="black" d="M5405,-774.5C5405,-774.5 5332,-774.5 5332,-774.5 5326,-774.5 5320,-768.5 5320,-762.5 5320,-762.5 5320,-718.5 5320,-718.5 5320,-712.5 5326,-706.5 5332,-706.5 5332,-706.5 5405,-706.5 5405,-706.5 5411,-706.5 5417,-712.5 5417,-718.5 5417,-718.5 5417,-762.5 5417,-762.5 5417,-768.5 5411,-774.5 5405,-774.5"/>
-<text text-anchor="start" x="5339.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5329" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5328" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="5339.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 221&#45;&gt;222 -->
-<g id="edge222" class="edge"><title>221&#45;&gt;222</title>
-<path fill="none" stroke="black" d="M5409.64,-817.907C5403.7,-806.873 5397.25,-794.898 5391.26,-783.773"/>
-<polygon fill="black" stroke="black" points="5394.18,-781.812 5386.36,-774.667 5388.02,-785.131 5394.18,-781.812"/>
-</g>
-<!-- 223 -->
-<g id="node224" class="node"><title>223</title>
-<path fill="#e99355" stroke="black" d="M5669.5,-782C5669.5,-782 5447.5,-782 5447.5,-782 5441.5,-782 5435.5,-776 5435.5,-770 5435.5,-770 5435.5,-711 5435.5,-711 5435.5,-705 5441.5,-699 5447.5,-699 5447.5,-699 5669.5,-699 5669.5,-699 5675.5,-699 5681.5,-705 5681.5,-711 5681.5,-711 5681.5,-770 5681.5,-770 5681.5,-776 5675.5,-782 5669.5,-782"/>
-<text text-anchor="start" x="5443.5" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_diff_host_rate ≤ 0.933</text>
-<text text-anchor="start" x="5521" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.219</text>
-<text text-anchor="start" x="5519" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
-<text text-anchor="start" x="5518" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 1]</text>
-<text text-anchor="start" x="5529.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 221&#45;&gt;223 -->
-<g id="edge223" class="edge"><title>221&#45;&gt;223</title>
-<path fill="none" stroke="black" d="M5475.56,-817.907C5485.71,-808.56 5496.59,-798.538 5507.02,-788.929"/>
-<polygon fill="black" stroke="black" points="5509.53,-791.371 5514.52,-782.021 5504.79,-786.222 5509.53,-791.371"/>
-</g>
-<!-- 224 -->
-<g id="node225" class="node"><title>224</title>
-<path fill="#e58139" stroke="black" d="M5529,-655.5C5529,-655.5 5456,-655.5 5456,-655.5 5450,-655.5 5444,-649.5 5444,-643.5 5444,-643.5 5444,-599.5 5444,-599.5 5444,-593.5 5450,-587.5 5456,-587.5 5456,-587.5 5529,-587.5 5529,-587.5 5535,-587.5 5541,-593.5 5541,-599.5 5541,-599.5 5541,-643.5 5541,-643.5 5541,-649.5 5535,-655.5 5529,-655.5"/>
-<text text-anchor="start" x="5463.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5453" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="5452" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [6, 0]</text>
-<text text-anchor="start" x="5463.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 223&#45;&gt;224 -->
-<g id="edge224" class="edge"><title>223&#45;&gt;224</title>
-<path fill="none" stroke="black" d="M5535.6,-698.907C5529.31,-687.763 5522.49,-675.658 5516.16,-664.439"/>
-<polygon fill="black" stroke="black" points="5519.17,-662.657 5511.21,-655.667 5513.07,-666.096 5519.17,-662.657"/>
-</g>
-<!-- 225 -->
-<g id="node226" class="node"><title>225</title>
-<path fill="#ffffff" stroke="black" d="M5678,-663C5678,-663 5571,-663 5571,-663 5565,-663 5559,-657 5559,-651 5559,-651 5559,-592 5559,-592 5559,-586 5565,-580 5571,-580 5571,-580 5678,-580 5678,-580 5684,-580 5690,-586 5690,-592 5690,-592 5690,-651 5690,-651 5690,-657 5684,-663 5678,-663"/>
-<text text-anchor="start" x="5567" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ 0.179</text>
-<text text-anchor="start" x="5595.5" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.5</text>
-<text text-anchor="start" x="5585" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="5584" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 1]</text>
-<text text-anchor="start" x="5595.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 223&#45;&gt;225 -->
-<g id="edge225" class="edge"><title>223&#45;&gt;225</title>
-<path fill="none" stroke="black" d="M5581.4,-698.907C5586.31,-690.195 5591.56,-680.897 5596.64,-671.893"/>
-<polygon fill="black" stroke="black" points="5599.78,-673.45 5601.64,-663.021 5593.68,-670.011 5599.78,-673.45"/>
-</g>
-<!-- 226 -->
-<g id="node227" class="node"><title>226</title>
-<path fill="#399de5" stroke="black" d="M5603,-536.5C5603,-536.5 5530,-536.5 5530,-536.5 5524,-536.5 5518,-530.5 5518,-524.5 5518,-524.5 5518,-480.5 5518,-480.5 5518,-474.5 5524,-468.5 5530,-468.5 5530,-468.5 5603,-468.5 5603,-468.5 5609,-468.5 5615,-474.5 5615,-480.5 5615,-480.5 5615,-524.5 5615,-524.5 5615,-530.5 5609,-536.5 5603,-536.5"/>
-<text text-anchor="start" x="5537.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5527" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5526" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="5537.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 225&#45;&gt;226 -->
-<g id="edge226" class="edge"><title>225&#45;&gt;226</title>
-<path fill="none" stroke="black" d="M5604.38,-579.907C5598.91,-568.873 5592.97,-556.898 5587.46,-545.773"/>
-<polygon fill="black" stroke="black" points="5590.52,-544.072 5582.94,-536.667 5584.25,-547.181 5590.52,-544.072"/>
-</g>
-<!-- 227 -->
-<g id="node228" class="node"><title>227</title>
-<path fill="#e58139" stroke="black" d="M5718,-536.5C5718,-536.5 5645,-536.5 5645,-536.5 5639,-536.5 5633,-530.5 5633,-524.5 5633,-524.5 5633,-480.5 5633,-480.5 5633,-474.5 5639,-468.5 5645,-468.5 5645,-468.5 5718,-468.5 5718,-468.5 5724,-468.5 5730,-474.5 5730,-480.5 5730,-480.5 5730,-524.5 5730,-524.5 5730,-530.5 5724,-536.5 5718,-536.5"/>
-<text text-anchor="start" x="5652.5" y="-521.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5642" y="-506.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5641" y="-491.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="5652.5" y="-476.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 225&#45;&gt;227 -->
-<g id="edge227" class="edge"><title>225&#45;&gt;227</title>
-<path fill="none" stroke="black" d="M5644.28,-579.907C5649.65,-568.873 5655.49,-556.898 5660.91,-545.773"/>
-<polygon fill="black" stroke="black" points="5664.11,-547.19 5665.34,-536.667 5657.82,-544.124 5664.11,-547.19"/>
-</g>
-<!-- 232 -->
-<g id="node233" class="node"><title>232</title>
-<path fill="#e58139" stroke="black" d="M5602,-1250.5C5602,-1250.5 5529,-1250.5 5529,-1250.5 5523,-1250.5 5517,-1244.5 5517,-1238.5 5517,-1238.5 5517,-1194.5 5517,-1194.5 5517,-1188.5 5523,-1182.5 5529,-1182.5 5529,-1182.5 5602,-1182.5 5602,-1182.5 5608,-1182.5 5614,-1188.5 5614,-1194.5 5614,-1194.5 5614,-1238.5 5614,-1238.5 5614,-1244.5 5608,-1250.5 5602,-1250.5"/>
-<text text-anchor="start" x="5536.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5526" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="5525" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="5536.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 231&#45;&gt;232 -->
-<g id="edge232" class="edge"><title>231&#45;&gt;232</title>
-<path fill="none" stroke="black" d="M5619.05,-1293.91C5611.16,-1282.65 5602.59,-1270.42 5594.66,-1259.11"/>
-<polygon fill="black" stroke="black" points="5597.35,-1256.85 5588.75,-1250.67 5591.62,-1260.86 5597.35,-1256.85"/>
-</g>
-<!-- 233 -->
-<g id="node234" class="node"><title>233</title>
-<path fill="#399de5" stroke="black" d="M5717,-1250.5C5717,-1250.5 5644,-1250.5 5644,-1250.5 5638,-1250.5 5632,-1244.5 5632,-1238.5 5632,-1238.5 5632,-1194.5 5632,-1194.5 5632,-1188.5 5638,-1182.5 5644,-1182.5 5644,-1182.5 5717,-1182.5 5717,-1182.5 5723,-1182.5 5729,-1188.5 5729,-1194.5 5729,-1194.5 5729,-1238.5 5729,-1238.5 5729,-1244.5 5723,-1250.5 5717,-1250.5"/>
-<text text-anchor="start" x="5651.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5641" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="5640" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 4]</text>
-<text text-anchor="start" x="5651.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 231&#45;&gt;233 -->
-<g id="edge233" class="edge"><title>231&#45;&gt;233</title>
-<path fill="none" stroke="black" d="M5658.95,-1293.91C5662,-1283.09 5665.3,-1271.38 5668.39,-1260.44"/>
-<polygon fill="black" stroke="black" points="5671.8,-1261.24 5671.15,-1250.67 5665.06,-1259.34 5671.8,-1261.24"/>
-</g>
-<!-- 235 -->
-<g id="node236" class="node"><title>235</title>
-<path fill="#55abe9" stroke="black" d="M5886,-1377C5886,-1377 5775,-1377 5775,-1377 5769,-1377 5763,-1371 5763,-1365 5763,-1365 5763,-1306 5763,-1306 5763,-1300 5769,-1294 5775,-1294 5775,-1294 5886,-1294 5886,-1294 5892,-1294 5898,-1300 5898,-1306 5898,-1306 5898,-1365 5898,-1365 5898,-1371 5892,-1377 5886,-1377"/>
-<text text-anchor="start" x="5771" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.009</text>
-<text text-anchor="start" x="5793" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.217</text>
-<text text-anchor="start" x="5783" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 242</text>
-<text text-anchor="start" x="5777.5" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [30, 212]</text>
-<text text-anchor="start" x="5801.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 234&#45;&gt;235 -->
-<g id="edge235" class="edge"><title>234&#45;&gt;235</title>
-<path fill="none" stroke="black" d="M5838.99,-1412.91C5838.06,-1404.56 5837.07,-1395.67 5836.11,-1387.02"/>
-<polygon fill="black" stroke="black" points="5839.59,-1386.57 5835,-1377.02 5832.63,-1387.35 5839.59,-1386.57"/>
-</g>
-<!-- 258 -->
-<g id="node259" class="node"><title>258</title>
-<path fill="#e58139" stroke="black" d="M6009,-1369.5C6009,-1369.5 5928,-1369.5 5928,-1369.5 5922,-1369.5 5916,-1363.5 5916,-1357.5 5916,-1357.5 5916,-1313.5 5916,-1313.5 5916,-1307.5 5922,-1301.5 5928,-1301.5 5928,-1301.5 6009,-1301.5 6009,-1301.5 6015,-1301.5 6021,-1307.5 6021,-1313.5 6021,-1313.5 6021,-1357.5 6021,-1357.5 6021,-1363.5 6015,-1369.5 6009,-1369.5"/>
-<text text-anchor="start" x="5939.5" y="-1354.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5925" y="-1339.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 68</text>
-<text text-anchor="start" x="5924" y="-1324.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [68, 0]</text>
-<text text-anchor="start" x="5939.5" y="-1309.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 234&#45;&gt;258 -->
-<g id="edge258" class="edge"><title>234&#45;&gt;258</title>
-<path fill="none" stroke="black" d="M5886.87,-1412.91C5899.36,-1401.21 5912.99,-1388.46 5925.47,-1376.78"/>
-<polygon fill="black" stroke="black" points="5928.16,-1379.06 5933.07,-1369.67 5923.37,-1373.95 5928.16,-1379.06"/>
-</g>
-<!-- 236 -->
-<g id="node237" class="node"><title>236</title>
-<path fill="#45a3e7" stroke="black" d="M5867.5,-1258C5867.5,-1258 5763.5,-1258 5763.5,-1258 5757.5,-1258 5751.5,-1252 5751.5,-1246 5751.5,-1246 5751.5,-1187 5751.5,-1187 5751.5,-1181 5757.5,-1175 5763.5,-1175 5763.5,-1175 5867.5,-1175 5867.5,-1175 5873.5,-1175 5879.5,-1181 5879.5,-1187 5879.5,-1187 5879.5,-1246 5879.5,-1246 5879.5,-1252 5873.5,-1258 5867.5,-1258"/>
-<text text-anchor="start" x="5759.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 0.196</text>
-<text text-anchor="start" x="5778" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.104</text>
-<text text-anchor="start" x="5768" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 218</text>
-<text text-anchor="start" x="5762.5" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [12, 206]</text>
-<text text-anchor="start" x="5786.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 235&#45;&gt;236 -->
-<g id="edge236" class="edge"><title>235&#45;&gt;236</title>
-<path fill="none" stroke="black" d="M5825.3,-1293.91C5824.23,-1285.56 5823.09,-1276.67 5821.98,-1268.02"/>
-<polygon fill="black" stroke="black" points="5825.44,-1267.49 5820.69,-1258.02 5818.5,-1268.38 5825.44,-1267.49"/>
-</g>
-<!-- 255 -->
-<g id="node256" class="node"><title>255</title>
-<path fill="#eeab7b" stroke="black" d="M6009,-1258C6009,-1258 5910,-1258 5910,-1258 5904,-1258 5898,-1252 5898,-1246 5898,-1246 5898,-1187 5898,-1187 5898,-1181 5904,-1175 5910,-1175 5910,-1175 6009,-1175 6009,-1175 6015,-1175 6021,-1181 6021,-1187 6021,-1187 6021,-1246 6021,-1246 6021,-1252 6015,-1258 6009,-1258"/>
-<text text-anchor="start" x="5906" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.111</text>
-<text text-anchor="start" x="5922" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="5916" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
-<text text-anchor="start" x="5915" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [18, 6]</text>
-<text text-anchor="start" x="5930.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 235&#45;&gt;255 -->
-<g id="edge255" class="edge"><title>235&#45;&gt;255</title>
-<path fill="none" stroke="black" d="M5875.26,-1293.91C5885.56,-1284.56 5896.61,-1274.54 5907.21,-1264.93"/>
-<polygon fill="black" stroke="black" points="5909.77,-1267.33 5914.82,-1258.02 5905.06,-1262.15 5909.77,-1267.33"/>
-</g>
-<!-- 237 -->
-<g id="node238" class="node"><title>237</title>
-<path fill="#40a0e6" stroke="black" d="M5763,-1139C5763,-1139 5660,-1139 5660,-1139 5654,-1139 5648,-1133 5648,-1127 5648,-1127 5648,-1068 5648,-1068 5648,-1062 5654,-1056 5660,-1056 5660,-1056 5763,-1056 5763,-1056 5769,-1056 5775,-1062 5775,-1068 5775,-1068 5775,-1127 5775,-1127 5775,-1133 5769,-1139 5763,-1139"/>
-<text text-anchor="start" x="5656" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="5674" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.064</text>
-<text text-anchor="start" x="5664" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 213</text>
-<text text-anchor="start" x="5663" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [7, 206]</text>
-<text text-anchor="start" x="5682.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 236&#45;&gt;237 -->
-<g id="edge237" class="edge"><title>236&#45;&gt;237</title>
-<path fill="none" stroke="black" d="M5779.42,-1174.91C5771.35,-1165.83 5762.72,-1156.12 5754.41,-1146.77"/>
-<polygon fill="black" stroke="black" points="5756.78,-1144.17 5747.52,-1139.02 5751.55,-1148.82 5756.78,-1144.17"/>
-</g>
-<!-- 254 -->
-<g id="node255" class="node"><title>254</title>
-<path fill="#e58139" stroke="black" d="M5878,-1131.5C5878,-1131.5 5805,-1131.5 5805,-1131.5 5799,-1131.5 5793,-1125.5 5793,-1119.5 5793,-1119.5 5793,-1075.5 5793,-1075.5 5793,-1069.5 5799,-1063.5 5805,-1063.5 5805,-1063.5 5878,-1063.5 5878,-1063.5 5884,-1063.5 5890,-1069.5 5890,-1075.5 5890,-1075.5 5890,-1119.5 5890,-1119.5 5890,-1125.5 5884,-1131.5 5878,-1131.5"/>
-<text text-anchor="start" x="5812.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5802" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="5801" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 0]</text>
-<text text-anchor="start" x="5812.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 236&#45;&gt;254 -->
-<g id="edge254" class="edge"><title>236&#45;&gt;254</title>
-<path fill="none" stroke="black" d="M5824.52,-1174.91C5826.92,-1164.09 5829.53,-1152.38 5831.96,-1141.44"/>
-<polygon fill="black" stroke="black" points="5835.38,-1142.19 5834.13,-1131.67 5828.54,-1140.67 5835.38,-1142.19"/>
-</g>
-<!-- 238 -->
-<g id="node239" class="node"><title>238</title>
-<path fill="#3c9ee5" stroke="black" d="M5837,-1020C5837,-1020 5664,-1020 5664,-1020 5658,-1020 5652,-1014 5652,-1008 5652,-1008 5652,-949 5652,-949 5652,-943 5658,-937 5664,-937 5664,-937 5837,-937 5837,-937 5843,-937 5849,-943 5849,-949 5849,-949 5849,-1008 5849,-1008 5849,-1014 5843,-1020 5837,-1020"/>
-<text text-anchor="start" x="5660" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;1.008</text>
-<text text-anchor="start" x="5713" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.025</text>
-<text text-anchor="start" x="5703" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 159</text>
-<text text-anchor="start" x="5702" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 157]</text>
-<text text-anchor="start" x="5721.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 237&#45;&gt;238 -->
-<g id="edge238" class="edge"><title>237&#45;&gt;238</title>
-<path fill="none" stroke="black" d="M5725.03,-1055.91C5727.84,-1047.47 5730.84,-1038.48 5733.75,-1029.74"/>
-<polygon fill="black" stroke="black" points="5737.15,-1030.61 5736.99,-1020.02 5730.51,-1028.4 5737.15,-1030.61"/>
-</g>
-<!-- 247 -->
-<g id="node248" class="node"><title>247</title>
-<path fill="#4da7e8" stroke="black" d="M6220,-1020C6220,-1020 6117,-1020 6117,-1020 6111,-1020 6105,-1014 6105,-1008 6105,-1008 6105,-949 6105,-949 6105,-943 6111,-937 6117,-937 6117,-937 6220,-937 6220,-937 6226,-937 6232,-943 6232,-949 6232,-949 6232,-1008 6232,-1008 6232,-1014 6226,-1020 6220,-1020"/>
-<text text-anchor="start" x="6113" y="-1004.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="6131" y="-989.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.168</text>
-<text text-anchor="start" x="6125" y="-974.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 54</text>
-<text text-anchor="start" x="6124" y="-959.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 49]</text>
-<text text-anchor="start" x="6139.5" y="-944.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 237&#45;&gt;247 -->
-<g id="edge247" class="edge"><title>237&#45;&gt;247</title>
-<path fill="none" stroke="black" d="M5775.39,-1059.24C5778.1,-1058.08 5780.81,-1057 5783.5,-1056 5887.79,-1017.42 6015.55,-996.945 6094.49,-987.165"/>
-<polygon fill="black" stroke="black" points="6095.31,-990.591 6104.82,-985.912 6094.47,-983.641 6095.31,-990.591"/>
-</g>
-<!-- 239 -->
-<g id="node240" class="node"><title>239</title>
-<path fill="#7bbeee" stroke="black" d="M5837,-901C5837,-901 5664,-901 5664,-901 5658,-901 5652,-895 5652,-889 5652,-889 5652,-830 5652,-830 5652,-824 5658,-818 5664,-818 5664,-818 5837,-818 5837,-818 5843,-818 5849,-824 5849,-830 5849,-830 5849,-889 5849,-889 5849,-895 5843,-901 5837,-901"/>
-<text text-anchor="start" x="5660" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;1.017</text>
-<text text-anchor="start" x="5713" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="5711" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="5710" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 3]</text>
-<text text-anchor="start" x="5721.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 238&#45;&gt;239 -->
-<g id="edge239" class="edge"><title>238&#45;&gt;239</title>
-<path fill="none" stroke="black" d="M5750.5,-936.907C5750.5,-928.649 5750.5,-919.864 5750.5,-911.302"/>
-<polygon fill="black" stroke="black" points="5754,-911.021 5750.5,-901.021 5747,-911.021 5754,-911.021"/>
-</g>
-<!-- 242 -->
-<g id="node243" class="node"><title>242</title>
-<path fill="#3a9ee5" stroke="black" d="M6090,-901C6090,-901 5881,-901 5881,-901 5875,-901 5869,-895 5869,-889 5869,-889 5869,-830 5869,-830 5869,-824 5875,-818 5881,-818 5881,-818 6090,-818 6090,-818 6096,-818 6102,-824 6102,-830 6102,-830 6102,-889 6102,-889 6102,-895 6096,-901 6090,-901"/>
-<text text-anchor="start" x="5877" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_serror_rate ≤ &#45;0.616</text>
-<text text-anchor="start" x="5948" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.013</text>
-<text text-anchor="start" x="5938" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 155</text>
-<text text-anchor="start" x="5937" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 154]</text>
-<text text-anchor="start" x="5956.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 238&#45;&gt;242 -->
-<g id="edge242" class="edge"><title>238&#45;&gt;242</title>
-<path fill="none" stroke="black" d="M5832.03,-936.907C5852.36,-926.789 5874.27,-915.879 5895,-905.559"/>
-<polygon fill="black" stroke="black" points="5896.72,-908.611 5904.11,-901.021 5893.6,-902.345 5896.72,-908.611"/>
-</g>
-<!-- 240 -->
-<g id="node241" class="node"><title>240</title>
-<path fill="#399de5" stroke="black" d="M5785,-774.5C5785,-774.5 5712,-774.5 5712,-774.5 5706,-774.5 5700,-768.5 5700,-762.5 5700,-762.5 5700,-718.5 5700,-718.5 5700,-712.5 5706,-706.5 5712,-706.5 5712,-706.5 5785,-706.5 5785,-706.5 5791,-706.5 5797,-712.5 5797,-718.5 5797,-718.5 5797,-762.5 5797,-762.5 5797,-768.5 5791,-774.5 5785,-774.5"/>
-<text text-anchor="start" x="5719.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5709" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="5708" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="5719.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 239&#45;&gt;240 -->
-<g id="edge240" class="edge"><title>239&#45;&gt;240</title>
-<path fill="none" stroke="black" d="M5749.81,-817.907C5749.62,-807.204 5749.43,-795.615 5749.24,-784.776"/>
-<polygon fill="black" stroke="black" points="5752.74,-784.606 5749.07,-774.667 5745.74,-784.725 5752.74,-784.606"/>
-</g>
-<!-- 241 -->
-<g id="node242" class="node"><title>241</title>
-<path fill="#e58139" stroke="black" d="M5900,-774.5C5900,-774.5 5827,-774.5 5827,-774.5 5821,-774.5 5815,-768.5 5815,-762.5 5815,-762.5 5815,-718.5 5815,-718.5 5815,-712.5 5821,-706.5 5827,-706.5 5827,-706.5 5900,-706.5 5900,-706.5 5906,-706.5 5912,-712.5 5912,-718.5 5912,-718.5 5912,-762.5 5912,-762.5 5912,-768.5 5906,-774.5 5900,-774.5"/>
-<text text-anchor="start" x="5834.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5824" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="5823" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="5834.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 239&#45;&gt;241 -->
-<g id="edge241" class="edge"><title>239&#45;&gt;241</title>
-<path fill="none" stroke="black" d="M5789.7,-817.907C5800.89,-806.321 5813.09,-793.698 5824.28,-782.111"/>
-<polygon fill="black" stroke="black" points="5827.04,-784.291 5831.47,-774.667 5822,-779.428 5827.04,-784.291"/>
-</g>
-<!-- 243 -->
-<g id="node244" class="node"><title>243</title>
-<path fill="#399de5" stroke="black" d="M6031,-774.5C6031,-774.5 5942,-774.5 5942,-774.5 5936,-774.5 5930,-768.5 5930,-762.5 5930,-762.5 5930,-718.5 5930,-718.5 5930,-712.5 5936,-706.5 5942,-706.5 5942,-706.5 6031,-706.5 6031,-706.5 6037,-706.5 6043,-712.5 6043,-718.5 6043,-718.5 6043,-762.5 6043,-762.5 6043,-768.5 6037,-774.5 6031,-774.5"/>
-<text text-anchor="start" x="5957.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5939" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 147</text>
-<text text-anchor="start" x="5938" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 147]</text>
-<text text-anchor="start" x="5957.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 242&#45;&gt;243 -->
-<g id="edge243" class="edge"><title>242&#45;&gt;243</title>
-<path fill="none" stroke="black" d="M5985.85,-817.907C5985.94,-807.204 5986.04,-795.615 5986.13,-784.776"/>
-<polygon fill="black" stroke="black" points="5989.63,-784.697 5986.22,-774.667 5982.63,-784.637 5989.63,-784.697"/>
-</g>
-<!-- 244 -->
-<g id="node245" class="node"><title>244</title>
-<path fill="#55abe9" stroke="black" d="M6246,-782C6246,-782 6073,-782 6073,-782 6067,-782 6061,-776 6061,-770 6061,-770 6061,-711 6061,-711 6061,-705 6067,-699 6073,-699 6073,-699 6246,-699 6246,-699 6252,-699 6258,-705 6258,-711 6258,-711 6258,-770 6258,-770 6258,-776 6252,-782 6246,-782"/>
-<text text-anchor="start" x="6069" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ &#45;0.362</text>
-<text text-anchor="start" x="6122" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.219</text>
-<text text-anchor="start" x="6120" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
-<text text-anchor="start" x="6119" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 7]</text>
-<text text-anchor="start" x="6130.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 242&#45;&gt;244 -->
-<g id="edge244" class="edge"><title>242&#45;&gt;244</title>
-<path fill="none" stroke="black" d="M6045.87,-817.907C6060.31,-808.197 6075.83,-797.758 6090.63,-787.811"/>
-<polygon fill="black" stroke="black" points="6092.89,-790.505 6099.24,-782.021 6088.99,-784.696 6092.89,-790.505"/>
-</g>
-<!-- 245 -->
-<g id="node246" class="node"><title>245</title>
-<path fill="#399de5" stroke="black" d="M6094,-655.5C6094,-655.5 6021,-655.5 6021,-655.5 6015,-655.5 6009,-649.5 6009,-643.5 6009,-643.5 6009,-599.5 6009,-599.5 6009,-593.5 6015,-587.5 6021,-587.5 6021,-587.5 6094,-587.5 6094,-587.5 6100,-587.5 6106,-593.5 6106,-599.5 6106,-599.5 6106,-643.5 6106,-643.5 6106,-649.5 6100,-655.5 6094,-655.5"/>
-<text text-anchor="start" x="6028.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6018" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="6017" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 7]</text>
-<text text-anchor="start" x="6028.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 244&#45;&gt;245 -->
-<g id="edge245" class="edge"><title>244&#45;&gt;245</title>
-<path fill="none" stroke="black" d="M6124.11,-698.907C6114.11,-687.432 6103.22,-674.938 6093.19,-663.442"/>
-<polygon fill="black" stroke="black" points="6095.62,-660.905 6086.41,-655.667 6090.35,-665.505 6095.62,-660.905"/>
-</g>
-<!-- 246 -->
-<g id="node247" class="node"><title>246</title>
-<path fill="#e58139" stroke="black" d="M6209,-655.5C6209,-655.5 6136,-655.5 6136,-655.5 6130,-655.5 6124,-649.5 6124,-643.5 6124,-643.5 6124,-599.5 6124,-599.5 6124,-593.5 6130,-587.5 6136,-587.5 6136,-587.5 6209,-587.5 6209,-587.5 6215,-587.5 6221,-593.5 6221,-599.5 6221,-599.5 6221,-643.5 6221,-643.5 6221,-649.5 6215,-655.5 6209,-655.5"/>
-<text text-anchor="start" x="6143.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6133" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="6132" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="6143.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 244&#45;&gt;246 -->
-<g id="edge246" class="edge"><title>244&#45;&gt;246</title>
-<path fill="none" stroke="black" d="M6164.01,-698.907C6165.2,-688.204 6166.49,-676.615 6167.69,-665.776"/>
-<polygon fill="black" stroke="black" points="6171.19,-665.992 6168.81,-655.667 6164.23,-665.219 6171.19,-665.992"/>
-</g>
-<!-- 248 -->
-<g id="node249" class="node"><title>248</title>
-<path fill="#e58139" stroke="black" d="M6205,-893.5C6205,-893.5 6132,-893.5 6132,-893.5 6126,-893.5 6120,-887.5 6120,-881.5 6120,-881.5 6120,-837.5 6120,-837.5 6120,-831.5 6126,-825.5 6132,-825.5 6132,-825.5 6205,-825.5 6205,-825.5 6211,-825.5 6217,-831.5 6217,-837.5 6217,-837.5 6217,-881.5 6217,-881.5 6217,-887.5 6211,-893.5 6205,-893.5"/>
-<text text-anchor="start" x="6139.5" y="-878.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6129" y="-863.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4</text>
-<text text-anchor="start" x="6128" y="-848.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 0]</text>
-<text text-anchor="start" x="6139.5" y="-833.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 247&#45;&gt;248 -->
-<g id="edge248" class="edge"><title>247&#45;&gt;248</title>
-<path fill="none" stroke="black" d="M6168.5,-936.907C6168.5,-926.204 6168.5,-914.615 6168.5,-903.776"/>
-<polygon fill="black" stroke="black" points="6172,-903.667 6168.5,-893.667 6165,-903.667 6172,-903.667"/>
-</g>
-<!-- 249 -->
-<g id="node250" class="node"><title>249</title>
-<path fill="#3d9fe6" stroke="black" d="M6416,-901C6416,-901 6247,-901 6247,-901 6241,-901 6235,-895 6235,-889 6235,-889 6235,-830 6235,-830 6235,-824 6241,-818 6247,-818 6247,-818 6416,-818 6416,-818 6422,-818 6428,-824 6428,-830 6428,-830 6428,-889 6428,-889 6428,-895 6422,-901 6416,-901"/>
-<text text-anchor="start" x="6243" y="-885.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.004</text>
-<text text-anchor="start" x="6294" y="-870.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.039</text>
-<text text-anchor="start" x="6288" y="-855.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 50</text>
-<text text-anchor="start" x="6287" y="-840.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 49]</text>
-<text text-anchor="start" x="6302.5" y="-825.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 247&#45;&gt;249 -->
-<g id="edge249" class="edge"><title>247&#45;&gt;249</title>
-<path fill="none" stroke="black" d="M6225.05,-936.907C6238.45,-927.288 6252.85,-916.953 6266.59,-907.09"/>
-<polygon fill="black" stroke="black" points="6268.97,-909.695 6275.05,-901.021 6264.88,-904.009 6268.97,-909.695"/>
-</g>
-<!-- 250 -->
-<g id="node251" class="node"><title>250</title>
-<path fill="#61b1ea" stroke="black" d="M6366,-782C6366,-782 6291,-782 6291,-782 6285,-782 6279,-776 6279,-770 6279,-770 6279,-711 6279,-711 6279,-705 6285,-699 6291,-699 6291,-699 6366,-699 6366,-699 6372,-699 6378,-705 6378,-711 6378,-711 6378,-770 6378,-770 6378,-776 6372,-782 6366,-782"/>
-<text text-anchor="start" x="6287" y="-766.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ &#45;0.69</text>
-<text text-anchor="start" x="6291" y="-751.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.278</text>
-<text text-anchor="start" x="6289" y="-736.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="6288" y="-721.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 5]</text>
-<text text-anchor="start" x="6299.5" y="-706.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 249&#45;&gt;250 -->
-<g id="edge250" class="edge"><title>249&#45;&gt;250</title>
-<path fill="none" stroke="black" d="M6330.46,-817.907C6330.25,-809.558 6330.02,-800.671 6329.8,-792.02"/>
-<polygon fill="black" stroke="black" points="6333.29,-791.928 6329.54,-782.021 6326.3,-792.107 6333.29,-791.928"/>
-</g>
-<!-- 253 -->
-<g id="node254" class="node"><title>253</title>
-<path fill="#399de5" stroke="black" d="M6489,-774.5C6489,-774.5 6408,-774.5 6408,-774.5 6402,-774.5 6396,-768.5 6396,-762.5 6396,-762.5 6396,-718.5 6396,-718.5 6396,-712.5 6402,-706.5 6408,-706.5 6408,-706.5 6489,-706.5 6489,-706.5 6495,-706.5 6501,-712.5 6501,-718.5 6501,-718.5 6501,-762.5 6501,-762.5 6501,-768.5 6495,-774.5 6489,-774.5"/>
-<text text-anchor="start" x="6419.5" y="-759.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6405" y="-744.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 44</text>
-<text text-anchor="start" x="6404" y="-729.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 44]</text>
-<text text-anchor="start" x="6419.5" y="-714.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 249&#45;&gt;253 -->
-<g id="edge253" class="edge"><title>249&#45;&gt;253</title>
-<path fill="none" stroke="black" d="M6372.09,-817.907C6383.79,-806.211 6396.54,-793.457 6408.22,-781.78"/>
-<polygon fill="black" stroke="black" points="6410.74,-784.213 6415.33,-774.667 6405.79,-779.263 6410.74,-784.213"/>
-</g>
-<!-- 251 -->
-<g id="node252" class="node"><title>251</title>
-<path fill="#399de5" stroke="black" d="M6351,-655.5C6351,-655.5 6278,-655.5 6278,-655.5 6272,-655.5 6266,-649.5 6266,-643.5 6266,-643.5 6266,-599.5 6266,-599.5 6266,-593.5 6272,-587.5 6278,-587.5 6278,-587.5 6351,-587.5 6351,-587.5 6357,-587.5 6363,-593.5 6363,-599.5 6363,-599.5 6363,-643.5 6363,-643.5 6363,-649.5 6357,-655.5 6351,-655.5"/>
-<text text-anchor="start" x="6285.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6275" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5</text>
-<text text-anchor="start" x="6274" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 5]</text>
-<text text-anchor="start" x="6285.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 250&#45;&gt;251 -->
-<g id="edge251" class="edge"><title>250&#45;&gt;251</title>
-<path fill="none" stroke="black" d="M6323.64,-698.907C6322.36,-688.204 6320.98,-676.615 6319.68,-665.776"/>
-<polygon fill="black" stroke="black" points="6323.13,-665.18 6318.47,-655.667 6316.18,-666.012 6323.13,-665.18"/>
-</g>
-<!-- 252 -->
-<g id="node253" class="node"><title>252</title>
-<path fill="#e58139" stroke="black" d="M6466,-655.5C6466,-655.5 6393,-655.5 6393,-655.5 6387,-655.5 6381,-649.5 6381,-643.5 6381,-643.5 6381,-599.5 6381,-599.5 6381,-593.5 6387,-587.5 6393,-587.5 6393,-587.5 6466,-587.5 6466,-587.5 6472,-587.5 6478,-593.5 6478,-599.5 6478,-599.5 6478,-643.5 6478,-643.5 6478,-649.5 6472,-655.5 6466,-655.5"/>
-<text text-anchor="start" x="6400.5" y="-640.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6390" y="-625.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="6389" y="-610.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="6400.5" y="-595.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 250&#45;&gt;252 -->
-<g id="edge252" class="edge"><title>250&#45;&gt;252</title>
-<path fill="none" stroke="black" d="M6363.54,-698.907C6373.45,-687.432 6384.23,-674.938 6394.16,-663.442"/>
-<polygon fill="black" stroke="black" points="6396.98,-665.524 6400.87,-655.667 6391.68,-660.95 6396.98,-665.524"/>
-</g>
-<!-- 256 -->
-<g id="node257" class="node"><title>256</title>
-<path fill="#e58139" stroke="black" d="M6001,-1131.5C6001,-1131.5 5920,-1131.5 5920,-1131.5 5914,-1131.5 5908,-1125.5 5908,-1119.5 5908,-1119.5 5908,-1075.5 5908,-1075.5 5908,-1069.5 5914,-1063.5 5920,-1063.5 5920,-1063.5 6001,-1063.5 6001,-1063.5 6007,-1063.5 6013,-1069.5 6013,-1075.5 6013,-1075.5 6013,-1119.5 6013,-1119.5 6013,-1125.5 6007,-1131.5 6001,-1131.5"/>
-<text text-anchor="start" x="5931.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="5917" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 18</text>
-<text text-anchor="start" x="5916" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [18, 0]</text>
-<text text-anchor="start" x="5931.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 255&#45;&gt;256 -->
-<g id="edge256" class="edge"><title>255&#45;&gt;256</title>
-<path fill="none" stroke="black" d="M5959.85,-1174.91C5959.94,-1164.2 5960.04,-1152.62 5960.13,-1141.78"/>
-<polygon fill="black" stroke="black" points="5963.63,-1141.7 5960.22,-1131.67 5956.63,-1141.64 5963.63,-1141.7"/>
-</g>
-<!-- 257 -->
-<g id="node258" class="node"><title>257</title>
-<path fill="#399de5" stroke="black" d="M6116,-1131.5C6116,-1131.5 6043,-1131.5 6043,-1131.5 6037,-1131.5 6031,-1125.5 6031,-1119.5 6031,-1119.5 6031,-1075.5 6031,-1075.5 6031,-1069.5 6037,-1063.5 6043,-1063.5 6043,-1063.5 6116,-1063.5 6116,-1063.5 6122,-1063.5 6128,-1069.5 6128,-1075.5 6128,-1075.5 6128,-1119.5 6128,-1119.5 6128,-1125.5 6122,-1131.5 6116,-1131.5"/>
-<text text-anchor="start" x="6050.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6040" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6</text>
-<text text-anchor="start" x="6039" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 6]</text>
-<text text-anchor="start" x="6050.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 255&#45;&gt;257 -->
-<g id="edge257" class="edge"><title>255&#45;&gt;257</title>
-<path fill="none" stroke="black" d="M6001.13,-1174.91C6013.13,-1163.21 6026.21,-1150.46 6038.19,-1138.78"/>
-<polygon fill="black" stroke="black" points="6040.77,-1141.15 6045.48,-1131.67 6035.88,-1136.14 6040.77,-1141.15"/>
-</g>
-<!-- 260 -->
-<g id="node261" class="node"><title>260</title>
-<path fill="#eeac7c" stroke="black" d="M6136,-1615C6136,-1615 6037,-1615 6037,-1615 6031,-1615 6025,-1609 6025,-1603 6025,-1603 6025,-1544 6025,-1544 6025,-1538 6031,-1532 6037,-1532 6037,-1532 6136,-1532 6136,-1532 6142,-1532 6148,-1538 6148,-1544 6148,-1544 6148,-1603 6148,-1603 6148,-1609 6142,-1615 6136,-1615"/>
-<text text-anchor="start" x="6033" y="-1599.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.112</text>
-<text text-anchor="start" x="6049" y="-1584.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.379</text>
-<text text-anchor="start" x="6039" y="-1569.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 307</text>
-<text text-anchor="start" x="6033.5" y="-1554.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [229, 78]</text>
-<text text-anchor="start" x="6057.5" y="-1539.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 259&#45;&gt;260 -->
-<g id="edge260" class="edge"><title>259&#45;&gt;260</title>
-<path fill="none" stroke="black" d="M6044.05,-1650.91C6048.89,-1642.2 6054.06,-1632.9 6059.06,-1623.89"/>
-<polygon fill="black" stroke="black" points="6062.19,-1625.46 6063.99,-1615.02 6056.07,-1622.06 6062.19,-1625.46"/>
-</g>
-<!-- 279 -->
-<g id="node280" class="node"><title>279</title>
-<path fill="#399de5" stroke="black" d="M6267,-1607.5C6267,-1607.5 6178,-1607.5 6178,-1607.5 6172,-1607.5 6166,-1601.5 6166,-1595.5 6166,-1595.5 6166,-1551.5 6166,-1551.5 6166,-1545.5 6172,-1539.5 6178,-1539.5 6178,-1539.5 6267,-1539.5 6267,-1539.5 6273,-1539.5 6279,-1545.5 6279,-1551.5 6279,-1551.5 6279,-1595.5 6279,-1595.5 6279,-1601.5 6273,-1607.5 6267,-1607.5"/>
-<text text-anchor="start" x="6193.5" y="-1592.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6175" y="-1577.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 205</text>
-<text text-anchor="start" x="6174" y="-1562.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 205]</text>
-<text text-anchor="start" x="6193.5" y="-1547.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 259&#45;&gt;279 -->
-<g id="edge279" class="edge"><title>259&#45;&gt;279</title>
-<path fill="none" stroke="black" d="M6089.06,-1653.83C6110.69,-1641.6 6134.69,-1627.87 6156.5,-1615 6157.77,-1614.25 6159.05,-1613.5 6160.33,-1612.73"/>
-<polygon fill="black" stroke="black" points="6162.14,-1615.73 6168.92,-1607.59 6158.55,-1609.72 6162.14,-1615.73"/>
-</g>
-<!-- 261 -->
-<g id="node262" class="node"><title>261</title>
-<path fill="#c7e3f8" stroke="black" d="M6233,-1496C6233,-1496 6064,-1496 6064,-1496 6058,-1496 6052,-1490 6052,-1484 6052,-1484 6052,-1425 6052,-1425 6052,-1419 6058,-1413 6064,-1413 6064,-1413 6233,-1413 6233,-1413 6239,-1413 6245,-1419 6245,-1425 6245,-1425 6245,-1484 6245,-1484 6245,-1490 6239,-1496 6233,-1496"/>
-<text text-anchor="start" x="6060" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 0.347</text>
-<text text-anchor="start" x="6111" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.487</text>
-<text text-anchor="start" x="6101" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 110</text>
-<text text-anchor="start" x="6100" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [46, 64]</text>
-<text text-anchor="start" x="6119.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 260&#45;&gt;261 -->
-<g id="edge261" class="edge"><title>260&#45;&gt;261</title>
-<path fill="none" stroke="black" d="M6108.01,-1531.91C6112.63,-1523.2 6117.55,-1513.9 6122.33,-1504.89"/>
-<polygon fill="black" stroke="black" points="6125.44,-1506.5 6127.03,-1496.02 6119.25,-1503.22 6125.44,-1506.5"/>
-</g>
-<!-- 268 -->
-<g id="node269" class="node"><title>268</title>
-<path fill="#e78b48" stroke="black" d="M6649,-1496C6649,-1496 6550,-1496 6550,-1496 6544,-1496 6538,-1490 6538,-1484 6538,-1484 6538,-1425 6538,-1425 6538,-1419 6544,-1413 6550,-1413 6550,-1413 6649,-1413 6649,-1413 6655,-1413 6661,-1419 6661,-1425 6661,-1425 6661,-1484 6661,-1484 6661,-1490 6655,-1496 6649,-1496"/>
-<text text-anchor="start" x="6546" y="-1480.8" font-family="Helvetica,sans-Serif" font-size="14.00">duration ≤ &#45;0.094</text>
-<text text-anchor="start" x="6562" y="-1465.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.132</text>
-<text text-anchor="start" x="6552" y="-1450.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 197</text>
-<text text-anchor="start" x="6546.5" y="-1435.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [183, 14]</text>
-<text text-anchor="start" x="6570.5" y="-1420.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 260&#45;&gt;268 -->
-<g id="edge268" class="edge"><title>260&#45;&gt;268</title>
-<path fill="none" stroke="black" d="M6148.16,-1535.31C6150.94,-1534.12 6153.73,-1533 6156.5,-1532 6282.44,-1486.35 6438.64,-1467.52 6527.91,-1460.07"/>
-<polygon fill="black" stroke="black" points="6528.24,-1463.56 6537.93,-1459.26 6527.68,-1456.58 6528.24,-1463.56"/>
-</g>
-<!-- 262 -->
-<g id="node263" class="node"><title>262</title>
-<path fill="#3fa0e6" stroke="black" d="M6204,-1377C6204,-1377 6093,-1377 6093,-1377 6087,-1377 6081,-1371 6081,-1365 6081,-1365 6081,-1306 6081,-1306 6081,-1300 6087,-1294 6093,-1294 6093,-1294 6204,-1294 6204,-1294 6210,-1294 6216,-1300 6216,-1306 6216,-1306 6216,-1365 6216,-1365 6216,-1371 6210,-1377 6204,-1377"/>
-<text text-anchor="start" x="6089" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ &#45;0.011</text>
-<text text-anchor="start" x="6115" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.06</text>
-<text text-anchor="start" x="6105" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 65</text>
-<text text-anchor="start" x="6104" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 63]</text>
-<text text-anchor="start" x="6119.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 261&#45;&gt;262 -->
-<g id="edge262" class="edge"><title>261&#45;&gt;262</title>
-<path fill="none" stroke="black" d="M6148.5,-1412.91C6148.5,-1404.65 6148.5,-1395.86 6148.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="6152,-1387.02 6148.5,-1377.02 6145,-1387.02 6152,-1387.02"/>
-</g>
-<!-- 265 -->
-<g id="node266" class="node"><title>265</title>
-<path fill="#e6843d" stroke="black" d="M6377,-1377C6377,-1377 6274,-1377 6274,-1377 6268,-1377 6262,-1371 6262,-1365 6262,-1365 6262,-1306 6262,-1306 6262,-1300 6268,-1294 6274,-1294 6274,-1294 6377,-1294 6377,-1294 6383,-1294 6389,-1300 6389,-1306 6389,-1306 6389,-1365 6389,-1365 6389,-1371 6383,-1377 6377,-1377"/>
-<text text-anchor="start" x="6270" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="6288" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.043</text>
-<text text-anchor="start" x="6282" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 45</text>
-<text text-anchor="start" x="6281" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [44, 1]</text>
-<text text-anchor="start" x="6296.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 261&#45;&gt;265 -->
-<g id="edge265" class="edge"><title>261&#45;&gt;265</title>
-<path fill="none" stroke="black" d="M6209.91,-1412.91C6224.6,-1403.2 6240.39,-1392.76 6255.44,-1382.81"/>
-<polygon fill="black" stroke="black" points="6257.79,-1385.45 6264.2,-1377.02 6253.93,-1379.62 6257.79,-1385.45"/>
-</g>
-<!-- 263 -->
-<g id="node264" class="node"><title>263</title>
-<path fill="#399de5" stroke="black" d="M6132,-1250.5C6132,-1250.5 6051,-1250.5 6051,-1250.5 6045,-1250.5 6039,-1244.5 6039,-1238.5 6039,-1238.5 6039,-1194.5 6039,-1194.5 6039,-1188.5 6045,-1182.5 6051,-1182.5 6051,-1182.5 6132,-1182.5 6132,-1182.5 6138,-1182.5 6144,-1188.5 6144,-1194.5 6144,-1194.5 6144,-1238.5 6144,-1238.5 6144,-1244.5 6138,-1250.5 6132,-1250.5"/>
-<text text-anchor="start" x="6062.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6048" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 63</text>
-<text text-anchor="start" x="6047" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 63]</text>
-<text text-anchor="start" x="6062.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 262&#45;&gt;263 -->
-<g id="edge263" class="edge"><title>262&#45;&gt;263</title>
-<path fill="none" stroke="black" d="M6128.72,-1293.91C6123.35,-1282.87 6117.51,-1270.9 6112.09,-1259.77"/>
-<polygon fill="black" stroke="black" points="6115.18,-1258.12 6107.66,-1250.67 6108.89,-1261.19 6115.18,-1258.12"/>
-</g>
-<!-- 264 -->
-<g id="node265" class="node"><title>264</title>
-<path fill="#e58139" stroke="black" d="M6247,-1250.5C6247,-1250.5 6174,-1250.5 6174,-1250.5 6168,-1250.5 6162,-1244.5 6162,-1238.5 6162,-1238.5 6162,-1194.5 6162,-1194.5 6162,-1188.5 6168,-1182.5 6174,-1182.5 6174,-1182.5 6247,-1182.5 6247,-1182.5 6253,-1182.5 6259,-1188.5 6259,-1194.5 6259,-1194.5 6259,-1238.5 6259,-1238.5 6259,-1244.5 6253,-1250.5 6247,-1250.5"/>
-<text text-anchor="start" x="6181.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6171" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="6170" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 0]</text>
-<text text-anchor="start" x="6181.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 262&#45;&gt;264 -->
-<g id="edge264" class="edge"><title>262&#45;&gt;264</title>
-<path fill="none" stroke="black" d="M6170.01,-1293.91C6175.86,-1282.87 6182.2,-1270.9 6188.1,-1259.77"/>
-<polygon fill="black" stroke="black" points="6191.33,-1261.14 6192.92,-1250.67 6185.15,-1257.86 6191.33,-1261.14"/>
-</g>
-<!-- 266 -->
-<g id="node267" class="node"><title>266</title>
-<path fill="#399de5" stroke="black" d="M6362,-1250.5C6362,-1250.5 6289,-1250.5 6289,-1250.5 6283,-1250.5 6277,-1244.5 6277,-1238.5 6277,-1238.5 6277,-1194.5 6277,-1194.5 6277,-1188.5 6283,-1182.5 6289,-1182.5 6289,-1182.5 6362,-1182.5 6362,-1182.5 6368,-1182.5 6374,-1188.5 6374,-1194.5 6374,-1194.5 6374,-1238.5 6374,-1238.5 6374,-1244.5 6368,-1250.5 6362,-1250.5"/>
-<text text-anchor="start" x="6296.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6286" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="6285" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 1]</text>
-<text text-anchor="start" x="6296.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 265&#45;&gt;266 -->
-<g id="edge266" class="edge"><title>265&#45;&gt;266</title>
-<path fill="none" stroke="black" d="M6325.5,-1293.91C6325.5,-1283.2 6325.5,-1271.62 6325.5,-1260.78"/>
-<polygon fill="black" stroke="black" points="6329,-1260.67 6325.5,-1250.67 6322,-1260.67 6329,-1260.67"/>
-</g>
-<!-- 267 -->
-<g id="node268" class="node"><title>267</title>
-<path fill="#e58139" stroke="black" d="M6485,-1250.5C6485,-1250.5 6404,-1250.5 6404,-1250.5 6398,-1250.5 6392,-1244.5 6392,-1238.5 6392,-1238.5 6392,-1194.5 6392,-1194.5 6392,-1188.5 6398,-1182.5 6404,-1182.5 6404,-1182.5 6485,-1182.5 6485,-1182.5 6491,-1182.5 6497,-1188.5 6497,-1194.5 6497,-1194.5 6497,-1238.5 6497,-1238.5 6497,-1244.5 6491,-1250.5 6485,-1250.5"/>
-<text text-anchor="start" x="6415.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6401" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 44</text>
-<text text-anchor="start" x="6400" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [44, 0]</text>
-<text text-anchor="start" x="6415.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 265&#45;&gt;267 -->
-<g id="edge267" class="edge"><title>265&#45;&gt;267</title>
-<path fill="none" stroke="black" d="M6366.79,-1293.91C6378.68,-1282.21 6391.65,-1269.46 6403.53,-1257.78"/>
-<polygon fill="black" stroke="black" points="6406.09,-1260.17 6410.77,-1250.67 6401.18,-1255.18 6406.09,-1260.17"/>
-</g>
-<!-- 269 -->
-<g id="node270" class="node"><title>269</title>
-<path fill="#e5833c" stroke="black" d="M6651,-1377C6651,-1377 6548,-1377 6548,-1377 6542,-1377 6536,-1371 6536,-1365 6536,-1365 6536,-1306 6536,-1306 6536,-1300 6542,-1294 6548,-1294 6548,-1294 6651,-1294 6651,-1294 6657,-1294 6663,-1300 6663,-1306 6663,-1306 6663,-1365 6663,-1365 6663,-1371 6657,-1377 6651,-1377"/>
-<text text-anchor="start" x="6544" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ &#45;0.01</text>
-<text text-anchor="start" x="6562" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.034</text>
-<text text-anchor="start" x="6552" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 173</text>
-<text text-anchor="start" x="6551" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [170, 3]</text>
-<text text-anchor="start" x="6570.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 268&#45;&gt;269 -->
-<g id="edge269" class="edge"><title>268&#45;&gt;269</title>
-<path fill="none" stroke="black" d="M6599.5,-1412.91C6599.5,-1404.65 6599.5,-1395.86 6599.5,-1387.3"/>
-<polygon fill="black" stroke="black" points="6603,-1387.02 6599.5,-1377.02 6596,-1387.02 6603,-1387.02"/>
-</g>
-<!-- 272 -->
-<g id="node273" class="node"><title>272</title>
-<path fill="#fbece1" stroke="black" d="M6921,-1377C6921,-1377 6730,-1377 6730,-1377 6724,-1377 6718,-1371 6718,-1365 6718,-1365 6718,-1306 6718,-1306 6718,-1300 6724,-1294 6730,-1294 6730,-1294 6921,-1294 6921,-1294 6927,-1294 6933,-1300 6933,-1306 6933,-1306 6933,-1365 6933,-1365 6933,-1371 6927,-1377 6921,-1377"/>
-<text text-anchor="start" x="6726" y="-1361.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ &#45;0.254</text>
-<text text-anchor="start" x="6788" y="-1346.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.497</text>
-<text text-anchor="start" x="6782" y="-1331.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
-<text text-anchor="start" x="6777" y="-1316.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13, 11]</text>
-<text text-anchor="start" x="6796.5" y="-1301.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 268&#45;&gt;272 -->
-<g id="edge272" class="edge"><title>268&#45;&gt;272</title>
-<path fill="none" stroke="black" d="M6661.26,-1421.53C6684.99,-1409.24 6712.55,-1394.98 6738.23,-1381.68"/>
-<polygon fill="black" stroke="black" points="6739.96,-1384.73 6747.23,-1377.02 6736.74,-1378.51 6739.96,-1384.73"/>
-</g>
-<!-- 270 -->
-<g id="node271" class="node"><title>270</title>
-<path fill="#399de5" stroke="black" d="M6600,-1250.5C6600,-1250.5 6527,-1250.5 6527,-1250.5 6521,-1250.5 6515,-1244.5 6515,-1238.5 6515,-1238.5 6515,-1194.5 6515,-1194.5 6515,-1188.5 6521,-1182.5 6527,-1182.5 6527,-1182.5 6600,-1182.5 6600,-1182.5 6606,-1182.5 6612,-1188.5 6612,-1194.5 6612,-1194.5 6612,-1238.5 6612,-1238.5 6612,-1244.5 6606,-1250.5 6600,-1250.5"/>
-<text text-anchor="start" x="6534.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6524" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3</text>
-<text text-anchor="start" x="6523" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 3]</text>
-<text text-anchor="start" x="6534.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 269&#45;&gt;270 -->
-<g id="edge270" class="edge"><title>269&#45;&gt;270</title>
-<path fill="none" stroke="black" d="M6587.01,-1293.91C6583.68,-1283.09 6580.08,-1271.38 6576.71,-1260.44"/>
-<polygon fill="black" stroke="black" points="6579.99,-1259.2 6573.71,-1250.67 6573.3,-1261.25 6579.99,-1259.2"/>
-</g>
-<!-- 271 -->
-<g id="node272" class="node"><title>271</title>
-<path fill="#e58139" stroke="black" d="M6731,-1250.5C6731,-1250.5 6642,-1250.5 6642,-1250.5 6636,-1250.5 6630,-1244.5 6630,-1238.5 6630,-1238.5 6630,-1194.5 6630,-1194.5 6630,-1188.5 6636,-1182.5 6642,-1182.5 6642,-1182.5 6731,-1182.5 6731,-1182.5 6737,-1182.5 6743,-1188.5 6743,-1194.5 6743,-1194.5 6743,-1238.5 6743,-1238.5 6743,-1244.5 6737,-1250.5 6731,-1250.5"/>
-<text text-anchor="start" x="6657.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6639" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 170</text>
-<text text-anchor="start" x="6638" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [170, 0]</text>
-<text text-anchor="start" x="6657.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 269&#45;&gt;271 -->
-<g id="edge271" class="edge"><title>269&#45;&gt;271</title>
-<path fill="none" stroke="black" d="M6629.68,-1293.91C6638.14,-1282.54 6647.33,-1270.18 6655.81,-1258.77"/>
-<polygon fill="black" stroke="black" points="6658.68,-1260.78 6661.84,-1250.67 6653.06,-1256.6 6658.68,-1260.78"/>
-</g>
-<!-- 273 -->
-<g id="node274" class="node"><title>273</title>
-<path fill="#5dafea" stroke="black" d="M6877.5,-1258C6877.5,-1258 6773.5,-1258 6773.5,-1258 6767.5,-1258 6761.5,-1252 6761.5,-1246 6761.5,-1246 6761.5,-1187 6761.5,-1187 6761.5,-1181 6767.5,-1175 6773.5,-1175 6773.5,-1175 6877.5,-1175 6877.5,-1175 6883.5,-1175 6889.5,-1181 6889.5,-1187 6889.5,-1187 6889.5,-1246 6889.5,-1246 6889.5,-1252 6883.5,-1258 6877.5,-1258"/>
-<text text-anchor="start" x="6769.5" y="-1242.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_root ≤ 6.674</text>
-<text text-anchor="start" x="6792" y="-1227.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.26</text>
-<text text-anchor="start" x="6782" y="-1212.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 13</text>
-<text text-anchor="start" x="6781" y="-1197.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 11]</text>
-<text text-anchor="start" x="6796.5" y="-1182.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 272&#45;&gt;273 -->
-<g id="edge273" class="edge"><title>272&#45;&gt;273</title>
-<path fill="none" stroke="black" d="M6825.5,-1293.91C6825.5,-1285.65 6825.5,-1276.86 6825.5,-1268.3"/>
-<polygon fill="black" stroke="black" points="6829,-1268.02 6825.5,-1258.02 6822,-1268.02 6829,-1268.02"/>
-</g>
-<!-- 278 -->
-<g id="node279" class="node"><title>278</title>
-<path fill="#e58139" stroke="black" d="M7001,-1250.5C7001,-1250.5 6920,-1250.5 6920,-1250.5 6914,-1250.5 6908,-1244.5 6908,-1238.5 6908,-1238.5 6908,-1194.5 6908,-1194.5 6908,-1188.5 6914,-1182.5 6920,-1182.5 6920,-1182.5 7001,-1182.5 7001,-1182.5 7007,-1182.5 7013,-1188.5 7013,-1194.5 7013,-1194.5 7013,-1238.5 7013,-1238.5 7013,-1244.5 7007,-1250.5 7001,-1250.5"/>
-<text text-anchor="start" x="6931.5" y="-1235.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6917" y="-1220.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
-<text text-anchor="start" x="6916" y="-1205.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [11, 0]</text>
-<text text-anchor="start" x="6931.5" y="-1190.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 272&#45;&gt;278 -->
-<g id="edge278" class="edge"><title>272&#45;&gt;278</title>
-<path fill="none" stroke="black" d="M6872.34,-1293.91C6885.96,-1282.1 6900.83,-1269.22 6914.4,-1257.45"/>
-<polygon fill="black" stroke="black" points="6916.97,-1259.86 6922.23,-1250.67 6912.38,-1254.57 6916.97,-1259.86"/>
-</g>
-<!-- 274 -->
-<g id="node275" class="node"><title>274</title>
-<path fill="#4ba6e7" stroke="black" d="M6806,-1139C6806,-1139 6725,-1139 6725,-1139 6719,-1139 6713,-1133 6713,-1127 6713,-1127 6713,-1068 6713,-1068 6713,-1062 6719,-1056 6725,-1056 6725,-1056 6806,-1056 6806,-1056 6812,-1056 6818,-1062 6818,-1068 6818,-1068 6818,-1127 6818,-1127 6818,-1133 6812,-1139 6806,-1139"/>
-<text text-anchor="start" x="6725.5" y="-1123.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 11.514</text>
-<text text-anchor="start" x="6728" y="-1108.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
-<text text-anchor="start" x="6722" y="-1093.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12</text>
-<text text-anchor="start" x="6721" y="-1078.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 11]</text>
-<text text-anchor="start" x="6736.5" y="-1063.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 273&#45;&gt;274 -->
-<g id="edge274" class="edge"><title>273&#45;&gt;274</title>
-<path fill="none" stroke="black" d="M6804.68,-1174.91C6800.26,-1166.29 6795.55,-1157.09 6790.97,-1148.17"/>
-<polygon fill="black" stroke="black" points="6793.96,-1146.32 6786.28,-1139.02 6787.73,-1149.52 6793.96,-1146.32"/>
-</g>
-<!-- 277 -->
-<g id="node278" class="node"><title>277</title>
-<path fill="#e58139" stroke="black" d="M6921,-1131.5C6921,-1131.5 6848,-1131.5 6848,-1131.5 6842,-1131.5 6836,-1125.5 6836,-1119.5 6836,-1119.5 6836,-1075.5 6836,-1075.5 6836,-1069.5 6842,-1063.5 6848,-1063.5 6848,-1063.5 6921,-1063.5 6921,-1063.5 6927,-1063.5 6933,-1069.5 6933,-1075.5 6933,-1075.5 6933,-1119.5 6933,-1119.5 6933,-1125.5 6927,-1131.5 6921,-1131.5"/>
-<text text-anchor="start" x="6855.5" y="-1116.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6845" y="-1101.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="6844" y="-1086.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="6855.5" y="-1071.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 273&#45;&gt;277 -->
-<g id="edge277" class="edge"><title>273&#45;&gt;277</title>
-<path fill="none" stroke="black" d="M6845.97,-1174.91C6851.53,-1163.87 6857.57,-1151.9 6863.18,-1140.77"/>
-<polygon fill="black" stroke="black" points="6866.4,-1142.17 6867.77,-1131.67 6860.15,-1139.02 6866.4,-1142.17"/>
-</g>
-<!-- 275 -->
-<g id="node276" class="node"><title>275</title>
-<path fill="#399de5" stroke="black" d="M6746,-1012.5C6746,-1012.5 6665,-1012.5 6665,-1012.5 6659,-1012.5 6653,-1006.5 6653,-1000.5 6653,-1000.5 6653,-956.5 6653,-956.5 6653,-950.5 6659,-944.5 6665,-944.5 6665,-944.5 6746,-944.5 6746,-944.5 6752,-944.5 6758,-950.5 6758,-956.5 6758,-956.5 6758,-1000.5 6758,-1000.5 6758,-1006.5 6752,-1012.5 6746,-1012.5"/>
-<text text-anchor="start" x="6676.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6662" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 11</text>
-<text text-anchor="start" x="6661" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 11]</text>
-<text text-anchor="start" x="6676.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 274&#45;&gt;275 -->
-<g id="edge275" class="edge"><title>274&#45;&gt;275</title>
-<path fill="none" stroke="black" d="M6744.68,-1055.91C6739.02,-1044.87 6732.88,-1032.9 6727.18,-1021.77"/>
-<polygon fill="black" stroke="black" points="6730.19,-1019.97 6722.51,-1012.67 6723.96,-1023.16 6730.19,-1019.97"/>
-</g>
-<!-- 276 -->
-<g id="node277" class="node"><title>276</title>
-<path fill="#e58139" stroke="black" d="M6861,-1012.5C6861,-1012.5 6788,-1012.5 6788,-1012.5 6782,-1012.5 6776,-1006.5 6776,-1000.5 6776,-1000.5 6776,-956.5 6776,-956.5 6776,-950.5 6782,-944.5 6788,-944.5 6788,-944.5 6861,-944.5 6861,-944.5 6867,-944.5 6873,-950.5 6873,-956.5 6873,-956.5 6873,-1000.5 6873,-1000.5 6873,-1006.5 6867,-1012.5 6861,-1012.5"/>
-<text text-anchor="start" x="6795.5" y="-997.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6785" y="-982.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1</text>
-<text text-anchor="start" x="6784" y="-967.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 0]</text>
-<text text-anchor="start" x="6795.5" y="-952.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 274&#45;&gt;276 -->
-<g id="edge276" class="edge"><title>274&#45;&gt;276</title>
-<path fill="none" stroke="black" d="M6785.97,-1055.91C6791.53,-1044.87 6797.57,-1032.9 6803.18,-1021.77"/>
-<polygon fill="black" stroke="black" points="6806.4,-1023.17 6807.77,-1012.67 6800.15,-1020.02 6806.4,-1023.17"/>
-</g>
-<!-- 281 -->
-<g id="node282" class="node"><title>281</title>
-<path fill="#e58139" stroke="black" d="M6200,-1726.5C6200,-1726.5 6119,-1726.5 6119,-1726.5 6113,-1726.5 6107,-1720.5 6107,-1714.5 6107,-1714.5 6107,-1670.5 6107,-1670.5 6107,-1664.5 6113,-1658.5 6119,-1658.5 6119,-1658.5 6200,-1658.5 6200,-1658.5 6206,-1658.5 6212,-1664.5 6212,-1670.5 6212,-1670.5 6212,-1714.5 6212,-1714.5 6212,-1720.5 6206,-1726.5 6200,-1726.5"/>
-<text text-anchor="start" x="6130.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6116" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 27</text>
-<text text-anchor="start" x="6115" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [27, 0]</text>
-<text text-anchor="start" x="6130.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 280&#45;&gt;281 -->
-<g id="edge281" class="edge"><title>280&#45;&gt;281</title>
-<path fill="none" stroke="black" d="M6159.5,-1769.91C6159.5,-1759.2 6159.5,-1747.62 6159.5,-1736.78"/>
-<polygon fill="black" stroke="black" points="6163,-1736.67 6159.5,-1726.67 6156,-1736.67 6163,-1736.67"/>
-</g>
-<!-- 282 -->
-<g id="node283" class="node"><title>282</title>
-<path fill="#399de5" stroke="black" d="M6331,-1726.5C6331,-1726.5 6242,-1726.5 6242,-1726.5 6236,-1726.5 6230,-1720.5 6230,-1714.5 6230,-1714.5 6230,-1670.5 6230,-1670.5 6230,-1664.5 6236,-1658.5 6242,-1658.5 6242,-1658.5 6331,-1658.5 6331,-1658.5 6337,-1658.5 6343,-1664.5 6343,-1670.5 6343,-1670.5 6343,-1714.5 6343,-1714.5 6343,-1720.5 6337,-1726.5 6331,-1726.5"/>
-<text text-anchor="start" x="6257.5" y="-1711.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="6239" y="-1696.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 356</text>
-<text text-anchor="start" x="6238" y="-1681.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 356]</text>
-<text text-anchor="start" x="6257.5" y="-1666.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 280&#45;&gt;282 -->
-<g id="edge282" class="edge"><title>280&#45;&gt;282</title>
-<path fill="none" stroke="black" d="M6203.56,-1769.91C6216.38,-1758.1 6230.36,-1745.22 6243.14,-1733.45"/>
-<polygon fill="black" stroke="black" points="6245.52,-1736.02 6250.5,-1726.67 6240.77,-1730.87 6245.52,-1736.02"/>
-</g>
-</g>
-</svg>
diff --git a/experiment/decision tree classifier/output/entropy decision tree.png b/experiment/decision tree classifier/output/entropy decision tree.png
deleted file mode 100644
index 96c94b7678c4dff2c9b2ac7c2a5bf4a4b54209ee..0000000000000000000000000000000000000000
Binary files a/experiment/decision tree classifier/output/entropy decision tree.png and /dev/null differ
diff --git a/experiment/decision tree classifier/output/roc.png b/experiment/decision tree classifier/output/roc.png
new file mode 100644
index 0000000000000000000000000000000000000000..56e0d7c28ba9e135f6a7cf4542402fda8c27454d
Binary files /dev/null and b/experiment/decision tree classifier/output/roc.png differ
diff --git a/experiment/random forest/RandomForest.ipynb b/experiment/random forest/RandomForest.ipynb
index 35b0dbbf2afcaa327dd0acef0440916323b11476..c51a38157cab5a34f2bf08451c2f1ef45861453a 100644
--- a/experiment/random forest/RandomForest.ipynb	
+++ b/experiment/random forest/RandomForest.ipynb	
@@ -2,7 +2,7 @@
  "cells": [
   {
    "cell_type": "code",
-   "execution_count": 1,
+   "execution_count": 33,
    "metadata": {},
    "outputs": [
     {
@@ -60,9 +60,9 @@
     }
    ],
    "source": [
-    "from sklearn import tree\n",
     "from sklearn.model_selection import train_test_split\n",
-    "import numpy as np \n",
+    "import numpy as np\n",
+    "import matplotlib.pyplot as plt\n",
     "import pandas as pd\n",
     "\n",
     "\n",
@@ -81,60 +81,60 @@
      "output_type": "stream",
      "text": [
       "<class 'pandas.core.frame.DataFrame'>\n",
-      "RangeIndex: 20153 entries, 0 to 20152\n",
+      "RangeIndex: 17634 entries, 0 to 17633\n",
       "Data columns (total 38 columns):\n",
       " #   Column                       Non-Null Count  Dtype  \n",
       "---  ------                       --------------  -----  \n",
-      " 0   duration                     20153 non-null  int64  \n",
-      " 1   protocol_type                20153 non-null  int64  \n",
-      " 2   service                      20153 non-null  int64  \n",
-      " 3   flag                         20153 non-null  int64  \n",
-      " 4   src_bytes                    20153 non-null  int64  \n",
-      " 5   dst_bytes                    20153 non-null  int64  \n",
-      " 6   land                         20153 non-null  int64  \n",
-      " 7   wrong_fragment               20153 non-null  int64  \n",
-      " 8   hot                          20153 non-null  int64  \n",
-      " 9   num_failed_logins            20153 non-null  int64  \n",
-      " 10  logged_in                    20153 non-null  int64  \n",
-      " 11  num_compromised              20153 non-null  int64  \n",
-      " 12  root_shell                   20153 non-null  int64  \n",
-      " 13  su_attempted                 20153 non-null  int64  \n",
-      " 14  num_root                     20153 non-null  int64  \n",
-      " 15  num_file_creations           20153 non-null  int64  \n",
-      " 16  num_shells                   20153 non-null  int64  \n",
-      " 17  num_access_files             20153 non-null  int64  \n",
-      " 18  is_guest_login               20153 non-null  int64  \n",
-      " 19  count                        20153 non-null  int64  \n",
-      " 20  srv_count                    20153 non-null  int64  \n",
-      " 21  serror_rate                  20153 non-null  float64\n",
-      " 22  srv_serror_rate              20153 non-null  float64\n",
-      " 23  rerror_rate                  20153 non-null  float64\n",
-      " 24  srv_rerror_rate              20153 non-null  float64\n",
-      " 25  same_srv_rate                20153 non-null  float64\n",
-      " 26  diff_srv_rate                20153 non-null  float64\n",
-      " 27  srv_diff_host_rate           20153 non-null  float64\n",
-      " 28  dst_host_count               20153 non-null  int64  \n",
-      " 29  dst_host_srv_count           20153 non-null  int64  \n",
-      " 30  dst_host_same_srv_rate       20153 non-null  float64\n",
-      " 31  dst_host_diff_srv_rate       20153 non-null  float64\n",
-      " 32  dst_host_same_src_port_rate  20153 non-null  float64\n",
-      " 33  dst_host_srv_diff_host_rate  20153 non-null  float64\n",
-      " 34  dst_host_serror_rate         20153 non-null  float64\n",
-      " 35  dst_host_srv_serror_rate     20153 non-null  float64\n",
-      " 36  dst_host_rerror_rate         20153 non-null  float64\n",
-      " 37  dst_host_srv_rerror_rate     20153 non-null  float64\n",
+      " 0   duration                     17634 non-null  int64  \n",
+      " 1   protocol_type                17634 non-null  int64  \n",
+      " 2   service                      17634 non-null  int64  \n",
+      " 3   flag                         17634 non-null  int64  \n",
+      " 4   src_bytes                    17634 non-null  int64  \n",
+      " 5   dst_bytes                    17634 non-null  int64  \n",
+      " 6   land                         17634 non-null  int64  \n",
+      " 7   wrong_fragment               17634 non-null  int64  \n",
+      " 8   hot                          17634 non-null  int64  \n",
+      " 9   num_failed_logins            17634 non-null  int64  \n",
+      " 10  logged_in                    17634 non-null  int64  \n",
+      " 11  num_compromised              17634 non-null  int64  \n",
+      " 12  root_shell                   17634 non-null  int64  \n",
+      " 13  su_attempted                 17634 non-null  int64  \n",
+      " 14  num_root                     17634 non-null  int64  \n",
+      " 15  num_file_creations           17634 non-null  int64  \n",
+      " 16  num_shells                   17634 non-null  int64  \n",
+      " 17  num_access_files             17634 non-null  int64  \n",
+      " 18  is_guest_login               17634 non-null  int64  \n",
+      " 19  count                        17634 non-null  int64  \n",
+      " 20  srv_count                    17634 non-null  int64  \n",
+      " 21  serror_rate                  17634 non-null  float64\n",
+      " 22  srv_serror_rate              17634 non-null  float64\n",
+      " 23  rerror_rate                  17634 non-null  float64\n",
+      " 24  srv_rerror_rate              17634 non-null  float64\n",
+      " 25  same_srv_rate                17634 non-null  float64\n",
+      " 26  diff_srv_rate                17634 non-null  float64\n",
+      " 27  srv_diff_host_rate           17634 non-null  float64\n",
+      " 28  dst_host_count               17634 non-null  int64  \n",
+      " 29  dst_host_srv_count           17634 non-null  int64  \n",
+      " 30  dst_host_same_srv_rate       17634 non-null  float64\n",
+      " 31  dst_host_diff_srv_rate       17634 non-null  float64\n",
+      " 32  dst_host_same_src_port_rate  17634 non-null  float64\n",
+      " 33  dst_host_srv_diff_host_rate  17634 non-null  float64\n",
+      " 34  dst_host_serror_rate         17634 non-null  float64\n",
+      " 35  dst_host_srv_serror_rate     17634 non-null  float64\n",
+      " 36  dst_host_rerror_rate         17634 non-null  float64\n",
+      " 37  dst_host_srv_rerror_rate     17634 non-null  float64\n",
       "dtypes: float64(15), int64(23)\n",
-      "memory usage: 5.8 MB\n"
+      "memory usage: 5.1 MB\n"
      ]
     }
    ],
    "source": [
     "X, y = df.drop(columns=[\"class\", \"index_num\"]), df['class']\n",
-    "X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.2, shuffle=True, random_state=42)\n",
+    "X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.3, shuffle=True, random_state=0)\n",
     "X_train.reset_index(drop=True, inplace=True)\n",
     "X_test.reset_index(drop=True, inplace=True)\n",
     "y_train.reset_index(drop=True, inplace=True)\n",
-    "X_test.reset_index(drop=True, inplace=True)\n",
+    "y_test.reset_index(drop=True, inplace=True)\n",
     "\n",
     "X_train.info()"
    ]
@@ -148,10 +148,10 @@
      "name": "stdout",
      "output_type": "stream",
      "text": [
-      "Shape of X_train: (20153, 38)\n",
-      "Shape of X_test: (5039, 38)\n",
-      "Shape of y_train: (20153,)\n",
-      "Shape of y_test: (5039,)\n"
+      "Shape of X_train: (17634, 38)\n",
+      "Shape of X_test: (7558, 38)\n",
+      "Shape of y_train: (17634,)\n",
+      "Shape of y_test: (7558,)\n"
      ]
     }
    ],
@@ -162,94 +162,192 @@
   },
   {
    "cell_type": "code",
-   "execution_count": 7,
+   "execution_count": 42,
+   "metadata": {},
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "depth: 1  0.9022228102672665\n",
+      "depth: 2  0.9511775602011114\n",
+      "depth: 3  0.9735379730087325\n",
+      "depth: 4  0.9785657581370732\n",
+      "depth: 5  0.9842550939401958\n",
+      "depth: 6  0.9899444297433183\n",
+      "depth: 7  0.9928552527123577\n",
+      "depth: 8  0.9943106641968775\n",
+      "depth: 9  0.9960306959513099\n",
+      "depth: 10  0.9966922466260916\n",
+      "depth: 11  0.997221487165917\n",
+      "depth: 12  0.9973537973008733\n",
+      "depth: 13  0.997221487165917\n",
+      "depth: 14  0.9970891770309606\n",
+      "depth: 15  0.997221487165917\n",
+      "depth: 16  0.9970891770309606\n",
+      "depth: 17  0.997221487165917\n",
+      "depth: 18  0.9969568668960043\n",
+      "depth: 19  0.9970891770309606\n",
+      "depth: 20  0.9969568668960043\n"
+     ]
+    }
+   ],
+   "source": [
+    "from sklearn.ensemble import RandomForestClassifier\n",
+    "from sklearn.metrics import accuracy_score\n",
+    "\n",
+    "clf_vector = list()\n",
+    "\n",
+    "for m_depth_iter in range(1, 21):\n",
+    "    clf_item = RandomForestClassifier(n_estimators=100, max_depth=m_depth_iter, random_state=0, criterion='entropy')\n",
+    "    clf_item.fit(X_train, y_train)\n",
+    "    clf_vector.append(clf_item)\n",
+    "\n",
+    "plot_vector = []\n",
+    "for clf_item in clf_vector:\n",
+    "    clf_y_pred = clf_item.predict(X_test)\n",
+    "\n",
+    "    accu = accuracy_score(y_test, clf_y_pred)\n",
+    "    print(f\"depth: {clf_item.max_depth}  {accu}\")\n",
+    "    plot_vector.append([clf_item.max_depth, accu])"
+   ]
+  },
+  {
+   "cell_type": "code",
+   "execution_count": 40,
    "metadata": {},
    "outputs": [
     {
      "data": {
+      "image/png": "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",
       "text/plain": [
-       "RandomForestClassifier(max_depth=5, n_estimators=20, random_state=0)"
+       "<Figure size 432x288 with 1 Axes>"
       ]
      },
-     "execution_count": 7,
-     "metadata": {},
-     "output_type": "execute_result"
+     "metadata": {
+      "needs_background": "light"
+     },
+     "output_type": "display_data"
     }
    ],
    "source": [
-    "from sklearn.ensemble import RandomForestClassifier\n",
-    "\n",
-    "clf = RandomForestClassifier(n_estimators=20, max_depth=5,random_state=0)\n",
-    "clf.fit(X_train, y_train)"
+    "plot_vec = pd.DataFrame(plot_vector)\n",
+    "depth_x = plot_vec[:][0]\n",
+    "plt.xlabel('Max Depth')\n",
+    "plt.title('Random Forest Max Depth Metric')\n",
+    "plt.plot(depth_x, plot_vec[:][1], 'r', label='accuracy')\n",
+    "plt.grid(True)\n",
+    "plt.legend()\n",
+    "plt.savefig('./output/random forest max depth.png')\n",
+    "plt.show()"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": null,
+   "execution_count": 44,
    "metadata": {},
-   "outputs": [],
+   "outputs": [
+    {
+     "name": "stdout",
+     "output_type": "stream",
+     "text": [
+      "accuracy:   0.997221487165917\n",
+      "precision:  0.9967964514539182\n",
+      "racall:     0.998026153466568\n",
+      "f1 score:   0.9974109234373073\n",
+      "error rate: 0.0027785128340830907\n"
+     ]
+    }
+   ],
    "source": [
-    "from IPython import display\n",
-    "import graphviz\n",
-    "import os\n",
+    "from sklearn.metrics import confusion_matrix\n",
+    "clf = clf_vector[14]\n",
+    "clf_y_pred = clf.predict(X_test)\n",
     "\n",
-    "os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
-    "# 시각화\n",
-    "dot_data1 = tree.export_graphviz(clf.estimators_[5],\n",
-    "                               out_file = None,\n",
-    "                               feature_names = X_train.columns,\n",
-    "                               class_names = [\"0\", \"1\"],\n",
-    "                               filled = True,\n",
-    "                               rounded = True,\n",
-    "                               special_characters = True)\n",
-    "graph = graphviz.Source(dot_data1)\n",
-    "graph"
+    "conf_mat = confusion_matrix(y_test, clf_y_pred)\n",
+    "accuracy = (conf_mat[0][0]+conf_mat[1][1])/conf_mat.sum()\n",
+    "precision = conf_mat[0][0]/(conf_mat[0][0]+conf_mat[1][0])\n",
+    "recall = conf_mat[0][0]/(conf_mat[0][0]+conf_mat[0][1])\n",
+    "f1 = 2*(precision*recall)/(precision+recall)\n",
+    "error_rate = (conf_mat[0][1]+conf_mat[1][0])/conf_mat.sum()\n",
+    "\n",
+    "\n",
+    "\n",
+    "print(f'accuracy:   {accuracy}')\n",
+    "print(f'precision:  {precision}')\n",
+    "print(f'racall:     {recall}')\n",
+    "print(f'f1 score:   {f1}')\n",
+    "print(f'error rate: {error_rate}')"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 14,
+   "execution_count": 9,
    "metadata": {},
    "outputs": [
     {
      "data": {
+      "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\r\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\r\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\r\n -->\r\n<!-- Title: Tree Pages: 1 -->\r\n<svg width=\"8663pt\" height=\"1742pt\"\r\n viewBox=\"0.00 0.00 8663.00 1742.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\r\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1738)\">\r\n<title>Tree</title>\r\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1738 8659,-1738 8659,4 -4,4\"/>\r\n<!-- 0 -->\r\n<g id=\"node1\" class=\"node\"><title>0</title>\r\n<path fill=\"#fbebdf\" stroke=\"black\" d=\"M4403,-1734C4403,-1734 4281,-1734 4281,-1734 4275,-1734 4269,-1728 4269,-1722 4269,-1722 4269,-1663 4269,-1663 4269,-1657 4275,-1651 4281,-1651 4281,-1651 4403,-1651 4403,-1651 4409,-1651 4415,-1657 4415,-1663 4415,-1663 4415,-1722 4415,-1722 4415,-1728 4409,-1734 4403,-1734\"/>\r\n<text text-anchor=\"start\" x=\"4289\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\r\n<text text-anchor=\"start\" x=\"4292\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"4286\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11238</text>\r\n<text text-anchor=\"start\" x=\"4277\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9597, 8037]</text>\r\n<text text-anchor=\"start\" x=\"4295\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 1 -->\r\n<g id=\"node2\" class=\"node\"><title>1</title>\r\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M3204,-1615C3204,-1615 3062,-1615 3062,-1615 3056,-1615 3050,-1609 3050,-1603 3050,-1603 3050,-1544 3050,-1544 3050,-1538 3056,-1532 3062,-1532 3062,-1532 3204,-1532 3204,-1532 3210,-1532 3216,-1538 3216,-1544 3216,-1544 3216,-1603 3216,-1603 3216,-1609 3210,-1615 3204,-1615\"/>\r\n<text text-anchor=\"start\" x=\"3058\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 243.0</text>\r\n<text text-anchor=\"start\" x=\"3083\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.399</text>\r\n<text text-anchor=\"start\" x=\"3081.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5132</text>\r\n<text text-anchor=\"start\" x=\"3072\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [627, 7309]</text>\r\n<text text-anchor=\"start\" x=\"3078\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 0&#45;&gt;1 -->\r\n<g id=\"edge1\" class=\"edge\"><title>0&#45;&gt;1</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4268.64,-1684.4C4059.19,-1664.13 3458.56,-1606.01 3226.28,-1583.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3226.46,-1580.03 3216.17,-1582.55 3225.78,-1587 3226.46,-1580.03\"/>\r\n<text text-anchor=\"middle\" x=\"3232.06\" y=\"-1598.15\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\r\n</g>\r\n<!-- 110 -->\r\n<g id=\"node111\" class=\"node\"><title>110</title>\r\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M5649,-1615C5649,-1615 5535,-1615 5535,-1615 5529,-1615 5523,-1609 5523,-1603 5523,-1603 5523,-1544 5523,-1544 5523,-1538 5529,-1532 5535,-1532 5535,-1532 5649,-1532 5649,-1532 5655,-1532 5661,-1538 5661,-1544 5661,-1544 5661,-1603 5661,-1603 5661,-1609 5655,-1615 5649,-1615\"/>\r\n<text text-anchor=\"start\" x=\"5543\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"5542\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.385</text>\r\n<text text-anchor=\"start\" x=\"5540.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6106</text>\r\n<text text-anchor=\"start\" x=\"5531\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8970, 728]</text>\r\n<text text-anchor=\"start\" x=\"5545\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 0&#45;&gt;110 -->\r\n<g id=\"edge110\" class=\"edge\"><title>0&#45;&gt;110</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4415.07,-1684.66C4634.28,-1664.14 5285.23,-1603.21 5512.57,-1581.93\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5513.12,-1585.4 5522.75,-1580.98 5512.47,-1578.43 5513.12,-1585.4\"/>\r\n<text text-anchor=\"middle\" x=\"5506.8\" y=\"-1596.53\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\r\n</g>\r\n<!-- 2 -->\r\n<g id=\"node3\" class=\"node\"><title>2</title>\r\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M2507.5,-1496C2507.5,-1496 2392.5,-1496 2392.5,-1496 2386.5,-1496 2380.5,-1490 2380.5,-1484 2380.5,-1484 2380.5,-1425 2380.5,-1425 2380.5,-1419 2386.5,-1413 2392.5,-1413 2392.5,-1413 2507.5,-1413 2507.5,-1413 2513.5,-1413 2519.5,-1419 2519.5,-1425 2519.5,-1425 2519.5,-1484 2519.5,-1484 2519.5,-1490 2513.5,-1496 2507.5,-1496\"/>\r\n<text text-anchor=\"start\" x=\"2388.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"2400\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\r\n<text text-anchor=\"start\" x=\"2398.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1043</text>\r\n<text text-anchor=\"start\" x=\"2389\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 1054]</text>\r\n<text text-anchor=\"start\" x=\"2395\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1&#45;&gt;2 -->\r\n<g id=\"edge2\" class=\"edge\"><title>1&#45;&gt;2</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3049.93,-1558.27C2917.4,-1535.57 2659.82,-1491.44 2529.55,-1469.13\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2530.07,-1465.67 2519.63,-1467.43 2528.89,-1472.57 2530.07,-1465.67\"/>\r\n</g>\r\n<!-- 67 -->\r\n<g id=\"node68\" class=\"node\"><title>67</title>\r\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M3235,-1496C3235,-1496 3031,-1496 3031,-1496 3025,-1496 3019,-1490 3019,-1484 3019,-1484 3019,-1425 3019,-1425 3019,-1419 3025,-1413 3031,-1413 3031,-1413 3235,-1413 3235,-1413 3241,-1413 3247,-1419 3247,-1425 3247,-1425 3247,-1484 3247,-1484 3247,-1490 3241,-1496 3235,-1496\"/>\r\n<text text-anchor=\"start\" x=\"3027\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.955</text>\r\n<text text-anchor=\"start\" x=\"3083\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.093</text>\r\n<text text-anchor=\"start\" x=\"3081.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4089</text>\r\n<text text-anchor=\"start\" x=\"3076\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 6255]</text>\r\n<text text-anchor=\"start\" x=\"3078\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1&#45;&gt;67 -->\r\n<g id=\"edge67\" class=\"edge\"><title>1&#45;&gt;67</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3133,-1531.91C3133,-1523.65 3133,-1514.86 3133,-1506.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3136.5,-1506.02 3133,-1496.02 3129.5,-1506.02 3136.5,-1506.02\"/>\r\n</g>\r\n<!-- 3 -->\r\n<g id=\"node4\" class=\"node\"><title>3</title>\r\n<path fill=\"#fcf2ea\" stroke=\"black\" d=\"M1898,-1377C1898,-1377 1696,-1377 1696,-1377 1690,-1377 1684,-1371 1684,-1365 1684,-1365 1684,-1306 1684,-1306 1684,-1300 1690,-1294 1696,-1294 1696,-1294 1898,-1294 1898,-1294 1904,-1294 1910,-1300 1910,-1306 1910,-1306 1910,-1365 1910,-1365 1910,-1371 1904,-1377 1898,-1377\"/>\r\n<text text-anchor=\"start\" x=\"1692\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.625</text>\r\n<text text-anchor=\"start\" x=\"1747\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"1749.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 674</text>\r\n<text text-anchor=\"start\" x=\"1740\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 493]</text>\r\n<text text-anchor=\"start\" x=\"1750\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 2&#45;&gt;3 -->\r\n<g id=\"edge3\" class=\"edge\"><title>2&#45;&gt;3</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2380.43,-1441.03C2270.78,-1421.39 2056.28,-1382.96 1920.15,-1358.56\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1920.54,-1355.08 1910.08,-1356.76 1919.3,-1361.97 1920.54,-1355.08\"/>\r\n</g>\r\n<!-- 66 -->\r\n<g id=\"node67\" class=\"node\"><title>66</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2501,-1369.5C2501,-1369.5 2399,-1369.5 2399,-1369.5 2393,-1369.5 2387,-1363.5 2387,-1357.5 2387,-1357.5 2387,-1313.5 2387,-1313.5 2387,-1307.5 2393,-1301.5 2399,-1301.5 2399,-1301.5 2501,-1301.5 2501,-1301.5 2507,-1301.5 2513,-1307.5 2513,-1313.5 2513,-1313.5 2513,-1357.5 2513,-1357.5 2513,-1363.5 2507,-1369.5 2501,-1369.5\"/>\r\n<text text-anchor=\"start\" x=\"2408\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2402.5\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 369</text>\r\n<text text-anchor=\"start\" x=\"2401.5\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 561]</text>\r\n<text text-anchor=\"start\" x=\"2395\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 2&#45;&gt;66 -->\r\n<g id=\"edge66\" class=\"edge\"><title>2&#45;&gt;66</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2450,-1412.91C2450,-1402.2 2450,-1390.62 2450,-1379.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2453.5,-1379.67 2450,-1369.67 2446.5,-1379.67 2453.5,-1379.67\"/>\r\n</g>\r\n<!-- 4 -->\r\n<g id=\"node5\" class=\"node\"><title>4</title>\r\n<path fill=\"#74baed\" stroke=\"black\" d=\"M1427.5,-1258C1427.5,-1258 1258.5,-1258 1258.5,-1258 1252.5,-1258 1246.5,-1252 1246.5,-1246 1246.5,-1246 1246.5,-1187 1246.5,-1187 1246.5,-1181 1252.5,-1175 1258.5,-1175 1258.5,-1175 1427.5,-1175 1427.5,-1175 1433.5,-1175 1439.5,-1181 1439.5,-1187 1439.5,-1187 1439.5,-1246 1439.5,-1246 1439.5,-1252 1433.5,-1258 1427.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1254.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.07</text>\r\n<text text-anchor=\"start\" x=\"1293\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.779</text>\r\n<text text-anchor=\"start\" x=\"1295.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 393</text>\r\n<text text-anchor=\"start\" x=\"1286\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 467]</text>\r\n<text text-anchor=\"start\" x=\"1288\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 3&#45;&gt;4 -->\r\n<g id=\"edge4\" class=\"edge\"><title>3&#45;&gt;4</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1683.9,-1305.35C1612.16,-1286.87 1519.94,-1263.1 1449.51,-1244.95\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1450.28,-1241.53 1439.72,-1242.43 1448.53,-1248.31 1450.28,-1241.53\"/>\r\n</g>\r\n<!-- 41 -->\r\n<g id=\"node42\" class=\"node\"><title>41</title>\r\n<path fill=\"#e78945\" stroke=\"black\" d=\"M1908,-1258C1908,-1258 1686,-1258 1686,-1258 1680,-1258 1674,-1252 1674,-1246 1674,-1246 1674,-1187 1674,-1187 1674,-1181 1680,-1175 1686,-1175 1686,-1175 1908,-1175 1908,-1175 1914,-1175 1920,-1181 1920,-1187 1920,-1187 1920,-1246 1920,-1246 1920,-1252 1914,-1258 1908,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1682\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"1747\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.325</text>\r\n<text text-anchor=\"start\" x=\"1749.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 281</text>\r\n<text text-anchor=\"start\" x=\"1744\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [412, 26]</text>\r\n<text text-anchor=\"start\" x=\"1750\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 3&#45;&gt;41 -->\r\n<g id=\"edge41\" class=\"edge\"><title>3&#45;&gt;41</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1797,-1293.91C1797,-1285.65 1797,-1276.86 1797,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1800.5,-1268.02 1797,-1258.02 1793.5,-1268.02 1800.5,-1268.02\"/>\r\n</g>\r\n<!-- 5 -->\r\n<g id=\"node6\" class=\"node\"><title>5</title>\r\n<path fill=\"#cbe5f8\" stroke=\"black\" d=\"M1046,-1139C1046,-1139 880,-1139 880,-1139 874,-1139 868,-1133 868,-1127 868,-1127 868,-1068 868,-1068 868,-1062 874,-1056 880,-1056 880,-1056 1046,-1056 1046,-1056 1052,-1056 1058,-1062 1058,-1068 1058,-1068 1058,-1127 1058,-1127 1058,-1133 1052,-1139 1046,-1139\"/>\r\n<text text-anchor=\"start\" x=\"876\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.09</text>\r\n<text text-anchor=\"start\" x=\"913\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.983</text>\r\n<text text-anchor=\"start\" x=\"915.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 215</text>\r\n<text text-anchor=\"start\" x=\"906\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 190]</text>\r\n<text text-anchor=\"start\" x=\"908\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4&#45;&gt;5 -->\r\n<g id=\"edge5\" class=\"edge\"><title>4&#45;&gt;5</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1246.13,-1185.67C1191.67,-1168.91 1123.66,-1147.97 1067.95,-1130.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1068.64,-1127.36 1058.05,-1127.77 1066.58,-1134.05 1068.64,-1127.36\"/>\r\n</g>\r\n<!-- 40 -->\r\n<g id=\"node41\" class=\"node\"><title>40</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1394,-1131.5C1394,-1131.5 1292,-1131.5 1292,-1131.5 1286,-1131.5 1280,-1125.5 1280,-1119.5 1280,-1119.5 1280,-1075.5 1280,-1075.5 1280,-1069.5 1286,-1063.5 1292,-1063.5 1292,-1063.5 1394,-1063.5 1394,-1063.5 1400,-1063.5 1406,-1069.5 1406,-1075.5 1406,-1075.5 1406,-1119.5 1406,-1119.5 1406,-1125.5 1400,-1131.5 1394,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"1301\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1295.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 178</text>\r\n<text text-anchor=\"start\" x=\"1294.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 277]</text>\r\n<text text-anchor=\"start\" x=\"1288\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4&#45;&gt;40 -->\r\n<g id=\"edge40\" class=\"edge\"><title>4&#45;&gt;40</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1343,-1174.91C1343,-1164.2 1343,-1152.62 1343,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1346.5,-1141.67 1343,-1131.67 1339.5,-1141.67 1346.5,-1141.67\"/>\r\n</g>\r\n<!-- 6 -->\r\n<g id=\"node7\" class=\"node\"><title>6</title>\r\n<path fill=\"#eca16c\" stroke=\"black\" d=\"M749,-1020C749,-1020 651,-1020 651,-1020 645,-1020 639,-1014 639,-1008 639,-1008 639,-949 639,-949 639,-943 645,-937 651,-937 651,-937 749,-937 749,-937 755,-937 761,-943 761,-949 761,-949 761,-1008 761,-1008 761,-1014 755,-1020 749,-1020\"/>\r\n<text text-anchor=\"start\" x=\"665\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.729</text>\r\n<text text-anchor=\"start\" x=\"652.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 107</text>\r\n<text text-anchor=\"start\" x=\"647\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 33]</text>\r\n<text text-anchor=\"start\" x=\"653\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 5&#45;&gt;6 -->\r\n<g id=\"edge6\" class=\"edge\"><title>5&#45;&gt;6</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M871.753,-1055.91C838.678,-1041.19 801.843,-1024.81 770.793,-1010.99\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"771.913,-1007.66 761.353,-1006.79 769.067,-1014.06 771.913,-1007.66\"/>\r\n</g>\r\n<!-- 23 -->\r\n<g id=\"node24\" class=\"node\"><title>23</title>\r\n<path fill=\"#47a4e7\" stroke=\"black\" d=\"M1052.5,-1020C1052.5,-1020 873.5,-1020 873.5,-1020 867.5,-1020 861.5,-1014 861.5,-1008 861.5,-1008 861.5,-949 861.5,-949 861.5,-943 867.5,-937 873.5,-937 873.5,-937 1052.5,-937 1052.5,-937 1058.5,-937 1064.5,-943 1064.5,-949 1064.5,-949 1064.5,-1008 1064.5,-1008 1064.5,-1014 1058.5,-1020 1052.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"869.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\r\n<text text-anchor=\"start\" x=\"913\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.349</text>\r\n<text text-anchor=\"start\" x=\"915.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 108</text>\r\n<text text-anchor=\"start\" x=\"910\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 157]</text>\r\n<text text-anchor=\"start\" x=\"908\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 5&#45;&gt;23 -->\r\n<g id=\"edge23\" class=\"edge\"><title>5&#45;&gt;23</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M963,-1055.91C963,-1047.65 963,-1038.86 963,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"966.5,-1030.02 963,-1020.02 959.5,-1030.02 966.5,-1030.02\"/>\r\n</g>\r\n<!-- 7 -->\r\n<g id=\"node8\" class=\"node\"><title>7</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M549,-901C549,-901 397,-901 397,-901 391,-901 385,-895 385,-889 385,-889 385,-830 385,-830 385,-824 391,-818 397,-818 397,-818 549,-818 549,-818 555,-818 561,-824 561,-830 561,-830 561,-889 561,-889 561,-895 555,-901 549,-901\"/>\r\n<text text-anchor=\"start\" x=\"393\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"423\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.231</text>\r\n<text text-anchor=\"start\" x=\"429.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"424.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [128, 5]</text>\r\n<text text-anchor=\"start\" x=\"426\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 6&#45;&gt;7 -->\r\n<g id=\"edge7\" class=\"edge\"><title>6&#45;&gt;7</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M638.87,-945.992C614.906,-933.641 586.954,-919.234 560.901,-905.806\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"562.266,-902.572 551.774,-901.102 559.059,-908.794 562.266,-902.572\"/>\r\n</g>\r\n<!-- 18 -->\r\n<g id=\"node19\" class=\"node\"><title>18</title>\r\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M769.5,-901C769.5,-901 630.5,-901 630.5,-901 624.5,-901 618.5,-895 618.5,-889 618.5,-889 618.5,-830 618.5,-830 618.5,-824 624.5,-818 630.5,-818 630.5,-818 769.5,-818 769.5,-818 775.5,-818 781.5,-824 781.5,-830 781.5,-830 781.5,-889 781.5,-889 781.5,-895 775.5,-901 769.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"626.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.185</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.216</text>\r\n<text text-anchor=\"start\" x=\"656.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"655.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 28]</text>\r\n<text text-anchor=\"start\" x=\"645\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 6&#45;&gt;18 -->\r\n<g id=\"edge18\" class=\"edge\"><title>6&#45;&gt;18</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M700,-936.907C700,-928.649 700,-919.864 700,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"703.5,-911.021 700,-901.021 696.5,-911.021 703.5,-911.021\"/>\r\n</g>\r\n<!-- 8 -->\r\n<g id=\"node9\" class=\"node\"><title>8</title>\r\n<path fill=\"#f8dbc6\" stroke=\"black\" d=\"M386.5,-782C386.5,-782 209.5,-782 209.5,-782 203.5,-782 197.5,-776 197.5,-770 197.5,-770 197.5,-711 197.5,-711 197.5,-705 203.5,-699 209.5,-699 209.5,-699 386.5,-699 386.5,-699 392.5,-699 398.5,-705 398.5,-711 398.5,-711 398.5,-770 398.5,-770 398.5,-776 392.5,-782 386.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"205.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"252\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.98</text>\r\n<text text-anchor=\"start\" x=\"258.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"257.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 5]</text>\r\n<text text-anchor=\"start\" x=\"251\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7&#45;&gt;8 -->\r\n<g id=\"edge8\" class=\"edge\"><title>7&#45;&gt;8</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M412.285,-817.907C397.761,-808.197 382.147,-797.758 367.269,-787.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"368.867,-784.669 358.608,-782.021 364.976,-790.488 368.867,-784.669\"/>\r\n</g>\r\n<!-- 17 -->\r\n<g id=\"node18\" class=\"node\"><title>17</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M517.5,-774.5C517.5,-774.5 428.5,-774.5 428.5,-774.5 422.5,-774.5 416.5,-768.5 416.5,-762.5 416.5,-762.5 416.5,-718.5 416.5,-718.5 416.5,-712.5 422.5,-706.5 428.5,-706.5 428.5,-706.5 517.5,-706.5 517.5,-706.5 523.5,-706.5 529.5,-712.5 529.5,-718.5 529.5,-718.5 529.5,-762.5 529.5,-762.5 529.5,-768.5 523.5,-774.5 517.5,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"431\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"429.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 77</text>\r\n<text text-anchor=\"start\" x=\"424.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [121, 0]</text>\r\n<text text-anchor=\"start\" x=\"426\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7&#45;&gt;17 -->\r\n<g id=\"edge17\" class=\"edge\"><title>7&#45;&gt;17</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M473,-817.907C473,-807.204 473,-795.615 473,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"476.5,-784.667 473,-774.667 469.5,-784.667 476.5,-784.667\"/>\r\n</g>\r\n<!-- 9 -->\r\n<g id=\"node10\" class=\"node\"><title>9</title>\r\n<path fill=\"#88c4ef\" stroke=\"black\" d=\"M233.5,-663C233.5,-663 54.5,-663 54.5,-663 48.5,-663 42.5,-657 42.5,-651 42.5,-651 42.5,-592 42.5,-592 42.5,-586 48.5,-580 54.5,-580 54.5,-580 233.5,-580 233.5,-580 239.5,-580 245.5,-586 245.5,-592 245.5,-592 245.5,-651 245.5,-651 245.5,-657 239.5,-663 233.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"50.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\r\n<text text-anchor=\"start\" x=\"94\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"104.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"103.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 5]</text>\r\n<text text-anchor=\"start\" x=\"89\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 8&#45;&gt;9 -->\r\n<g id=\"edge9\" class=\"edge\"><title>8&#45;&gt;9</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M244.57,-698.907C231.909,-689.288 218.306,-678.953 205.324,-669.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"207.415,-666.283 197.335,-663.021 203.18,-671.857 207.415,-666.283\"/>\r\n</g>\r\n<!-- 16 -->\r\n<g id=\"node17\" class=\"node\"><title>16</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M362,-655.5C362,-655.5 276,-655.5 276,-655.5 270,-655.5 264,-649.5 264,-643.5 264,-643.5 264,-599.5 264,-599.5 264,-593.5 270,-587.5 276,-587.5 276,-587.5 362,-587.5 362,-587.5 368,-587.5 374,-593.5 374,-599.5 374,-599.5 374,-643.5 374,-643.5 374,-649.5 368,-655.5 362,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"277\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"279.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"278.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"272\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 8&#45;&gt;16 -->\r\n<g id=\"edge16\" class=\"edge\"><title>8&#45;&gt;16</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M305.286,-698.907C307.207,-688.204 309.287,-676.615 311.232,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"314.725,-666.128 313.047,-655.667 307.835,-664.891 314.725,-666.128\"/>\r\n</g>\r\n<!-- 10 -->\r\n<g id=\"node11\" class=\"node\"><title>10</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M98,-536.5C98,-536.5 12,-536.5 12,-536.5 6,-536.5 0,-530.5 0,-524.5 0,-524.5 0,-480.5 0,-480.5 0,-474.5 6,-468.5 12,-468.5 12,-468.5 98,-468.5 98,-468.5 104,-468.5 110,-474.5 110,-480.5 110,-480.5 110,-524.5 110,-524.5 110,-530.5 104,-536.5 98,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"13\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"15.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"14.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 9&#45;&gt;10 -->\r\n<g id=\"edge10\" class=\"edge\"><title>9&#45;&gt;10</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M113.122,-579.907C104.476,-568.542 95.0716,-556.178 86.3963,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"89.0695,-542.507 80.2296,-536.667 83.4982,-546.745 89.0695,-542.507\"/>\r\n</g>\r\n<!-- 11 -->\r\n<g id=\"node12\" class=\"node\"><title>11</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M325.5,-544C325.5,-544 140.5,-544 140.5,-544 134.5,-544 128.5,-538 128.5,-532 128.5,-532 128.5,-473 128.5,-473 128.5,-467 134.5,-461 140.5,-461 140.5,-461 325.5,-461 325.5,-461 331.5,-461 337.5,-467 337.5,-473 337.5,-473 337.5,-532 337.5,-532 337.5,-538 331.5,-544 325.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"136.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"187\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"193.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"192.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"178\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 9&#45;&gt;11 -->\r\n<g id=\"edge11\" class=\"edge\"><title>9&#45;&gt;11</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M174.878,-579.907C181.712,-570.923 189.021,-561.315 196.069,-552.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"198.908,-554.099 202.176,-544.021 193.336,-549.861 198.908,-554.099\"/>\r\n</g>\r\n<!-- 12 -->\r\n<g id=\"node13\" class=\"node\"><title>12</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M208,-425C208,-425 120,-425 120,-425 114,-425 108,-419 108,-413 108,-413 108,-354 108,-354 108,-348 114,-342 120,-342 120,-342 208,-342 208,-342 214,-342 220,-348 220,-354 220,-354 220,-413 220,-413 220,-419 214,-425 208,-425\"/>\r\n<text text-anchor=\"start\" x=\"116\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"122\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"124.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"123.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"117\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 11&#45;&gt;12 -->\r\n<g id=\"edge12\" class=\"edge\"><title>11&#45;&gt;12</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M209.061,-460.907C203.923,-452.195 198.439,-442.897 193.129,-433.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"195.992,-431.857 187.897,-425.021 189.962,-435.412 195.992,-431.857\"/>\r\n</g>\r\n<!-- 15 -->\r\n<g id=\"node16\" class=\"node\"><title>15</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M352,-417.5C352,-417.5 250,-417.5 250,-417.5 244,-417.5 238,-411.5 238,-405.5 238,-405.5 238,-361.5 238,-361.5 238,-355.5 244,-349.5 250,-349.5 250,-349.5 352,-349.5 352,-349.5 358,-349.5 364,-355.5 364,-361.5 364,-361.5 364,-405.5 364,-405.5 364,-411.5 358,-417.5 352,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"259\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"261.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"260.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"246\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11&#45;&gt;15 -->\r\n<g id=\"edge15\" class=\"edge\"><title>11&#45;&gt;15</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M256.592,-460.907C263.07,-449.763 270.105,-437.658 276.625,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"279.725,-428.072 281.723,-417.667 273.672,-424.554 279.725,-428.072\"/>\r\n</g>\r\n<!-- 13 -->\r\n<g id=\"node14\" class=\"node\"><title>13</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M147,-298.5C147,-298.5 45,-298.5 45,-298.5 39,-298.5 33,-292.5 33,-286.5 33,-286.5 33,-242.5 33,-242.5 33,-236.5 39,-230.5 45,-230.5 45,-230.5 147,-230.5 147,-230.5 153,-230.5 159,-236.5 159,-242.5 159,-242.5 159,-286.5 159,-286.5 159,-292.5 153,-298.5 147,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"54\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"56.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"55.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"41\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 12&#45;&gt;13 -->\r\n<g id=\"edge13\" class=\"edge\"><title>12&#45;&gt;13</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M140.408,-341.907C133.93,-330.763 126.895,-318.658 120.375,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"123.328,-305.554 115.277,-298.667 117.275,-309.072 123.328,-305.554\"/>\r\n</g>\r\n<!-- 14 -->\r\n<g id=\"node15\" class=\"node\"><title>14</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M275,-298.5C275,-298.5 189,-298.5 189,-298.5 183,-298.5 177,-292.5 177,-286.5 177,-286.5 177,-242.5 177,-242.5 177,-236.5 183,-230.5 189,-230.5 189,-230.5 275,-230.5 275,-230.5 281,-230.5 287,-236.5 287,-242.5 287,-242.5 287,-286.5 287,-286.5 287,-292.5 281,-298.5 275,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"190\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"192.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"191.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"185\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 12&#45;&gt;14 -->\r\n<g id=\"edge14\" class=\"edge\"><title>12&#45;&gt;14</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M187.592,-341.907C194.07,-330.763 201.105,-318.658 207.625,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"210.725,-309.072 212.723,-298.667 204.672,-305.554 210.725,-309.072\"/>\r\n</g>\r\n<!-- 19 -->\r\n<g id=\"node20\" class=\"node\"><title>19</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M646,-782C646,-782 560,-782 560,-782 554,-782 548,-776 548,-770 548,-770 548,-711 548,-711 548,-705 554,-699 560,-699 560,-699 646,-699 646,-699 652,-699 658,-705 658,-711 658,-711 658,-770 658,-770 658,-776 652,-782 646,-782\"/>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 20.0</text>\r\n<text text-anchor=\"start\" x=\"561\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"562.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"556\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 18&#45;&gt;19 -->\r\n<g id=\"edge19\" class=\"edge\"><title>18&#45;&gt;19</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M666.346,-817.907C658.823,-808.832 650.771,-799.121 643.018,-789.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"645.671,-787.485 636.594,-782.021 640.282,-791.953 645.671,-787.485\"/>\r\n</g>\r\n<!-- 22 -->\r\n<g id=\"node23\" class=\"node\"><title>22</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M790,-774.5C790,-774.5 688,-774.5 688,-774.5 682,-774.5 676,-768.5 676,-762.5 676,-762.5 676,-718.5 676,-718.5 676,-712.5 682,-706.5 688,-706.5 688,-706.5 790,-706.5 790,-706.5 796,-706.5 802,-712.5 802,-718.5 802,-718.5 802,-762.5 802,-762.5 802,-768.5 796,-774.5 790,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"697\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"695.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"694.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"684\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18&#45;&gt;22 -->\r\n<g id=\"edge22\" class=\"edge\"><title>18&#45;&gt;22</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M713.531,-817.907C717.135,-807.094 721.041,-795.376 724.686,-784.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"728.102,-785.261 727.944,-774.667 721.462,-783.047 728.102,-785.261\"/>\r\n</g>\r\n<!-- 20 -->\r\n<g id=\"node21\" class=\"node\"><title>20</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M510,-655.5C510,-655.5 424,-655.5 424,-655.5 418,-655.5 412,-649.5 412,-643.5 412,-643.5 412,-599.5 412,-599.5 412,-593.5 418,-587.5 424,-587.5 424,-587.5 510,-587.5 510,-587.5 516,-587.5 522,-593.5 522,-599.5 522,-599.5 522,-643.5 522,-643.5 522,-649.5 516,-655.5 510,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"425\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"427.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"426.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"420\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 19&#45;&gt;20 -->\r\n<g id=\"edge20\" class=\"edge\"><title>19&#45;&gt;20</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M555.815,-698.907C542.091,-687.101 527.115,-674.217 513.437,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"515.416,-659.535 505.553,-655.667 510.851,-664.842 515.416,-659.535\"/>\r\n</g>\r\n<!-- 21 -->\r\n<g id=\"node22\" class=\"node\"><title>21</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M654,-655.5C654,-655.5 552,-655.5 552,-655.5 546,-655.5 540,-649.5 540,-643.5 540,-643.5 540,-599.5 540,-599.5 540,-593.5 546,-587.5 552,-587.5 552,-587.5 654,-587.5 654,-587.5 660,-587.5 666,-593.5 666,-599.5 666,-599.5 666,-643.5 666,-643.5 666,-649.5 660,-655.5 654,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"561\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"562.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"548\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 19&#45;&gt;21 -->\r\n<g id=\"edge21\" class=\"edge\"><title>19&#45;&gt;21</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M603,-698.907C603,-688.204 603,-676.615 603,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"606.5,-665.667 603,-655.667 599.5,-665.667 606.5,-665.667\"/>\r\n</g>\r\n<!-- 24 -->\r\n<g id=\"node25\" class=\"node\"><title>24</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M938,-893.5C938,-893.5 852,-893.5 852,-893.5 846,-893.5 840,-887.5 840,-881.5 840,-881.5 840,-837.5 840,-837.5 840,-831.5 846,-825.5 852,-825.5 852,-825.5 938,-825.5 938,-825.5 944,-825.5 950,-831.5 950,-837.5 950,-837.5 950,-881.5 950,-881.5 950,-887.5 944,-893.5 938,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"853\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"855.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"854.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"848\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 23&#45;&gt;24 -->\r\n<g id=\"edge24\" class=\"edge\"><title>23&#45;&gt;24</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M939.408,-936.907C932.93,-925.763 925.895,-913.658 919.375,-902.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"922.328,-900.554 914.277,-893.667 916.275,-904.072 922.328,-900.554\"/>\r\n</g>\r\n<!-- 25 -->\r\n<g id=\"node26\" class=\"node\"><title>25</title>\r\n<path fill=\"#42a1e6\" stroke=\"black\" d=\"M1082,-901C1082,-901 980,-901 980,-901 974,-901 968,-895 968,-889 968,-889 968,-830 968,-830 968,-824 974,-818 980,-818 980,-818 1082,-818 1082,-818 1088,-818 1094,-824 1094,-830 1094,-830 1094,-889 1094,-889 1094,-895 1088,-901 1082,-901\"/>\r\n<text text-anchor=\"start\" x=\"981.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"981\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.254</text>\r\n<text text-anchor=\"start\" x=\"983.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\r\n<text text-anchor=\"start\" x=\"982.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 157]</text>\r\n<text text-anchor=\"start\" x=\"976\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 23&#45;&gt;25 -->\r\n<g id=\"edge25\" class=\"edge\"><title>23&#45;&gt;25</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M986.592,-936.907C991.656,-928.195 997.06,-918.897 1002.29,-909.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1005.45,-911.425 1007.45,-901.021 999.398,-907.908 1005.45,-911.425\"/>\r\n</g>\r\n<!-- 26 -->\r\n<g id=\"node27\" class=\"node\"><title>26</title>\r\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M944.5,-782C944.5,-782 833.5,-782 833.5,-782 827.5,-782 821.5,-776 821.5,-770 821.5,-770 821.5,-711 821.5,-711 821.5,-705 827.5,-699 833.5,-699 833.5,-699 944.5,-699 944.5,-699 950.5,-699 956.5,-705 956.5,-711 956.5,-711 956.5,-770 956.5,-770 956.5,-776 950.5,-782 944.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"829.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.975</text>\r\n<text text-anchor=\"start\" x=\"839\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.203</text>\r\n<text text-anchor=\"start\" x=\"841.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 102</text>\r\n<text text-anchor=\"start\" x=\"840.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 153]</text>\r\n<text text-anchor=\"start\" x=\"834\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 25&#45;&gt;26 -->\r\n<g id=\"edge26\" class=\"edge\"><title>25&#45;&gt;26</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M981.734,-817.907C970.279,-808.469 957.989,-798.343 946.224,-788.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"948.123,-785.679 938.179,-782.021 943.671,-791.081 948.123,-785.679\"/>\r\n</g>\r\n<!-- 37 -->\r\n<g id=\"node38\" class=\"node\"><title>37</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M1155.5,-782C1155.5,-782 986.5,-782 986.5,-782 980.5,-782 974.5,-776 974.5,-770 974.5,-770 974.5,-711 974.5,-711 974.5,-705 980.5,-699 986.5,-699 986.5,-699 1155.5,-699 1155.5,-699 1161.5,-699 1167.5,-705 1167.5,-711 1167.5,-711 1167.5,-770 1167.5,-770 1167.5,-776 1161.5,-782 1155.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"982.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 109.5</text>\r\n<text text-anchor=\"start\" x=\"1021\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"1031.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"1030.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\r\n<text text-anchor=\"start\" x=\"1016\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 25&#45;&gt;37 -->\r\n<g id=\"edge37\" class=\"edge\"><title>25&#45;&gt;37</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1044.88,-817.907C1047.76,-809.468 1050.84,-800.477 1053.82,-791.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1057.22,-792.615 1057.15,-782.021 1050.6,-790.351 1057.22,-792.615\"/>\r\n</g>\r\n<!-- 27 -->\r\n<g id=\"node28\" class=\"node\"><title>27</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M798,-655.5C798,-655.5 696,-655.5 696,-655.5 690,-655.5 684,-649.5 684,-643.5 684,-643.5 684,-599.5 684,-599.5 684,-593.5 690,-587.5 696,-587.5 696,-587.5 798,-587.5 798,-587.5 804,-587.5 810,-593.5 810,-599.5 810,-599.5 810,-643.5 810,-643.5 810,-649.5 804,-655.5 798,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"705\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"703.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"702.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 24]</text>\r\n<text text-anchor=\"start\" x=\"692\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26&#45;&gt;27 -->\r\n<g id=\"edge27\" class=\"edge\"><title>26&#45;&gt;27</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M839.734,-698.907C825.27,-686.99 809.475,-673.976 795.086,-662.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"797.197,-659.325 787.254,-655.667 792.746,-664.727 797.197,-659.325\"/>\r\n</g>\r\n<!-- 28 -->\r\n<g id=\"node29\" class=\"node\"><title>28</title>\r\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M942,-663C942,-663 840,-663 840,-663 834,-663 828,-657 828,-651 828,-651 828,-592 828,-592 828,-586 834,-580 840,-580 840,-580 942,-580 942,-580 948,-580 954,-586 954,-592 954,-592 954,-651 954,-651 954,-657 948,-663 942,-663\"/>\r\n<text text-anchor=\"start\" x=\"846\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 52.0</text>\r\n<text text-anchor=\"start\" x=\"845\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.23</text>\r\n<text text-anchor=\"start\" x=\"847.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"842.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 129]</text>\r\n<text text-anchor=\"start\" x=\"836\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26&#45;&gt;28 -->\r\n<g id=\"edge28\" class=\"edge\"><title>26&#45;&gt;28</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M889.694,-698.907C889.837,-690.558 889.989,-681.671 890.136,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"893.636,-673.079 890.307,-663.021 886.637,-672.959 893.636,-673.079\"/>\r\n</g>\r\n<!-- 29 -->\r\n<g id=\"node30\" class=\"node\"><title>29</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M857,-536.5C857,-536.5 755,-536.5 755,-536.5 749,-536.5 743,-530.5 743,-524.5 743,-524.5 743,-480.5 743,-480.5 743,-474.5 749,-468.5 755,-468.5 755,-468.5 857,-468.5 857,-468.5 863,-468.5 869,-474.5 869,-480.5 869,-480.5 869,-524.5 869,-524.5 869,-530.5 863,-536.5 857,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"764\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"762.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 71</text>\r\n<text text-anchor=\"start\" x=\"757.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 109]</text>\r\n<text text-anchor=\"start\" x=\"751\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 28&#45;&gt;29 -->\r\n<g id=\"edge29\" class=\"edge\"><title>28&#45;&gt;29</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M861.51,-579.907C853.253,-568.542 844.271,-556.178 835.985,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"838.805,-542.7 830.096,-536.667 833.142,-546.814 838.805,-542.7\"/>\r\n</g>\r\n<!-- 30 -->\r\n<g id=\"node31\" class=\"node\"><title>30</title>\r\n<path fill=\"#6ab6ec\" stroke=\"black\" d=\"M1051,-544C1051,-544 899,-544 899,-544 893,-544 887,-538 887,-532 887,-532 887,-473 887,-473 887,-467 893,-461 899,-461 899,-461 1051,-461 1051,-461 1057,-461 1063,-467 1063,-473 1063,-473 1063,-532 1063,-532 1063,-538 1057,-544 1051,-544\"/>\r\n<text text-anchor=\"start\" x=\"895\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"925\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\r\n<text text-anchor=\"start\" x=\"931.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"930.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 20]</text>\r\n<text text-anchor=\"start\" x=\"920\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 28&#45;&gt;30 -->\r\n<g id=\"edge30\" class=\"edge\"><title>28&#45;&gt;30</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M920.143,-579.907C926.529,-571.014 933.352,-561.509 939.942,-552.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"942.919,-554.185 945.908,-544.021 937.233,-550.103 942.919,-554.185\"/>\r\n</g>\r\n<!-- 31 -->\r\n<g id=\"node32\" class=\"node\"><title>31</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M928,-417.5C928,-417.5 826,-417.5 826,-417.5 820,-417.5 814,-411.5 814,-405.5 814,-405.5 814,-361.5 814,-361.5 814,-355.5 820,-349.5 826,-349.5 826,-349.5 928,-349.5 928,-349.5 934,-349.5 940,-355.5 940,-361.5 940,-361.5 940,-405.5 940,-405.5 940,-411.5 934,-417.5 928,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"835\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"837.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"832.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\r\n<text text-anchor=\"start\" x=\"822\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 30&#45;&gt;31 -->\r\n<g id=\"edge31\" class=\"edge\"><title>30&#45;&gt;31</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M940.999,-460.907C931.387,-449.432 920.923,-436.938 911.293,-425.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"913.885,-423.086 904.781,-417.667 908.519,-427.58 913.885,-423.086\"/>\r\n</g>\r\n<!-- 32 -->\r\n<g id=\"node33\" class=\"node\"><title>32</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1176,-425C1176,-425 970,-425 970,-425 964,-425 958,-419 958,-413 958,-413 958,-354 958,-354 958,-348 964,-342 970,-342 970,-342 1176,-342 1176,-342 1182,-342 1188,-348 1188,-354 1188,-354 1188,-413 1188,-413 1188,-419 1182,-425 1176,-425\"/>\r\n<text text-anchor=\"start\" x=\"966\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1031\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1033.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1032.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 5]</text>\r\n<text text-anchor=\"start\" x=\"1026\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 30&#45;&gt;32 -->\r\n<g id=\"edge32\" class=\"edge\"><title>30&#45;&gt;32</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1009,-460.907C1016.6,-451.832 1024.74,-442.121 1032.57,-432.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1035.32,-434.934 1039.06,-425.021 1029.96,-430.439 1035.32,-434.934\"/>\r\n</g>\r\n<!-- 33 -->\r\n<g id=\"node34\" class=\"node\"><title>33</title>\r\n<path fill=\"#f5cdb0\" stroke=\"black\" d=\"M1050,-306C1050,-306 958,-306 958,-306 952,-306 946,-300 946,-294 946,-294 946,-235 946,-235 946,-229 952,-223 958,-223 958,-223 1050,-223 1050,-223 1056,-223 1062,-229 1062,-235 1062,-235 1062,-294 1062,-294 1062,-300 1056,-306 1050,-306\"/>\r\n<text text-anchor=\"start\" x=\"955.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"954\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.954</text>\r\n<text text-anchor=\"start\" x=\"964.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"963.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 3]</text>\r\n<text text-anchor=\"start\" x=\"957\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 32&#45;&gt;33 -->\r\n<g id=\"edge33\" class=\"edge\"><title>32&#45;&gt;33</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1049.06,-341.907C1043.92,-333.195 1038.44,-323.897 1033.13,-314.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1035.99,-312.857 1027.9,-306.021 1029.96,-316.412 1035.99,-312.857\"/>\r\n</g>\r\n<!-- 36 -->\r\n<g id=\"node37\" class=\"node\"><title>36</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1194,-298.5C1194,-298.5 1092,-298.5 1092,-298.5 1086,-298.5 1080,-292.5 1080,-286.5 1080,-286.5 1080,-242.5 1080,-242.5 1080,-236.5 1086,-230.5 1092,-230.5 1092,-230.5 1194,-230.5 1194,-230.5 1200,-230.5 1206,-236.5 1206,-242.5 1206,-242.5 1206,-286.5 1206,-286.5 1206,-292.5 1200,-298.5 1194,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1101\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1103.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1102.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"1088\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 32&#45;&gt;36 -->\r\n<g id=\"edge36\" class=\"edge\"><title>32&#45;&gt;36</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1097.29,-341.907C1103.95,-330.763 1111.2,-318.658 1117.91,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1121.03,-309.045 1123.16,-298.667 1115.02,-305.451 1121.03,-309.045\"/>\r\n</g>\r\n<!-- 34 -->\r\n<g id=\"node35\" class=\"node\"><title>34</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M979,-179.5C979,-179.5 893,-179.5 893,-179.5 887,-179.5 881,-173.5 881,-167.5 881,-167.5 881,-123.5 881,-123.5 881,-117.5 887,-111.5 893,-111.5 893,-111.5 979,-111.5 979,-111.5 985,-111.5 991,-117.5 991,-123.5 991,-123.5 991,-167.5 991,-167.5 991,-173.5 985,-179.5 979,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"894\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"896.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"895.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"889\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 33&#45;&gt;34 -->\r\n<g id=\"edge34\" class=\"edge\"><title>33&#45;&gt;34</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M980.408,-222.907C973.93,-211.763 966.895,-199.658 960.375,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"963.328,-186.554 955.277,-179.667 957.275,-190.072 963.328,-186.554\"/>\r\n</g>\r\n<!-- 35 -->\r\n<g id=\"node36\" class=\"node\"><title>35</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1123,-179.5C1123,-179.5 1021,-179.5 1021,-179.5 1015,-179.5 1009,-173.5 1009,-167.5 1009,-167.5 1009,-123.5 1009,-123.5 1009,-117.5 1015,-111.5 1021,-111.5 1021,-111.5 1123,-111.5 1123,-111.5 1129,-111.5 1135,-117.5 1135,-123.5 1135,-123.5 1135,-167.5 1135,-167.5 1135,-173.5 1129,-179.5 1123,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"1030\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1032.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1031.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"1017\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 33&#45;&gt;35 -->\r\n<g id=\"edge35\" class=\"edge\"><title>33&#45;&gt;35</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1027.59,-222.907C1034.07,-211.763 1041.1,-199.658 1047.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1050.72,-190.072 1052.72,-179.667 1044.67,-186.554 1050.72,-190.072\"/>\r\n</g>\r\n<!-- 38 -->\r\n<g id=\"node39\" class=\"node\"><title>38</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1086,-655.5C1086,-655.5 984,-655.5 984,-655.5 978,-655.5 972,-649.5 972,-643.5 972,-643.5 972,-599.5 972,-599.5 972,-593.5 978,-587.5 984,-587.5 984,-587.5 1086,-587.5 1086,-587.5 1092,-587.5 1098,-593.5 1098,-599.5 1098,-599.5 1098,-643.5 1098,-643.5 1098,-649.5 1092,-655.5 1086,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"993\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"995.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"994.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"980\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 37&#45;&gt;38 -->\r\n<g id=\"edge38\" class=\"edge\"><title>37&#45;&gt;38</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1058.51,-698.907C1055.18,-688.094 1051.58,-676.376 1048.21,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1051.49,-664.195 1045.21,-655.667 1044.8,-666.254 1051.49,-664.195\"/>\r\n</g>\r\n<!-- 39 -->\r\n<g id=\"node40\" class=\"node\"><title>39</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1214,-655.5C1214,-655.5 1128,-655.5 1128,-655.5 1122,-655.5 1116,-649.5 1116,-643.5 1116,-643.5 1116,-599.5 1116,-599.5 1116,-593.5 1122,-587.5 1128,-587.5 1128,-587.5 1214,-587.5 1214,-587.5 1220,-587.5 1226,-593.5 1226,-599.5 1226,-599.5 1226,-643.5 1226,-643.5 1226,-649.5 1220,-655.5 1214,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1129\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1131.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1130.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"1124\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 37&#45;&gt;39 -->\r\n<g id=\"edge39\" class=\"edge\"><title>37&#45;&gt;39</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1105.69,-698.907C1115.5,-687.432 1126.18,-674.938 1136.01,-663.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1138.82,-665.543 1142.65,-655.667 1133.49,-660.995 1138.82,-665.543\"/>\r\n</g>\r\n<!-- 42 -->\r\n<g id=\"node43\" class=\"node\"><title>42</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M1774,-1139C1774,-1139 1640,-1139 1640,-1139 1634,-1139 1628,-1133 1628,-1127 1628,-1127 1628,-1068 1628,-1068 1628,-1062 1634,-1056 1640,-1056 1640,-1056 1774,-1056 1774,-1056 1780,-1056 1786,-1062 1786,-1068 1786,-1068 1786,-1127 1786,-1127 1786,-1133 1780,-1139 1774,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1636\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 22.5</text>\r\n<text text-anchor=\"start\" x=\"1657\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"1663.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"1658.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 20]</text>\r\n<text text-anchor=\"start\" x=\"1660\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41&#45;&gt;42 -->\r\n<g id=\"edge42\" class=\"edge\"><title>41&#45;&gt;42</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1765.77,-1174.91C1758.86,-1165.92 1751.47,-1156.32 1744.35,-1147.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1747.04,-1144.81 1738.17,-1139.02 1741.49,-1149.08 1747.04,-1144.81\"/>\r\n</g>\r\n<!-- 57 -->\r\n<g id=\"node58\" class=\"node\"><title>57</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M1932,-1139C1932,-1139 1840,-1139 1840,-1139 1834,-1139 1828,-1133 1828,-1127 1828,-1127 1828,-1068 1828,-1068 1828,-1062 1834,-1056 1840,-1056 1840,-1056 1932,-1056 1932,-1056 1938,-1056 1944,-1062 1944,-1068 1944,-1068 1944,-1127 1944,-1127 1944,-1133 1938,-1139 1932,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1845\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.0</text>\r\n<text text-anchor=\"start\" x=\"1836\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.118</text>\r\n<text text-anchor=\"start\" x=\"1838.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 243</text>\r\n<text text-anchor=\"start\" x=\"1837.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [372, 6]</text>\r\n<text text-anchor=\"start\" x=\"1839\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41&#45;&gt;57 -->\r\n<g id=\"edge57\" class=\"edge\"><title>41&#45;&gt;57</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1827.88,-1174.91C1834.71,-1165.92 1842.02,-1156.32 1849.07,-1147.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1851.91,-1149.1 1855.18,-1139.02 1846.34,-1144.86 1851.91,-1149.1\"/>\r\n</g>\r\n<!-- 43 -->\r\n<g id=\"node44\" class=\"node\"><title>43</title>\r\n<path fill=\"#a6d3f3\" stroke=\"black\" d=\"M1621.5,-1020C1621.5,-1020 1506.5,-1020 1506.5,-1020 1500.5,-1020 1494.5,-1014 1494.5,-1008 1494.5,-1008 1494.5,-949 1494.5,-949 1494.5,-943 1500.5,-937 1506.5,-937 1506.5,-937 1621.5,-937 1621.5,-937 1627.5,-937 1633.5,-943 1633.5,-949 1633.5,-949 1633.5,-1008 1633.5,-1008 1633.5,-1014 1627.5,-1020 1621.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1502.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1514\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.938</text>\r\n<text text-anchor=\"start\" x=\"1520.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"1515.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 20]</text>\r\n<text text-anchor=\"start\" x=\"1509\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 42&#45;&gt;43 -->\r\n<g id=\"edge43\" class=\"edge\"><title>42&#45;&gt;43</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1657.39,-1055.91C1645.74,-1046.38 1633.24,-1036.15 1621.29,-1026.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1623.48,-1023.64 1613.53,-1020.02 1619.05,-1029.06 1623.48,-1023.64\"/>\r\n</g>\r\n<!-- 56 -->\r\n<g id=\"node57\" class=\"node\"><title>56</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1750,-1012.5C1750,-1012.5 1664,-1012.5 1664,-1012.5 1658,-1012.5 1652,-1006.5 1652,-1000.5 1652,-1000.5 1652,-956.5 1652,-956.5 1652,-950.5 1658,-944.5 1664,-944.5 1664,-944.5 1750,-944.5 1750,-944.5 1756,-944.5 1762,-950.5 1762,-956.5 1762,-956.5 1762,-1000.5 1762,-1000.5 1762,-1006.5 1756,-1012.5 1750,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"1665\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1663.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"1662.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"1660\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 42&#45;&gt;56 -->\r\n<g id=\"edge56\" class=\"edge\"><title>42&#45;&gt;56</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1707,-1055.91C1707,-1045.2 1707,-1033.62 1707,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1710.5,-1022.67 1707,-1012.67 1703.5,-1022.67 1710.5,-1022.67\"/>\r\n</g>\r\n<!-- 44 -->\r\n<g id=\"node45\" class=\"node\"><title>44</title>\r\n<path fill=\"#a1d1f3\" stroke=\"black\" d=\"M1422,-901C1422,-901 1320,-901 1320,-901 1314,-901 1308,-895 1308,-889 1308,-889 1308,-830 1308,-830 1308,-824 1314,-818 1320,-818 1320,-818 1422,-818 1422,-818 1428,-818 1434,-824 1434,-830 1434,-830 1434,-889 1434,-889 1434,-895 1428,-901 1422,-901\"/>\r\n<text text-anchor=\"start\" x=\"1322.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"1321\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.929</text>\r\n<text text-anchor=\"start\" x=\"1327.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"1322.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 19]</text>\r\n<text text-anchor=\"start\" x=\"1316\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 43&#45;&gt;44 -->\r\n<g id=\"edge44\" class=\"edge\"><title>43&#45;&gt;44</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1497.04,-936.907C1479.54,-926.301 1460.61,-914.825 1442.87,-904.071\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1444.64,-901.047 1434.27,-898.856 1441.01,-907.033 1444.64,-901.047\"/>\r\n</g>\r\n<!-- 53 -->\r\n<g id=\"node54\" class=\"node\"><title>53</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1700,-901C1700,-901 1464,-901 1464,-901 1458,-901 1452,-895 1452,-889 1452,-889 1452,-830 1452,-830 1452,-824 1458,-818 1464,-818 1464,-818 1700,-818 1700,-818 1706,-818 1712,-824 1712,-830 1712,-830 1712,-889 1712,-889 1712,-895 1706,-901 1700,-901\"/>\r\n<text text-anchor=\"start\" x=\"1460\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.375</text>\r\n<text text-anchor=\"start\" x=\"1540\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1542.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1541.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1535\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 43&#45;&gt;53 -->\r\n<g id=\"edge53\" class=\"edge\"><title>43&#45;&gt;53</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1570.25,-936.907C1571.53,-928.558 1572.9,-919.671 1574.23,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1577.7,-911.437 1575.77,-901.021 1570.79,-910.372 1577.7,-911.437\"/>\r\n</g>\r\n<!-- 45 -->\r\n<g id=\"node46\" class=\"node\"><title>45</title>\r\n<path fill=\"#fae6d7\" stroke=\"black\" d=\"M1353,-782C1353,-782 1261,-782 1261,-782 1255,-782 1249,-776 1249,-770 1249,-770 1249,-711 1249,-711 1249,-705 1255,-699 1261,-699 1261,-699 1353,-699 1353,-699 1359,-699 1365,-705 1365,-711 1365,-711 1365,-770 1365,-770 1365,-776 1359,-782 1353,-782\"/>\r\n<text text-anchor=\"start\" x=\"1262\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.5</text>\r\n<text text-anchor=\"start\" x=\"1257\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"1263.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\r\n<text text-anchor=\"start\" x=\"1262.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 8]</text>\r\n<text text-anchor=\"start\" x=\"1260\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 44&#45;&gt;45 -->\r\n<g id=\"edge45\" class=\"edge\"><title>44&#45;&gt;45</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1348.8,-817.907C1344.03,-809.195 1338.94,-799.897 1334.02,-790.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1337.03,-789.114 1329.17,-782.021 1330.89,-792.474 1337.03,-789.114\"/>\r\n</g>\r\n<!-- 52 -->\r\n<g id=\"node53\" class=\"node\"><title>52</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1497,-774.5C1497,-774.5 1395,-774.5 1395,-774.5 1389,-774.5 1383,-768.5 1383,-762.5 1383,-762.5 1383,-718.5 1383,-718.5 1383,-712.5 1389,-706.5 1395,-706.5 1395,-706.5 1497,-706.5 1497,-706.5 1503,-706.5 1509,-712.5 1509,-718.5 1509,-718.5 1509,-762.5 1509,-762.5 1509,-768.5 1503,-774.5 1497,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1404\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1406.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"1401.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\r\n<text text-anchor=\"start\" x=\"1391\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 44&#45;&gt;52 -->\r\n<g id=\"edge52\" class=\"edge\"><title>44&#45;&gt;52</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1397.02,-817.907C1404.24,-806.652 1412.08,-794.418 1419.33,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1422.29,-784.975 1424.74,-774.667 1416.4,-781.197 1422.29,-784.975\"/>\r\n</g>\r\n<!-- 46 -->\r\n<g id=\"node47\" class=\"node\"><title>46</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1358,-655.5C1358,-655.5 1256,-655.5 1256,-655.5 1250,-655.5 1244,-649.5 1244,-643.5 1244,-643.5 1244,-599.5 1244,-599.5 1244,-593.5 1250,-587.5 1256,-587.5 1256,-587.5 1358,-587.5 1358,-587.5 1364,-587.5 1370,-593.5 1370,-599.5 1370,-599.5 1370,-643.5 1370,-643.5 1370,-649.5 1364,-655.5 1358,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1265\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1267.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1266.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"1252\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 45&#45;&gt;46 -->\r\n<g id=\"edge46\" class=\"edge\"><title>45&#45;&gt;46</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1307,-698.907C1307,-688.204 1307,-676.615 1307,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1310.5,-665.667 1307,-655.667 1303.5,-665.667 1310.5,-665.667\"/>\r\n</g>\r\n<!-- 47 -->\r\n<g id=\"node48\" class=\"node\"><title>47</title>\r\n<path fill=\"#e88e4d\" stroke=\"black\" d=\"M1627.5,-663C1627.5,-663 1400.5,-663 1400.5,-663 1394.5,-663 1388.5,-657 1388.5,-651 1388.5,-651 1388.5,-592 1388.5,-592 1388.5,-586 1394.5,-580 1400.5,-580 1400.5,-580 1627.5,-580 1627.5,-580 1633.5,-580 1639.5,-586 1639.5,-592 1639.5,-592 1639.5,-651 1639.5,-651 1639.5,-657 1633.5,-663 1627.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"1396.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.32</text>\r\n<text text-anchor=\"start\" x=\"1464\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.439</text>\r\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1469.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 1]</text>\r\n<text text-anchor=\"start\" x=\"1467\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 45&#45;&gt;47 -->\r\n<g id=\"edge47\" class=\"edge\"><title>45&#45;&gt;47</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1365.01,-704.221C1368.05,-702.443 1371.05,-700.694 1374,-699 1391.75,-688.795 1410.91,-678.106 1429.2,-668.064\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1431.01,-671.064 1438.1,-663.191 1427.65,-664.924 1431.01,-671.064\"/>\r\n</g>\r\n<!-- 48 -->\r\n<g id=\"node49\" class=\"node\"><title>48</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1483,-536.5C1483,-536.5 1397,-536.5 1397,-536.5 1391,-536.5 1385,-530.5 1385,-524.5 1385,-524.5 1385,-480.5 1385,-480.5 1385,-474.5 1391,-468.5 1397,-468.5 1397,-468.5 1483,-468.5 1483,-468.5 1489,-468.5 1495,-474.5 1495,-480.5 1495,-480.5 1495,-524.5 1495,-524.5 1495,-530.5 1489,-536.5 1483,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1398\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1400.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"1399.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"1393\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 47&#45;&gt;48 -->\r\n<g id=\"edge48\" class=\"edge\"><title>47&#45;&gt;48</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1488.33,-579.907C1481.28,-568.763 1473.62,-556.658 1466.53,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1469.28,-543.248 1460.98,-536.667 1463.36,-546.989 1469.28,-543.248\"/>\r\n</g>\r\n<!-- 49 -->\r\n<g id=\"node50\" class=\"node\"><title>49</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1650.5,-544C1650.5,-544 1525.5,-544 1525.5,-544 1519.5,-544 1513.5,-538 1513.5,-532 1513.5,-532 1513.5,-473 1513.5,-473 1513.5,-467 1519.5,-461 1525.5,-461 1525.5,-461 1650.5,-461 1650.5,-461 1656.5,-461 1662.5,-467 1662.5,-473 1662.5,-473 1662.5,-532 1662.5,-532 1662.5,-538 1656.5,-544 1650.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"1521.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_serror_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1546\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1548.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1547.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1541\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 47&#45;&gt;49 -->\r\n<g id=\"edge49\" class=\"edge\"><title>47&#45;&gt;49</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1539.67,-579.907C1545.24,-571.105 1551.19,-561.703 1556.94,-552.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1559.98,-554.343 1562.37,-544.021 1554.07,-550.601 1559.98,-554.343\"/>\r\n</g>\r\n<!-- 50 -->\r\n<g id=\"node51\" class=\"node\"><title>50</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1563,-417.5C1563,-417.5 1477,-417.5 1477,-417.5 1471,-417.5 1465,-411.5 1465,-405.5 1465,-405.5 1465,-361.5 1465,-361.5 1465,-355.5 1471,-349.5 1477,-349.5 1477,-349.5 1563,-349.5 1563,-349.5 1569,-349.5 1575,-355.5 1575,-361.5 1575,-361.5 1575,-405.5 1575,-405.5 1575,-411.5 1569,-417.5 1563,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1478\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1480.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 49&#45;&gt;50 -->\r\n<g id=\"edge50\" class=\"edge\"><title>49&#45;&gt;50</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1564.41,-460.907C1557.93,-449.763 1550.9,-437.658 1544.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1547.33,-424.554 1539.28,-417.667 1541.28,-428.072 1547.33,-424.554\"/>\r\n</g>\r\n<!-- 51 -->\r\n<g id=\"node52\" class=\"node\"><title>51</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1707,-417.5C1707,-417.5 1605,-417.5 1605,-417.5 1599,-417.5 1593,-411.5 1593,-405.5 1593,-405.5 1593,-361.5 1593,-361.5 1593,-355.5 1599,-349.5 1605,-349.5 1605,-349.5 1707,-349.5 1707,-349.5 1713,-349.5 1719,-355.5 1719,-361.5 1719,-361.5 1719,-405.5 1719,-405.5 1719,-411.5 1713,-417.5 1707,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1614\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1616.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1615.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1601\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 49&#45;&gt;51 -->\r\n<g id=\"edge51\" class=\"edge\"><title>49&#45;&gt;51</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1611.59,-460.907C1618.07,-449.763 1625.1,-437.658 1631.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1634.72,-428.072 1636.72,-417.667 1628.67,-424.554 1634.72,-428.072\"/>\r\n</g>\r\n<!-- 54 -->\r\n<g id=\"node55\" class=\"node\"><title>54</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1625,-774.5C1625,-774.5 1539,-774.5 1539,-774.5 1533,-774.5 1527,-768.5 1527,-762.5 1527,-762.5 1527,-718.5 1527,-718.5 1527,-712.5 1533,-706.5 1539,-706.5 1539,-706.5 1625,-706.5 1625,-706.5 1631,-706.5 1637,-712.5 1637,-718.5 1637,-718.5 1637,-762.5 1637,-762.5 1637,-768.5 1631,-774.5 1625,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1540\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1542.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1541.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1535\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 53&#45;&gt;54 -->\r\n<g id=\"edge54\" class=\"edge\"><title>53&#45;&gt;54</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1582,-817.907C1582,-807.204 1582,-795.615 1582,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1585.5,-784.667 1582,-774.667 1578.5,-784.667 1585.5,-784.667\"/>\r\n</g>\r\n<!-- 55 -->\r\n<g id=\"node56\" class=\"node\"><title>55</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1769,-774.5C1769,-774.5 1667,-774.5 1667,-774.5 1661,-774.5 1655,-768.5 1655,-762.5 1655,-762.5 1655,-718.5 1655,-718.5 1655,-712.5 1661,-706.5 1667,-706.5 1667,-706.5 1769,-706.5 1769,-706.5 1775,-706.5 1781,-712.5 1781,-718.5 1781,-718.5 1781,-762.5 1781,-762.5 1781,-768.5 1775,-774.5 1769,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1676\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1678.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1677.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1663\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 53&#45;&gt;55 -->\r\n<g id=\"edge55\" class=\"edge\"><title>53&#45;&gt;55</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1629.18,-817.907C1642.91,-806.101 1657.89,-793.217 1671.56,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1674.15,-783.842 1679.45,-774.667 1669.58,-778.535 1674.15,-783.842\"/>\r\n</g>\r\n<!-- 58 -->\r\n<g id=\"node59\" class=\"node\"><title>58</title>\r\n<path fill=\"#eda877\" stroke=\"black\" d=\"M1979.5,-1020C1979.5,-1020 1792.5,-1020 1792.5,-1020 1786.5,-1020 1780.5,-1014 1780.5,-1008 1780.5,-1008 1780.5,-949 1780.5,-949 1780.5,-943 1786.5,-937 1792.5,-937 1792.5,-937 1979.5,-937 1979.5,-937 1985.5,-937 1991.5,-943 1991.5,-949 1991.5,-949 1991.5,-1008 1991.5,-1008 1991.5,-1014 1985.5,-1020 1979.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1788.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"1836\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.792</text>\r\n<text text-anchor=\"start\" x=\"1842.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"1841.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 5]</text>\r\n<text text-anchor=\"start\" x=\"1839\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57&#45;&gt;58 -->\r\n<g id=\"edge58\" class=\"edge\"><title>57&#45;&gt;58</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1886,-1055.91C1886,-1047.65 1886,-1038.86 1886,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1889.5,-1030.02 1886,-1020.02 1882.5,-1030.02 1889.5,-1030.02\"/>\r\n</g>\r\n<!-- 61 -->\r\n<g id=\"node62\" class=\"node\"><title>61</title>\r\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M2132.5,-1020C2132.5,-1020 2021.5,-1020 2021.5,-1020 2015.5,-1020 2009.5,-1014 2009.5,-1008 2009.5,-1008 2009.5,-949 2009.5,-949 2009.5,-943 2015.5,-937 2021.5,-937 2021.5,-937 2132.5,-937 2132.5,-937 2138.5,-937 2144.5,-943 2144.5,-949 2144.5,-949 2144.5,-1008 2144.5,-1008 2144.5,-1014 2138.5,-1020 2132.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2017.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.165</text>\r\n<text text-anchor=\"start\" x=\"2027\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.028</text>\r\n<text text-anchor=\"start\" x=\"2029.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 232</text>\r\n<text text-anchor=\"start\" x=\"2028.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [356, 1]</text>\r\n<text text-anchor=\"start\" x=\"2030\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57&#45;&gt;61 -->\r\n<g id=\"edge61\" class=\"edge\"><title>57&#45;&gt;61</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1944.08,-1060.92C1962.36,-1049.73 1982.8,-1037.2 2002.07,-1025.4\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2004.13,-1028.24 2010.83,-1020.03 2000.48,-1022.27 2004.13,-1028.24\"/>\r\n</g>\r\n<!-- 59 -->\r\n<g id=\"node60\" class=\"node\"><title>59</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1844,-893.5C1844,-893.5 1742,-893.5 1742,-893.5 1736,-893.5 1730,-887.5 1730,-881.5 1730,-881.5 1730,-837.5 1730,-837.5 1730,-831.5 1736,-825.5 1742,-825.5 1742,-825.5 1844,-825.5 1844,-825.5 1850,-825.5 1856,-831.5 1856,-837.5 1856,-837.5 1856,-881.5 1856,-881.5 1856,-887.5 1850,-893.5 1844,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1751\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1753.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"1752.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"1738\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 58&#45;&gt;59 -->\r\n<g id=\"edge59\" class=\"edge\"><title>58&#45;&gt;59</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1853.73,-936.907C1844.7,-925.542 1834.87,-913.178 1825.81,-901.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1828.33,-899.317 1819.36,-893.667 1822.85,-903.673 1828.33,-899.317\"/>\r\n</g>\r\n<!-- 60 -->\r\n<g id=\"node61\" class=\"node\"><title>60</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1972,-893.5C1972,-893.5 1886,-893.5 1886,-893.5 1880,-893.5 1874,-887.5 1874,-881.5 1874,-881.5 1874,-837.5 1874,-837.5 1874,-831.5 1880,-825.5 1886,-825.5 1886,-825.5 1972,-825.5 1972,-825.5 1978,-825.5 1984,-831.5 1984,-837.5 1984,-837.5 1984,-881.5 1984,-881.5 1984,-887.5 1978,-893.5 1972,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1887\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1889.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"1884.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\r\n<text text-anchor=\"start\" x=\"1882\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 58&#45;&gt;60 -->\r\n<g id=\"edge60\" class=\"edge\"><title>58&#45;&gt;60</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1900.92,-936.907C1904.93,-925.983 1909.29,-914.137 1913.34,-903.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1916.65,-904.26 1916.81,-893.667 1910.08,-901.846 1916.65,-904.26\"/>\r\n</g>\r\n<!-- 62 -->\r\n<g id=\"node63\" class=\"node\"><title>62</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M2106,-901C2106,-901 2014,-901 2014,-901 2008,-901 2002,-895 2002,-889 2002,-889 2002,-830 2002,-830 2002,-824 2008,-818 2014,-818 2014,-818 2106,-818 2106,-818 2112,-818 2118,-824 2118,-830 2118,-830 2118,-889 2118,-889 2118,-895 2112,-901 2106,-901\"/>\r\n<text text-anchor=\"start\" x=\"2029\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">land ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2010\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.169</text>\r\n<text text-anchor=\"start\" x=\"2016.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"2015.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 1]</text>\r\n<text text-anchor=\"start\" x=\"2013\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 61&#45;&gt;62 -->\r\n<g id=\"edge62\" class=\"edge\"><title>61&#45;&gt;62</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2071.1,-936.907C2069.89,-928.558 2068.6,-919.671 2067.34,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2070.79,-910.414 2065.89,-901.021 2063.86,-911.42 2070.79,-910.414\"/>\r\n</g>\r\n<!-- 65 -->\r\n<g id=\"node66\" class=\"node\"><title>65</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2237.5,-893.5C2237.5,-893.5 2148.5,-893.5 2148.5,-893.5 2142.5,-893.5 2136.5,-887.5 2136.5,-881.5 2136.5,-881.5 2136.5,-837.5 2136.5,-837.5 2136.5,-831.5 2142.5,-825.5 2148.5,-825.5 2148.5,-825.5 2237.5,-825.5 2237.5,-825.5 2243.5,-825.5 2249.5,-831.5 2249.5,-837.5 2249.5,-837.5 2249.5,-881.5 2249.5,-881.5 2249.5,-887.5 2243.5,-893.5 2237.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"2151\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2145.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 204</text>\r\n<text text-anchor=\"start\" x=\"2144.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [317, 0]</text>\r\n<text text-anchor=\"start\" x=\"2146\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 61&#45;&gt;65 -->\r\n<g id=\"edge65\" class=\"edge\"><title>61&#45;&gt;65</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2117.25,-936.907C2128.84,-925.211 2141.49,-912.457 2153.06,-900.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2155.56,-903.233 2160.12,-893.667 2150.59,-898.304 2155.56,-903.233\"/>\r\n</g>\r\n<!-- 63 -->\r\n<g id=\"node64\" class=\"node\"><title>63</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2042,-774.5C2042,-774.5 1956,-774.5 1956,-774.5 1950,-774.5 1944,-768.5 1944,-762.5 1944,-762.5 1944,-718.5 1944,-718.5 1944,-712.5 1950,-706.5 1956,-706.5 1956,-706.5 2042,-706.5 2042,-706.5 2048,-706.5 2054,-712.5 2054,-718.5 2054,-718.5 2054,-762.5 2054,-762.5 2054,-768.5 2048,-774.5 2042,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1957\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1955.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"1954.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 0]</text>\r\n<text text-anchor=\"start\" x=\"1952\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 62&#45;&gt;63 -->\r\n<g id=\"edge63\" class=\"edge\"><title>62&#45;&gt;63</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2038.84,-817.907C2033.08,-806.873 2026.84,-794.898 2021.04,-783.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2024.02,-781.916 2016.29,-774.667 2017.81,-785.152 2024.02,-781.916\"/>\r\n</g>\r\n<!-- 64 -->\r\n<g id=\"node65\" class=\"node\"><title>64</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2186,-774.5C2186,-774.5 2084,-774.5 2084,-774.5 2078,-774.5 2072,-768.5 2072,-762.5 2072,-762.5 2072,-718.5 2072,-718.5 2072,-712.5 2078,-706.5 2084,-706.5 2084,-706.5 2186,-706.5 2186,-706.5 2192,-706.5 2198,-712.5 2198,-718.5 2198,-718.5 2198,-762.5 2198,-762.5 2198,-768.5 2192,-774.5 2186,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2093\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2095.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2094.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2080\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 62&#45;&gt;64 -->\r\n<g id=\"edge64\" class=\"edge\"><title>62&#45;&gt;64</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2086.02,-817.907C2093.24,-806.652 2101.08,-794.418 2108.33,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2111.29,-784.975 2113.74,-774.667 2105.4,-781.197 2111.29,-784.975\"/>\r\n</g>\r\n<!-- 68 -->\r\n<g id=\"node69\" class=\"node\"><title>68</title>\r\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M3094,-1377C3094,-1377 2970,-1377 2970,-1377 2964,-1377 2958,-1371 2958,-1365 2958,-1365 2958,-1306 2958,-1306 2958,-1300 2964,-1294 2970,-1294 2970,-1294 3094,-1294 3094,-1294 3100,-1294 3106,-1300 3106,-1306 3106,-1306 3106,-1365 3106,-1365 3106,-1371 3100,-1377 3094,-1377\"/>\r\n<text text-anchor=\"start\" x=\"2966\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"2982\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.244</text>\r\n<text text-anchor=\"start\" x=\"2980.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1189</text>\r\n<text text-anchor=\"start\" x=\"2975\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 1787]</text>\r\n<text text-anchor=\"start\" x=\"2977\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67&#45;&gt;68 -->\r\n<g id=\"edge68\" class=\"edge\"><title>67&#45;&gt;68</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3097.96,-1412.91C3090.12,-1403.83 3081.74,-1394.12 3073.67,-1384.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3076.16,-1382.3 3066.98,-1377.02 3070.86,-1386.88 3076.16,-1382.3\"/>\r\n</g>\r\n<!-- 109 -->\r\n<g id=\"node110\" class=\"node\"><title>109</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3238,-1369.5C3238,-1369.5 3136,-1369.5 3136,-1369.5 3130,-1369.5 3124,-1363.5 3124,-1357.5 3124,-1357.5 3124,-1313.5 3124,-1313.5 3124,-1307.5 3130,-1301.5 3136,-1301.5 3136,-1301.5 3238,-1301.5 3238,-1301.5 3244,-1301.5 3250,-1307.5 3250,-1313.5 3250,-1313.5 3250,-1357.5 3250,-1357.5 3250,-1363.5 3244,-1369.5 3238,-1369.5\"/>\r\n<text text-anchor=\"start\" x=\"3145\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3135.5\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2900</text>\r\n<text text-anchor=\"start\" x=\"3134\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4468]</text>\r\n<text text-anchor=\"start\" x=\"3132\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67&#45;&gt;109 -->\r\n<g id=\"edge109\" class=\"edge\"><title>67&#45;&gt;109</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3151.74,-1412.91C3156.83,-1401.87 3162.35,-1389.9 3167.49,-1378.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3170.68,-1380.21 3171.69,-1369.67 3164.32,-1377.28 3170.68,-1380.21\"/>\r\n</g>\r\n<!-- 69 -->\r\n<g id=\"node70\" class=\"node\"><title>69</title>\r\n<path fill=\"#60b0ea\" stroke=\"black\" d=\"M2967,-1258C2967,-1258 2765,-1258 2765,-1258 2759,-1258 2753,-1252 2753,-1246 2753,-1246 2753,-1187 2753,-1187 2753,-1181 2759,-1175 2765,-1175 2765,-1175 2967,-1175 2967,-1175 2973,-1175 2979,-1181 2979,-1187 2979,-1187 2979,-1246 2979,-1246 2979,-1252 2973,-1258 2967,-1258\"/>\r\n<text text-anchor=\"start\" x=\"2761\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.648</text>\r\n<text text-anchor=\"start\" x=\"2818.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 255</text>\r\n<text text-anchor=\"start\" x=\"2813\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 332]</text>\r\n<text text-anchor=\"start\" x=\"2811\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 68&#45;&gt;69 -->\r\n<g id=\"edge69\" class=\"edge\"><title>68&#45;&gt;69</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2974.41,-1293.91C2960.63,-1284.2 2945.82,-1273.76 2931.71,-1263.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2933.68,-1260.92 2923.49,-1258.02 2929.65,-1266.64 2933.68,-1260.92\"/>\r\n</g>\r\n<!-- 98 -->\r\n<g id=\"node99\" class=\"node\"><title>98</title>\r\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M3299,-1258C3299,-1258 3125,-1258 3125,-1258 3119,-1258 3113,-1252 3113,-1246 3113,-1246 3113,-1187 3113,-1187 3113,-1181 3119,-1175 3125,-1175 3125,-1175 3299,-1175 3299,-1175 3305,-1175 3311,-1181 3311,-1187 3311,-1187 3311,-1246 3311,-1246 3311,-1252 3305,-1258 3299,-1258\"/>\r\n<text text-anchor=\"start\" x=\"3121\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.054</text>\r\n<text text-anchor=\"start\" x=\"3164.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 934</text>\r\n<text text-anchor=\"start\" x=\"3159\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 1455]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 68&#45;&gt;98 -->\r\n<g id=\"edge98\" class=\"edge\"><title>68&#45;&gt;98</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3094.45,-1293.91C3109.53,-1284.11 3125.75,-1273.56 3141.18,-1263.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3143.18,-1266.41 3149.66,-1258.02 3139.37,-1260.54 3143.18,-1266.41\"/>\r\n</g>\r\n<!-- 70 -->\r\n<g id=\"node71\" class=\"node\"><title>70</title>\r\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M2757.5,-1139C2757.5,-1139 2556.5,-1139 2556.5,-1139 2550.5,-1139 2544.5,-1133 2544.5,-1127 2544.5,-1127 2544.5,-1068 2544.5,-1068 2544.5,-1062 2550.5,-1056 2556.5,-1056 2556.5,-1056 2757.5,-1056 2757.5,-1056 2763.5,-1056 2769.5,-1062 2769.5,-1068 2769.5,-1068 2769.5,-1127 2769.5,-1127 2769.5,-1133 2763.5,-1139 2757.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"2552.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.665</text>\r\n<text text-anchor=\"start\" x=\"2607\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.069</text>\r\n<text text-anchor=\"start\" x=\"2609.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 155</text>\r\n<text text-anchor=\"start\" x=\"2608.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 239]</text>\r\n<text text-anchor=\"start\" x=\"2602\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69&#45;&gt;70 -->\r\n<g id=\"edge70\" class=\"edge\"><title>69&#45;&gt;70</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2793.49,-1174.91C2775.66,-1164.92 2756.45,-1154.17 2738.23,-1143.98\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2739.82,-1140.85 2729.38,-1139.02 2736.4,-1146.96 2739.82,-1140.85\"/>\r\n</g>\r\n<!-- 77 -->\r\n<g id=\"node78\" class=\"node\"><title>77</title>\r\n<path fill=\"#c1e0f7\" stroke=\"black\" d=\"M2917,-1139C2917,-1139 2815,-1139 2815,-1139 2809,-1139 2803,-1133 2803,-1127 2803,-1127 2803,-1068 2803,-1068 2803,-1062 2809,-1056 2815,-1056 2815,-1056 2917,-1056 2917,-1056 2923,-1056 2929,-1062 2929,-1068 2929,-1068 2929,-1127 2929,-1127 2929,-1133 2923,-1139 2917,-1139\"/>\r\n<text text-anchor=\"start\" x=\"2813\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 26.0</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.975</text>\r\n<text text-anchor=\"start\" x=\"2818.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 100</text>\r\n<text text-anchor=\"start\" x=\"2817.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [64, 93]</text>\r\n<text text-anchor=\"start\" x=\"2811\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69&#45;&gt;77 -->\r\n<g id=\"edge77\" class=\"edge\"><title>69&#45;&gt;77</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2866,-1174.91C2866,-1166.65 2866,-1157.86 2866,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2869.5,-1149.02 2866,-1139.02 2862.5,-1149.02 2869.5,-1149.02\"/>\r\n</g>\r\n<!-- 71 -->\r\n<g id=\"node72\" class=\"node\"><title>71</title>\r\n<path fill=\"#72b9ec\" stroke=\"black\" d=\"M2533,-1020C2533,-1020 2431,-1020 2431,-1020 2425,-1020 2419,-1014 2419,-1008 2419,-1008 2419,-949 2419,-949 2419,-943 2425,-937 2431,-937 2431,-937 2533,-937 2533,-937 2539,-937 2545,-943 2545,-949 2545,-949 2545,-1008 2545,-1008 2545,-1014 2539,-1020 2533,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2433\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"2432\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.764</text>\r\n<text text-anchor=\"start\" x=\"2442.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 7]</text>\r\n<text text-anchor=\"start\" x=\"2427\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 70&#45;&gt;71 -->\r\n<g id=\"edge71\" class=\"edge\"><title>70&#45;&gt;71</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2596.28,-1055.91C2581.76,-1046.2 2566.15,-1035.76 2551.27,-1025.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2552.87,-1022.67 2542.61,-1020.02 2548.98,-1028.49 2552.87,-1022.67\"/>\r\n</g>\r\n<!-- 76 -->\r\n<g id=\"node77\" class=\"node\"><title>76</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2708,-1012.5C2708,-1012.5 2606,-1012.5 2606,-1012.5 2600,-1012.5 2594,-1006.5 2594,-1000.5 2594,-1000.5 2594,-956.5 2594,-956.5 2594,-950.5 2600,-944.5 2606,-944.5 2606,-944.5 2708,-944.5 2708,-944.5 2714,-944.5 2720,-950.5 2720,-956.5 2720,-956.5 2720,-1000.5 2720,-1000.5 2720,-1006.5 2714,-1012.5 2708,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"2615\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2609.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 148</text>\r\n<text text-anchor=\"start\" x=\"2608.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 232]</text>\r\n<text text-anchor=\"start\" x=\"2602\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 70&#45;&gt;76 -->\r\n<g id=\"edge76\" class=\"edge\"><title>70&#45;&gt;76</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2657,-1055.91C2657,-1045.2 2657,-1033.62 2657,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2660.5,-1022.67 2657,-1012.67 2653.5,-1022.67 2660.5,-1022.67\"/>\r\n</g>\r\n<!-- 72 -->\r\n<g id=\"node73\" class=\"node\"><title>72</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2382,-893.5C2382,-893.5 2280,-893.5 2280,-893.5 2274,-893.5 2268,-887.5 2268,-881.5 2268,-881.5 2268,-837.5 2268,-837.5 2268,-831.5 2274,-825.5 2280,-825.5 2280,-825.5 2382,-825.5 2382,-825.5 2388,-825.5 2394,-831.5 2394,-837.5 2394,-837.5 2394,-881.5 2394,-881.5 2394,-887.5 2388,-893.5 2382,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"2289\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2291.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"2290.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"2276\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 71&#45;&gt;72 -->\r\n<g id=\"edge72\" class=\"edge\"><title>71&#45;&gt;72</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2429.61,-936.907C2414.23,-924.99 2397.43,-911.976 2382.13,-900.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2383.85,-897.025 2373.81,-893.667 2379.57,-902.559 2383.85,-897.025\"/>\r\n</g>\r\n<!-- 73 -->\r\n<g id=\"node74\" class=\"node\"><title>73</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2539.5,-901C2539.5,-901 2424.5,-901 2424.5,-901 2418.5,-901 2412.5,-895 2412.5,-889 2412.5,-889 2412.5,-830 2412.5,-830 2412.5,-824 2418.5,-818 2424.5,-818 2424.5,-818 2539.5,-818 2539.5,-818 2545.5,-818 2551.5,-824 2551.5,-830 2551.5,-830 2551.5,-889 2551.5,-889 2551.5,-895 2545.5,-901 2539.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2420.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2432\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2442.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"2435\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 71&#45;&gt;73 -->\r\n<g id=\"edge73\" class=\"edge\"><title>71&#45;&gt;73</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2482,-936.907C2482,-928.649 2482,-919.864 2482,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2485.5,-911.021 2482,-901.021 2478.5,-911.021 2485.5,-911.021\"/>\r\n</g>\r\n<!-- 74 -->\r\n<g id=\"node75\" class=\"node\"><title>74</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2353,-774.5C2353,-774.5 2267,-774.5 2267,-774.5 2261,-774.5 2255,-768.5 2255,-762.5 2255,-762.5 2255,-718.5 2255,-718.5 2255,-712.5 2261,-706.5 2267,-706.5 2267,-706.5 2353,-706.5 2353,-706.5 2359,-706.5 2365,-712.5 2365,-718.5 2365,-718.5 2365,-762.5 2365,-762.5 2365,-768.5 2359,-774.5 2353,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2268\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2270.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2269.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"2263\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 73&#45;&gt;74 -->\r\n<g id=\"edge74\" class=\"edge\"><title>73&#45;&gt;74</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2422.33,-817.907C2404.48,-805.769 2384.96,-792.493 2367.28,-780.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2369,-777.397 2358.76,-774.667 2365.06,-783.185 2369,-777.397\"/>\r\n</g>\r\n<!-- 75 -->\r\n<g id=\"node76\" class=\"node\"><title>75</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2497,-774.5C2497,-774.5 2395,-774.5 2395,-774.5 2389,-774.5 2383,-768.5 2383,-762.5 2383,-762.5 2383,-718.5 2383,-718.5 2383,-712.5 2389,-706.5 2395,-706.5 2395,-706.5 2497,-706.5 2497,-706.5 2503,-706.5 2509,-712.5 2509,-718.5 2509,-718.5 2509,-762.5 2509,-762.5 2509,-768.5 2503,-774.5 2497,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2404\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2405.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2391\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 73&#45;&gt;75 -->\r\n<g id=\"edge75\" class=\"edge\"><title>73&#45;&gt;75</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2469.51,-817.907C2466.18,-807.094 2462.58,-795.376 2459.21,-784.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2462.49,-783.195 2456.21,-774.667 2455.8,-785.254 2462.49,-783.195\"/>\r\n</g>\r\n<!-- 78 -->\r\n<g id=\"node79\" class=\"node\"><title>78</title>\r\n<path fill=\"#eeac7d\" stroke=\"black\" d=\"M2894.5,-1020C2894.5,-1020 2779.5,-1020 2779.5,-1020 2773.5,-1020 2767.5,-1014 2767.5,-1008 2767.5,-1008 2767.5,-949 2767.5,-949 2767.5,-943 2773.5,-937 2779.5,-937 2779.5,-937 2894.5,-937 2894.5,-937 2900.5,-937 2906.5,-943 2906.5,-949 2906.5,-949 2906.5,-1008 2906.5,-1008 2906.5,-1014 2900.5,-1020 2894.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2775.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2791\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.82</text>\r\n<text text-anchor=\"start\" x=\"2793.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"2788.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [64, 22]</text>\r\n<text text-anchor=\"start\" x=\"2790\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 77&#45;&gt;78 -->\r\n<g id=\"edge78\" class=\"edge\"><title>77&#45;&gt;78</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2855.94,-1055.91C2853.85,-1047.47 2851.62,-1038.48 2849.45,-1029.74\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2852.85,-1028.89 2847.04,-1020.02 2846.05,-1030.57 2852.85,-1028.89\"/>\r\n</g>\r\n<!-- 97 -->\r\n<g id=\"node98\" class=\"node\"><title>97</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3039,-1012.5C3039,-1012.5 2937,-1012.5 2937,-1012.5 2931,-1012.5 2925,-1006.5 2925,-1000.5 2925,-1000.5 2925,-956.5 2925,-956.5 2925,-950.5 2931,-944.5 2937,-944.5 2937,-944.5 3039,-944.5 3039,-944.5 3045,-944.5 3051,-950.5 3051,-956.5 3051,-956.5 3051,-1000.5 3051,-1000.5 3051,-1006.5 3045,-1012.5 3039,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"2946\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2944.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 49</text>\r\n<text text-anchor=\"start\" x=\"2943.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 71]</text>\r\n<text text-anchor=\"start\" x=\"2933\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 77&#45;&gt;97 -->\r\n<g id=\"edge97\" class=\"edge\"><title>77&#45;&gt;97</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2908.33,-1055.91C2920.52,-1044.21 2933.82,-1031.46 2946,-1019.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2948.62,-1022.11 2953.42,-1012.67 2943.78,-1017.06 2948.62,-1022.11\"/>\r\n</g>\r\n<!-- 79 -->\r\n<g id=\"node80\" class=\"node\"><title>79</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M2803.5,-901C2803.5,-901 2616.5,-901 2616.5,-901 2610.5,-901 2604.5,-895 2604.5,-889 2604.5,-889 2604.5,-830 2604.5,-830 2604.5,-824 2610.5,-818 2616.5,-818 2616.5,-818 2803.5,-818 2803.5,-818 2809.5,-818 2815.5,-824 2815.5,-830 2815.5,-830 2815.5,-889 2815.5,-889 2815.5,-895 2809.5,-901 2803.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2612.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.045</text>\r\n<text text-anchor=\"start\" x=\"2660\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.235</text>\r\n<text text-anchor=\"start\" x=\"2666.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 32</text>\r\n<text text-anchor=\"start\" x=\"2665.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [50, 2]</text>\r\n<text text-anchor=\"start\" x=\"2663\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 78&#45;&gt;79 -->\r\n<g id=\"edge79\" class=\"edge\"><title>78&#45;&gt;79</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2792.94,-936.907C2782.79,-927.56 2771.91,-917.538 2761.48,-907.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2763.71,-905.222 2753.98,-901.021 2758.97,-910.371 2763.71,-905.222\"/>\r\n</g>\r\n<!-- 86 -->\r\n<g id=\"node87\" class=\"node\"><title>86</title>\r\n<path fill=\"#c4e2f7\" stroke=\"black\" d=\"M2960,-901C2960,-901 2858,-901 2858,-901 2852,-901 2846,-895 2846,-889 2846,-889 2846,-830 2846,-830 2846,-824 2852,-818 2858,-818 2858,-818 2960,-818 2960,-818 2966,-818 2972,-824 2972,-830 2972,-830 2972,-889 2972,-889 2972,-895 2966,-901 2960,-901\"/>\r\n<text text-anchor=\"start\" x=\"2860.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"2859\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.977</text>\r\n<text text-anchor=\"start\" x=\"2865.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"2860.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 20]</text>\r\n<text text-anchor=\"start\" x=\"2854\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 78&#45;&gt;86 -->\r\n<g id=\"edge86\" class=\"edge\"><title>78&#45;&gt;86</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2861.98,-936.907C2867.4,-928.105 2873.18,-918.703 2878.78,-909.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2881.8,-911.372 2884.06,-901.021 2875.84,-907.703 2881.8,-911.372\"/>\r\n</g>\r\n<!-- 80 -->\r\n<g id=\"node81\" class=\"node\"><title>80</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2625,-774.5C2625,-774.5 2539,-774.5 2539,-774.5 2533,-774.5 2527,-768.5 2527,-762.5 2527,-762.5 2527,-718.5 2527,-718.5 2527,-712.5 2533,-706.5 2539,-706.5 2539,-706.5 2625,-706.5 2625,-706.5 2631,-706.5 2637,-712.5 2637,-718.5 2637,-718.5 2637,-762.5 2637,-762.5 2637,-768.5 2631,-774.5 2625,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2540\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2538.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"2537.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 0]</text>\r\n<text text-anchor=\"start\" x=\"2535\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79&#45;&gt;80 -->\r\n<g id=\"edge80\" class=\"edge\"><title>79&#45;&gt;80</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2665.59,-817.907C2652.67,-806.101 2638.58,-793.217 2625.71,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2628.03,-778.83 2618.29,-774.667 2623.3,-783.997 2628.03,-778.83\"/>\r\n</g>\r\n<!-- 81 -->\r\n<g id=\"node82\" class=\"node\"><title>81</title>\r\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M2753,-782C2753,-782 2667,-782 2667,-782 2661,-782 2655,-776 2655,-770 2655,-770 2655,-711 2655,-711 2655,-705 2661,-699 2667,-699 2667,-699 2753,-699 2753,-699 2759,-699 2765,-705 2765,-711 2765,-711 2765,-770 2765,-770 2765,-776 2759,-782 2753,-782\"/>\r\n<text text-anchor=\"start\" x=\"2665\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.5</text>\r\n<text text-anchor=\"start\" x=\"2664\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"2670.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"2665.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 2]</text>\r\n<text text-anchor=\"start\" x=\"2663\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79&#45;&gt;81 -->\r\n<g id=\"edge81\" class=\"edge\"><title>79&#45;&gt;81</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2710,-817.907C2710,-809.649 2710,-800.864 2710,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2713.5,-792.021 2710,-782.021 2706.5,-792.021 2713.5,-792.021\"/>\r\n</g>\r\n<!-- 82 -->\r\n<g id=\"node83\" class=\"node\"><title>82</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M2591.5,-663C2591.5,-663 2414.5,-663 2414.5,-663 2408.5,-663 2402.5,-657 2402.5,-651 2402.5,-651 2402.5,-592 2402.5,-592 2402.5,-586 2408.5,-580 2414.5,-580 2414.5,-580 2591.5,-580 2591.5,-580 2597.5,-580 2603.5,-586 2603.5,-592 2603.5,-592 2603.5,-651 2603.5,-651 2603.5,-657 2597.5,-663 2591.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"2410.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.365</text>\r\n<text text-anchor=\"start\" x=\"2453\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2463.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2462.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"2448\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 81&#45;&gt;82 -->\r\n<g id=\"edge82\" class=\"edge\"><title>81&#45;&gt;82</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2655,-704.337C2651.97,-702.511 2648.95,-700.722 2646,-699 2628.23,-688.643 2608.96,-677.969 2590.49,-668\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2591.96,-664.819 2581.5,-663.168 2588.65,-670.985 2591.96,-664.819\"/>\r\n</g>\r\n<!-- 85 -->\r\n<g id=\"node86\" class=\"node\"><title>85</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2720,-655.5C2720,-655.5 2634,-655.5 2634,-655.5 2628,-655.5 2622,-649.5 2622,-643.5 2622,-643.5 2622,-599.5 2622,-599.5 2622,-593.5 2628,-587.5 2634,-587.5 2634,-587.5 2720,-587.5 2720,-587.5 2726,-587.5 2732,-593.5 2732,-599.5 2732,-599.5 2732,-643.5 2732,-643.5 2732,-649.5 2726,-655.5 2720,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2635\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2637.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2636.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"2630\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 81&#45;&gt;85 -->\r\n<g id=\"edge85\" class=\"edge\"><title>81&#45;&gt;85</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2698.55,-698.907C2695.5,-688.094 2692.2,-676.376 2689.11,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2692.44,-664.341 2686.35,-655.667 2685.7,-666.242 2692.44,-664.341\"/>\r\n</g>\r\n<!-- 83 -->\r\n<g id=\"node84\" class=\"node\"><title>83</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2486,-536.5C2486,-536.5 2384,-536.5 2384,-536.5 2378,-536.5 2372,-530.5 2372,-524.5 2372,-524.5 2372,-480.5 2372,-480.5 2372,-474.5 2378,-468.5 2384,-468.5 2384,-468.5 2486,-468.5 2486,-468.5 2492,-468.5 2498,-474.5 2498,-480.5 2498,-480.5 2498,-524.5 2498,-524.5 2498,-530.5 2492,-536.5 2486,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2393\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2395.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2394.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2380\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 82&#45;&gt;83 -->\r\n<g id=\"edge83\" class=\"edge\"><title>82&#45;&gt;83</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2479.41,-579.907C2472.93,-568.763 2465.9,-556.658 2459.37,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2462.33,-543.554 2454.28,-536.667 2456.28,-547.072 2462.33,-543.554\"/>\r\n</g>\r\n<!-- 84 -->\r\n<g id=\"node85\" class=\"node\"><title>84</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2614,-536.5C2614,-536.5 2528,-536.5 2528,-536.5 2522,-536.5 2516,-530.5 2516,-524.5 2516,-524.5 2516,-480.5 2516,-480.5 2516,-474.5 2522,-468.5 2528,-468.5 2528,-468.5 2614,-468.5 2614,-468.5 2620,-468.5 2626,-474.5 2626,-480.5 2626,-480.5 2626,-524.5 2626,-524.5 2626,-530.5 2620,-536.5 2614,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2529\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2531.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2530.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2524\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 82&#45;&gt;84 -->\r\n<g id=\"edge84\" class=\"edge\"><title>82&#45;&gt;84</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2526.59,-579.907C2533.07,-568.763 2540.1,-556.658 2546.63,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2549.72,-547.072 2551.72,-536.667 2543.67,-543.554 2549.72,-547.072\"/>\r\n</g>\r\n<!-- 87 -->\r\n<g id=\"node88\" class=\"node\"><title>87</title>\r\n<path fill=\"#eb9e67\" stroke=\"black\" d=\"M3022.5,-782C3022.5,-782 2795.5,-782 2795.5,-782 2789.5,-782 2783.5,-776 2783.5,-770 2783.5,-770 2783.5,-711 2783.5,-711 2783.5,-705 2789.5,-699 2795.5,-699 2795.5,-699 3022.5,-699 3022.5,-699 3028.5,-699 3034.5,-705 3034.5,-711 3034.5,-711 3034.5,-770 3034.5,-770 3034.5,-776 3028.5,-782 3022.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"2791.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.39</text>\r\n<text text-anchor=\"start\" x=\"2859\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.696</text>\r\n<text text-anchor=\"start\" x=\"2869.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"2864.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 3]</text>\r\n<text text-anchor=\"start\" x=\"2862\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 86&#45;&gt;87 -->\r\n<g id=\"edge87\" class=\"edge\"><title>86&#45;&gt;87</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2909,-817.907C2909,-809.649 2909,-800.864 2909,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2912.5,-792.021 2909,-782.021 2905.5,-792.021 2912.5,-792.021\"/>\r\n</g>\r\n<!-- 90 -->\r\n<g id=\"node91\" class=\"node\"><title>90</title>\r\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M3241.5,-782C3241.5,-782 3064.5,-782 3064.5,-782 3058.5,-782 3052.5,-776 3052.5,-770 3052.5,-770 3052.5,-711 3052.5,-711 3052.5,-705 3058.5,-699 3064.5,-699 3064.5,-699 3241.5,-699 3241.5,-699 3247.5,-699 3253.5,-705 3253.5,-711 3253.5,-711 3253.5,-770 3253.5,-770 3253.5,-776 3247.5,-782 3241.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"3060.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.065</text>\r\n<text text-anchor=\"start\" x=\"3107\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.31</text>\r\n<text text-anchor=\"start\" x=\"3109.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"3108.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 17]</text>\r\n<text text-anchor=\"start\" x=\"3098\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 86&#45;&gt;90 -->\r\n<g id=\"edge90\" class=\"edge\"><title>86&#45;&gt;90</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2972.15,-828.217C2998.66,-815.509 3030.03,-800.465 3059.14,-786.506\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3061,-789.495 3068.51,-782.016 3057.98,-783.184 3061,-789.495\"/>\r\n</g>\r\n<!-- 88 -->\r\n<g id=\"node89\" class=\"node\"><title>88</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2848,-655.5C2848,-655.5 2762,-655.5 2762,-655.5 2756,-655.5 2750,-649.5 2750,-643.5 2750,-643.5 2750,-599.5 2750,-599.5 2750,-593.5 2756,-587.5 2762,-587.5 2762,-587.5 2848,-587.5 2848,-587.5 2854,-587.5 2860,-593.5 2860,-599.5 2860,-599.5 2860,-643.5 2860,-643.5 2860,-649.5 2854,-655.5 2848,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2763\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2765.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2760.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 0]</text>\r\n<text text-anchor=\"start\" x=\"2758\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 87&#45;&gt;88 -->\r\n<g id=\"edge88\" class=\"edge\"><title>87&#45;&gt;88</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2872.92,-698.907C2862.72,-687.432 2851.61,-674.938 2841.39,-663.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2843.74,-660.816 2834.48,-655.667 2838.51,-665.466 2843.74,-660.816\"/>\r\n</g>\r\n<!-- 89 -->\r\n<g id=\"node90\" class=\"node\"><title>89</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2992,-655.5C2992,-655.5 2890,-655.5 2890,-655.5 2884,-655.5 2878,-649.5 2878,-643.5 2878,-643.5 2878,-599.5 2878,-599.5 2878,-593.5 2884,-587.5 2890,-587.5 2890,-587.5 2992,-587.5 2992,-587.5 2998,-587.5 3004,-593.5 3004,-599.5 3004,-599.5 3004,-643.5 3004,-643.5 3004,-649.5 2998,-655.5 2992,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2899\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2901.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2900.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"2886\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 87&#45;&gt;89 -->\r\n<g id=\"edge89\" class=\"edge\"><title>87&#45;&gt;89</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2920.1,-698.907C2923.06,-688.094 2926.26,-676.376 2929.26,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2932.67,-666.236 2931.93,-655.667 2925.91,-664.389 2932.67,-666.236\"/>\r\n</g>\r\n<!-- 91 -->\r\n<g id=\"node92\" class=\"node\"><title>91</title>\r\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M3208,-663C3208,-663 3034,-663 3034,-663 3028,-663 3022,-657 3022,-651 3022,-651 3022,-592 3022,-592 3022,-586 3028,-580 3034,-580 3034,-580 3208,-580 3208,-580 3214,-580 3220,-586 3220,-592 3220,-592 3220,-651 3220,-651 3220,-657 3214,-663 3208,-663\"/>\r\n<text text-anchor=\"start\" x=\"3030\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"3071\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.323</text>\r\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\r\n<text text-anchor=\"start\" x=\"3076.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 16]</text>\r\n<text text-anchor=\"start\" x=\"3066\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90&#45;&gt;91 -->\r\n<g id=\"edge91\" class=\"edge\"><title>90&#45;&gt;91</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3141.9,-698.907C3139.59,-690.468 3137.13,-681.477 3134.74,-672.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3138.1,-671.743 3132.08,-663.021 3131.34,-673.59 3138.1,-671.743\"/>\r\n</g>\r\n<!-- 96 -->\r\n<g id=\"node97\" class=\"node\"><title>96</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3352,-655.5C3352,-655.5 3250,-655.5 3250,-655.5 3244,-655.5 3238,-649.5 3238,-643.5 3238,-643.5 3238,-599.5 3238,-599.5 3238,-593.5 3244,-587.5 3250,-587.5 3250,-587.5 3352,-587.5 3352,-587.5 3358,-587.5 3364,-593.5 3364,-599.5 3364,-599.5 3364,-643.5 3364,-643.5 3364,-649.5 3358,-655.5 3352,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3259\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3261.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3260.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3246\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90&#45;&gt;96 -->\r\n<g id=\"edge96\" class=\"edge\"><title>90&#45;&gt;96</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3204.35,-698.907C3219.42,-686.99 3235.89,-673.976 3250.88,-662.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3253.37,-664.614 3259.05,-655.667 3249.03,-659.123 3253.37,-664.614\"/>\r\n</g>\r\n<!-- 92 -->\r\n<g id=\"node93\" class=\"node\"><title>92</title>\r\n<path fill=\"#4fa8e8\" stroke=\"black\" d=\"M3128.5,-544C3128.5,-544 2909.5,-544 2909.5,-544 2903.5,-544 2897.5,-538 2897.5,-532 2897.5,-532 2897.5,-473 2897.5,-473 2897.5,-467 2903.5,-461 2909.5,-461 2909.5,-461 3128.5,-461 3128.5,-461 3134.5,-461 3140.5,-467 3140.5,-473 3140.5,-473 3140.5,-532 3140.5,-532 3140.5,-538 3134.5,-544 3128.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2905.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2969\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"2979.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2978.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 9]</text>\r\n<text text-anchor=\"start\" x=\"2964\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 91&#45;&gt;92 -->\r\n<g id=\"edge92\" class=\"edge\"><title>91&#45;&gt;92</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3085.61,-579.907C3077.7,-570.832 3069.23,-561.121 3061.08,-551.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3063.54,-549.259 3054.33,-544.021 3058.26,-553.859 3063.54,-549.259\"/>\r\n</g>\r\n<!-- 95 -->\r\n<g id=\"node96\" class=\"node\"><title>95</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3273,-536.5C3273,-536.5 3171,-536.5 3171,-536.5 3165,-536.5 3159,-530.5 3159,-524.5 3159,-524.5 3159,-480.5 3159,-480.5 3159,-474.5 3165,-468.5 3171,-468.5 3171,-468.5 3273,-468.5 3273,-468.5 3279,-468.5 3285,-474.5 3285,-480.5 3285,-480.5 3285,-524.5 3285,-524.5 3285,-530.5 3279,-536.5 3273,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3180\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3182.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3181.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"3167\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 91&#45;&gt;95 -->\r\n<g id=\"edge95\" class=\"edge\"><title>91&#45;&gt;95</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3156.04,-579.907C3165.95,-568.432 3176.73,-555.938 3186.66,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3189.48,-546.524 3193.37,-536.667 3184.18,-541.95 3189.48,-546.524\"/>\r\n</g>\r\n<!-- 93 -->\r\n<g id=\"node94\" class=\"node\"><title>93</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2994,-417.5C2994,-417.5 2908,-417.5 2908,-417.5 2902,-417.5 2896,-411.5 2896,-405.5 2896,-405.5 2896,-361.5 2896,-361.5 2896,-355.5 2902,-349.5 2908,-349.5 2908,-349.5 2994,-349.5 2994,-349.5 3000,-349.5 3006,-355.5 3006,-361.5 3006,-361.5 3006,-405.5 3006,-405.5 3006,-411.5 3000,-417.5 2994,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2909\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2911.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2910.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2904\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 92&#45;&gt;93 -->\r\n<g id=\"edge93\" class=\"edge\"><title>92&#45;&gt;93</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2995.41,-460.907C2988.93,-449.763 2981.9,-437.658 2975.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2978.33,-424.554 2970.28,-417.667 2972.28,-428.072 2978.33,-424.554\"/>\r\n</g>\r\n<!-- 94 -->\r\n<g id=\"node95\" class=\"node\"><title>94</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3138,-417.5C3138,-417.5 3036,-417.5 3036,-417.5 3030,-417.5 3024,-411.5 3024,-405.5 3024,-405.5 3024,-361.5 3024,-361.5 3024,-355.5 3030,-349.5 3036,-349.5 3036,-349.5 3138,-349.5 3138,-349.5 3144,-349.5 3150,-355.5 3150,-361.5 3150,-361.5 3150,-405.5 3150,-405.5 3150,-411.5 3144,-417.5 3138,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3045\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3047.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3046.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"3032\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 92&#45;&gt;94 -->\r\n<g id=\"edge94\" class=\"edge\"><title>92&#45;&gt;94</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3042.59,-460.907C3049.07,-449.763 3056.1,-437.658 3062.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3065.72,-428.072 3067.72,-417.667 3059.67,-424.554 3065.72,-428.072\"/>\r\n</g>\r\n<!-- 99 -->\r\n<g id=\"node100\" class=\"node\"><title>99</title>\r\n<path fill=\"#51a9e8\" stroke=\"black\" d=\"M3269.5,-1139C3269.5,-1139 3154.5,-1139 3154.5,-1139 3148.5,-1139 3142.5,-1133 3142.5,-1127 3142.5,-1127 3142.5,-1068 3142.5,-1068 3142.5,-1062 3148.5,-1056 3154.5,-1056 3154.5,-1056 3269.5,-1056 3269.5,-1056 3275.5,-1056 3281.5,-1062 3281.5,-1068 3281.5,-1068 3281.5,-1127 3281.5,-1127 3281.5,-1133 3275.5,-1139 3269.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"3150.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.495</text>\r\n<text text-anchor=\"start\" x=\"3168.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 54</text>\r\n<text text-anchor=\"start\" x=\"3167.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 74]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 98&#45;&gt;99 -->\r\n<g id=\"edge99\" class=\"edge\"><title>98&#45;&gt;99</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-1174.91C3212,-1166.65 3212,-1157.86 3212,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-1149.02 3212,-1139.02 3208.5,-1149.02 3215.5,-1149.02\"/>\r\n</g>\r\n<!-- 108 -->\r\n<g id=\"node109\" class=\"node\"><title>108</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3414,-1131.5C3414,-1131.5 3312,-1131.5 3312,-1131.5 3306,-1131.5 3300,-1125.5 3300,-1119.5 3300,-1119.5 3300,-1075.5 3300,-1075.5 3300,-1069.5 3306,-1063.5 3312,-1063.5 3312,-1063.5 3414,-1063.5 3414,-1063.5 3420,-1063.5 3426,-1069.5 3426,-1075.5 3426,-1075.5 3426,-1119.5 3426,-1119.5 3426,-1125.5 3420,-1131.5 3414,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"3321\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 880</text>\r\n<text text-anchor=\"start\" x=\"3310\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1381]</text>\r\n<text text-anchor=\"start\" x=\"3308\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 98&#45;&gt;108 -->\r\n<g id=\"edge108\" class=\"edge\"><title>98&#45;&gt;108</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3264.39,-1174.91C3279.77,-1162.99 3296.57,-1149.98 3311.87,-1138.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3314.43,-1140.56 3320.19,-1131.67 3310.15,-1135.03 3314.43,-1140.56\"/>\r\n</g>\r\n<!-- 100 -->\r\n<g id=\"node101\" class=\"node\"><title>100</title>\r\n<path fill=\"#eb9d65\" stroke=\"black\" d=\"M3265.5,-1020C3265.5,-1020 3158.5,-1020 3158.5,-1020 3152.5,-1020 3146.5,-1014 3146.5,-1008 3146.5,-1008 3146.5,-949 3146.5,-949 3146.5,-943 3152.5,-937 3158.5,-937 3158.5,-937 3265.5,-937 3265.5,-937 3271.5,-937 3277.5,-943 3277.5,-949 3277.5,-949 3277.5,-1008 3277.5,-1008 3277.5,-1014 3271.5,-1020 3265.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"3154.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.3</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.684</text>\r\n<text text-anchor=\"start\" x=\"3172.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"3171.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 2]</text>\r\n<text text-anchor=\"start\" x=\"3165\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 99&#45;&gt;100 -->\r\n<g id=\"edge100\" class=\"edge\"><title>99&#45;&gt;100</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-1055.91C3212,-1047.65 3212,-1038.86 3212,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-1030.02 3212,-1020.02 3208.5,-1030.02 3215.5,-1030.02\"/>\r\n</g>\r\n<!-- 107 -->\r\n<g id=\"node108\" class=\"node\"><title>107</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3410,-1012.5C3410,-1012.5 3308,-1012.5 3308,-1012.5 3302,-1012.5 3296,-1006.5 3296,-1000.5 3296,-1000.5 3296,-956.5 3296,-956.5 3296,-950.5 3302,-944.5 3308,-944.5 3308,-944.5 3410,-944.5 3410,-944.5 3416,-944.5 3422,-950.5 3422,-956.5 3422,-956.5 3422,-1000.5 3422,-1000.5 3422,-1006.5 3416,-1012.5 3410,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"3317\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\r\n<text text-anchor=\"start\" x=\"3314.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 72]</text>\r\n<text text-anchor=\"start\" x=\"3304\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 99&#45;&gt;107 -->\r\n<g id=\"edge107\" class=\"edge\"><title>99&#45;&gt;107</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3263,-1055.91C3277.97,-1043.99 3294.33,-1030.98 3309.22,-1019.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3311.68,-1021.63 3317.33,-1012.67 3307.32,-1016.16 3311.68,-1021.63\"/>\r\n</g>\r\n<!-- 101 -->\r\n<g id=\"node102\" class=\"node\"><title>101</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3263,-893.5C3263,-893.5 3161,-893.5 3161,-893.5 3155,-893.5 3149,-887.5 3149,-881.5 3149,-881.5 3149,-837.5 3149,-837.5 3149,-831.5 3155,-825.5 3161,-825.5 3161,-825.5 3263,-825.5 3263,-825.5 3269,-825.5 3275,-831.5 3275,-837.5 3275,-837.5 3275,-881.5 3275,-881.5 3275,-887.5 3269,-893.5 3263,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"3170\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3172.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3171.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 100&#45;&gt;101 -->\r\n<g id=\"edge101\" class=\"edge\"><title>100&#45;&gt;101</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-936.907C3212,-926.204 3212,-914.615 3212,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-903.667 3212,-893.667 3208.5,-903.667 3215.5,-903.667\"/>\r\n</g>\r\n<!-- 102 -->\r\n<g id=\"node103\" class=\"node\"><title>102</title>\r\n<path fill=\"#e88f4f\" stroke=\"black\" d=\"M3506.5,-901C3506.5,-901 3367.5,-901 3367.5,-901 3361.5,-901 3355.5,-895 3355.5,-889 3355.5,-889 3355.5,-830 3355.5,-830 3355.5,-824 3361.5,-818 3367.5,-818 3367.5,-818 3506.5,-818 3506.5,-818 3512.5,-818 3518.5,-824 3518.5,-830 3518.5,-830 3518.5,-889 3518.5,-889 3518.5,-895 3512.5,-901 3506.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"3363.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.415</text>\r\n<text text-anchor=\"start\" x=\"3387\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 1]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 100&#45;&gt;102 -->\r\n<g id=\"edge102\" class=\"edge\"><title>100&#45;&gt;102</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3277.8,-941.853C3280.91,-940.206 3283.99,-938.582 3287,-937 3306.53,-926.75 3327.57,-915.897 3347.55,-905.687\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3349.32,-908.709 3356.64,-901.045 3346.14,-902.475 3349.32,-908.709\"/>\r\n</g>\r\n<!-- 103 -->\r\n<g id=\"node104\" class=\"node\"><title>103</title>\r\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M3483,-782C3483,-782 3391,-782 3391,-782 3385,-782 3379,-776 3379,-770 3379,-770 3379,-711 3379,-711 3379,-705 3385,-699 3391,-699 3391,-699 3483,-699 3483,-699 3489,-699 3495,-705 3495,-711 3495,-711 3495,-770 3495,-770 3495,-776 3489,-782 3483,-782\"/>\r\n<text text-anchor=\"start\" x=\"3394\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"3387\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 1]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102&#45;&gt;103 -->\r\n<g id=\"edge103\" class=\"edge\"><title>102&#45;&gt;103</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3437,-817.907C3437,-809.649 3437,-800.864 3437,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3440.5,-792.021 3437,-782.021 3433.5,-792.021 3440.5,-792.021\"/>\r\n</g>\r\n<!-- 106 -->\r\n<g id=\"node107\" class=\"node\"><title>106</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3611,-774.5C3611,-774.5 3525,-774.5 3525,-774.5 3519,-774.5 3513,-768.5 3513,-762.5 3513,-762.5 3513,-718.5 3513,-718.5 3513,-712.5 3519,-706.5 3525,-706.5 3525,-706.5 3611,-706.5 3611,-706.5 3617,-706.5 3623,-712.5 3623,-718.5 3623,-718.5 3623,-762.5 3623,-762.5 3623,-768.5 3617,-774.5 3611,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"3526\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3528.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3527.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"3521\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102&#45;&gt;106 -->\r\n<g id=\"edge106\" class=\"edge\"><title>102&#45;&gt;106</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3482.45,-817.907C3495.67,-806.101 3510.1,-793.217 3523.27,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3525.74,-783.939 3530.86,-774.667 3521.07,-778.718 3525.74,-783.939\"/>\r\n</g>\r\n<!-- 104 -->\r\n<g id=\"node105\" class=\"node\"><title>104</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3480,-655.5C3480,-655.5 3394,-655.5 3394,-655.5 3388,-655.5 3382,-649.5 3382,-643.5 3382,-643.5 3382,-599.5 3382,-599.5 3382,-593.5 3388,-587.5 3394,-587.5 3394,-587.5 3480,-587.5 3480,-587.5 3486,-587.5 3492,-593.5 3492,-599.5 3492,-599.5 3492,-643.5 3492,-643.5 3492,-649.5 3486,-655.5 3480,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3395\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103&#45;&gt;104 -->\r\n<g id=\"edge104\" class=\"edge\"><title>103&#45;&gt;104</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3437,-698.907C3437,-688.204 3437,-676.615 3437,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3440.5,-665.667 3437,-655.667 3433.5,-665.667 3440.5,-665.667\"/>\r\n</g>\r\n<!-- 105 -->\r\n<g id=\"node106\" class=\"node\"><title>105</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3624,-655.5C3624,-655.5 3522,-655.5 3522,-655.5 3516,-655.5 3510,-649.5 3510,-643.5 3510,-643.5 3510,-599.5 3510,-599.5 3510,-593.5 3516,-587.5 3522,-587.5 3522,-587.5 3624,-587.5 3624,-587.5 3630,-587.5 3636,-593.5 3636,-599.5 3636,-599.5 3636,-643.5 3636,-643.5 3636,-649.5 3630,-655.5 3624,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3531\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3533.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3532.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3518\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 103&#45;&gt;105 -->\r\n<g id=\"edge105\" class=\"edge\"><title>103&#45;&gt;105</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3484.18,-698.907C3497.91,-687.101 3512.89,-674.217 3526.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3529.15,-664.842 3534.45,-655.667 3524.58,-659.535 3529.15,-664.842\"/>\r\n</g>\r\n<!-- 111 -->\r\n<g id=\"node112\" class=\"node\"><title>111</title>\r\n<path fill=\"#f3c3a0\" stroke=\"black\" d=\"M5649,-1496C5649,-1496 5535,-1496 5535,-1496 5529,-1496 5523,-1490 5523,-1484 5523,-1484 5523,-1425 5523,-1425 5523,-1419 5529,-1413 5535,-1413 5535,-1413 5649,-1413 5649,-1413 5655,-1413 5661,-1419 5661,-1425 5661,-1425 5661,-1484 5661,-1484 5661,-1490 5655,-1496 5649,-1496\"/>\r\n<text text-anchor=\"start\" x=\"5547\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 58.0</text>\r\n<text text-anchor=\"start\" x=\"5542\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.927</text>\r\n<text text-anchor=\"start\" x=\"5544.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 987</text>\r\n<text text-anchor=\"start\" x=\"5531\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1011, 526]</text>\r\n<text text-anchor=\"start\" x=\"5545\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110&#45;&gt;111 -->\r\n<g id=\"edge111\" class=\"edge\"><title>110&#45;&gt;111</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5592,-1531.91C5592,-1523.65 5592,-1514.86 5592,-1506.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5595.5,-1506.02 5592,-1496.02 5588.5,-1506.02 5595.5,-1506.02\"/>\r\n</g>\r\n<!-- 210 -->\r\n<g id=\"node211\" class=\"node\"><title>210</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M7449.5,-1496C7449.5,-1496 7280.5,-1496 7280.5,-1496 7274.5,-1496 7268.5,-1490 7268.5,-1484 7268.5,-1484 7268.5,-1425 7268.5,-1425 7268.5,-1419 7274.5,-1413 7280.5,-1413 7280.5,-1413 7449.5,-1413 7449.5,-1413 7455.5,-1413 7461.5,-1419 7461.5,-1425 7461.5,-1425 7461.5,-1484 7461.5,-1484 7461.5,-1490 7455.5,-1496 7449.5,-1496\"/>\r\n<text text-anchor=\"start\" x=\"7276.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 181.5</text>\r\n<text text-anchor=\"start\" x=\"7315\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.167</text>\r\n<text text-anchor=\"start\" x=\"7313.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5119</text>\r\n<text text-anchor=\"start\" x=\"7304\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7959, 202]</text>\r\n<text text-anchor=\"start\" x=\"7318\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110&#45;&gt;210 -->\r\n<g id=\"edge210\" class=\"edge\"><title>110&#45;&gt;210</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5661.23,-1567.93C5933.15,-1549.99 6929.12,-1484.26 7258.47,-1462.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7258.74,-1466.02 7268.49,-1461.87 7258.28,-1459.03 7258.74,-1466.02\"/>\r\n</g>\r\n<!-- 112 -->\r\n<g id=\"node113\" class=\"node\"><title>112</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M5262.5,-1377C5262.5,-1377 5075.5,-1377 5075.5,-1377 5069.5,-1377 5063.5,-1371 5063.5,-1365 5063.5,-1365 5063.5,-1306 5063.5,-1306 5063.5,-1300 5069.5,-1294 5075.5,-1294 5075.5,-1294 5262.5,-1294 5262.5,-1294 5268.5,-1294 5274.5,-1300 5274.5,-1306 5274.5,-1306 5274.5,-1365 5274.5,-1365 5274.5,-1371 5268.5,-1377 5262.5,-1377\"/>\r\n<text text-anchor=\"start\" x=\"5071.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"5119\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.594</text>\r\n<text text-anchor=\"start\" x=\"5121.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 567</text>\r\n<text text-anchor=\"start\" x=\"5112\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [768, 129]</text>\r\n<text text-anchor=\"start\" x=\"5122\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 111&#45;&gt;112 -->\r\n<g id=\"edge112\" class=\"edge\"><title>111&#45;&gt;112</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5522.62,-1434.31C5458.12,-1416.47 5360.78,-1389.54 5284.54,-1368.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5285.45,-1365.08 5274.88,-1365.79 5283.59,-1371.83 5285.45,-1365.08\"/>\r\n</g>\r\n<!-- 191 -->\r\n<g id=\"node192\" class=\"node\"><title>191</title>\r\n<path fill=\"#b2d9f5\" stroke=\"black\" d=\"M6069,-1377C6069,-1377 5963,-1377 5963,-1377 5957,-1377 5951,-1371 5951,-1365 5951,-1365 5951,-1306 5951,-1306 5951,-1300 5957,-1294 5963,-1294 5963,-1294 6069,-1294 6069,-1294 6075,-1294 6081,-1300 6081,-1306 6081,-1306 6081,-1365 6081,-1365 6081,-1371 6075,-1377 6069,-1377\"/>\r\n<text text-anchor=\"start\" x=\"5976.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 37.5</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.958</text>\r\n<text text-anchor=\"start\" x=\"5968.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 420</text>\r\n<text text-anchor=\"start\" x=\"5959\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [243, 397]</text>\r\n<text text-anchor=\"start\" x=\"5961\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 111&#45;&gt;191 -->\r\n<g id=\"edge191\" class=\"edge\"><title>111&#45;&gt;191</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5661.07,-1434.44C5737.92,-1413.24 5861.67,-1379.09 5940.88,-1357.23\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5942.09,-1360.53 5950.79,-1354.49 5940.22,-1353.78 5942.09,-1360.53\"/>\r\n</g>\r\n<!-- 113 -->\r\n<g id=\"node114\" class=\"node\"><title>113</title>\r\n<path fill=\"#f9e0ce\" stroke=\"black\" d=\"M4985,-1258C4985,-1258 4887,-1258 4887,-1258 4881,-1258 4875,-1252 4875,-1246 4875,-1246 4875,-1187 4875,-1187 4875,-1181 4881,-1175 4887,-1175 4887,-1175 4985,-1175 4985,-1175 4991,-1175 4997,-1181 4997,-1187 4997,-1187 4997,-1246 4997,-1246 4997,-1252 4991,-1258 4985,-1258\"/>\r\n<text text-anchor=\"start\" x=\"4901\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"4886\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.985</text>\r\n<text text-anchor=\"start\" x=\"4888.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 142</text>\r\n<text text-anchor=\"start\" x=\"4883\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 97]</text>\r\n<text text-anchor=\"start\" x=\"4889\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 112&#45;&gt;113 -->\r\n<g id=\"edge113\" class=\"edge\"><title>112&#45;&gt;113</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5088.16,-1293.91C5061.47,-1280.51 5032.02,-1265.72 5006.19,-1252.75\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5007.73,-1249.6 4997.22,-1248.24 5004.59,-1255.86 5007.73,-1249.6\"/>\r\n</g>\r\n<!-- 148 -->\r\n<g id=\"node149\" class=\"node\"><title>148</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M5266,-1258C5266,-1258 5072,-1258 5072,-1258 5066,-1258 5060,-1252 5060,-1246 5060,-1246 5060,-1187 5060,-1187 5060,-1181 5066,-1175 5072,-1175 5072,-1175 5266,-1175 5266,-1175 5272,-1175 5278,-1181 5278,-1187 5278,-1187 5278,-1246 5278,-1246 5278,-1252 5272,-1258 5266,-1258\"/>\r\n<text text-anchor=\"start\" x=\"5068\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.85</text>\r\n<text text-anchor=\"start\" x=\"5119\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.277</text>\r\n<text text-anchor=\"start\" x=\"5121.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 425</text>\r\n<text text-anchor=\"start\" x=\"5116\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [639, 32]</text>\r\n<text text-anchor=\"start\" x=\"5122\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 112&#45;&gt;148 -->\r\n<g id=\"edge148\" class=\"edge\"><title>112&#45;&gt;148</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5169,-1293.91C5169,-1285.65 5169,-1276.86 5169,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5172.5,-1268.02 5169,-1258.02 5165.5,-1268.02 5172.5,-1268.02\"/>\r\n</g>\r\n<!-- 114 -->\r\n<g id=\"node115\" class=\"node\"><title>114</title>\r\n<path fill=\"#fffefd\" stroke=\"black\" d=\"M4760.5,-1139C4760.5,-1139 4645.5,-1139 4645.5,-1139 4639.5,-1139 4633.5,-1133 4633.5,-1127 4633.5,-1127 4633.5,-1068 4633.5,-1068 4633.5,-1062 4639.5,-1056 4645.5,-1056 4645.5,-1056 4760.5,-1056 4760.5,-1056 4766.5,-1056 4772.5,-1062 4772.5,-1068 4772.5,-1068 4772.5,-1127 4772.5,-1127 4772.5,-1133 4766.5,-1139 4760.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"4641.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4661\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"4655.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 124</text>\r\n<text text-anchor=\"start\" x=\"4654.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [98, 97]</text>\r\n<text text-anchor=\"start\" x=\"4656\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 113&#45;&gt;114 -->\r\n<g id=\"edge114\" class=\"edge\"><title>113&#45;&gt;114</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4874.78,-1184.76C4846.43,-1170.52 4812.4,-1153.43 4782.13,-1138.24\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4783.38,-1134.94 4772.87,-1133.58 4780.23,-1141.2 4783.38,-1134.94\"/>\r\n</g>\r\n<!-- 147 -->\r\n<g id=\"node148\" class=\"node\"><title>147</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4979,-1131.5C4979,-1131.5 4893,-1131.5 4893,-1131.5 4887,-1131.5 4881,-1125.5 4881,-1119.5 4881,-1119.5 4881,-1075.5 4881,-1075.5 4881,-1069.5 4887,-1063.5 4893,-1063.5 4893,-1063.5 4979,-1063.5 4979,-1063.5 4985,-1063.5 4991,-1069.5 4991,-1075.5 4991,-1075.5 4991,-1119.5 4991,-1119.5 4991,-1125.5 4985,-1131.5 4979,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"4894\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4892.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"4891.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 0]</text>\r\n<text text-anchor=\"start\" x=\"4889\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 113&#45;&gt;147 -->\r\n<g id=\"edge147\" class=\"edge\"><title>113&#45;&gt;147</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4936,-1174.91C4936,-1164.2 4936,-1152.62 4936,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4939.5,-1141.67 4936,-1131.67 4932.5,-1141.67 4939.5,-1141.67\"/>\r\n</g>\r\n<!-- 115 -->\r\n<g id=\"node116\" class=\"node\"><title>115</title>\r\n<path fill=\"#9bcdf2\" stroke=\"black\" d=\"M4524,-1020C4524,-1020 4422,-1020 4422,-1020 4416,-1020 4410,-1014 4410,-1008 4410,-1008 4410,-949 4410,-949 4410,-943 4416,-937 4422,-937 4422,-937 4524,-937 4524,-937 4530,-937 4536,-943 4536,-949 4536,-949 4536,-1008 4536,-1008 4536,-1014 4530,-1020 4524,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4432\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"4423\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.916</text>\r\n<text text-anchor=\"start\" x=\"4429.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 91</text>\r\n<text text-anchor=\"start\" x=\"4424.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 97]</text>\r\n<text text-anchor=\"start\" x=\"4418\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 114&#45;&gt;115 -->\r\n<g id=\"edge115\" class=\"edge\"><title>114&#45;&gt;115</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4633.37,-1061.08C4605.45,-1046.88 4573.29,-1030.51 4545.12,-1016.19\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.63,-1013.03 4536.13,-1011.61 4543.46,-1019.27 4546.63,-1013.03\"/>\r\n</g>\r\n<!-- 146 -->\r\n<g id=\"node147\" class=\"node\"><title>146</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4746,-1012.5C4746,-1012.5 4660,-1012.5 4660,-1012.5 4654,-1012.5 4648,-1006.5 4648,-1000.5 4648,-1000.5 4648,-956.5 4648,-956.5 4648,-950.5 4654,-944.5 4660,-944.5 4660,-944.5 4746,-944.5 4746,-944.5 4752,-944.5 4758,-950.5 4758,-956.5 4758,-956.5 4758,-1000.5 4758,-1000.5 4758,-1006.5 4752,-1012.5 4746,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"4661\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 33</text>\r\n<text text-anchor=\"start\" x=\"4658.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [50, 0]</text>\r\n<text text-anchor=\"start\" x=\"4656\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114&#45;&gt;146 -->\r\n<g id=\"edge146\" class=\"edge\"><title>114&#45;&gt;146</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4703,-1055.91C4703,-1045.2 4703,-1033.62 4703,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4706.5,-1022.67 4703,-1012.67 4699.5,-1022.67 4706.5,-1022.67\"/>\r\n</g>\r\n<!-- 116 -->\r\n<g id=\"node117\" class=\"node\"><title>116</title>\r\n<path fill=\"#8bc5f0\" stroke=\"black\" d=\"M4202.5,-901C4202.5,-901 4041.5,-901 4041.5,-901 4035.5,-901 4029.5,-895 4029.5,-889 4029.5,-889 4029.5,-830 4029.5,-830 4029.5,-824 4035.5,-818 4041.5,-818 4041.5,-818 4202.5,-818 4202.5,-818 4208.5,-818 4214.5,-824 4214.5,-830 4214.5,-830 4214.5,-889 4214.5,-889 4214.5,-895 4208.5,-901 4202.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"4037.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 51.0</text>\r\n<text text-anchor=\"start\" x=\"4072\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.871</text>\r\n<text text-anchor=\"start\" x=\"4078.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"4073.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 97]</text>\r\n<text text-anchor=\"start\" x=\"4067\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 115&#45;&gt;116 -->\r\n<g id=\"edge116\" class=\"edge\"><title>115&#45;&gt;116</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4409.84,-956.448C4358.23,-939.243 4284.25,-914.582 4224.21,-894.571\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4225.3,-891.243 4214.7,-891.401 4223.08,-897.884 4225.3,-891.243\"/>\r\n</g>\r\n<!-- 145 -->\r\n<g id=\"node146\" class=\"node\"><title>145</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4516,-893.5C4516,-893.5 4430,-893.5 4430,-893.5 4424,-893.5 4418,-887.5 4418,-881.5 4418,-881.5 4418,-837.5 4418,-837.5 4418,-831.5 4424,-825.5 4430,-825.5 4430,-825.5 4516,-825.5 4516,-825.5 4522,-825.5 4528,-831.5 4528,-837.5 4528,-837.5 4528,-881.5 4528,-881.5 4528,-887.5 4522,-893.5 4516,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4431\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4433.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4432.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\r\n<text text-anchor=\"start\" x=\"4426\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 115&#45;&gt;145 -->\r\n<g id=\"edge145\" class=\"edge\"><title>115&#45;&gt;145</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4473,-936.907C4473,-926.204 4473,-914.615 4473,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4476.5,-903.667 4473,-893.667 4469.5,-903.667 4476.5,-903.667\"/>\r\n</g>\r\n<!-- 117 -->\r\n<g id=\"node118\" class=\"node\"><title>117</title>\r\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M3967,-782C3967,-782 3773,-782 3773,-782 3767,-782 3761,-776 3761,-770 3761,-770 3761,-711 3761,-711 3761,-705 3767,-699 3773,-699 3773,-699 3967,-699 3967,-699 3973,-699 3979,-705 3979,-711 3979,-711 3979,-770 3979,-770 3979,-776 3973,-782 3967,-782\"/>\r\n<text text-anchor=\"start\" x=\"3769\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.15</text>\r\n<text text-anchor=\"start\" x=\"3820\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 58</text>\r\n<text text-anchor=\"start\" x=\"3821.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 77]</text>\r\n<text text-anchor=\"start\" x=\"3815\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 116&#45;&gt;117 -->\r\n<g id=\"edge117\" class=\"edge\"><title>116&#45;&gt;117</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4034.57,-817.907C4012.58,-807.698 3988.86,-796.683 3966.45,-786.282\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3967.82,-783.057 3957.28,-782.021 3964.87,-789.407 3967.82,-783.057\"/>\r\n</g>\r\n<!-- 136 -->\r\n<g id=\"node137\" class=\"node\"><title>136</title>\r\n<path fill=\"#f7d8c2\" stroke=\"black\" d=\"M4168,-782C4168,-782 4076,-782 4076,-782 4070,-782 4064,-776 4064,-770 4064,-770 4064,-711 4064,-711 4064,-705 4070,-699 4076,-699 4076,-699 4168,-699 4168,-699 4174,-699 4180,-705 4180,-711 4180,-711 4180,-770 4180,-770 4180,-776 4174,-782 4168,-782\"/>\r\n<text text-anchor=\"start\" x=\"4081\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4072\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.976</text>\r\n<text text-anchor=\"start\" x=\"4078.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"4073.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 20]</text>\r\n<text text-anchor=\"start\" x=\"4075\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 116&#45;&gt;136 -->\r\n<g id=\"edge136\" class=\"edge\"><title>116&#45;&gt;136</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4122,-817.907C4122,-809.649 4122,-800.864 4122,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4125.5,-792.021 4122,-782.021 4118.5,-792.021 4125.5,-792.021\"/>\r\n</g>\r\n<!-- 118 -->\r\n<g id=\"node119\" class=\"node\"><title>118</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3752,-655.5C3752,-655.5 3666,-655.5 3666,-655.5 3660,-655.5 3654,-649.5 3654,-643.5 3654,-643.5 3654,-599.5 3654,-599.5 3654,-593.5 3660,-587.5 3666,-587.5 3666,-587.5 3752,-587.5 3752,-587.5 3758,-587.5 3764,-593.5 3764,-599.5 3764,-599.5 3764,-643.5 3764,-643.5 3764,-649.5 3758,-655.5 3752,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3667\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3669.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3668.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"3662\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 117&#45;&gt;118 -->\r\n<g id=\"edge118\" class=\"edge\"><title>117&#45;&gt;118</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3814.14,-698.907C3797.59,-686.88 3779.5,-673.735 3763.07,-661.791\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3764.79,-658.714 3754.64,-655.667 3760.67,-664.377 3764.79,-658.714\"/>\r\n</g>\r\n<!-- 119 -->\r\n<g id=\"node120\" class=\"node\"><title>119</title>\r\n<path fill=\"#46a3e7\" stroke=\"black\" d=\"M3946,-663C3946,-663 3794,-663 3794,-663 3788,-663 3782,-657 3782,-651 3782,-651 3782,-592 3782,-592 3782,-586 3788,-580 3794,-580 3794,-580 3946,-580 3946,-580 3952,-580 3958,-586 3958,-592 3958,-592 3958,-651 3958,-651 3958,-657 3952,-663 3946,-663\"/>\r\n<text text-anchor=\"start\" x=\"3790\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 8.5</text>\r\n<text text-anchor=\"start\" x=\"3820\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.331</text>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 53</text>\r\n<text text-anchor=\"start\" x=\"3825.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 77]</text>\r\n<text text-anchor=\"start\" x=\"3815\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 117&#45;&gt;119 -->\r\n<g id=\"edge119\" class=\"edge\"><title>117&#45;&gt;119</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3870,-698.907C3870,-690.649 3870,-681.864 3870,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3873.5,-673.021 3870,-663.021 3866.5,-673.021 3873.5,-673.021\"/>\r\n</g>\r\n<!-- 120 -->\r\n<g id=\"node121\" class=\"node\"><title>120</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M3633.5,-544C3633.5,-544 3544.5,-544 3544.5,-544 3538.5,-544 3532.5,-538 3532.5,-532 3532.5,-532 3532.5,-473 3532.5,-473 3532.5,-467 3538.5,-461 3544.5,-461 3544.5,-461 3633.5,-461 3633.5,-461 3639.5,-461 3645.5,-467 3645.5,-473 3645.5,-473 3645.5,-532 3645.5,-532 3645.5,-538 3639.5,-544 3633.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3540.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3547\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"3549.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3548.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 4]</text>\r\n<text text-anchor=\"start\" x=\"3542\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 119&#45;&gt;120 -->\r\n<g id=\"edge120\" class=\"edge\"><title>119&#45;&gt;120</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3781.97,-583.74C3778.95,-582.478 3775.95,-581.228 3773,-580 3734.03,-563.764 3690.41,-545.624 3655.42,-531.085\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3656.37,-527.69 3645.79,-527.085 3653.68,-534.154 3656.37,-527.69\"/>\r\n</g>\r\n<!-- 127 -->\r\n<g id=\"node128\" class=\"node\"><title>127</title>\r\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M3918,-544C3918,-544 3816,-544 3816,-544 3810,-544 3804,-538 3804,-532 3804,-532 3804,-473 3804,-473 3804,-467 3810,-461 3816,-461 3816,-461 3918,-461 3918,-461 3924,-461 3930,-467 3930,-473 3930,-473 3930,-532 3930,-532 3930,-538 3924,-544 3918,-544\"/>\r\n<text text-anchor=\"start\" x=\"3839.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3817\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.103</text>\r\n<text text-anchor=\"start\" x=\"3823.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\r\n<text text-anchor=\"start\" x=\"3822.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 73]</text>\r\n<text text-anchor=\"start\" x=\"3812\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 119&#45;&gt;127 -->\r\n<g id=\"edge127\" class=\"edge\"><title>119&#45;&gt;127</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3868.96,-579.907C3868.75,-571.558 3868.52,-562.671 3868.3,-554.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3871.79,-553.928 3868.04,-544.021 3864.8,-554.107 3871.79,-553.928\"/>\r\n</g>\r\n<!-- 121 -->\r\n<g id=\"node122\" class=\"node\"><title>121</title>\r\n<path fill=\"#f8e0ce\" stroke=\"black\" d=\"M3496,-425C3496,-425 3356,-425 3356,-425 3350,-425 3344,-419 3344,-413 3344,-413 3344,-354 3344,-354 3344,-348 3350,-342 3356,-342 3356,-342 3496,-342 3496,-342 3502,-342 3508,-348 3508,-354 3508,-354 3508,-413 3508,-413 3508,-419 3502,-425 3496,-425\"/>\r\n<text text-anchor=\"start\" x=\"3352\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 2568776.0</text>\r\n<text text-anchor=\"start\" x=\"3376\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.985</text>\r\n<text text-anchor=\"start\" x=\"3386.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3385.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 3]</text>\r\n<text text-anchor=\"start\" x=\"3379\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 120&#45;&gt;121 -->\r\n<g id=\"edge121\" class=\"edge\"><title>120&#45;&gt;121</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3532.45,-460.907C3519.05,-451.288 3504.65,-440.953 3490.91,-431.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3492.62,-428.009 3482.45,-425.021 3488.53,-433.695 3492.62,-428.009\"/>\r\n</g>\r\n<!-- 126 -->\r\n<g id=\"node127\" class=\"node\"><title>126</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3640,-417.5C3640,-417.5 3538,-417.5 3538,-417.5 3532,-417.5 3526,-411.5 3526,-405.5 3526,-405.5 3526,-361.5 3526,-361.5 3526,-355.5 3532,-349.5 3538,-349.5 3538,-349.5 3640,-349.5 3640,-349.5 3646,-349.5 3652,-355.5 3652,-361.5 3652,-361.5 3652,-405.5 3652,-405.5 3652,-411.5 3646,-417.5 3640,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3547\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3549.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3548.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3534\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 120&#45;&gt;126 -->\r\n<g id=\"edge126\" class=\"edge\"><title>120&#45;&gt;126</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3589,-460.907C3589,-450.204 3589,-438.615 3589,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3592.5,-427.667 3589,-417.667 3585.5,-427.667 3592.5,-427.667\"/>\r\n</g>\r\n<!-- 122 -->\r\n<g id=\"node123\" class=\"node\"><title>122</title>\r\n<path fill=\"#eca06a\" stroke=\"black\" d=\"M3358.5,-306C3358.5,-306 3243.5,-306 3243.5,-306 3237.5,-306 3231.5,-300 3231.5,-294 3231.5,-294 3231.5,-235 3231.5,-235 3231.5,-229 3237.5,-223 3243.5,-223 3243.5,-223 3358.5,-223 3358.5,-223 3364.5,-223 3370.5,-229 3370.5,-235 3370.5,-235 3370.5,-294 3370.5,-294 3370.5,-300 3364.5,-306 3358.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"3239.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3251\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\r\n<text text-anchor=\"start\" x=\"3261.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3260.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 1]</text>\r\n<text text-anchor=\"start\" x=\"3254\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 121&#45;&gt;122 -->\r\n<g id=\"edge122\" class=\"edge\"><title>121&#45;&gt;122</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3382.63,-341.907C3372.65,-332.56 3361.94,-322.538 3351.67,-312.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3353.98,-310.299 3344.29,-306.021 3349.2,-315.41 3353.98,-310.299\"/>\r\n</g>\r\n<!-- 125 -->\r\n<g id=\"node126\" class=\"node\"><title>125</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3503,-298.5C3503,-298.5 3401,-298.5 3401,-298.5 3395,-298.5 3389,-292.5 3389,-286.5 3389,-286.5 3389,-242.5 3389,-242.5 3389,-236.5 3395,-230.5 3401,-230.5 3401,-230.5 3503,-230.5 3503,-230.5 3509,-230.5 3515,-236.5 3515,-242.5 3515,-242.5 3515,-286.5 3515,-286.5 3515,-292.5 3509,-298.5 3503,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3410\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3412.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3411.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"3397\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 121&#45;&gt;125 -->\r\n<g id=\"edge125\" class=\"edge\"><title>121&#45;&gt;125</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3435.02,-341.907C3437.42,-331.094 3440.03,-319.376 3442.46,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3445.88,-309.188 3444.63,-298.667 3439.04,-307.67 3445.88,-309.188\"/>\r\n</g>\r\n<!-- 123 -->\r\n<g id=\"node124\" class=\"node\"><title>123</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3276,-179.5C3276,-179.5 3190,-179.5 3190,-179.5 3184,-179.5 3178,-173.5 3178,-167.5 3178,-167.5 3178,-123.5 3178,-123.5 3178,-117.5 3184,-111.5 3190,-111.5 3190,-111.5 3276,-111.5 3276,-111.5 3282,-111.5 3288,-117.5 3288,-123.5 3288,-123.5 3288,-167.5 3288,-167.5 3288,-173.5 3282,-179.5 3276,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3191\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3193.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3192.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"3186\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 122&#45;&gt;123 -->\r\n<g id=\"edge123\" class=\"edge\"><title>122&#45;&gt;123</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3277.41,-222.907C3270.93,-211.763 3263.9,-199.658 3257.37,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3260.33,-186.554 3252.28,-179.667 3254.28,-190.072 3260.33,-186.554\"/>\r\n</g>\r\n<!-- 124 -->\r\n<g id=\"node125\" class=\"node\"><title>124</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3420,-179.5C3420,-179.5 3318,-179.5 3318,-179.5 3312,-179.5 3306,-173.5 3306,-167.5 3306,-167.5 3306,-123.5 3306,-123.5 3306,-117.5 3312,-111.5 3318,-111.5 3318,-111.5 3420,-111.5 3420,-111.5 3426,-111.5 3432,-117.5 3432,-123.5 3432,-123.5 3432,-167.5 3432,-167.5 3432,-173.5 3426,-179.5 3420,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3327\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3329.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3328.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3314\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 122&#45;&gt;124 -->\r\n<g id=\"edge124\" class=\"edge\"><title>122&#45;&gt;124</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3324.59,-222.907C3331.07,-211.763 3338.1,-199.658 3344.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3347.72,-190.072 3349.72,-179.667 3341.67,-186.554 3347.72,-190.072\"/>\r\n</g>\r\n<!-- 128 -->\r\n<g id=\"node129\" class=\"node\"><title>128</title>\r\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M3784,-425C3784,-425 3682,-425 3682,-425 3676,-425 3670,-419 3670,-413 3670,-413 3670,-354 3670,-354 3670,-348 3676,-342 3682,-342 3682,-342 3784,-342 3784,-342 3790,-342 3796,-348 3796,-354 3796,-354 3796,-413 3796,-413 3796,-419 3790,-425 3784,-425\"/>\r\n<text text-anchor=\"start\" x=\"3684.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3683\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\r\n<text text-anchor=\"start\" x=\"3689.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"3688.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 65]</text>\r\n<text text-anchor=\"start\" x=\"3678\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127&#45;&gt;128 -->\r\n<g id=\"edge128\" class=\"edge\"><title>127&#45;&gt;128</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3820.51,-460.907C3809.7,-451.469 3798.1,-441.343 3787,-431.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3789.24,-428.961 3779.41,-425.021 3784.64,-434.234 3789.24,-428.961\"/>\r\n</g>\r\n<!-- 135 -->\r\n<g id=\"node136\" class=\"node\"><title>135</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3928,-417.5C3928,-417.5 3826,-417.5 3826,-417.5 3820,-417.5 3814,-411.5 3814,-405.5 3814,-405.5 3814,-361.5 3814,-361.5 3814,-355.5 3820,-349.5 3826,-349.5 3826,-349.5 3928,-349.5 3928,-349.5 3934,-349.5 3940,-355.5 3940,-361.5 3940,-361.5 3940,-405.5 3940,-405.5 3940,-411.5 3934,-417.5 3928,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3835\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3837.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\r\n<text text-anchor=\"start\" x=\"3822\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127&#45;&gt;135 -->\r\n<g id=\"edge135\" class=\"edge\"><title>127&#45;&gt;135</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3870.47,-460.907C3871.38,-450.204 3872.37,-438.615 3873.3,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3876.8,-427.929 3874.17,-417.667 3869.83,-427.333 3876.8,-427.929\"/>\r\n</g>\r\n<!-- 129 -->\r\n<g id=\"node130\" class=\"node\"><title>129</title>\r\n<path fill=\"#3ea0e6\" stroke=\"black\" d=\"M3818,-306C3818,-306 3596,-306 3596,-306 3590,-306 3584,-300 3584,-294 3584,-294 3584,-235 3584,-235 3584,-229 3590,-223 3596,-223 3596,-223 3818,-223 3818,-223 3824,-223 3830,-229 3830,-235 3830,-235 3830,-294 3830,-294 3830,-300 3824,-306 3818,-306\"/>\r\n<text text-anchor=\"start\" x=\"3592\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.105</text>\r\n<text text-anchor=\"start\" x=\"3657\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.172</text>\r\n<text text-anchor=\"start\" x=\"3663.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"3662.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 38]</text>\r\n<text text-anchor=\"start\" x=\"3652\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 128&#45;&gt;129 -->\r\n<g id=\"edge129\" class=\"edge\"><title>128&#45;&gt;129</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3723.98,-341.907C3722.12,-333.558 3720.15,-324.671 3718.23,-316.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3721.59,-315.023 3716,-306.021 3714.76,-316.542 3721.59,-315.023\"/>\r\n</g>\r\n<!-- 134 -->\r\n<g id=\"node135\" class=\"node\"><title>134</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3962,-298.5C3962,-298.5 3860,-298.5 3860,-298.5 3854,-298.5 3848,-292.5 3848,-286.5 3848,-286.5 3848,-242.5 3848,-242.5 3848,-236.5 3854,-230.5 3860,-230.5 3860,-230.5 3962,-230.5 3962,-230.5 3968,-230.5 3974,-236.5 3974,-242.5 3974,-242.5 3974,-286.5 3974,-286.5 3974,-292.5 3968,-298.5 3962,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3869\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3867.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"3866.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"3856\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 128&#45;&gt;134 -->\r\n<g id=\"edge134\" class=\"edge\"><title>128&#45;&gt;134</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3794.76,-341.907C3813.22,-329.769 3833.42,-316.493 3851.72,-304.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3854.11,-307.084 3860.54,-298.667 3850.26,-301.235 3854.11,-307.084\"/>\r\n</g>\r\n<!-- 130 -->\r\n<g id=\"node131\" class=\"node\"><title>130</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M3687.5,-187C3687.5,-187 3580.5,-187 3580.5,-187 3574.5,-187 3568.5,-181 3568.5,-175 3568.5,-175 3568.5,-116 3568.5,-116 3568.5,-110 3574.5,-104 3580.5,-104 3580.5,-104 3687.5,-104 3687.5,-104 3693.5,-104 3699.5,-110 3699.5,-116 3699.5,-116 3699.5,-175 3699.5,-175 3699.5,-181 3693.5,-187 3687.5,-187\"/>\r\n<text text-anchor=\"start\" x=\"3576.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 414.5</text>\r\n<text text-anchor=\"start\" x=\"3584\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"3594.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"3589.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 12]</text>\r\n<text text-anchor=\"start\" x=\"3579\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 129&#45;&gt;130 -->\r\n<g id=\"edge130\" class=\"edge\"><title>129&#45;&gt;130</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3681.67,-222.907C3676.18,-214.105 3670.31,-204.703 3664.64,-195.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3667.55,-193.652 3659.28,-187.021 3661.61,-197.358 3667.55,-193.652\"/>\r\n</g>\r\n<!-- 133 -->\r\n<g id=\"node134\" class=\"node\"><title>133</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3832,-179.5C3832,-179.5 3730,-179.5 3730,-179.5 3724,-179.5 3718,-173.5 3718,-167.5 3718,-167.5 3718,-123.5 3718,-123.5 3718,-117.5 3724,-111.5 3730,-111.5 3730,-111.5 3832,-111.5 3832,-111.5 3838,-111.5 3844,-117.5 3844,-123.5 3844,-123.5 3844,-167.5 3844,-167.5 3844,-173.5 3838,-179.5 3832,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3739\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3737.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"3736.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 26]</text>\r\n<text text-anchor=\"start\" x=\"3726\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 129&#45;&gt;133 -->\r\n<g id=\"edge133\" class=\"edge\"><title>129&#45;&gt;133</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3732.67,-222.907C3739.72,-211.763 3747.38,-199.658 3754.47,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3757.64,-189.989 3760.02,-179.667 3751.72,-186.248 3757.64,-189.989\"/>\r\n</g>\r\n<!-- 131 -->\r\n<g id=\"node132\" class=\"node\"><title>131</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3617,-68C3617,-68 3515,-68 3515,-68 3509,-68 3503,-62 3503,-56 3503,-56 3503,-12 3503,-12 3503,-6 3509,-0 3515,-0 3515,-0 3617,-0 3617,-0 3623,-0 3629,-6 3629,-12 3629,-12 3629,-56 3629,-56 3629,-62 3623,-68 3617,-68\"/>\r\n<text text-anchor=\"start\" x=\"3524\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3526.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"3521.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 12]</text>\r\n<text text-anchor=\"start\" x=\"3511\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 130&#45;&gt;131 -->\r\n<g id=\"edge131\" class=\"edge\"><title>130&#45;&gt;131</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3608.68,-103.726C3603.24,-94.9703 3597.49,-85.7032 3592.02,-76.9051\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3594.93,-74.9484 3586.68,-68.2996 3588.98,-78.6413 3594.93,-74.9484\"/>\r\n</g>\r\n<!-- 132 -->\r\n<g id=\"node133\" class=\"node\"><title>132</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3745,-68C3745,-68 3659,-68 3659,-68 3653,-68 3647,-62 3647,-56 3647,-56 3647,-12 3647,-12 3647,-6 3653,-0 3659,-0 3659,-0 3745,-0 3745,-0 3751,-0 3757,-6 3757,-12 3757,-12 3757,-56 3757,-56 3757,-62 3751,-68 3745,-68\"/>\r\n<text text-anchor=\"start\" x=\"3660\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3662.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3661.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3655\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130&#45;&gt;132 -->\r\n<g id=\"edge132\" class=\"edge\"><title>130&#45;&gt;132</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3659.32,-103.726C3664.76,-94.9703 3670.51,-85.7032 3675.98,-76.9051\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3679.02,-78.6413 3681.32,-68.2996 3673.07,-74.9484 3679.02,-78.6413\"/>\r\n</g>\r\n<!-- 137 -->\r\n<g id=\"node138\" class=\"node\"><title>137</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4096,-655.5C4096,-655.5 4010,-655.5 4010,-655.5 4004,-655.5 3998,-649.5 3998,-643.5 3998,-643.5 3998,-599.5 3998,-599.5 3998,-593.5 4004,-587.5 4010,-587.5 4010,-587.5 4096,-587.5 4096,-587.5 4102,-587.5 4108,-593.5 4108,-599.5 4108,-599.5 4108,-643.5 4108,-643.5 4108,-649.5 4102,-655.5 4096,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4011\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4009.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\r\n<text text-anchor=\"start\" x=\"4008.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [23, 0]</text>\r\n<text text-anchor=\"start\" x=\"4006\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 136&#45;&gt;137 -->\r\n<g id=\"edge137\" class=\"edge\"><title>136&#45;&gt;137</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4098.06,-698.907C4091.49,-687.763 4084.35,-675.658 4077.73,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4080.65,-662.503 4072.56,-655.667 4074.63,-666.059 4080.65,-662.503\"/>\r\n</g>\r\n<!-- 138 -->\r\n<g id=\"node139\" class=\"node\"><title>138</title>\r\n<path fill=\"#74baed\" stroke=\"black\" d=\"M4240,-663C4240,-663 4138,-663 4138,-663 4132,-663 4126,-657 4126,-651 4126,-651 4126,-592 4126,-592 4126,-586 4132,-580 4138,-580 4138,-580 4240,-580 4240,-580 4246,-580 4252,-586 4252,-592 4252,-592 4252,-651 4252,-651 4252,-657 4246,-663 4240,-663\"/>\r\n<text text-anchor=\"start\" x=\"4140.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4139\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.779</text>\r\n<text text-anchor=\"start\" x=\"4145.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"4144.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 20]</text>\r\n<text text-anchor=\"start\" x=\"4134\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 136&#45;&gt;138 -->\r\n<g id=\"edge138\" class=\"edge\"><title>136&#45;&gt;138</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4145.25,-698.907C4150.23,-690.195 4155.56,-680.897 4160.71,-671.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4163.86,-673.438 4165.8,-663.021 4157.79,-669.959 4163.86,-673.438\"/>\r\n</g>\r\n<!-- 139 -->\r\n<g id=\"node140\" class=\"node\"><title>139</title>\r\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M4129.5,-544C4129.5,-544 3960.5,-544 3960.5,-544 3954.5,-544 3948.5,-538 3948.5,-532 3948.5,-532 3948.5,-473 3948.5,-473 3948.5,-467 3954.5,-461 3960.5,-461 3960.5,-461 4129.5,-461 4129.5,-461 4135.5,-461 4141.5,-467 4141.5,-473 4141.5,-473 4141.5,-532 4141.5,-532 4141.5,-538 4135.5,-544 4129.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3956.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 210.5</text>\r\n<text text-anchor=\"start\" x=\"3995\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.286</text>\r\n<text text-anchor=\"start\" x=\"4001.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\r\n<text text-anchor=\"start\" x=\"4000.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 19]</text>\r\n<text text-anchor=\"start\" x=\"3990\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 138&#45;&gt;139 -->\r\n<g id=\"edge139\" class=\"edge\"><title>138&#45;&gt;139</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4139.04,-579.907C4127.31,-570.379 4114.72,-560.148 4102.69,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4104.84,-547.61 4094.87,-544.021 4100.43,-553.043 4104.84,-547.61\"/>\r\n</g>\r\n<!-- 142 -->\r\n<g id=\"node143\" class=\"node\"><title>142</title>\r\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M4398.5,-544C4398.5,-544 4171.5,-544 4171.5,-544 4165.5,-544 4159.5,-538 4159.5,-532 4159.5,-532 4159.5,-473 4159.5,-473 4159.5,-467 4165.5,-461 4171.5,-461 4171.5,-461 4398.5,-461 4398.5,-461 4404.5,-461 4410.5,-467 4410.5,-473 4410.5,-473 4410.5,-532 4410.5,-532 4410.5,-538 4404.5,-544 4398.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4167.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.42</text>\r\n<text text-anchor=\"start\" x=\"4239\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"4245.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4244.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\r\n<text text-anchor=\"start\" x=\"4238\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 138&#45;&gt;142 -->\r\n<g id=\"edge142\" class=\"edge\"><title>138&#45;&gt;142</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4222.31,-579.907C4229.75,-570.832 4237.72,-561.121 4245.39,-551.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4248.11,-553.972 4251.75,-544.021 4242.7,-549.531 4248.11,-553.972\"/>\r\n</g>\r\n<!-- 140 -->\r\n<g id=\"node141\" class=\"node\"><title>140</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4072,-417.5C4072,-417.5 3970,-417.5 3970,-417.5 3964,-417.5 3958,-411.5 3958,-405.5 3958,-405.5 3958,-361.5 3958,-361.5 3958,-355.5 3964,-349.5 3970,-349.5 3970,-349.5 4072,-349.5 4072,-349.5 4078,-349.5 4084,-355.5 4084,-361.5 4084,-361.5 4084,-405.5 4084,-405.5 4084,-411.5 4078,-417.5 4072,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3979\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3981.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"3976.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 19]</text>\r\n<text text-anchor=\"start\" x=\"3966\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 139&#45;&gt;140 -->\r\n<g id=\"edge140\" class=\"edge\"><title>139&#45;&gt;140</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4036.67,-460.907C4034.48,-450.204 4032.1,-438.615 4029.88,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4033.24,-426.76 4027.8,-417.667 4026.38,-428.166 4033.24,-426.76\"/>\r\n</g>\r\n<!-- 141 -->\r\n<g id=\"node142\" class=\"node\"><title>141</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4200,-417.5C4200,-417.5 4114,-417.5 4114,-417.5 4108,-417.5 4102,-411.5 4102,-405.5 4102,-405.5 4102,-361.5 4102,-361.5 4102,-355.5 4108,-349.5 4114,-349.5 4114,-349.5 4200,-349.5 4200,-349.5 4206,-349.5 4212,-355.5 4212,-361.5 4212,-361.5 4212,-405.5 4212,-405.5 4212,-411.5 4206,-417.5 4200,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4115\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4117.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4116.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4110\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139&#45;&gt;141 -->\r\n<g id=\"edge141\" class=\"edge\"><title>139&#45;&gt;141</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4083.86,-460.907C4094.95,-449.321 4107.03,-436.698 4118.12,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4120.86,-427.311 4125.25,-417.667 4115.81,-422.47 4120.86,-427.311\"/>\r\n</g>\r\n<!-- 143 -->\r\n<g id=\"node144\" class=\"node\"><title>143</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4328,-417.5C4328,-417.5 4242,-417.5 4242,-417.5 4236,-417.5 4230,-411.5 4230,-405.5 4230,-405.5 4230,-361.5 4230,-361.5 4230,-355.5 4236,-349.5 4242,-349.5 4242,-349.5 4328,-349.5 4328,-349.5 4334,-349.5 4340,-355.5 4340,-361.5 4340,-361.5 4340,-405.5 4340,-405.5 4340,-411.5 4334,-417.5 4328,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4243\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4245.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4244.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"4238\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 142&#45;&gt;143 -->\r\n<g id=\"edge143\" class=\"edge\"><title>142&#45;&gt;143</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4285,-460.907C4285,-450.204 4285,-438.615 4285,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4288.5,-427.667 4285,-417.667 4281.5,-427.667 4288.5,-427.667\"/>\r\n</g>\r\n<!-- 144 -->\r\n<g id=\"node145\" class=\"node\"><title>144</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4472,-417.5C4472,-417.5 4370,-417.5 4370,-417.5 4364,-417.5 4358,-411.5 4358,-405.5 4358,-405.5 4358,-361.5 4358,-361.5 4358,-355.5 4364,-349.5 4370,-349.5 4370,-349.5 4472,-349.5 4472,-349.5 4478,-349.5 4484,-355.5 4484,-361.5 4484,-361.5 4484,-405.5 4484,-405.5 4484,-411.5 4478,-417.5 4472,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4379\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4381.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4380.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4366\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 142&#45;&gt;144 -->\r\n<g id=\"edge144\" class=\"edge\"><title>142&#45;&gt;144</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4332.18,-460.907C4345.91,-449.101 4360.89,-436.217 4374.56,-424.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4377.15,-426.842 4382.45,-417.667 4372.58,-421.535 4377.15,-426.842\"/>\r\n</g>\r\n<!-- 149 -->\r\n<g id=\"node150\" class=\"node\"><title>149</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M5169,-1139C5169,-1139 5071,-1139 5071,-1139 5065,-1139 5059,-1133 5059,-1127 5059,-1127 5059,-1068 5059,-1068 5059,-1062 5065,-1056 5071,-1056 5071,-1056 5169,-1056 5169,-1056 5175,-1056 5181,-1062 5181,-1068 5181,-1068 5181,-1127 5181,-1127 5181,-1133 5175,-1139 5169,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5077\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 8.0</text>\r\n<text text-anchor=\"start\" x=\"5070\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.164</text>\r\n<text text-anchor=\"start\" x=\"5072.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 401</text>\r\n<text text-anchor=\"start\" x=\"5067\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [608, 15]</text>\r\n<text text-anchor=\"start\" x=\"5073\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 148&#45;&gt;149 -->\r\n<g id=\"edge149\" class=\"edge\"><title>148&#45;&gt;149</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5152,-1174.91C5148.43,-1166.38 5144.62,-1157.28 5140.92,-1148.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5144.06,-1146.89 5136.97,-1139.02 5137.6,-1149.6 5144.06,-1146.89\"/>\r\n</g>\r\n<!-- 180 -->\r\n<g id=\"node181\" class=\"node\"><title>180</title>\r\n<path fill=\"#f3c6a6\" stroke=\"black\" d=\"M5398.5,-1139C5398.5,-1139 5211.5,-1139 5211.5,-1139 5205.5,-1139 5199.5,-1133 5199.5,-1127 5199.5,-1127 5199.5,-1068 5199.5,-1068 5199.5,-1062 5205.5,-1056 5211.5,-1056 5211.5,-1056 5398.5,-1056 5398.5,-1056 5404.5,-1056 5410.5,-1062 5410.5,-1068 5410.5,-1068 5410.5,-1127 5410.5,-1127 5410.5,-1133 5404.5,-1139 5398.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5207.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\r\n<text text-anchor=\"start\" x=\"5255\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.938</text>\r\n<text text-anchor=\"start\" x=\"5261.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"5256.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 17]</text>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 148&#45;&gt;180 -->\r\n<g id=\"edge180\" class=\"edge\"><title>148&#45;&gt;180</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5216.18,-1174.91C5227.16,-1165.47 5238.93,-1155.34 5250.19,-1145.65\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5252.6,-1148.2 5257.9,-1139.02 5248.04,-1142.89 5252.6,-1148.2\"/>\r\n</g>\r\n<!-- 150 -->\r\n<g id=\"node151\" class=\"node\"><title>150</title>\r\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M5029,-1020C5029,-1020 4931,-1020 4931,-1020 4925,-1020 4919,-1014 4919,-1008 4919,-1008 4919,-949 4919,-949 4919,-943 4925,-937 4931,-937 4931,-937 5029,-937 5029,-937 5035,-937 5041,-943 5041,-949 5041,-949 5041,-1008 5041,-1008 5041,-1014 5035,-1020 5029,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4939\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4930\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.147</text>\r\n<text text-anchor=\"start\" x=\"4932.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 399</text>\r\n<text text-anchor=\"start\" x=\"4927\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [608, 13]</text>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 149&#45;&gt;150 -->\r\n<g id=\"edge150\" class=\"edge\"><title>149&#45;&gt;150</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5071.43,-1055.91C5060.13,-1046.47 5048.02,-1036.34 5036.42,-1026.65\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5038.4,-1023.75 5028.49,-1020.02 5033.92,-1029.12 5038.4,-1023.75\"/>\r\n</g>\r\n<!-- 179 -->\r\n<g id=\"node180\" class=\"node\"><title>179</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5173,-1012.5C5173,-1012.5 5071,-1012.5 5071,-1012.5 5065,-1012.5 5059,-1006.5 5059,-1000.5 5059,-1000.5 5059,-956.5 5059,-956.5 5059,-950.5 5065,-944.5 5071,-944.5 5071,-944.5 5173,-944.5 5173,-944.5 5179,-944.5 5185,-950.5 5185,-956.5 5185,-956.5 5185,-1000.5 5185,-1000.5 5185,-1006.5 5179,-1012.5 5173,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"5080\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5082.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5081.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"5067\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 149&#45;&gt;179 -->\r\n<g id=\"edge179\" class=\"edge\"><title>149&#45;&gt;179</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5120.69,-1055.91C5120.88,-1045.2 5121.07,-1033.62 5121.26,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5124.76,-1022.73 5121.43,-1012.67 5117.76,-1022.61 5124.76,-1022.73\"/>\r\n</g>\r\n<!-- 151 -->\r\n<g id=\"node152\" class=\"node\"><title>151</title>\r\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M4870,-901C4870,-901 4648,-901 4648,-901 4642,-901 4636,-895 4636,-889 4636,-889 4636,-830 4636,-830 4636,-824 4642,-818 4648,-818 4648,-818 4870,-818 4870,-818 4876,-818 4882,-824 4882,-830 4882,-830 4882,-889 4882,-889 4882,-895 4876,-901 4870,-901\"/>\r\n<text text-anchor=\"start\" x=\"4644\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.155</text>\r\n<text text-anchor=\"start\" x=\"4709\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.035</text>\r\n<text text-anchor=\"start\" x=\"4711.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 351</text>\r\n<text text-anchor=\"start\" x=\"4710.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [546, 2]</text>\r\n<text text-anchor=\"start\" x=\"4712\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 150&#45;&gt;151 -->\r\n<g id=\"edge151\" class=\"edge\"><title>150&#45;&gt;151</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4918.73,-945.064C4895.86,-932.958 4869.46,-918.979 4844.79,-905.918\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4846.26,-902.738 4835.79,-901.152 4842.99,-908.925 4846.26,-902.738\"/>\r\n</g>\r\n<!-- 166 -->\r\n<g id=\"node167\" class=\"node\"><title>166</title>\r\n<path fill=\"#ea975c\" stroke=\"black\" d=\"M5054,-901C5054,-901 4912,-901 4912,-901 4906,-901 4900,-895 4900,-889 4900,-889 4900,-830 4900,-830 4900,-824 4906,-818 4912,-818 4912,-818 5054,-818 5054,-818 5060,-818 5066,-824 5066,-830 5066,-830 5066,-889 5066,-889 5066,-895 5060,-901 5054,-901\"/>\r\n<text text-anchor=\"start\" x=\"4908\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 135.0</text>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.612</text>\r\n<text text-anchor=\"start\" x=\"4939.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\r\n<text text-anchor=\"start\" x=\"4934.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [62, 11]</text>\r\n<text text-anchor=\"start\" x=\"4936\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 150&#45;&gt;166 -->\r\n<g id=\"edge166\" class=\"edge\"><title>150&#45;&gt;166</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4981.04,-936.907C4981.25,-928.558 4981.48,-919.671 4981.7,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4985.2,-911.107 4981.96,-901.021 4978.21,-910.928 4985.2,-911.107\"/>\r\n</g>\r\n<!-- 152 -->\r\n<g id=\"node153\" class=\"node\"><title>152</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4604.5,-782C4604.5,-782 4417.5,-782 4417.5,-782 4411.5,-782 4405.5,-776 4405.5,-770 4405.5,-770 4405.5,-711 4405.5,-711 4405.5,-705 4411.5,-699 4417.5,-699 4417.5,-699 4604.5,-699 4604.5,-699 4610.5,-699 4616.5,-705 4616.5,-711 4616.5,-711 4616.5,-770 4616.5,-770 4616.5,-776 4610.5,-782 4604.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4413.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.065</text>\r\n<text text-anchor=\"start\" x=\"4461\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.019</text>\r\n<text text-anchor=\"start\" x=\"4463.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 349</text>\r\n<text text-anchor=\"start\" x=\"4462.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [545, 1]</text>\r\n<text text-anchor=\"start\" x=\"4464\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 151&#45;&gt;152 -->\r\n<g id=\"edge152\" class=\"edge\"><title>151&#45;&gt;152</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4672.96,-817.907C4651.41,-807.743 4628.18,-796.781 4606.22,-786.42\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4607.43,-783.122 4596.89,-782.021 4604.44,-789.453 4607.43,-783.122\"/>\r\n</g>\r\n<!-- 163 -->\r\n<g id=\"node164\" class=\"node\"><title>163</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M4873.5,-782C4873.5,-782 4646.5,-782 4646.5,-782 4640.5,-782 4634.5,-776 4634.5,-770 4634.5,-770 4634.5,-711 4634.5,-711 4634.5,-705 4640.5,-699 4646.5,-699 4646.5,-699 4873.5,-699 4873.5,-699 4879.5,-699 4885.5,-705 4885.5,-711 4885.5,-711 4885.5,-770 4885.5,-770 4885.5,-776 4879.5,-782 4873.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4642.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.43</text>\r\n<text text-anchor=\"start\" x=\"4718\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"4720.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4719.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"4713\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 151&#45;&gt;163 -->\r\n<g id=\"edge163\" class=\"edge\"><title>151&#45;&gt;163</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4759.35,-817.907C4759.42,-809.649 4759.49,-800.864 4759.57,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4763.07,-792.05 4759.65,-782.021 4756.07,-791.99 4763.07,-792.05\"/>\r\n</g>\r\n<!-- 153 -->\r\n<g id=\"node154\" class=\"node\"><title>153</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4382.5,-655.5C4382.5,-655.5 4293.5,-655.5 4293.5,-655.5 4287.5,-655.5 4281.5,-649.5 4281.5,-643.5 4281.5,-643.5 4281.5,-599.5 4281.5,-599.5 4281.5,-593.5 4287.5,-587.5 4293.5,-587.5 4293.5,-587.5 4382.5,-587.5 4382.5,-587.5 4388.5,-587.5 4394.5,-593.5 4394.5,-599.5 4394.5,-599.5 4394.5,-643.5 4394.5,-643.5 4394.5,-649.5 4388.5,-655.5 4382.5,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4296\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4290.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 244</text>\r\n<text text-anchor=\"start\" x=\"4289.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [382, 0]</text>\r\n<text text-anchor=\"start\" x=\"4291\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 152&#45;&gt;153 -->\r\n<g id=\"edge153\" class=\"edge\"><title>152&#45;&gt;153</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4450.98,-698.907C4433.03,-686.769 4413.4,-673.493 4395.61,-661.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4397.29,-658.37 4387.04,-655.667 4393.36,-664.168 4397.29,-658.37\"/>\r\n</g>\r\n<!-- 154 -->\r\n<g id=\"node155\" class=\"node\"><title>154</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M4601.5,-663C4601.5,-663 4424.5,-663 4424.5,-663 4418.5,-663 4412.5,-657 4412.5,-651 4412.5,-651 4412.5,-592 4412.5,-592 4412.5,-586 4418.5,-580 4424.5,-580 4424.5,-580 4601.5,-580 4601.5,-580 4607.5,-580 4613.5,-586 4613.5,-592 4613.5,-592 4613.5,-651 4613.5,-651 4613.5,-657 4607.5,-663 4601.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4420.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"4463\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.054</text>\r\n<text text-anchor=\"start\" x=\"4465.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 105</text>\r\n<text text-anchor=\"start\" x=\"4464.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [163, 1]</text>\r\n<text text-anchor=\"start\" x=\"4466\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 152&#45;&gt;154 -->\r\n<g id=\"edge154\" class=\"edge\"><title>152&#45;&gt;154</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4511.69,-698.907C4511.84,-690.558 4511.99,-681.671 4512.14,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4515.64,-673.079 4512.31,-663.021 4508.64,-672.959 4515.64,-673.079\"/>\r\n</g>\r\n<!-- 155 -->\r\n<g id=\"node156\" class=\"node\"><title>155</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4529.5,-536.5C4529.5,-536.5 4440.5,-536.5 4440.5,-536.5 4434.5,-536.5 4428.5,-530.5 4428.5,-524.5 4428.5,-524.5 4428.5,-480.5 4428.5,-480.5 4428.5,-474.5 4434.5,-468.5 4440.5,-468.5 4440.5,-468.5 4529.5,-468.5 4529.5,-468.5 4535.5,-468.5 4541.5,-474.5 4541.5,-480.5 4541.5,-480.5 4541.5,-524.5 4541.5,-524.5 4541.5,-530.5 4535.5,-536.5 4529.5,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4443\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4441.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 83</text>\r\n<text text-anchor=\"start\" x=\"4436.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [132, 0]</text>\r\n<text text-anchor=\"start\" x=\"4438\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 154&#45;&gt;155 -->\r\n<g id=\"edge155\" class=\"edge\"><title>154&#45;&gt;155</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4503.29,-579.907C4500.7,-569.094 4497.89,-557.376 4495.28,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4498.67,-545.578 4492.94,-536.667 4491.86,-547.207 4498.67,-545.578\"/>\r\n</g>\r\n<!-- 156 -->\r\n<g id=\"node157\" class=\"node\"><title>156</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4758.5,-544C4758.5,-544 4571.5,-544 4571.5,-544 4565.5,-544 4559.5,-538 4559.5,-532 4559.5,-532 4559.5,-473 4559.5,-473 4559.5,-467 4565.5,-461 4571.5,-461 4571.5,-461 4758.5,-461 4758.5,-461 4764.5,-461 4770.5,-467 4770.5,-473 4770.5,-473 4770.5,-532 4770.5,-532 4770.5,-538 4764.5,-544 4758.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4567.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.075</text>\r\n<text text-anchor=\"start\" x=\"4615\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.201</text>\r\n<text text-anchor=\"start\" x=\"4621.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 22</text>\r\n<text text-anchor=\"start\" x=\"4620.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 1]</text>\r\n<text text-anchor=\"start\" x=\"4618\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 154&#45;&gt;156 -->\r\n<g id=\"edge156\" class=\"edge\"><title>154&#45;&gt;156</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4565.74,-579.907C4578.12,-570.379 4591.41,-560.148 4604.11,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4606.57,-552.894 4612.36,-544.021 4602.3,-547.347 4606.57,-552.894\"/>\r\n</g>\r\n<!-- 157 -->\r\n<g id=\"node158\" class=\"node\"><title>157</title>\r\n<path fill=\"#e89152\" stroke=\"black\" d=\"M4619,-425C4619,-425 4527,-425 4527,-425 4521,-425 4515,-419 4515,-413 4515,-413 4515,-354 4515,-354 4515,-348 4521,-342 4527,-342 4527,-342 4619,-342 4619,-342 4625,-342 4631,-348 4631,-354 4631,-354 4631,-413 4631,-413 4631,-419 4625,-425 4619,-425\"/>\r\n<text text-anchor=\"start\" x=\"4543.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"4523\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.503</text>\r\n<text text-anchor=\"start\" x=\"4533.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"4532.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 1]</text>\r\n<text text-anchor=\"start\" x=\"4526\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 156&#45;&gt;157 -->\r\n<g id=\"edge157\" class=\"edge\"><title>156&#45;&gt;157</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4633.08,-460.907C4626.02,-451.923 4618.46,-442.315 4611.18,-433.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4613.8,-430.718 4604.86,-425.021 4608.29,-435.045 4613.8,-430.718\"/>\r\n</g>\r\n<!-- 162 -->\r\n<g id=\"node163\" class=\"node\"><title>162</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4747,-417.5C4747,-417.5 4661,-417.5 4661,-417.5 4655,-417.5 4649,-411.5 4649,-405.5 4649,-405.5 4649,-361.5 4649,-361.5 4649,-355.5 4655,-349.5 4661,-349.5 4661,-349.5 4747,-349.5 4747,-349.5 4753,-349.5 4759,-355.5 4759,-361.5 4759,-361.5 4759,-405.5 4759,-405.5 4759,-411.5 4753,-417.5 4747,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4662\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4660.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [23, 0]</text>\r\n<text text-anchor=\"start\" x=\"4657\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 156&#45;&gt;162 -->\r\n<g id=\"edge162\" class=\"edge\"><title>156&#45;&gt;162</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4678.53,-460.907C4682.14,-450.094 4686.04,-438.376 4689.69,-427.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4693.1,-428.261 4692.94,-417.667 4686.46,-426.047 4693.1,-428.261\"/>\r\n</g>\r\n<!-- 158 -->\r\n<g id=\"node159\" class=\"node\"><title>158</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4533,-298.5C4533,-298.5 4447,-298.5 4447,-298.5 4441,-298.5 4435,-292.5 4435,-286.5 4435,-286.5 4435,-242.5 4435,-242.5 4435,-236.5 4441,-230.5 4447,-230.5 4447,-230.5 4533,-230.5 4533,-230.5 4539,-230.5 4545,-236.5 4545,-242.5 4545,-242.5 4545,-286.5 4545,-286.5 4545,-292.5 4539,-298.5 4533,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"4448\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4450.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4449.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4443\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 157&#45;&gt;158 -->\r\n<g id=\"edge158\" class=\"edge\"><title>157&#45;&gt;158</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4544.2,-341.907C4536.22,-330.652 4527.54,-318.418 4519.52,-307.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4522.17,-304.798 4513.53,-298.667 4516.46,-308.848 4522.17,-304.798\"/>\r\n</g>\r\n<!-- 159 -->\r\n<g id=\"node160\" class=\"node\"><title>159</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M4736.5,-306C4736.5,-306 4575.5,-306 4575.5,-306 4569.5,-306 4563.5,-300 4563.5,-294 4563.5,-294 4563.5,-235 4563.5,-235 4563.5,-229 4569.5,-223 4575.5,-223 4575.5,-223 4736.5,-223 4736.5,-223 4742.5,-223 4748.5,-229 4748.5,-235 4748.5,-235 4748.5,-294 4748.5,-294 4748.5,-300 4742.5,-306 4736.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"4571.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 52.5</text>\r\n<text text-anchor=\"start\" x=\"4606\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"4616.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"4615.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 1]</text>\r\n<text text-anchor=\"start\" x=\"4609\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 157&#45;&gt;159 -->\r\n<g id=\"edge159\" class=\"edge\"><title>157&#45;&gt;159</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4601.8,-341.907C4608.11,-333.014 4614.85,-323.509 4621.36,-314.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4624.32,-316.202 4627.25,-306.021 4618.61,-312.152 4624.32,-316.202\"/>\r\n</g>\r\n<!-- 160 -->\r\n<g id=\"node161\" class=\"node\"><title>160</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4631,-179.5C4631,-179.5 4545,-179.5 4545,-179.5 4539,-179.5 4533,-173.5 4533,-167.5 4533,-167.5 4533,-123.5 4533,-123.5 4533,-117.5 4539,-111.5 4545,-111.5 4545,-111.5 4631,-111.5 4631,-111.5 4637,-111.5 4643,-117.5 4643,-123.5 4643,-123.5 4643,-167.5 4643,-167.5 4643,-173.5 4637,-179.5 4631,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"4546\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4548.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4547.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"4541\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 159&#45;&gt;160 -->\r\n<g id=\"edge160\" class=\"edge\"><title>159&#45;&gt;160</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4632.41,-222.907C4625.93,-211.763 4618.9,-199.658 4612.37,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4615.33,-186.554 4607.28,-179.667 4609.28,-190.072 4615.33,-186.554\"/>\r\n</g>\r\n<!-- 161 -->\r\n<g id=\"node162\" class=\"node\"><title>161</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4775,-179.5C4775,-179.5 4673,-179.5 4673,-179.5 4667,-179.5 4661,-173.5 4661,-167.5 4661,-167.5 4661,-123.5 4661,-123.5 4661,-117.5 4667,-111.5 4673,-111.5 4673,-111.5 4775,-111.5 4775,-111.5 4781,-111.5 4787,-117.5 4787,-123.5 4787,-123.5 4787,-167.5 4787,-167.5 4787,-173.5 4781,-179.5 4775,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"4682\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4683.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4669\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 159&#45;&gt;161 -->\r\n<g id=\"edge161\" class=\"edge\"><title>159&#45;&gt;161</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4679.59,-222.907C4686.07,-211.763 4693.1,-199.658 4699.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4702.72,-190.072 4704.72,-179.667 4696.67,-186.554 4702.72,-190.072\"/>\r\n</g>\r\n<!-- 164 -->\r\n<g id=\"node165\" class=\"node\"><title>164</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4735,-655.5C4735,-655.5 4649,-655.5 4649,-655.5 4643,-655.5 4637,-649.5 4637,-643.5 4637,-643.5 4637,-599.5 4637,-599.5 4637,-593.5 4643,-587.5 4649,-587.5 4649,-587.5 4735,-587.5 4735,-587.5 4741,-587.5 4747,-593.5 4747,-599.5 4747,-599.5 4747,-643.5 4747,-643.5 4747,-649.5 4741,-655.5 4735,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4650\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4652.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4651.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4645\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 163&#45;&gt;164 -->\r\n<g id=\"edge164\" class=\"edge\"><title>163&#45;&gt;164</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4736.41,-698.907C4729.93,-687.763 4722.9,-675.658 4716.37,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4719.33,-662.554 4711.28,-655.667 4713.28,-666.072 4719.33,-662.554\"/>\r\n</g>\r\n<!-- 165 -->\r\n<g id=\"node166\" class=\"node\"><title>165</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4879,-655.5C4879,-655.5 4777,-655.5 4777,-655.5 4771,-655.5 4765,-649.5 4765,-643.5 4765,-643.5 4765,-599.5 4765,-599.5 4765,-593.5 4771,-587.5 4777,-587.5 4777,-587.5 4879,-587.5 4879,-587.5 4885,-587.5 4891,-593.5 4891,-599.5 4891,-599.5 4891,-643.5 4891,-643.5 4891,-649.5 4885,-655.5 4879,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4786\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4788.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4787.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4773\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 163&#45;&gt;165 -->\r\n<g id=\"edge165\" class=\"edge\"><title>163&#45;&gt;165</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4783.59,-698.907C4790.07,-687.763 4797.1,-675.658 4803.63,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4806.72,-666.072 4808.72,-655.667 4800.67,-662.554 4806.72,-666.072\"/>\r\n</g>\r\n<!-- 167 -->\r\n<g id=\"node168\" class=\"node\"><title>167</title>\r\n<path fill=\"#eda572\" stroke=\"black\" d=\"M5020,-782C5020,-782 4928,-782 4928,-782 4922,-782 4916,-776 4916,-770 4916,-770 4916,-711 4916,-711 4916,-705 4922,-699 4928,-699 4928,-699 5020,-699 5020,-699 5026,-699 5032,-705 5032,-711 5032,-711 5032,-770 5032,-770 5032,-776 5026,-782 5020,-782\"/>\r\n<text text-anchor=\"start\" x=\"4925.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4924\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.768</text>\r\n<text text-anchor=\"start\" x=\"4930.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"4925.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [38, 11]</text>\r\n<text text-anchor=\"start\" x=\"4927\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 166&#45;&gt;167 -->\r\n<g id=\"edge167\" class=\"edge\"><title>166&#45;&gt;167</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4979.88,-817.907C4979.24,-809.558 4978.55,-800.671 4977.89,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4981.37,-791.723 4977.12,-782.021 4974.39,-792.26 4981.37,-791.723\"/>\r\n</g>\r\n<!-- 178 -->\r\n<g id=\"node179\" class=\"node\"><title>178</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5148,-774.5C5148,-774.5 5062,-774.5 5062,-774.5 5056,-774.5 5050,-768.5 5050,-762.5 5050,-762.5 5050,-718.5 5050,-718.5 5050,-712.5 5056,-706.5 5062,-706.5 5062,-706.5 5148,-706.5 5148,-706.5 5154,-706.5 5160,-712.5 5160,-718.5 5160,-718.5 5160,-762.5 5160,-762.5 5160,-768.5 5154,-774.5 5148,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5063\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5061.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"5060.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [24, 0]</text>\r\n<text text-anchor=\"start\" x=\"5058\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 166&#45;&gt;178 -->\r\n<g id=\"edge178\" class=\"edge\"><title>166&#45;&gt;178</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5025.33,-817.907C5037.52,-806.211 5050.82,-793.457 5063,-781.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5065.62,-784.115 5070.42,-774.667 5060.78,-779.062 5065.62,-784.115\"/>\r\n</g>\r\n<!-- 168 -->\r\n<g id=\"node169\" class=\"node\"><title>168</title>\r\n<path fill=\"#88c4ef\" stroke=\"black\" d=\"M5025,-663C5025,-663 4923,-663 4923,-663 4917,-663 4911,-657 4911,-651 4911,-651 4911,-592 4911,-592 4911,-586 4917,-580 4923,-580 4923,-580 5025,-580 5025,-580 5031,-580 5037,-586 5037,-592 5037,-592 5037,-651 5037,-651 5037,-657 5031,-663 5025,-663\"/>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"4924\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"4934.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4933.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 5]</text>\r\n<text text-anchor=\"start\" x=\"4919\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 167&#45;&gt;168 -->\r\n<g id=\"edge168\" class=\"edge\"><title>167&#45;&gt;168</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4974,-698.907C4974,-690.649 4974,-681.864 4974,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4977.5,-673.021 4974,-663.021 4970.5,-673.021 4977.5,-673.021\"/>\r\n</g>\r\n<!-- 173 -->\r\n<g id=\"node174\" class=\"node\"><title>173</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M5219,-663C5219,-663 5127,-663 5127,-663 5121,-663 5115,-657 5115,-651 5115,-651 5115,-592 5115,-592 5115,-586 5121,-580 5127,-580 5127,-580 5219,-580 5219,-580 5225,-580 5231,-586 5231,-592 5231,-592 5231,-651 5231,-651 5231,-657 5225,-663 5219,-663\"/>\r\n<text text-anchor=\"start\" x=\"5138\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"5123\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"5129.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"5128.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 6]</text>\r\n<text text-anchor=\"start\" x=\"5126\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 167&#45;&gt;173 -->\r\n<g id=\"edge173\" class=\"edge\"><title>167&#45;&gt;173</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5032.07,-704.311C5035.08,-702.51 5038.08,-700.731 5041,-699 5062.04,-686.545 5085.07,-673.125 5105.92,-661.056\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5107.81,-664.009 5114.71,-655.973 5104.3,-657.949 5107.81,-664.009\"/>\r\n</g>\r\n<!-- 169 -->\r\n<g id=\"node170\" class=\"node\"><title>169</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M4961.5,-544C4961.5,-544 4800.5,-544 4800.5,-544 4794.5,-544 4788.5,-538 4788.5,-532 4788.5,-532 4788.5,-473 4788.5,-473 4788.5,-467 4794.5,-461 4800.5,-461 4800.5,-461 4961.5,-461 4961.5,-461 4967.5,-461 4973.5,-467 4973.5,-473 4973.5,-473 4973.5,-532 4973.5,-532 4973.5,-538 4967.5,-544 4961.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4796.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 11.5</text>\r\n<text text-anchor=\"start\" x=\"4835\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"4841.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"4840.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"4826\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 168&#45;&gt;169 -->\r\n<g id=\"edge169\" class=\"edge\"><title>168&#45;&gt;169</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4941.73,-579.907C4934.59,-570.923 4926.96,-561.315 4919.59,-552.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4922.17,-549.671 4913.21,-544.021 4916.69,-554.027 4922.17,-549.671\"/>\r\n</g>\r\n<!-- 172 -->\r\n<g id=\"node173\" class=\"node\"><title>172</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5090,-536.5C5090,-536.5 5004,-536.5 5004,-536.5 4998,-536.5 4992,-530.5 4992,-524.5 4992,-524.5 4992,-480.5 4992,-480.5 4992,-474.5 4998,-468.5 5004,-468.5 5004,-468.5 5090,-468.5 5090,-468.5 5096,-468.5 5102,-474.5 5102,-480.5 5102,-480.5 5102,-524.5 5102,-524.5 5102,-530.5 5096,-536.5 5090,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"5005\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5007.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5006.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5000\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 168&#45;&gt;172 -->\r\n<g id=\"edge172\" class=\"edge\"><title>168&#45;&gt;172</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4999.33,-579.907C5006.28,-568.763 5013.83,-556.658 5020.83,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5023.98,-547.004 5026.31,-536.667 5018.04,-543.298 5023.98,-547.004\"/>\r\n</g>\r\n<!-- 170 -->\r\n<g id=\"node171\" class=\"node\"><title>170</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4905,-417.5C4905,-417.5 4803,-417.5 4803,-417.5 4797,-417.5 4791,-411.5 4791,-405.5 4791,-405.5 4791,-361.5 4791,-361.5 4791,-355.5 4797,-349.5 4803,-349.5 4803,-349.5 4905,-349.5 4905,-349.5 4911,-349.5 4917,-355.5 4917,-361.5 4917,-361.5 4917,-405.5 4917,-405.5 4917,-411.5 4911,-417.5 4905,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4812\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4814.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4813.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"4799\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 169&#45;&gt;170 -->\r\n<g id=\"edge170\" class=\"edge\"><title>169&#45;&gt;170</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4871.63,-460.907C4869.14,-450.094 4866.43,-438.376 4863.91,-427.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4867.31,-426.624 4861.65,-417.667 4860.49,-428.198 4867.31,-426.624\"/>\r\n</g>\r\n<!-- 171 -->\r\n<g id=\"node172\" class=\"node\"><title>171</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5033,-417.5C5033,-417.5 4947,-417.5 4947,-417.5 4941,-417.5 4935,-411.5 4935,-405.5 4935,-405.5 4935,-361.5 4935,-361.5 4935,-355.5 4941,-349.5 4947,-349.5 4947,-349.5 5033,-349.5 5033,-349.5 5039,-349.5 5045,-355.5 5045,-361.5 5045,-361.5 5045,-405.5 5045,-405.5 5045,-411.5 5039,-417.5 5033,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4948\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4950.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4949.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4943\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 169&#45;&gt;171 -->\r\n<g id=\"edge171\" class=\"edge\"><title>169&#45;&gt;171</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4918.82,-460.907C4929.61,-449.321 4941.37,-436.698 4952.17,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4954.85,-427.37 4959.1,-417.667 4949.72,-422.598 4954.85,-427.37\"/>\r\n</g>\r\n<!-- 174 -->\r\n<g id=\"node175\" class=\"node\"><title>174</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5218,-536.5C5218,-536.5 5132,-536.5 5132,-536.5 5126,-536.5 5120,-530.5 5120,-524.5 5120,-524.5 5120,-480.5 5120,-480.5 5120,-474.5 5126,-468.5 5132,-468.5 5132,-468.5 5218,-468.5 5218,-468.5 5224,-468.5 5230,-474.5 5230,-480.5 5230,-480.5 5230,-524.5 5230,-524.5 5230,-530.5 5224,-536.5 5218,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"5133\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5131.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"5130.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 0]</text>\r\n<text text-anchor=\"start\" x=\"5128\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 173&#45;&gt;174 -->\r\n<g id=\"edge174\" class=\"edge\"><title>173&#45;&gt;174</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5173.69,-579.907C5173.88,-569.204 5174.07,-557.615 5174.26,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5177.76,-546.725 5174.43,-536.667 5170.76,-546.606 5177.76,-546.725\"/>\r\n</g>\r\n<!-- 175 -->\r\n<g id=\"node176\" class=\"node\"><title>175</title>\r\n<path fill=\"#deeffb\" stroke=\"black\" d=\"M5362,-544C5362,-544 5260,-544 5260,-544 5254,-544 5248,-538 5248,-532 5248,-532 5248,-473 5248,-473 5248,-467 5254,-461 5260,-461 5260,-461 5362,-461 5362,-461 5368,-461 5374,-467 5374,-473 5374,-473 5374,-532 5374,-532 5374,-538 5368,-544 5362,-544\"/>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 95.5</text>\r\n<text text-anchor=\"start\" x=\"5261\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"5271.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"5270.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 6]</text>\r\n<text text-anchor=\"start\" x=\"5256\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 173&#45;&gt;175 -->\r\n<g id=\"edge175\" class=\"edge\"><title>173&#45;&gt;175</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5220.88,-579.907C5232.01,-570.469 5243.95,-560.343 5255.39,-550.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5257.84,-553.157 5263.21,-544.021 5253.32,-547.818 5257.84,-553.157\"/>\r\n</g>\r\n<!-- 176 -->\r\n<g id=\"node177\" class=\"node\"><title>176</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5286,-417.5C5286,-417.5 5200,-417.5 5200,-417.5 5194,-417.5 5188,-411.5 5188,-405.5 5188,-405.5 5188,-361.5 5188,-361.5 5188,-355.5 5194,-349.5 5200,-349.5 5200,-349.5 5286,-349.5 5286,-349.5 5292,-349.5 5298,-355.5 5298,-361.5 5298,-361.5 5298,-405.5 5298,-405.5 5298,-411.5 5292,-417.5 5286,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"5201\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5203.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5202.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"5196\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 175&#45;&gt;176 -->\r\n<g id=\"edge176\" class=\"edge\"><title>175&#45;&gt;176</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5287.41,-460.907C5280.93,-449.763 5273.9,-437.658 5267.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5270.33,-424.554 5262.28,-417.667 5264.28,-428.072 5270.33,-424.554\"/>\r\n</g>\r\n<!-- 177 -->\r\n<g id=\"node178\" class=\"node\"><title>177</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5430,-417.5C5430,-417.5 5328,-417.5 5328,-417.5 5322,-417.5 5316,-411.5 5316,-405.5 5316,-405.5 5316,-361.5 5316,-361.5 5316,-355.5 5322,-349.5 5328,-349.5 5328,-349.5 5430,-349.5 5430,-349.5 5436,-349.5 5442,-355.5 5442,-361.5 5442,-361.5 5442,-405.5 5442,-405.5 5442,-411.5 5436,-417.5 5430,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"5337\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5339.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"5338.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5324\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 175&#45;&gt;177 -->\r\n<g id=\"edge177\" class=\"edge\"><title>175&#45;&gt;177</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5334.59,-460.907C5341.07,-449.763 5348.1,-437.658 5354.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5357.72,-428.072 5359.72,-417.667 5351.67,-424.554 5357.72,-428.072\"/>\r\n</g>\r\n<!-- 181 -->\r\n<g id=\"node182\" class=\"node\"><title>181</title>\r\n<path fill=\"#5dafea\" stroke=\"black\" d=\"M5358.5,-1020C5358.5,-1020 5243.5,-1020 5243.5,-1020 5237.5,-1020 5231.5,-1014 5231.5,-1008 5231.5,-1008 5231.5,-949 5231.5,-949 5231.5,-943 5237.5,-937 5243.5,-937 5243.5,-937 5358.5,-937 5358.5,-937 5364.5,-937 5370.5,-943 5370.5,-949 5370.5,-949 5370.5,-1008 5370.5,-1008 5370.5,-1014 5364.5,-1020 5358.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5239.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"5251\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.619</text>\r\n<text text-anchor=\"start\" x=\"5261.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"5256.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 11]</text>\r\n<text text-anchor=\"start\" x=\"5246\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 180&#45;&gt;181 -->\r\n<g id=\"edge181\" class=\"edge\"><title>180&#45;&gt;181</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5303.61,-1055.91C5303.33,-1047.56 5303.02,-1038.67 5302.73,-1030.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5306.23,-1029.9 5302.39,-1020.02 5299.23,-1030.13 5306.23,-1029.9\"/>\r\n</g>\r\n<!-- 188 -->\r\n<g id=\"node189\" class=\"node\"><title>188</title>\r\n<path fill=\"#ea9b62\" stroke=\"black\" d=\"M5627.5,-1020C5627.5,-1020 5400.5,-1020 5400.5,-1020 5394.5,-1020 5388.5,-1014 5388.5,-1008 5388.5,-1008 5388.5,-949 5388.5,-949 5388.5,-943 5394.5,-937 5400.5,-937 5400.5,-937 5627.5,-937 5627.5,-937 5633.5,-937 5639.5,-943 5639.5,-949 5639.5,-949 5639.5,-1008 5639.5,-1008 5639.5,-1014 5633.5,-1020 5627.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5396.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.99</text>\r\n<text text-anchor=\"start\" x=\"5464\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.661</text>\r\n<text text-anchor=\"start\" x=\"5470.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"5469.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 6]</text>\r\n<text text-anchor=\"start\" x=\"5467\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 180&#45;&gt;188 -->\r\n<g id=\"edge188\" class=\"edge\"><title>180&#45;&gt;188</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5377.51,-1055.91C5395.34,-1045.92 5414.55,-1035.17 5432.77,-1024.98\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5434.6,-1027.96 5441.62,-1020.02 5431.18,-1021.85 5434.6,-1027.96\"/>\r\n</g>\r\n<!-- 182 -->\r\n<g id=\"node183\" class=\"node\"><title>182</title>\r\n<path fill=\"#4ba6e7\" stroke=\"black\" d=\"M5296.5,-901C5296.5,-901 5109.5,-901 5109.5,-901 5103.5,-901 5097.5,-895 5097.5,-889 5097.5,-889 5097.5,-830 5097.5,-830 5097.5,-824 5103.5,-818 5109.5,-818 5109.5,-818 5296.5,-818 5296.5,-818 5302.5,-818 5308.5,-824 5308.5,-830 5308.5,-830 5308.5,-889 5308.5,-889 5308.5,-895 5302.5,-901 5296.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"5105.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"5153\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.414</text>\r\n<text text-anchor=\"start\" x=\"5163.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5158.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 11]</text>\r\n<text text-anchor=\"start\" x=\"5148\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 181&#45;&gt;182 -->\r\n<g id=\"edge182\" class=\"edge\"><title>181&#45;&gt;182</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5267,-936.907C5259.4,-927.832 5251.26,-918.121 5243.43,-908.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5246.04,-906.439 5236.94,-901.021 5240.68,-910.934 5246.04,-906.439\"/>\r\n</g>\r\n<!-- 187 -->\r\n<g id=\"node188\" class=\"node\"><title>187</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5425,-893.5C5425,-893.5 5339,-893.5 5339,-893.5 5333,-893.5 5327,-887.5 5327,-881.5 5327,-881.5 5327,-837.5 5327,-837.5 5327,-831.5 5333,-825.5 5339,-825.5 5339,-825.5 5425,-825.5 5425,-825.5 5431,-825.5 5437,-831.5 5437,-837.5 5437,-837.5 5437,-881.5 5437,-881.5 5437,-887.5 5431,-893.5 5425,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5340\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5342.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5341.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5335\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 181&#45;&gt;187 -->\r\n<g id=\"edge187\" class=\"edge\"><title>181&#45;&gt;187</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5329.1,-936.907C5336.89,-925.652 5345.36,-913.418 5353.2,-902.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5356.22,-903.881 5359.04,-893.667 5350.47,-899.897 5356.22,-903.881\"/>\r\n</g>\r\n<!-- 183 -->\r\n<g id=\"node184\" class=\"node\"><title>183</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M5417.5,-782C5417.5,-782 5190.5,-782 5190.5,-782 5184.5,-782 5178.5,-776 5178.5,-770 5178.5,-770 5178.5,-711 5178.5,-711 5178.5,-705 5184.5,-699 5190.5,-699 5190.5,-699 5417.5,-699 5417.5,-699 5423.5,-699 5429.5,-705 5429.5,-711 5429.5,-711 5429.5,-770 5429.5,-770 5429.5,-776 5423.5,-782 5417.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"5186.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"5264.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5263.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"5249\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 182&#45;&gt;183 -->\r\n<g id=\"edge183\" class=\"edge\"><title>182&#45;&gt;183</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5238.04,-817.907C5245.88,-808.832 5254.26,-799.121 5262.33,-789.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5265.14,-791.878 5269.02,-782.021 5259.84,-787.303 5265.14,-791.878\"/>\r\n</g>\r\n<!-- 186 -->\r\n<g id=\"node187\" class=\"node\"><title>186</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5562,-774.5C5562,-774.5 5460,-774.5 5460,-774.5 5454,-774.5 5448,-768.5 5448,-762.5 5448,-762.5 5448,-718.5 5448,-718.5 5448,-712.5 5454,-706.5 5460,-706.5 5460,-706.5 5562,-706.5 5562,-706.5 5568,-706.5 5574,-712.5 5574,-718.5 5574,-718.5 5574,-762.5 5574,-762.5 5574,-768.5 5568,-774.5 5562,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5469\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5471.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5470.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5456\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 182&#45;&gt;186 -->\r\n<g id=\"edge186\" class=\"edge\"><title>182&#45;&gt;186</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5308.53,-821.119C5311.72,-820.059 5314.88,-819.017 5318,-818 5370.94,-800.747 5386.69,-803.631 5438,-782 5440.34,-781.015 5442.7,-779.975 5445.06,-778.892\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5446.68,-781.998 5454.2,-774.533 5443.67,-775.681 5446.68,-781.998\"/>\r\n</g>\r\n<!-- 184 -->\r\n<g id=\"node185\" class=\"node\"><title>184</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5347,-655.5C5347,-655.5 5261,-655.5 5261,-655.5 5255,-655.5 5249,-649.5 5249,-643.5 5249,-643.5 5249,-599.5 5249,-599.5 5249,-593.5 5255,-587.5 5261,-587.5 5261,-587.5 5347,-587.5 5347,-587.5 5353,-587.5 5359,-593.5 5359,-599.5 5359,-599.5 5359,-643.5 5359,-643.5 5359,-649.5 5353,-655.5 5347,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"5262\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5264.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5263.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5257\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 183&#45;&gt;184 -->\r\n<g id=\"edge184\" class=\"edge\"><title>183&#45;&gt;184</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5304,-698.907C5304,-688.204 5304,-676.615 5304,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5307.5,-665.667 5304,-655.667 5300.5,-665.667 5307.5,-665.667\"/>\r\n</g>\r\n<!-- 185 -->\r\n<g id=\"node186\" class=\"node\"><title>185</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5491,-655.5C5491,-655.5 5389,-655.5 5389,-655.5 5383,-655.5 5377,-649.5 5377,-643.5 5377,-643.5 5377,-599.5 5377,-599.5 5377,-593.5 5383,-587.5 5389,-587.5 5389,-587.5 5491,-587.5 5491,-587.5 5497,-587.5 5503,-593.5 5503,-599.5 5503,-599.5 5503,-643.5 5503,-643.5 5503,-649.5 5497,-655.5 5491,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"5398\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5400.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5399.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"5385\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 183&#45;&gt;185 -->\r\n<g id=\"edge185\" class=\"edge\"><title>183&#45;&gt;185</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5351.18,-698.907C5364.91,-687.101 5379.89,-674.217 5393.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5396.15,-664.842 5401.45,-655.667 5391.58,-659.535 5396.15,-664.842\"/>\r\n</g>\r\n<!-- 189 -->\r\n<g id=\"node190\" class=\"node\"><title>189</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5553,-893.5C5553,-893.5 5467,-893.5 5467,-893.5 5461,-893.5 5455,-887.5 5455,-881.5 5455,-881.5 5455,-837.5 5455,-837.5 5455,-831.5 5461,-825.5 5467,-825.5 5467,-825.5 5553,-825.5 5553,-825.5 5559,-825.5 5565,-831.5 5565,-837.5 5565,-837.5 5565,-881.5 5565,-881.5 5565,-887.5 5559,-893.5 5553,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5468\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5466.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"5465.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"5463\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 188&#45;&gt;189 -->\r\n<g id=\"edge189\" class=\"edge\"><title>188&#45;&gt;189</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5512.61,-936.907C5512.25,-926.204 5511.85,-914.615 5511.48,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5514.97,-903.541 5511.13,-893.667 5507.98,-903.781 5514.97,-903.541\"/>\r\n</g>\r\n<!-- 190 -->\r\n<g id=\"node191\" class=\"node\"><title>190</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5697,-893.5C5697,-893.5 5595,-893.5 5595,-893.5 5589,-893.5 5583,-887.5 5583,-881.5 5583,-881.5 5583,-837.5 5583,-837.5 5583,-831.5 5589,-825.5 5595,-825.5 5595,-825.5 5697,-825.5 5697,-825.5 5703,-825.5 5709,-831.5 5709,-837.5 5709,-837.5 5709,-881.5 5709,-881.5 5709,-887.5 5703,-893.5 5697,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5604\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5606.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5605.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5591\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 188&#45;&gt;190 -->\r\n<g id=\"edge190\" class=\"edge\"><title>188&#45;&gt;190</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5559.8,-936.907C5573.12,-925.101 5587.65,-912.217 5600.93,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5603.42,-902.919 5608.58,-893.667 5598.78,-897.681 5603.42,-902.919\"/>\r\n</g>\r\n<!-- 192 -->\r\n<g id=\"node193\" class=\"node\"><title>192</title>\r\n<path fill=\"#e99457\" stroke=\"black\" d=\"M6069.5,-1258C6069.5,-1258 5962.5,-1258 5962.5,-1258 5956.5,-1258 5950.5,-1252 5950.5,-1246 5950.5,-1246 5950.5,-1187 5950.5,-1187 5950.5,-1181 5956.5,-1175 5962.5,-1175 5962.5,-1175 6069.5,-1175 6069.5,-1175 6075.5,-1175 6081.5,-1181 6081.5,-1187 6081.5,-1187 6081.5,-1246 6081.5,-1246 6081.5,-1252 6075.5,-1258 6069.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"5958.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 258.5</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.566</text>\r\n<text text-anchor=\"start\" x=\"5968.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 179</text>\r\n<text text-anchor=\"start\" x=\"5963\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [241, 37]</text>\r\n<text text-anchor=\"start\" x=\"5969\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 191&#45;&gt;192 -->\r\n<g id=\"edge192\" class=\"edge\"><title>191&#45;&gt;192</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6016,-1293.91C6016,-1285.65 6016,-1276.86 6016,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6019.5,-1268.02 6016,-1258.02 6012.5,-1268.02 6019.5,-1268.02\"/>\r\n</g>\r\n<!-- 207 -->\r\n<g id=\"node208\" class=\"node\"><title>207</title>\r\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M6350.5,-1258C6350.5,-1258 6243.5,-1258 6243.5,-1258 6237.5,-1258 6231.5,-1252 6231.5,-1246 6231.5,-1246 6231.5,-1187 6231.5,-1187 6231.5,-1181 6237.5,-1175 6243.5,-1175 6243.5,-1175 6350.5,-1175 6350.5,-1175 6356.5,-1175 6362.5,-1181 6362.5,-1187 6362.5,-1187 6362.5,-1246 6362.5,-1246 6362.5,-1252 6356.5,-1258 6350.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"6239.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 299.0</text>\r\n<text text-anchor=\"start\" x=\"6247\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.049</text>\r\n<text text-anchor=\"start\" x=\"6249.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 241</text>\r\n<text text-anchor=\"start\" x=\"6248.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 360]</text>\r\n<text text-anchor=\"start\" x=\"6242\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 191&#45;&gt;207 -->\r\n<g id=\"edge207\" class=\"edge\"><title>191&#45;&gt;207</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6081.17,-1307.36C6123.16,-1289.88 6177.9,-1267.09 6221.74,-1248.84\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6223.32,-1251.97 6231.21,-1244.89 6220.63,-1245.51 6223.32,-1251.97\"/>\r\n</g>\r\n<!-- 193 -->\r\n<g id=\"node194\" class=\"node\"><title>193</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M5962,-1139C5962,-1139 5870,-1139 5870,-1139 5864,-1139 5858,-1133 5858,-1127 5858,-1127 5858,-1068 5858,-1068 5858,-1062 5864,-1056 5870,-1056 5870,-1056 5962,-1056 5962,-1056 5968,-1056 5974,-1062 5974,-1068 5974,-1068 5974,-1127 5974,-1127 5974,-1133 5968,-1139 5962,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5867.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"5866\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.079</text>\r\n<text text-anchor=\"start\" x=\"5868.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 128</text>\r\n<text text-anchor=\"start\" x=\"5867.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 2]</text>\r\n<text text-anchor=\"start\" x=\"5869\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 192&#45;&gt;193 -->\r\n<g id=\"edge193\" class=\"edge\"><title>192&#45;&gt;193</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5981.31,-1174.91C5973.55,-1165.83 5965.25,-1156.12 5957.26,-1146.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5959.79,-1144.35 5950.63,-1139.02 5954.47,-1148.9 5959.79,-1144.35\"/>\r\n</g>\r\n<!-- 198 -->\r\n<g id=\"node199\" class=\"node\"><title>198</title>\r\n<path fill=\"#fdf5ef\" stroke=\"black\" d=\"M6212,-1139C6212,-1139 6018,-1139 6018,-1139 6012,-1139 6006,-1133 6006,-1127 6006,-1127 6006,-1068 6006,-1068 6006,-1062 6012,-1056 6018,-1056 6018,-1056 6212,-1056 6212,-1056 6218,-1056 6224,-1062 6224,-1068 6224,-1068 6224,-1127 6224,-1127 6224,-1133 6218,-1139 6212,-1139\"/>\r\n<text text-anchor=\"start\" x=\"6014\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.03</text>\r\n<text text-anchor=\"start\" x=\"6065\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.999</text>\r\n<text text-anchor=\"start\" x=\"6071.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"6066.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [38, 35]</text>\r\n<text text-anchor=\"start\" x=\"6068\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 192&#45;&gt;198 -->\r\n<g id=\"edge198\" class=\"edge\"><title>192&#45;&gt;198</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6050.35,-1174.91C6058.03,-1165.83 6066.24,-1156.12 6074.16,-1146.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6076.93,-1148.92 6080.71,-1139.02 6071.58,-1144.39 6076.93,-1148.92\"/>\r\n</g>\r\n<!-- 194 -->\r\n<g id=\"node195\" class=\"node\"><title>194</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5760.5,-1012.5C5760.5,-1012.5 5671.5,-1012.5 5671.5,-1012.5 5665.5,-1012.5 5659.5,-1006.5 5659.5,-1000.5 5659.5,-1000.5 5659.5,-956.5 5659.5,-956.5 5659.5,-950.5 5665.5,-944.5 5671.5,-944.5 5671.5,-944.5 5760.5,-944.5 5760.5,-944.5 5766.5,-944.5 5772.5,-950.5 5772.5,-956.5 5772.5,-956.5 5772.5,-1000.5 5772.5,-1000.5 5772.5,-1006.5 5766.5,-1012.5 5760.5,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"5674\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5672.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 98</text>\r\n<text text-anchor=\"start\" x=\"5667.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [155, 0]</text>\r\n<text text-anchor=\"start\" x=\"5669\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 193&#45;&gt;194 -->\r\n<g id=\"edge194\" class=\"edge\"><title>193&#45;&gt;194</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5857.88,-1064.27C5833.94,-1050.81 5806.01,-1034.87 5781,-1020 5779.87,-1019.33 5778.74,-1018.65 5777.6,-1017.97\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5779.11,-1014.8 5768.74,-1012.62 5775.49,-1020.79 5779.11,-1014.8\"/>\r\n</g>\r\n<!-- 195 -->\r\n<g id=\"node196\" class=\"node\"><title>195</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M6029.5,-1020C6029.5,-1020 5802.5,-1020 5802.5,-1020 5796.5,-1020 5790.5,-1014 5790.5,-1008 5790.5,-1008 5790.5,-949 5790.5,-949 5790.5,-943 5796.5,-937 5802.5,-937 5802.5,-937 6029.5,-937 6029.5,-937 6035.5,-937 6041.5,-943 6041.5,-949 6041.5,-949 6041.5,-1008 6041.5,-1008 6041.5,-1014 6035.5,-1020 6029.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5798.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.66</text>\r\n<text text-anchor=\"start\" x=\"5866\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.242</text>\r\n<text text-anchor=\"start\" x=\"5872.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"5871.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 2]</text>\r\n<text text-anchor=\"start\" x=\"5869\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 193&#45;&gt;195 -->\r\n<g id=\"edge195\" class=\"edge\"><title>193&#45;&gt;195</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5916,-1055.91C5916,-1047.65 5916,-1038.86 5916,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5919.5,-1030.02 5916,-1020.02 5912.5,-1030.02 5919.5,-1030.02\"/>\r\n</g>\r\n<!-- 196 -->\r\n<g id=\"node197\" class=\"node\"><title>196</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5825,-893.5C5825,-893.5 5739,-893.5 5739,-893.5 5733,-893.5 5727,-887.5 5727,-881.5 5727,-881.5 5727,-837.5 5727,-837.5 5727,-831.5 5733,-825.5 5739,-825.5 5739,-825.5 5825,-825.5 5825,-825.5 5831,-825.5 5837,-831.5 5837,-837.5 5837,-837.5 5837,-881.5 5837,-881.5 5837,-887.5 5831,-893.5 5825,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5740\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5738.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"5737.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 0]</text>\r\n<text text-anchor=\"start\" x=\"5735\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 195&#45;&gt;196 -->\r\n<g id=\"edge196\" class=\"edge\"><title>195&#45;&gt;196</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5869.51,-936.907C5855.99,-925.101 5841.23,-912.217 5827.75,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5829.82,-897.608 5819.99,-893.667 5825.22,-902.881 5829.82,-897.608\"/>\r\n</g>\r\n<!-- 197 -->\r\n<g id=\"node198\" class=\"node\"><title>197</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5969,-893.5C5969,-893.5 5867,-893.5 5867,-893.5 5861,-893.5 5855,-887.5 5855,-881.5 5855,-881.5 5855,-837.5 5855,-837.5 5855,-831.5 5861,-825.5 5867,-825.5 5867,-825.5 5969,-825.5 5969,-825.5 5975,-825.5 5981,-831.5 5981,-837.5 5981,-837.5 5981,-881.5 5981,-881.5 5981,-887.5 5975,-893.5 5969,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5876\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5878.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5877.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"5863\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 195&#45;&gt;197 -->\r\n<g id=\"edge197\" class=\"edge\"><title>195&#45;&gt;197</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5916.69,-936.907C5916.88,-926.204 5917.07,-914.615 5917.26,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5920.76,-903.725 5917.43,-893.667 5913.76,-903.606 5920.76,-903.725\"/>\r\n</g>\r\n<!-- 199 -->\r\n<g id=\"node200\" class=\"node\"><title>199</title>\r\n<path fill=\"#e68844\" stroke=\"black\" d=\"M6186.5,-1020C6186.5,-1020 6071.5,-1020 6071.5,-1020 6065.5,-1020 6059.5,-1014 6059.5,-1008 6059.5,-1008 6059.5,-949 6059.5,-949 6059.5,-943 6065.5,-937 6071.5,-937 6071.5,-937 6186.5,-937 6186.5,-937 6192.5,-937 6198.5,-943 6198.5,-949 6198.5,-949 6198.5,-1008 6198.5,-1008 6198.5,-1014 6192.5,-1020 6186.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6067.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1623.0</text>\r\n<text text-anchor=\"start\" x=\"6079\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.292</text>\r\n<text text-anchor=\"start\" x=\"6085.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"6084.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 2]</text>\r\n<text text-anchor=\"start\" x=\"6082\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 198&#45;&gt;199 -->\r\n<g id=\"edge199\" class=\"edge\"><title>198&#45;&gt;199</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6119.86,-1055.91C6120.86,-1047.56 6121.92,-1038.67 6122.95,-1030.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6126.44,-1030.37 6124.15,-1020.02 6119.49,-1029.53 6126.44,-1030.37\"/>\r\n</g>\r\n<!-- 204 -->\r\n<g id=\"node205\" class=\"node\"><title>204</title>\r\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M6434.5,-1020C6434.5,-1020 6309.5,-1020 6309.5,-1020 6303.5,-1020 6297.5,-1014 6297.5,-1008 6297.5,-1008 6297.5,-949 6297.5,-949 6297.5,-943 6303.5,-937 6309.5,-937 6309.5,-937 6434.5,-937 6434.5,-937 6440.5,-937 6446.5,-943 6446.5,-949 6446.5,-949 6446.5,-1008 6446.5,-1008 6446.5,-1014 6440.5,-1020 6434.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6305.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_serror_rate ≤ 0.2</text>\r\n<text text-anchor=\"start\" x=\"6322\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.191</text>\r\n<text text-anchor=\"start\" x=\"6328.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"6327.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 33]</text>\r\n<text text-anchor=\"start\" x=\"6317\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 198&#45;&gt;204 -->\r\n<g id=\"edge204\" class=\"edge\"><title>198&#45;&gt;204</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6204.16,-1055.91C6231.4,-1043.51 6261.24,-1029.92 6288.11,-1017.69\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6289.83,-1020.75 6297.48,-1013.42 6286.93,-1014.38 6289.83,-1020.75\"/>\r\n</g>\r\n<!-- 200 -->\r\n<g id=\"node201\" class=\"node\"><title>200</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M6150.5,-901C6150.5,-901 6011.5,-901 6011.5,-901 6005.5,-901 5999.5,-895 5999.5,-889 5999.5,-889 5999.5,-830 5999.5,-830 5999.5,-824 6005.5,-818 6011.5,-818 6011.5,-818 6150.5,-818 6150.5,-818 6156.5,-818 6162.5,-824 6162.5,-830 6162.5,-830 6162.5,-889 6162.5,-889 6162.5,-895 6156.5,-901 6150.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6007.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.625</text>\r\n<text text-anchor=\"start\" x=\"6039\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"6041.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"6040.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 2]</text>\r\n<text text-anchor=\"start\" x=\"6034\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 199&#45;&gt;200 -->\r\n<g id=\"edge200\" class=\"edge\"><title>199&#45;&gt;200</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6112.35,-936.907C6108.85,-928.377 6105.12,-919.284 6101.49,-910.456\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6104.66,-908.944 6097.62,-901.021 6098.18,-911.601 6104.66,-908.944\"/>\r\n</g>\r\n<!-- 203 -->\r\n<g id=\"node204\" class=\"node\"><title>203</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6279,-893.5C6279,-893.5 6193,-893.5 6193,-893.5 6187,-893.5 6181,-887.5 6181,-881.5 6181,-881.5 6181,-837.5 6181,-837.5 6181,-831.5 6187,-825.5 6193,-825.5 6193,-825.5 6279,-825.5 6279,-825.5 6285,-825.5 6291,-831.5 6291,-837.5 6291,-837.5 6291,-881.5 6291,-881.5 6291,-887.5 6285,-893.5 6279,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6194\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6192.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"6191.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [35, 0]</text>\r\n<text text-anchor=\"start\" x=\"6189\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 199&#45;&gt;203 -->\r\n<g id=\"edge203\" class=\"edge\"><title>199&#45;&gt;203</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6166.12,-936.907C6176.72,-925.321 6188.26,-912.698 6198.86,-901.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6201.5,-903.408 6205.67,-893.667 6196.34,-898.684 6201.5,-903.408\"/>\r\n</g>\r\n<!-- 201 -->\r\n<g id=\"node202\" class=\"node\"><title>201</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6056,-774.5C6056,-774.5 5970,-774.5 5970,-774.5 5964,-774.5 5958,-768.5 5958,-762.5 5958,-762.5 5958,-718.5 5958,-718.5 5958,-712.5 5964,-706.5 5970,-706.5 5970,-706.5 6056,-706.5 6056,-706.5 6062,-706.5 6068,-712.5 6068,-718.5 6068,-718.5 6068,-762.5 6068,-762.5 6068,-768.5 6062,-774.5 6056,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5971\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5973.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5972.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 200&#45;&gt;201 -->\r\n<g id=\"edge201\" class=\"edge\"><title>200&#45;&gt;201</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6057.41,-817.907C6050.93,-806.763 6043.9,-794.658 6037.37,-783.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6040.33,-781.554 6032.28,-774.667 6034.28,-785.072 6040.33,-781.554\"/>\r\n</g>\r\n<!-- 202 -->\r\n<g id=\"node203\" class=\"node\"><title>202</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6200,-774.5C6200,-774.5 6098,-774.5 6098,-774.5 6092,-774.5 6086,-768.5 6086,-762.5 6086,-762.5 6086,-718.5 6086,-718.5 6086,-712.5 6092,-706.5 6098,-706.5 6098,-706.5 6200,-706.5 6200,-706.5 6206,-706.5 6212,-712.5 6212,-718.5 6212,-718.5 6212,-762.5 6212,-762.5 6212,-768.5 6206,-774.5 6200,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"6107\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6109.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6108.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"6094\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 200&#45;&gt;202 -->\r\n<g id=\"edge202\" class=\"edge\"><title>200&#45;&gt;202</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6104.59,-817.907C6111.07,-806.763 6118.1,-794.658 6124.63,-783.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6127.72,-785.072 6129.72,-774.667 6121.67,-781.554 6127.72,-785.072\"/>\r\n</g>\r\n<!-- 205 -->\r\n<g id=\"node206\" class=\"node\"><title>205</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6423,-893.5C6423,-893.5 6321,-893.5 6321,-893.5 6315,-893.5 6309,-887.5 6309,-881.5 6309,-881.5 6309,-837.5 6309,-837.5 6309,-831.5 6315,-825.5 6321,-825.5 6321,-825.5 6423,-825.5 6423,-825.5 6429,-825.5 6435,-831.5 6435,-837.5 6435,-837.5 6435,-881.5 6435,-881.5 6435,-887.5 6429,-893.5 6423,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6330\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6328.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"6327.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 33]</text>\r\n<text text-anchor=\"start\" x=\"6317\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 204&#45;&gt;205 -->\r\n<g id=\"edge205\" class=\"edge\"><title>204&#45;&gt;205</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6372,-936.907C6372,-926.204 6372,-914.615 6372,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6375.5,-903.667 6372,-893.667 6368.5,-903.667 6375.5,-903.667\"/>\r\n</g>\r\n<!-- 206 -->\r\n<g id=\"node207\" class=\"node\"><title>206</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6551,-893.5C6551,-893.5 6465,-893.5 6465,-893.5 6459,-893.5 6453,-887.5 6453,-881.5 6453,-881.5 6453,-837.5 6453,-837.5 6453,-831.5 6459,-825.5 6465,-825.5 6465,-825.5 6551,-825.5 6551,-825.5 6557,-825.5 6563,-831.5 6563,-837.5 6563,-837.5 6563,-881.5 6563,-881.5 6563,-887.5 6557,-893.5 6551,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6466\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6468.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6467.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"6461\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 204&#45;&gt;206 -->\r\n<g id=\"edge206\" class=\"edge\"><title>204&#45;&gt;206</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6419.18,-936.907C6432.91,-925.101 6447.89,-912.217 6461.56,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6464.15,-902.842 6469.45,-893.667 6459.58,-897.535 6464.15,-902.842\"/>\r\n</g>\r\n<!-- 208 -->\r\n<g id=\"node209\" class=\"node\"><title>208</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6340,-1131.5C6340,-1131.5 6254,-1131.5 6254,-1131.5 6248,-1131.5 6242,-1125.5 6242,-1119.5 6242,-1119.5 6242,-1075.5 6242,-1075.5 6242,-1069.5 6248,-1063.5 6254,-1063.5 6254,-1063.5 6340,-1063.5 6340,-1063.5 6346,-1063.5 6352,-1069.5 6352,-1075.5 6352,-1075.5 6352,-1119.5 6352,-1119.5 6352,-1125.5 6346,-1131.5 6340,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"6255\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6257.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6256.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"6250\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 207&#45;&gt;208 -->\r\n<g id=\"edge208\" class=\"edge\"><title>207&#45;&gt;208</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6297,-1174.91C6297,-1164.2 6297,-1152.62 6297,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6300.5,-1141.67 6297,-1131.67 6293.5,-1141.67 6300.5,-1141.67\"/>\r\n</g>\r\n<!-- 209 -->\r\n<g id=\"node210\" class=\"node\"><title>209</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6484,-1131.5C6484,-1131.5 6382,-1131.5 6382,-1131.5 6376,-1131.5 6370,-1125.5 6370,-1119.5 6370,-1119.5 6370,-1075.5 6370,-1075.5 6370,-1069.5 6376,-1063.5 6382,-1063.5 6382,-1063.5 6484,-1063.5 6484,-1063.5 6490,-1063.5 6496,-1069.5 6496,-1075.5 6496,-1075.5 6496,-1119.5 6496,-1119.5 6496,-1125.5 6490,-1131.5 6484,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"6391\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6385.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 239</text>\r\n<text text-anchor=\"start\" x=\"6384.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 360]</text>\r\n<text text-anchor=\"start\" x=\"6378\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 207&#45;&gt;209 -->\r\n<g id=\"edge209\" class=\"edge\"><title>207&#45;&gt;209</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6344.18,-1174.91C6357.91,-1163.1 6372.89,-1150.22 6386.56,-1138.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6389.15,-1140.84 6394.45,-1131.67 6384.58,-1135.54 6389.15,-1140.84\"/>\r\n</g>\r\n<!-- 211 -->\r\n<g id=\"node212\" class=\"node\"><title>211</title>\r\n<path fill=\"#e78c4a\" stroke=\"black\" d=\"M7426.5,-1377C7426.5,-1377 7303.5,-1377 7303.5,-1377 7297.5,-1377 7291.5,-1371 7291.5,-1365 7291.5,-1365 7291.5,-1306 7291.5,-1306 7291.5,-1300 7297.5,-1294 7303.5,-1294 7303.5,-1294 7426.5,-1294 7426.5,-1294 7432.5,-1294 7438.5,-1300 7438.5,-1306 7438.5,-1306 7438.5,-1365 7438.5,-1365 7438.5,-1371 7432.5,-1377 7426.5,-1377\"/>\r\n<text text-anchor=\"start\" x=\"7299.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 49282.0</text>\r\n<text text-anchor=\"start\" x=\"7315\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.399</text>\r\n<text text-anchor=\"start\" x=\"7313.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1212</text>\r\n<text text-anchor=\"start\" x=\"7304\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1767, 152]</text>\r\n<text text-anchor=\"start\" x=\"7318\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 210&#45;&gt;211 -->\r\n<g id=\"edge211\" class=\"edge\"><title>210&#45;&gt;211</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7365,-1412.91C7365,-1404.65 7365,-1395.86 7365,-1387.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7368.5,-1387.02 7365,-1377.02 7361.5,-1387.02 7368.5,-1387.02\"/>\r\n</g>\r\n<!-- 268 -->\r\n<g id=\"node269\" class=\"node\"><title>268</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M7710,-1377C7710,-1377 7568,-1377 7568,-1377 7562,-1377 7556,-1371 7556,-1365 7556,-1365 7556,-1306 7556,-1306 7556,-1300 7562,-1294 7568,-1294 7568,-1294 7710,-1294 7710,-1294 7716,-1294 7722,-1300 7722,-1306 7722,-1306 7722,-1365 7722,-1365 7722,-1371 7716,-1377 7710,-1377\"/>\r\n<text text-anchor=\"start\" x=\"7564\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 212.5</text>\r\n<text text-anchor=\"start\" x=\"7589\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.067</text>\r\n<text text-anchor=\"start\" x=\"7587.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3907</text>\r\n<text text-anchor=\"start\" x=\"7582\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6192, 50]</text>\r\n<text text-anchor=\"start\" x=\"7592\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 210&#45;&gt;268 -->\r\n<g id=\"edge268\" class=\"edge\"><title>210&#45;&gt;268</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7460.06,-1412.91C7488.11,-1400.93 7518.76,-1387.84 7546.64,-1375.94\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7548.16,-1379.1 7555.98,-1371.95 7545.41,-1372.66 7548.16,-1379.1\"/>\r\n</g>\r\n<!-- 212 -->\r\n<g id=\"node213\" class=\"node\"><title>212</title>\r\n<path fill=\"#e68540\" stroke=\"black\" d=\"M7326,-1258C7326,-1258 7220,-1258 7220,-1258 7214,-1258 7208,-1252 7208,-1246 7208,-1246 7208,-1187 7208,-1187 7208,-1181 7214,-1175 7220,-1175 7220,-1175 7326,-1175 7326,-1175 7332,-1175 7338,-1181 7338,-1187 7338,-1187 7338,-1246 7338,-1246 7338,-1252 7332,-1258 7326,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7245.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7227\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.21</text>\r\n<text text-anchor=\"start\" x=\"7221.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1149</text>\r\n<text text-anchor=\"start\" x=\"7216\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1751, 60]</text>\r\n<text text-anchor=\"start\" x=\"7226\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 211&#45;&gt;212 -->\r\n<g id=\"edge212\" class=\"edge\"><title>211&#45;&gt;212</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7333.08,-1293.91C7326.02,-1284.92 7318.46,-1275.32 7311.18,-1266.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7313.8,-1263.72 7304.86,-1258.02 7308.29,-1268.05 7313.8,-1263.72\"/>\r\n</g>\r\n<!-- 265 -->\r\n<g id=\"node266\" class=\"node\"><title>265</title>\r\n<path fill=\"#5baeea\" stroke=\"black\" d=\"M7547.5,-1258C7547.5,-1258 7368.5,-1258 7368.5,-1258 7362.5,-1258 7356.5,-1252 7356.5,-1246 7356.5,-1246 7356.5,-1187 7356.5,-1187 7356.5,-1181 7362.5,-1175 7368.5,-1175 7368.5,-1175 7547.5,-1175 7547.5,-1175 7553.5,-1175 7559.5,-1181 7559.5,-1187 7559.5,-1187 7559.5,-1246 7559.5,-1246 7559.5,-1252 7553.5,-1258 7547.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7364.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.01</text>\r\n<text text-anchor=\"start\" x=\"7408\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.605</text>\r\n<text text-anchor=\"start\" x=\"7414.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 63</text>\r\n<text text-anchor=\"start\" x=\"7409.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 92]</text>\r\n<text text-anchor=\"start\" x=\"7403\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 211&#45;&gt;265 -->\r\n<g id=\"edge265\" class=\"edge\"><title>211&#45;&gt;265</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7397.27,-1293.91C7404.41,-1284.92 7412.04,-1275.32 7419.41,-1266.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7422.31,-1268.03 7425.79,-1258.02 7416.83,-1263.67 7422.31,-1268.03\"/>\r\n</g>\r\n<!-- 213 -->\r\n<g id=\"node214\" class=\"node\"><title>213</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M7228.5,-1139C7228.5,-1139 7097.5,-1139 7097.5,-1139 7091.5,-1139 7085.5,-1133 7085.5,-1127 7085.5,-1127 7085.5,-1068 7085.5,-1068 7085.5,-1062 7091.5,-1056 7097.5,-1056 7097.5,-1056 7228.5,-1056 7228.5,-1056 7234.5,-1056 7240.5,-1062 7240.5,-1068 7240.5,-1068 7240.5,-1127 7240.5,-1127 7240.5,-1133 7234.5,-1139 7228.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7093.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 603675.0</text>\r\n<text text-anchor=\"start\" x=\"7113\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.053</text>\r\n<text text-anchor=\"start\" x=\"7111.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1054</text>\r\n<text text-anchor=\"start\" x=\"7106\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1652, 10]</text>\r\n<text text-anchor=\"start\" x=\"7116\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 212&#45;&gt;213 -->\r\n<g id=\"edge213\" class=\"edge\"><title>212&#45;&gt;213</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7234.84,-1174.91C7226.22,-1165.74 7216.99,-1155.93 7208.12,-1146.49\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7210.5,-1143.91 7201.1,-1139.02 7205.4,-1148.7 7210.5,-1143.91\"/>\r\n</g>\r\n<!-- 238 -->\r\n<g id=\"node239\" class=\"node\"><title>238</title>\r\n<path fill=\"#f2c19d\" stroke=\"black\" d=\"M7364,-1139C7364,-1139 7272,-1139 7272,-1139 7266,-1139 7260,-1133 7260,-1127 7260,-1127 7260,-1068 7260,-1068 7260,-1062 7266,-1056 7272,-1056 7272,-1056 7364,-1056 7364,-1056 7370,-1056 7376,-1062 7376,-1068 7376,-1068 7376,-1127 7376,-1127 7376,-1133 7370,-1139 7364,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7268.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7268\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.921</text>\r\n<text text-anchor=\"start\" x=\"7274.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 95</text>\r\n<text text-anchor=\"start\" x=\"7269.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [99, 50]</text>\r\n<text text-anchor=\"start\" x=\"7271\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 212&#45;&gt;238 -->\r\n<g id=\"edge238\" class=\"edge\"><title>212&#45;&gt;238</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7288.61,-1174.91C7291.89,-1166.38 7295.39,-1157.28 7298.79,-1148.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7302.09,-1149.61 7302.42,-1139.02 7295.56,-1147.1 7302.09,-1149.61\"/>\r\n</g>\r\n<!-- 214 -->\r\n<g id=\"node215\" class=\"node\"><title>214</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M7056,-1020C7056,-1020 6882,-1020 6882,-1020 6876,-1020 6870,-1014 6870,-1008 6870,-1008 6870,-949 6870,-949 6870,-943 6876,-937 6882,-937 6882,-937 7056,-937 7056,-937 7062,-937 7068,-943 7068,-949 7068,-949 7068,-1008 7068,-1008 7068,-1014 7062,-1020 7056,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6878\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"6919\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.044</text>\r\n<text text-anchor=\"start\" x=\"6917.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1052</text>\r\n<text text-anchor=\"start\" x=\"6916\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1651, 8]</text>\r\n<text text-anchor=\"start\" x=\"6922\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 213&#45;&gt;214 -->\r\n<g id=\"edge214\" class=\"edge\"><title>213&#45;&gt;214</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7095.69,-1055.91C7079.29,-1046.02 7061.64,-1035.37 7044.87,-1025.25\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7046.56,-1022.19 7036.19,-1020.02 7042.94,-1028.18 7046.56,-1022.19\"/>\r\n</g>\r\n<!-- 235 -->\r\n<g id=\"node236\" class=\"node\"><title>235</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M7214,-1020C7214,-1020 7112,-1020 7112,-1020 7106,-1020 7100,-1014 7100,-1008 7100,-1008 7100,-949 7100,-949 7100,-943 7106,-937 7112,-937 7112,-937 7214,-937 7214,-937 7220,-937 7226,-943 7226,-949 7226,-949 7226,-1008 7226,-1008 7226,-1014 7220,-1020 7214,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7133.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"7113\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"7123.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7122.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"7108\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 213&#45;&gt;235 -->\r\n<g id=\"edge235\" class=\"edge\"><title>213&#45;&gt;235</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7163,-1055.91C7163,-1047.65 7163,-1038.86 7163,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7166.5,-1030.02 7163,-1020.02 7159.5,-1030.02 7166.5,-1030.02\"/>\r\n</g>\r\n<!-- 215 -->\r\n<g id=\"node216\" class=\"node\"><title>215</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6770.5,-901C6770.5,-901 6593.5,-901 6593.5,-901 6587.5,-901 6581.5,-895 6581.5,-889 6581.5,-889 6581.5,-830 6581.5,-830 6581.5,-824 6587.5,-818 6593.5,-818 6593.5,-818 6770.5,-818 6770.5,-818 6776.5,-818 6782.5,-824 6782.5,-830 6782.5,-830 6782.5,-889 6782.5,-889 6782.5,-895 6776.5,-901 6770.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6589.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.385</text>\r\n<text text-anchor=\"start\" x=\"6636\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.02</text>\r\n<text text-anchor=\"start\" x=\"6634.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 974</text>\r\n<text text-anchor=\"start\" x=\"6629\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1539, 3]</text>\r\n<text text-anchor=\"start\" x=\"6635\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 214&#45;&gt;215 -->\r\n<g id=\"edge215\" class=\"edge\"><title>214&#45;&gt;215</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6869.83,-937.071C6844.43,-926.718 6816.98,-915.527 6791.11,-904.982\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6792.24,-901.662 6781.66,-901.128 6789.6,-908.145 6792.24,-901.662\"/>\r\n</g>\r\n<!-- 224 -->\r\n<g id=\"node225\" class=\"node\"><title>224</title>\r\n<path fill=\"#e68742\" stroke=\"black\" d=\"M7065.5,-901C7065.5,-901 6872.5,-901 6872.5,-901 6866.5,-901 6860.5,-895 6860.5,-889 6860.5,-889 6860.5,-830 6860.5,-830 6860.5,-824 6866.5,-818 6872.5,-818 6872.5,-818 7065.5,-818 7065.5,-818 7071.5,-818 7077.5,-824 7077.5,-830 7077.5,-830 7077.5,-889 7077.5,-889 7077.5,-895 7071.5,-901 7065.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6868.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.01</text>\r\n<text text-anchor=\"start\" x=\"6919\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.255</text>\r\n<text text-anchor=\"start\" x=\"6925.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 78</text>\r\n<text text-anchor=\"start\" x=\"6920.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [112, 5]</text>\r\n<text text-anchor=\"start\" x=\"6922\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 214&#45;&gt;224 -->\r\n<g id=\"edge224\" class=\"edge\"><title>214&#45;&gt;224</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6969,-936.907C6969,-928.649 6969,-919.864 6969,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6972.5,-911.021 6969,-901.021 6965.5,-911.021 6972.5,-911.021\"/>\r\n</g>\r\n<!-- 216 -->\r\n<g id=\"node217\" class=\"node\"><title>216</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6550,-774.5C6550,-774.5 6452,-774.5 6452,-774.5 6446,-774.5 6440,-768.5 6440,-762.5 6440,-762.5 6440,-718.5 6440,-718.5 6440,-712.5 6446,-706.5 6452,-706.5 6452,-706.5 6550,-706.5 6550,-706.5 6556,-706.5 6562,-712.5 6562,-718.5 6562,-718.5 6562,-762.5 6562,-762.5 6562,-768.5 6556,-774.5 6550,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"6459\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6453.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 923</text>\r\n<text text-anchor=\"start\" x=\"6448\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1461, 0]</text>\r\n<text text-anchor=\"start\" x=\"6454\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 215&#45;&gt;216 -->\r\n<g id=\"edge216\" class=\"edge\"><title>215&#45;&gt;216</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6619.2,-817.907C6600.25,-805.659 6579.51,-792.252 6560.77,-780.135\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6562.61,-777.156 6552.31,-774.667 6558.81,-783.035 6562.61,-777.156\"/>\r\n</g>\r\n<!-- 217 -->\r\n<g id=\"node218\" class=\"node\"><title>217</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M6707.5,-782C6707.5,-782 6592.5,-782 6592.5,-782 6586.5,-782 6580.5,-776 6580.5,-770 6580.5,-770 6580.5,-711 6580.5,-711 6580.5,-705 6586.5,-699 6592.5,-699 6592.5,-699 6707.5,-699 6707.5,-699 6713.5,-699 6719.5,-705 6719.5,-711 6719.5,-711 6719.5,-770 6719.5,-770 6719.5,-776 6713.5,-782 6707.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"6588.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1316.5</text>\r\n<text text-anchor=\"start\" x=\"6600\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.229</text>\r\n<text text-anchor=\"start\" x=\"6606.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"6605.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [78, 3]</text>\r\n<text text-anchor=\"start\" x=\"6603\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 215&#45;&gt;217 -->\r\n<g id=\"edge217\" class=\"edge\"><title>215&#45;&gt;217</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6670.9,-817.907C6668.59,-809.468 6666.13,-800.477 6663.74,-791.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6667.1,-790.743 6661.08,-782.021 6660.34,-792.59 6667.1,-790.743\"/>\r\n</g>\r\n<!-- 218 -->\r\n<g id=\"node219\" class=\"node\"><title>218</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6501,-655.5C6501,-655.5 6415,-655.5 6415,-655.5 6409,-655.5 6403,-649.5 6403,-643.5 6403,-643.5 6403,-599.5 6403,-599.5 6403,-593.5 6409,-587.5 6415,-587.5 6415,-587.5 6501,-587.5 6501,-587.5 6507,-587.5 6513,-593.5 6513,-599.5 6513,-599.5 6513,-643.5 6513,-643.5 6513,-649.5 6507,-655.5 6501,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"6416\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6414.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"6413.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\r\n<text text-anchor=\"start\" x=\"6411\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 217&#45;&gt;218 -->\r\n<g id=\"edge218\" class=\"edge\"><title>217&#45;&gt;218</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6581.38,-698.928C6562.11,-687.415 6541.18,-674.8 6522,-663 6520.9,-662.322 6519.79,-661.636 6518.67,-660.944\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6520.32,-657.849 6509.97,-655.545 6516.62,-663.795 6520.32,-657.849\"/>\r\n</g>\r\n<!-- 219 -->\r\n<g id=\"node220\" class=\"node\"><title>219</title>\r\n<path fill=\"#e78c49\" stroke=\"black\" d=\"M6685,-663C6685,-663 6543,-663 6543,-663 6537,-663 6531,-657 6531,-651 6531,-651 6531,-592 6531,-592 6531,-586 6537,-580 6543,-580 6543,-580 6685,-580 6685,-580 6691,-580 6697,-586 6697,-592 6697,-592 6697,-651 6697,-651 6697,-657 6691,-663 6685,-663\"/>\r\n<text text-anchor=\"start\" x=\"6539\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 130.0</text>\r\n<text text-anchor=\"start\" x=\"6564\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"6570.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"6569.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 3]</text>\r\n<text text-anchor=\"start\" x=\"6567\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 217&#45;&gt;219 -->\r\n<g id=\"edge219\" class=\"edge\"><title>217&#45;&gt;219</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6637.51,-698.907C6634.91,-690.468 6632.15,-681.477 6629.46,-672.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6632.75,-671.549 6626.47,-663.021 6626.06,-673.608 6632.75,-671.549\"/>\r\n</g>\r\n<!-- 220 -->\r\n<g id=\"node221\" class=\"node\"><title>220</title>\r\n<path fill=\"#bddef6\" stroke=\"black\" d=\"M6490.5,-544C6490.5,-544 6367.5,-544 6367.5,-544 6361.5,-544 6355.5,-538 6355.5,-532 6355.5,-532 6355.5,-473 6355.5,-473 6355.5,-467 6361.5,-461 6367.5,-461 6367.5,-461 6490.5,-461 6490.5,-461 6496.5,-461 6502.5,-467 6502.5,-473 6502.5,-473 6502.5,-532 6502.5,-532 6502.5,-538 6496.5,-544 6490.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"6363.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 24132.5</text>\r\n<text text-anchor=\"start\" x=\"6379\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.971</text>\r\n<text text-anchor=\"start\" x=\"6389.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6388.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 3]</text>\r\n<text text-anchor=\"start\" x=\"6374\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 219&#45;&gt;220 -->\r\n<g id=\"edge220\" class=\"edge\"><title>219&#45;&gt;220</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6549.82,-579.907C6534.32,-570.106 6517.65,-559.563 6501.79,-549.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6503.39,-546.408 6493.07,-544.021 6499.65,-552.324 6503.39,-546.408\"/>\r\n</g>\r\n<!-- 223 -->\r\n<g id=\"node224\" class=\"node\"><title>223</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6619,-536.5C6619,-536.5 6533,-536.5 6533,-536.5 6527,-536.5 6521,-530.5 6521,-524.5 6521,-524.5 6521,-480.5 6521,-480.5 6521,-474.5 6527,-468.5 6533,-468.5 6533,-468.5 6619,-468.5 6619,-468.5 6625,-468.5 6631,-474.5 6631,-480.5 6631,-480.5 6631,-524.5 6631,-524.5 6631,-530.5 6625,-536.5 6619,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6534\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6532.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"6531.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 0]</text>\r\n<text text-anchor=\"start\" x=\"6529\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 219&#45;&gt;223 -->\r\n<g id=\"edge223\" class=\"edge\"><title>219&#45;&gt;223</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6600.82,-579.907C6597.3,-569.094 6593.5,-557.376 6589.95,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6593.19,-545.097 6586.77,-536.667 6586.53,-547.259 6593.19,-545.097\"/>\r\n</g>\r\n<!-- 221 -->\r\n<g id=\"node222\" class=\"node\"><title>221</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6412,-417.5C6412,-417.5 6310,-417.5 6310,-417.5 6304,-417.5 6298,-411.5 6298,-405.5 6298,-405.5 6298,-361.5 6298,-361.5 6298,-355.5 6304,-349.5 6310,-349.5 6310,-349.5 6412,-349.5 6412,-349.5 6418,-349.5 6424,-355.5 6424,-361.5 6424,-361.5 6424,-405.5 6424,-405.5 6424,-411.5 6418,-417.5 6412,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"6319\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6321.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6320.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"6306\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 220&#45;&gt;221 -->\r\n<g id=\"edge221\" class=\"edge\"><title>220&#45;&gt;221</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6405.41,-460.907C6398.93,-449.763 6391.9,-437.658 6385.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6388.33,-424.554 6380.28,-417.667 6382.28,-428.072 6388.33,-424.554\"/>\r\n</g>\r\n<!-- 222 -->\r\n<g id=\"node223\" class=\"node\"><title>222</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6540,-417.5C6540,-417.5 6454,-417.5 6454,-417.5 6448,-417.5 6442,-411.5 6442,-405.5 6442,-405.5 6442,-361.5 6442,-361.5 6442,-355.5 6448,-349.5 6454,-349.5 6454,-349.5 6540,-349.5 6540,-349.5 6546,-349.5 6552,-355.5 6552,-361.5 6552,-361.5 6552,-405.5 6552,-405.5 6552,-411.5 6546,-417.5 6540,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"6455\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6457.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6456.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"6450\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 220&#45;&gt;222 -->\r\n<g id=\"edge222\" class=\"edge\"><title>220&#45;&gt;222</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6452.59,-460.907C6459.07,-449.763 6466.1,-437.658 6472.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6475.72,-428.072 6477.72,-417.667 6469.67,-424.554 6475.72,-428.072\"/>\r\n</g>\r\n<!-- 225 -->\r\n<g id=\"node226\" class=\"node\"><title>225</title>\r\n<path fill=\"#e88f4f\" stroke=\"black\" d=\"M7014,-782C7014,-782 6916,-782 6916,-782 6910,-782 6904,-776 6904,-770 6904,-770 6904,-711 6904,-711 6904,-705 6910,-699 6916,-699 6916,-699 7014,-699 7014,-699 7020,-699 7026,-705 7026,-711 7026,-711 7026,-770 7026,-770 7026,-776 7020,-782 7014,-782\"/>\r\n<text text-anchor=\"start\" x=\"6912\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 79.5</text>\r\n<text text-anchor=\"start\" x=\"6915\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"6921.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"6920.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [45, 5]</text>\r\n<text text-anchor=\"start\" x=\"6918\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 224&#45;&gt;225 -->\r\n<g id=\"edge225\" class=\"edge\"><title>224&#45;&gt;225</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6967.61,-817.907C6967.33,-809.558 6967.02,-800.671 6966.73,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6970.23,-791.895 6966.39,-782.021 6963.23,-792.135 6970.23,-791.895\"/>\r\n</g>\r\n<!-- 234 -->\r\n<g id=\"node235\" class=\"node\"><title>234</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7142,-774.5C7142,-774.5 7056,-774.5 7056,-774.5 7050,-774.5 7044,-768.5 7044,-762.5 7044,-762.5 7044,-718.5 7044,-718.5 7044,-712.5 7050,-706.5 7056,-706.5 7056,-706.5 7142,-706.5 7142,-706.5 7148,-706.5 7154,-712.5 7154,-718.5 7154,-718.5 7154,-762.5 7154,-762.5 7154,-768.5 7148,-774.5 7142,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"7057\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7055.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\r\n<text text-anchor=\"start\" x=\"7054.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 0]</text>\r\n<text text-anchor=\"start\" x=\"7052\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 224&#45;&gt;234 -->\r\n<g id=\"edge234\" class=\"edge\"><title>224&#45;&gt;234</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7014.1,-817.907C7027.22,-806.101 7041.54,-793.217 7054.61,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7057.06,-783.958 7062.15,-774.667 7052.37,-778.755 7057.06,-783.958\"/>\r\n</g>\r\n<!-- 226 -->\r\n<g id=\"node227\" class=\"node\"><title>226</title>\r\n<path fill=\"#f5cdb0\" stroke=\"black\" d=\"M6845,-663C6845,-663 6753,-663 6753,-663 6747,-663 6741,-657 6741,-651 6741,-651 6741,-592 6741,-592 6741,-586 6747,-580 6753,-580 6753,-580 6845,-580 6845,-580 6851,-580 6857,-586 6857,-592 6857,-592 6857,-651 6857,-651 6857,-657 6851,-663 6845,-663\"/>\r\n<text text-anchor=\"start\" x=\"6750.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"6749\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.954</text>\r\n<text text-anchor=\"start\" x=\"6759.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"6758.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 3]</text>\r\n<text text-anchor=\"start\" x=\"6752\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 225&#45;&gt;226 -->\r\n<g id=\"edge226\" class=\"edge\"><title>225&#45;&gt;226</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6907.41,-698.907C6893.63,-689.197 6878.82,-678.758 6864.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6866.68,-665.921 6856.49,-663.021 6862.65,-671.643 6866.68,-665.921\"/>\r\n</g>\r\n<!-- 229 -->\r\n<g id=\"node230\" class=\"node\"><title>229</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M7089,-663C7089,-663 6887,-663 6887,-663 6881,-663 6875,-657 6875,-651 6875,-651 6875,-592 6875,-592 6875,-586 6881,-580 6887,-580 6887,-580 7089,-580 7089,-580 7095,-580 7101,-586 7101,-592 7101,-592 7101,-651 7101,-651 7101,-657 7095,-663 7089,-663\"/>\r\n<text text-anchor=\"start\" x=\"6883\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.315</text>\r\n<text text-anchor=\"start\" x=\"6938\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"6944.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"6943.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 2]</text>\r\n<text text-anchor=\"start\" x=\"6941\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 225&#45;&gt;229 -->\r\n<g id=\"edge229\" class=\"edge\"><title>225&#45;&gt;229</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6972.98,-698.907C6974.62,-690.558 6976.37,-681.671 6978.07,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6981.54,-673.508 6980.03,-663.021 6974.67,-672.158 6981.54,-673.508\"/>\r\n</g>\r\n<!-- 227 -->\r\n<g id=\"node228\" class=\"node\"><title>227</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6763,-536.5C6763,-536.5 6661,-536.5 6661,-536.5 6655,-536.5 6649,-530.5 6649,-524.5 6649,-524.5 6649,-480.5 6649,-480.5 6649,-474.5 6655,-468.5 6661,-468.5 6661,-468.5 6763,-468.5 6763,-468.5 6769,-468.5 6775,-474.5 6775,-480.5 6775,-480.5 6775,-524.5 6775,-524.5 6775,-530.5 6769,-536.5 6763,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6670\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6672.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6671.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"6657\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 226&#45;&gt;227 -->\r\n<g id=\"edge227\" class=\"edge\"><title>226&#45;&gt;227</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6768.82,-579.907C6760.36,-568.542 6751.17,-556.178 6742.69,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6745.44,-542.603 6736.66,-536.667 6739.82,-546.78 6745.44,-542.603\"/>\r\n</g>\r\n<!-- 228 -->\r\n<g id=\"node229\" class=\"node\"><title>228</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6891,-536.5C6891,-536.5 6805,-536.5 6805,-536.5 6799,-536.5 6793,-530.5 6793,-524.5 6793,-524.5 6793,-480.5 6793,-480.5 6793,-474.5 6799,-468.5 6805,-468.5 6805,-468.5 6891,-468.5 6891,-468.5 6897,-468.5 6903,-474.5 6903,-480.5 6903,-480.5 6903,-524.5 6903,-524.5 6903,-530.5 6897,-536.5 6891,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6806\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6808.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6807.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"6801\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 226&#45;&gt;228 -->\r\n<g id=\"edge228\" class=\"edge\"><title>226&#45;&gt;228</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6816,-579.907C6820.58,-568.983 6825.54,-557.137 6830.16,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6833.47,-547.243 6834.11,-536.667 6827.02,-544.539 6833.47,-547.243\"/>\r\n</g>\r\n<!-- 230 -->\r\n<g id=\"node231\" class=\"node\"><title>230</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7019,-536.5C7019,-536.5 6933,-536.5 6933,-536.5 6927,-536.5 6921,-530.5 6921,-524.5 6921,-524.5 6921,-480.5 6921,-480.5 6921,-474.5 6927,-468.5 6933,-468.5 6933,-468.5 7019,-468.5 7019,-468.5 7025,-468.5 7031,-474.5 7031,-480.5 7031,-480.5 7031,-524.5 7031,-524.5 7031,-530.5 7025,-536.5 7019,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6934\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6932.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"6931.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 0]</text>\r\n<text text-anchor=\"start\" x=\"6929\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 229&#45;&gt;230 -->\r\n<g id=\"edge230\" class=\"edge\"><title>229&#45;&gt;230</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6983.84,-579.907C6982.74,-569.204 6981.55,-557.615 6980.44,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6983.9,-546.258 6979.4,-536.667 6976.94,-546.972 6983.9,-546.258\"/>\r\n</g>\r\n<!-- 231 -->\r\n<g id=\"node232\" class=\"node\"><title>231</title>\r\n<path fill=\"#f6d5bd\" stroke=\"black\" d=\"M7255,-544C7255,-544 7061,-544 7061,-544 7055,-544 7049,-538 7049,-532 7049,-532 7049,-473 7049,-473 7049,-467 7055,-461 7061,-461 7061,-461 7255,-461 7255,-461 7261,-461 7267,-467 7267,-473 7267,-473 7267,-532 7267,-532 7267,-538 7261,-544 7255,-544\"/>\r\n<text text-anchor=\"start\" x=\"7057\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"7108\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.971</text>\r\n<text text-anchor=\"start\" x=\"7118.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"7117.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 2]</text>\r\n<text text-anchor=\"start\" x=\"7111\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 229&#45;&gt;231 -->\r\n<g id=\"edge231\" class=\"edge\"><title>229&#45;&gt;231</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7046.98,-579.907C7061.09,-570.197 7076.26,-559.758 7090.71,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7092.87,-552.573 7099.12,-544.021 7088.9,-546.807 7092.87,-552.573\"/>\r\n</g>\r\n<!-- 232 -->\r\n<g id=\"node233\" class=\"node\"><title>232</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7141,-417.5C7141,-417.5 7039,-417.5 7039,-417.5 7033,-417.5 7027,-411.5 7027,-405.5 7027,-405.5 7027,-361.5 7027,-361.5 7027,-355.5 7033,-349.5 7039,-349.5 7039,-349.5 7141,-349.5 7141,-349.5 7147,-349.5 7153,-355.5 7153,-361.5 7153,-361.5 7153,-405.5 7153,-405.5 7153,-411.5 7147,-417.5 7141,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"7048\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7050.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7049.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7035\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 231&#45;&gt;232 -->\r\n<g id=\"edge232\" class=\"edge\"><title>231&#45;&gt;232</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7134.41,-460.907C7127.93,-449.763 7120.9,-437.658 7114.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7117.33,-424.554 7109.28,-417.667 7111.28,-428.072 7117.33,-424.554\"/>\r\n</g>\r\n<!-- 233 -->\r\n<g id=\"node234\" class=\"node\"><title>233</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7269,-417.5C7269,-417.5 7183,-417.5 7183,-417.5 7177,-417.5 7171,-411.5 7171,-405.5 7171,-405.5 7171,-361.5 7171,-361.5 7171,-355.5 7177,-349.5 7183,-349.5 7183,-349.5 7269,-349.5 7269,-349.5 7275,-349.5 7281,-355.5 7281,-361.5 7281,-361.5 7281,-405.5 7281,-405.5 7281,-411.5 7275,-417.5 7269,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"7184\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7186.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7185.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\r\n<text text-anchor=\"start\" x=\"7179\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 231&#45;&gt;233 -->\r\n<g id=\"edge233\" class=\"edge\"><title>231&#45;&gt;233</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7181.59,-460.907C7188.07,-449.763 7195.1,-437.658 7201.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7204.72,-428.072 7206.72,-417.667 7198.67,-424.554 7204.72,-428.072\"/>\r\n</g>\r\n<!-- 236 -->\r\n<g id=\"node237\" class=\"node\"><title>236</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7212,-893.5C7212,-893.5 7110,-893.5 7110,-893.5 7104,-893.5 7098,-887.5 7098,-881.5 7098,-881.5 7098,-837.5 7098,-837.5 7098,-831.5 7104,-825.5 7110,-825.5 7110,-825.5 7212,-825.5 7212,-825.5 7218,-825.5 7224,-831.5 7224,-837.5 7224,-837.5 7224,-881.5 7224,-881.5 7224,-887.5 7218,-893.5 7212,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7119\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7121.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7120.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7106\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 235&#45;&gt;236 -->\r\n<g id=\"edge236\" class=\"edge\"><title>235&#45;&gt;236</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7162.31,-936.907C7162.12,-926.204 7161.93,-914.615 7161.74,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7165.24,-903.606 7161.57,-893.667 7158.24,-903.725 7165.24,-903.606\"/>\r\n</g>\r\n<!-- 237 -->\r\n<g id=\"node238\" class=\"node\"><title>237</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7340,-893.5C7340,-893.5 7254,-893.5 7254,-893.5 7248,-893.5 7242,-887.5 7242,-881.5 7242,-881.5 7242,-837.5 7242,-837.5 7242,-831.5 7248,-825.5 7254,-825.5 7254,-825.5 7340,-825.5 7340,-825.5 7346,-825.5 7352,-831.5 7352,-837.5 7352,-837.5 7352,-881.5 7352,-881.5 7352,-887.5 7346,-893.5 7340,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7255\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7257.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7256.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"7250\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 235&#45;&gt;237 -->\r\n<g id=\"edge237\" class=\"edge\"><title>235&#45;&gt;237</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7209.49,-936.907C7223.01,-925.101 7237.77,-912.217 7251.25,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7253.78,-902.881 7259.01,-893.667 7249.18,-897.608 7253.78,-902.881\"/>\r\n</g>\r\n<!-- 239 -->\r\n<g id=\"node240\" class=\"node\"><title>239</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7369,-1012.5C7369,-1012.5 7267,-1012.5 7267,-1012.5 7261,-1012.5 7255,-1006.5 7255,-1000.5 7255,-1000.5 7255,-956.5 7255,-956.5 7255,-950.5 7261,-944.5 7267,-944.5 7267,-944.5 7369,-944.5 7369,-944.5 7375,-944.5 7381,-950.5 7381,-956.5 7381,-956.5 7381,-1000.5 7381,-1000.5 7381,-1006.5 7375,-1012.5 7369,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"7276\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7278.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"7277.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"7263\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 238&#45;&gt;239 -->\r\n<g id=\"edge239\" class=\"edge\"><title>238&#45;&gt;239</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7318,-1055.91C7318,-1045.2 7318,-1033.62 7318,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7321.5,-1022.67 7318,-1012.67 7314.5,-1022.67 7321.5,-1022.67\"/>\r\n</g>\r\n<!-- 240 -->\r\n<g id=\"node241\" class=\"node\"><title>240</title>\r\n<path fill=\"#f0b58b\" stroke=\"black\" d=\"M7545.5,-1020C7545.5,-1020 7438.5,-1020 7438.5,-1020 7432.5,-1020 7426.5,-1014 7426.5,-1008 7426.5,-1008 7426.5,-949 7426.5,-949 7426.5,-943 7432.5,-937 7438.5,-937 7438.5,-937 7545.5,-937 7545.5,-937 7551.5,-937 7557.5,-943 7557.5,-949 7557.5,-949 7557.5,-1008 7557.5,-1008 7557.5,-1014 7551.5,-1020 7545.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7434.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 948.0</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.872</text>\r\n<text text-anchor=\"start\" x=\"7448.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 89</text>\r\n<text text-anchor=\"start\" x=\"7443.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [99, 41]</text>\r\n<text text-anchor=\"start\" x=\"7445\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 238&#45;&gt;240 -->\r\n<g id=\"edge240\" class=\"edge\"><title>238&#45;&gt;240</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7376.42,-1057.22C7391.42,-1047.13 7407.69,-1036.19 7423.15,-1025.79\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7425.31,-1028.56 7431.65,-1020.08 7421.4,-1022.76 7425.31,-1028.56\"/>\r\n</g>\r\n<!-- 241 -->\r\n<g id=\"node242\" class=\"node\"><title>241</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M7589,-901C7589,-901 7395,-901 7395,-901 7389,-901 7383,-895 7383,-889 7383,-889 7383,-830 7383,-830 7383,-824 7389,-818 7395,-818 7395,-818 7589,-818 7589,-818 7595,-818 7601,-824 7601,-830 7601,-830 7601,-889 7601,-889 7601,-895 7595,-901 7589,-901\"/>\r\n<text text-anchor=\"start\" x=\"7391\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.53</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"7448.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"7447.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [60, 3]</text>\r\n<text text-anchor=\"start\" x=\"7445\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 240&#45;&gt;241 -->\r\n<g id=\"edge241\" class=\"edge\"><title>240&#45;&gt;241</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7492,-936.907C7492,-928.649 7492,-919.864 7492,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7495.5,-911.021 7492,-901.021 7488.5,-911.021 7495.5,-911.021\"/>\r\n</g>\r\n<!-- 250 -->\r\n<g id=\"node251\" class=\"node\"><title>250</title>\r\n<path fill=\"#fefcfa\" stroke=\"black\" d=\"M7848.5,-901C7848.5,-901 7661.5,-901 7661.5,-901 7655.5,-901 7649.5,-895 7649.5,-889 7649.5,-889 7649.5,-830 7649.5,-830 7649.5,-824 7655.5,-818 7661.5,-818 7661.5,-818 7848.5,-818 7848.5,-818 7854.5,-818 7860.5,-824 7860.5,-830 7860.5,-830 7860.5,-889 7860.5,-889 7860.5,-895 7854.5,-901 7848.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"7657.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"7713\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"7711.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"7706.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 38]</text>\r\n<text text-anchor=\"start\" x=\"7708\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 240&#45;&gt;250 -->\r\n<g id=\"edge250\" class=\"edge\"><title>240&#45;&gt;250</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7557.69,-948.278C7586.91,-935.279 7621.97,-919.683 7654.37,-905.266\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7656.17,-908.297 7663.88,-901.034 7653.33,-901.901 7656.17,-908.297\"/>\r\n</g>\r\n<!-- 242 -->\r\n<g id=\"node243\" class=\"node\"><title>242</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M7383.5,-782C7383.5,-782 7276.5,-782 7276.5,-782 7270.5,-782 7264.5,-776 7264.5,-770 7264.5,-770 7264.5,-711 7264.5,-711 7264.5,-705 7270.5,-699 7276.5,-699 7276.5,-699 7383.5,-699 7383.5,-699 7389.5,-699 7395.5,-705 7395.5,-711 7395.5,-711 7395.5,-770 7395.5,-770 7395.5,-776 7389.5,-782 7383.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7272.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 357.5</text>\r\n<text text-anchor=\"start\" x=\"7280\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.122</text>\r\n<text text-anchor=\"start\" x=\"7286.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 36</text>\r\n<text text-anchor=\"start\" x=\"7285.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [59, 1]</text>\r\n<text text-anchor=\"start\" x=\"7283\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 241&#45;&gt;242 -->\r\n<g id=\"edge242\" class=\"edge\"><title>241&#45;&gt;242</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7435.79,-817.907C7422.48,-808.288 7408.17,-797.953 7394.51,-788.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7396.26,-785.038 7386.11,-782.021 7392.16,-790.713 7396.26,-785.038\"/>\r\n</g>\r\n<!-- 247 -->\r\n<g id=\"node248\" class=\"node\"><title>247</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M7568.5,-782C7568.5,-782 7425.5,-782 7425.5,-782 7419.5,-782 7413.5,-776 7413.5,-770 7413.5,-770 7413.5,-711 7413.5,-711 7413.5,-705 7419.5,-699 7425.5,-699 7425.5,-699 7568.5,-699 7568.5,-699 7574.5,-699 7580.5,-705 7580.5,-711 7580.5,-711 7580.5,-770 7580.5,-770 7580.5,-776 7574.5,-782 7568.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7421.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7447\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"7457.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7456.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 241&#45;&gt;247 -->\r\n<g id=\"edge247\" class=\"edge\"><title>241&#45;&gt;247</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7493.73,-817.907C7494.09,-809.558 7494.47,-800.671 7494.84,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7498.34,-792.161 7495.27,-782.021 7491.34,-791.862 7498.34,-792.161\"/>\r\n</g>\r\n<!-- 243 -->\r\n<g id=\"node244\" class=\"node\"><title>243</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7237,-655.5C7237,-655.5 7151,-655.5 7151,-655.5 7145,-655.5 7139,-649.5 7139,-643.5 7139,-643.5 7139,-599.5 7139,-599.5 7139,-593.5 7145,-587.5 7151,-587.5 7151,-587.5 7237,-587.5 7237,-587.5 7243,-587.5 7249,-593.5 7249,-599.5 7249,-599.5 7249,-643.5 7249,-643.5 7249,-649.5 7243,-655.5 7237,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7152\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7150.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"7149.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 0]</text>\r\n<text text-anchor=\"start\" x=\"7147\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 242&#45;&gt;243 -->\r\n<g id=\"edge243\" class=\"edge\"><title>242&#45;&gt;243</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7282.82,-698.907C7269.09,-687.101 7254.11,-674.217 7240.44,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7242.42,-659.535 7232.55,-655.667 7237.85,-664.842 7242.42,-659.535\"/>\r\n</g>\r\n<!-- 244 -->\r\n<g id=\"node245\" class=\"node\"><title>244</title>\r\n<path fill=\"#e68843\" stroke=\"black\" d=\"M7386.5,-663C7386.5,-663 7279.5,-663 7279.5,-663 7273.5,-663 7267.5,-657 7267.5,-651 7267.5,-651 7267.5,-592 7267.5,-592 7267.5,-586 7273.5,-580 7279.5,-580 7279.5,-580 7386.5,-580 7386.5,-580 7392.5,-580 7398.5,-586 7398.5,-592 7398.5,-592 7398.5,-651 7398.5,-651 7398.5,-657 7392.5,-663 7386.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"7275.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 428.5</text>\r\n<text text-anchor=\"start\" x=\"7283\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.286</text>\r\n<text text-anchor=\"start\" x=\"7289.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\r\n<text text-anchor=\"start\" x=\"7288.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [19, 1]</text>\r\n<text text-anchor=\"start\" x=\"7286\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 242&#45;&gt;244 -->\r\n<g id=\"edge244\" class=\"edge\"><title>242&#45;&gt;244</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7331.04,-698.907C7331.25,-690.558 7331.48,-681.671 7331.7,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7335.2,-673.107 7331.96,-663.021 7328.21,-672.928 7335.2,-673.107\"/>\r\n</g>\r\n<!-- 245 -->\r\n<g id=\"node246\" class=\"node\"><title>245</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7399,-536.5C7399,-536.5 7297,-536.5 7297,-536.5 7291,-536.5 7285,-530.5 7285,-524.5 7285,-524.5 7285,-480.5 7285,-480.5 7285,-474.5 7291,-468.5 7297,-468.5 7297,-468.5 7399,-468.5 7399,-468.5 7405,-468.5 7411,-474.5 7411,-480.5 7411,-480.5 7411,-524.5 7411,-524.5 7411,-530.5 7405,-536.5 7399,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7306\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7308.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7307.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"7293\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 244&#45;&gt;245 -->\r\n<g id=\"edge245\" class=\"edge\"><title>244&#45;&gt;245</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7338.2,-579.907C7339.58,-569.204 7341.06,-557.615 7342.45,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7345.95,-547.031 7343.75,-536.667 7339,-546.141 7345.95,-547.031\"/>\r\n</g>\r\n<!-- 246 -->\r\n<g id=\"node247\" class=\"node\"><title>246</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7527,-536.5C7527,-536.5 7441,-536.5 7441,-536.5 7435,-536.5 7429,-530.5 7429,-524.5 7429,-524.5 7429,-480.5 7429,-480.5 7429,-474.5 7435,-468.5 7441,-468.5 7441,-468.5 7527,-468.5 7527,-468.5 7533,-468.5 7539,-474.5 7539,-480.5 7539,-480.5 7539,-524.5 7539,-524.5 7539,-530.5 7533,-536.5 7527,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7440.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"7439.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [19, 0]</text>\r\n<text text-anchor=\"start\" x=\"7437\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 244&#45;&gt;246 -->\r\n<g id=\"edge246\" class=\"edge\"><title>244&#45;&gt;246</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7385.39,-579.907C7400.77,-567.99 7417.57,-554.976 7432.87,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7435.43,-545.559 7441.19,-536.667 7431.15,-540.025 7435.43,-545.559\"/>\r\n</g>\r\n<!-- 248 -->\r\n<g id=\"node249\" class=\"node\"><title>248</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7515,-655.5C7515,-655.5 7429,-655.5 7429,-655.5 7423,-655.5 7417,-649.5 7417,-643.5 7417,-643.5 7417,-599.5 7417,-599.5 7417,-593.5 7423,-587.5 7429,-587.5 7429,-587.5 7515,-587.5 7515,-587.5 7521,-587.5 7527,-593.5 7527,-599.5 7527,-599.5 7527,-643.5 7527,-643.5 7527,-649.5 7521,-655.5 7515,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7430\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7432.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7431.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"7425\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 247&#45;&gt;248 -->\r\n<g id=\"edge248\" class=\"edge\"><title>247&#45;&gt;248</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7488.33,-698.907C7486.04,-688.204 7483.56,-676.615 7481.25,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7484.6,-664.715 7479.09,-655.667 7477.75,-666.178 7484.6,-664.715\"/>\r\n</g>\r\n<!-- 249 -->\r\n<g id=\"node250\" class=\"node\"><title>249</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7659,-655.5C7659,-655.5 7557,-655.5 7557,-655.5 7551,-655.5 7545,-649.5 7545,-643.5 7545,-643.5 7545,-599.5 7545,-599.5 7545,-593.5 7551,-587.5 7557,-587.5 7557,-587.5 7659,-587.5 7659,-587.5 7665,-587.5 7671,-593.5 7671,-599.5 7671,-599.5 7671,-643.5 7671,-643.5 7671,-649.5 7665,-655.5 7659,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7566\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7568.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7567.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7553\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 247&#45;&gt;249 -->\r\n<g id=\"edge249\" class=\"edge\"><title>247&#45;&gt;249</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7535.51,-698.907C7546.5,-687.321 7558.48,-674.698 7569.47,-663.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7572.19,-665.331 7576.53,-655.667 7567.11,-660.513 7572.19,-665.331\"/>\r\n</g>\r\n<!-- 251 -->\r\n<g id=\"node252\" class=\"node\"><title>251</title>\r\n<path fill=\"#79bded\" stroke=\"black\" d=\"M7812.5,-782C7812.5,-782 7697.5,-782 7697.5,-782 7691.5,-782 7685.5,-776 7685.5,-770 7685.5,-770 7685.5,-711 7685.5,-711 7685.5,-705 7691.5,-699 7697.5,-699 7697.5,-699 7812.5,-699 7812.5,-699 7818.5,-699 7824.5,-705 7824.5,-711 7824.5,-711 7824.5,-770 7824.5,-770 7824.5,-776 7818.5,-782 7812.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7693.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2968.0</text>\r\n<text text-anchor=\"start\" x=\"7705\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.801</text>\r\n<text text-anchor=\"start\" x=\"7711.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"7706.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 31]</text>\r\n<text text-anchor=\"start\" x=\"7700\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 250&#45;&gt;251 -->\r\n<g id=\"edge251\" class=\"edge\"><title>250&#45;&gt;251</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7755,-817.907C7755,-809.649 7755,-800.864 7755,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7758.5,-792.021 7755,-782.021 7751.5,-792.021 7758.5,-792.021\"/>\r\n</g>\r\n<!-- 256 -->\r\n<g id=\"node257\" class=\"node\"><title>256</title>\r\n<path fill=\"#eb9f69\" stroke=\"black\" d=\"M8128,-782C8128,-782 8036,-782 8036,-782 8030,-782 8024,-776 8024,-770 8024,-770 8024,-711 8024,-711 8024,-705 8030,-699 8036,-699 8036,-699 8128,-699 8128,-699 8134,-699 8140,-705 8140,-711 8140,-711 8140,-770 8140,-770 8140,-776 8134,-782 8128,-782\"/>\r\n<text text-anchor=\"start\" x=\"8035\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 13.0</text>\r\n<text text-anchor=\"start\" x=\"8032\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.711</text>\r\n<text text-anchor=\"start\" x=\"8038.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"8037.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 7]</text>\r\n<text text-anchor=\"start\" x=\"8035\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 250&#45;&gt;256 -->\r\n<g id=\"edge256\" class=\"edge\"><title>250&#45;&gt;256</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7860.72,-820.675C7911.13,-802.637 7969.96,-781.589 8014.28,-765.731\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8015.55,-768.991 8023.79,-762.327 8013.2,-762.401 8015.55,-768.991\"/>\r\n</g>\r\n<!-- 252 -->\r\n<g id=\"node253\" class=\"node\"><title>252</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7803,-655.5C7803,-655.5 7701,-655.5 7701,-655.5 7695,-655.5 7689,-649.5 7689,-643.5 7689,-643.5 7689,-599.5 7689,-599.5 7689,-593.5 7695,-587.5 7701,-587.5 7701,-587.5 7803,-587.5 7803,-587.5 7809,-587.5 7815,-593.5 7815,-599.5 7815,-599.5 7815,-643.5 7815,-643.5 7815,-649.5 7809,-655.5 7803,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7710\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7708.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"7707.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"7697\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 251&#45;&gt;252 -->\r\n<g id=\"edge252\" class=\"edge\"><title>251&#45;&gt;252</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7753.96,-698.907C7753.68,-688.204 7753.39,-676.615 7753.11,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7756.61,-665.574 7752.85,-655.667 7749.61,-665.753 7756.61,-665.574\"/>\r\n</g>\r\n<!-- 253 -->\r\n<g id=\"node254\" class=\"node\"><title>253</title>\r\n<path fill=\"#efb388\" stroke=\"black\" d=\"M7937,-663C7937,-663 7845,-663 7845,-663 7839,-663 7833,-657 7833,-651 7833,-651 7833,-592 7833,-592 7833,-586 7839,-580 7845,-580 7845,-580 7937,-580 7937,-580 7943,-580 7949,-586 7949,-592 7949,-592 7949,-651 7949,-651 7949,-657 7943,-663 7937,-663\"/>\r\n<text text-anchor=\"start\" x=\"7844\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 75.5</text>\r\n<text text-anchor=\"start\" x=\"7841\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"7851.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"7846.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 4]</text>\r\n<text text-anchor=\"start\" x=\"7844\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 251&#45;&gt;253 -->\r\n<g id=\"edge253\" class=\"edge\"><title>251&#45;&gt;253</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7802.18,-698.907C7813.16,-689.469 7824.93,-679.343 7836.19,-669.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7838.6,-672.196 7843.9,-663.021 7834.04,-666.889 7838.6,-672.196\"/>\r\n</g>\r\n<!-- 254 -->\r\n<g id=\"node255\" class=\"node\"><title>254</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7795,-536.5C7795,-536.5 7709,-536.5 7709,-536.5 7703,-536.5 7697,-530.5 7697,-524.5 7697,-524.5 7697,-480.5 7697,-480.5 7697,-474.5 7703,-468.5 7709,-468.5 7709,-468.5 7795,-468.5 7795,-468.5 7801,-468.5 7807,-474.5 7807,-480.5 7807,-480.5 7807,-524.5 7807,-524.5 7807,-530.5 7801,-536.5 7795,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7710\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7712.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"7707.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 0]</text>\r\n<text text-anchor=\"start\" x=\"7705\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 253&#45;&gt;254 -->\r\n<g id=\"edge254\" class=\"edge\"><title>253&#45;&gt;254</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7842.77,-579.907C7828.62,-567.99 7813.15,-554.976 7799.07,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7801.31,-540.429 7791.4,-536.667 7796.8,-545.784 7801.31,-540.429\"/>\r\n</g>\r\n<!-- 255 -->\r\n<g id=\"node256\" class=\"node\"><title>255</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7939,-536.5C7939,-536.5 7837,-536.5 7837,-536.5 7831,-536.5 7825,-530.5 7825,-524.5 7825,-524.5 7825,-480.5 7825,-480.5 7825,-474.5 7831,-468.5 7837,-468.5 7837,-468.5 7939,-468.5 7939,-468.5 7945,-468.5 7951,-474.5 7951,-480.5 7951,-480.5 7951,-524.5 7951,-524.5 7951,-530.5 7945,-536.5 7939,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7846\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7848.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7847.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"7833\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 253&#45;&gt;255 -->\r\n<g id=\"edge255\" class=\"edge\"><title>253&#45;&gt;255</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7889.96,-579.907C7889.68,-569.204 7889.39,-557.615 7889.11,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7892.61,-546.574 7888.85,-536.667 7885.61,-546.753 7892.61,-546.574\"/>\r\n</g>\r\n<!-- 257 -->\r\n<g id=\"node258\" class=\"node\"><title>257</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M8175.5,-663C8175.5,-663 7988.5,-663 7988.5,-663 7982.5,-663 7976.5,-657 7976.5,-651 7976.5,-651 7976.5,-592 7976.5,-592 7976.5,-586 7982.5,-580 7988.5,-580 7988.5,-580 8175.5,-580 8175.5,-580 8181.5,-580 8187.5,-586 8187.5,-592 8187.5,-592 8187.5,-651 8187.5,-651 8187.5,-657 8181.5,-663 8175.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"7984.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.325</text>\r\n<text text-anchor=\"start\" x=\"8036\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"8042.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"8041.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"8027\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 256&#45;&gt;257 -->\r\n<g id=\"edge257\" class=\"edge\"><title>256&#45;&gt;257</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8082,-698.907C8082,-690.649 8082,-681.864 8082,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8085.5,-673.021 8082,-663.021 8078.5,-673.021 8085.5,-673.021\"/>\r\n</g>\r\n<!-- 260 -->\r\n<g id=\"node261\" class=\"node\"><title>260</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M8365,-663C8365,-663 8223,-663 8223,-663 8217,-663 8211,-657 8211,-651 8211,-651 8211,-592 8211,-592 8211,-586 8217,-580 8223,-580 8223,-580 8365,-580 8365,-580 8371,-580 8377,-586 8377,-592 8377,-592 8377,-651 8377,-651 8377,-657 8371,-663 8365,-663\"/>\r\n<text text-anchor=\"start\" x=\"8219\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 216.0</text>\r\n<text text-anchor=\"start\" x=\"8244\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.353</text>\r\n<text text-anchor=\"start\" x=\"8250.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"8249.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [28, 2]</text>\r\n<text text-anchor=\"start\" x=\"8247\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 256&#45;&gt;260 -->\r\n<g id=\"edge260\" class=\"edge\"><title>256&#45;&gt;260</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8140.21,-707.374C8162.17,-695.257 8187.58,-681.231 8211.35,-668.114\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8213.3,-671.033 8220.37,-663.137 8209.92,-664.904 8213.3,-671.033\"/>\r\n</g>\r\n<!-- 258 -->\r\n<g id=\"node259\" class=\"node\"><title>258</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8083,-536.5C8083,-536.5 7981,-536.5 7981,-536.5 7975,-536.5 7969,-530.5 7969,-524.5 7969,-524.5 7969,-480.5 7969,-480.5 7969,-474.5 7975,-468.5 7981,-468.5 7981,-468.5 8083,-468.5 8083,-468.5 8089,-468.5 8095,-474.5 8095,-480.5 8095,-480.5 8095,-524.5 8095,-524.5 8095,-530.5 8089,-536.5 8083,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7990\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7992.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"7991.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"7977\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 257&#45;&gt;258 -->\r\n<g id=\"edge258\" class=\"edge\"><title>257&#45;&gt;258</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8064.65,-579.907C8059.98,-568.983 8054.92,-557.137 8050.21,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8053.32,-544.487 8046.17,-536.667 8046.89,-547.238 8053.32,-544.487\"/>\r\n</g>\r\n<!-- 259 -->\r\n<g id=\"node260\" class=\"node\"><title>259</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8211,-536.5C8211,-536.5 8125,-536.5 8125,-536.5 8119,-536.5 8113,-530.5 8113,-524.5 8113,-524.5 8113,-480.5 8113,-480.5 8113,-474.5 8119,-468.5 8125,-468.5 8125,-468.5 8211,-468.5 8211,-468.5 8217,-468.5 8223,-474.5 8223,-480.5 8223,-480.5 8223,-524.5 8223,-524.5 8223,-530.5 8217,-536.5 8211,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"8126\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8128.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8127.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8121\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 257&#45;&gt;259 -->\r\n<g id=\"edge259\" class=\"edge\"><title>257&#45;&gt;259</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8111.84,-579.907C8120.19,-568.542 8129.28,-556.178 8137.66,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8140.52,-546.797 8143.62,-536.667 8134.88,-542.652 8140.52,-546.797\"/>\r\n</g>\r\n<!-- 261 -->\r\n<g id=\"node262\" class=\"node\"><title>261</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8339,-536.5C8339,-536.5 8253,-536.5 8253,-536.5 8247,-536.5 8241,-530.5 8241,-524.5 8241,-524.5 8241,-480.5 8241,-480.5 8241,-474.5 8247,-468.5 8253,-468.5 8253,-468.5 8339,-468.5 8339,-468.5 8345,-468.5 8351,-474.5 8351,-480.5 8351,-480.5 8351,-524.5 8351,-524.5 8351,-530.5 8345,-536.5 8339,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"8254\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8252.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"8251.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\r\n<text text-anchor=\"start\" x=\"8249\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 260&#45;&gt;261 -->\r\n<g id=\"edge261\" class=\"edge\"><title>260&#45;&gt;261</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8294.69,-579.907C8294.88,-569.204 8295.07,-557.615 8295.26,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8298.76,-546.725 8295.43,-536.667 8291.76,-546.606 8298.76,-546.725\"/>\r\n</g>\r\n<!-- 262 -->\r\n<g id=\"node263\" class=\"node\"><title>262</title>\r\n<path fill=\"#eca572\" stroke=\"black\" d=\"M8537,-544C8537,-544 8381,-544 8381,-544 8375,-544 8369,-538 8369,-532 8369,-532 8369,-473 8369,-473 8369,-467 8375,-461 8381,-461 8381,-461 8537,-461 8537,-461 8543,-461 8549,-467 8549,-473 8549,-473 8549,-532 8549,-532 8549,-538 8543,-544 8537,-544\"/>\r\n<text text-anchor=\"start\" x=\"8377\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_file_creations ≤ 10.5</text>\r\n<text text-anchor=\"start\" x=\"8409\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.764</text>\r\n<text text-anchor=\"start\" x=\"8419.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"8418.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 2]</text>\r\n<text text-anchor=\"start\" x=\"8412\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 260&#45;&gt;262 -->\r\n<g id=\"edge262\" class=\"edge\"><title>260&#45;&gt;262</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8351.25,-579.907C8364.94,-570.197 8379.66,-559.758 8393.69,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8395.72,-552.66 8401.86,-544.021 8391.67,-546.95 8395.72,-552.66\"/>\r\n</g>\r\n<!-- 263 -->\r\n<g id=\"node264\" class=\"node\"><title>263</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8434,-417.5C8434,-417.5 8348,-417.5 8348,-417.5 8342,-417.5 8336,-411.5 8336,-405.5 8336,-405.5 8336,-361.5 8336,-361.5 8336,-355.5 8342,-349.5 8348,-349.5 8348,-349.5 8434,-349.5 8434,-349.5 8440,-349.5 8446,-355.5 8446,-361.5 8446,-361.5 8446,-405.5 8446,-405.5 8446,-411.5 8440,-417.5 8434,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"8349\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8351.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"8350.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\r\n<text text-anchor=\"start\" x=\"8344\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 262&#45;&gt;263 -->\r\n<g id=\"edge263\" class=\"edge\"><title>262&#45;&gt;263</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8435.41,-460.907C8428.93,-449.763 8421.9,-437.658 8415.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8418.33,-424.554 8410.28,-417.667 8412.28,-428.072 8418.33,-424.554\"/>\r\n</g>\r\n<!-- 264 -->\r\n<g id=\"node265\" class=\"node\"><title>264</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8578,-417.5C8578,-417.5 8476,-417.5 8476,-417.5 8470,-417.5 8464,-411.5 8464,-405.5 8464,-405.5 8464,-361.5 8464,-361.5 8464,-355.5 8470,-349.5 8476,-349.5 8476,-349.5 8578,-349.5 8578,-349.5 8584,-349.5 8590,-355.5 8590,-361.5 8590,-361.5 8590,-405.5 8590,-405.5 8590,-411.5 8584,-417.5 8578,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"8485\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8487.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8486.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"8472\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 262&#45;&gt;264 -->\r\n<g id=\"edge264\" class=\"edge\"><title>262&#45;&gt;264</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8482.59,-460.907C8489.07,-449.763 8496.1,-437.658 8502.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8505.72,-428.072 8507.72,-417.667 8499.67,-424.554 8505.72,-428.072\"/>\r\n</g>\r\n<!-- 266 -->\r\n<g id=\"node267\" class=\"node\"><title>266</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7509,-1131.5C7509,-1131.5 7407,-1131.5 7407,-1131.5 7401,-1131.5 7395,-1125.5 7395,-1119.5 7395,-1119.5 7395,-1075.5 7395,-1075.5 7395,-1069.5 7401,-1063.5 7407,-1063.5 7407,-1063.5 7509,-1063.5 7509,-1063.5 7515,-1063.5 7521,-1069.5 7521,-1075.5 7521,-1075.5 7521,-1119.5 7521,-1119.5 7521,-1125.5 7515,-1131.5 7509,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7416\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7414.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 55</text>\r\n<text text-anchor=\"start\" x=\"7413.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 92]</text>\r\n<text text-anchor=\"start\" x=\"7403\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 265&#45;&gt;266 -->\r\n<g id=\"edge266\" class=\"edge\"><title>265&#45;&gt;266</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7458,-1174.91C7458,-1164.2 7458,-1152.62 7458,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7461.5,-1141.67 7458,-1131.67 7454.5,-1141.67 7461.5,-1141.67\"/>\r\n</g>\r\n<!-- 267 -->\r\n<g id=\"node268\" class=\"node\"><title>267</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7637,-1131.5C7637,-1131.5 7551,-1131.5 7551,-1131.5 7545,-1131.5 7539,-1125.5 7539,-1119.5 7539,-1119.5 7539,-1075.5 7539,-1075.5 7539,-1069.5 7545,-1063.5 7551,-1063.5 7551,-1063.5 7637,-1063.5 7637,-1063.5 7643,-1063.5 7649,-1069.5 7649,-1075.5 7649,-1075.5 7649,-1119.5 7649,-1119.5 7649,-1125.5 7643,-1131.5 7637,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7552\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7554.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"7549.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\r\n<text text-anchor=\"start\" x=\"7547\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 265&#45;&gt;267 -->\r\n<g id=\"edge267\" class=\"edge\"><title>265&#45;&gt;267</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7505.18,-1174.91C7518.91,-1163.1 7533.89,-1150.22 7547.56,-1138.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7550.15,-1140.84 7555.45,-1131.67 7545.58,-1135.54 7550.15,-1140.84\"/>\r\n</g>\r\n<!-- 269 -->\r\n<g id=\"node270\" class=\"node\"><title>269</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7688,-1250.5C7688,-1250.5 7590,-1250.5 7590,-1250.5 7584,-1250.5 7578,-1244.5 7578,-1238.5 7578,-1238.5 7578,-1194.5 7578,-1194.5 7578,-1188.5 7584,-1182.5 7590,-1182.5 7590,-1182.5 7688,-1182.5 7688,-1182.5 7694,-1182.5 7700,-1188.5 7700,-1194.5 7700,-1194.5 7700,-1238.5 7700,-1238.5 7700,-1244.5 7694,-1250.5 7688,-1250.5\"/>\r\n<text text-anchor=\"start\" x=\"7597\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7587.5\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1936</text>\r\n<text text-anchor=\"start\" x=\"7586\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3046, 0]</text>\r\n<text text-anchor=\"start\" x=\"7592\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 268&#45;&gt;269 -->\r\n<g id=\"edge269\" class=\"edge\"><title>268&#45;&gt;269</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7639,-1293.91C7639,-1283.2 7639,-1271.62 7639,-1260.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7642.5,-1260.67 7639,-1250.67 7635.5,-1260.67 7642.5,-1260.67\"/>\r\n</g>\r\n<!-- 270 -->\r\n<g id=\"node271\" class=\"node\"><title>270</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M7845.5,-1258C7845.5,-1258 7730.5,-1258 7730.5,-1258 7724.5,-1258 7718.5,-1252 7718.5,-1246 7718.5,-1246 7718.5,-1187 7718.5,-1187 7718.5,-1181 7724.5,-1175 7730.5,-1175 7730.5,-1175 7845.5,-1175 7845.5,-1175 7851.5,-1175 7857.5,-1181 7857.5,-1187 7857.5,-1187 7857.5,-1246 7857.5,-1246 7857.5,-1252 7851.5,-1258 7845.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7726.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 7254.0</text>\r\n<text text-anchor=\"start\" x=\"7738\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.116</text>\r\n<text text-anchor=\"start\" x=\"7736.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1971</text>\r\n<text text-anchor=\"start\" x=\"7731\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3146, 50]</text>\r\n<text text-anchor=\"start\" x=\"7741\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 268&#45;&gt;270 -->\r\n<g id=\"edge270\" class=\"edge\"><title>268&#45;&gt;270</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7690.69,-1293.91C7702.83,-1284.38 7715.86,-1274.15 7728.31,-1264.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7730.69,-1266.95 7736.4,-1258.02 7726.37,-1261.44 7730.69,-1266.95\"/>\r\n</g>\r\n<!-- 271 -->\r\n<g id=\"node272\" class=\"node\"><title>271</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7837,-1131.5C7837,-1131.5 7739,-1131.5 7739,-1131.5 7733,-1131.5 7727,-1125.5 7727,-1119.5 7727,-1119.5 7727,-1075.5 7727,-1075.5 7727,-1069.5 7733,-1063.5 7739,-1063.5 7739,-1063.5 7837,-1063.5 7837,-1063.5 7843,-1063.5 7849,-1069.5 7849,-1075.5 7849,-1075.5 7849,-1119.5 7849,-1119.5 7849,-1125.5 7843,-1131.5 7837,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7746\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7736.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1790</text>\r\n<text text-anchor=\"start\" x=\"7735\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2907, 0]</text>\r\n<text text-anchor=\"start\" x=\"7741\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 270&#45;&gt;271 -->\r\n<g id=\"edge271\" class=\"edge\"><title>270&#45;&gt;271</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7788,-1174.91C7788,-1164.2 7788,-1152.62 7788,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7791.5,-1141.67 7788,-1131.67 7784.5,-1141.67 7791.5,-1141.67\"/>\r\n</g>\r\n<!-- 272 -->\r\n<g id=\"node273\" class=\"node\"><title>272</title>\r\n<path fill=\"#ea9b62\" stroke=\"black\" d=\"M8002.5,-1139C8002.5,-1139 7879.5,-1139 7879.5,-1139 7873.5,-1139 7867.5,-1133 7867.5,-1127 7867.5,-1127 7867.5,-1068 7867.5,-1068 7867.5,-1062 7873.5,-1056 7879.5,-1056 7879.5,-1056 8002.5,-1056 8002.5,-1056 8008.5,-1056 8014.5,-1062 8014.5,-1068 8014.5,-1068 8014.5,-1127 8014.5,-1127 8014.5,-1133 8008.5,-1139 8002.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7875.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 21866.0</text>\r\n<text text-anchor=\"start\" x=\"7891\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.665</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 181</text>\r\n<text text-anchor=\"start\" x=\"7888\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [239, 50]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 270&#45;&gt;272 -->\r\n<g id=\"edge272\" class=\"edge\"><title>270&#45;&gt;272</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7841.08,-1174.91C7853.54,-1165.38 7866.92,-1155.15 7879.71,-1145.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7882.19,-1147.88 7888.01,-1139.02 7877.94,-1142.32 7882.19,-1147.88\"/>\r\n</g>\r\n<!-- 273 -->\r\n<g id=\"node274\" class=\"node\"><title>273</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M7987,-1020C7987,-1020 7895,-1020 7895,-1020 7889,-1020 7883,-1014 7883,-1008 7883,-1008 7883,-949 7883,-949 7883,-943 7889,-937 7895,-937 7895,-937 7987,-937 7987,-937 7993,-937 7999,-943 7999,-949 7999,-949 7999,-1008 7999,-1008 7999,-1014 7993,-1020 7987,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7913.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"7891\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.069</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 152</text>\r\n<text text-anchor=\"start\" x=\"7892.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [239, 2]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 272&#45;&gt;273 -->\r\n<g id=\"edge273\" class=\"edge\"><title>272&#45;&gt;273</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7941,-1055.91C7941,-1047.65 7941,-1038.86 7941,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7944.5,-1030.02 7941,-1020.02 7937.5,-1030.02 7944.5,-1030.02\"/>\r\n</g>\r\n<!-- 280 -->\r\n<g id=\"node281\" class=\"node\"><title>280</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8131,-1012.5C8131,-1012.5 8029,-1012.5 8029,-1012.5 8023,-1012.5 8017,-1006.5 8017,-1000.5 8017,-1000.5 8017,-956.5 8017,-956.5 8017,-950.5 8023,-944.5 8029,-944.5 8029,-944.5 8131,-944.5 8131,-944.5 8137,-944.5 8143,-950.5 8143,-956.5 8143,-956.5 8143,-1000.5 8143,-1000.5 8143,-1006.5 8137,-1012.5 8131,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"8038\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8036.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"8035.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 48]</text>\r\n<text text-anchor=\"start\" x=\"8025\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 272&#45;&gt;280 -->\r\n<g id=\"edge280\" class=\"edge\"><title>272&#45;&gt;280</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7989.23,-1055.91C8003.38,-1043.99 8018.85,-1030.98 8032.93,-1019.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8035.2,-1021.78 8040.6,-1012.67 8030.69,-1016.43 8035.2,-1021.78\"/>\r\n</g>\r\n<!-- 274 -->\r\n<g id=\"node275\" class=\"node\"><title>274</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7985.5,-893.5C7985.5,-893.5 7896.5,-893.5 7896.5,-893.5 7890.5,-893.5 7884.5,-887.5 7884.5,-881.5 7884.5,-881.5 7884.5,-837.5 7884.5,-837.5 7884.5,-831.5 7890.5,-825.5 7896.5,-825.5 7896.5,-825.5 7985.5,-825.5 7985.5,-825.5 7991.5,-825.5 7997.5,-831.5 7997.5,-837.5 7997.5,-837.5 7997.5,-881.5 7997.5,-881.5 7997.5,-887.5 7991.5,-893.5 7985.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7899\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 147</text>\r\n<text text-anchor=\"start\" x=\"7892.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [234, 0]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 273&#45;&gt;274 -->\r\n<g id=\"edge274\" class=\"edge\"><title>273&#45;&gt;274</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7941,-936.907C7941,-926.204 7941,-914.615 7941,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7944.5,-903.667 7941,-893.667 7937.5,-903.667 7944.5,-903.667\"/>\r\n</g>\r\n<!-- 275 -->\r\n<g id=\"node276\" class=\"node\"><title>275</title>\r\n<path fill=\"#efb388\" stroke=\"black\" d=\"M8496,-901C8496,-901 8404,-901 8404,-901 8398,-901 8392,-895 8392,-889 8392,-889 8392,-830 8392,-830 8392,-824 8398,-818 8404,-818 8404,-818 8496,-818 8496,-818 8502,-818 8508,-824 8508,-830 8508,-830 8508,-889 8508,-889 8508,-895 8502,-901 8496,-901\"/>\r\n<text text-anchor=\"start\" x=\"8401.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"8400\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 2]</text>\r\n<text text-anchor=\"start\" x=\"8403\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 273&#45;&gt;275 -->\r\n<g id=\"edge275\" class=\"edge\"><title>273&#45;&gt;275</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7999.2,-940.641C8002.13,-939.318 8005.07,-938.094 8008,-937 8134.66,-889.679 8292.83,-871.357 8381.5,-864.466\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8381.99,-867.939 8391.7,-863.7 8381.47,-860.959 8381.99,-867.939\"/>\r\n</g>\r\n<!-- 276 -->\r\n<g id=\"node277\" class=\"node\"><title>276</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M8515,-782C8515,-782 8385,-782 8385,-782 8379,-782 8373,-776 8373,-770 8373,-770 8373,-711 8373,-711 8373,-705 8379,-699 8385,-699 8385,-699 8515,-699 8515,-699 8521,-699 8527,-705 8527,-711 8527,-711 8527,-770 8527,-770 8527,-776 8521,-782 8515,-782\"/>\r\n<text text-anchor=\"start\" x=\"8381\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_rerror_rate ≤ 0.25</text>\r\n<text text-anchor=\"start\" x=\"8400\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"8395\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 275&#45;&gt;276 -->\r\n<g id=\"edge276\" class=\"edge\"><title>275&#45;&gt;276</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8450,-817.907C8450,-809.649 8450,-800.864 8450,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8453.5,-792.021 8450,-782.021 8446.5,-792.021 8453.5,-792.021\"/>\r\n</g>\r\n<!-- 279 -->\r\n<g id=\"node280\" class=\"node\"><title>279</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8643,-774.5C8643,-774.5 8557,-774.5 8557,-774.5 8551,-774.5 8545,-768.5 8545,-762.5 8545,-762.5 8545,-718.5 8545,-718.5 8545,-712.5 8551,-706.5 8557,-706.5 8557,-706.5 8643,-706.5 8643,-706.5 8649,-706.5 8655,-712.5 8655,-718.5 8655,-718.5 8655,-762.5 8655,-762.5 8655,-768.5 8649,-774.5 8643,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"8558\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8560.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"8559.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"8553\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 275&#45;&gt;279 -->\r\n<g id=\"edge279\" class=\"edge\"><title>275&#45;&gt;279</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8502.04,-817.907C8517.32,-805.99 8534.01,-792.976 8549.21,-781.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8551.75,-783.577 8557.48,-774.667 8547.44,-778.058 8551.75,-783.577\"/>\r\n</g>\r\n<!-- 277 -->\r\n<g id=\"node278\" class=\"node\"><title>277</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8493,-655.5C8493,-655.5 8407,-655.5 8407,-655.5 8401,-655.5 8395,-649.5 8395,-643.5 8395,-643.5 8395,-599.5 8395,-599.5 8395,-593.5 8401,-587.5 8407,-587.5 8407,-587.5 8493,-587.5 8493,-587.5 8499,-587.5 8505,-593.5 8505,-599.5 8505,-599.5 8505,-643.5 8505,-643.5 8505,-649.5 8499,-655.5 8493,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"8408\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8403\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 276&#45;&gt;277 -->\r\n<g id=\"edge277\" class=\"edge\"><title>276&#45;&gt;277</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8450,-698.907C8450,-688.204 8450,-676.615 8450,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8453.5,-665.667 8450,-655.667 8446.5,-665.667 8453.5,-665.667\"/>\r\n</g>\r\n<!-- 278 -->\r\n<g id=\"node279\" class=\"node\"><title>278</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8637,-655.5C8637,-655.5 8535,-655.5 8535,-655.5 8529,-655.5 8523,-649.5 8523,-643.5 8523,-643.5 8523,-599.5 8523,-599.5 8523,-593.5 8529,-587.5 8535,-587.5 8535,-587.5 8637,-587.5 8637,-587.5 8643,-587.5 8649,-593.5 8649,-599.5 8649,-599.5 8649,-643.5 8649,-643.5 8649,-649.5 8643,-655.5 8637,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"8544\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8546.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8545.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"8531\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 276&#45;&gt;278 -->\r\n<g id=\"edge278\" class=\"edge\"><title>276&#45;&gt;278</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8497.18,-698.907C8510.91,-687.101 8525.89,-674.217 8539.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8542.15,-664.842 8547.45,-655.667 8537.58,-659.535 8542.15,-664.842\"/>\r\n</g>\r\n</g>\r\n</svg>\r\n",
       "text/plain": [
-       "(0.9974059662775616, 0.9754756871035941, 0.9863189397178281, None)"
+       "<graphviz.files.Source at 0x1c904853188>"
       ]
      },
-     "execution_count": 14,
+     "execution_count": 9,
      "metadata": {},
      "output_type": "execute_result"
     }
    ],
    "source": [
-    "from sklearn.metrics import precision_recall_fscore_support\n",
-    "\n",
-    "clf_y_pred = clf.predict(X_test)\n",
+    "from IPython import display\n",
+    "from sklearn import tree\n",
+    "import graphviz\n",
+    "import os\n",
     "\n",
-    "precision_recall_fscore_support(y_test, clf_y_pred, average=\"binary\")"
+    "os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
+    "# 시각화\n",
+    "dot_data = tree.export_graphviz(clf.estimators_[5],\n",
+    "                               out_file = None,\n",
+    "                               feature_names = X_train.columns,\n",
+    "                               class_names = [\"Normal\", \"Abnormal\"],\n",
+    "                               filled = True,\n",
+    "                               rounded = True,\n",
+    "                               special_characters = True)\n",
+    "graph = graphviz.Source(dot_data)\n",
+    "graph.render('./output/random forest', format='jpg')\n",
+    "graph"
    ]
   },
   {
    "cell_type": "code",
-   "execution_count": 15,
+   "execution_count": 10,
    "metadata": {},
    "outputs": [
     {
      "data": {
       "text/plain": [
-       "0.9872990672752531"
+       "<sklearn.metrics._plot.roc_curve.RocCurveDisplay at 0x1c9043427c8>"
       ]
      },
-     "execution_count": 15,
+     "execution_count": 10,
      "metadata": {},
      "output_type": "execute_result"
+    },
+    {
+     "data": {
+      "image/png": "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",
+      "text/plain": [
+       "<Figure size 432x288 with 1 Axes>"
+      ]
+     },
+     "metadata": {
+      "needs_background": "light"
+     },
+     "output_type": "display_data"
     }
    ],
    "source": [
-    "from sklearn.metrics import accuracy_score\n",
-    "\n",
-    "accuracy_score(y_test ,clf_y_pred)"
+    "from sklearn.metrics import plot_roc_curve\n",
+    "plot_roc_curve(clf, X_test, y_test)"
    ]
   },
   {
@@ -279,7 +377,7 @@
    "name": "python",
    "nbconvert_exporter": "python",
    "pygments_lexer": "ipython3",
-   "version": "3.8.5"
+   "version": "3.7.6"
   },
   "orig_nbformat": 4
  },
diff --git a/experiment/random forest/output.svg b/experiment/random forest/output.svg
deleted file mode 100644
index 734a051086ffa7dd7f52784148146681ef6a9299..0000000000000000000000000000000000000000
--- a/experiment/random forest/output.svg	
+++ /dev/null
@@ -1,806 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?>
-<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN"
- "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">
-<!-- Generated by graphviz version 2.38.0 (20140413.2041)
- -->
-<!-- Title: Tree Pages: 1 -->
-<svg width="3640pt" height="671pt"
- viewBox="0.00 0.00 3640.00 671.00" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
-<g id="graph0" class="graph" transform="scale(1 1) rotate(0) translate(4 667)">
-<title>Tree</title>
-<polygon fill="white" stroke="none" points="-4,4 -4,-667 3636,-667 3636,4 -4,4"/>
-<!-- 0 -->
-<g id="node1" class="node"><title>0</title>
-<path fill="#fbeee4" stroke="black" d="M1784,-663C1784,-663 1653,-663 1653,-663 1647,-663 1641,-657 1641,-651 1641,-651 1641,-592 1641,-592 1641,-586 1647,-580 1653,-580 1653,-580 1784,-580 1784,-580 1790,-580 1796,-586 1796,-592 1796,-592 1796,-651 1796,-651 1796,-657 1790,-663 1784,-663"/>
-<text text-anchor="start" x="1665.5" y="-647.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 28.5</text>
-<text text-anchor="start" x="1681" y="-632.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.497</text>
-<text text-anchor="start" x="1662.5" y="-617.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 12824</text>
-<text text-anchor="start" x="1649" y="-602.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10818, 9335]</text>
-<text text-anchor="start" x="1689.5" y="-587.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 1 -->
-<g id="node2" class="node"><title>1</title>
-<path fill="#4ba6e7" stroke="black" d="M1409.5,-544C1409.5,-544 1267.5,-544 1267.5,-544 1261.5,-544 1255.5,-538 1255.5,-532 1255.5,-532 1255.5,-473 1255.5,-473 1255.5,-467 1261.5,-461 1267.5,-461 1267.5,-461 1409.5,-461 1409.5,-461 1415.5,-461 1421.5,-467 1421.5,-473 1421.5,-473 1421.5,-532 1421.5,-532 1421.5,-538 1415.5,-544 1409.5,-544"/>
-<text text-anchor="start" x="1263.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_count ≤ 240.5</text>
-<text text-anchor="start" x="1301" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.153</text>
-<text text-anchor="start" x="1287" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5953</text>
-<text text-anchor="start" x="1277.5" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [775, 8512]</text>
-<text text-anchor="start" x="1309.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 0&#45;&gt;1 -->
-<g id="edge1" class="edge"><title>0&#45;&gt;1</title>
-<path fill="none" stroke="black" d="M1640.68,-596.541C1580.07,-577.877 1495.71,-551.905 1431.53,-532.143"/>
-<polygon fill="black" stroke="black" points="1432.4,-528.749 1421.81,-529.151 1430.34,-535.439 1432.4,-528.749"/>
-<text text-anchor="middle" x="1433.5" y="-547.548" font-family="Helvetica,sans-Serif" font-size="14.00">True</text>
-</g>
-<!-- 28 -->
-<g id="node29" class="node"><title>28</title>
-<path fill="#e78b49" stroke="black" d="M2160.5,-544C2160.5,-544 2038.5,-544 2038.5,-544 2032.5,-544 2026.5,-538 2026.5,-532 2026.5,-532 2026.5,-473 2026.5,-473 2026.5,-467 2032.5,-461 2038.5,-461 2038.5,-461 2160.5,-461 2160.5,-461 2166.5,-461 2172.5,-467 2172.5,-473 2172.5,-473 2172.5,-532 2172.5,-532 2172.5,-538 2166.5,-544 2160.5,-544"/>
-<text text-anchor="start" x="2050.5" y="-528.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_bytes ≤ 0.5</text>
-<text text-anchor="start" x="2066" y="-513.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.14</text>
-<text text-anchor="start" x="2048" y="-498.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 6871</text>
-<text text-anchor="start" x="2034.5" y="-483.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [10043, 823]</text>
-<text text-anchor="start" x="2070.5" y="-468.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 0&#45;&gt;28 -->
-<g id="edge28" class="edge"><title>0&#45;&gt;28</title>
-<path fill="none" stroke="black" d="M1796.06,-596.682C1860.11,-577.013 1950.82,-549.157 2016.36,-529.03"/>
-<polygon fill="black" stroke="black" points="2017.72,-532.276 2026.25,-525.994 2015.66,-525.584 2017.72,-532.276"/>
-<text text-anchor="middle" x="2014.54" y="-544.382" font-family="Helvetica,sans-Serif" font-size="14.00">False</text>
-</g>
-<!-- 2 -->
-<g id="node3" class="node"><title>2</title>
-<path fill="#a8d4f4" stroke="black" d="M844.5,-425C844.5,-425 730.5,-425 730.5,-425 724.5,-425 718.5,-419 718.5,-413 718.5,-413 718.5,-354 718.5,-354 718.5,-348 724.5,-342 730.5,-342 730.5,-342 844.5,-342 844.5,-342 850.5,-342 856.5,-348 856.5,-354 856.5,-354 856.5,-413 856.5,-413 856.5,-419 850.5,-425 844.5,-425"/>
-<text text-anchor="start" x="742.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">service ≤ 16.5</text>
-<text text-anchor="start" x="754" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.46</text>
-<text text-anchor="start" x="736" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1258</text>
-<text text-anchor="start" x="726.5" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [707, 1261]</text>
-<text text-anchor="start" x="758.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 1&#45;&gt;2 -->
-<g id="edge2" class="edge"><title>1&#45;&gt;2</title>
-<path fill="none" stroke="black" d="M1255.41,-483.857C1150.23,-461.524 970.325,-423.321 866.919,-401.364"/>
-<polygon fill="black" stroke="black" points="867.358,-397.879 856.849,-399.226 865.904,-404.727 867.358,-397.879"/>
-</g>
-<!-- 17 -->
-<g id="node18" class="node"><title>17</title>
-<path fill="#3b9ee5" stroke="black" d="M1391.5,-425C1391.5,-425 1285.5,-425 1285.5,-425 1279.5,-425 1273.5,-419 1273.5,-413 1273.5,-413 1273.5,-354 1273.5,-354 1273.5,-348 1279.5,-342 1285.5,-342 1285.5,-342 1391.5,-342 1391.5,-342 1397.5,-342 1403.5,-348 1403.5,-354 1403.5,-354 1403.5,-413 1403.5,-413 1403.5,-419 1397.5,-425 1391.5,-425"/>
-<text text-anchor="start" x="1289.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 6.5</text>
-<text text-anchor="start" x="1301" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.018</text>
-<text text-anchor="start" x="1287" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4695</text>
-<text text-anchor="start" x="1281.5" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [68, 7251]</text>
-<text text-anchor="start" x="1309.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 1&#45;&gt;17 -->
-<g id="edge17" class="edge"><title>1&#45;&gt;17</title>
-<path fill="none" stroke="black" d="M1338.5,-460.907C1338.5,-452.649 1338.5,-443.864 1338.5,-435.302"/>
-<polygon fill="black" stroke="black" points="1342,-435.021 1338.5,-425.021 1335,-435.021 1342,-435.021"/>
-</g>
-<!-- 3 -->
-<g id="node4" class="node"><title>3</title>
-<path fill="#45a3e7" stroke="black" d="M456.5,-306C456.5,-306 350.5,-306 350.5,-306 344.5,-306 338.5,-300 338.5,-294 338.5,-294 338.5,-235 338.5,-235 338.5,-229 344.5,-223 350.5,-223 350.5,-223 456.5,-223 456.5,-223 462.5,-223 468.5,-229 468.5,-235 468.5,-235 468.5,-294 468.5,-294 468.5,-300 462.5,-306 456.5,-306"/>
-<text text-anchor="start" x="355" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 2.5</text>
-<text text-anchor="start" x="366" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.111</text>
-<text text-anchor="start" x="356" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 744</text>
-<text text-anchor="start" x="346.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [69, 1103]</text>
-<text text-anchor="start" x="374.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 2&#45;&gt;3 -->
-<g id="edge3" class="edge"><title>2&#45;&gt;3</title>
-<path fill="none" stroke="black" d="M718.405,-361.448C650.659,-340.806 547.693,-309.434 478.11,-288.233"/>
-<polygon fill="black" stroke="black" points="479.106,-284.877 468.52,-285.311 477.066,-291.574 479.106,-284.877"/>
-</g>
-<!-- 10 -->
-<g id="node11" class="node"><title>10</title>
-<path fill="#eba06a" stroke="black" d="M888.5,-306C888.5,-306 686.5,-306 686.5,-306 680.5,-306 674.5,-300 674.5,-294 674.5,-294 674.5,-235 674.5,-235 674.5,-229 680.5,-223 686.5,-223 686.5,-223 888.5,-223 888.5,-223 894.5,-223 900.5,-229 900.5,-235 900.5,-235 900.5,-294 900.5,-294 900.5,-300 894.5,-306 888.5,-306"/>
-<text text-anchor="start" x="682.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.645</text>
-<text text-anchor="start" x="750" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.318</text>
-<text text-anchor="start" x="740" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 514</text>
-<text text-anchor="start" x="730.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [638, 158]</text>
-<text text-anchor="start" x="758.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 2&#45;&gt;10 -->
-<g id="edge10" class="edge"><title>2&#45;&gt;10</title>
-<path fill="none" stroke="black" d="M787.5,-341.907C787.5,-333.649 787.5,-324.864 787.5,-316.302"/>
-<polygon fill="black" stroke="black" points="791,-316.021 787.5,-306.021 784,-316.021 791,-316.021"/>
-</g>
-<!-- 4 -->
-<g id="node5" class="node"><title>4</title>
-<path fill="#66b3eb" stroke="black" d="M268.5,-187C268.5,-187 116.5,-187 116.5,-187 110.5,-187 104.5,-181 104.5,-175 104.5,-175 104.5,-116 104.5,-116 104.5,-110 110.5,-104 116.5,-104 116.5,-104 268.5,-104 268.5,-104 274.5,-104 280.5,-110 280.5,-116 280.5,-116 280.5,-175 280.5,-175 280.5,-181 274.5,-187 268.5,-187"/>
-<text text-anchor="start" x="112.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 3.5</text>
-<text text-anchor="start" x="155" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.302</text>
-<text text-anchor="start" x="145" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 235</text>
-<text text-anchor="start" x="139.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [66, 290]</text>
-<text text-anchor="start" x="163.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 3&#45;&gt;4 -->
-<g id="edge4" class="edge"><title>3&#45;&gt;4</title>
-<path fill="none" stroke="black" d="M338.471,-227.441C318.341,-216.279 295.893,-203.831 274.755,-192.11"/>
-<polygon fill="black" stroke="black" points="276.229,-188.926 265.786,-187.137 272.834,-195.048 276.229,-188.926"/>
-</g>
-<!-- 7 -->
-<g id="node8" class="node"><title>7</title>
-<path fill="#3a9de5" stroke="black" d="M448,-187C448,-187 359,-187 359,-187 353,-187 347,-181 347,-175 347,-175 347,-116 347,-116 347,-110 353,-104 359,-104 359,-104 448,-104 448,-104 454,-104 460,-110 460,-116 460,-116 460,-175 460,-175 460,-181 454,-187 448,-187"/>
-<text text-anchor="start" x="355" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 3.5</text>
-<text text-anchor="start" x="366" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.007</text>
-<text text-anchor="start" x="356" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 509</text>
-<text text-anchor="start" x="355" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 813]</text>
-<text text-anchor="start" x="374.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 3&#45;&gt;7 -->
-<g id="edge7" class="edge"><title>3&#45;&gt;7</title>
-<path fill="none" stroke="black" d="M403.5,-222.907C403.5,-214.649 403.5,-205.864 403.5,-197.302"/>
-<polygon fill="black" stroke="black" points="407,-197.021 403.5,-187.021 400,-197.021 407,-197.021"/>
-</g>
-<!-- 5 -->
-<g id="node6" class="node"><title>5</title>
-<path fill="#399de5" stroke="black" d="M101,-68C101,-68 12,-68 12,-68 6,-68 0,-62 0,-56 0,-56 0,-12 0,-12 0,-6 6,-0 12,-0 12,-0 101,-0 101,-0 107,-0 113,-6 113,-12 113,-12 113,-56 113,-56 113,-62 107,-68 101,-68"/>
-<text text-anchor="start" x="27.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="9" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 115</text>
-<text text-anchor="start" x="8" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 163]</text>
-<text text-anchor="start" x="27.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 4&#45;&gt;5 -->
-<g id="edge5" class="edge"><title>4&#45;&gt;5</title>
-<path fill="none" stroke="black" d="M141.859,-103.726C130.077,-94.2406 117.551,-84.1551 105.827,-74.7159"/>
-<polygon fill="black" stroke="black" points="107.843,-71.8448 97.8584,-68.2996 103.453,-77.2972 107.843,-71.8448"/>
-</g>
-<!-- 6 -->
-<g id="node7" class="node"><title>6</title>
-<path fill="#a0d0f3" stroke="black" d="M241.5,-68C241.5,-68 143.5,-68 143.5,-68 137.5,-68 131.5,-62 131.5,-56 131.5,-56 131.5,-12 131.5,-12 131.5,-6 137.5,-0 143.5,-0 143.5,-0 241.5,-0 241.5,-0 247.5,-0 253.5,-6 253.5,-12 253.5,-12 253.5,-56 253.5,-56 253.5,-62 247.5,-68 241.5,-68"/>
-<text text-anchor="start" x="159" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.45</text>
-<text text-anchor="start" x="145" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 120</text>
-<text text-anchor="start" x="139.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [66, 127]</text>
-<text text-anchor="start" x="163.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 4&#45;&gt;6 -->
-<g id="edge6" class="edge"><title>4&#45;&gt;6</title>
-<path fill="none" stroke="black" d="M192.5,-103.726C192.5,-95.5175 192.5,-86.8595 192.5,-78.56"/>
-<polygon fill="black" stroke="black" points="196,-78.2996 192.5,-68.2996 189,-78.2996 196,-78.2996"/>
-</g>
-<!-- 8 -->
-<g id="node9" class="node"><title>8</title>
-<path fill="#46a4e7" stroke="black" d="M365,-68C365,-68 284,-68 284,-68 278,-68 272,-62 272,-56 272,-56 272,-12 272,-12 272,-6 278,-0 284,-0 284,-0 365,-0 365,-0 371,-0 377,-6 377,-12 377,-12 377,-56 377,-56 377,-62 371,-68 365,-68"/>
-<text text-anchor="start" x="287" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.117</text>
-<text text-anchor="start" x="281" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 17</text>
-<text text-anchor="start" x="280" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 30]</text>
-<text text-anchor="start" x="295.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 7&#45;&gt;8 -->
-<g id="edge8" class="edge"><title>7&#45;&gt;8</title>
-<path fill="none" stroke="black" d="M374.083,-103.726C367.7,-94.879 360.941,-85.51 354.535,-76.6303"/>
-<polygon fill="black" stroke="black" points="357.214,-74.3615 348.524,-68.2996 351.537,-78.4571 357.214,-74.3615"/>
-</g>
-<!-- 9 -->
-<g id="node10" class="node"><title>9</title>
-<path fill="#399de5" stroke="black" d="M496,-68C496,-68 407,-68 407,-68 401,-68 395,-62 395,-56 395,-56 395,-12 395,-12 395,-6 401,-0 407,-0 407,-0 496,-0 496,-0 502,-0 508,-6 508,-12 508,-12 508,-56 508,-56 508,-62 502,-68 496,-68"/>
-<text text-anchor="start" x="414" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.003</text>
-<text text-anchor="start" x="404" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 492</text>
-<text text-anchor="start" x="403" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1, 783]</text>
-<text text-anchor="start" x="422.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 7&#45;&gt;9 -->
-<g id="edge9" class="edge"><title>7&#45;&gt;9</title>
-<path fill="none" stroke="black" d="M421.373,-103.726C425.092,-95.2439 429.02,-86.2819 432.769,-77.7312"/>
-<polygon fill="black" stroke="black" points="436.094,-78.8635 436.903,-68.2996 429.683,-76.0531 436.094,-78.8635"/>
-</g>
-<!-- 11 -->
-<g id="node12" class="node"><title>11</title>
-<path fill="#f3f9fd" stroke="black" d="M752.5,-187C752.5,-187 646.5,-187 646.5,-187 640.5,-187 634.5,-181 634.5,-175 634.5,-175 634.5,-116 634.5,-116 634.5,-110 640.5,-104 646.5,-104 646.5,-104 752.5,-104 752.5,-104 758.5,-104 764.5,-110 764.5,-116 764.5,-116 764.5,-175 764.5,-175 764.5,-181 758.5,-187 752.5,-187"/>
-<text text-anchor="start" x="664.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ 2.5</text>
-<text text-anchor="start" x="662" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.499</text>
-<text text-anchor="start" x="652" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 180</text>
-<text text-anchor="start" x="642.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [135, 144]</text>
-<text text-anchor="start" x="670.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 10&#45;&gt;11 -->
-<g id="edge11" class="edge"><title>10&#45;&gt;11</title>
-<path fill="none" stroke="black" d="M756.969,-222.907C750.211,-213.923 742.985,-204.315 736.016,-195.05"/>
-<polygon fill="black" stroke="black" points="738.785,-192.909 729.977,-187.021 733.191,-197.116 738.785,-192.909"/>
-</g>
-<!-- 14 -->
-<g id="node15" class="node"><title>14</title>
-<path fill="#e6853f" stroke="black" d="M956,-187C956,-187 795,-187 795,-187 789,-187 783,-181 783,-175 783,-175 783,-116 783,-116 783,-110 789,-104 795,-104 795,-104 956,-104 956,-104 962,-104 968,-110 968,-116 968,-116 968,-175 968,-175 968,-181 962,-187 956,-187"/>
-<text text-anchor="start" x="791" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 10.5</text>
-<text text-anchor="start" x="838" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.053</text>
-<text text-anchor="start" x="828" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 334</text>
-<text text-anchor="start" x="822.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [503, 14]</text>
-<text text-anchor="start" x="846.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 10&#45;&gt;14 -->
-<g id="edge14" class="edge"><title>10&#45;&gt;14</title>
-<path fill="none" stroke="black" d="M818.031,-222.907C824.789,-213.923 832.015,-204.315 838.984,-195.05"/>
-<polygon fill="black" stroke="black" points="841.809,-197.116 845.023,-187.021 836.215,-192.909 841.809,-197.116"/>
-</g>
-<!-- 12 -->
-<g id="node13" class="node"><title>12</title>
-<path fill="#eca16b" stroke="black" d="M636.5,-68C636.5,-68 538.5,-68 538.5,-68 532.5,-68 526.5,-62 526.5,-56 526.5,-56 526.5,-12 526.5,-12 526.5,-6 532.5,-0 538.5,-0 538.5,-0 636.5,-0 636.5,-0 642.5,-0 648.5,-6 648.5,-12 648.5,-12 648.5,-56 648.5,-56 648.5,-62 642.5,-68 636.5,-68"/>
-<text text-anchor="start" x="550" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.323</text>
-<text text-anchor="start" x="540" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 108</text>
-<text text-anchor="start" x="534.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [130, 33]</text>
-<text text-anchor="start" x="558.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 11&#45;&gt;12 -->
-<g id="edge12" class="edge"><title>11&#45;&gt;12</title>
-<path fill="none" stroke="black" d="M657.795,-103.726C648.373,-94.5142 638.372,-84.7364 628.96,-75.5343"/>
-<polygon fill="black" stroke="black" points="631.157,-72.7878 621.56,-68.2996 626.264,-77.7931 631.157,-72.7878"/>
-</g>
-<!-- 13 -->
-<g id="node14" class="node"><title>13</title>
-<path fill="#42a1e6" stroke="black" d="M768,-68C768,-68 679,-68 679,-68 673,-68 667,-62 667,-56 667,-56 667,-12 667,-12 667,-6 673,-0 679,-0 679,-0 768,-0 768,-0 774,-0 780,-6 780,-12 780,-12 780,-56 780,-56 780,-62 774,-68 768,-68"/>
-<text text-anchor="start" x="686" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.082</text>
-<text text-anchor="start" x="680" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 72</text>
-<text text-anchor="start" x="675" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 111]</text>
-<text text-anchor="start" x="694.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 11&#45;&gt;13 -->
-<g id="edge13" class="edge"><title>11&#45;&gt;13</title>
-<path fill="none" stroke="black" d="M708.437,-103.726C710.256,-95.4263 712.176,-86.6671 714.013,-78.2834"/>
-<polygon fill="black" stroke="black" points="717.479,-78.8171 716.201,-68.2996 710.642,-77.3184 717.479,-78.8171"/>
-</g>
-<!-- 15 -->
-<g id="node16" class="node"><title>15</title>
-<path fill="#aad5f4" stroke="black" d="M891,-68C891,-68 810,-68 810,-68 804,-68 798,-62 798,-56 798,-56 798,-12 798,-12 798,-6 804,-0 810,-0 810,-0 891,-0 891,-0 897,-0 903,-6 903,-12 903,-12 903,-56 903,-56 903,-62 897,-68 891,-68"/>
-<text text-anchor="start" x="813" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.463</text>
-<text text-anchor="start" x="807" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 16</text>
-<text text-anchor="start" x="806" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8, 14]</text>
-<text text-anchor="start" x="821.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 14&#45;&gt;15 -->
-<g id="edge15" class="edge"><title>14&#45;&gt;15</title>
-<path fill="none" stroke="black" d="M866.191,-103.726C864.296,-95.4263 862.296,-86.6671 860.382,-78.2834"/>
-<polygon fill="black" stroke="black" points="863.741,-77.2697 858.103,-68.2996 856.916,-78.8278 863.741,-77.2697"/>
-</g>
-<!-- 16 -->
-<g id="node17" class="node"><title>16</title>
-<path fill="#e58139" stroke="black" d="M1022,-68C1022,-68 933,-68 933,-68 927,-68 921,-62 921,-56 921,-56 921,-12 921,-12 921,-6 927,-0 933,-0 933,-0 1022,-0 1022,-0 1028,-0 1034,-6 1034,-12 1034,-12 1034,-56 1034,-56 1034,-62 1028,-68 1022,-68"/>
-<text text-anchor="start" x="948.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="930" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 318</text>
-<text text-anchor="start" x="929" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [495, 0]</text>
-<text text-anchor="start" x="948.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 14&#45;&gt;16 -->
-<g id="edge16" class="edge"><title>14&#45;&gt;16</title>
-<path fill="none" stroke="black" d="M913.481,-103.726C921.977,-94.6054 930.99,-84.93 939.487,-75.8078"/>
-<polygon fill="black" stroke="black" points="942.226,-78.0025 946.481,-68.2996 937.104,-73.2312 942.226,-78.0025"/>
-</g>
-<!-- 18 -->
-<g id="node19" class="node"><title>18</title>
-<path fill="#3a9de5" stroke="black" d="M1335,-306C1335,-306 1166,-306 1166,-306 1160,-306 1154,-300 1154,-294 1154,-294 1154,-235 1154,-235 1154,-229 1160,-223 1166,-223 1166,-223 1335,-223 1335,-223 1341,-223 1347,-229 1347,-235 1347,-235 1347,-294 1347,-294 1347,-300 1341,-306 1335,-306"/>
-<text text-anchor="start" x="1162" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 228.5</text>
-<text text-anchor="start" x="1213" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.006</text>
-<text text-anchor="start" x="1199" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4580</text>
-<text text-anchor="start" x="1193.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [23, 7114]</text>
-<text text-anchor="start" x="1221.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 17&#45;&gt;18 -->
-<g id="edge18" class="edge"><title>17&#45;&gt;18</title>
-<path fill="none" stroke="black" d="M1307.97,-341.907C1301.21,-332.923 1293.98,-323.315 1287.02,-314.05"/>
-<polygon fill="black" stroke="black" points="1289.79,-311.909 1280.98,-306.021 1284.19,-316.116 1289.79,-311.909"/>
-</g>
-<!-- 23 -->
-<g id="node24" class="node"><title>23</title>
-<path fill="#7abdee" stroke="black" d="M1475.5,-306C1475.5,-306 1377.5,-306 1377.5,-306 1371.5,-306 1365.5,-300 1365.5,-294 1365.5,-294 1365.5,-235 1365.5,-235 1365.5,-229 1371.5,-223 1377.5,-223 1377.5,-223 1475.5,-223 1475.5,-223 1481.5,-223 1487.5,-229 1487.5,-235 1487.5,-235 1487.5,-294 1487.5,-294 1487.5,-300 1481.5,-306 1475.5,-306"/>
-<text text-anchor="start" x="1373.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 27.0</text>
-<text text-anchor="start" x="1389" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.372</text>
-<text text-anchor="start" x="1379" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 115</text>
-<text text-anchor="start" x="1373.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [45, 137]</text>
-<text text-anchor="start" x="1397.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 17&#45;&gt;23 -->
-<g id="edge23" class="edge"><title>17&#45;&gt;23</title>
-<path fill="none" stroke="black" d="M1369.03,-341.907C1375.79,-332.923 1383.02,-323.315 1389.98,-314.05"/>
-<polygon fill="black" stroke="black" points="1392.81,-316.116 1396.02,-306.021 1387.21,-311.909 1392.81,-316.116"/>
-</g>
-<!-- 19 -->
-<g id="node20" class="node"><title>19</title>
-<path fill="#399de5" stroke="black" d="M1173.5,-187C1173.5,-187 1075.5,-187 1075.5,-187 1069.5,-187 1063.5,-181 1063.5,-175 1063.5,-175 1063.5,-116 1063.5,-116 1063.5,-110 1069.5,-104 1075.5,-104 1075.5,-104 1173.5,-104 1173.5,-104 1179.5,-104 1185.5,-110 1185.5,-116 1185.5,-116 1185.5,-175 1185.5,-175 1185.5,-181 1179.5,-187 1173.5,-187"/>
-<text text-anchor="start" x="1076" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_count ≤ 3.5</text>
-<text text-anchor="start" x="1087" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.003</text>
-<text text-anchor="start" x="1073" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 4572</text>
-<text text-anchor="start" x="1071.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 7114]</text>
-<text text-anchor="start" x="1095.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 18&#45;&gt;19 -->
-<g id="edge19" class="edge"><title>18&#45;&gt;19</title>
-<path fill="none" stroke="black" d="M1206.78,-222.907C1196.72,-213.56 1185.93,-203.538 1175.58,-193.929"/>
-<polygon fill="black" stroke="black" points="1177.85,-191.261 1168.14,-187.021 1173.08,-196.39 1177.85,-191.261"/>
-</g>
-<!-- 22 -->
-<g id="node23" class="node"><title>22</title>
-<path fill="#e58139" stroke="black" d="M1297,-179.5C1297,-179.5 1216,-179.5 1216,-179.5 1210,-179.5 1204,-173.5 1204,-167.5 1204,-167.5 1204,-123.5 1204,-123.5 1204,-117.5 1210,-111.5 1216,-111.5 1216,-111.5 1297,-111.5 1297,-111.5 1303,-111.5 1309,-117.5 1309,-123.5 1309,-123.5 1309,-167.5 1309,-167.5 1309,-173.5 1303,-179.5 1297,-179.5"/>
-<text text-anchor="start" x="1227.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1217" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
-<text text-anchor="start" x="1212" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [14, 0]</text>
-<text text-anchor="start" x="1227.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 18&#45;&gt;22 -->
-<g id="edge22" class="edge"><title>18&#45;&gt;22</title>
-<path fill="none" stroke="black" d="M1252.58,-222.907C1253.13,-212.204 1253.72,-200.615 1254.28,-189.776"/>
-<polygon fill="black" stroke="black" points="1257.78,-189.833 1254.8,-179.667 1250.79,-189.475 1257.78,-189.833"/>
-</g>
-<!-- 20 -->
-<g id="node21" class="node"><title>20</title>
-<path fill="#3a9de5" stroke="black" d="M1162.5,-68C1162.5,-68 1064.5,-68 1064.5,-68 1058.5,-68 1052.5,-62 1052.5,-56 1052.5,-56 1052.5,-12 1052.5,-12 1052.5,-6 1058.5,-0 1064.5,-0 1064.5,-0 1162.5,-0 1162.5,-0 1168.5,-0 1174.5,-6 1174.5,-12 1174.5,-12 1174.5,-56 1174.5,-56 1174.5,-62 1168.5,-68 1162.5,-68"/>
-<text text-anchor="start" x="1080" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.01</text>
-<text text-anchor="start" x="1062" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1179</text>
-<text text-anchor="start" x="1060.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [9, 1801]</text>
-<text text-anchor="start" x="1084.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 19&#45;&gt;20 -->
-<g id="edge20" class="edge"><title>19&#45;&gt;20</title>
-<path fill="none" stroke="black" d="M1120.4,-103.726C1119.57,-95.4263 1118.69,-86.6671 1117.85,-78.2834"/>
-<polygon fill="black" stroke="black" points="1121.33,-77.8997 1116.85,-68.2996 1114.36,-78.5994 1121.33,-77.8997"/>
-</g>
-<!-- 21 -->
-<g id="node22" class="node"><title>21</title>
-<path fill="#399de5" stroke="black" d="M1302.5,-68C1302.5,-68 1204.5,-68 1204.5,-68 1198.5,-68 1192.5,-62 1192.5,-56 1192.5,-56 1192.5,-12 1192.5,-12 1192.5,-6 1198.5,-0 1204.5,-0 1204.5,-0 1302.5,-0 1302.5,-0 1308.5,-0 1314.5,-6 1314.5,-12 1314.5,-12 1314.5,-56 1314.5,-56 1314.5,-62 1308.5,-68 1302.5,-68"/>
-<text text-anchor="start" x="1224.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1202" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 3393</text>
-<text text-anchor="start" x="1200.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 5313]</text>
-<text text-anchor="start" x="1224.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 19&#45;&gt;21 -->
-<g id="edge21" class="edge"><title>19&#45;&gt;21</title>
-<path fill="none" stroke="black" d="M1172.53,-103.726C1183.6,-94.3318 1195.36,-84.349 1206.39,-74.9883"/>
-<polygon fill="black" stroke="black" points="1208.91,-77.4393 1214.27,-68.2996 1204.38,-72.1026 1208.91,-77.4393"/>
-</g>
-<!-- 24 -->
-<g id="node25" class="node"><title>24</title>
-<path fill="#e78946" stroke="black" d="M1496.5,-187C1496.5,-187 1344.5,-187 1344.5,-187 1338.5,-187 1332.5,-181 1332.5,-175 1332.5,-175 1332.5,-116 1332.5,-116 1332.5,-110 1338.5,-104 1344.5,-104 1344.5,-104 1496.5,-104 1496.5,-104 1502.5,-104 1508.5,-110 1508.5,-116 1508.5,-116 1508.5,-175 1508.5,-175 1508.5,-181 1502.5,-187 1496.5,-187"/>
-<text text-anchor="start" x="1340.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_srv_count ≤ 1.5</text>
-<text text-anchor="start" x="1383" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.117</text>
-<text text-anchor="start" x="1377" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 33</text>
-<text text-anchor="start" x="1376" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [45, 3]</text>
-<text text-anchor="start" x="1391.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 23&#45;&gt;24 -->
-<g id="edge24" class="edge"><title>23&#45;&gt;24</title>
-<path fill="none" stroke="black" d="M1424.42,-222.907C1423.99,-214.558 1423.53,-205.671 1423.09,-197.02"/>
-<polygon fill="black" stroke="black" points="1426.59,-196.828 1422.58,-187.021 1419.59,-197.187 1426.59,-196.828"/>
-</g>
-<!-- 27 -->
-<g id="node28" class="node"><title>27</title>
-<path fill="#399de5" stroke="black" d="M1628,-179.5C1628,-179.5 1539,-179.5 1539,-179.5 1533,-179.5 1527,-173.5 1527,-167.5 1527,-167.5 1527,-123.5 1527,-123.5 1527,-117.5 1533,-111.5 1539,-111.5 1539,-111.5 1628,-111.5 1628,-111.5 1634,-111.5 1640,-117.5 1640,-123.5 1640,-123.5 1640,-167.5 1640,-167.5 1640,-173.5 1634,-179.5 1628,-179.5"/>
-<text text-anchor="start" x="1554.5" y="-164.3" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1540" y="-149.3" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 82</text>
-<text text-anchor="start" x="1535" y="-134.3" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 134]</text>
-<text text-anchor="start" x="1554.5" y="-119.3" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 23&#45;&gt;27 -->
-<g id="edge27" class="edge"><title>23&#45;&gt;27</title>
-<path fill="none" stroke="black" d="M1480.97,-222.907C1497.11,-210.88 1514.75,-197.735 1530.78,-185.791"/>
-<polygon fill="black" stroke="black" points="1533.07,-188.449 1538.99,-179.667 1528.88,-182.836 1533.07,-188.449"/>
-</g>
-<!-- 25 -->
-<g id="node26" class="node"><title>25</title>
-<path fill="#bddef6" stroke="black" d="M1418,-68C1418,-68 1345,-68 1345,-68 1339,-68 1333,-62 1333,-56 1333,-56 1333,-12 1333,-12 1333,-6 1339,-0 1345,-0 1345,-0 1418,-0 1418,-0 1424,-0 1430,-6 1430,-12 1430,-12 1430,-56 1430,-56 1430,-62 1424,-68 1418,-68"/>
-<text text-anchor="start" x="1348" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.48</text>
-<text text-anchor="start" x="1342" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 2</text>
-<text text-anchor="start" x="1341" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [2, 3]</text>
-<text text-anchor="start" x="1352.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 24&#45;&gt;25 -->
-<g id="edge25" class="edge"><title>24&#45;&gt;25</title>
-<path fill="none" stroke="black" d="M1405.98,-103.726C1402.96,-95.2439 1399.76,-86.2819 1396.72,-77.7312"/>
-<polygon fill="black" stroke="black" points="1400.01,-76.5456 1393.36,-68.2996 1393.42,-78.8943 1400.01,-76.5456"/>
-</g>
-<!-- 26 -->
-<g id="node27" class="node"><title>26</title>
-<path fill="#e58139" stroke="black" d="M1541,-68C1541,-68 1460,-68 1460,-68 1454,-68 1448,-62 1448,-56 1448,-56 1448,-12 1448,-12 1448,-6 1454,-0 1460,-0 1460,-0 1541,-0 1541,-0 1547,-0 1553,-6 1553,-12 1553,-12 1553,-56 1553,-56 1553,-62 1547,-68 1541,-68"/>
-<text text-anchor="start" x="1471.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1457" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 31</text>
-<text text-anchor="start" x="1456" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [43, 0]</text>
-<text text-anchor="start" x="1471.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 24&#45;&gt;26 -->
-<g id="edge26" class="edge"><title>24&#45;&gt;26</title>
-<path fill="none" stroke="black" d="M1450.29,-103.726C1456.75,-94.879 1463.6,-85.51 1470.09,-76.6303"/>
-<polygon fill="black" stroke="black" points="1473.1,-78.439 1476.17,-68.2996 1467.45,-74.3095 1473.1,-78.439"/>
-</g>
-<!-- 29 -->
-<g id="node30" class="node"><title>29</title>
-<path fill="#f2c2a0" stroke="black" d="M2156.5,-425C2156.5,-425 2042.5,-425 2042.5,-425 2036.5,-425 2030.5,-419 2030.5,-413 2030.5,-413 2030.5,-354 2030.5,-354 2030.5,-348 2036.5,-342 2042.5,-342 2042.5,-342 2156.5,-342 2156.5,-342 2162.5,-342 2168.5,-348 2168.5,-354 2168.5,-354 2168.5,-413 2168.5,-413 2168.5,-419 2162.5,-425 2156.5,-425"/>
-<text text-anchor="start" x="2042" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 205.0</text>
-<text text-anchor="start" x="2066" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.45</text>
-<text text-anchor="start" x="2048" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 1109</text>
-<text text-anchor="start" x="2038.5" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [1145, 593]</text>
-<text text-anchor="start" x="2070.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 28&#45;&gt;29 -->
-<g id="edge29" class="edge"><title>28&#45;&gt;29</title>
-<path fill="none" stroke="black" d="M2099.5,-460.907C2099.5,-452.649 2099.5,-443.864 2099.5,-435.302"/>
-<polygon fill="black" stroke="black" points="2103,-435.021 2099.5,-425.021 2096,-435.021 2103,-435.021"/>
-</g>
-<!-- 44 -->
-<g id="node45" class="node"><title>44</title>
-<path fill="#e6843e" stroke="black" d="M2948.5,-425C2948.5,-425 2818.5,-425 2818.5,-425 2812.5,-425 2806.5,-419 2806.5,-413 2806.5,-413 2806.5,-354 2806.5,-354 2806.5,-348 2812.5,-342 2818.5,-342 2818.5,-342 2948.5,-342 2948.5,-342 2954.5,-342 2960.5,-348 2960.5,-354 2960.5,-354 2960.5,-413 2960.5,-413 2960.5,-419 2954.5,-425 2948.5,-425"/>
-<text text-anchor="start" x="2814.5" y="-409.8" font-family="Helvetica,sans-Serif" font-size="14.00">srv_rerror_rate ≤ 0.16</text>
-<text text-anchor="start" x="2846" y="-394.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.049</text>
-<text text-anchor="start" x="2832" y="-379.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5762</text>
-<text text-anchor="start" x="2822.5" y="-364.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8898, 230]</text>
-<text text-anchor="start" x="2854.5" y="-349.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 28&#45;&gt;44 -->
-<g id="edge44" class="edge"><title>28&#45;&gt;44</title>
-<path fill="none" stroke="black" d="M2172.55,-490.598C2317.43,-468.977 2640.57,-420.753 2796.3,-397.514"/>
-<polygon fill="black" stroke="black" points="2796.93,-400.957 2806.31,-396.02 2795.9,-394.034 2796.93,-400.957"/>
-</g>
-<!-- 30 -->
-<g id="node31" class="node"><title>30</title>
-<path fill="#e6843e" stroke="black" d="M2109.5,-306C2109.5,-306 1873.5,-306 1873.5,-306 1867.5,-306 1861.5,-300 1861.5,-294 1861.5,-294 1861.5,-235 1861.5,-235 1861.5,-229 1867.5,-223 1873.5,-223 1873.5,-223 2109.5,-223 2109.5,-223 2115.5,-223 2121.5,-229 2121.5,-235 2121.5,-235 2121.5,-294 2121.5,-294 2121.5,-300 2115.5,-306 2109.5,-306"/>
-<text text-anchor="start" x="1869.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_src_port_rate ≤ 0.195</text>
-<text text-anchor="start" x="1954" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.049</text>
-<text text-anchor="start" x="1944" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 318</text>
-<text text-anchor="start" x="1938.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [470, 12]</text>
-<text text-anchor="start" x="1962.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 29&#45;&gt;30 -->
-<g id="edge30" class="edge"><title>29&#45;&gt;30</title>
-<path fill="none" stroke="black" d="M2062.03,-341.907C2053.57,-332.742 2044.51,-322.927 2035.8,-313.489"/>
-<polygon fill="black" stroke="black" points="2038.26,-310.995 2028.9,-306.021 2033.11,-315.743 2038.26,-310.995"/>
-</g>
-<!-- 37 -->
-<g id="node38" class="node"><title>37</title>
-<path fill="#fbede3" stroke="black" d="M2260.5,-306C2260.5,-306 2154.5,-306 2154.5,-306 2148.5,-306 2142.5,-300 2142.5,-294 2142.5,-294 2142.5,-235 2142.5,-235 2142.5,-229 2148.5,-223 2154.5,-223 2154.5,-223 2260.5,-223 2260.5,-223 2266.5,-223 2272.5,-229 2272.5,-235 2272.5,-235 2272.5,-294 2272.5,-294 2272.5,-300 2266.5,-306 2260.5,-306"/>
-<text text-anchor="start" x="2166.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">service ≤ 1.5</text>
-<text text-anchor="start" x="2170" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.497</text>
-<text text-anchor="start" x="2160" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 791</text>
-<text text-anchor="start" x="2150.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [675, 581]</text>
-<text text-anchor="start" x="2178.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 29&#45;&gt;37 -->
-<g id="edge37" class="edge"><title>29&#45;&gt;37</title>
-<path fill="none" stroke="black" d="M2136.97,-341.907C2145.43,-332.742 2154.49,-322.927 2163.2,-313.489"/>
-<polygon fill="black" stroke="black" points="2165.89,-315.743 2170.1,-306.021 2160.74,-310.995 2165.89,-315.743"/>
-</g>
-<!-- 31 -->
-<g id="node32" class="node"><title>31</title>
-<path fill="#e68743" stroke="black" d="M1853,-187C1853,-187 1676,-187 1676,-187 1670,-187 1664,-181 1664,-175 1664,-175 1664,-116 1664,-116 1664,-110 1670,-104 1676,-104 1676,-104 1853,-104 1853,-104 1859,-104 1865,-110 1865,-116 1865,-116 1865,-175 1865,-175 1865,-181 1859,-187 1853,-187"/>
-<text text-anchor="start" x="1672" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_serror_rate ≤ 0.005</text>
-<text text-anchor="start" x="1731" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.09</text>
-<text text-anchor="start" x="1717" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 149</text>
-<text text-anchor="start" x="1711.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [202, 10]</text>
-<text text-anchor="start" x="1735.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 30&#45;&gt;31 -->
-<g id="edge31" class="edge"><title>30&#45;&gt;31</title>
-<path fill="none" stroke="black" d="M1912.74,-222.907C1893.2,-212.834 1872.13,-201.977 1852.19,-191.698"/>
-<polygon fill="black" stroke="black" points="1853.61,-188.491 1843.12,-187.021 1850.4,-194.713 1853.61,-188.491"/>
-</g>
-<!-- 34 -->
-<g id="node35" class="node"><title>34</title>
-<path fill="#e5823a" stroke="black" d="M2085,-187C2085,-187 1898,-187 1898,-187 1892,-187 1886,-181 1886,-175 1886,-175 1886,-116 1886,-116 1886,-110 1892,-104 1898,-104 1898,-104 2085,-104 2085,-104 2091,-104 2097,-110 2097,-116 2097,-116 2097,-175 2097,-175 2097,-181 2091,-187 2085,-187"/>
-<text text-anchor="start" x="1894" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_diff_srv_rate ≤ 0.495</text>
-<text text-anchor="start" x="1954" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.015</text>
-<text text-anchor="start" x="1944" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 169</text>
-<text text-anchor="start" x="1943" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [268, 2]</text>
-<text text-anchor="start" x="1962.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 30&#45;&gt;34 -->
-<g id="edge34" class="edge"><title>30&#45;&gt;34</title>
-<path fill="none" stroke="black" d="M1991.5,-222.907C1991.5,-214.649 1991.5,-205.864 1991.5,-197.302"/>
-<polygon fill="black" stroke="black" points="1995,-197.021 1991.5,-187.021 1988,-197.021 1995,-197.021"/>
-</g>
-<!-- 32 -->
-<g id="node33" class="node"><title>32</title>
-<path fill="#e78845" stroke="black" d="M1681.5,-68C1681.5,-68 1583.5,-68 1583.5,-68 1577.5,-68 1571.5,-62 1571.5,-56 1571.5,-56 1571.5,-12 1571.5,-12 1571.5,-6 1577.5,-0 1583.5,-0 1583.5,-0 1681.5,-0 1681.5,-0 1687.5,-0 1693.5,-6 1693.5,-12 1693.5,-12 1693.5,-56 1693.5,-56 1693.5,-62 1687.5,-68 1681.5,-68"/>
-<text text-anchor="start" x="1595" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.106</text>
-<text text-anchor="start" x="1585" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 125</text>
-<text text-anchor="start" x="1579.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [168, 10]</text>
-<text text-anchor="start" x="1603.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 31&#45;&gt;32 -->
-<g id="edge32" class="edge"><title>31&#45;&gt;32</title>
-<path fill="none" stroke="black" d="M1715.35,-103.726C1703.91,-94.2406 1691.76,-84.1551 1680.38,-74.7159"/>
-<polygon fill="black" stroke="black" points="1682.57,-71.9905 1672.64,-68.2996 1678.1,-77.3781 1682.57,-71.9905"/>
-</g>
-<!-- 33 -->
-<g id="node34" class="node"><title>33</title>
-<path fill="#e58139" stroke="black" d="M1805,-68C1805,-68 1724,-68 1724,-68 1718,-68 1712,-62 1712,-56 1712,-56 1712,-12 1712,-12 1712,-6 1718,-0 1724,-0 1724,-0 1805,-0 1805,-0 1811,-0 1817,-6 1817,-12 1817,-12 1817,-56 1817,-56 1817,-62 1811,-68 1805,-68"/>
-<text text-anchor="start" x="1735.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1721" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 24</text>
-<text text-anchor="start" x="1720" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [34, 0]</text>
-<text text-anchor="start" x="1735.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 31&#45;&gt;33 -->
-<g id="edge33" class="edge"><title>31&#45;&gt;33</title>
-<path fill="none" stroke="black" d="M1764.5,-103.726C1764.5,-95.5175 1764.5,-86.8595 1764.5,-78.56"/>
-<polygon fill="black" stroke="black" points="1768,-78.2996 1764.5,-68.2996 1761,-78.2996 1768,-78.2996"/>
-</g>
-<!-- 35 -->
-<g id="node36" class="node"><title>35</title>
-<path fill="#e58139" stroke="black" d="M1936,-68C1936,-68 1847,-68 1847,-68 1841,-68 1835,-62 1835,-56 1835,-56 1835,-12 1835,-12 1835,-6 1841,-0 1847,-0 1847,-0 1936,-0 1936,-0 1942,-0 1948,-6 1948,-12 1948,-12 1948,-56 1948,-56 1948,-62 1942,-68 1936,-68"/>
-<text text-anchor="start" x="1862.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="1844" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 134</text>
-<text text-anchor="start" x="1843" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [215, 0]</text>
-<text text-anchor="start" x="1862.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 34&#45;&gt;35 -->
-<g id="edge35" class="edge"><title>34&#45;&gt;35</title>
-<path fill="none" stroke="black" d="M1954.26,-103.726C1945.93,-94.6054 1937.1,-84.93 1928.77,-75.8078"/>
-<polygon fill="black" stroke="black" points="1931.24,-73.3235 1921.91,-68.2996 1926.07,-78.044 1931.24,-73.3235"/>
-</g>
-<!-- 36 -->
-<g id="node37" class="node"><title>36</title>
-<path fill="#e68640" stroke="black" d="M2059,-68C2059,-68 1978,-68 1978,-68 1972,-68 1966,-62 1966,-56 1966,-56 1966,-12 1966,-12 1966,-6 1972,-0 1978,-0 1978,-0 2059,-0 2059,-0 2065,-0 2071,-6 2071,-12 2071,-12 2071,-56 2071,-56 2071,-62 2065,-68 2059,-68"/>
-<text text-anchor="start" x="1985" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.07</text>
-<text text-anchor="start" x="1975" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 35</text>
-<text text-anchor="start" x="1974" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [53, 2]</text>
-<text text-anchor="start" x="1989.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 34&#45;&gt;36 -->
-<g id="edge36" class="edge"><title>34&#45;&gt;36</title>
-<path fill="none" stroke="black" d="M2001.55,-103.726C2003.6,-95.4263 2005.76,-86.6671 2007.83,-78.2834"/>
-<polygon fill="black" stroke="black" points="2011.29,-78.8467 2010.29,-68.2996 2004.5,-77.1709 2011.29,-78.8467"/>
-</g>
-<!-- 38 -->
-<g id="node39" class="node"><title>38</title>
-<path fill="#e99356" stroke="black" d="M2256.5,-187C2256.5,-187 2158.5,-187 2158.5,-187 2152.5,-187 2146.5,-181 2146.5,-175 2146.5,-175 2146.5,-116 2146.5,-116 2146.5,-110 2152.5,-104 2158.5,-104 2158.5,-104 2256.5,-104 2256.5,-104 2262.5,-104 2268.5,-110 2268.5,-116 2268.5,-116 2268.5,-175 2268.5,-175 2268.5,-181 2262.5,-187 2256.5,-187"/>
-<text text-anchor="start" x="2180" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 0.5</text>
-<text text-anchor="start" x="2170" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.223</text>
-<text text-anchor="start" x="2160" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 467</text>
-<text text-anchor="start" x="2154.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [636, 93]</text>
-<text text-anchor="start" x="2178.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 37&#45;&gt;38 -->
-<g id="edge38" class="edge"><title>37&#45;&gt;38</title>
-<path fill="none" stroke="black" d="M2207.5,-222.907C2207.5,-214.649 2207.5,-205.864 2207.5,-197.302"/>
-<polygon fill="black" stroke="black" points="2211,-197.021 2207.5,-187.021 2204,-197.021 2211,-197.021"/>
-</g>
-<!-- 41 -->
-<g id="node42" class="node"><title>41</title>
-<path fill="#49a5e7" stroke="black" d="M2506.5,-187C2506.5,-187 2304.5,-187 2304.5,-187 2298.5,-187 2292.5,-181 2292.5,-175 2292.5,-175 2292.5,-116 2292.5,-116 2292.5,-110 2298.5,-104 2304.5,-104 2304.5,-104 2506.5,-104 2506.5,-104 2512.5,-104 2518.5,-110 2518.5,-116 2518.5,-116 2518.5,-175 2518.5,-175 2518.5,-181 2512.5,-187 2506.5,-187"/>
-<text text-anchor="start" x="2300.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">dst_host_same_srv_rate ≤ 0.015</text>
-<text text-anchor="start" x="2368" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.137</text>
-<text text-anchor="start" x="2358" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 324</text>
-<text text-anchor="start" x="2352.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [39, 488]</text>
-<text text-anchor="start" x="2376.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 37&#45;&gt;41 -->
-<g id="edge41" class="edge"><title>37&#45;&gt;41</title>
-<path fill="none" stroke="black" d="M2272.61,-225.028C2290.33,-214.553 2309.71,-203.105 2328.05,-192.269"/>
-<polygon fill="black" stroke="black" points="2330.12,-195.106 2336.95,-187.005 2326.56,-189.079 2330.12,-195.106"/>
-</g>
-<!-- 39 -->
-<g id="node40" class="node"><title>39</title>
-<path fill="#e89153" stroke="black" d="M2199.5,-68C2199.5,-68 2101.5,-68 2101.5,-68 2095.5,-68 2089.5,-62 2089.5,-56 2089.5,-56 2089.5,-12 2089.5,-12 2089.5,-6 2095.5,-0 2101.5,-0 2101.5,-0 2199.5,-0 2199.5,-0 2205.5,-0 2211.5,-6 2211.5,-12 2211.5,-12 2211.5,-56 2211.5,-56 2211.5,-62 2205.5,-68 2199.5,-68"/>
-<text text-anchor="start" x="2113" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.204</text>
-<text text-anchor="start" x="2103" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 459</text>
-<text text-anchor="start" x="2097.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [636, 83]</text>
-<text text-anchor="start" x="2121.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 38&#45;&gt;39 -->
-<g id="edge39" class="edge"><title>38&#45;&gt;39</title>
-<path fill="none" stroke="black" d="M2186.28,-103.726C2181.76,-95.0615 2176.99,-85.8962 2172.46,-77.1802"/>
-<polygon fill="black" stroke="black" points="2175.56,-75.5537 2167.83,-68.2996 2169.35,-78.7859 2175.56,-75.5537"/>
-</g>
-<!-- 40 -->
-<g id="node41" class="node"><title>40</title>
-<path fill="#399de5" stroke="black" d="M2323,-68C2323,-68 2242,-68 2242,-68 2236,-68 2230,-62 2230,-56 2230,-56 2230,-12 2230,-12 2230,-6 2236,-0 2242,-0 2242,-0 2323,-0 2323,-0 2329,-0 2335,-6 2335,-12 2335,-12 2335,-56 2335,-56 2335,-62 2329,-68 2323,-68"/>
-<text text-anchor="start" x="2253.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="2243" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 8</text>
-<text text-anchor="start" x="2238" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [0, 10]</text>
-<text text-anchor="start" x="2253.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 38&#45;&gt;40 -->
-<g id="edge40" class="edge"><title>38&#45;&gt;40</title>
-<path fill="none" stroke="black" d="M2235.43,-103.726C2241.49,-94.879 2247.9,-85.51 2253.99,-76.6303"/>
-<polygon fill="black" stroke="black" points="2256.93,-78.5277 2259.69,-68.2996 2251.15,-74.5721 2256.93,-78.5277"/>
-</g>
-<!-- 42 -->
-<g id="node43" class="node"><title>42</title>
-<path fill="#ea9b62" stroke="black" d="M2446,-68C2446,-68 2365,-68 2365,-68 2359,-68 2353,-62 2353,-56 2353,-56 2353,-12 2353,-12 2353,-6 2359,-0 2365,-0 2365,-0 2446,-0 2446,-0 2452,-0 2458,-6 2458,-12 2458,-12 2458,-56 2458,-56 2458,-62 2452,-68 2446,-68"/>
-<text text-anchor="start" x="2368" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.283</text>
-<text text-anchor="start" x="2362" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 22</text>
-<text text-anchor="start" x="2361" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [34, 7]</text>
-<text text-anchor="start" x="2376.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 41&#45;&gt;42 -->
-<g id="edge42" class="edge"><title>41&#45;&gt;42</title>
-<path fill="none" stroke="black" d="M2405.5,-103.726C2405.5,-95.5175 2405.5,-86.8595 2405.5,-78.56"/>
-<polygon fill="black" stroke="black" points="2409,-78.2996 2405.5,-68.2996 2402,-78.2996 2409,-78.2996"/>
-</g>
-<!-- 43 -->
-<g id="node44" class="node"><title>43</title>
-<path fill="#3b9ee5" stroke="black" d="M2577,-68C2577,-68 2488,-68 2488,-68 2482,-68 2476,-62 2476,-56 2476,-56 2476,-12 2476,-12 2476,-6 2482,-0 2488,-0 2488,-0 2577,-0 2577,-0 2583,-0 2589,-6 2589,-12 2589,-12 2589,-56 2589,-56 2589,-62 2583,-68 2577,-68"/>
-<text text-anchor="start" x="2499" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.02</text>
-<text text-anchor="start" x="2485" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 302</text>
-<text text-anchor="start" x="2484" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [5, 481]</text>
-<text text-anchor="start" x="2503.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 41&#45;&gt;43 -->
-<g id="edge43" class="edge"><title>41&#45;&gt;43</title>
-<path fill="none" stroke="black" d="M2452.79,-103.726C2463.69,-94.3318 2475.26,-84.349 2486.12,-74.9883"/>
-<polygon fill="black" stroke="black" points="2488.59,-77.4804 2493.88,-68.2996 2484.02,-72.1789 2488.59,-77.4804"/>
-</g>
-<!-- 45 -->
-<g id="node46" class="node"><title>45</title>
-<path fill="#e5833d" stroke="black" d="M2943.5,-306C2943.5,-306 2823.5,-306 2823.5,-306 2817.5,-306 2811.5,-300 2811.5,-294 2811.5,-294 2811.5,-235 2811.5,-235 2811.5,-229 2817.5,-223 2823.5,-223 2823.5,-223 2943.5,-223 2943.5,-223 2949.5,-223 2955.5,-229 2955.5,-235 2955.5,-235 2955.5,-294 2955.5,-294 2955.5,-300 2949.5,-306 2943.5,-306"/>
-<text text-anchor="start" x="2819.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">is_guest_login ≤ 0.5</text>
-<text text-anchor="start" x="2846" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.035</text>
-<text text-anchor="start" x="2832" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5665</text>
-<text text-anchor="start" x="2822.5" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8820, 160]</text>
-<text text-anchor="start" x="2854.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 44&#45;&gt;45 -->
-<g id="edge45" class="edge"><title>44&#45;&gt;45</title>
-<path fill="none" stroke="black" d="M2883.5,-341.907C2883.5,-333.649 2883.5,-324.864 2883.5,-316.302"/>
-<polygon fill="black" stroke="black" points="2887,-316.021 2883.5,-306.021 2880,-316.021 2887,-316.021"/>
-</g>
-<!-- 52 -->
-<g id="node53" class="node"><title>52</title>
-<path fill="#fcf2eb" stroke="black" d="M3297,-306C3297,-306 3208,-306 3208,-306 3202,-306 3196,-300 3196,-294 3196,-294 3196,-235 3196,-235 3196,-229 3202,-223 3208,-223 3208,-223 3297,-223 3297,-223 3303,-223 3309,-229 3309,-235 3309,-235 3309,-294 3309,-294 3309,-300 3303,-306 3297,-306"/>
-<text text-anchor="start" x="3217.5" y="-290.8" font-family="Helvetica,sans-Serif" font-size="14.00">count ≤ 1.5</text>
-<text text-anchor="start" x="3215" y="-275.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.499</text>
-<text text-anchor="start" x="3209" y="-260.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 97</text>
-<text text-anchor="start" x="3204" y="-245.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [78, 70]</text>
-<text text-anchor="start" x="3223.5" y="-230.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 44&#45;&gt;52 -->
-<g id="edge52" class="edge"><title>44&#45;&gt;52</title>
-<path fill="none" stroke="black" d="M2960.85,-357.973C3027.45,-336.856 3122.56,-306.701 3185.85,-286.634"/>
-<polygon fill="black" stroke="black" points="3187.25,-289.862 3195.72,-283.503 3185.13,-283.189 3187.25,-289.862"/>
-</g>
-<!-- 46 -->
-<g id="node47" class="node"><title>46</title>
-<path fill="#e5833c" stroke="black" d="M2869,-187C2869,-187 2746,-187 2746,-187 2740,-187 2734,-181 2734,-175 2734,-175 2734,-116 2734,-116 2734,-110 2740,-104 2746,-104 2746,-104 2869,-104 2869,-104 2875,-104 2881,-110 2881,-116 2881,-116 2881,-175 2881,-175 2881,-181 2875,-187 2869,-187"/>
-<text text-anchor="start" x="2742" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">src_bytes ≤ 49664.0</text>
-<text text-anchor="start" x="2770" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.025</text>
-<text text-anchor="start" x="2756" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5546</text>
-<text text-anchor="start" x="2746.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8679, 113]</text>
-<text text-anchor="start" x="2778.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 45&#45;&gt;46 -->
-<g id="edge46" class="edge"><title>45&#45;&gt;46</title>
-<path fill="none" stroke="black" d="M2857.13,-222.907C2851.41,-214.105 2845.31,-204.703 2839.4,-195.612"/>
-<polygon fill="black" stroke="black" points="2842.2,-193.5 2833.82,-187.021 2836.33,-197.313 2842.2,-193.5"/>
-</g>
-<!-- 49 -->
-<g id="node50" class="node"><title>49</title>
-<path fill="#eeab7b" stroke="black" d="M3009.5,-187C3009.5,-187 2911.5,-187 2911.5,-187 2905.5,-187 2899.5,-181 2899.5,-175 2899.5,-175 2899.5,-116 2899.5,-116 2899.5,-110 2905.5,-104 2911.5,-104 2911.5,-104 3009.5,-104 3009.5,-104 3015.5,-104 3021.5,-110 3021.5,-116 3021.5,-116 3021.5,-175 3021.5,-175 3021.5,-181 3015.5,-187 3009.5,-187"/>
-<text text-anchor="start" x="2928.5" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 26.0</text>
-<text text-anchor="start" x="2923" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.375</text>
-<text text-anchor="start" x="2913" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 119</text>
-<text text-anchor="start" x="2907.5" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [141, 47]</text>
-<text text-anchor="start" x="2931.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 45&#45;&gt;49 -->
-<g id="edge49" class="edge"><title>45&#45;&gt;49</title>
-<path fill="none" stroke="black" d="M2910.21,-222.907C2916.01,-214.105 2922.2,-204.703 2928.18,-195.612"/>
-<polygon fill="black" stroke="black" points="2931.26,-197.298 2933.83,-187.021 2925.41,-193.45 2931.26,-197.298"/>
-</g>
-<!-- 47 -->
-<g id="node48" class="node"><title>47</title>
-<path fill="#e58139" stroke="black" d="M2725.5,-68C2725.5,-68 2619.5,-68 2619.5,-68 2613.5,-68 2607.5,-62 2607.5,-56 2607.5,-56 2607.5,-12 2607.5,-12 2607.5,-6 2613.5,-0 2619.5,-0 2619.5,-0 2725.5,-0 2725.5,-0 2731.5,-0 2737.5,-6 2737.5,-12 2737.5,-12 2737.5,-56 2737.5,-56 2737.5,-62 2731.5,-68 2725.5,-68"/>
-<text text-anchor="start" x="2635" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.003</text>
-<text text-anchor="start" x="2621" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 5472</text>
-<text text-anchor="start" x="2615.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [8666, 12]</text>
-<text text-anchor="start" x="2643.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 46&#45;&gt;47 -->
-<g id="edge47" class="edge"><title>46&#45;&gt;47</title>
-<path fill="none" stroke="black" d="M2757.23,-103.726C2745.54,-94.2406 2733.1,-84.1551 2721.46,-74.7159"/>
-<polygon fill="black" stroke="black" points="2723.53,-71.8808 2713.55,-68.2996 2719.12,-77.3173 2723.53,-71.8808"/>
-</g>
-<!-- 48 -->
-<g id="node49" class="node"><title>48</title>
-<path fill="#52aae8" stroke="black" d="M2865.5,-68C2865.5,-68 2767.5,-68 2767.5,-68 2761.5,-68 2755.5,-62 2755.5,-56 2755.5,-56 2755.5,-12 2755.5,-12 2755.5,-6 2761.5,-0 2767.5,-0 2767.5,-0 2865.5,-0 2865.5,-0 2871.5,-0 2877.5,-6 2877.5,-12 2877.5,-12 2877.5,-56 2877.5,-56 2877.5,-62 2871.5,-68 2865.5,-68"/>
-<text text-anchor="start" x="2779" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.202</text>
-<text text-anchor="start" x="2773" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 74</text>
-<text text-anchor="start" x="2763.5" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [13, 101]</text>
-<text text-anchor="start" x="2787.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 46&#45;&gt;48 -->
-<g id="edge48" class="edge"><title>46&#45;&gt;48</title>
-<path fill="none" stroke="black" d="M2810.85,-103.726C2811.53,-95.4263 2812.25,-86.6671 2812.94,-78.2834"/>
-<polygon fill="black" stroke="black" points="2816.43,-78.5527 2813.76,-68.2996 2809.46,-77.9793 2816.43,-78.5527"/>
-</g>
-<!-- 50 -->
-<g id="node51" class="node"><title>50</title>
-<path fill="#e78845" stroke="black" d="M2997,-68C2997,-68 2908,-68 2908,-68 2902,-68 2896,-62 2896,-56 2896,-56 2896,-12 2896,-12 2896,-6 2902,-0 2908,-0 2908,-0 2997,-0 2997,-0 3003,-0 3009,-6 3009,-12 3009,-12 3009,-56 3009,-56 3009,-62 3003,-68 2997,-68"/>
-<text text-anchor="start" x="2915" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.104</text>
-<text text-anchor="start" x="2909" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 66</text>
-<text text-anchor="start" x="2904" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [103, 6]</text>
-<text text-anchor="start" x="2923.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 49&#45;&gt;50 -->
-<g id="edge50" class="edge"><title>49&#45;&gt;50</title>
-<path fill="none" stroke="black" d="M2957.52,-103.726C2956.91,-95.4263 2956.27,-86.6671 2955.66,-78.2834"/>
-<polygon fill="black" stroke="black" points="2959.15,-78.018 2954.93,-68.2996 2952.17,-78.5281 2959.15,-78.018"/>
-</g>
-<!-- 51 -->
-<g id="node52" class="node"><title>51</title>
-<path fill="#f1f8fd" stroke="black" d="M3128,-68C3128,-68 3039,-68 3039,-68 3033,-68 3027,-62 3027,-56 3027,-56 3027,-12 3027,-12 3027,-6 3033,-0 3039,-0 3039,-0 3128,-0 3128,-0 3134,-0 3140,-6 3140,-12 3140,-12 3140,-56 3140,-56 3140,-62 3134,-68 3128,-68"/>
-<text text-anchor="start" x="3046" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.499</text>
-<text text-anchor="start" x="3040" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 53</text>
-<text text-anchor="start" x="3035" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [38, 41]</text>
-<text text-anchor="start" x="3054.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 49&#45;&gt;51 -->
-<g id="edge51" class="edge"><title>49&#45;&gt;51</title>
-<path fill="none" stroke="black" d="M3006.3,-103.726C3016.85,-94.3318 3028.07,-84.349 3038.58,-74.9883"/>
-<polygon fill="black" stroke="black" points="3040.95,-77.5631 3046.09,-68.2996 3036.3,-72.3347 3040.95,-77.5631"/>
-</g>
-<!-- 53 -->
-<g id="node54" class="node"><title>53</title>
-<path fill="#ea975c" stroke="black" d="M3293,-187C3293,-187 3212,-187 3212,-187 3206,-187 3200,-181 3200,-175 3200,-175 3200,-116 3200,-116 3200,-110 3206,-104 3212,-104 3212,-104 3293,-104 3293,-104 3299,-104 3305,-110 3305,-116 3305,-116 3305,-175 3305,-175 3305,-181 3299,-187 3293,-187"/>
-<text text-anchor="start" x="3225" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">hot ≤ 0.5</text>
-<text text-anchor="start" x="3215" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.256</text>
-<text text-anchor="start" x="3209" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 34</text>
-<text text-anchor="start" x="3208" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [45, 8]</text>
-<text text-anchor="start" x="3223.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 52&#45;&gt;53 -->
-<g id="edge53" class="edge"><title>52&#45;&gt;53</title>
-<path fill="none" stroke="black" d="M3252.5,-222.907C3252.5,-214.649 3252.5,-205.864 3252.5,-197.302"/>
-<polygon fill="black" stroke="black" points="3256,-197.021 3252.5,-187.021 3249,-197.021 3256,-197.021"/>
-</g>
-<!-- 56 -->
-<g id="node57" class="node"><title>56</title>
-<path fill="#a2d1f3" stroke="black" d="M3528,-187C3528,-187 3377,-187 3377,-187 3371,-187 3365,-181 3365,-175 3365,-175 3365,-116 3365,-116 3365,-110 3371,-104 3377,-104 3377,-104 3528,-104 3528,-104 3534,-104 3540,-110 3540,-116 3540,-116 3540,-175 3540,-175 3540,-181 3534,-187 3528,-187"/>
-<text text-anchor="start" x="3373" y="-171.8" font-family="Helvetica,sans-Serif" font-size="14.00">num_compromised ≤ 0.5</text>
-<text text-anchor="start" x="3415" y="-156.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.453</text>
-<text text-anchor="start" x="3409" y="-141.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 63</text>
-<text text-anchor="start" x="3404" y="-126.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [33, 62]</text>
-<text text-anchor="start" x="3423.5" y="-111.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 52&#45;&gt;56 -->
-<g id="edge56" class="edge"><title>52&#45;&gt;56</title>
-<path fill="none" stroke="black" d="M3309.01,-230.442C3329.21,-218.623 3352.36,-205.083 3374.08,-192.377"/>
-<polygon fill="black" stroke="black" points="3376.1,-195.251 3382.96,-187.18 3372.56,-189.209 3376.1,-195.251"/>
-</g>
-<!-- 54 -->
-<g id="node55" class="node"><title>54</title>
-<path fill="#e58139" stroke="black" d="M3251,-68C3251,-68 3170,-68 3170,-68 3164,-68 3158,-62 3158,-56 3158,-56 3158,-12 3158,-12 3158,-6 3164,-0 3170,-0 3170,-0 3251,-0 3251,-0 3257,-0 3263,-6 3263,-12 3263,-12 3263,-56 3263,-56 3263,-62 3257,-68 3251,-68"/>
-<text text-anchor="start" x="3181.5" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.0</text>
-<text text-anchor="start" x="3167" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 27</text>
-<text text-anchor="start" x="3166" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [42, 0]</text>
-<text text-anchor="start" x="3181.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 53&#45;&gt;54 -->
-<g id="edge54" class="edge"><title>53&#45;&gt;54</title>
-<path fill="none" stroke="black" d="M3236.86,-103.726C3233.61,-95.2439 3230.17,-86.2819 3226.89,-77.7312"/>
-<polygon fill="black" stroke="black" points="3230.12,-76.3829 3223.27,-68.2996 3223.59,-78.8898 3230.12,-76.3829"/>
-</g>
-<!-- 55 -->
-<g id="node56" class="node"><title>55</title>
-<path fill="#83c2ef" stroke="black" d="M3366,-68C3366,-68 3293,-68 3293,-68 3287,-68 3281,-62 3281,-56 3281,-56 3281,-12 3281,-12 3281,-6 3287,-0 3293,-0 3293,-0 3366,-0 3366,-0 3372,-0 3378,-6 3378,-12 3378,-12 3378,-56 3378,-56 3378,-62 3372,-68 3366,-68"/>
-<text text-anchor="start" x="3292" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.397</text>
-<text text-anchor="start" x="3290" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 7</text>
-<text text-anchor="start" x="3289" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [3, 8]</text>
-<text text-anchor="start" x="3300.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 53&#45;&gt;55 -->
-<g id="edge55" class="edge"><title>53&#45;&gt;55</title>
-<path fill="none" stroke="black" d="M3281.17,-103.726C3287.39,-94.879 3293.98,-85.51 3300.23,-76.6303"/>
-<polygon fill="black" stroke="black" points="3303.19,-78.4929 3306.08,-68.2996 3297.47,-74.4664 3303.19,-78.4929"/>
-</g>
-<!-- 57 -->
-<g id="node58" class="node"><title>57</title>
-<path fill="#fbeee4" stroke="black" d="M3497,-68C3497,-68 3408,-68 3408,-68 3402,-68 3396,-62 3396,-56 3396,-56 3396,-12 3396,-12 3396,-6 3402,-0 3408,-0 3408,-0 3497,-0 3497,-0 3503,-0 3509,-6 3509,-12 3509,-12 3509,-56 3509,-56 3509,-62 3503,-68 3497,-68"/>
-<text text-anchor="start" x="3415" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.497</text>
-<text text-anchor="start" x="3409" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 33</text>
-<text text-anchor="start" x="3404" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [29, 25]</text>
-<text text-anchor="start" x="3423.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 0</text>
-</g>
-<!-- 56&#45;&gt;57 -->
-<g id="edge57" class="edge"><title>56&#45;&gt;57</title>
-<path fill="none" stroke="black" d="M3452.5,-103.726C3452.5,-95.5175 3452.5,-86.8595 3452.5,-78.56"/>
-<polygon fill="black" stroke="black" points="3456,-78.2996 3452.5,-68.2996 3449,-78.2996 3456,-78.2996"/>
-</g>
-<!-- 58 -->
-<g id="node59" class="node"><title>58</title>
-<path fill="#4ea8e8" stroke="black" d="M3620,-68C3620,-68 3539,-68 3539,-68 3533,-68 3527,-62 3527,-56 3527,-56 3527,-12 3527,-12 3527,-6 3533,-0 3539,-0 3539,-0 3620,-0 3620,-0 3626,-0 3632,-6 3632,-12 3632,-12 3632,-56 3632,-56 3632,-62 3626,-68 3620,-68"/>
-<text text-anchor="start" x="3542" y="-52.8" font-family="Helvetica,sans-Serif" font-size="14.00">gini = 0.176</text>
-<text text-anchor="start" x="3536" y="-37.8" font-family="Helvetica,sans-Serif" font-size="14.00">samples = 30</text>
-<text text-anchor="start" x="3535" y="-22.8" font-family="Helvetica,sans-Serif" font-size="14.00">value = [4, 37]</text>
-<text text-anchor="start" x="3550.5" y="-7.8" font-family="Helvetica,sans-Serif" font-size="14.00">class = 1</text>
-</g>
-<!-- 56&#45;&gt;58 -->
-<g id="edge58" class="edge"><title>56&#45;&gt;58</title>
-<path fill="none" stroke="black" d="M3499.79,-103.726C3510.69,-94.3318 3522.26,-84.349 3533.12,-74.9883"/>
-<polygon fill="black" stroke="black" points="3535.59,-77.4804 3540.88,-68.2996 3531.02,-72.1789 3535.59,-77.4804"/>
-</g>
-</g>
-</svg>
diff --git a/experiment/random forest/output/random forest b/experiment/random forest/output/random forest
new file mode 100644
index 0000000000000000000000000000000000000000..41eefe4393f9fd500c7dd642230d8be2aff48258
--- /dev/null
+++ b/experiment/random forest/output/random forest	
@@ -0,0 +1,565 @@
+digraph Tree {
+node [shape=box, style="filled, rounded", color="black", fontname=helvetica] ;
+edge [fontname=helvetica] ;
+0 [label=<src_bytes &le; 28.5<br/>entropy = 0.994<br/>samples = 11238<br/>value = [9597, 8037]<br/>class = Normal>, fillcolor="#fbebdf"] ;
+1 [label=<dst_host_count &le; 243.0<br/>entropy = 0.399<br/>samples = 5132<br/>value = [627, 7309]<br/>class = Abnormal>, fillcolor="#4aa5e7"] ;
+0 -> 1 [labeldistance=2.5, labelangle=45, headlabel="True"] ;
+2 [label=<protocol_type &le; 1.5<br/>entropy = 0.928<br/>samples = 1043<br/>value = [552, 1054]<br/>class = Abnormal>, fillcolor="#a1d0f3"] ;
+1 -> 2 ;
+3 [label=<dst_host_same_srv_rate &le; 0.625<br/>entropy = 0.998<br/>samples = 674<br/>value = [552, 493]<br/>class = Normal>, fillcolor="#fcf2ea"] ;
+2 -> 3 ;
+4 [label=<dst_host_serror_rate &le; 0.07<br/>entropy = 0.779<br/>samples = 393<br/>value = [140, 467]<br/>class = Abnormal>, fillcolor="#74baed"] ;
+3 -> 4 ;
+5 [label=<dst_host_rerror_rate &le; 0.09<br/>entropy = 0.983<br/>samples = 215<br/>value = [140, 190]<br/>class = Abnormal>, fillcolor="#cbe5f8"] ;
+4 -> 5 ;
+6 [label=<count &le; 4.5<br/>entropy = 0.729<br/>samples = 107<br/>value = [129, 33]<br/>class = Normal>, fillcolor="#eca16c"] ;
+5 -> 6 ;
+7 [label=<dst_host_srv_count &le; 2.5<br/>entropy = 0.231<br/>samples = 86<br/>value = [128, 5]<br/>class = Normal>, fillcolor="#e68641"] ;
+6 -> 7 ;
+8 [label=<dst_host_serror_rate &le; 0.005<br/>entropy = 0.98<br/>samples = 9<br/>value = [7, 5]<br/>class = Normal>, fillcolor="#f8dbc6"] ;
+7 -> 8 ;
+9 [label=<dst_host_diff_srv_rate &le; 0.04<br/>entropy = 0.863<br/>samples = 6<br/>value = [2, 5]<br/>class = Abnormal>, fillcolor="#88c4ef"] ;
+8 -> 9 ;
+10 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+9 -> 10 ;
+11 [label=<dst_host_srv_rerror_rate &le; 0.5<br/>entropy = 0.65<br/>samples = 5<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+9 -> 11 ;
+12 [label=<num_root &le; 0.5<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+11 -> 12 ;
+13 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+12 -> 13 ;
+14 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+12 -> 14 ;
+15 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+11 -> 15 ;
+16 [label=<entropy = 0.0<br/>samples = 3<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+8 -> 16 ;
+17 [label=<entropy = 0.0<br/>samples = 77<br/>value = [121, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+7 -> 17 ;
+18 [label=<same_srv_rate &le; 0.185<br/>entropy = 0.216<br/>samples = 21<br/>value = [1, 28]<br/>class = Abnormal>, fillcolor="#40a0e6"] ;
+6 -> 18 ;
+19 [label=<count &le; 20.0<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+18 -> 19 ;
+20 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+19 -> 20 ;
+21 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+19 -> 21 ;
+22 [label=<entropy = 0.0<br/>samples = 19<br/>value = [0, 27]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+18 -> 22 ;
+23 [label=<dst_host_diff_srv_rate &le; 0.04<br/>entropy = 0.349<br/>samples = 108<br/>value = [11, 157]<br/>class = Abnormal>, fillcolor="#47a4e7"] ;
+5 -> 23 ;
+24 [label=<entropy = 0.0<br/>samples = 2<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+23 -> 24 ;
+25 [label=<logged_in &le; 0.5<br/>entropy = 0.254<br/>samples = 106<br/>value = [7, 157]<br/>class = Abnormal>, fillcolor="#42a1e6"] ;
+23 -> 25 ;
+26 [label=<rerror_rate &le; 0.975<br/>entropy = 0.203<br/>samples = 102<br/>value = [5, 153]<br/>class = Abnormal>, fillcolor="#3fa0e6"] ;
+25 -> 26 ;
+27 [label=<entropy = 0.0<br/>samples = 16<br/>value = [0, 24]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+26 -> 27 ;
+28 [label=<service &le; 52.0<br/>entropy = 0.23<br/>samples = 86<br/>value = [5, 129]<br/>class = Abnormal>, fillcolor="#41a1e6"] ;
+26 -> 28 ;
+29 [label=<entropy = 0.0<br/>samples = 71<br/>value = [0, 109]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+28 -> 29 ;
+30 [label=<dst_host_srv_count &le; 2.5<br/>entropy = 0.722<br/>samples = 15<br/>value = [5, 20]<br/>class = Abnormal>, fillcolor="#6ab6ec"] ;
+28 -> 30 ;
+31 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 15]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+30 -> 31 ;
+32 [label=<dst_host_srv_diff_host_rate &le; 0.5<br/>entropy = 1.0<br/>samples = 6<br/>value = [5, 5]<br/>class = Normal>, fillcolor="#ffffff"] ;
+30 -> 32 ;
+33 [label=<srv_count &le; 3.5<br/>entropy = 0.954<br/>samples = 5<br/>value = [5, 3]<br/>class = Normal>, fillcolor="#f5cdb0"] ;
+32 -> 33 ;
+34 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+33 -> 34 ;
+35 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+33 -> 35 ;
+36 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+32 -> 36 ;
+37 [label=<dst_host_srv_count &le; 109.5<br/>entropy = 0.918<br/>samples = 4<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+25 -> 37 ;
+38 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+37 -> 38 ;
+39 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+37 -> 39 ;
+40 [label=<entropy = 0.0<br/>samples = 178<br/>value = [0, 277]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+4 -> 40 ;
+41 [label=<dst_host_srv_diff_host_rate &le; 0.005<br/>entropy = 0.325<br/>samples = 281<br/>value = [412, 26]<br/>class = Normal>, fillcolor="#e78945"] ;
+3 -> 41 ;
+42 [label=<dst_host_count &le; 22.5<br/>entropy = 0.918<br/>samples = 38<br/>value = [40, 20]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+41 -> 42 ;
+43 [label=<protocol_type &le; 0.5<br/>entropy = 0.938<br/>samples = 21<br/>value = [11, 20]<br/>class = Abnormal>, fillcolor="#a6d3f3"] ;
+42 -> 43 ;
+44 [label=<srv_count &le; 2.5<br/>entropy = 0.929<br/>samples = 19<br/>value = [10, 19]<br/>class = Abnormal>, fillcolor="#a1d1f3"] ;
+43 -> 44 ;
+45 [label=<service &le; 50.5<br/>entropy = 0.991<br/>samples = 12<br/>value = [10, 8]<br/>class = Normal>, fillcolor="#fae6d7"] ;
+44 -> 45 ;
+46 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+45 -> 46 ;
+47 [label=<dst_host_same_src_port_rate &le; 0.32<br/>entropy = 0.439<br/>samples = 6<br/>value = [10, 1]<br/>class = Normal>, fillcolor="#e88e4d"] ;
+45 -> 47 ;
+48 [label=<entropy = 0.0<br/>samples = 4<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+47 -> 48 ;
+49 [label=<srv_serror_rate &le; 0.5<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+47 -> 49 ;
+50 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+49 -> 50 ;
+51 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+49 -> 51 ;
+52 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+44 -> 52 ;
+53 [label=<dst_host_same_src_port_rate &le; 0.375<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+43 -> 53 ;
+54 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+53 -> 54 ;
+55 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+53 -> 55 ;
+56 [label=<entropy = 0.0<br/>samples = 17<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+42 -> 56 ;
+57 [label=<service &le; 9.0<br/>entropy = 0.118<br/>samples = 243<br/>value = [372, 6]<br/>class = Normal>, fillcolor="#e5833c"] ;
+41 -> 57 ;
+58 [label=<dst_host_diff_srv_rate &le; 0.015<br/>entropy = 0.792<br/>samples = 11<br/>value = [16, 5]<br/>class = Normal>, fillcolor="#eda877"] ;
+57 -> 58 ;
+59 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+58 -> 59 ;
+60 [label=<entropy = 0.0<br/>samples = 8<br/>value = [16, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+58 -> 60 ;
+61 [label=<rerror_rate &le; 0.165<br/>entropy = 0.028<br/>samples = 232<br/>value = [356, 1]<br/>class = Normal>, fillcolor="#e5813a"] ;
+57 -> 61 ;
+62 [label=<land &le; 0.5<br/>entropy = 0.169<br/>samples = 28<br/>value = [39, 1]<br/>class = Normal>, fillcolor="#e6843e"] ;
+61 -> 62 ;
+63 [label=<entropy = 0.0<br/>samples = 27<br/>value = [39, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+62 -> 63 ;
+64 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+62 -> 64 ;
+65 [label=<entropy = 0.0<br/>samples = 204<br/>value = [317, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+61 -> 65 ;
+66 [label=<entropy = 0.0<br/>samples = 369<br/>value = [0, 561]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+2 -> 66 ;
+67 [label=<dst_host_srv_serror_rate &le; 0.955<br/>entropy = 0.093<br/>samples = 4089<br/>value = [75, 6255]<br/>class = Abnormal>, fillcolor="#3b9ee5"] ;
+1 -> 67 ;
+68 [label=<diff_srv_rate &le; 0.005<br/>entropy = 0.244<br/>samples = 1189<br/>value = [75, 1787]<br/>class = Abnormal>, fillcolor="#41a1e6"] ;
+67 -> 68 ;
+69 [label=<dst_host_same_srv_rate &le; 0.015<br/>entropy = 0.648<br/>samples = 255<br/>value = [66, 332]<br/>class = Abnormal>, fillcolor="#60b0ea"] ;
+68 -> 69 ;
+70 [label=<dst_host_srv_rerror_rate &le; 0.665<br/>entropy = 0.069<br/>samples = 155<br/>value = [2, 239]<br/>class = Abnormal>, fillcolor="#3b9ee5"] ;
+69 -> 70 ;
+71 [label=<src_bytes &le; 5.5<br/>entropy = 0.764<br/>samples = 7<br/>value = [2, 7]<br/>class = Abnormal>, fillcolor="#72b9ec"] ;
+70 -> 71 ;
+72 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+71 -> 72 ;
+73 [label=<protocol_type &le; 0.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+71 -> 73 ;
+74 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+73 -> 74 ;
+75 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+73 -> 75 ;
+76 [label=<entropy = 0.0<br/>samples = 148<br/>value = [0, 232]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+70 -> 76 ;
+77 [label=<src_bytes &le; 26.0<br/>entropy = 0.975<br/>samples = 100<br/>value = [64, 93]<br/>class = Abnormal>, fillcolor="#c1e0f7"] ;
+69 -> 77 ;
+78 [label=<protocol_type &le; 0.5<br/>entropy = 0.82<br/>samples = 51<br/>value = [64, 22]<br/>class = Normal>, fillcolor="#eeac7d"] ;
+77 -> 78 ;
+79 [label=<dst_host_diff_srv_rate &le; 0.045<br/>entropy = 0.235<br/>samples = 32<br/>value = [50, 2]<br/>class = Normal>, fillcolor="#e68641"] ;
+78 -> 79 ;
+80 [label=<entropy = 0.0<br/>samples = 23<br/>value = [40, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+79 -> 80 ;
+81 [label=<service &le; 50.5<br/>entropy = 0.65<br/>samples = 9<br/>value = [10, 2]<br/>class = Normal>, fillcolor="#ea9a61"] ;
+79 -> 81 ;
+82 [label=<dst_host_serror_rate &le; 0.365<br/>entropy = 0.918<br/>samples = 3<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+81 -> 82 ;
+83 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+82 -> 83 ;
+84 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+82 -> 84 ;
+85 [label=<entropy = 0.0<br/>samples = 6<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+81 -> 85 ;
+86 [label=<srv_count &le; 6.0<br/>entropy = 0.977<br/>samples = 19<br/>value = [14, 20]<br/>class = Abnormal>, fillcolor="#c4e2f7"] ;
+78 -> 86 ;
+87 [label=<dst_host_same_src_port_rate &le; 0.39<br/>entropy = 0.696<br/>samples = 8<br/>value = [13, 3]<br/>class = Normal>, fillcolor="#eb9e67"] ;
+86 -> 87 ;
+88 [label=<entropy = 0.0<br/>samples = 6<br/>value = [13, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+87 -> 88 ;
+89 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+87 -> 89 ;
+90 [label=<dst_host_serror_rate &le; 0.065<br/>entropy = 0.31<br/>samples = 11<br/>value = [1, 17]<br/>class = Abnormal>, fillcolor="#45a3e7"] ;
+86 -> 90 ;
+91 [label=<dst_host_rerror_rate &le; 0.025<br/>entropy = 0.323<br/>samples = 10<br/>value = [1, 16]<br/>class = Abnormal>, fillcolor="#45a3e7"] ;
+90 -> 91 ;
+92 [label=<dst_host_same_src_port_rate &le; 0.5<br/>entropy = 0.469<br/>samples = 6<br/>value = [1, 9]<br/>class = Abnormal>, fillcolor="#4fa8e8"] ;
+91 -> 92 ;
+93 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+92 -> 93 ;
+94 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+92 -> 94 ;
+95 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+91 -> 95 ;
+96 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+90 -> 96 ;
+97 [label=<entropy = 0.0<br/>samples = 49<br/>value = [0, 71]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+77 -> 97 ;
+98 [label=<dst_host_rerror_rate &le; 0.005<br/>entropy = 0.054<br/>samples = 934<br/>value = [9, 1455]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
+68 -> 98 ;
+99 [label=<protocol_type &le; 0.5<br/>entropy = 0.495<br/>samples = 54<br/>value = [9, 74]<br/>class = Abnormal>, fillcolor="#51a9e8"] ;
+98 -> 99 ;
+100 [label=<diff_srv_rate &le; 0.3<br/>entropy = 0.684<br/>samples = 9<br/>value = [9, 2]<br/>class = Normal>, fillcolor="#eb9d65"] ;
+99 -> 100 ;
+101 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+100 -> 101 ;
+102 [label=<same_srv_rate &le; 0.415<br/>entropy = 0.469<br/>samples = 8<br/>value = [9, 1]<br/>class = Normal>, fillcolor="#e88f4f"] ;
+100 -> 102 ;
+103 [label=<duration &le; 3.5<br/>entropy = 0.811<br/>samples = 3<br/>value = [3, 1]<br/>class = Normal>, fillcolor="#eeab7b"] ;
+102 -> 103 ;
+104 [label=<entropy = 0.0<br/>samples = 2<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+103 -> 104 ;
+105 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+103 -> 105 ;
+106 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+102 -> 106 ;
+107 [label=<entropy = 0.0<br/>samples = 45<br/>value = [0, 72]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+99 -> 107 ;
+108 [label=<entropy = 0.0<br/>samples = 880<br/>value = [0, 1381]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+98 -> 108 ;
+109 [label=<entropy = 0.0<br/>samples = 2900<br/>value = [0, 4468]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+67 -> 109 ;
+110 [label=<dst_bytes &le; 2.0<br/>entropy = 0.385<br/>samples = 6106<br/>value = [8970, 728]<br/>class = Normal>, fillcolor="#e78b49"] ;
+0 -> 110 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
+111 [label=<service &le; 58.0<br/>entropy = 0.927<br/>samples = 987<br/>value = [1011, 526]<br/>class = Normal>, fillcolor="#f3c3a0"] ;
+110 -> 111 ;
+112 [label=<dst_host_diff_srv_rate &le; 0.015<br/>entropy = 0.594<br/>samples = 567<br/>value = [768, 129]<br/>class = Normal>, fillcolor="#e9965a"] ;
+111 -> 112 ;
+113 [label=<count &le; 3.5<br/>entropy = 0.985<br/>samples = 142<br/>value = [129, 97]<br/>class = Normal>, fillcolor="#f9e0ce"] ;
+112 -> 113 ;
+114 [label=<protocol_type &le; 1.5<br/>entropy = 1.0<br/>samples = 124<br/>value = [98, 97]<br/>class = Normal>, fillcolor="#fffefd"] ;
+113 -> 114 ;
+115 [label=<service &le; 9.5<br/>entropy = 0.916<br/>samples = 91<br/>value = [48, 97]<br/>class = Abnormal>, fillcolor="#9bcdf2"] ;
+114 -> 115 ;
+116 [label=<dst_host_srv_count &le; 51.0<br/>entropy = 0.871<br/>samples = 86<br/>value = [40, 97]<br/>class = Abnormal>, fillcolor="#8bc5f0"] ;
+115 -> 116 ;
+117 [label=<dst_host_same_srv_rate &le; 0.15<br/>entropy = 0.544<br/>samples = 58<br/>value = [11, 77]<br/>class = Abnormal>, fillcolor="#55abe9"] ;
+116 -> 117 ;
+118 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+117 -> 118 ;
+119 [label=<dst_host_srv_count &le; 8.5<br/>entropy = 0.331<br/>samples = 53<br/>value = [5, 77]<br/>class = Abnormal>, fillcolor="#46a3e7"] ;
+117 -> 119 ;
+120 [label=<srv_count &le; 1.5<br/>entropy = 1.0<br/>samples = 5<br/>value = [4, 4]<br/>class = Normal>, fillcolor="#ffffff"] ;
+119 -> 120 ;
+121 [label=<src_bytes &le; 2568776.0<br/>entropy = 0.985<br/>samples = 4<br/>value = [4, 3]<br/>class = Normal>, fillcolor="#f8e0ce"] ;
+120 -> 121 ;
+122 [label=<protocol_type &le; 0.5<br/>entropy = 0.722<br/>samples = 3<br/>value = [4, 1]<br/>class = Normal>, fillcolor="#eca06a"] ;
+121 -> 122 ;
+123 [label=<entropy = 0.0<br/>samples = 2<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+122 -> 123 ;
+124 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+122 -> 124 ;
+125 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+121 -> 125 ;
+126 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+120 -> 126 ;
+127 [label=<hot &le; 0.5<br/>entropy = 0.103<br/>samples = 48<br/>value = [1, 73]<br/>class = Abnormal>, fillcolor="#3c9ee5"] ;
+119 -> 127 ;
+128 [label=<srv_count &le; 1.5<br/>entropy = 0.113<br/>samples = 43<br/>value = [1, 65]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
+127 -> 128 ;
+129 [label=<dst_host_srv_diff_host_rate &le; 0.105<br/>entropy = 0.172<br/>samples = 26<br/>value = [1, 38]<br/>class = Abnormal>, fillcolor="#3ea0e6"] ;
+128 -> 129 ;
+130 [label=<src_bytes &le; 414.5<br/>entropy = 0.391<br/>samples = 7<br/>value = [1, 12]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
+129 -> 130 ;
+131 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 12]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+130 -> 131 ;
+132 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+130 -> 132 ;
+133 [label=<entropy = 0.0<br/>samples = 19<br/>value = [0, 26]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+129 -> 133 ;
+134 [label=<entropy = 0.0<br/>samples = 17<br/>value = [0, 27]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+128 -> 134 ;
+135 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+127 -> 135 ;
+136 [label=<service &le; 1.5<br/>entropy = 0.976<br/>samples = 28<br/>value = [29, 20]<br/>class = Normal>, fillcolor="#f7d8c2"] ;
+116 -> 136 ;
+137 [label=<entropy = 0.0<br/>samples = 13<br/>value = [23, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+136 -> 137 ;
+138 [label=<srv_count &le; 1.5<br/>entropy = 0.779<br/>samples = 15<br/>value = [6, 20]<br/>class = Abnormal>, fillcolor="#74baed"] ;
+136 -> 138 ;
+139 [label=<dst_host_srv_count &le; 210.5<br/>entropy = 0.286<br/>samples = 10<br/>value = [1, 19]<br/>class = Abnormal>, fillcolor="#43a2e6"] ;
+138 -> 139 ;
+140 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 19]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+139 -> 140 ;
+141 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+139 -> 141 ;
+142 [label=<dst_host_same_src_port_rate &le; 0.42<br/>entropy = 0.65<br/>samples = 5<br/>value = [5, 1]<br/>class = Normal>, fillcolor="#ea9a61"] ;
+138 -> 142 ;
+143 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+142 -> 143 ;
+144 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+142 -> 144 ;
+145 [label=<entropy = 0.0<br/>samples = 5<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+115 -> 145 ;
+146 [label=<entropy = 0.0<br/>samples = 33<br/>value = [50, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+114 -> 146 ;
+147 [label=<entropy = 0.0<br/>samples = 18<br/>value = [31, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+113 -> 147 ;
+148 [label=<dst_host_same_srv_rate &le; 0.85<br/>entropy = 0.277<br/>samples = 425<br/>value = [639, 32]<br/>class = Normal>, fillcolor="#e68743"] ;
+112 -> 148 ;
+149 [label=<duration &le; 8.0<br/>entropy = 0.164<br/>samples = 401<br/>value = [608, 15]<br/>class = Normal>, fillcolor="#e6843e"] ;
+148 -> 149 ;
+150 [label=<service &le; 1.5<br/>entropy = 0.147<br/>samples = 399<br/>value = [608, 13]<br/>class = Normal>, fillcolor="#e6843d"] ;
+149 -> 150 ;
+151 [label=<dst_host_srv_diff_host_rate &le; 0.155<br/>entropy = 0.035<br/>samples = 351<br/>value = [546, 2]<br/>class = Normal>, fillcolor="#e5813a"] ;
+150 -> 151 ;
+152 [label=<dst_host_diff_srv_rate &le; 0.065<br/>entropy = 0.019<br/>samples = 349<br/>value = [545, 1]<br/>class = Normal>, fillcolor="#e58139"] ;
+151 -> 152 ;
+153 [label=<entropy = 0.0<br/>samples = 244<br/>value = [382, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+152 -> 153 ;
+154 [label=<dst_host_serror_rate &le; 0.005<br/>entropy = 0.054<br/>samples = 105<br/>value = [163, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
+152 -> 154 ;
+155 [label=<entropy = 0.0<br/>samples = 83<br/>value = [132, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+154 -> 155 ;
+156 [label=<dst_host_diff_srv_rate &le; 0.075<br/>entropy = 0.201<br/>samples = 22<br/>value = [31, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
+154 -> 156 ;
+157 [label=<flag &le; 6.0<br/>entropy = 0.503<br/>samples = 7<br/>value = [8, 1]<br/>class = Normal>, fillcolor="#e89152"] ;
+156 -> 157 ;
+158 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+157 -> 158 ;
+159 [label=<dst_host_srv_count &le; 52.5<br/>entropy = 0.592<br/>samples = 6<br/>value = [6, 1]<br/>class = Normal>, fillcolor="#e9965a"] ;
+157 -> 159 ;
+160 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+159 -> 160 ;
+161 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+159 -> 161 ;
+162 [label=<entropy = 0.0<br/>samples = 15<br/>value = [23, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+156 -> 162 ;
+163 [label=<dst_host_same_src_port_rate &le; 0.43<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+151 -> 163 ;
+164 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+163 -> 164 ;
+165 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+163 -> 165 ;
+166 [label=<dst_host_count &le; 135.0<br/>entropy = 0.612<br/>samples = 48<br/>value = [62, 11]<br/>class = Normal>, fillcolor="#ea975c"] ;
+150 -> 166 ;
+167 [label=<srv_count &le; 1.5<br/>entropy = 0.768<br/>samples = 30<br/>value = [38, 11]<br/>class = Normal>, fillcolor="#eda572"] ;
+166 -> 167 ;
+168 [label=<service &le; 9.5<br/>entropy = 0.863<br/>samples = 4<br/>value = [2, 5]<br/>class = Abnormal>, fillcolor="#88c4ef"] ;
+167 -> 168 ;
+169 [label=<dst_host_srv_count &le; 11.5<br/>entropy = 0.65<br/>samples = 3<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+168 -> 169 ;
+170 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+169 -> 170 ;
+171 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+169 -> 171 ;
+172 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+168 -> 172 ;
+173 [label=<count &le; 1.5<br/>entropy = 0.592<br/>samples = 26<br/>value = [36, 6]<br/>class = Normal>, fillcolor="#e9965a"] ;
+167 -> 173 ;
+174 [label=<entropy = 0.0<br/>samples = 17<br/>value = [31, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+173 -> 174 ;
+175 [label=<src_bytes &le; 95.5<br/>entropy = 0.994<br/>samples = 9<br/>value = [5, 6]<br/>class = Abnormal>, fillcolor="#deeffb"] ;
+173 -> 175 ;
+176 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+175 -> 176 ;
+177 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+175 -> 177 ;
+178 [label=<entropy = 0.0<br/>samples = 18<br/>value = [24, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+166 -> 178 ;
+179 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+149 -> 179 ;
+180 [label=<dst_host_diff_srv_rate &le; 0.035<br/>entropy = 0.938<br/>samples = 24<br/>value = [31, 17]<br/>class = Normal>, fillcolor="#f3c6a6"] ;
+148 -> 180 ;
+181 [label=<protocol_type &le; 1.5<br/>entropy = 0.619<br/>samples = 5<br/>value = [2, 11]<br/>class = Abnormal>, fillcolor="#5dafea"] ;
+180 -> 181 ;
+182 [label=<dst_host_diff_srv_rate &le; 0.025<br/>entropy = 0.414<br/>samples = 4<br/>value = [1, 11]<br/>class = Abnormal>, fillcolor="#4ba6e7"] ;
+181 -> 182 ;
+183 [label=<dst_host_same_src_port_rate &le; 0.44<br/>entropy = 0.65<br/>samples = 2<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+182 -> 183 ;
+184 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+183 -> 184 ;
+185 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+183 -> 185 ;
+186 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+182 -> 186 ;
+187 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+181 -> 187 ;
+188 [label=<dst_host_same_src_port_rate &le; 0.99<br/>entropy = 0.661<br/>samples = 19<br/>value = [29, 6]<br/>class = Normal>, fillcolor="#ea9b62"] ;
+180 -> 188 ;
+189 [label=<entropy = 0.0<br/>samples = 15<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+188 -> 189 ;
+190 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+188 -> 190 ;
+191 [label=<count &le; 37.5<br/>entropy = 0.958<br/>samples = 420<br/>value = [243, 397]<br/>class = Abnormal>, fillcolor="#b2d9f5"] ;
+111 -> 191 ;
+192 [label=<src_bytes &le; 258.5<br/>entropy = 0.566<br/>samples = 179<br/>value = [241, 37]<br/>class = Normal>, fillcolor="#e99457"] ;
+191 -> 192 ;
+193 [label=<srv_count &le; 2.5<br/>entropy = 0.079<br/>samples = 128<br/>value = [203, 2]<br/>class = Normal>, fillcolor="#e5823b"] ;
+192 -> 193 ;
+194 [label=<entropy = 0.0<br/>samples = 98<br/>value = [155, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+193 -> 194 ;
+195 [label=<dst_host_same_src_port_rate &le; 0.66<br/>entropy = 0.242<br/>samples = 30<br/>value = [48, 2]<br/>class = Normal>, fillcolor="#e68641"] ;
+193 -> 195 ;
+196 [label=<entropy = 0.0<br/>samples = 29<br/>value = [48, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+195 -> 196 ;
+197 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+195 -> 197 ;
+198 [label=<dst_host_same_srv_rate &le; 0.03<br/>entropy = 0.999<br/>samples = 51<br/>value = [38, 35]<br/>class = Normal>, fillcolor="#fdf5ef"] ;
+192 -> 198 ;
+199 [label=<src_bytes &le; 1623.0<br/>entropy = 0.292<br/>samples = 24<br/>value = [37, 2]<br/>class = Normal>, fillcolor="#e68844"] ;
+198 -> 199 ;
+200 [label=<same_srv_rate &le; 0.625<br/>entropy = 1.0<br/>samples = 3<br/>value = [2, 2]<br/>class = Normal>, fillcolor="#ffffff"] ;
+199 -> 200 ;
+201 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+200 -> 201 ;
+202 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+200 -> 202 ;
+203 [label=<entropy = 0.0<br/>samples = 21<br/>value = [35, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+199 -> 203 ;
+204 [label=<srv_serror_rate &le; 0.2<br/>entropy = 0.191<br/>samples = 27<br/>value = [1, 33]<br/>class = Abnormal>, fillcolor="#3fa0e6"] ;
+198 -> 204 ;
+205 [label=<entropy = 0.0<br/>samples = 26<br/>value = [0, 33]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+204 -> 205 ;
+206 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+204 -> 206 ;
+207 [label=<src_bytes &le; 299.0<br/>entropy = 0.049<br/>samples = 241<br/>value = [2, 360]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
+191 -> 207 ;
+208 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+207 -> 208 ;
+209 [label=<entropy = 0.0<br/>samples = 239<br/>value = [0, 360]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+207 -> 209 ;
+210 [label=<dst_host_srv_count &le; 181.5<br/>entropy = 0.167<br/>samples = 5119<br/>value = [7959, 202]<br/>class = Normal>, fillcolor="#e6843e"] ;
+110 -> 210 ;
+211 [label=<src_bytes &le; 49282.0<br/>entropy = 0.399<br/>samples = 1212<br/>value = [1767, 152]<br/>class = Normal>, fillcolor="#e78c4a"] ;
+210 -> 211 ;
+212 [label=<hot &le; 0.5<br/>entropy = 0.21<br/>samples = 1149<br/>value = [1751, 60]<br/>class = Normal>, fillcolor="#e68540"] ;
+211 -> 212 ;
+213 [label=<dst_bytes &le; 603675.0<br/>entropy = 0.053<br/>samples = 1054<br/>value = [1652, 10]<br/>class = Normal>, fillcolor="#e5823a"] ;
+212 -> 213 ;
+214 [label=<dst_host_rerror_rate &le; 0.025<br/>entropy = 0.044<br/>samples = 1052<br/>value = [1651, 8]<br/>class = Normal>, fillcolor="#e5823a"] ;
+213 -> 214 ;
+215 [label=<dst_host_serror_rate &le; 0.385<br/>entropy = 0.02<br/>samples = 974<br/>value = [1539, 3]<br/>class = Normal>, fillcolor="#e58139"] ;
+214 -> 215 ;
+216 [label=<entropy = 0.0<br/>samples = 923<br/>value = [1461, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+215 -> 216 ;
+217 [label=<src_bytes &le; 1316.5<br/>entropy = 0.229<br/>samples = 51<br/>value = [78, 3]<br/>class = Normal>, fillcolor="#e68641"] ;
+215 -> 217 ;
+218 [label=<entropy = 0.0<br/>samples = 28<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+217 -> 218 ;
+219 [label=<dst_host_count &le; 130.0<br/>entropy = 0.391<br/>samples = 23<br/>value = [36, 3]<br/>class = Normal>, fillcolor="#e78c49"] ;
+217 -> 219 ;
+220 [label=<dst_bytes &le; 24132.5<br/>entropy = 0.971<br/>samples = 2<br/>value = [2, 3]<br/>class = Abnormal>, fillcolor="#bddef6"] ;
+219 -> 220 ;
+221 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+220 -> 221 ;
+222 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+220 -> 222 ;
+223 [label=<entropy = 0.0<br/>samples = 21<br/>value = [34, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+219 -> 223 ;
+224 [label=<dst_host_srv_rerror_rate &le; 0.01<br/>entropy = 0.255<br/>samples = 78<br/>value = [112, 5]<br/>class = Normal>, fillcolor="#e68742"] ;
+214 -> 224 ;
+225 [label=<src_bytes &le; 79.5<br/>entropy = 0.469<br/>samples = 31<br/>value = [45, 5]<br/>class = Normal>, fillcolor="#e88f4f"] ;
+224 -> 225 ;
+226 [label=<srv_count &le; 1.5<br/>entropy = 0.954<br/>samples = 4<br/>value = [5, 3]<br/>class = Normal>, fillcolor="#f5cdb0"] ;
+225 -> 226 ;
+227 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+226 -> 227 ;
+228 [label=<entropy = 0.0<br/>samples = 2<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+226 -> 228 ;
+229 [label=<dst_host_same_srv_rate &le; 0.315<br/>entropy = 0.276<br/>samples = 27<br/>value = [40, 2]<br/>class = Normal>, fillcolor="#e68743"] ;
+225 -> 229 ;
+230 [label=<entropy = 0.0<br/>samples = 23<br/>value = [37, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+229 -> 230 ;
+231 [label=<dst_host_same_srv_rate &le; 0.44<br/>entropy = 0.971<br/>samples = 4<br/>value = [3, 2]<br/>class = Normal>, fillcolor="#f6d5bd"] ;
+229 -> 231 ;
+232 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+231 -> 232 ;
+233 [label=<entropy = 0.0<br/>samples = 2<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+231 -> 233 ;
+234 [label=<entropy = 0.0<br/>samples = 47<br/>value = [67, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+224 -> 234 ;
+235 [label=<flag &le; 6.0<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+213 -> 235 ;
+236 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+235 -> 236 ;
+237 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+235 -> 237 ;
+238 [label=<logged_in &le; 0.5<br/>entropy = 0.921<br/>samples = 95<br/>value = [99, 50]<br/>class = Normal>, fillcolor="#f2c19d"] ;
+212 -> 238 ;
+239 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+238 -> 239 ;
+240 [label=<src_bytes &le; 948.0<br/>entropy = 0.872<br/>samples = 89<br/>value = [99, 41]<br/>class = Normal>, fillcolor="#f0b58b"] ;
+238 -> 240 ;
+241 [label=<dst_host_same_srv_rate &le; 0.53<br/>entropy = 0.276<br/>samples = 38<br/>value = [60, 3]<br/>class = Normal>, fillcolor="#e68743"] ;
+240 -> 241 ;
+242 [label=<src_bytes &le; 357.5<br/>entropy = 0.122<br/>samples = 36<br/>value = [59, 1]<br/>class = Normal>, fillcolor="#e5833c"] ;
+241 -> 242 ;
+243 [label=<entropy = 0.0<br/>samples = 24<br/>value = [40, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+242 -> 243 ;
+244 [label=<src_bytes &le; 428.5<br/>entropy = 0.286<br/>samples = 12<br/>value = [19, 1]<br/>class = Normal>, fillcolor="#e68843"] ;
+242 -> 244 ;
+245 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+244 -> 245 ;
+246 [label=<entropy = 0.0<br/>samples = 11<br/>value = [19, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+244 -> 246 ;
+247 [label=<srv_diff_host_rate &le; 0.5<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+241 -> 247 ;
+248 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+247 -> 248 ;
+249 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+247 -> 249 ;
+250 [label=<dst_host_diff_srv_rate &le; 0.025<br/>entropy = 1.0<br/>samples = 51<br/>value = [39, 38]<br/>class = Normal>, fillcolor="#fefcfa"] ;
+240 -> 250 ;
+251 [label=<dst_bytes &le; 2968.0<br/>entropy = 0.801<br/>samples = 24<br/>value = [10, 31]<br/>class = Abnormal>, fillcolor="#79bded"] ;
+250 -> 251 ;
+252 [label=<entropy = 0.0<br/>samples = 17<br/>value = [0, 27]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+251 -> 252 ;
+253 [label=<duration &le; 75.5<br/>entropy = 0.863<br/>samples = 7<br/>value = [10, 4]<br/>class = Normal>, fillcolor="#efb388"] ;
+251 -> 253 ;
+254 [label=<entropy = 0.0<br/>samples = 5<br/>value = [10, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+253 -> 254 ;
+255 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+253 -> 255 ;
+256 [label=<duration &le; 13.0<br/>entropy = 0.711<br/>samples = 27<br/>value = [29, 7]<br/>class = Normal>, fillcolor="#eb9f69"] ;
+250 -> 256 ;
+257 [label=<dst_host_diff_srv_rate &le; 0.325<br/>entropy = 0.65<br/>samples = 4<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+256 -> 257 ;
+258 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+257 -> 258 ;
+259 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+257 -> 259 ;
+260 [label=<dst_host_count &le; 216.0<br/>entropy = 0.353<br/>samples = 23<br/>value = [28, 2]<br/>class = Normal>, fillcolor="#e78a47"] ;
+256 -> 260 ;
+261 [label=<entropy = 0.0<br/>samples = 18<br/>value = [21, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+260 -> 261 ;
+262 [label=<num_file_creations &le; 10.5<br/>entropy = 0.764<br/>samples = 5<br/>value = [7, 2]<br/>class = Normal>, fillcolor="#eca572"] ;
+260 -> 262 ;
+263 [label=<entropy = 0.0<br/>samples = 4<br/>value = [7, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+262 -> 263 ;
+264 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+262 -> 264 ;
+265 [label=<dst_host_diff_srv_rate &le; 0.01<br/>entropy = 0.605<br/>samples = 63<br/>value = [16, 92]<br/>class = Abnormal>, fillcolor="#5baeea"] ;
+211 -> 265 ;
+266 [label=<entropy = 0.0<br/>samples = 55<br/>value = [0, 92]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+265 -> 266 ;
+267 [label=<entropy = 0.0<br/>samples = 8<br/>value = [16, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+265 -> 267 ;
+268 [label=<dst_host_count &le; 212.5<br/>entropy = 0.067<br/>samples = 3907<br/>value = [6192, 50]<br/>class = Normal>, fillcolor="#e5823b"] ;
+210 -> 268 ;
+269 [label=<entropy = 0.0<br/>samples = 1936<br/>value = [3046, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+268 -> 269 ;
+270 [label=<dst_bytes &le; 7254.0<br/>entropy = 0.116<br/>samples = 1971<br/>value = [3146, 50]<br/>class = Normal>, fillcolor="#e5833c"] ;
+268 -> 270 ;
+271 [label=<entropy = 0.0<br/>samples = 1790<br/>value = [2907, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+270 -> 271 ;
+272 [label=<src_bytes &le; 21866.0<br/>entropy = 0.665<br/>samples = 181<br/>value = [239, 50]<br/>class = Normal>, fillcolor="#ea9b62"] ;
+270 -> 272 ;
+273 [label=<hot &le; 1.5<br/>entropy = 0.069<br/>samples = 152<br/>value = [239, 2]<br/>class = Normal>, fillcolor="#e5823b"] ;
+272 -> 273 ;
+274 [label=<entropy = 0.0<br/>samples = 147<br/>value = [234, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+273 -> 274 ;
+275 [label=<srv_count &le; 2.5<br/>entropy = 0.863<br/>samples = 5<br/>value = [5, 2]<br/>class = Normal>, fillcolor="#efb388"] ;
+273 -> 275 ;
+276 [label=<srv_rerror_rate &le; 0.25<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+275 -> 276 ;
+277 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+276 -> 277 ;
+278 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+276 -> 278 ;
+279 [label=<entropy = 0.0<br/>samples = 3<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+275 -> 279 ;
+280 [label=<entropy = 0.0<br/>samples = 29<br/>value = [0, 48]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+272 -> 280 ;
+}
diff --git a/experiment/random forest/output/random forest max depth.png b/experiment/random forest/output/random forest max depth.png
new file mode 100644
index 0000000000000000000000000000000000000000..4ffba793894cd3f94113dccb295fd93e804e38e9
Binary files /dev/null and b/experiment/random forest/output/random forest max depth.png differ
diff --git a/experiment/random forest/output/random forest.jpg b/experiment/random forest/output/random forest.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..cc36d6c1f052dc317d6f60401c2c7034b5ee7598
Binary files /dev/null and b/experiment/random forest/output/random forest.jpg differ
diff --git a/experiment/random forest/output/roc.png b/experiment/random forest/output/roc.png
new file mode 100644
index 0000000000000000000000000000000000000000..852224ce6a255b6e650d228ac4ee19889d15d625
Binary files /dev/null and b/experiment/random forest/output/roc.png differ