diff --git a/experiment/decision tree classifier/DecisionTree.ipynb b/experiment/decision tree classifier/DecisionTree.ipynb
index 935cf92ef4f69686330e7b2dff70a6840a027888..904ddcc7ce384f4eaf3fc4e578d4e45360e46d50 100644
--- a/experiment/decision tree classifier/DecisionTree.ipynb
+++ b/experiment/decision tree classifier/DecisionTree.ipynb
@@ -2,7 +2,7 @@
"cells": [
{
"cell_type": "code",
- "execution_count": 14,
+ "execution_count": 1,
"metadata": {},
"outputs": [
{
@@ -73,123 +73,180 @@
},
{
"cell_type": "code",
- "execution_count": 15,
+ "execution_count": 2,
"metadata": {},
- "outputs": [
- {
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "<class 'pandas.core.frame.DataFrame'>\n",
- "RangeIndex: 17634 entries, 0 to 17633\n",
- "Data columns (total 38 columns):\n",
- " # Column Non-Null Count Dtype \n",
- "--- ------ -------------- ----- \n",
- " 0 duration 17634 non-null int64 \n",
- " 1 protocol_type 17634 non-null int64 \n",
- " 2 service 17634 non-null int64 \n",
- " 3 flag 17634 non-null int64 \n",
- " 4 src_bytes 17634 non-null int64 \n",
- " 5 dst_bytes 17634 non-null int64 \n",
- " 6 land 17634 non-null int64 \n",
- " 7 wrong_fragment 17634 non-null int64 \n",
- " 8 hot 17634 non-null int64 \n",
- " 9 num_failed_logins 17634 non-null int64 \n",
- " 10 logged_in 17634 non-null int64 \n",
- " 11 num_compromised 17634 non-null int64 \n",
- " 12 root_shell 17634 non-null int64 \n",
- " 13 su_attempted 17634 non-null int64 \n",
- " 14 num_root 17634 non-null int64 \n",
- " 15 num_file_creations 17634 non-null int64 \n",
- " 16 num_shells 17634 non-null int64 \n",
- " 17 num_access_files 17634 non-null int64 \n",
- " 18 is_guest_login 17634 non-null int64 \n",
- " 19 count 17634 non-null int64 \n",
- " 20 srv_count 17634 non-null int64 \n",
- " 21 serror_rate 17634 non-null float64\n",
- " 22 srv_serror_rate 17634 non-null float64\n",
- " 23 rerror_rate 17634 non-null float64\n",
- " 24 srv_rerror_rate 17634 non-null float64\n",
- " 25 same_srv_rate 17634 non-null float64\n",
- " 26 diff_srv_rate 17634 non-null float64\n",
- " 27 srv_diff_host_rate 17634 non-null float64\n",
- " 28 dst_host_count 17634 non-null int64 \n",
- " 29 dst_host_srv_count 17634 non-null int64 \n",
- " 30 dst_host_same_srv_rate 17634 non-null float64\n",
- " 31 dst_host_diff_srv_rate 17634 non-null float64\n",
- " 32 dst_host_same_src_port_rate 17634 non-null float64\n",
- " 33 dst_host_srv_diff_host_rate 17634 non-null float64\n",
- " 34 dst_host_serror_rate 17634 non-null float64\n",
- " 35 dst_host_srv_serror_rate 17634 non-null float64\n",
- " 36 dst_host_rerror_rate 17634 non-null float64\n",
- " 37 dst_host_srv_rerror_rate 17634 non-null float64\n",
- "dtypes: float64(15), int64(23)\n",
- "memory usage: 5.1 MB\n"
- ]
- }
- ],
+ "outputs": [],
"source": [
"X, y = df.drop(columns=[\"class\", \"index_num\"]), df['class']\n",
"X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.3, shuffle=True, random_state=0)\n",
"X_train.reset_index(drop=True, inplace=True)\n",
"X_test.reset_index(drop=True, inplace=True)\n",
"y_train.reset_index(drop=True, inplace=True)\n",
- "y_test.reset_index(drop=True, inplace=True)\n",
- "\n",
- "X_train.info()"
+ "y_test.reset_index(drop=True, inplace=True)"
]
},
{
"cell_type": "code",
- "execution_count": 16,
+ "execution_count": 3,
"metadata": {},
"outputs": [
{
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "Shape of X_train: (17634, 38)\n",
- "Shape of X_test: (7558, 38)\n",
- "Shape of y_train: (17634,)\n",
- "Shape of y_test: (7558,)\n"
- ]
- }
- ],
- "source": [
- "print(f\"Shape of X_train: {X_train.shape}\\nShape of X_test: {X_test.shape}\")\n",
- "print(f\"Shape of y_train: {y_train.shape}\\nShape of y_test: {y_test.shape}\")"
- ]
- },
- {
- "cell_type": "code",
- "execution_count": 17,
- "metadata": {},
- "outputs": [
- {
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "depth: 1 0.9183646467319396\n",
- "depth: 2 0.9311987298227045\n",
- "depth: 3 0.9650701243715268\n",
- "depth: 4 0.9781688277322043\n",
- "depth: 5 0.9871659169092353\n",
- "depth: 6 0.9917967716327071\n",
- "depth: 7 0.992590632442445\n",
- "depth: 8 0.9956337655464409\n",
- "depth: 9 0.9961630060862662\n",
- "depth: 10 0.9965599364911352\n",
- "depth: 11 0.9964276263561789\n",
- "depth: 12 0.9964276263561789\n",
- "depth: 13 0.9964276263561789\n",
- "depth: 14 0.9964276263561789\n",
- "depth: 15 0.9964276263561789\n",
- "depth: 16 0.9964276263561789\n",
- "depth: 17 0.9964276263561789\n",
- "depth: 18 0.9964276263561789\n",
- "depth: 19 0.9964276263561789\n",
- "depth: 20 0.9964276263561789\n"
- ]
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>depth</th>\n",
+ " <th>accuracy</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>1</td>\n",
+ " <td>0.918365</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>2</td>\n",
+ " <td>0.931199</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>3</td>\n",
+ " <td>0.965070</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>4</td>\n",
+ " <td>0.978169</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>5</td>\n",
+ " <td>0.987166</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>6</td>\n",
+ " <td>0.991797</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>7</td>\n",
+ " <td>0.992591</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>8</td>\n",
+ " <td>0.995634</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>9</td>\n",
+ " <td>0.996163</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>10</td>\n",
+ " <td>0.996560</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>10</th>\n",
+ " <td>11</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>11</th>\n",
+ " <td>12</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>12</th>\n",
+ " <td>13</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>13</th>\n",
+ " <td>14</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>14</th>\n",
+ " <td>15</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>15</th>\n",
+ " <td>16</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>16</th>\n",
+ " <td>17</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>17</th>\n",
+ " <td>18</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>18</th>\n",
+ " <td>19</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>19</th>\n",
+ " <td>20</td>\n",
+ " <td>0.996428</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " depth accuracy\n",
+ "0 1 0.918365\n",
+ "1 2 0.931199\n",
+ "2 3 0.965070\n",
+ "3 4 0.978169\n",
+ "4 5 0.987166\n",
+ "5 6 0.991797\n",
+ "6 7 0.992591\n",
+ "7 8 0.995634\n",
+ "8 9 0.996163\n",
+ "9 10 0.996560\n",
+ "10 11 0.996428\n",
+ "11 12 0.996428\n",
+ "12 13 0.996428\n",
+ "13 14 0.996428\n",
+ "14 15 0.996428\n",
+ "15 16 0.996428\n",
+ "16 17 0.996428\n",
+ "17 18 0.996428\n",
+ "18 19 0.996428\n",
+ "19 20 0.996428"
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
}
],
"source": [
@@ -207,19 +264,21 @@
"\n",
"for clf_item in clf_vector:\n",
" clf_y_pred = clf_item.predict(X_test)\n",
- " accu = accuracy_score(y_test, clf_y_pred)\n",
- " plot_vector.append([clf_item.max_depth, accu])\n",
- " print(f\"depth: {clf_item.max_depth} {accu}\")"
+ " accuracy = accuracy_score(y_test, clf_y_pred)\n",
+ " plot_vector.append([clf_item.max_depth, accuracy])\n",
+ "\n",
+ "plot_vec = pd.DataFrame(plot_vector)\n",
+ "plot_vec.rename(columns={0: \"depth\", 1: \"accuracy\"})"
]
},
{
"cell_type": "code",
- "execution_count": 18,
+ "execution_count": 4,
"metadata": {},
"outputs": [
{
"data": {
- "image/png": "iVBORw0KGgoAAAANSUhEUgAAAXoAAAEWCAYAAABollyxAAAABHNCSVQICAgIfAhkiAAAAAlwSFlzAAALEgAACxIB0t1+/AAAADh0RVh0U29mdHdhcmUAbWF0cGxvdGxpYiB2ZXJzaW9uMy4xLjMsIGh0dHA6Ly9tYXRwbG90bGliLm9yZy+AADFEAAAgAElEQVR4nO3de3wU9dn//9dbDiIGEQmmIghYqYoKaBS1tBZqtWhVFLVqKR56I21v6a3ebT2g0v5QPFuLwq9qKSqeooK2tMVaSRP1rocCEkBEJCJCRBQBg1GR0/X9Yya4rLvJkt3s7G6u5+Mxj8zM5zMz10ySa2c/M/MZmRnOOecK1y5RB+Ccc655eaJ3zrkC54neOecKnCd655wrcJ7onXOuwHmid865AueJ3u1A0jOSLkihXp2k/bMRk8scSQdIysl7qiUNkrQo6jgKkSf6PCRpuaTPJX0i6WNJL0n6maS0f59mdpKZPZhCvSIzW5bu9mKFHx71w7ZwH+unh2dyW0m2XyNpo6ROcfMXSjJJ3TK8vQPC9dbv42pJf5V0fAa3USNpUBrLPxzGeHLc/Inh/B+nsI7WYd2eDdUzs0ozO6SpsbrkPNHnr1PNrAPQA7gZuBL4U7QhpSf88CgysyJgBcE+1s97JL6+pNbNEMa7wLkx2zgCaNsM29kuZp8PB/4FzEglgWbRW8D2b3mS2gBnAhn7oG+m36ULeaLPc2ZWa2YzgHOACyQdCiBpV0m3S1oh6QNJ90jarX45SUMlVUnaIOltSUPC+ZWSRobjB0h6XlKtpI8kPR6zvEk6IBzvKGmqpDWS3pV0bf23C0kXSvq/MJb1kt6RdFJT9lXSDZIel/SYpE+AH0vaRdKYcB8+klQWe0YuaaCkV8JvPlWSjmtkMw8B58dMnw9MjYvjtHBdn4TH97qYsuGSqiUVhdOnSlolqXNj+2dm75vZncD1wK2SFK6jm6Snw+P7jqRLEhyTJ8N45kg6LCx7DOgKPBN+Y/jfmOXOD8/210i6qpHQ/gwMktQxnP4BMAdYE3dcRkp6M/w9PyOpe1j0QvhzURjHmZK+p+Cb6RhJq4E/1s+LWV8PSX8OY/xI0oTGjqFLwsx8yLMBWA58L8H8FcDPw/HfAzOAvYAOwF+Bm8KyAUAtcALBh/2+wEFhWSUwMhx/DLgmrNMO+FbMtgw4IByfCvwl3E5PgjPA/wrLLgQ2AxcDrYCfA6sA7ew+AjcAm4BTw5h2A34F/Dvch3YE32oeCut3B9YC3w/rDwE+Ajon2WYNMAioBnoDrYH3wn0yoFtY77vAoeE6+4XrPCVmPY8Dk4EuwGpgSJLtHRD8C35l/jfC7fUOj1kVMIbgm8UB4bE5PuaYbAbOANoAV4Xxt47dp/htAveEx+sI4Augd5IYHwZ+C0wBLg7nPQWcDbwC/DicdxawBDgwPG6/BV4My1qH2+wZs97vAVuAG8P92i2ctzxmmdeB24Hdw/KBUf/v5esQeQA+NOGXljzRv0KQmAV8Cnw9puxY4J1w/F7gziTrruTLRD8VuK8+wcXVszBptAoTRZ+Ysp8CleH4hUB1TFn7cNmv7ew+hkntX3HzlgLfiZnuHsazS3gs7o+rXw4MT7LN+kT/W4Kz6lOAZ8KEuD3RJ1huInBbzHSncF0LgUkN7GOyRF8Ubu9oYCCwLK78OuCPMcfk/2LKWgEfAsfG7lP8NmOPP/AacFaSGOsT/SDgRYITh9XAruyY6J8DLohZrnX4e9iX5Il+I9A2bt7ycPzb4XZaRf3/VgiDN90Uln2BdQRnku2BuWGTxcfAP8L5ECTDt1NY3xUEHxr/kbRI0k8S1CkmOCN7N2beu2Es9VbXj5jZZ+FoUQrbT2Rl3PR+wF9j9nMhQVLZm+D6xXn1ZWH5MQTNGQ2ZCgwnaJeeGl8o6diwiWuNpFpgJMFxAMDM1gPTCc7672jCPtYfu3XhPuwXtw9XAF+Lqb/9mJjZVoJvIQ3uo5mtjpn8jMZ/H88D3Qi+WfzFzL6IK+8BTIqJ8SNgW7hMMh+Y2aYkZd0Jkv7WRuJyKfALIAVC0lEECeL/CP7JPgcOMbP3ElRfCXy9sXWGyeDicP3fAmZJesHMqmOqfUTQdNADeCOctx9BsmkO8bcG1gA/MrNX4ytKWklwRv/zndqA2TJJqwiats5PUKWMoElhiJltlDSRmEQpqRQYQdCEcxfBN4OdcQbBh2M1QUJfamYHN1C/vi2c8NrIvgTNY/DV49UkZmaSHiFI9N9OUGUlcJ2ZPR5fIKlVstU2sMmVQA9JrTzZp8/P6POcpD0knUKQfB42s4Vmtg34I3CnpL3DevtK+n642J+AiyQdH17M3FfSQQnWfba+vKVwPcE/5g7/dOE/4RPAeEkdJPUA/pfgK3823APcKGm/MOa9JZ0Wlj0EnCHpBEmtJLWTNFhSY2f0EDQ5HW9mnyco6wCsC5P8Mex4l85uBPt+ZbiO/SWNSmVHJJVI+h/gWuBKC9owXgY2SfplGH8rSYeFHyb1Bii4uN6G4JrFJ8DssOwDIFPPO9wJnGBm/05Qdg9wjaSDw33ZU9JZsP1vZO1OxvFyuMyNktpL2k3SwPTCb7k80eevvyq482QlQVv074CLYsqvJDgjfEXSBmAWwYUyzOw/Yd07CS7KPk9wRh7vKOBVSXUEF3YvNbN3EtT7BcE1gWUE3ygeJbh4lw2/I2iWKg+Px0sEcWNmywnOjq8juENkBfBLUvi7N7NqM5ubpPjnwE3h9sYQfNDVuxV428z+aGYbgR8DN0tK+g0qvBOlDlhAcOF4mJlNDePYApxMcAF9OcE3qHuBPWJW8XS4nXUEd18NC5eD4GLn/xc2qVzW2H43xMzWmll5krInCX4XT4Z/b/X7Uu83wKNhHMNS2NYWgm9CBxP8ja8guODrmkDhhQ/nXB6SdAPBReILo47F5S4/o3fOuQLnid455wpco4le0hRJH0p6PUm5JN2l4GnABQoeGa8vu0DS0nBotKMs59zOMbNrvdnGNSaVM/oHCJ4oTOYkgif4egOjgD8ASNqL4ALM0QQXkn6juM6inHPONb9G76M3sxfUcK9zQ4Gp4a1gr4S3Ve1D8CTdc2a2DkDScwQfGI81tL3i4mLr2bOhzUXr008/Zffdd486jKQ8vvR4fOnx+NKTTnxz5879yMy6JCrLxANT+7Lj04o14bxk8xvUs2dP5syZk4GwmkdlZSWDBg2KOoykPL70eHzp8fjSk058kt5NVpaJRK8E86yB+V9dQfBAySiAkpISKisrMxBW86irq/P40uDxpcfjS0+LjS+VDnEIeu97PUnZvcB5MdNLgH2A84B7k9VLNpSWllouq6ioiDqEBnl86fH40uPxpSed+IA51oydms0Azg/vvjkGqDWz94FngRMldQovwp4YznPOOZdFjTbdKHh5wSCgWFINwZ00bQDM7B5gJsEj2tUEveBdFJatk3Q9X/a5Mc7CC7M7a/PmzdTU1LBx48amLJ5RHTt2ZPHixVGHkVSy+Nq1a0e3bt1o06ZNBFE556KUyl035zVSbsAlScqmkIE+T2pqaujQoQM9e/ZEStT0nz2ffPIJHTp0iDSGhiSKz8xYu3YtNTU19OrVK6LInHNRyYsnYzdu3Ejnzp0jT/L5ShKdO3fOiW9Ezrnsy4tED3iST5MfP+daLn/xiGs5zKCuDj7+OOnQY9kyeOklaNsW2rQJhp0Zb5XsHRuZsfs770BxceMVI+Lxpafde83zvh5P9C7/mEFtLXz4IaxZEwz14+vXf5m4Y8c//jhYZmvDLyvK9SsYR0UdQCM8vvT0OfhgGD484+v1RJ9jtmzZQuvWLfTX8sEHUF29Y+JONP7RR7B5c+J17L477Lnnl8M++8DBB+84L3bo1OnL8T32oPLFFxk0cGCw/s2bYdOmHX8mG6//uW1bsx6iRYsWccghhzTrNtLh8aVn2YoV9G+G9bbQjNI0p59+Ou+++y6bNm3i0ksvZdSoUfzjH/9gzJgxbN26leLiYsrLy6mrq+MXv/gFc+bMQRK/+c1vOPPMMykqKqKurg6AadOm8be//Y0HHniACy+8kL322ot58+ZxxBFHcM4553DZZZfx+eefs9tuu3H//fdz4IEHsnXrVq688kqeffZZJHHxxRfTp08fJk6cyNNPPw3Av/71Lx588EGeeuqpKA/VznnzTbj5ZnjkEdiyZceyDh1g772hSxfYbz848shgvEuXL+fXjxcXQ7t26cWyyy6w667BkIPWFBdDDj/C7/Gl5+Nmemo3/xL9ZZdBVVVm19m/P/z+941WmzJlCm3atKF169YcddRRDB06lIsvvpgXXniBXr16sW5d8JjA9ddfT8eOHVm4cCEA69evb3Tdb731FrNmzaJVq1Zs2LCBF154gdatWzNr1izGjBnD9OnTue+++3jnnXeYN28erVu3Zt26dXTq1IlLLrmENWvW0KVLFx5++GEuuuiiRreXE6qqYPx4mD49SNCXXAJDhgRJO1OJ2zmXh4k+QnfddRfTp09nl112YeXKldx3330cd9xx2+9N32uvvQCYNWsWZWVl25fr1Knx3pnPPvtsWoUX8mpra7ngggtYunQpktgcNlPMmjWLn/3sZ9ubduq3N2LEiO0Jfvbs2Tz2WIMdhEbvpZeCBD9zJuyxB1x1VfABvvfeUUfmXEHKv0Sfwpl3c6isrGTWrFnMmjWLkpISBg0aRL9+/ViyZMlX6ppZwtsZY+fF39Me2zXpddddx+DBg3n66adZvnz59t7skq33oosu4tRTT6Vdu3acfvrpudnGbwbl5fT79a+DM/nOneGGG4Kz+D33jDo65wpa3txHH7Xa2lo6depE+/btefPNN3nllVf44osveP7553nnnXcAtjfdnHjiiUycOHH7svVNNyUlJSxevJht27Ztb1NPtq199w16dH7ggQe2zz/xxBO555572BK2Y9dvr2vXrnTt2pUbbriB4c1wxT4tZjBjBhxzDJxwAu1rauB3v4N334VrrvEk71wWeKJP0ZAhQ9iyZQvHHnss1113HccccwxdunThvvvuY9iwYfTr149zzjkHgGuvvZb169dz6KGH0q9fPyoqKgC4+eabOeWUU/jud7/LPvvsk3RbV1xxBVdffTUDBw5ka8ztgCNHjmS//fajb9++9OvXj0cffXR72fDhw+nevTsHHXRQMx2BnbR1K5SVQb9+MHRocMfMPffwyiOPwOWXB3fHOOeyI1m3llENibopfuONN5rcdWembdiwIeoQErrkkkts8uTJDcaXleP4xRdmf/qTWe/eZmB28MFmU6eabd5sZoXdTWw2eHzpKeT4aKCb4hxszHU7q7S0lN1335077riDTZs2ZW/DZsFDScuXB8PixXDvvbByJRx+OEybBmecEdyy6JyLjCf6AjB37tzt4xlN9GbBE6XvvPNlMo8fPvlkx2UGDgyS/ZAh4P3rOJcT8ibRW5I7Tlxqgm92Ddi2LXhgac6cHRP5hg071isqgl69oGfP4MGTnj13HMJbPp1zuSMvEn27du1Yu3atd1XcRBb2R98u2cNHH3wAF1wAzz67YyL/zne+msg7dfIzdefyTF4k+m7dulFTU8OaNWuiDoWNGzcmT5g5IFl89W+Y+ornnoMRI4IOv/7wB/jpTz2RO1dgUkr0koYAE4BWwGQzuzmuvAfBm6S6AOuAH5tZTVh2C/CDsOr1Zvb4zgbZpk2bnHkzUmVlJYcffnjUYSSVcnybN8O118Ktt0KfPjBrFhx6aPMH6JzLukZvh5DUCpgEnAT0Ac6T1Ceu2u3AVDPrC4wDbgqX/QFwBNAfOBr4taQ9Mhe+a5Jly+Bb3wqS/KhRMHu2J3nnClgq970NAKrNbJmZbQLKgKFxdfoA5eF4RUx5H+B5M9tiZp8C84Eh6Yftmuzxx4NbH5csgSeeCO6Qad8+6qicc81Ijd2NIeksYIiZjQynRwBHm9nomDqPAq+a2QRJw4DpQDFQCvwGOAFoD/wHmGRmd8RtYxQwCqCkpKQ0tkOwXFNXV0dRUVHUYSSVLL5dPv+c3hMnss/MmdQecgiLr72WjV/7Ws7Elys8vvR4fOlJJ77BgwfPNbMjExYme5KqfgDOJmiXr58eAdwdV6cr8BQwj6AtvwboGJZdA1QBzwGPAJc2tL1ET8bmkrx8sm7+fLODDjKTzMaMMdu0Ketx1cvL45dDPL70FHJ8NPBkbCpNNzVA95jpbsCquA+LVWY2zMwODxM7ZlYb/hxvZv3N7ARAwNIUtukywQwmTYIBA4K7ap57LugeuE2bqCNzzmVRKol+NtBbUi9JbYFzgRmxFSQVS6pf19UEd+AgqZWkzuF4X6Av8M9MBe8asG4dDBsGo0fD8cfD/PnBT+dci9Po7ZVmtkXSaOBZgtsrp5jZIknjCL4qzAAGATdJMuAF4JJw8TbAi+FDThsIbrvcEr8Nl2Evvgg/+lHwINTvfgeXXur9zTjXgqV0H72ZzQRmxs0bGzM+DZiWYLmNBHfeuGzYupUeDz4IU6fC/vvDyy9DaWnUUTnnIpYXT8a6FGzaBCefTK/y8uBJ10mTghdrO+daPP8+XyjGjoXycpb88pfBGb0needcyBN9Iais3P6U6/unnBJ1NM65HOOJPt99/DGcfz4ccEBw4dU55+J4G32+u+QSWLUquPDq72F1ziXgiT6fPfpoMFx/PRx1VNTROOdylDfd5Kt334X//m/45jfhqquijsY5l8M80eejrVuDN0Jt2wYPPwyt/YuZcy45zxD56I474Pnn4YEHgtf+OedcA/yMPt+89lrwZqizzgrutnHOuUZ4os8nn30Gw4dDly7BC0P83a7OuRR4000+ufJKePPNoLvhvfaKOhrnXJ7wM/p88cwzMHEiXH45fO97UUfjnMsjnujzwZo1cNFFcNhhcOONUUfjnMsz3nST68zg4oth/fqgyaZdu6gjcs7lGU/0uW7yZPjLX4J+bA47LOponHN5KKWmG0lDJC2RVC3pK49hSuohqVzSAkmVkrrFlN0qaZGkxZLukvxWkZQtXQqXXRa8AvDSS6OOxjmXpxpN9JJaAZOAkwjeFnWepPi3Rt0OTDWzvsA44KZw2W8CAwneFXsocBTwnYxFX8g2b4Yf/xh23TV4MMpfBeica6JUsscAoNrMlpnZJqAMGBpXpw9QHo5XxJQb0A5oC+xK8A7ZD9INukW44Qb4z3/gvvugW7fG6zvnXBIys4YrSGcBQ8xsZDg9AjjazEbH1HkUeNXMJkgaBkwHis1sraTbgZGAgIlmdk2CbYwCRgGUlJSUlpWVZWbvmkFdXR1FRUXNuo09Xn+dwy+9lA9OOIE3d7LDsmzElw6PLz0eX3oKOb7BgwfPNbMjExaaWYMDcDYwOWZ6BHB3XJ2uwFPAPGACUAN0BA4A/g4UhcPLwHENba+0tNRyWUVFRfNuYMMGs169gqG2dqcXb/b40uTxpcfjS08hxwfMsSR5NZW7bmqA7jHT3YBVcR8Wq4BhAJKKgDPNrDY8U3/FzOrCsmeAY4AXUthuy3TppUEXxC+8AHvsEXU0zrkCkEob/Wygt6RektoC5wIzYitIKpZUv66rgSnh+ArgO5JaS2pDcCF2cWZCL0DTp8P998OYMTBwYNTROOcKRKOJ3sy2AKOBZwmS9BNmtkjSOEmnhdUGAUskvQWUAOPD+dOAt4GFwHxgvpn9NbO7UCBqa2HUKDjySBg7NuponHMFJKUHpsxsJjAzbt7YmPFpBEk9frmtwE/TjLFlmDgR1q0Lnn5t0ybqaJxzBcRvzs4Fn34Kd94JP/gBHHFE1NE45wqMJ/pccO+9sHYtXPOVO0+dcy5tnuijtnEj3HYbfPe7cOyxUUfjnCtA3qlZ1KZMgdWr4dFHo47EOVeg/Iw+Sps2wS23wDe/CYMGRR2Nc65A+Rl9lB5+GFasgHvu8fe/OueajZ/RR2XLFrjppuAumyFDoo7GOVfA/Iw+Kk8+CdXV8NRTfjbvnGtWfkYfhW3bYPx4OOQQGBrf47NzzmWWn9FH4S9/gUWL4JFH/IUizrlm51km28yCl4occAD88IdRR+OcawH8jD7b/vEPeO01+NOfoLUffudc8/Mz+mwyg+uvh/32C94H65xzWeCnlNlUWQkvvwyTJkHbtlFH45xrIfyMPpvGj4evfQ1+8pOoI3HOtSCe6LPl5ZehvBx+9Sto1y7qaJxzLUhKiV7SEElLJFVLuipBeQ9J5ZIWSKqU1C2cP1hSVcywUdLpmd6JvDB+PHTuDD/197A457Kr0UQvqRUwCTgJ6AOcJ6lPXLXbgalm1hcYB9wEYGYVZtbfzPoD3wU+A/6Zwfjzw7x58Pe/w+WXQ1FR1NE451qYVM7oBwDVZrbMzDYBZUD845x9gPJwvCJBOcBZwDNm9llTg81b48dDx44wenTUkTjnWiCZWcMVpLOAIWY2MpweARxtZqNj6jwKvGpmEyQNA6YDxWa2NqbOv4DfmdnfEmxjFDAKoKSkpLSsrCz9PWsmdXV1FO3EWXn7d95hwE9+wvIRI1iehYuwOxtftnl86fH40lPI8Q0ePHiumR2ZsNDMGhyAs4HJMdMjgLvj6nQFngLmAROAGqBjTPk+wBqgTWPbKy0ttVxWUVGxcwsMH262++5ma9Y0Szzxdjq+LPP40uPxpaeQ4wPmWJK8msp99DVA95jpbsCquA+LVcAwAElFwJlmVhtT5YfA02a2OYXtFY7qanjssaBtvrg46miccy1UKm30s4HeknpJagucC8yIrSCpWFL9uq4GpsSt4zzgsXSDzTu33AJt2sAvfxl1JM65FqzRRG9mW4DRwLPAYuAJM1skaZyk08Jqg4Alkt4CSoDx9ctL6knwjeD5jEae61asgAcfhJEjYZ99oo7GOdeCpdQFgpnNBGbGzRsbMz4NmJZk2eXAvk0PMU/ddlvQt80VV0QdiXOuhfMnY5vD6tXwxz/CBRcEHZg551yEPNE3hzvugM2b4aqvPETsnHNZ54k+0z76CP7wBzj33ODlIs45FzFP9Jk2YQJ8+imMGRN1JM45B3iiz6zaWrj7bhg2LHjxt3PO5QBP9Jk0aVKQ7K+5JupInHNuO0/0mbJ5M9x5J5x8MhxxRNTROOfcdp7oM2Xx4uBC7PDhUUfinHM78ESfKVVVwc/DD482Dueci+OJPlOqqmC33eAb34g6Euec24En+kypqoLDDoNWraKOxDnnduCJPhPMgkTfv3/UkTjn3Fd4os+ElSth/XpP9M65nOSJPhPqL8R6onfO5SBP9JlQVQVS0EbvnHM5xhN9JsyfH3RglsMvHXbOtVye6DPBL8Q653JYSole0hBJSyRVS/pKJ+uSekgql7RAUqWkbjFl+0n6p6TFkt4IXy1YOGprYdkyT/TOuZzVaKKX1AqYBJwE9AHOk9QnrtrtwFQz6wuMA26KKZsK3GZmBwMDgA8zEXjOWLAg+OmJ3jmXo1I5ox8AVJvZMjPbBJQBQ+Pq9AHKw/GK+vLwA6G1mT0HYGZ1ZvZZRiLPFX7HjXMux8nMGq4gnQUMMbOR4fQI4GgzGx1T51HgVTObIGkYMB0oBr4NjAQ2Ab2AWcBVZrY1bhujgFEAJSUlpWVlZRnavcyrq6ujKOai64G33krnl1/mpaeeCu68iVh8fLnG40uPx5eeQo5v8ODBc83syISFZtbgAJwNTI6ZHgHcHVenK/AUMA+YANQAHYGzgFpgf6A1wQfAfzW0vdLSUstlFRUVO8444gizE06IJJZEvhJfjvH40uPxpaeQ4wPmWJK8mkrTTQ3QPWa6G7Aq7sNilZkNM7PDgWvCebXhsvMsaPbZAvwZKJzO2jdvhtdf92Yb51xOSyXRzwZ6S+olqS1wLjAjtoKkYkn167oamBKzbCdJXcLp7wJvpB92jnjzTdi0yRO9cy6nNZrowzPx0cCzwGLgCTNbJGmcpNPCaoOAJZLeAkqA8eGyW4FfAeWSFgIC/pjxvYhK/YXYfv2ijcM55xrQOpVKZjYTmBk3b2zM+DRgWpJlnwP6phFj7po/H3bdFQ48MOpInHMuKX8yNh31fdC3Tunz0jnnIuGJvqm8D3rnXJ7wRN9U770Ha9d6onfO5TxP9E3lT8Q65/KEJ/qmqk/0fQvzOrNzrnB4om+qqqqgD/oOHaKOxDnnGuSJvqn8QqxzLk94om+KDRvg7bc90Tvn8oIn+qZYuDD46U/EOufygCf6pvA7bpxzecQTfVNUVUHnzrDvvlFH4pxzjfJE3xT1F2Jz4EUjzjnXGE/0O0lbtwZt9N5s45zLE57od9JuK1bAF194onfO5Q1P9DupqLo6GPFE75zLE57od1LR2297H/TOubySUqKXNETSEknVkq5KUN5DUrmkBZIqJXWLKdsqqSocZsQvm2+Kqqvh0EOhTZuoQ3HOuZQ0mugltQImAScBfYDzJPWJq3Y7MNXM+gLjgJtiyj43s/7hcBr5zCxI9P6glHMuj6RyRj8AqDazZWa2CSgDhsbV6QOUh+MVCcoLw/vv07a21tvnnXN5JZV34O0LrIyZrgGOjqszHzgTmACcAXSQ1NnM1gLtJM0BtgA3m9mf4zcgaRQwCqCkpITKysqd3Y+s2OuVV+gLzDOjNkdjrKury9njBx5fujy+9LTY+MyswQE4G5gcMz0CuDuuTlfgKWAeQbKvATrWl4U/9weWA19vaHulpaWWs8aPNwOzjz+OOpKkKioqog6hQR5fejy+9BRyfMAcS5JXUzmjrwG6x0x3A1bFfVisAoYBSCoCzjSz2pgyzGyZpErgcODtnfkwyhlVVXzetSu7dewYdSTOOZeyVNroZwO9JfWS1BY4F9jh7hlJxZLq13U1MCWc30nSrvV1gIHAG5kKPuuqqqj7+tejjsI553ZKo4nezLYAo4FngcXAE2a2SNI4SfV30QwClkh6CygBxofzDwbmSJpPcJH2ZjPLz0T/ySdQXU3dAQdEHYlzzu2UVJpuMLOZwMy4eWNjxqcB0xIs9xJwWJox5oaFC8HME71zLu/4k7GpCvug90TvnMs3nuhTVVUFnTrxRZcuUUfinHM7xRN9qubP9z7onXN5yRN9KrZsgQUL/IlY51xe8kSfiqVLYeNGT/TOubzkiT4V/jJw51we8zw4Hb8AABB1SURBVESfiqoqaNsWDjoo6kicc26neaJPRVUVHHJIkOydcy7PeKJvjBnMm+fNNs65vOWJvjGrV8OaNZ7onXN5yxN9Y/xCrHMuz3mib8z8+cHPvn2jjcM555rIE31jqqqgZ0/Yc8+oI3HOuSbxRN+YqipvtnHO5TVP9A359FN46y1P9M65vOaJviFhH/Se6J1z+SylRC9piKQlkqolXZWgvIekckkLJFVK6hZXvoek9yRNzFTgWeF33DjnCkCjiV5SK2AScBLQBzhPUp+4arcDU82sLzAOuCmu/Hrg+fTDzbKqquAi7H77RR2Jc841WSpn9AOAajNbZmabgDJgaFydPkB5OF4RWy6plOA9sv9MP9wsq78Q633QO+fymMys4QrSWcAQMxsZTo8Ajjaz0TF1HgVeNbMJkoYB04FiYD3wL2AEcDxwZOxyMcuPAkYBlJSUlJaVlWVi39KzdSvf/sEPWHXqqbx9ySXbZ9fV1VFUVBRhYA3z+NLj8aXH40tPOvENHjx4rpkdmbDQzBocgLOByTHTI4C74+p0BZ4C5gETgBqgIzAauCKscyEwsbHtlZaWWk5YvNgMzO6/f4fZFRUVkYSTKo8vPR5fejy+9KQTHzDHkuTV1il8UNQA3WOmuwGr4j4sVgHDACQVAWeaWa2kY4FvS/pvoAhoK6nOzL5yQTfn1D8R6xdinXN5LpVEPxvoLakX8B5wLvCj2AqSioF1ZrYNuBqYAmBmw2PqXEjQdJP7SR6C9vk2baBP/HVn55zLL41ejDWzLQRNMM8Ci4EnzGyRpHGSTgurDQKWSHqL4MLr+GaKN3uqqoIk733QO+fyXCpn9JjZTGBm3LyxMePTgGmNrOMB4IGdjjAqVVXw/e9HHYVzzqXNn4xNZPXqYPD2eedcAfBEn4hfiHXOFRBP9InUd33Qr1+0cTjnXAZ4ok+kqgp69IBOnaKOxDnn0uaJPpGqKj+bd84VDE/08T77zPugd84VFE/08V5/HbZt80TvnCsYnujjeR/0zrkC44k+XlUV7LFH8EJw55wrAJ7o43kf9M65AuOJPtbWrbBggTfbOOcKiif6WG+/DZ9+6oneOVdQPNHH8guxzrkC5Ik+VlUVtG7tfdA75wqKJ/pY8+fDwQfDrrtGHYlzzmWMJ/pY9XfcOOdcAUkp0UsaImmJpGpJX3kVoKQeksolLZBUKalbzPy5kqokLZL0s0zvQMa8/jqsWgWlpVFH4pxzGdVoopfUCpgEnAT0Ac6TFN+IfTsw1cz6AuOAm8L57wPfNLP+wNHAVZK6Zir4jLr+eujQAUaMiDoS55zLqFTO6AcA1Wa2zMw2AWXA0Lg6fYDycLyivtzMNpnZF+H8XVPcXva98QY8+ST84hew115RR+OccxmVSuLdF1gZM10Tzos1HzgzHD8D6CCpM4Ck7pIWhOu4xcxWpRdyMxg/Htq3h8svjzoS55zLOJlZwxWks4Hvm9nIcHoEMMDMfhFTpyswEegFvECQ9A8xs9q4On8GTjWzD+K2MQoYBVBSUlJaVlaWgV1LzW4rVjDgootY+cMfsuynP220fl1dHUVFRVmIrGk8vvR4fOnx+NKTTnyDBw+ea2ZHJiw0swYH4Fjg2Zjpq4GrG6hfBNQkKbsfOKuh7ZWWllpWjRhh1r692QcfpFS9oqKieeNJk8eXHo8vPR5fetKJD5hjSfJqKk03s4HeknpJagucC8yIrSCpWFL9uq4GpoTzu0naLRzvBAwElqT6CdXsli6FRx6Bn/8c9t476micc65ZNJrozWwLMBp4FlgMPGFmiySNk3RaWG0QsETSW0AJMD6cfzDwqqT5wPPA7Wa2MMP70HQ33ght28Kvfx11JM4512xap1LJzGYCM+PmjY0ZnwZMS7Dcc0DfNGNsHsuWwUMPBXfalJREHY1zzjWb3LzdMRtuvDHo18bP5p1zBa5lJvrly+HBB2HUKOiam89vOedcprTMRH/TTbDLLnDFFVFH4pxzza7lJfoVK+D++2HkSOjWLeponHOu2bW8RH/LLcHPK6+MNg7nnMuSlpXoa2pg8mS46CLYb7+oo3HOuaxoWYn+1lth2za4+uqoI3HOuaxpOYl+1Sq47z644ALo2TPqaJxzLmtaTqK/7TbYsgXGjIk6Euecy6qWkehXr4Z77gleKrL//lFH45xzWdUyEv3tt8OmTX4275xrkQo/0X/4IfzhDzB8OPTuHXU0zjmXdYWf6O+4AzZuhGuuiToS55yLRGEn+o8+gkmT4Nxz4cADo47GOeciUdiJ/s474bPP/GzeOdeiFW6iX7cO7r4bzj4b+vSJOhrnnItM4Sb63/8ePvkErrsu6kiccy5SKSV6SUMkLZFULemqBOU9JJVLWiCpUlK3cH5/SS9LWhSWnZPpHUho/XqYMAHOPBMOPTQrm3TOuVzVaKKX1AqYBJwE9AHOkxTfFnI7MNXM+gLjgJvC+Z8B55vZIcAQ4PeS9sxU8EnddRds2OBn8845R2pn9AOAajNbZmabgDJgaFydPkB5OF5RX25mb5nZ0nB8FfAh0CUTgSdVWxs025x+OvTr16ybcs65fCAza7iCdBYwxMxGhtMjgKPNbHRMnUeBV81sgqRhwHSg2MzWxtQZADwIHGJm2+K2MQoYBVBSUlJaVlbW5B3q8dBD9JoyhTn33kvdN77R5PUkU1dXR1FRUcbXmykeX3o8vvR4fOlJJ77BgwfPNbMjExaaWYMDcDYwOWZ6BHB3XJ2uwFPAPGACUAN0jCnfB1gCHNPY9kpLS63JNmww69TJ7NRTm76ORlRUVDTbujPB40uPx5cejy896cQHzLEkebV1Ch8UNUD3mOluwKq4D4tVwDAASUXAmWZWG07vAfwduNbMXklhe003cWJwIXbs2GbdjHPO5ZNU2uhnA70l9ZLUFjgXmBFbQVKxpPp1XQ1MCee3BZ4muFD7ZObCTqCuLuju4OST4cjE316cc64lajTRm9kWYDTwLLAYeMLMFkkaJ+m0sNogYImkt4ASYHw4/4fAccCFkqrCoX+mdwII7rIZNMjvtHHOuTipNN1gZjOBmXHzxsaMTwOmJVjuYeDhNGNMTdeuMO0rITjnXItXuE/GOuecAzzRO+dcwfNE75xzBc4TvXPOFThP9M45V+A80TvnXIHzRO+ccwXOE71zzhW4RnuvzDZJa4B3o46jAcXAR1EH0QCPLz0eX3o8vvSkE18PM0vYDXzOJfpcJ2mOJesKNAd4fOnx+NLj8aWnueLzphvnnCtwnuidc67AeaLfefdFHUAjPL70eHzp8fjS0yzxeRu9c84VOD+jd865AueJ3jnnCpwn+jiSukuqkLRY0iJJlyaoM0hSbcxbs7L+klpJyyUtDLc/J0G5JN0lqVrSAklHZDG2A2OOTZWkDZIui6uT1WMoaYqkDyW9HjNvL0nPSVoa/uyUZNkLwjpLJV2Qxfhuk/Rm+Pt7WtKeSZZt8G+hGeP7raT3Yn6HJydZdoikJeHf4lVZjO/xmNiWS6pKsmw2jl/CvJK1v8Fkbw1vqQOwD3BEON4BeAvoE1dnEPC3iONcDhQ3UH4y8Awg4Bjg1YjibAWsJniYI7JjSPBKyyOA12Pm3QpcFY5fBdySYLm9gGXhz07heKcsxXci0DocvyVRfKn8LTRjfL8FfpXC7/9tYH+gLTA//v+pueKLK78DGBvh8UuYV7L1N+hn9HHM7H0zey0c/4TgPbn7RhtVkwwleCm7mdkrwJ6S9okgjuOBt80s0qedzewFYF3c7KHAg+H4g8DpCRb9PvCcma0zs/XAc8CQbMRnZv+04J3NAK8A3TK93VQlOX6pGABUm9kyM9sElBEc94xqKD5JInh/9WOZ3m6qGsgrWfkb9ETfAEk9gcOBVxMUHytpvqRnJB2S1cACBvxT0lxJoxKU7wusjJmuIZoPrHNJ/g8W9TEsMbP3IfhHBPZOUCdXjuNPCL6hJdLY30JzGh02LU1J0uyQC8fv28AHZrY0SXlWj19cXsnK36An+iQkFQHTgcvMbENc8WsETRH9gLuBP2c7PmCgmR0BnARcIum4uHIlWCar99JKagucBjyZoDgXjmEqcuE4XgNsAR5JUqWxv4Xm8gfg60B/4H2C5pF4kR8/4DwaPpvP2vFrJK8kXSzBvJ06hp7oE5DUhuCX8YiZPRVfbmYbzKwuHJ8JtJFUnM0YzWxV+PND4GmCr8ixaoDuMdPdgFXZiW67k4DXzOyD+IJcOIbAB/XNWeHPDxPUifQ4hhfeTgGGW9hgGy+Fv4VmYWYfmNlWM9sG/DHJdqM+fq2BYcDjyepk6/glyStZ+Rv0RB8nbM/7E7DYzH6XpM7XwnpIGkBwHNdmMcbdJXWoHye4aPd6XLUZwPnh3TfHALX1XxGzKOmZVNTHMDQDqL+D4QLgLwnqPAucKKlT2DRxYjiv2UkaAlwJnGZmnyWpk8rfQnPFF3vN54wk250N9JbUK/yGdy7Bcc+W7wFvmllNosJsHb8G8kp2/gab80pzPg7Atwi+Fi0AqsLhZOBnwM/COqOBRQR3ELwCfDPLMe4fbnt+GMc14fzYGAVMIrjjYSFwZJZjbE+QuDvGzIvsGBJ84LwPbCY4Q/ovoDNQDiwNf+4V1j0SmByz7E+A6nC4KIvxVRO0zdb/Hd4T1u0KzGzobyFL8T0U/m0tIEhY+8THF06fTHCXydvZjC+c/0D931xM3SiOX7K8kpW/Qe8CwTnnCpw33TjnXIHzRO+ccwXOE71zzhU4T/TOOVfgPNE751yB80TvCoIkk/RQzHRrSWsk/S0D667vaXNe2AvjC5JOSWN9PSX9KGb6QkkT043TuWQ80btC8SlwqKTdwukTgPcyuP4XzexwMzsQ+B9goqTjm7iunsCPGqvkXKZ4oneF5BngB+H4Dk/lShog6aXwrPwlSQeG8/9X0pRw/DBJr0tq39BGzKwKGEfw0BeSukiaLml2OAwM5/9W0kOS/hX2I35xuIqbgW+H/Z9fHs7rKukfYb1bM3M4nAt4oneFpAw4V1I7oC879jr6JnCcmR0OjAVuDOf/HjhA0hnA/cBPLUl3A3FeAw4KxycAd5rZUcCZwOSYen0JPnyOBcZK6krQ7/iLZtbfzO4M6/UHzgEOA86RFNu3iXNpaR11AM5lipktCLuAPQ+YGVfcEXhQUm+CR9HbhMtsk3QhwaPp95rZv1PcXGyPgt8D+oRd9wDsUd9/CvAXM/sc+FxSBUGHWR8nWF+5mdUCSHoD6MGOXdM612Se6F2hmQHcTvAGq84x868HKszsjPDDoDKmrDdQR9AHSqoOJ3h5BATfjI8NE/p2YeKP72MkWZ8jX8SMb8X/N10GedONKzRTgHFmtjBufke+vDh7Yf1MSR0Jml6OAzpLOquxDUjqC1xH0GkcwD8J2+vD8v4x1YdKaiepM8GHz2zgE4LXyTmXFZ7oXUExsxozm5Cg6FbgJkn/JniPab07gf/fzN4i6JHxZkmJ3vLz7frbKwkS/P+YWXlY9j/AkeGblt4g6KWz3n+AvxP00Hm9BX2fLwC2KHi71uU418y890rnmomk3wJ1ZnZ71LG4ls3P6J1zrsD5Gb1zzhU4P6N3zrkC54neOecKnCd655wrcJ7onXOuwHmid865Avf/ACa7xy1wga8nAAAAAElFTkSuQmCC",
+ "image/png": "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",
"text/plain": [
"<Figure size 432x288 with 1 Axes>"
]
@@ -228,6 +287,13 @@
"needs_background": "light"
},
"output_type": "display_data"
+ },
+ {
+ "name": "stdout",
+ "output_type": "stream",
+ "text": [
+ "max depth at the level of 10\n"
+ ]
}
],
"source": [
@@ -239,7 +305,10 @@
"plt.grid(True)\n",
"plt.legend()\n",
"plt.savefig('./output/decision tree max depth.png')\n",
- "plt.show()"
+ "plt.show()\n",
+ "\n",
+ "idx_max = plot_vec.idxmax(0)\n",
+ "print(f\"max depth at the level of {idx_max[1]+1}\")"
]
},
{
@@ -249,9 +318,9 @@
"outputs": [
{
"data": {
- "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\r\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\r\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\r\n -->\r\n<!-- Title: Tree Pages: 1 -->\r\n<svg width=\"4955pt\" height=\"1385pt\"\r\n viewBox=\"0.00 0.00 4955.00 1385.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\r\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1381)\">\r\n<title>Tree</title>\r\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1381 4951,-1381 4951,4 -4,4\"/>\r\n<!-- 0 -->\r\n<g id=\"node1\" class=\"node\"><title>0</title>\r\n<path fill=\"#fcefe7\" stroke=\"black\" d=\"M2914,-1377C2914,-1377 2792,-1377 2792,-1377 2786,-1377 2780,-1371 2780,-1365 2780,-1365 2780,-1306 2780,-1306 2780,-1300 2786,-1294 2792,-1294 2792,-1294 2914,-1294 2914,-1294 2920,-1294 2926,-1300 2926,-1306 2926,-1306 2926,-1365 2926,-1365 2926,-1371 2920,-1377 2914,-1377\"/>\r\n<text text-anchor=\"start\" x=\"2800\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\r\n<text text-anchor=\"start\" x=\"2803\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.997</text>\r\n<text text-anchor=\"start\" x=\"2797\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17634</text>\r\n<text text-anchor=\"start\" x=\"2788\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9396, 8238]</text>\r\n<text text-anchor=\"start\" x=\"2806\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 1 -->\r\n<g id=\"node2\" class=\"node\"><title>1</title>\r\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M1982,-1258C1982,-1258 1868,-1258 1868,-1258 1862,-1258 1856,-1252 1856,-1246 1856,-1246 1856,-1187 1856,-1187 1856,-1181 1862,-1175 1868,-1175 1868,-1175 1982,-1175 1982,-1175 1988,-1175 1994,-1181 1994,-1187 1994,-1187 1994,-1246 1994,-1246 1994,-1252 1988,-1258 1982,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1890\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 8.5</text>\r\n<text text-anchor=\"start\" x=\"1875\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.393</text>\r\n<text text-anchor=\"start\" x=\"1873.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8156</text>\r\n<text text-anchor=\"start\" x=\"1864\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [632, 7524]</text>\r\n<text text-anchor=\"start\" x=\"1870\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 0->1 -->\r\n<g id=\"edge1\" class=\"edge\"><title>0->1</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2779.79,-1325.27C2608.29,-1303.65 2181.64,-1249.86 2004.28,-1227.5\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2004.59,-1224.01 1994.24,-1226.23 2003.72,-1230.95 2004.59,-1224.01\"/>\r\n<text text-anchor=\"middle\" x=\"2009.56\" y=\"-1242.28\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\r\n</g>\r\n<!-- 62 -->\r\n<g id=\"node63\" class=\"node\"><title>62</title>\r\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M3945.5,-1258C3945.5,-1258 3830.5,-1258 3830.5,-1258 3824.5,-1258 3818.5,-1252 3818.5,-1246 3818.5,-1246 3818.5,-1187 3818.5,-1187 3818.5,-1181 3824.5,-1175 3830.5,-1175 3830.5,-1175 3945.5,-1175 3945.5,-1175 3951.5,-1175 3957.5,-1181 3957.5,-1187 3957.5,-1187 3957.5,-1246 3957.5,-1246 3957.5,-1252 3951.5,-1258 3945.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3838\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.386</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9478</text>\r\n<text text-anchor=\"start\" x=\"3827\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8764, 714]</text>\r\n<text text-anchor=\"start\" x=\"3841\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 0->62 -->\r\n<g id=\"edge62\" class=\"edge\"><title>0->62</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2926.19,-1326.23C3114.25,-1304.97 3613.24,-1248.56 3808.28,-1226.51\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3808.91,-1229.96 3818.45,-1225.36 3808.12,-1223.01 3808.91,-1229.96\"/>\r\n<text text-anchor=\"middle\" x=\"3802.87\" y=\"-1241.21\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\r\n</g>\r\n<!-- 2 -->\r\n<g id=\"node3\" class=\"node\"><title>2</title>\r\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M1412,-1139C1412,-1139 1298,-1139 1298,-1139 1292,-1139 1286,-1133 1286,-1127 1286,-1127 1286,-1068 1286,-1068 1286,-1062 1292,-1056 1298,-1056 1298,-1056 1412,-1056 1412,-1056 1418,-1056 1424,-1062 1424,-1068 1424,-1068 1424,-1127 1424,-1127 1424,-1133 1418,-1139 1412,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1310\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 16.5</text>\r\n<text text-anchor=\"start\" x=\"1305\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\r\n<text text-anchor=\"start\" x=\"1303.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1775</text>\r\n<text text-anchor=\"start\" x=\"1294\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [610, 1165]</text>\r\n<text text-anchor=\"start\" x=\"1300\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1->2 -->\r\n<g id=\"edge2\" class=\"edge\"><title>1->2</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1855.96,-1201.33C1749.65,-1179.51 1546.44,-1137.8 1434.27,-1114.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1434.86,-1111.32 1424.37,-1112.74 1433.46,-1118.18 1434.86,-1111.32\"/>\r\n</g>\r\n<!-- 51 -->\r\n<g id=\"node52\" class=\"node\"><title>51</title>\r\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M2026,-1139C2026,-1139 1824,-1139 1824,-1139 1818,-1139 1812,-1133 1812,-1127 1812,-1127 1812,-1068 1812,-1068 1812,-1062 1818,-1056 1824,-1056 1824,-1056 2026,-1056 2026,-1056 2032,-1056 2038,-1062 2038,-1068 2038,-1068 2038,-1127 2038,-1127 2038,-1133 2032,-1139 2026,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1820\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.835</text>\r\n<text text-anchor=\"start\" x=\"1875\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.033</text>\r\n<text text-anchor=\"start\" x=\"1873.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6381</text>\r\n<text text-anchor=\"start\" x=\"1868\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 6359]</text>\r\n<text text-anchor=\"start\" x=\"1870\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1->51 -->\r\n<g id=\"edge51\" class=\"edge\"><title>1->51</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1925,-1174.91C1925,-1166.65 1925,-1157.86 1925,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1928.5,-1149.02 1925,-1139.02 1921.5,-1149.02 1928.5,-1149.02\"/>\r\n</g>\r\n<!-- 3 -->\r\n<g id=\"node4\" class=\"node\"><title>3</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M492,-1020C492,-1020 390,-1020 390,-1020 384,-1020 378,-1014 378,-1008 378,-1008 378,-949 378,-949 378,-943 384,-937 390,-937 390,-937 492,-937 492,-937 498,-937 504,-943 504,-949 504,-949 504,-1008 504,-1008 504,-1014 498,-1020 492,-1020\"/>\r\n<text text-anchor=\"start\" x=\"400\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"391\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.377</text>\r\n<text text-anchor=\"start\" x=\"389.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1028</text>\r\n<text text-anchor=\"start\" x=\"388\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 953]</text>\r\n<text text-anchor=\"start\" x=\"386\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 2->3 -->\r\n<g id=\"edge3\" class=\"edge\"><title>2->3</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1285.93,-1087.66C1117.52,-1066.1 686.994,-1010.99 514.298,-988.883\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"514.652,-985.4 504.289,-987.602 513.763,-992.343 514.652,-985.4\"/>\r\n</g>\r\n<!-- 16 -->\r\n<g id=\"node17\" class=\"node\"><title>16</title>\r\n<path fill=\"#efb387\" stroke=\"black\" d=\"M1456,-1020C1456,-1020 1254,-1020 1254,-1020 1248,-1020 1242,-1014 1242,-1008 1242,-1008 1242,-949 1242,-949 1242,-943 1248,-937 1254,-937 1254,-937 1456,-937 1456,-937 1462,-937 1468,-943 1468,-949 1468,-949 1468,-1008 1468,-1008 1468,-1014 1462,-1020 1456,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1250\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.535</text>\r\n<text text-anchor=\"start\" x=\"1305\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.861</text>\r\n<text text-anchor=\"start\" x=\"1307.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 747</text>\r\n<text text-anchor=\"start\" x=\"1298\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [535, 212]</text>\r\n<text text-anchor=\"start\" x=\"1308\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 2->16 -->\r\n<g id=\"edge16\" class=\"edge\"><title>2->16</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1355,-1055.91C1355,-1047.65 1355,-1038.86 1355,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1358.5,-1030.02 1355,-1020.02 1351.5,-1030.02 1358.5,-1030.02\"/>\r\n</g>\r\n<!-- 4 -->\r\n<g id=\"node5\" class=\"node\"><title>4</title>\r\n<path fill=\"#eda775\" stroke=\"black\" d=\"M251,-901C251,-901 159,-901 159,-901 153,-901 147,-895 147,-889 147,-889 147,-830 147,-830 147,-824 153,-818 159,-818 159,-818 251,-818 251,-818 257,-818 263,-824 263,-830 263,-830 263,-889 263,-889 263,-895 257,-901 251,-901\"/>\r\n<text text-anchor=\"start\" x=\"156\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"155\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.781</text>\r\n<text text-anchor=\"start\" x=\"161.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 95</text>\r\n<text text-anchor=\"start\" x=\"156.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [73, 22]</text>\r\n<text text-anchor=\"start\" x=\"158\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 3->4 -->\r\n<g id=\"edge4\" class=\"edge\"><title>3->4</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M377.756,-946.146C345.183,-929.998 305.457,-910.303 272.316,-893.873\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"273.669,-890.637 263.155,-889.331 270.56,-896.909 273.669,-890.637\"/>\r\n</g>\r\n<!-- 11 -->\r\n<g id=\"node12\" class=\"node\"><title>11</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M498,-901C498,-901 384,-901 384,-901 378,-901 372,-895 372,-889 372,-889 372,-830 372,-830 372,-824 378,-818 384,-818 384,-818 498,-818 498,-818 504,-818 510,-824 510,-830 510,-830 510,-889 510,-889 510,-895 504,-901 498,-901\"/>\r\n<text text-anchor=\"start\" x=\"380\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 0.835</text>\r\n<text text-anchor=\"start\" x=\"391\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.022</text>\r\n<text text-anchor=\"start\" x=\"393.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 933</text>\r\n<text text-anchor=\"start\" x=\"392.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 931]</text>\r\n<text text-anchor=\"start\" x=\"386\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 3->11 -->\r\n<g id=\"edge11\" class=\"edge\"><title>3->11</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M441,-936.907C441,-928.649 441,-919.864 441,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"444.5,-911.021 441,-901.021 437.5,-911.021 444.5,-911.021\"/>\r\n</g>\r\n<!-- 5 -->\r\n<g id=\"node6\" class=\"node\"><title>5</title>\r\n<path fill=\"#78bced\" stroke=\"black\" d=\"M120,-782C120,-782 18,-782 18,-782 12,-782 6,-776 6,-770 6,-770 6,-711 6,-711 6,-705 12,-699 18,-699 18,-699 120,-699 120,-699 126,-699 132,-705 132,-711 132,-711 132,-770 132,-770 132,-776 126,-782 120,-782\"/>\r\n<text text-anchor=\"start\" x=\"39.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"19\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.797</text>\r\n<text text-anchor=\"start\" x=\"25.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"24.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 22]</text>\r\n<text text-anchor=\"start\" x=\"14\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4->5 -->\r\n<g id=\"edge5\" class=\"edge\"><title>4->5</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M157.815,-817.907C146.845,-808.469 135.074,-798.343 123.806,-788.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"125.964,-785.889 116.101,-782.021 121.399,-791.196 125.964,-785.889\"/>\r\n</g>\r\n<!-- 10 -->\r\n<g id=\"node11\" class=\"node\"><title>10</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M248,-774.5C248,-774.5 162,-774.5 162,-774.5 156,-774.5 150,-768.5 150,-762.5 150,-762.5 150,-718.5 150,-718.5 150,-712.5 156,-706.5 162,-706.5 162,-706.5 248,-706.5 248,-706.5 254,-706.5 260,-712.5 260,-718.5 260,-718.5 260,-762.5 260,-762.5 260,-768.5 254,-774.5 248,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"163\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"161.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\r\n<text text-anchor=\"start\" x=\"160.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 0]</text>\r\n<text text-anchor=\"start\" x=\"158\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 4->10 -->\r\n<g id=\"edge10\" class=\"edge\"><title>4->10</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M205,-817.907C205,-807.204 205,-795.615 205,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"208.5,-784.667 205,-774.667 201.5,-784.667 208.5,-784.667\"/>\r\n</g>\r\n<!-- 6 -->\r\n<g id=\"node7\" class=\"node\"><title>6</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M114,-655.5C114,-655.5 12,-655.5 12,-655.5 6,-655.5 0,-649.5 0,-643.5 0,-643.5 0,-599.5 0,-599.5 0,-593.5 6,-587.5 12,-587.5 12,-587.5 114,-587.5 114,-587.5 120,-587.5 126,-593.5 126,-599.5 126,-599.5 126,-643.5 126,-643.5 126,-649.5 120,-655.5 114,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"21\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"19.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"18.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\r\n<text text-anchor=\"start\" x=\"8\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 5->6 -->\r\n<g id=\"edge6\" class=\"edge\"><title>5->6</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M66.9183,-698.907C66.3694,-688.204 65.7751,-676.615 65.2193,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"68.7085,-665.475 64.7009,-655.667 61.7177,-665.833 68.7085,-665.475\"/>\r\n</g>\r\n<!-- 7 -->\r\n<g id=\"node8\" class=\"node\"><title>7</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M290,-663C290,-663 156,-663 156,-663 150,-663 144,-657 144,-651 144,-651 144,-592 144,-592 144,-586 150,-580 156,-580 156,-580 290,-580 290,-580 296,-580 302,-586 302,-592 302,-592 302,-651 302,-651 302,-657 296,-663 290,-663\"/>\r\n<text text-anchor=\"start\" x=\"152\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 19.0</text>\r\n<text text-anchor=\"start\" x=\"181\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"179.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"182.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 7]</text>\r\n<text text-anchor=\"start\" x=\"176\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 5->7 -->\r\n<g id=\"edge7\" class=\"edge\"><title>5->7</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M122.43,-698.907C135.091,-689.288 148.694,-678.953 161.676,-669.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"163.82,-671.857 169.665,-663.021 159.585,-666.283 163.82,-671.857\"/>\r\n</g>\r\n<!-- 8 -->\r\n<g id=\"node9\" class=\"node\"><title>8</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M224,-536.5C224,-536.5 122,-536.5 122,-536.5 116,-536.5 110,-530.5 110,-524.5 110,-524.5 110,-480.5 110,-480.5 110,-474.5 116,-468.5 122,-468.5 122,-468.5 224,-468.5 224,-468.5 230,-468.5 236,-474.5 236,-480.5 236,-480.5 236,-524.5 236,-524.5 236,-530.5 230,-536.5 224,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"131\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"133.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"132.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"118\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 7->8 -->\r\n<g id=\"edge8\" class=\"edge\"><title>7->8</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M205.653,-579.907C200.984,-568.983 195.922,-557.137 191.208,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"194.322,-544.487 187.174,-536.667 187.885,-547.238 194.322,-544.487\"/>\r\n</g>\r\n<!-- 9 -->\r\n<g id=\"node10\" class=\"node\"><title>9</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M352,-536.5C352,-536.5 266,-536.5 266,-536.5 260,-536.5 254,-530.5 254,-524.5 254,-524.5 254,-480.5 254,-480.5 254,-474.5 260,-468.5 266,-468.5 266,-468.5 352,-468.5 352,-468.5 358,-468.5 364,-474.5 364,-480.5 364,-480.5 364,-524.5 364,-524.5 364,-530.5 358,-536.5 352,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"267\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"269.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"268.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\r\n<text text-anchor=\"start\" x=\"262\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7->9 -->\r\n<g id=\"edge9\" class=\"edge\"><title>7->9</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M252.837,-579.907C261.191,-568.542 270.279,-556.178 278.662,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"281.518,-546.797 284.621,-536.667 275.878,-542.652 281.518,-546.797\"/>\r\n</g>\r\n<!-- 12 -->\r\n<g id=\"node13\" class=\"node\"><title>12</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M392,-774.5C392,-774.5 290,-774.5 290,-774.5 284,-774.5 278,-768.5 278,-762.5 278,-762.5 278,-718.5 278,-718.5 278,-712.5 284,-706.5 290,-706.5 290,-706.5 392,-706.5 392,-706.5 398,-706.5 404,-712.5 404,-718.5 404,-718.5 404,-762.5 404,-762.5 404,-768.5 398,-774.5 392,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"299\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"293.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 891</text>\r\n<text text-anchor=\"start\" x=\"292.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 891]</text>\r\n<text text-anchor=\"start\" x=\"286\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11->12 -->\r\n<g id=\"edge12\" class=\"edge\"><title>11->12</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M406.305,-817.907C396.497,-806.432 385.819,-793.938 375.993,-782.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"378.506,-779.995 369.348,-774.667 373.184,-784.543 378.506,-779.995\"/>\r\n</g>\r\n<!-- 13 -->\r\n<g id=\"node14\" class=\"node\"><title>13</title>\r\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M628,-782C628,-782 434,-782 434,-782 428,-782 422,-776 422,-770 422,-770 422,-711 422,-711 422,-705 428,-699 434,-699 434,-699 628,-699 628,-699 634,-699 640,-705 640,-711 640,-711 640,-770 640,-770 640,-776 634,-782 628,-782\"/>\r\n<text text-anchor=\"start\" x=\"430\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"481\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"487.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\r\n<text text-anchor=\"start\" x=\"486.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 40]</text>\r\n<text text-anchor=\"start\" x=\"476\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11->13 -->\r\n<g id=\"edge13\" class=\"edge\"><title>11->13</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M472.225,-817.907C479.136,-808.923 486.527,-799.315 493.654,-790.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"496.507,-792.081 499.83,-782.021 490.959,-787.813 496.507,-792.081\"/>\r\n</g>\r\n<!-- 14 -->\r\n<g id=\"node15\" class=\"node\"><title>14</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M446,-655.5C446,-655.5 344,-655.5 344,-655.5 338,-655.5 332,-649.5 332,-643.5 332,-643.5 332,-599.5 332,-599.5 332,-593.5 338,-587.5 344,-587.5 344,-587.5 446,-587.5 446,-587.5 452,-587.5 458,-593.5 458,-599.5 458,-599.5 458,-643.5 458,-643.5 458,-649.5 452,-655.5 446,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"353\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"351.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 40</text>\r\n<text text-anchor=\"start\" x=\"350.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 40]</text>\r\n<text text-anchor=\"start\" x=\"340\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 13->14 -->\r\n<g id=\"edge14\" class=\"edge\"><title>13->14</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M483.815,-698.907C470.091,-687.101 455.115,-674.217 441.437,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"443.416,-659.535 433.553,-655.667 438.851,-664.842 443.416,-659.535\"/>\r\n</g>\r\n<!-- 15 -->\r\n<g id=\"node16\" class=\"node\"><title>15</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M574,-655.5C574,-655.5 488,-655.5 488,-655.5 482,-655.5 476,-649.5 476,-643.5 476,-643.5 476,-599.5 476,-599.5 476,-593.5 482,-587.5 488,-587.5 488,-587.5 574,-587.5 574,-587.5 580,-587.5 586,-593.5 586,-599.5 586,-599.5 586,-643.5 586,-643.5 586,-649.5 580,-655.5 574,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"489\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"491.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"490.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"484\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 13->15 -->\r\n<g id=\"edge15\" class=\"edge\"><title>13->15</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M531,-698.907C531,-688.204 531,-676.615 531,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"534.5,-665.667 531,-655.667 527.5,-665.667 534.5,-665.667\"/>\r\n</g>\r\n<!-- 17 -->\r\n<g id=\"node18\" class=\"node\"><title>17</title>\r\n<path fill=\"#b6dbf5\" stroke=\"black\" d=\"M1238,-901C1238,-901 1132,-901 1132,-901 1126,-901 1120,-895 1120,-889 1120,-889 1120,-830 1120,-830 1120,-824 1126,-818 1132,-818 1132,-818 1238,-818 1238,-818 1244,-818 1250,-824 1250,-830 1250,-830 1250,-889 1250,-889 1250,-895 1244,-901 1238,-901\"/>\r\n<text text-anchor=\"start\" x=\"1136\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"1135\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.963</text>\r\n<text text-anchor=\"start\" x=\"1137.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 326</text>\r\n<text text-anchor=\"start\" x=\"1128\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [126, 200]</text>\r\n<text text-anchor=\"start\" x=\"1130\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 16->17 -->\r\n<g id=\"edge17\" class=\"edge\"><title>16->17</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1296.02,-936.907C1281.91,-927.197 1266.74,-916.758 1252.29,-906.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1254.1,-903.807 1243.88,-901.021 1250.13,-909.573 1254.1,-903.807\"/>\r\n</g>\r\n<!-- 40 -->\r\n<g id=\"node41\" class=\"node\"><title>40</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M1603.5,-901C1603.5,-901 1442.5,-901 1442.5,-901 1436.5,-901 1430.5,-895 1430.5,-889 1430.5,-889 1430.5,-830 1430.5,-830 1430.5,-824 1436.5,-818 1442.5,-818 1442.5,-818 1603.5,-818 1603.5,-818 1609.5,-818 1615.5,-824 1615.5,-830 1615.5,-830 1615.5,-889 1615.5,-889 1615.5,-895 1609.5,-901 1603.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"1438.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 11.0</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\r\n<text text-anchor=\"start\" x=\"1475.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 421</text>\r\n<text text-anchor=\"start\" x=\"1470\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [409, 12]</text>\r\n<text text-anchor=\"start\" x=\"1476\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 16->40 -->\r\n<g id=\"edge40\" class=\"edge\"><title>16->40</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1413.29,-936.907C1427.23,-927.197 1442.22,-916.758 1456.5,-906.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1458.61,-909.608 1464.82,-901.021 1454.61,-903.864 1458.61,-909.608\"/>\r\n</g>\r\n<!-- 18 -->\r\n<g id=\"node19\" class=\"node\"><title>18</title>\r\n<path fill=\"#5baee9\" stroke=\"black\" d=\"M1005,-782C1005,-782 769,-782 769,-782 763,-782 757,-776 757,-770 757,-770 757,-711 757,-711 757,-705 763,-699 769,-699 769,-699 1005,-699 1005,-699 1011,-699 1017,-705 1017,-711 1017,-711 1017,-770 1017,-770 1017,-776 1011,-782 1005,-782\"/>\r\n<text text-anchor=\"start\" x=\"765\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.135</text>\r\n<text text-anchor=\"start\" x=\"837\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.598</text>\r\n<text text-anchor=\"start\" x=\"839.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 227</text>\r\n<text text-anchor=\"start\" x=\"834\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 194]</text>\r\n<text text-anchor=\"start\" x=\"832\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 17->18 -->\r\n<g id=\"edge18\" class=\"edge\"><title>17->18</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1119.97,-832.968C1084.78,-819.151 1040.31,-801.691 999.675,-785.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1000.84,-782.437 990.255,-782.04 998.285,-788.952 1000.84,-782.437\"/>\r\n</g>\r\n<!-- 33 -->\r\n<g id=\"node34\" class=\"node\"><title>33</title>\r\n<path fill=\"#e78946\" stroke=\"black\" d=\"M1261,-782C1261,-782 1109,-782 1109,-782 1103,-782 1097,-776 1097,-770 1097,-770 1097,-711 1097,-711 1097,-705 1103,-699 1109,-699 1109,-699 1261,-699 1261,-699 1267,-699 1273,-705 1273,-711 1273,-711 1273,-770 1273,-770 1273,-776 1267,-782 1261,-782\"/>\r\n<text text-anchor=\"start\" x=\"1105\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"1139\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.33</text>\r\n<text text-anchor=\"start\" x=\"1141.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\r\n<text text-anchor=\"start\" x=\"1140.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [93, 6]</text>\r\n<text text-anchor=\"start\" x=\"1138\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 17->33 -->\r\n<g id=\"edge33\" class=\"edge\"><title>17->33</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1185,-817.907C1185,-809.649 1185,-800.864 1185,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1188.5,-792.021 1185,-782.021 1181.5,-792.021 1188.5,-792.021\"/>\r\n</g>\r\n<!-- 19 -->\r\n<g id=\"node20\" class=\"node\"><title>19</title>\r\n<path fill=\"#8dc6f0\" stroke=\"black\" d=\"M793.5,-663C793.5,-663 616.5,-663 616.5,-663 610.5,-663 604.5,-657 604.5,-651 604.5,-651 604.5,-592 604.5,-592 604.5,-586 610.5,-580 616.5,-580 616.5,-580 793.5,-580 793.5,-580 799.5,-580 805.5,-586 805.5,-592 805.5,-592 805.5,-651 805.5,-651 805.5,-657 799.5,-663 793.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"612.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.955</text>\r\n<text text-anchor=\"start\" x=\"655\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.878</text>\r\n<text text-anchor=\"start\" x=\"657.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 111</text>\r\n<text text-anchor=\"start\" x=\"656.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 78]</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18->19 -->\r\n<g id=\"edge19\" class=\"edge\"><title>18->19</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M823.856,-698.907C808.61,-689.106 792.209,-678.563 776.606,-668.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"778.337,-665.484 768.032,-663.021 774.552,-671.373 778.337,-665.484\"/>\r\n</g>\r\n<!-- 32 -->\r\n<g id=\"node33\" class=\"node\"><title>32</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M938,-655.5C938,-655.5 836,-655.5 836,-655.5 830,-655.5 824,-649.5 824,-643.5 824,-643.5 824,-599.5 824,-599.5 824,-593.5 830,-587.5 836,-587.5 836,-587.5 938,-587.5 938,-587.5 944,-587.5 950,-593.5 950,-599.5 950,-599.5 950,-643.5 950,-643.5 950,-649.5 944,-655.5 938,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"845\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"839.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 116</text>\r\n<text text-anchor=\"start\" x=\"838.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 116]</text>\r\n<text text-anchor=\"start\" x=\"832\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18->32 -->\r\n<g id=\"edge32\" class=\"edge\"><title>18->32</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M887,-698.907C887,-688.204 887,-676.615 887,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"890.5,-665.667 887,-655.667 883.5,-665.667 890.5,-665.667\"/>\r\n</g>\r\n<!-- 20 -->\r\n<g id=\"node21\" class=\"node\"><title>20</title>\r\n<path fill=\"#f4caab\" stroke=\"black\" d=\"M633,-544C633,-544 459,-544 459,-544 453,-544 447,-538 447,-532 447,-532 447,-473 447,-473 447,-467 453,-461 459,-461 459,-461 633,-461 633,-461 639,-461 645,-467 645,-473 645,-473 645,-532 645,-532 645,-538 639,-544 633,-544\"/>\r\n<text text-anchor=\"start\" x=\"455\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.605</text>\r\n<text text-anchor=\"start\" x=\"496\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.947</text>\r\n<text text-anchor=\"start\" x=\"502.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 52</text>\r\n<text text-anchor=\"start\" x=\"497.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 19]</text>\r\n<text text-anchor=\"start\" x=\"499\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 19->20 -->\r\n<g id=\"edge20\" class=\"edge\"><title>19->20</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M649.836,-579.907C636.763,-570.288 622.719,-559.953 609.315,-550.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"611.196,-547.129 601.067,-544.021 607.047,-552.767 611.196,-547.129\"/>\r\n</g>\r\n<!-- 31 -->\r\n<g id=\"node32\" class=\"node\"><title>31</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M777,-536.5C777,-536.5 675,-536.5 675,-536.5 669,-536.5 663,-530.5 663,-524.5 663,-524.5 663,-480.5 663,-480.5 663,-474.5 669,-468.5 675,-468.5 675,-468.5 777,-468.5 777,-468.5 783,-468.5 789,-474.5 789,-480.5 789,-480.5 789,-524.5 789,-524.5 789,-530.5 783,-536.5 777,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"684\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"682.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 59</text>\r\n<text text-anchor=\"start\" x=\"681.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 59]</text>\r\n<text text-anchor=\"start\" x=\"671\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 19->31 -->\r\n<g id=\"edge31\" class=\"edge\"><title>19->31</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M712.286,-579.907C714.207,-569.204 716.287,-557.615 718.232,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"721.725,-547.128 720.047,-536.667 714.835,-545.891 721.725,-547.128\"/>\r\n</g>\r\n<!-- 21 -->\r\n<g id=\"node22\" class=\"node\"><title>21</title>\r\n<path fill=\"#eda775\" stroke=\"black\" d=\"M537.5,-425C537.5,-425 386.5,-425 386.5,-425 380.5,-425 374.5,-419 374.5,-413 374.5,-413 374.5,-354 374.5,-354 374.5,-348 380.5,-342 386.5,-342 386.5,-342 537.5,-342 537.5,-342 543.5,-342 549.5,-348 549.5,-354 549.5,-354 549.5,-413 549.5,-413 549.5,-419 543.5,-425 537.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"382.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.15</text>\r\n<text text-anchor=\"start\" x=\"412\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.782</text>\r\n<text text-anchor=\"start\" x=\"418.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"413.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 10]</text>\r\n<text text-anchor=\"start\" x=\"415\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 20->21 -->\r\n<g id=\"edge21\" class=\"edge\"><title>20->21</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M516.857,-460.907C510.471,-452.014 503.648,-442.509 497.058,-433.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"499.767,-431.103 491.092,-425.021 494.081,-435.185 499.767,-431.103\"/>\r\n</g>\r\n<!-- 30 -->\r\n<g id=\"node31\" class=\"node\"><title>30</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M682,-417.5C682,-417.5 580,-417.5 580,-417.5 574,-417.5 568,-411.5 568,-405.5 568,-405.5 568,-361.5 568,-361.5 568,-355.5 574,-349.5 580,-349.5 580,-349.5 682,-349.5 682,-349.5 688,-349.5 694,-355.5 694,-361.5 694,-361.5 694,-405.5 694,-405.5 694,-411.5 688,-417.5 682,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"589\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"591.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"590.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"576\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 20->30 -->\r\n<g id=\"edge30\" class=\"edge\"><title>20->30</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M575.49,-460.907C583.747,-449.542 592.729,-437.178 601.015,-425.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"603.858,-427.814 606.904,-417.667 598.195,-423.7 603.858,-427.814\"/>\r\n</g>\r\n<!-- 22 -->\r\n<g id=\"node23\" class=\"node\"><title>22</title>\r\n<path fill=\"#ea985d\" stroke=\"black\" d=\"M454,-306C454,-306 302,-306 302,-306 296,-306 290,-300 290,-294 290,-294 290,-235 290,-235 290,-229 296,-223 302,-223 302,-223 454,-223 454,-223 460,-223 466,-229 466,-235 466,-235 466,-294 466,-294 466,-300 460,-306 454,-306\"/>\r\n<text text-anchor=\"start\" x=\"298\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"328\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.619</text>\r\n<text text-anchor=\"start\" x=\"334.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 39</text>\r\n<text text-anchor=\"start\" x=\"333.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 6]</text>\r\n<text text-anchor=\"start\" x=\"331\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 21->22 -->\r\n<g id=\"edge22\" class=\"edge\"><title>21->22</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M432.857,-341.907C426.471,-333.014 419.648,-323.509 413.058,-314.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"415.767,-312.103 407.092,-306.021 410.081,-316.185 415.767,-312.103\"/>\r\n</g>\r\n<!-- 29 -->\r\n<g id=\"node30\" class=\"node\"><title>29</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M598,-298.5C598,-298.5 496,-298.5 496,-298.5 490,-298.5 484,-292.5 484,-286.5 484,-286.5 484,-242.5 484,-242.5 484,-236.5 490,-230.5 496,-230.5 496,-230.5 598,-230.5 598,-230.5 604,-230.5 610,-236.5 610,-242.5 610,-242.5 610,-286.5 610,-286.5 610,-292.5 604,-298.5 598,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"505\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"507.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"506.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"492\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 21->29 -->\r\n<g id=\"edge29\" class=\"edge\"><title>21->29</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M491.49,-341.907C499.747,-330.542 508.729,-318.178 517.015,-306.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"519.858,-308.814 522.904,-298.667 514.195,-304.7 519.858,-308.814\"/>\r\n</g>\r\n<!-- 23 -->\r\n<g id=\"node24\" class=\"node\"><title>23</title>\r\n<path fill=\"#d7ebfa\" stroke=\"black\" d=\"M364,-187C364,-187 222,-187 222,-187 216,-187 210,-181 210,-175 210,-175 210,-116 210,-116 210,-110 216,-104 222,-104 222,-104 364,-104 364,-104 370,-104 376,-110 376,-116 376,-116 376,-175 376,-175 376,-181 370,-187 364,-187\"/>\r\n<text text-anchor=\"start\" x=\"218\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 131.5</text>\r\n<text text-anchor=\"start\" x=\"243\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"253.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"252.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 5]</text>\r\n<text text-anchor=\"start\" x=\"238\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 22->23 -->\r\n<g id=\"edge23\" class=\"edge\"><title>22->23</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M348.51,-222.907C342.049,-214.014 335.143,-204.509 328.476,-195.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"331.147,-193.054 322.438,-187.021 325.484,-197.168 331.147,-193.054\"/>\r\n</g>\r\n<!-- 26 -->\r\n<g id=\"node27\" class=\"node\"><title>26</title>\r\n<path fill=\"#e68540\" stroke=\"black\" d=\"M521.5,-187C521.5,-187 406.5,-187 406.5,-187 400.5,-187 394.5,-181 394.5,-175 394.5,-175 394.5,-116 394.5,-116 394.5,-110 400.5,-104 406.5,-104 406.5,-104 521.5,-104 521.5,-104 527.5,-104 533.5,-110 533.5,-116 533.5,-116 533.5,-175 533.5,-175 533.5,-181 527.5,-187 521.5,-187\"/>\r\n<text text-anchor=\"start\" x=\"402.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"414\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.211</text>\r\n<text text-anchor=\"start\" x=\"420.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"419.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 1]</text>\r\n<text text-anchor=\"start\" x=\"417\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 22->26 -->\r\n<g id=\"edge26\" class=\"edge\"><title>22->26</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M407.837,-222.907C414.374,-214.014 421.361,-204.509 428.107,-195.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"431.113,-197.151 434.215,-187.021 425.473,-193.005 431.113,-197.151\"/>\r\n</g>\r\n<!-- 24 -->\r\n<g id=\"node25\" class=\"node\"><title>24</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M209,-68C209,-68 123,-68 123,-68 117,-68 111,-62 111,-56 111,-56 111,-12 111,-12 111,-6 117,-0 123,-0 123,-0 209,-0 209,-0 215,-0 221,-6 221,-12 221,-12 221,-56 221,-56 221,-62 215,-68 209,-68\"/>\r\n<text text-anchor=\"start\" x=\"124\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"126.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"125.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"119\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 23->24 -->\r\n<g id=\"edge24\" class=\"edge\"><title>23->24</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M245.71,-103.726C234.814,-94.3318 223.236,-84.349 212.379,-74.9883\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"214.481,-72.1789 204.621,-68.2996 209.91,-77.4804 214.481,-72.1789\"/>\r\n</g>\r\n<!-- 25 -->\r\n<g id=\"node26\" class=\"node\"><title>25</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M353,-68C353,-68 251,-68 251,-68 245,-68 239,-62 239,-56 239,-56 239,-12 239,-12 239,-6 245,-0 251,-0 251,-0 353,-0 353,-0 359,-0 365,-6 365,-12 365,-12 365,-56 365,-56 365,-62 359,-68 353,-68\"/>\r\n<text text-anchor=\"start\" x=\"260\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"262.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"261.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"247\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 23->25 -->\r\n<g id=\"edge25\" class=\"edge\"><title>23->25</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M296.351,-103.726C297.033,-95.4263 297.753,-86.6671 298.442,-78.2834\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"301.932,-78.5527 299.263,-68.2996 294.956,-77.9793 301.932,-78.5527\"/>\r\n</g>\r\n<!-- 27 -->\r\n<g id=\"node28\" class=\"node\"><title>27</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M490,-68C490,-68 404,-68 404,-68 398,-68 392,-62 392,-56 392,-56 392,-12 392,-12 392,-6 398,-0 404,-0 404,-0 490,-0 490,-0 496,-0 502,-6 502,-12 502,-12 502,-56 502,-56 502,-62 496,-68 490,-68\"/>\r\n<text text-anchor=\"start\" x=\"405\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"403.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"402.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"400\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 26->27 -->\r\n<g id=\"edge27\" class=\"edge\"><title>26->27</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M457.67,-103.726C456.381,-95.4263 455.021,-86.6671 453.72,-78.2834\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"457.163,-77.6442 452.17,-68.2996 450.245,-78.7182 457.163,-77.6442\"/>\r\n</g>\r\n<!-- 28 -->\r\n<g id=\"node29\" class=\"node\"><title>28</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M634,-68C634,-68 532,-68 532,-68 526,-68 520,-62 520,-56 520,-56 520,-12 520,-12 520,-6 526,-0 532,-0 532,-0 634,-0 634,-0 640,-0 646,-6 646,-12 646,-12 646,-56 646,-56 646,-62 640,-68 634,-68\"/>\r\n<text text-anchor=\"start\" x=\"541\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"543.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"542.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"528\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26->28 -->\r\n<g id=\"edge28\" class=\"edge\"><title>26->28</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M508.311,-103.726C518.422,-94.423 529.159,-84.5428 539.246,-75.2612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"541.823,-77.6464 546.811,-68.2996 537.083,-72.4953 541.823,-77.6464\"/>\r\n</g>\r\n<!-- 34 -->\r\n<g id=\"node35\" class=\"node\"><title>34</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M1159.5,-663C1159.5,-663 980.5,-663 980.5,-663 974.5,-663 968.5,-657 968.5,-651 968.5,-651 968.5,-592 968.5,-592 968.5,-586 974.5,-580 980.5,-580 980.5,-580 1159.5,-580 1159.5,-580 1165.5,-580 1171.5,-586 1171.5,-592 1171.5,-592 1171.5,-651 1171.5,-651 1171.5,-657 1165.5,-663 1159.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"976.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.65</text>\r\n<text text-anchor=\"start\" x=\"1024\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"1030.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1029.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"1015\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 33->34 -->\r\n<g id=\"edge34\" class=\"edge\"><title>33->34</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1145.1,-698.907C1136,-689.651 1126.25,-679.732 1116.89,-670.209\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1119.33,-667.699 1109.83,-663.021 1114.34,-672.606 1119.33,-667.699\"/>\r\n</g>\r\n<!-- 37 -->\r\n<g id=\"node38\" class=\"node\"><title>37</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M1294,-663C1294,-663 1202,-663 1202,-663 1196,-663 1190,-657 1190,-651 1190,-651 1190,-592 1190,-592 1190,-586 1196,-580 1202,-580 1202,-580 1294,-580 1294,-580 1300,-580 1306,-586 1306,-592 1306,-592 1306,-651 1306,-651 1306,-657 1300,-663 1294,-663\"/>\r\n<text text-anchor=\"start\" x=\"1213\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 7.0</text>\r\n<text text-anchor=\"start\" x=\"1198\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.086</text>\r\n<text text-anchor=\"start\" x=\"1204.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 93</text>\r\n<text text-anchor=\"start\" x=\"1203.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 1]</text>\r\n<text text-anchor=\"start\" x=\"1201\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 33->37 -->\r\n<g id=\"edge37\" class=\"edge\"><title>33->37</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1206.86,-698.907C1211.55,-690.195 1216.56,-680.897 1221.4,-671.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1224.52,-673.485 1226.18,-663.021 1218.36,-670.166 1224.52,-673.485\"/>\r\n</g>\r\n<!-- 35 -->\r\n<g id=\"node36\" class=\"node\"><title>35</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M963,-536.5C963,-536.5 861,-536.5 861,-536.5 855,-536.5 849,-530.5 849,-524.5 849,-524.5 849,-480.5 849,-480.5 849,-474.5 855,-468.5 861,-468.5 861,-468.5 963,-468.5 963,-468.5 969,-468.5 975,-474.5 975,-480.5 975,-480.5 975,-524.5 975,-524.5 975,-530.5 969,-536.5 963,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"870\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"872.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"871.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"857\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 34->35 -->\r\n<g id=\"edge35\" class=\"edge\"><title>34->35</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1015.18,-579.907C998.94,-567.88 981.189,-554.735 965.059,-542.791\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"966.909,-539.805 956.79,-536.667 962.743,-545.431 966.909,-539.805\"/>\r\n</g>\r\n<!-- 36 -->\r\n<g id=\"node37\" class=\"node\"><title>36</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1091,-536.5C1091,-536.5 1005,-536.5 1005,-536.5 999,-536.5 993,-530.5 993,-524.5 993,-524.5 993,-480.5 993,-480.5 993,-474.5 999,-468.5 1005,-468.5 1005,-468.5 1091,-468.5 1091,-468.5 1097,-468.5 1103,-474.5 1103,-480.5 1103,-480.5 1103,-524.5 1103,-524.5 1103,-530.5 1097,-536.5 1091,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1006\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1008.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1007.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1001\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 34->36 -->\r\n<g id=\"edge36\" class=\"edge\"><title>34->36</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1062.37,-579.907C1060.35,-569.204 1058.18,-557.615 1056.14,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1059.52,-545.848 1054.24,-536.667 1052.64,-547.142 1059.52,-545.848\"/>\r\n</g>\r\n<!-- 38 -->\r\n<g id=\"node39\" class=\"node\"><title>38</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1219,-536.5C1219,-536.5 1133,-536.5 1133,-536.5 1127,-536.5 1121,-530.5 1121,-524.5 1121,-524.5 1121,-480.5 1121,-480.5 1121,-474.5 1127,-468.5 1133,-468.5 1133,-468.5 1219,-468.5 1219,-468.5 1225,-468.5 1231,-474.5 1231,-480.5 1231,-480.5 1231,-524.5 1231,-524.5 1231,-530.5 1225,-536.5 1219,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1134\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1132.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 92</text>\r\n<text text-anchor=\"start\" x=\"1131.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 0]</text>\r\n<text text-anchor=\"start\" x=\"1129\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 37->38 -->\r\n<g id=\"edge38\" class=\"edge\"><title>37->38</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1223.02,-579.907C1216.16,-568.763 1208.71,-556.658 1201.81,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1204.63,-543.349 1196.41,-536.667 1198.67,-547.018 1204.63,-543.349\"/>\r\n</g>\r\n<!-- 39 -->\r\n<g id=\"node40\" class=\"node\"><title>39</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1363,-536.5C1363,-536.5 1261,-536.5 1261,-536.5 1255,-536.5 1249,-530.5 1249,-524.5 1249,-524.5 1249,-480.5 1249,-480.5 1249,-474.5 1255,-468.5 1261,-468.5 1261,-468.5 1363,-468.5 1363,-468.5 1369,-468.5 1375,-474.5 1375,-480.5 1375,-480.5 1375,-524.5 1375,-524.5 1375,-530.5 1369,-536.5 1363,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1270\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1272.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1271.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1257\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 37->39 -->\r\n<g id=\"edge39\" class=\"edge\"><title>37->39</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1270.2,-579.907C1276.24,-568.873 1282.79,-556.898 1288.88,-545.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1292.13,-547.12 1293.86,-536.667 1285.99,-543.76 1292.13,-547.12\"/>\r\n</g>\r\n<!-- 41 -->\r\n<g id=\"node42\" class=\"node\"><title>41</title>\r\n<path fill=\"#deeffb\" stroke=\"black\" d=\"M1574,-782C1574,-782 1472,-782 1472,-782 1466,-782 1460,-776 1460,-770 1460,-770 1460,-711 1460,-711 1460,-705 1466,-699 1472,-699 1472,-699 1574,-699 1574,-699 1580,-699 1586,-705 1586,-711 1586,-711 1586,-770 1586,-770 1586,-776 1580,-782 1574,-782\"/>\r\n<text text-anchor=\"start\" x=\"1474\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 22</text>\r\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 40->41 -->\r\n<g id=\"edge41\" class=\"edge\"><title>40->41</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-817.907C1523,-809.649 1523,-800.864 1523,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-792.021 1523,-782.021 1519.5,-792.021 1526.5,-792.021\"/>\r\n</g>\r\n<!-- 50 -->\r\n<g id=\"node51\" class=\"node\"><title>50</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1705.5,-774.5C1705.5,-774.5 1616.5,-774.5 1616.5,-774.5 1610.5,-774.5 1604.5,-768.5 1604.5,-762.5 1604.5,-762.5 1604.5,-718.5 1604.5,-718.5 1604.5,-712.5 1610.5,-706.5 1616.5,-706.5 1616.5,-706.5 1705.5,-706.5 1705.5,-706.5 1711.5,-706.5 1717.5,-712.5 1717.5,-718.5 1717.5,-718.5 1717.5,-762.5 1717.5,-762.5 1717.5,-768.5 1711.5,-774.5 1705.5,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1619\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1613.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 399</text>\r\n<text text-anchor=\"start\" x=\"1612.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [399, 0]</text>\r\n<text text-anchor=\"start\" x=\"1614\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 40->50 -->\r\n<g id=\"edge50\" class=\"edge\"><title>40->50</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1570.88,-817.907C1584.8,-806.101 1600,-793.217 1613.88,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1616.52,-783.803 1621.88,-774.667 1611.99,-778.464 1616.52,-783.803\"/>\r\n</g>\r\n<!-- 42 -->\r\n<g id=\"node43\" class=\"node\"><title>42</title>\r\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M1610,-663C1610,-663 1436,-663 1436,-663 1430,-663 1424,-657 1424,-651 1424,-651 1424,-592 1424,-592 1424,-586 1430,-580 1436,-580 1436,-580 1610,-580 1610,-580 1616,-580 1622,-586 1622,-592 1622,-592 1622,-651 1622,-651 1622,-657 1616,-663 1610,-663\"/>\r\n<text text-anchor=\"start\" x=\"1432\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.355</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"1478.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 41->42 -->\r\n<g id=\"edge42\" class=\"edge\"><title>41->42</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-698.907C1523,-690.649 1523,-681.864 1523,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-673.021 1523,-663.021 1519.5,-673.021 1526.5,-673.021\"/>\r\n</g>\r\n<!-- 49 -->\r\n<g id=\"node50\" class=\"node\"><title>49</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1738,-655.5C1738,-655.5 1652,-655.5 1652,-655.5 1646,-655.5 1640,-649.5 1640,-643.5 1640,-643.5 1640,-599.5 1640,-599.5 1640,-593.5 1646,-587.5 1652,-587.5 1652,-587.5 1738,-587.5 1738,-587.5 1744,-587.5 1750,-593.5 1750,-599.5 1750,-599.5 1750,-643.5 1750,-643.5 1750,-649.5 1744,-655.5 1738,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1653\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1655.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1654.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"1648\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41->49 -->\r\n<g id=\"edge49\" class=\"edge\"><title>41->49</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1582.67,-698.907C1600.52,-686.769 1620.04,-673.493 1637.72,-661.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1639.94,-664.185 1646.24,-655.667 1636,-658.397 1639.94,-664.185\"/>\r\n</g>\r\n<!-- 43 -->\r\n<g id=\"node44\" class=\"node\"><title>43</title>\r\n<path fill=\"#5aade9\" stroke=\"black\" d=\"M1641,-544C1641,-544 1405,-544 1405,-544 1399,-544 1393,-538 1393,-532 1393,-532 1393,-473 1393,-473 1393,-467 1399,-461 1405,-461 1405,-461 1641,-461 1641,-461 1647,-461 1653,-467 1653,-473 1653,-473 1653,-532 1653,-532 1653,-538 1647,-544 1641,-544\"/>\r\n<text text-anchor=\"start\" x=\"1401\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.265</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"1478.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 12]</text>\r\n<text text-anchor=\"start\" x=\"1468\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 42->43 -->\r\n<g id=\"edge43\" class=\"edge\"><title>42->43</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1523,-579.907C1523,-571.649 1523,-562.864 1523,-554.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.5,-554.021 1523,-544.021 1519.5,-554.021 1526.5,-554.021\"/>\r\n</g>\r\n<!-- 48 -->\r\n<g id=\"node49\" class=\"node\"><title>48</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1769,-536.5C1769,-536.5 1683,-536.5 1683,-536.5 1677,-536.5 1671,-530.5 1671,-524.5 1671,-524.5 1671,-480.5 1671,-480.5 1671,-474.5 1677,-468.5 1683,-468.5 1683,-468.5 1769,-468.5 1769,-468.5 1775,-468.5 1781,-474.5 1781,-480.5 1781,-480.5 1781,-524.5 1781,-524.5 1781,-530.5 1775,-536.5 1769,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1684\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1686.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1685.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"1679\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 42->48 -->\r\n<g id=\"edge48\" class=\"edge\"><title>42->48</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1598.86,-579.842C1619.49,-568.491 1641.72,-555.98 1662,-544 1663.11,-543.342 1664.24,-542.674 1665.37,-541.999\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1667.38,-544.874 1674.12,-536.702 1663.75,-538.885 1667.38,-544.874\"/>\r\n</g>\r\n<!-- 44 -->\r\n<g id=\"node45\" class=\"node\"><title>44</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1450,-417.5C1450,-417.5 1364,-417.5 1364,-417.5 1358,-417.5 1352,-411.5 1352,-405.5 1352,-405.5 1352,-361.5 1352,-361.5 1352,-355.5 1358,-349.5 1364,-349.5 1364,-349.5 1450,-349.5 1450,-349.5 1456,-349.5 1462,-355.5 1462,-361.5 1462,-361.5 1462,-405.5 1462,-405.5 1462,-411.5 1456,-417.5 1450,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1365\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1367.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1366.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1360\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 43->44 -->\r\n<g id=\"edge44\" class=\"edge\"><title>43->44</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1482.75,-460.907C1471.16,-449.211 1458.51,-436.457 1446.94,-424.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1449.41,-422.304 1439.88,-417.667 1444.44,-427.233 1449.41,-422.304\"/>\r\n</g>\r\n<!-- 45 -->\r\n<g id=\"node46\" class=\"node\"><title>45</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M1594,-425C1594,-425 1492,-425 1492,-425 1486,-425 1480,-419 1480,-413 1480,-413 1480,-354 1480,-354 1480,-348 1486,-342 1492,-342 1492,-342 1594,-342 1594,-342 1600,-342 1606,-348 1606,-354 1606,-354 1606,-413 1606,-413 1606,-419 1600,-425 1594,-425\"/>\r\n<text text-anchor=\"start\" x=\"1490\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 19.0</text>\r\n<text text-anchor=\"start\" x=\"1493\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"1499.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\r\n<text text-anchor=\"start\" x=\"1498.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 12]</text>\r\n<text text-anchor=\"start\" x=\"1488\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 43->45 -->\r\n<g id=\"edge45\" class=\"edge\"><title>43->45</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1529.94,-460.907C1531.37,-452.558 1532.89,-443.671 1534.36,-435.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1537.84,-435.468 1536.07,-425.021 1530.94,-434.288 1537.84,-435.468\"/>\r\n</g>\r\n<!-- 46 -->\r\n<g id=\"node47\" class=\"node\"><title>46</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1494,-298.5C1494,-298.5 1392,-298.5 1392,-298.5 1386,-298.5 1380,-292.5 1380,-286.5 1380,-286.5 1380,-242.5 1380,-242.5 1380,-236.5 1386,-230.5 1392,-230.5 1392,-230.5 1494,-230.5 1494,-230.5 1500,-230.5 1506,-236.5 1506,-242.5 1506,-242.5 1506,-286.5 1506,-286.5 1506,-292.5 1500,-298.5 1494,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1401\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1399.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"1398.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\r\n<text text-anchor=\"start\" x=\"1388\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 45->46 -->\r\n<g id=\"edge46\" class=\"edge\"><title>45->46</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1508.31,-341.907C1498.5,-330.432 1487.82,-317.938 1477.99,-306.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1480.51,-303.995 1471.35,-298.667 1475.18,-308.543 1480.51,-303.995\"/>\r\n</g>\r\n<!-- 47 -->\r\n<g id=\"node48\" class=\"node\"><title>47</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1622,-298.5C1622,-298.5 1536,-298.5 1536,-298.5 1530,-298.5 1524,-292.5 1524,-286.5 1524,-286.5 1524,-242.5 1524,-242.5 1524,-236.5 1530,-230.5 1536,-230.5 1536,-230.5 1622,-230.5 1622,-230.5 1628,-230.5 1634,-236.5 1634,-242.5 1634,-242.5 1634,-286.5 1634,-286.5 1634,-292.5 1628,-298.5 1622,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1537\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1539.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1538.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1532\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 45->47 -->\r\n<g id=\"edge47\" class=\"edge\"><title>45->47</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1555.49,-341.907C1558.82,-331.094 1562.42,-319.376 1565.79,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1569.2,-309.254 1568.79,-298.667 1562.51,-307.195 1569.2,-309.254\"/>\r\n</g>\r\n<!-- 52 -->\r\n<g id=\"node53\" class=\"node\"><title>52</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1901.5,-1020C1901.5,-1020 1750.5,-1020 1750.5,-1020 1744.5,-1020 1738.5,-1014 1738.5,-1008 1738.5,-1008 1738.5,-949 1738.5,-949 1738.5,-943 1744.5,-937 1750.5,-937 1750.5,-937 1901.5,-937 1901.5,-937 1907.5,-937 1913.5,-943 1913.5,-949 1913.5,-949 1913.5,-1008 1913.5,-1008 1913.5,-1014 1907.5,-1020 1901.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1746.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.46</text>\r\n<text text-anchor=\"start\" x=\"1776\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.002</text>\r\n<text text-anchor=\"start\" x=\"1774.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6350</text>\r\n<text text-anchor=\"start\" x=\"1773\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 6349]</text>\r\n<text text-anchor=\"start\" x=\"1771\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 51->52 -->\r\n<g id=\"edge52\" class=\"edge\"><title>51->52</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1890.65,-1055.91C1882.97,-1046.83 1874.76,-1037.12 1866.84,-1027.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1869.42,-1025.39 1860.29,-1020.02 1864.07,-1029.92 1869.42,-1025.39\"/>\r\n</g>\r\n<!-- 57 -->\r\n<g id=\"node58\" class=\"node\"><title>57</title>\r\n<path fill=\"#f1bd97\" stroke=\"black\" d=\"M2104.5,-1020C2104.5,-1020 1943.5,-1020 1943.5,-1020 1937.5,-1020 1931.5,-1014 1931.5,-1008 1931.5,-1008 1931.5,-949 1931.5,-949 1931.5,-943 1937.5,-937 1943.5,-937 1943.5,-937 2104.5,-937 2104.5,-937 2110.5,-937 2116.5,-943 2116.5,-949 2116.5,-949 2116.5,-1008 2116.5,-1008 2116.5,-1014 2110.5,-1020 2104.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1939.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 66.5</text>\r\n<text text-anchor=\"start\" x=\"1974\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\r\n<text text-anchor=\"start\" x=\"1980.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"1975.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 10]</text>\r\n<text text-anchor=\"start\" x=\"1977\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 51->57 -->\r\n<g id=\"edge57\" class=\"edge\"><title>51->57</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1959.35,-1055.91C1967.03,-1046.83 1975.24,-1037.12 1983.16,-1027.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1985.93,-1029.92 1989.71,-1020.02 1980.58,-1025.39 1985.93,-1029.92\"/>\r\n</g>\r\n<!-- 53 -->\r\n<g id=\"node54\" class=\"node\"><title>53</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1749,-893.5C1749,-893.5 1647,-893.5 1647,-893.5 1641,-893.5 1635,-887.5 1635,-881.5 1635,-881.5 1635,-837.5 1635,-837.5 1635,-831.5 1641,-825.5 1647,-825.5 1647,-825.5 1749,-825.5 1749,-825.5 1755,-825.5 1761,-831.5 1761,-837.5 1761,-837.5 1761,-881.5 1761,-881.5 1761,-887.5 1755,-893.5 1749,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1656\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1646.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6348</text>\r\n<text text-anchor=\"start\" x=\"1645\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6348]</text>\r\n<text text-anchor=\"start\" x=\"1643\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 52->53 -->\r\n<g id=\"edge53\" class=\"edge\"><title>52->53</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1781.59,-936.907C1768.67,-925.101 1754.58,-912.217 1741.71,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1744.03,-897.83 1734.29,-893.667 1739.3,-902.997 1744.03,-897.83\"/>\r\n</g>\r\n<!-- 54 -->\r\n<g id=\"node55\" class=\"node\"><title>54</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1907,-901C1907,-901 1791,-901 1791,-901 1785,-901 1779,-895 1779,-889 1779,-889 1779,-830 1779,-830 1779,-824 1785,-818 1791,-818 1791,-818 1907,-818 1907,-818 1913,-818 1919,-824 1919,-830 1919,-830 1919,-889 1919,-889 1919,-895 1913,-901 1907,-901\"/>\r\n<text text-anchor=\"start\" x=\"1787\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.08</text>\r\n<text text-anchor=\"start\" x=\"1807\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1809.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1808.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1802\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 52->54 -->\r\n<g id=\"edge54\" class=\"edge\"><title>52->54</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1833.98,-936.907C1835.62,-928.558 1837.37,-919.671 1839.07,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1842.54,-911.508 1841.03,-901.021 1835.67,-910.158 1842.54,-911.508\"/>\r\n</g>\r\n<!-- 55 -->\r\n<g id=\"node56\" class=\"node\"><title>55</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1839,-774.5C1839,-774.5 1753,-774.5 1753,-774.5 1747,-774.5 1741,-768.5 1741,-762.5 1741,-762.5 1741,-718.5 1741,-718.5 1741,-712.5 1747,-706.5 1753,-706.5 1753,-706.5 1839,-706.5 1839,-706.5 1845,-706.5 1851,-712.5 1851,-718.5 1851,-718.5 1851,-762.5 1851,-762.5 1851,-768.5 1845,-774.5 1839,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1754\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1756.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1755.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1749\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 54->55 -->\r\n<g id=\"edge55\" class=\"edge\"><title>54->55</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1830.61,-817.907C1825.66,-806.983 1820.3,-795.137 1815.3,-784.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1818.34,-782.332 1811.02,-774.667 1811.96,-785.22 1818.34,-782.332\"/>\r\n</g>\r\n<!-- 56 -->\r\n<g id=\"node57\" class=\"node\"><title>56</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1983,-774.5C1983,-774.5 1881,-774.5 1881,-774.5 1875,-774.5 1869,-768.5 1869,-762.5 1869,-762.5 1869,-718.5 1869,-718.5 1869,-712.5 1875,-706.5 1881,-706.5 1881,-706.5 1983,-706.5 1983,-706.5 1989,-706.5 1995,-712.5 1995,-718.5 1995,-718.5 1995,-762.5 1995,-762.5 1995,-768.5 1989,-774.5 1983,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1890\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1892.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1891.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1877\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 54->56 -->\r\n<g id=\"edge56\" class=\"edge\"><title>54->56</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1877.8,-817.907C1885.78,-806.652 1894.46,-794.418 1902.48,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1905.54,-784.848 1908.47,-774.667 1899.83,-780.798 1905.54,-784.848\"/>\r\n</g>\r\n<!-- 58 -->\r\n<g id=\"node59\" class=\"node\"><title>58</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2052,-893.5C2052,-893.5 1950,-893.5 1950,-893.5 1944,-893.5 1938,-887.5 1938,-881.5 1938,-881.5 1938,-837.5 1938,-837.5 1938,-831.5 1944,-825.5 1950,-825.5 1950,-825.5 2052,-825.5 2052,-825.5 2058,-825.5 2064,-831.5 2064,-837.5 2064,-837.5 2064,-881.5 2064,-881.5 2064,-887.5 2058,-893.5 2052,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1959\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1961.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"1960.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\r\n<text text-anchor=\"start\" x=\"1946\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 57->58 -->\r\n<g id=\"edge58\" class=\"edge\"><title>57->58</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2016.02,-936.907C2013.92,-926.204 2011.64,-914.615 2009.51,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2012.88,-902.804 2007.52,-893.667 2006.01,-904.154 2012.88,-902.804\"/>\r\n</g>\r\n<!-- 59 -->\r\n<g id=\"node60\" class=\"node\"><title>59</title>\r\n<path fill=\"#e78d4c\" stroke=\"black\" d=\"M2321.5,-901C2321.5,-901 2094.5,-901 2094.5,-901 2088.5,-901 2082.5,-895 2082.5,-889 2082.5,-889 2082.5,-830 2082.5,-830 2082.5,-824 2088.5,-818 2094.5,-818 2094.5,-818 2321.5,-818 2321.5,-818 2327.5,-818 2333.5,-824 2333.5,-830 2333.5,-830 2333.5,-889 2333.5,-889 2333.5,-895 2327.5,-901 2321.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2090.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.54</text>\r\n<text text-anchor=\"start\" x=\"2158\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.426</text>\r\n<text text-anchor=\"start\" x=\"2164.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"2163.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 2]</text>\r\n<text text-anchor=\"start\" x=\"2161\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57->59 -->\r\n<g id=\"edge59\" class=\"edge\"><title>57->59</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2087.84,-936.907C2103.25,-927.106 2119.83,-916.563 2135.61,-906.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2137.71,-909.34 2144.27,-901.021 2133.96,-903.433 2137.71,-909.34\"/>\r\n</g>\r\n<!-- 60 -->\r\n<g id=\"node61\" class=\"node\"><title>60</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2116,-774.5C2116,-774.5 2030,-774.5 2030,-774.5 2024,-774.5 2018,-768.5 2018,-762.5 2018,-762.5 2018,-718.5 2018,-718.5 2018,-712.5 2024,-706.5 2030,-706.5 2030,-706.5 2116,-706.5 2116,-706.5 2122,-706.5 2128,-712.5 2128,-718.5 2128,-718.5 2128,-762.5 2128,-762.5 2128,-768.5 2122,-774.5 2116,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2031\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2029.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"2028.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\r\n<text text-anchor=\"start\" x=\"2026\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 59->60 -->\r\n<g id=\"edge60\" class=\"edge\"><title>59->60</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2161.16,-817.907C2147.54,-806.101 2132.67,-793.217 2119.1,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2121.12,-778.571 2111.27,-774.667 2116.53,-783.861 2121.12,-778.571\"/>\r\n</g>\r\n<!-- 61 -->\r\n<g id=\"node62\" class=\"node\"><title>61</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2260,-774.5C2260,-774.5 2158,-774.5 2158,-774.5 2152,-774.5 2146,-768.5 2146,-762.5 2146,-762.5 2146,-718.5 2146,-718.5 2146,-712.5 2152,-706.5 2158,-706.5 2158,-706.5 2260,-706.5 2260,-706.5 2266,-706.5 2272,-712.5 2272,-718.5 2272,-718.5 2272,-762.5 2272,-762.5 2272,-768.5 2266,-774.5 2260,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2167\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2169.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2168.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2154\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 59->61 -->\r\n<g id=\"edge61\" class=\"edge\"><title>59->61</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2208.35,-817.907C2208.44,-807.204 2208.54,-795.615 2208.63,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2212.13,-784.697 2208.72,-774.667 2205.13,-784.637 2212.13,-784.697\"/>\r\n</g>\r\n<!-- 63 -->\r\n<g id=\"node64\" class=\"node\"><title>63</title>\r\n<path fill=\"#e68640\" stroke=\"black\" d=\"M3945,-1139C3945,-1139 3831,-1139 3831,-1139 3825,-1139 3819,-1133 3819,-1127 3819,-1127 3819,-1068 3819,-1068 3819,-1062 3825,-1056 3831,-1056 3831,-1056 3945,-1056 3945,-1056 3951,-1056 3957,-1062 3957,-1068 3957,-1068 3957,-1127 3957,-1127 3957,-1133 3951,-1139 3945,-1139\"/>\r\n<text text-anchor=\"start\" x=\"3860.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3838\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.219</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8883</text>\r\n<text text-anchor=\"start\" x=\"3827\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8572, 311]</text>\r\n<text text-anchor=\"start\" x=\"3841\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 62->63 -->\r\n<g id=\"edge63\" class=\"edge\"><title>62->63</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3888,-1174.91C3888,-1166.65 3888,-1157.86 3888,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3891.5,-1149.02 3888,-1139.02 3884.5,-1149.02 3891.5,-1149.02\"/>\r\n</g>\r\n<!-- 138 -->\r\n<g id=\"node139\" class=\"node\"><title>138</title>\r\n<path fill=\"#97ccf1\" stroke=\"black\" d=\"M4596.5,-1139C4596.5,-1139 4489.5,-1139 4489.5,-1139 4483.5,-1139 4477.5,-1133 4477.5,-1127 4477.5,-1127 4477.5,-1068 4477.5,-1068 4477.5,-1062 4483.5,-1056 4489.5,-1056 4489.5,-1056 4596.5,-1056 4596.5,-1056 4602.5,-1056 4608.5,-1062 4608.5,-1068 4608.5,-1068 4608.5,-1127 4608.5,-1127 4608.5,-1133 4602.5,-1139 4596.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"4485.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 351.5</text>\r\n<text text-anchor=\"start\" x=\"4493\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 595</text>\r\n<text text-anchor=\"start\" x=\"4486\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 403]</text>\r\n<text text-anchor=\"start\" x=\"4488\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 62->138 -->\r\n<g id=\"edge138\" class=\"edge\"><title>62->138</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3957.79,-1203.03C4081.67,-1180.91 4339,-1134.94 4467.12,-1112.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4468.01,-1115.45 4477.24,-1110.25 4466.78,-1108.56 4468.01,-1115.45\"/>\r\n</g>\r\n<!-- 64 -->\r\n<g id=\"node65\" class=\"node\"><title>64</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3609,-1020C3609,-1020 3495,-1020 3495,-1020 3489,-1020 3483,-1014 3483,-1008 3483,-1008 3483,-949 3483,-949 3483,-943 3489,-937 3495,-937 3495,-937 3609,-937 3609,-937 3615,-937 3621,-943 3621,-949 3621,-949 3621,-1008 3621,-1008 3621,-1014 3615,-1020 3609,-1020\"/>\r\n<text text-anchor=\"start\" x=\"3503\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"3502\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.108</text>\r\n<text text-anchor=\"start\" x=\"3500.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8542</text>\r\n<text text-anchor=\"start\" x=\"3491\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8420, 122]</text>\r\n<text text-anchor=\"start\" x=\"3505\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 63->64 -->\r\n<g id=\"edge64\" class=\"edge\"><title>63->64</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3818.79,-1072.4C3764.13,-1053.37 3687.82,-1026.8 3630.81,-1006.94\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3631.72,-1003.55 3621.12,-1003.57 3629.42,-1010.16 3631.72,-1003.55\"/>\r\n</g>\r\n<!-- 121 -->\r\n<g id=\"node122\" class=\"node\"><title>121</title>\r\n<path fill=\"#d8ecfa\" stroke=\"black\" d=\"M4317.5,-1020C4317.5,-1020 4202.5,-1020 4202.5,-1020 4196.5,-1020 4190.5,-1014 4190.5,-1008 4190.5,-1008 4190.5,-949 4190.5,-949 4190.5,-943 4196.5,-937 4202.5,-937 4202.5,-937 4317.5,-937 4317.5,-937 4323.5,-937 4329.5,-943 4329.5,-949 4329.5,-949 4329.5,-1008 4329.5,-1008 4329.5,-1014 4323.5,-1020 4317.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4198.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 6052.0</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"4212.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 341</text>\r\n<text text-anchor=\"start\" x=\"4203\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 189]</text>\r\n<text text-anchor=\"start\" x=\"4205\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 63->121 -->\r\n<g id=\"edge121\" class=\"edge\"><title>63->121</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3957.1,-1074.77C4020.48,-1054.83 4114.33,-1025.32 4180.73,-1004.43\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4181.84,-1007.75 4190.33,-1001.41 4179.74,-1001.08 4181.84,-1007.75\"/>\r\n</g>\r\n<!-- 65 -->\r\n<g id=\"node66\" class=\"node\"><title>65</title>\r\n<path fill=\"#e99355\" stroke=\"black\" d=\"M2974,-901C2974,-901 2772,-901 2772,-901 2766,-901 2760,-895 2760,-889 2760,-889 2760,-830 2760,-830 2760,-824 2766,-818 2772,-818 2772,-818 2974,-818 2974,-818 2980,-818 2986,-824 2986,-830 2986,-830 2986,-889 2986,-889 2986,-895 2980,-901 2974,-901\"/>\r\n<text text-anchor=\"start\" x=\"2768\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.825</text>\r\n<text text-anchor=\"start\" x=\"2823\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.541</text>\r\n<text text-anchor=\"start\" x=\"2825.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 911</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [798, 113]</text>\r\n<text text-anchor=\"start\" x=\"2826\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 64->65 -->\r\n<g id=\"edge65\" class=\"edge\"><title>64->65</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3482.84,-965.583C3368.61,-945.9 3139,-906.335 2996.41,-881.766\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2996.75,-878.272 2986.3,-880.023 2995.56,-885.17 2996.75,-878.272\"/>\r\n</g>\r\n<!-- 102 -->\r\n<g id=\"node103\" class=\"node\"><title>102</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3639,-901C3639,-901 3465,-901 3465,-901 3459,-901 3453,-895 3453,-889 3453,-889 3453,-830 3453,-830 3453,-824 3459,-818 3465,-818 3465,-818 3639,-818 3639,-818 3645,-818 3651,-824 3651,-830 3651,-830 3651,-889 3651,-889 3651,-895 3645,-901 3639,-901\"/>\r\n<text text-anchor=\"start\" x=\"3461\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"3502\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.013</text>\r\n<text text-anchor=\"start\" x=\"3500.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7631</text>\r\n<text text-anchor=\"start\" x=\"3499\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7622, 9]</text>\r\n<text text-anchor=\"start\" x=\"3505\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 64->102 -->\r\n<g id=\"edge102\" class=\"edge\"><title>64->102</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3552,-936.907C3552,-928.649 3552,-919.864 3552,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3555.5,-911.021 3552,-901.021 3548.5,-911.021 3555.5,-911.021\"/>\r\n</g>\r\n<!-- 66 -->\r\n<g id=\"node67\" class=\"node\"><title>66</title>\r\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M2400,-782C2400,-782 2302,-782 2302,-782 2296,-782 2290,-776 2290,-770 2290,-770 2290,-711 2290,-711 2290,-705 2296,-699 2302,-699 2302,-699 2400,-699 2400,-699 2406,-699 2412,-705 2412,-711 2412,-711 2412,-770 2412,-770 2412,-776 2406,-782 2400,-782\"/>\r\n<text text-anchor=\"start\" x=\"2310\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"2301\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.142</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 746</text>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [731, 15]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 65->66 -->\r\n<g id=\"edge66\" class=\"edge\"><title>65->66</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2759.73,-833.113C2657.09,-810.107 2509,-776.913 2422.11,-757.438\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2422.86,-754.021 2412.34,-755.249 2421.33,-760.851 2422.86,-754.021\"/>\r\n</g>\r\n<!-- 85 -->\r\n<g id=\"node86\" class=\"node\"><title>85</title>\r\n<path fill=\"#c0e0f7\" stroke=\"black\" d=\"M2980,-782C2980,-782 2766,-782 2766,-782 2760,-782 2754,-776 2754,-770 2754,-770 2754,-711 2754,-711 2754,-705 2760,-699 2766,-699 2766,-699 2980,-699 2980,-699 2986,-699 2992,-705 2992,-711 2992,-711 2992,-770 2992,-770 2992,-776 2986,-782 2980,-782\"/>\r\n<text text-anchor=\"start\" x=\"2762\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.06</text>\r\n<text text-anchor=\"start\" x=\"2823\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.974</text>\r\n<text text-anchor=\"start\" x=\"2825.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 165</text>\r\n<text text-anchor=\"start\" x=\"2824.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 98]</text>\r\n<text text-anchor=\"start\" x=\"2818\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 65->85 -->\r\n<g id=\"edge85\" class=\"edge\"><title>65->85</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2873,-817.907C2873,-809.649 2873,-800.864 2873,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2876.5,-792.021 2873,-782.021 2869.5,-792.021 2876.5,-792.021\"/>\r\n</g>\r\n<!-- 67 -->\r\n<g id=\"node68\" class=\"node\"><title>67</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2056.5,-663C2056.5,-663 1967.5,-663 1967.5,-663 1961.5,-663 1955.5,-657 1955.5,-651 1955.5,-651 1955.5,-592 1955.5,-592 1955.5,-586 1961.5,-580 1967.5,-580 1967.5,-580 2056.5,-580 2056.5,-580 2062.5,-580 2068.5,-586 2068.5,-592 2068.5,-592 2068.5,-651 2068.5,-651 2068.5,-657 2062.5,-663 2056.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"1969\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 8.0</text>\r\n<text text-anchor=\"start\" x=\"1966\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.06</text>\r\n<text text-anchor=\"start\" x=\"1964.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 575</text>\r\n<text text-anchor=\"start\" x=\"1963.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 4]</text>\r\n<text text-anchor=\"start\" x=\"1965\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 66->67 -->\r\n<g id=\"edge67\" class=\"edge\"><title>66->67</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2289.98,-703.053C2286.98,-701.62 2283.97,-700.26 2281,-699 2214.29,-670.735 2133.96,-649.43 2078.55,-636.574\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2079.03,-633.093 2068.5,-634.272 2077.47,-639.917 2079.03,-633.093\"/>\r\n</g>\r\n<!-- 74 -->\r\n<g id=\"node75\" class=\"node\"><title>74</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M2400,-663C2400,-663 2302,-663 2302,-663 2296,-663 2290,-657 2290,-651 2290,-651 2290,-592 2290,-592 2290,-586 2296,-580 2302,-580 2302,-580 2400,-580 2400,-580 2406,-580 2412,-586 2412,-592 2412,-592 2412,-651 2412,-651 2412,-657 2406,-663 2400,-663\"/>\r\n<text text-anchor=\"start\" x=\"2310\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"2301\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.344</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 171</text>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [160, 11]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 66->74 -->\r\n<g id=\"edge74\" class=\"edge\"><title>66->74</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2351,-698.907C2351,-690.649 2351,-681.864 2351,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2354.5,-673.021 2351,-663.021 2347.5,-673.021 2354.5,-673.021\"/>\r\n</g>\r\n<!-- 68 -->\r\n<g id=\"node69\" class=\"node\"><title>68</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M1918.5,-544C1918.5,-544 1811.5,-544 1811.5,-544 1805.5,-544 1799.5,-538 1799.5,-532 1799.5,-532 1799.5,-473 1799.5,-473 1799.5,-467 1805.5,-461 1811.5,-461 1811.5,-461 1918.5,-461 1918.5,-461 1924.5,-461 1930.5,-467 1930.5,-473 1930.5,-473 1930.5,-532 1930.5,-532 1930.5,-538 1924.5,-544 1918.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"1807.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 353.5</text>\r\n<text text-anchor=\"start\" x=\"1815\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\r\n<text text-anchor=\"start\" x=\"1817.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 574</text>\r\n<text text-anchor=\"start\" x=\"1816.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 3]</text>\r\n<text text-anchor=\"start\" x=\"1818\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 67->68 -->\r\n<g id=\"edge68\" class=\"edge\"><title>67->68</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1961,-579.907C1949.03,-570.379 1936.17,-560.148 1923.89,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1925.91,-547.51 1915.91,-544.021 1921.56,-552.987 1925.91,-547.51\"/>\r\n</g>\r\n<!-- 73 -->\r\n<g id=\"node74\" class=\"node\"><title>73</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2063,-536.5C2063,-536.5 1961,-536.5 1961,-536.5 1955,-536.5 1949,-530.5 1949,-524.5 1949,-524.5 1949,-480.5 1949,-480.5 1949,-474.5 1955,-468.5 1961,-468.5 1961,-468.5 2063,-468.5 2063,-468.5 2069,-468.5 2075,-474.5 2075,-480.5 2075,-480.5 2075,-524.5 2075,-524.5 2075,-530.5 2069,-536.5 2063,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1970\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1972.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1971.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1957\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67->73 -->\r\n<g id=\"edge73\" class=\"edge\"><title>67->73</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2012,-579.907C2012,-569.204 2012,-557.615 2012,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2015.5,-546.667 2012,-536.667 2008.5,-546.667 2015.5,-546.667\"/>\r\n</g>\r\n<!-- 69 -->\r\n<g id=\"node70\" class=\"node\"><title>69</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M1783.5,-425C1783.5,-425 1676.5,-425 1676.5,-425 1670.5,-425 1664.5,-419 1664.5,-413 1664.5,-413 1664.5,-354 1664.5,-354 1664.5,-348 1670.5,-342 1676.5,-342 1676.5,-342 1783.5,-342 1783.5,-342 1789.5,-342 1795.5,-348 1795.5,-354 1795.5,-354 1795.5,-413 1795.5,-413 1795.5,-419 1789.5,-425 1783.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"1672.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 326.5</text>\r\n<text text-anchor=\"start\" x=\"1680\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.161</text>\r\n<text text-anchor=\"start\" x=\"1682.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 127</text>\r\n<text text-anchor=\"start\" x=\"1681.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 3]</text>\r\n<text text-anchor=\"start\" x=\"1683\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 68->69 -->\r\n<g id=\"edge69\" class=\"edge\"><title>68->69</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1818.16,-460.907C1807.27,-451.469 1795.59,-441.343 1784.4,-431.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1786.6,-428.925 1776.75,-425.021 1782.02,-434.215 1786.6,-428.925\"/>\r\n</g>\r\n<!-- 72 -->\r\n<g id=\"node73\" class=\"node\"><title>72</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1914.5,-417.5C1914.5,-417.5 1825.5,-417.5 1825.5,-417.5 1819.5,-417.5 1813.5,-411.5 1813.5,-405.5 1813.5,-405.5 1813.5,-361.5 1813.5,-361.5 1813.5,-355.5 1819.5,-349.5 1825.5,-349.5 1825.5,-349.5 1914.5,-349.5 1914.5,-349.5 1920.5,-349.5 1926.5,-355.5 1926.5,-361.5 1926.5,-361.5 1926.5,-405.5 1926.5,-405.5 1926.5,-411.5 1920.5,-417.5 1914.5,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1828\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1822.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 447</text>\r\n<text text-anchor=\"start\" x=\"1821.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [447, 0]</text>\r\n<text text-anchor=\"start\" x=\"1823\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 68->72 -->\r\n<g id=\"edge72\" class=\"edge\"><title>68->72</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1866.73,-460.907C1867.19,-450.204 1867.69,-438.615 1868.15,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1871.65,-427.807 1868.58,-417.667 1864.66,-427.508 1871.65,-427.807\"/>\r\n</g>\r\n<!-- 70 -->\r\n<g id=\"node71\" class=\"node\"><title>70</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1763.5,-298.5C1763.5,-298.5 1674.5,-298.5 1674.5,-298.5 1668.5,-298.5 1662.5,-292.5 1662.5,-286.5 1662.5,-286.5 1662.5,-242.5 1662.5,-242.5 1662.5,-236.5 1668.5,-230.5 1674.5,-230.5 1674.5,-230.5 1763.5,-230.5 1763.5,-230.5 1769.5,-230.5 1775.5,-236.5 1775.5,-242.5 1775.5,-242.5 1775.5,-286.5 1775.5,-286.5 1775.5,-292.5 1769.5,-298.5 1763.5,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1677\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1671.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 124</text>\r\n<text text-anchor=\"start\" x=\"1670.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 0]</text>\r\n<text text-anchor=\"start\" x=\"1672\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 69->70 -->\r\n<g id=\"edge70\" class=\"edge\"><title>69->70</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1726.18,-341.907C1725.18,-331.204 1724.09,-319.615 1723.07,-308.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1726.54,-308.295 1722.12,-298.667 1719.57,-308.951 1726.54,-308.295\"/>\r\n</g>\r\n<!-- 71 -->\r\n<g id=\"node72\" class=\"node\"><title>71</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1908,-298.5C1908,-298.5 1806,-298.5 1806,-298.5 1800,-298.5 1794,-292.5 1794,-286.5 1794,-286.5 1794,-242.5 1794,-242.5 1794,-236.5 1800,-230.5 1806,-230.5 1806,-230.5 1908,-230.5 1908,-230.5 1914,-230.5 1920,-236.5 1920,-242.5 1920,-242.5 1920,-286.5 1920,-286.5 1920,-292.5 1914,-298.5 1908,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1815\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1817.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"1816.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"1802\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69->71 -->\r\n<g id=\"edge71\" class=\"edge\"><title>69->71</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1774.06,-341.907C1786.88,-330.101 1800.86,-317.217 1813.64,-305.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1816.02,-308.017 1821,-298.667 1811.27,-302.868 1816.02,-308.017\"/>\r\n</g>\r\n<!-- 75 -->\r\n<g id=\"node76\" class=\"node\"><title>75</title>\r\n<path fill=\"#e9f4fc\" stroke=\"black\" d=\"M2212.5,-544C2212.5,-544 2105.5,-544 2105.5,-544 2099.5,-544 2093.5,-538 2093.5,-532 2093.5,-532 2093.5,-473 2093.5,-473 2093.5,-467 2099.5,-461 2105.5,-461 2105.5,-461 2212.5,-461 2212.5,-461 2218.5,-461 2224.5,-467 2224.5,-473 2224.5,-473 2224.5,-532 2224.5,-532 2224.5,-538 2218.5,-544 2212.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2101.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 102.5</text>\r\n<text text-anchor=\"start\" x=\"2109\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"2115.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"2118.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 9]</text>\r\n<text text-anchor=\"start\" x=\"2104\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 74->75 -->\r\n<g id=\"edge75\" class=\"edge\"><title>74->75</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2289.99,-583.32C2271.89,-572.295 2251.88,-560.1 2233.06,-548.629\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2234.86,-545.631 2224.5,-543.416 2231.22,-551.609 2234.86,-545.631\"/>\r\n</g>\r\n<!-- 78 -->\r\n<g id=\"node79\" class=\"node\"><title>78</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M2447.5,-544C2447.5,-544 2254.5,-544 2254.5,-544 2248.5,-544 2242.5,-538 2242.5,-532 2242.5,-532 2242.5,-473 2242.5,-473 2242.5,-467 2248.5,-461 2254.5,-461 2254.5,-461 2447.5,-461 2447.5,-461 2453.5,-461 2459.5,-467 2459.5,-473 2459.5,-473 2459.5,-532 2459.5,-532 2459.5,-538 2453.5,-544 2447.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2250.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.25</text>\r\n<text text-anchor=\"start\" x=\"2309\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.1</text>\r\n<text text-anchor=\"start\" x=\"2303.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 154</text>\r\n<text text-anchor=\"start\" x=\"2302.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 2]</text>\r\n<text text-anchor=\"start\" x=\"2304\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 74->78 -->\r\n<g id=\"edge78\" class=\"edge\"><title>74->78</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2351,-579.907C2351,-571.649 2351,-562.864 2351,-554.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2354.5,-554.021 2351,-544.021 2347.5,-554.021 2354.5,-554.021\"/>\r\n</g>\r\n<!-- 76 -->\r\n<g id=\"node77\" class=\"node\"><title>76</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2069,-417.5C2069,-417.5 1967,-417.5 1967,-417.5 1961,-417.5 1955,-411.5 1955,-405.5 1955,-405.5 1955,-361.5 1955,-361.5 1955,-355.5 1961,-349.5 1967,-349.5 1967,-349.5 2069,-349.5 2069,-349.5 2075,-349.5 2081,-355.5 2081,-361.5 2081,-361.5 2081,-405.5 2081,-405.5 2081,-411.5 2075,-417.5 2069,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1976\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1978.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"1977.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"1963\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 75->76 -->\r\n<g id=\"edge76\" class=\"edge\"><title>75->76</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2110.08,-460.907C2095.72,-448.99 2080.03,-435.976 2065.75,-424.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2067.9,-421.359 2057.97,-417.667 2063.43,-426.746 2067.9,-421.359\"/>\r\n</g>\r\n<!-- 77 -->\r\n<g id=\"node78\" class=\"node\"><title>77</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2197,-417.5C2197,-417.5 2111,-417.5 2111,-417.5 2105,-417.5 2099,-411.5 2099,-405.5 2099,-405.5 2099,-361.5 2099,-361.5 2099,-355.5 2105,-349.5 2111,-349.5 2111,-349.5 2197,-349.5 2197,-349.5 2203,-349.5 2209,-355.5 2209,-361.5 2209,-361.5 2209,-405.5 2209,-405.5 2209,-411.5 2203,-417.5 2197,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2112\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2114.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"2113.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\r\n<text text-anchor=\"start\" x=\"2107\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 75->77 -->\r\n<g id=\"edge77\" class=\"edge\"><title>75->77</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2157.27,-460.907C2156.81,-450.204 2156.31,-438.615 2155.85,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2159.34,-427.508 2155.42,-417.667 2152.35,-427.807 2159.34,-427.508\"/>\r\n</g>\r\n<!-- 79 -->\r\n<g id=\"node80\" class=\"node\"><title>79</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2364.5,-425C2364.5,-425 2239.5,-425 2239.5,-425 2233.5,-425 2227.5,-419 2227.5,-413 2227.5,-413 2227.5,-354 2227.5,-354 2227.5,-348 2233.5,-342 2239.5,-342 2239.5,-342 2364.5,-342 2364.5,-342 2370.5,-342 2376.5,-348 2376.5,-354 2376.5,-354 2376.5,-413 2376.5,-413 2376.5,-419 2370.5,-425 2364.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"2235.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"2252\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.057</text>\r\n<text text-anchor=\"start\" x=\"2254.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 153</text>\r\n<text text-anchor=\"start\" x=\"2253.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 1]</text>\r\n<text text-anchor=\"start\" x=\"2255\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 78->79 -->\r\n<g id=\"edge79\" class=\"edge\"><title>78->79</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2334,-460.907C2330.43,-452.377 2326.62,-443.284 2322.92,-434.456\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2326.06,-432.893 2318.97,-425.021 2319.6,-435.597 2326.06,-432.893\"/>\r\n</g>\r\n<!-- 84 -->\r\n<g id=\"node85\" class=\"node\"><title>84</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2509,-417.5C2509,-417.5 2407,-417.5 2407,-417.5 2401,-417.5 2395,-411.5 2395,-405.5 2395,-405.5 2395,-361.5 2395,-361.5 2395,-355.5 2401,-349.5 2407,-349.5 2407,-349.5 2509,-349.5 2509,-349.5 2515,-349.5 2521,-355.5 2521,-361.5 2521,-361.5 2521,-405.5 2521,-405.5 2521,-411.5 2515,-417.5 2509,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2416\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2418.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2417.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2403\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 78->84 -->\r\n<g id=\"edge84\" class=\"edge\"><title>78->84</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2388.12,-460.907C2398.72,-449.321 2410.26,-436.698 2420.86,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2423.5,-427.408 2427.67,-417.667 2418.34,-422.684 2423.5,-427.408\"/>\r\n</g>\r\n<!-- 80 -->\r\n<g id=\"node81\" class=\"node\"><title>80</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2253.5,-306C2253.5,-306 2146.5,-306 2146.5,-306 2140.5,-306 2134.5,-300 2134.5,-294 2134.5,-294 2134.5,-235 2134.5,-235 2134.5,-229 2140.5,-223 2146.5,-223 2146.5,-223 2253.5,-223 2253.5,-223 2259.5,-223 2265.5,-229 2265.5,-235 2265.5,-235 2265.5,-294 2265.5,-294 2265.5,-300 2259.5,-306 2253.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"2142.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 239.5</text>\r\n<text text-anchor=\"start\" x=\"2150\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2160.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2159.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"2153\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79->80 -->\r\n<g id=\"edge80\" class=\"edge\"><title>79->80</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2266.61,-341.907C2258.7,-332.832 2250.23,-323.121 2242.08,-313.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2244.54,-311.259 2235.33,-306.021 2239.26,-315.859 2244.54,-311.259\"/>\r\n</g>\r\n<!-- 83 -->\r\n<g id=\"node84\" class=\"node\"><title>83</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2384.5,-298.5C2384.5,-298.5 2295.5,-298.5 2295.5,-298.5 2289.5,-298.5 2283.5,-292.5 2283.5,-286.5 2283.5,-286.5 2283.5,-242.5 2283.5,-242.5 2283.5,-236.5 2289.5,-230.5 2295.5,-230.5 2295.5,-230.5 2384.5,-230.5 2384.5,-230.5 2390.5,-230.5 2396.5,-236.5 2396.5,-242.5 2396.5,-242.5 2396.5,-286.5 2396.5,-286.5 2396.5,-292.5 2390.5,-298.5 2384.5,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"2298\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2292.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 150</text>\r\n<text text-anchor=\"start\" x=\"2291.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [150, 0]</text>\r\n<text text-anchor=\"start\" x=\"2293\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79->83 -->\r\n<g id=\"edge83\" class=\"edge\"><title>79->83</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2315.18,-341.907C2318.7,-331.094 2322.5,-319.376 2326.05,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2329.47,-309.259 2329.23,-298.667 2322.81,-307.097 2329.47,-309.259\"/>\r\n</g>\r\n<!-- 81 -->\r\n<g id=\"node82\" class=\"node\"><title>81</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2145,-179.5C2145,-179.5 2059,-179.5 2059,-179.5 2053,-179.5 2047,-173.5 2047,-167.5 2047,-167.5 2047,-123.5 2047,-123.5 2047,-117.5 2053,-111.5 2059,-111.5 2059,-111.5 2145,-111.5 2145,-111.5 2151,-111.5 2157,-117.5 2157,-123.5 2157,-123.5 2157,-167.5 2157,-167.5 2157,-173.5 2151,-179.5 2145,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2060\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2062.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2061.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"2055\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 80->81 -->\r\n<g id=\"edge81\" class=\"edge\"><title>80->81</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2166,-222.907C2156.39,-211.432 2145.92,-198.938 2136.29,-187.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2138.89,-185.086 2129.78,-179.667 2133.52,-189.58 2138.89,-185.086\"/>\r\n</g>\r\n<!-- 82 -->\r\n<g id=\"node83\" class=\"node\"><title>82</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2289,-179.5C2289,-179.5 2187,-179.5 2187,-179.5 2181,-179.5 2175,-173.5 2175,-167.5 2175,-167.5 2175,-123.5 2175,-123.5 2175,-117.5 2181,-111.5 2187,-111.5 2187,-111.5 2289,-111.5 2289,-111.5 2295,-111.5 2301,-117.5 2301,-123.5 2301,-123.5 2301,-167.5 2301,-167.5 2301,-173.5 2295,-179.5 2289,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2196\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2198.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2197.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2183\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 80->82 -->\r\n<g id=\"edge82\" class=\"edge\"><title>80->82</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2213.18,-222.907C2216.7,-212.094 2220.5,-200.376 2224.05,-189.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2227.47,-190.259 2227.23,-179.667 2220.81,-188.097 2227.47,-190.259\"/>\r\n</g>\r\n<!-- 86 -->\r\n<g id=\"node87\" class=\"node\"><title>86</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2882,-663C2882,-663 2660,-663 2660,-663 2654,-663 2648,-657 2648,-651 2648,-651 2648,-592 2648,-592 2648,-586 2654,-580 2660,-580 2660,-580 2882,-580 2882,-580 2888,-580 2894,-586 2894,-592 2894,-592 2894,-651 2894,-651 2894,-657 2888,-663 2882,-663\"/>\r\n<text text-anchor=\"start\" x=\"2656\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"2721\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2727.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\r\n<text text-anchor=\"start\" x=\"2722.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 33]</text>\r\n<text text-anchor=\"start\" x=\"2724\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 85->86 -->\r\n<g id=\"edge86\" class=\"edge\"><title>85->86</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2837.61,-698.907C2829.7,-689.832 2821.23,-680.121 2813.08,-670.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2815.54,-668.259 2806.33,-663.021 2810.26,-672.859 2815.54,-668.259\"/>\r\n</g>\r\n<!-- 99 -->\r\n<g id=\"node100\" class=\"node\"><title>99</title>\r\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M3026,-663C3026,-663 2924,-663 2924,-663 2918,-663 2912,-657 2912,-651 2912,-651 2912,-592 2912,-592 2912,-586 2918,-580 2924,-580 2924,-580 3026,-580 3026,-580 3032,-580 3038,-586 3038,-592 3038,-592 3038,-651 3038,-651 3038,-657 3032,-663 3026,-663\"/>\r\n<text text-anchor=\"start\" x=\"2927\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"2925\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\r\n<text text-anchor=\"start\" x=\"2931.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\r\n<text text-anchor=\"start\" x=\"2930.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 65]</text>\r\n<text text-anchor=\"start\" x=\"2920\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 85->99 -->\r\n<g id=\"edge99\" class=\"edge\"><title>85->99</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2908.39,-698.907C2916.3,-689.832 2924.77,-680.121 2932.92,-670.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2935.74,-672.859 2939.67,-663.021 2930.46,-668.259 2935.74,-672.859\"/>\r\n</g>\r\n<!-- 87 -->\r\n<g id=\"node88\" class=\"node\"><title>87</title>\r\n<path fill=\"#ecf6fd\" stroke=\"black\" d=\"M2715.5,-544C2715.5,-544 2608.5,-544 2608.5,-544 2602.5,-544 2596.5,-538 2596.5,-532 2596.5,-532 2596.5,-473 2596.5,-473 2596.5,-467 2602.5,-461 2608.5,-461 2608.5,-461 2715.5,-461 2715.5,-461 2721.5,-461 2727.5,-467 2727.5,-473 2727.5,-473 2727.5,-532 2727.5,-532 2727.5,-538 2721.5,-544 2715.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2604.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 189.5</text>\r\n<text text-anchor=\"start\" x=\"2612\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"2618.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 61</text>\r\n<text text-anchor=\"start\" x=\"2613.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 32]</text>\r\n<text text-anchor=\"start\" x=\"2607\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 86->87 -->\r\n<g id=\"edge87\" class=\"edge\"><title>86->87</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2733.18,-579.907C2724.64,-570.742 2715.5,-560.927 2706.71,-551.489\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2709.13,-548.952 2699.75,-544.021 2704.01,-553.723 2709.13,-548.952\"/>\r\n</g>\r\n<!-- 96 -->\r\n<g id=\"node97\" class=\"node\"><title>96</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M2850,-544C2850,-544 2758,-544 2758,-544 2752,-544 2746,-538 2746,-532 2746,-532 2746,-473 2746,-473 2746,-467 2752,-461 2758,-461 2758,-461 2850,-461 2850,-461 2856,-461 2862,-467 2862,-473 2862,-473 2862,-532 2862,-532 2862,-538 2856,-544 2850,-544\"/>\r\n<text text-anchor=\"start\" x=\"2761\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 7.0</text>\r\n<text text-anchor=\"start\" x=\"2754\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.176</text>\r\n<text text-anchor=\"start\" x=\"2760.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"2759.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 1]</text>\r\n<text text-anchor=\"start\" x=\"2757\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 86->96 -->\r\n<g id=\"edge96\" class=\"edge\"><title>86->96</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2782.45,-579.907C2784.83,-571.468 2787.37,-562.477 2789.83,-553.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2793.22,-554.595 2792.57,-544.021 2786.49,-552.695 2793.22,-554.595\"/>\r\n</g>\r\n<!-- 88 -->\r\n<g id=\"node89\" class=\"node\"><title>88</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2637,-417.5C2637,-417.5 2551,-417.5 2551,-417.5 2545,-417.5 2539,-411.5 2539,-405.5 2539,-405.5 2539,-361.5 2539,-361.5 2539,-355.5 2545,-349.5 2551,-349.5 2551,-349.5 2637,-349.5 2637,-349.5 2643,-349.5 2649,-355.5 2649,-361.5 2649,-361.5 2649,-405.5 2649,-405.5 2649,-411.5 2643,-417.5 2637,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2552\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2550.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"2549.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\r\n<text text-anchor=\"start\" x=\"2547\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 87->88 -->\r\n<g id=\"edge88\" class=\"edge\"><title>87->88</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2638.41,-460.907C2631.93,-449.763 2624.9,-437.658 2618.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2621.33,-424.554 2613.28,-417.667 2615.28,-428.072 2621.33,-424.554\"/>\r\n</g>\r\n<!-- 89 -->\r\n<g id=\"node90\" class=\"node\"><title>89</title>\r\n<path fill=\"#96cbf1\" stroke=\"black\" d=\"M2786.5,-425C2786.5,-425 2679.5,-425 2679.5,-425 2673.5,-425 2667.5,-419 2667.5,-413 2667.5,-413 2667.5,-354 2667.5,-354 2667.5,-348 2673.5,-342 2679.5,-342 2679.5,-342 2786.5,-342 2786.5,-342 2792.5,-342 2798.5,-348 2798.5,-354 2798.5,-354 2798.5,-413 2798.5,-413 2798.5,-419 2792.5,-425 2786.5,-425\"/>\r\n<text text-anchor=\"start\" x=\"2675.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 358.5</text>\r\n<text text-anchor=\"start\" x=\"2683\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.903</text>\r\n<text text-anchor=\"start\" x=\"2689.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\r\n<text text-anchor=\"start\" x=\"2684.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [15, 32]</text>\r\n<text text-anchor=\"start\" x=\"2678\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 87->89 -->\r\n<g id=\"edge89\" class=\"edge\"><title>87->89</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2686.63,-460.907C2691.97,-452.105 2697.68,-442.703 2703.2,-433.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2706.21,-435.386 2708.41,-425.021 2700.23,-431.754 2706.21,-435.386\"/>\r\n</g>\r\n<!-- 90 -->\r\n<g id=\"node91\" class=\"node\"><title>90</title>\r\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M2631,-306C2631,-306 2529,-306 2529,-306 2523,-306 2517,-300 2517,-294 2517,-294 2517,-235 2517,-235 2517,-229 2523,-223 2529,-223 2529,-223 2631,-223 2631,-223 2637,-223 2643,-229 2643,-235 2643,-235 2643,-294 2643,-294 2643,-300 2637,-306 2631,-306\"/>\r\n<text text-anchor=\"start\" x=\"2532\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2530\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.206</text>\r\n<text text-anchor=\"start\" x=\"2536.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"2535.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 30]</text>\r\n<text text-anchor=\"start\" x=\"2525\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 89->90 -->\r\n<g id=\"edge90\" class=\"edge\"><title>89->90</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2679.92,-341.907C2667.46,-332.379 2654.08,-322.148 2641.29,-312.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2643.06,-309.315 2632.99,-306.021 2638.81,-314.876 2643.06,-309.315\"/>\r\n</g>\r\n<!-- 93 -->\r\n<g id=\"node94\" class=\"node\"><title>93</title>\r\n<path fill=\"#e99355\" stroke=\"black\" d=\"M2796.5,-306C2796.5,-306 2673.5,-306 2673.5,-306 2667.5,-306 2661.5,-300 2661.5,-294 2661.5,-294 2661.5,-235 2661.5,-235 2661.5,-229 2667.5,-223 2673.5,-223 2673.5,-223 2796.5,-223 2796.5,-223 2802.5,-223 2808.5,-229 2808.5,-235 2808.5,-235 2808.5,-294 2808.5,-294 2808.5,-300 2802.5,-306 2796.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"2669.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 32877.5</text>\r\n<text text-anchor=\"start\" x=\"2685\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"2691.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"2690.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 2]</text>\r\n<text text-anchor=\"start\" x=\"2688\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 89->93 -->\r\n<g id=\"edge93\" class=\"edge\"><title>89->93</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2733.69,-341.907C2733.84,-333.558 2733.99,-324.671 2734.14,-316.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2737.64,-316.079 2734.31,-306.021 2730.64,-315.959 2737.64,-316.079\"/>\r\n</g>\r\n<!-- 91 -->\r\n<g id=\"node92\" class=\"node\"><title>91</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2502,-179.5C2502,-179.5 2400,-179.5 2400,-179.5 2394,-179.5 2388,-173.5 2388,-167.5 2388,-167.5 2388,-123.5 2388,-123.5 2388,-117.5 2394,-111.5 2400,-111.5 2400,-111.5 2502,-111.5 2502,-111.5 2508,-111.5 2514,-117.5 2514,-123.5 2514,-123.5 2514,-167.5 2514,-167.5 2514,-173.5 2508,-179.5 2502,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2409\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2407.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 30]</text>\r\n<text text-anchor=\"start\" x=\"2396\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90->91 -->\r\n<g id=\"edge91\" class=\"edge\"><title>90->91</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2535.24,-222.907C2522.23,-211.101 2508.02,-198.217 2495.05,-186.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2497.33,-183.793 2487.57,-179.667 2492.62,-188.978 2497.33,-183.793\"/>\r\n</g>\r\n<!-- 92 -->\r\n<g id=\"node93\" class=\"node\"><title>92</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2630,-179.5C2630,-179.5 2544,-179.5 2544,-179.5 2538,-179.5 2532,-173.5 2532,-167.5 2532,-167.5 2532,-123.5 2532,-123.5 2532,-117.5 2538,-111.5 2544,-111.5 2544,-111.5 2630,-111.5 2630,-111.5 2636,-111.5 2642,-117.5 2642,-123.5 2642,-123.5 2642,-167.5 2642,-167.5 2642,-173.5 2636,-179.5 2630,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2545\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2547.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2546.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2540\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 90->92 -->\r\n<g id=\"edge92\" class=\"edge\"><title>90->92</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2582.43,-222.907C2583.07,-212.204 2583.76,-200.615 2584.41,-189.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2587.91,-189.858 2585.02,-179.667 2580.92,-189.44 2587.91,-189.858\"/>\r\n</g>\r\n<!-- 94 -->\r\n<g id=\"node95\" class=\"node\"><title>94</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2771,-179.5C2771,-179.5 2685,-179.5 2685,-179.5 2679,-179.5 2673,-173.5 2673,-167.5 2673,-167.5 2673,-123.5 2673,-123.5 2673,-117.5 2679,-111.5 2685,-111.5 2685,-111.5 2771,-111.5 2771,-111.5 2777,-111.5 2783,-117.5 2783,-123.5 2783,-123.5 2783,-167.5 2783,-167.5 2783,-173.5 2777,-179.5 2771,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2686\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2684.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\r\n<text text-anchor=\"start\" x=\"2683.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\r\n<text text-anchor=\"start\" x=\"2681\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 93->94 -->\r\n<g id=\"edge94\" class=\"edge\"><title>93->94</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2732.57,-222.907C2731.93,-212.204 2731.24,-200.615 2730.59,-189.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2734.08,-189.44 2729.98,-179.667 2727.09,-189.858 2734.08,-189.44\"/>\r\n</g>\r\n<!-- 95 -->\r\n<g id=\"node96\" class=\"node\"><title>95</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2915,-179.5C2915,-179.5 2813,-179.5 2813,-179.5 2807,-179.5 2801,-173.5 2801,-167.5 2801,-167.5 2801,-123.5 2801,-123.5 2801,-117.5 2807,-111.5 2813,-111.5 2813,-111.5 2915,-111.5 2915,-111.5 2921,-111.5 2927,-117.5 2927,-123.5 2927,-123.5 2927,-167.5 2927,-167.5 2927,-173.5 2921,-179.5 2915,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"2822\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2824.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2823.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2809\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 93->95 -->\r\n<g id=\"edge95\" class=\"edge\"><title>93->95</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2779.76,-222.907C2792.77,-211.101 2806.98,-198.217 2819.95,-186.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2822.38,-188.978 2827.43,-179.667 2817.67,-183.793 2822.38,-188.978\"/>\r\n</g>\r\n<!-- 97 -->\r\n<g id=\"node98\" class=\"node\"><title>97</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2915,-417.5C2915,-417.5 2829,-417.5 2829,-417.5 2823,-417.5 2817,-411.5 2817,-405.5 2817,-405.5 2817,-361.5 2817,-361.5 2817,-355.5 2823,-349.5 2829,-349.5 2829,-349.5 2915,-349.5 2915,-349.5 2921,-349.5 2927,-355.5 2927,-361.5 2927,-361.5 2927,-405.5 2927,-405.5 2927,-411.5 2921,-417.5 2915,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2830\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2828.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\r\n<text text-anchor=\"start\" x=\"2827.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 0]</text>\r\n<text text-anchor=\"start\" x=\"2825\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 96->97 -->\r\n<g id=\"edge97\" class=\"edge\"><title>96->97</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2827.59,-460.907C2834.07,-449.763 2841.1,-437.658 2847.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2850.72,-428.072 2852.72,-417.667 2844.67,-424.554 2850.72,-428.072\"/>\r\n</g>\r\n<!-- 98 -->\r\n<g id=\"node99\" class=\"node\"><title>98</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3059,-417.5C3059,-417.5 2957,-417.5 2957,-417.5 2951,-417.5 2945,-411.5 2945,-405.5 2945,-405.5 2945,-361.5 2945,-361.5 2945,-355.5 2951,-349.5 2957,-349.5 2957,-349.5 3059,-349.5 3059,-349.5 3065,-349.5 3071,-355.5 3071,-361.5 3071,-361.5 3071,-405.5 3071,-405.5 3071,-411.5 3065,-417.5 3059,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2966\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2968.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2967.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2953\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 96->98 -->\r\n<g id=\"edge98\" class=\"edge\"><title>96->98</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2862.02,-466.242C2865.05,-464.458 2868.06,-462.702 2871,-461 2899.58,-444.455 2907.16,-441.095 2936,-425 2937.33,-424.257 2938.67,-423.507 2940.03,-422.75\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2942.06,-425.623 2949.08,-417.685 2938.64,-419.514 2942.06,-425.623\"/>\r\n</g>\r\n<!-- 100 -->\r\n<g id=\"node101\" class=\"node\"><title>100</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2994,-536.5C2994,-536.5 2892,-536.5 2892,-536.5 2886,-536.5 2880,-530.5 2880,-524.5 2880,-524.5 2880,-480.5 2880,-480.5 2880,-474.5 2886,-468.5 2892,-468.5 2892,-468.5 2994,-468.5 2994,-468.5 3000,-468.5 3006,-474.5 3006,-480.5 3006,-480.5 3006,-524.5 3006,-524.5 3006,-530.5 3000,-536.5 2994,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2901\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2899.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 65</text>\r\n<text text-anchor=\"start\" x=\"2898.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 65]</text>\r\n<text text-anchor=\"start\" x=\"2888\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 99->100 -->\r\n<g id=\"edge100\" class=\"edge\"><title>99->100</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2963.9,-579.907C2960.94,-569.094 2957.74,-557.376 2954.74,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2958.09,-545.389 2952.07,-536.667 2951.33,-547.236 2958.09,-545.389\"/>\r\n</g>\r\n<!-- 101 -->\r\n<g id=\"node102\" class=\"node\"><title>101</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3122,-536.5C3122,-536.5 3036,-536.5 3036,-536.5 3030,-536.5 3024,-530.5 3024,-524.5 3024,-524.5 3024,-480.5 3024,-480.5 3024,-474.5 3030,-468.5 3036,-468.5 3036,-468.5 3122,-468.5 3122,-468.5 3128,-468.5 3134,-474.5 3134,-480.5 3134,-480.5 3134,-524.5 3134,-524.5 3134,-530.5 3128,-536.5 3122,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3037\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3039.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3038.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3032\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 99->101 -->\r\n<g id=\"edge101\" class=\"edge\"><title>99->101</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3011.08,-579.907C3021.28,-568.432 3032.39,-555.938 3042.61,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3045.49,-546.466 3049.52,-536.667 3040.26,-541.816 3045.49,-546.466\"/>\r\n</g>\r\n<!-- 103 -->\r\n<g id=\"node104\" class=\"node\"><title>103</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3521,-782C3521,-782 3333,-782 3333,-782 3327,-782 3321,-776 3321,-770 3321,-770 3321,-711 3321,-711 3321,-705 3327,-699 3333,-699 3333,-699 3521,-699 3521,-699 3527,-699 3533,-705 3533,-711 3533,-711 3533,-770 3533,-770 3533,-776 3527,-782 3521,-782\"/>\r\n<text text-anchor=\"start\" x=\"3329\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.3</text>\r\n<text text-anchor=\"start\" x=\"3377\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.005</text>\r\n<text text-anchor=\"start\" x=\"3375.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7367</text>\r\n<text text-anchor=\"start\" x=\"3374\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7364, 3]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102->103 -->\r\n<g id=\"edge103\" class=\"edge\"><title>102->103</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3508.63,-817.907C3498.65,-808.56 3487.94,-798.538 3477.67,-788.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3479.98,-786.299 3470.29,-782.021 3475.2,-791.41 3479.98,-786.299\"/>\r\n</g>\r\n<!-- 110 -->\r\n<g id=\"node111\" class=\"node\"><title>110</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M3735,-782C3735,-782 3583,-782 3583,-782 3577,-782 3571,-776 3571,-770 3571,-770 3571,-711 3571,-711 3571,-705 3577,-699 3583,-699 3583,-699 3735,-699 3735,-699 3741,-699 3747,-705 3747,-711 3747,-711 3747,-770 3747,-770 3747,-776 3741,-782 3735,-782\"/>\r\n<text text-anchor=\"start\" x=\"3579\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3609\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.156</text>\r\n<text text-anchor=\"start\" x=\"3611.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 264</text>\r\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [258, 6]</text>\r\n<text text-anchor=\"start\" x=\"3612\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102->110 -->\r\n<g id=\"edge110\" class=\"edge\"><title>102->110</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3589.12,-817.907C3597.51,-808.742 3606.48,-798.927 3615.11,-789.489\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3617.78,-791.762 3621.94,-782.021 3612.61,-787.038 3617.78,-791.762\"/>\r\n</g>\r\n<!-- 104 -->\r\n<g id=\"node105\" class=\"node\"><title>104</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3339,-655.5C3339,-655.5 3241,-655.5 3241,-655.5 3235,-655.5 3229,-649.5 3229,-643.5 3229,-643.5 3229,-599.5 3229,-599.5 3229,-593.5 3235,-587.5 3241,-587.5 3241,-587.5 3339,-587.5 3339,-587.5 3345,-587.5 3351,-593.5 3351,-599.5 3351,-599.5 3351,-643.5 3351,-643.5 3351,-649.5 3345,-655.5 3339,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3248\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3238.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7321</text>\r\n<text text-anchor=\"start\" x=\"3237\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7321, 0]</text>\r\n<text text-anchor=\"start\" x=\"3243\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103->104 -->\r\n<g id=\"edge104\" class=\"edge\"><title>103->104</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3379.47,-698.907C3365.64,-687.101 3350.56,-674.217 3336.78,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3338.71,-659.5 3328.84,-655.667 3334.17,-664.823 3338.71,-659.5\"/>\r\n</g>\r\n<!-- 105 -->\r\n<g id=\"node106\" class=\"node\"><title>105</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M3473,-663C3473,-663 3381,-663 3381,-663 3375,-663 3369,-657 3369,-651 3369,-651 3369,-592 3369,-592 3369,-586 3375,-580 3381,-580 3381,-580 3473,-580 3473,-580 3479,-580 3485,-586 3485,-592 3485,-592 3485,-651 3485,-651 3485,-657 3479,-663 3473,-663\"/>\r\n<text text-anchor=\"start\" x=\"3377.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3377\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.348</text>\r\n<text text-anchor=\"start\" x=\"3383.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 46</text>\r\n<text text-anchor=\"start\" x=\"3382.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [43, 3]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103->105 -->\r\n<g id=\"edge105\" class=\"edge\"><title>103->105</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3427,-698.907C3427,-690.649 3427,-681.864 3427,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3430.5,-673.021 3427,-663.021 3423.5,-673.021 3430.5,-673.021\"/>\r\n</g>\r\n<!-- 106 -->\r\n<g id=\"node107\" class=\"node\"><title>106</title>\r\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M3341.5,-544C3341.5,-544 3164.5,-544 3164.5,-544 3158.5,-544 3152.5,-538 3152.5,-532 3152.5,-532 3152.5,-473 3152.5,-473 3152.5,-467 3158.5,-461 3164.5,-461 3164.5,-461 3341.5,-461 3341.5,-461 3347.5,-461 3353.5,-467 3353.5,-473 3353.5,-473 3353.5,-532 3353.5,-532 3353.5,-538 3347.5,-544 3341.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3160.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.675</text>\r\n<text text-anchor=\"start\" x=\"3203\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"3213.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3212.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\r\n<text text-anchor=\"start\" x=\"3198\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 105->106 -->\r\n<g id=\"edge106\" class=\"edge\"><title>105->106</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3368.58,-581.215C3353.58,-571.133 3337.31,-560.194 3321.85,-549.793\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3323.6,-546.755 3313.35,-544.08 3319.69,-552.564 3323.6,-546.755\"/>\r\n</g>\r\n<!-- 109 -->\r\n<g id=\"node110\" class=\"node\"><title>109</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3470,-536.5C3470,-536.5 3384,-536.5 3384,-536.5 3378,-536.5 3372,-530.5 3372,-524.5 3372,-524.5 3372,-480.5 3372,-480.5 3372,-474.5 3378,-468.5 3384,-468.5 3384,-468.5 3470,-468.5 3470,-468.5 3476,-468.5 3482,-474.5 3482,-480.5 3482,-480.5 3482,-524.5 3482,-524.5 3482,-530.5 3476,-536.5 3470,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3385\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3383.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\r\n<text text-anchor=\"start\" x=\"3382.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\r\n<text text-anchor=\"start\" x=\"3380\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 105->109 -->\r\n<g id=\"edge109\" class=\"edge\"><title>105->109</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3427,-579.907C3427,-569.204 3427,-557.615 3427,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3430.5,-546.667 3427,-536.667 3423.5,-546.667 3430.5,-546.667\"/>\r\n</g>\r\n<!-- 107 -->\r\n<g id=\"node108\" class=\"node\"><title>107</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3254,-417.5C3254,-417.5 3152,-417.5 3152,-417.5 3146,-417.5 3140,-411.5 3140,-405.5 3140,-405.5 3140,-361.5 3140,-361.5 3140,-355.5 3146,-349.5 3152,-349.5 3152,-349.5 3254,-349.5 3254,-349.5 3260,-349.5 3266,-355.5 3266,-361.5 3266,-361.5 3266,-405.5 3266,-405.5 3266,-411.5 3260,-417.5 3254,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3161\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3163.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3162.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"3148\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 106->107 -->\r\n<g id=\"edge107\" class=\"edge\"><title>106->107</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3235.65,-460.907C3230.98,-449.983 3225.92,-438.137 3221.21,-427.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3224.32,-425.487 3217.17,-417.667 3217.89,-428.238 3224.32,-425.487\"/>\r\n</g>\r\n<!-- 108 -->\r\n<g id=\"node109\" class=\"node\"><title>108</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3382,-417.5C3382,-417.5 3296,-417.5 3296,-417.5 3290,-417.5 3284,-411.5 3284,-405.5 3284,-405.5 3284,-361.5 3284,-361.5 3284,-355.5 3290,-349.5 3296,-349.5 3296,-349.5 3382,-349.5 3382,-349.5 3388,-349.5 3394,-355.5 3394,-361.5 3394,-361.5 3394,-405.5 3394,-405.5 3394,-411.5 3388,-417.5 3382,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3297\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3299.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3298.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3292\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 106->108 -->\r\n<g id=\"edge108\" class=\"edge\"><title>106->108</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3282.84,-460.907C3291.19,-449.542 3300.28,-437.178 3308.66,-425.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3311.52,-427.797 3314.62,-417.667 3305.88,-423.652 3311.52,-427.797\"/>\r\n</g>\r\n<!-- 111 -->\r\n<g id=\"node112\" class=\"node\"><title>111</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3710,-663C3710,-663 3608,-663 3608,-663 3602,-663 3596,-657 3596,-651 3596,-651 3596,-592 3596,-592 3596,-586 3602,-580 3608,-580 3608,-580 3710,-580 3710,-580 3716,-580 3722,-586 3722,-592 3722,-592 3722,-651 3722,-651 3722,-657 3716,-663 3710,-663\"/>\r\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3609\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"3619.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3618.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"3604\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 110->111 -->\r\n<g id=\"edge111\" class=\"edge\"><title>110->111</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3659,-698.907C3659,-690.649 3659,-681.864 3659,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3662.5,-673.021 3659,-663.021 3655.5,-673.021 3662.5,-673.021\"/>\r\n</g>\r\n<!-- 114 -->\r\n<g id=\"node115\" class=\"node\"><title>114</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3886.5,-663C3886.5,-663 3771.5,-663 3771.5,-663 3765.5,-663 3759.5,-657 3759.5,-651 3759.5,-651 3759.5,-592 3759.5,-592 3759.5,-586 3765.5,-580 3771.5,-580 3771.5,-580 3886.5,-580 3886.5,-580 3892.5,-580 3898.5,-586 3898.5,-592 3898.5,-592 3898.5,-651 3898.5,-651 3898.5,-657 3892.5,-663 3886.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"3767.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1695.0</text>\r\n<text text-anchor=\"start\" x=\"3779\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.114</text>\r\n<text text-anchor=\"start\" x=\"3781.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 261</text>\r\n<text text-anchor=\"start\" x=\"3780.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [257, 4]</text>\r\n<text text-anchor=\"start\" x=\"3782\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110->114 -->\r\n<g id=\"edge114\" class=\"edge\"><title>110->114</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3717.98,-698.907C3732.09,-689.197 3747.26,-678.758 3761.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3763.87,-671.573 3770.12,-663.021 3759.9,-665.807 3763.87,-671.573\"/>\r\n</g>\r\n<!-- 112 -->\r\n<g id=\"node113\" class=\"node\"><title>112</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3614,-536.5C3614,-536.5 3512,-536.5 3512,-536.5 3506,-536.5 3500,-530.5 3500,-524.5 3500,-524.5 3500,-480.5 3500,-480.5 3500,-474.5 3506,-468.5 3512,-468.5 3512,-468.5 3614,-468.5 3614,-468.5 3620,-468.5 3626,-474.5 3626,-480.5 3626,-480.5 3626,-524.5 3626,-524.5 3626,-530.5 3620,-536.5 3614,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3521\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3523.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3522.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"3508\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 111->112 -->\r\n<g id=\"edge112\" class=\"edge\"><title>111->112</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3625.69,-579.907C3616.28,-568.432 3606.03,-555.938 3596.59,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3599.26,-542.178 3590.21,-536.667 3593.85,-546.618 3599.26,-542.178\"/>\r\n</g>\r\n<!-- 113 -->\r\n<g id=\"node114\" class=\"node\"><title>113</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3742,-536.5C3742,-536.5 3656,-536.5 3656,-536.5 3650,-536.5 3644,-530.5 3644,-524.5 3644,-524.5 3644,-480.5 3644,-480.5 3644,-474.5 3650,-468.5 3656,-468.5 3656,-468.5 3742,-468.5 3742,-468.5 3748,-468.5 3754,-474.5 3754,-480.5 3754,-480.5 3754,-524.5 3754,-524.5 3754,-530.5 3748,-536.5 3742,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3657\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3659.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3658.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3652\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 111->113 -->\r\n<g id=\"edge113\" class=\"edge\"><title>111->113</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3672.88,-579.907C3676.57,-569.094 3680.58,-557.376 3684.32,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3687.74,-547.261 3687.66,-536.667 3681.11,-544.997 3687.74,-547.261\"/>\r\n</g>\r\n<!-- 115 -->\r\n<g id=\"node116\" class=\"node\"><title>115</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3873.5,-536.5C3873.5,-536.5 3784.5,-536.5 3784.5,-536.5 3778.5,-536.5 3772.5,-530.5 3772.5,-524.5 3772.5,-524.5 3772.5,-480.5 3772.5,-480.5 3772.5,-474.5 3778.5,-468.5 3784.5,-468.5 3784.5,-468.5 3873.5,-468.5 3873.5,-468.5 3879.5,-468.5 3885.5,-474.5 3885.5,-480.5 3885.5,-480.5 3885.5,-524.5 3885.5,-524.5 3885.5,-530.5 3879.5,-536.5 3873.5,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3787\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3781.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 230</text>\r\n<text text-anchor=\"start\" x=\"3780.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [230, 0]</text>\r\n<text text-anchor=\"start\" x=\"3782\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114->115 -->\r\n<g id=\"edge115\" class=\"edge\"><title>114->115</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3829,-579.907C3829,-569.204 3829,-557.615 3829,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3832.5,-546.667 3829,-536.667 3825.5,-546.667 3832.5,-546.667\"/>\r\n</g>\r\n<!-- 116 -->\r\n<g id=\"node117\" class=\"node\"><title>116</title>\r\n<path fill=\"#e99456\" stroke=\"black\" d=\"M4084.5,-544C4084.5,-544 3915.5,-544 3915.5,-544 3909.5,-544 3903.5,-538 3903.5,-532 3903.5,-532 3903.5,-473 3903.5,-473 3903.5,-467 3909.5,-461 3915.5,-461 3915.5,-461 4084.5,-461 4084.5,-461 4090.5,-461 4096.5,-467 4096.5,-473 4096.5,-473 4096.5,-532 4096.5,-532 4096.5,-538 4090.5,-544 4084.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3911.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 123.5</text>\r\n<text text-anchor=\"start\" x=\"3950\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.555</text>\r\n<text text-anchor=\"start\" x=\"3956.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"3955.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [27, 4]</text>\r\n<text text-anchor=\"start\" x=\"3953\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114->116 -->\r\n<g id=\"edge116\" class=\"edge\"><title>114->116</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3888.33,-579.907C3902.52,-570.197 3917.78,-559.758 3932.31,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3934.5,-552.556 3940.78,-544.021 3930.55,-546.779 3934.5,-552.556\"/>\r\n</g>\r\n<!-- 117 -->\r\n<g id=\"node118\" class=\"node\"><title>117</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3965,-417.5C3965,-417.5 3879,-417.5 3879,-417.5 3873,-417.5 3867,-411.5 3867,-405.5 3867,-405.5 3867,-361.5 3867,-361.5 3867,-355.5 3873,-349.5 3879,-349.5 3879,-349.5 3965,-349.5 3965,-349.5 3971,-349.5 3977,-355.5 3977,-361.5 3977,-361.5 3977,-405.5 3977,-405.5 3977,-411.5 3971,-417.5 3965,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3880\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3878.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25</text>\r\n<text text-anchor=\"start\" x=\"3877.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [25, 0]</text>\r\n<text text-anchor=\"start\" x=\"3875\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 116->117 -->\r\n<g id=\"edge117\" class=\"edge\"><title>116->117</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3972.94,-460.907C3965.43,-449.652 3957.28,-437.418 3949.74,-426.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3952.57,-424.046 3944.11,-417.667 3946.75,-427.929 3952.57,-424.046\"/>\r\n</g>\r\n<!-- 118 -->\r\n<g id=\"node119\" class=\"node\"><title>118</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M4149,-425C4149,-425 4007,-425 4007,-425 4001,-425 3995,-419 3995,-413 3995,-413 3995,-354 3995,-354 3995,-348 4001,-342 4007,-342 4007,-342 4149,-342 4149,-342 4155,-342 4161,-348 4161,-354 4161,-354 4161,-413 4161,-413 4161,-419 4155,-425 4149,-425\"/>\r\n<text text-anchor=\"start\" x=\"4003\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 145.0</text>\r\n<text text-anchor=\"start\" x=\"4028\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"4038.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"4037.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\r\n<text text-anchor=\"start\" x=\"4023\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 116->118 -->\r\n<g id=\"edge118\" class=\"edge\"><title>116->118</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4027.06,-460.907C4032.93,-452.105 4039.2,-442.703 4045.26,-433.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4048.35,-435.283 4050.99,-425.021 4042.53,-431.4 4048.35,-435.283\"/>\r\n</g>\r\n<!-- 119 -->\r\n<g id=\"node120\" class=\"node\"><title>119</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4053,-298.5C4053,-298.5 3967,-298.5 3967,-298.5 3961,-298.5 3955,-292.5 3955,-286.5 3955,-286.5 3955,-242.5 3955,-242.5 3955,-236.5 3961,-230.5 3967,-230.5 3967,-230.5 4053,-230.5 4053,-230.5 4059,-230.5 4065,-236.5 4065,-242.5 4065,-242.5 4065,-286.5 4065,-286.5 4065,-292.5 4059,-298.5 4053,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3968\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3970.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3969.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"3963\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 118->119 -->\r\n<g id=\"edge119\" class=\"edge\"><title>118->119</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4054.41,-341.907C4047.93,-330.763 4040.9,-318.658 4034.37,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4037.33,-305.554 4029.28,-298.667 4031.28,-309.072 4037.33,-305.554\"/>\r\n</g>\r\n<!-- 120 -->\r\n<g id=\"node121\" class=\"node\"><title>120</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4197,-298.5C4197,-298.5 4095,-298.5 4095,-298.5 4089,-298.5 4083,-292.5 4083,-286.5 4083,-286.5 4083,-242.5 4083,-242.5 4083,-236.5 4089,-230.5 4095,-230.5 4095,-230.5 4197,-230.5 4197,-230.5 4203,-230.5 4209,-236.5 4209,-242.5 4209,-242.5 4209,-286.5 4209,-286.5 4209,-292.5 4203,-298.5 4197,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"4104\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4106.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4105.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"4091\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 118->120 -->\r\n<g id=\"edge120\" class=\"edge\"><title>118->120</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4101.59,-341.907C4108.07,-330.763 4115.1,-318.658 4121.63,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4124.72,-309.072 4126.72,-298.667 4118.67,-305.554 4124.72,-309.072\"/>\r\n</g>\r\n<!-- 122 -->\r\n<g id=\"node123\" class=\"node\"><title>122</title>\r\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M4309,-901C4309,-901 4211,-901 4211,-901 4205,-901 4199,-895 4199,-889 4199,-889 4199,-830 4199,-830 4199,-824 4205,-818 4211,-818 4211,-818 4309,-818 4309,-818 4315,-818 4321,-824 4321,-830 4321,-830 4321,-889 4321,-889 4321,-895 4315,-901 4309,-901\"/>\r\n<text text-anchor=\"start\" x=\"4217\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.813</text>\r\n<text text-anchor=\"start\" x=\"4212.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 203</text>\r\n<text text-anchor=\"start\" x=\"4207\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 51]</text>\r\n<text text-anchor=\"start\" x=\"4213\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 121->122 -->\r\n<g id=\"edge122\" class=\"edge\"><title>121->122</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4260,-936.907C4260,-928.649 4260,-919.864 4260,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4263.5,-911.021 4260,-901.021 4256.5,-911.021 4263.5,-911.021\"/>\r\n</g>\r\n<!-- 137 -->\r\n<g id=\"node138\" class=\"node\"><title>137</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4453,-893.5C4453,-893.5 4351,-893.5 4351,-893.5 4345,-893.5 4339,-887.5 4339,-881.5 4339,-881.5 4339,-837.5 4339,-837.5 4339,-831.5 4345,-825.5 4351,-825.5 4351,-825.5 4453,-825.5 4453,-825.5 4459,-825.5 4465,-831.5 4465,-837.5 4465,-837.5 4465,-881.5 4465,-881.5 4465,-887.5 4459,-893.5 4453,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4360\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4354.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 138</text>\r\n<text text-anchor=\"start\" x=\"4353.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 138]</text>\r\n<text text-anchor=\"start\" x=\"4347\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 121->137 -->\r\n<g id=\"edge137\" class=\"edge\"><title>121->137</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4309.27,-936.907C4323.73,-924.99 4339.53,-911.976 4353.91,-900.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4356.25,-902.727 4361.75,-893.667 4351.8,-897.325 4356.25,-902.727\"/>\r\n</g>\r\n<!-- 123 -->\r\n<g id=\"node124\" class=\"node\"><title>123</title>\r\n<path fill=\"#dbedfa\" stroke=\"black\" d=\"M4344.5,-782C4344.5,-782 4175.5,-782 4175.5,-782 4169.5,-782 4163.5,-776 4163.5,-770 4163.5,-770 4163.5,-711 4163.5,-711 4163.5,-705 4169.5,-699 4175.5,-699 4175.5,-699 4344.5,-699 4344.5,-699 4350.5,-699 4356.5,-705 4356.5,-711 4356.5,-711 4356.5,-770 4356.5,-770 4356.5,-776 4350.5,-782 4344.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4171.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 152.0</text>\r\n<text text-anchor=\"start\" x=\"4210\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.993</text>\r\n<text text-anchor=\"start\" x=\"4216.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 80</text>\r\n<text text-anchor=\"start\" x=\"4211.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 44]</text>\r\n<text text-anchor=\"start\" x=\"4205\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 122->123 -->\r\n<g id=\"edge123\" class=\"edge\"><title>122->123</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4260,-817.907C4260,-809.649 4260,-800.864 4260,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4263.5,-792.021 4260,-782.021 4256.5,-792.021 4263.5,-792.021\"/>\r\n</g>\r\n<!-- 130 -->\r\n<g id=\"node131\" class=\"node\"><title>130</title>\r\n<path fill=\"#e78945\" stroke=\"black\" d=\"M4632,-782C4632,-782 4540,-782 4540,-782 4534,-782 4528,-776 4528,-770 4528,-770 4528,-711 4528,-711 4528,-705 4534,-699 4540,-699 4540,-699 4632,-699 4632,-699 4638,-699 4644,-705 4644,-711 4644,-711 4644,-770 4644,-770 4644,-776 4638,-782 4632,-782\"/>\r\n<text text-anchor=\"start\" x=\"4539\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 97.5</text>\r\n<text text-anchor=\"start\" x=\"4536\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.315</text>\r\n<text text-anchor=\"start\" x=\"4538.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 123</text>\r\n<text text-anchor=\"start\" x=\"4537.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [116, 7]</text>\r\n<text text-anchor=\"start\" x=\"4539\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 122->130 -->\r\n<g id=\"edge130\" class=\"edge\"><title>122->130</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4321.04,-822.102C4324.04,-820.656 4327.04,-819.28 4330,-818 4391.72,-791.363 4465.59,-770.37 4518.08,-757.166\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4519.1,-760.521 4527.96,-754.711 4517.41,-753.728 4519.1,-760.521\"/>\r\n</g>\r\n<!-- 124 -->\r\n<g id=\"node125\" class=\"node\"><title>124</title>\r\n<path fill=\"#42a2e6\" stroke=\"black\" d=\"M4316.5,-663C4316.5,-663 4201.5,-663 4201.5,-663 4195.5,-663 4189.5,-657 4189.5,-651 4189.5,-651 4189.5,-592 4189.5,-592 4189.5,-586 4195.5,-580 4201.5,-580 4201.5,-580 4316.5,-580 4316.5,-580 4322.5,-580 4328.5,-586 4328.5,-592 4328.5,-592 4328.5,-651 4328.5,-651 4328.5,-657 4322.5,-663 4316.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4197.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2522.0</text>\r\n<text text-anchor=\"start\" x=\"4209\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.262</text>\r\n<text text-anchor=\"start\" x=\"4215.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\r\n<text text-anchor=\"start\" x=\"4214.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 43]</text>\r\n<text text-anchor=\"start\" x=\"4204\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 123->124 -->\r\n<g id=\"edge124\" class=\"edge\"><title>123->124</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4259.65,-698.907C4259.58,-690.649 4259.51,-681.864 4259.43,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4262.93,-672.99 4259.35,-663.021 4255.93,-673.05 4262.93,-672.99\"/>\r\n</g>\r\n<!-- 127 -->\r\n<g id=\"node128\" class=\"node\"><title>127</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4501.5,-663C4501.5,-663 4358.5,-663 4358.5,-663 4352.5,-663 4346.5,-657 4346.5,-651 4346.5,-651 4346.5,-592 4346.5,-592 4346.5,-586 4352.5,-580 4358.5,-580 4358.5,-580 4501.5,-580 4501.5,-580 4507.5,-580 4513.5,-586 4513.5,-592 4513.5,-592 4513.5,-651 4513.5,-651 4513.5,-657 4507.5,-663 4501.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4354.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_access_files ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"4380\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\r\n<text text-anchor=\"start\" x=\"4386.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 35</text>\r\n<text text-anchor=\"start\" x=\"4385.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 1]</text>\r\n<text text-anchor=\"start\" x=\"4383\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 123->127 -->\r\n<g id=\"edge127\" class=\"edge\"><title>123->127</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4318.98,-698.907C4333.09,-689.197 4348.26,-678.758 4362.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4364.87,-671.573 4371.12,-663.021 4360.9,-665.807 4364.87,-671.573\"/>\r\n</g>\r\n<!-- 125 -->\r\n<g id=\"node126\" class=\"node\"><title>125</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4229,-536.5C4229,-536.5 4127,-536.5 4127,-536.5 4121,-536.5 4115,-530.5 4115,-524.5 4115,-524.5 4115,-480.5 4115,-480.5 4115,-474.5 4121,-468.5 4127,-468.5 4127,-468.5 4229,-468.5 4229,-468.5 4235,-468.5 4241,-474.5 4241,-480.5 4241,-480.5 4241,-524.5 4241,-524.5 4241,-530.5 4235,-536.5 4229,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4136\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4134.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"4133.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 43]</text>\r\n<text text-anchor=\"start\" x=\"4123\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 124->125 -->\r\n<g id=\"edge125\" class=\"edge\"><title>124->125</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4230.9,-579.907C4223.11,-568.652 4214.64,-556.418 4206.8,-545.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4209.53,-542.897 4200.96,-536.667 4203.78,-546.881 4209.53,-542.897\"/>\r\n</g>\r\n<!-- 126 -->\r\n<g id=\"node127\" class=\"node\"><title>126</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4357,-536.5C4357,-536.5 4271,-536.5 4271,-536.5 4265,-536.5 4259,-530.5 4259,-524.5 4259,-524.5 4259,-480.5 4259,-480.5 4259,-474.5 4265,-468.5 4271,-468.5 4271,-468.5 4357,-468.5 4357,-468.5 4363,-468.5 4369,-474.5 4369,-480.5 4369,-480.5 4369,-524.5 4369,-524.5 4369,-530.5 4363,-536.5 4357,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4272\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4274.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4273.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4267\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 124->126 -->\r\n<g id=\"edge126\" class=\"edge\"><title>124->126</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4278.08,-579.907C4283.27,-568.873 4288.9,-556.898 4294.13,-545.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4297.32,-547.206 4298.41,-536.667 4290.99,-544.228 4297.32,-547.206\"/>\r\n</g>\r\n<!-- 128 -->\r\n<g id=\"node129\" class=\"node\"><title>128</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4485,-536.5C4485,-536.5 4399,-536.5 4399,-536.5 4393,-536.5 4387,-530.5 4387,-524.5 4387,-524.5 4387,-480.5 4387,-480.5 4387,-474.5 4393,-468.5 4399,-468.5 4399,-468.5 4485,-468.5 4485,-468.5 4491,-468.5 4497,-474.5 4497,-480.5 4497,-480.5 4497,-524.5 4497,-524.5 4497,-530.5 4491,-536.5 4485,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4400\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4398.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 34</text>\r\n<text text-anchor=\"start\" x=\"4397.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 0]</text>\r\n<text text-anchor=\"start\" x=\"4395\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 127->128 -->\r\n<g id=\"edge128\" class=\"edge\"><title>127->128</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4434.16,-579.907C4435.26,-569.204 4436.45,-557.615 4437.56,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4441.06,-546.972 4438.6,-536.667 4434.1,-546.258 4441.06,-546.972\"/>\r\n</g>\r\n<!-- 129 -->\r\n<g id=\"node130\" class=\"node\"><title>129</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4629,-536.5C4629,-536.5 4527,-536.5 4527,-536.5 4521,-536.5 4515,-530.5 4515,-524.5 4515,-524.5 4515,-480.5 4515,-480.5 4515,-474.5 4521,-468.5 4527,-468.5 4527,-468.5 4629,-468.5 4629,-468.5 4635,-468.5 4641,-474.5 4641,-480.5 4641,-480.5 4641,-524.5 4641,-524.5 4641,-530.5 4635,-536.5 4629,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4536\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4538.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4537.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4523\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127->129 -->\r\n<g id=\"edge129\" class=\"edge\"><title>127->129</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4481.35,-579.907C4496.42,-567.99 4512.89,-554.976 4527.88,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4530.37,-545.614 4536.05,-536.667 4526.03,-540.123 4530.37,-545.614\"/>\r\n</g>\r\n<!-- 131 -->\r\n<g id=\"node132\" class=\"node\"><title>131</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4632.5,-655.5C4632.5,-655.5 4543.5,-655.5 4543.5,-655.5 4537.5,-655.5 4531.5,-649.5 4531.5,-643.5 4531.5,-643.5 4531.5,-599.5 4531.5,-599.5 4531.5,-593.5 4537.5,-587.5 4543.5,-587.5 4543.5,-587.5 4632.5,-587.5 4632.5,-587.5 4638.5,-587.5 4644.5,-593.5 4644.5,-599.5 4644.5,-599.5 4644.5,-643.5 4644.5,-643.5 4644.5,-649.5 4638.5,-655.5 4632.5,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4546\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4540.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\r\n<text text-anchor=\"start\" x=\"4539.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [106, 0]</text>\r\n<text text-anchor=\"start\" x=\"4541\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130->131 -->\r\n<g id=\"edge131\" class=\"edge\"><title>130->131</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4586.69,-698.907C4586.88,-688.204 4587.07,-676.615 4587.26,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4590.76,-665.725 4587.43,-655.667 4583.76,-665.606 4590.76,-665.725\"/>\r\n</g>\r\n<!-- 132 -->\r\n<g id=\"node133\" class=\"node\"><title>132</title>\r\n<path fill=\"#f7d9c4\" stroke=\"black\" d=\"M4861.5,-663C4861.5,-663 4674.5,-663 4674.5,-663 4668.5,-663 4662.5,-657 4662.5,-651 4662.5,-651 4662.5,-592 4662.5,-592 4662.5,-586 4668.5,-580 4674.5,-580 4674.5,-580 4861.5,-580 4861.5,-580 4867.5,-580 4873.5,-586 4873.5,-592 4873.5,-592 4873.5,-651 4873.5,-651 4873.5,-657 4867.5,-663 4861.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4670.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\r\n<text text-anchor=\"start\" x=\"4718\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.977</text>\r\n<text text-anchor=\"start\" x=\"4724.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"4723.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 7]</text>\r\n<text text-anchor=\"start\" x=\"4721\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130->132 -->\r\n<g id=\"edge132\" class=\"edge\"><title>130->132</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4644.09,-702.159C4660.71,-691.469 4679.04,-679.69 4696.38,-668.543\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4698.28,-671.481 4704.8,-663.13 4694.49,-665.593 4698.28,-671.481\"/>\r\n</g>\r\n<!-- 133 -->\r\n<g id=\"node134\" class=\"node\"><title>133</title>\r\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M4806.5,-544C4806.5,-544 4683.5,-544 4683.5,-544 4677.5,-544 4671.5,-538 4671.5,-532 4671.5,-532 4671.5,-473 4671.5,-473 4671.5,-467 4677.5,-461 4683.5,-461 4683.5,-461 4806.5,-461 4806.5,-461 4812.5,-461 4818.5,-467 4818.5,-473 4818.5,-473 4818.5,-532 4818.5,-532 4818.5,-538 4812.5,-544 4806.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4679.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 25291.5</text>\r\n<text text-anchor=\"start\" x=\"4695\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"4705.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"4704.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 7]</text>\r\n<text text-anchor=\"start\" x=\"4690\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 132->133 -->\r\n<g id=\"edge133\" class=\"edge\"><title>132->133</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4760.02,-579.907C4758.38,-571.558 4756.63,-562.671 4754.93,-554.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4758.33,-553.158 4752.97,-544.021 4751.46,-554.508 4758.33,-553.158\"/>\r\n</g>\r\n<!-- 136 -->\r\n<g id=\"node137\" class=\"node\"><title>136</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4935,-536.5C4935,-536.5 4849,-536.5 4849,-536.5 4843,-536.5 4837,-530.5 4837,-524.5 4837,-524.5 4837,-480.5 4837,-480.5 4837,-474.5 4843,-468.5 4849,-468.5 4849,-468.5 4935,-468.5 4935,-468.5 4941,-468.5 4947,-474.5 4947,-480.5 4947,-480.5 4947,-524.5 4947,-524.5 4947,-530.5 4941,-536.5 4935,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4850\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4852.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"4851.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"4845\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 132->136 -->\r\n<g id=\"edge136\" class=\"edge\"><title>132->136</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4811.02,-579.907C4823.42,-568.211 4836.93,-555.457 4849.31,-543.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4851.98,-546.075 4856.85,-536.667 4847.17,-540.984 4851.98,-546.075\"/>\r\n</g>\r\n<!-- 134 -->\r\n<g id=\"node135\" class=\"node\"><title>134</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4728,-417.5C4728,-417.5 4626,-417.5 4626,-417.5 4620,-417.5 4614,-411.5 4614,-405.5 4614,-405.5 4614,-361.5 4614,-361.5 4614,-355.5 4620,-349.5 4626,-349.5 4626,-349.5 4728,-349.5 4728,-349.5 4734,-349.5 4740,-355.5 4740,-361.5 4740,-361.5 4740,-405.5 4740,-405.5 4740,-411.5 4734,-417.5 4728,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4635\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4637.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"4636.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"4622\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 133->134 -->\r\n<g id=\"edge134\" class=\"edge\"><title>133->134</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4721.41,-460.907C4714.93,-449.763 4707.9,-437.658 4701.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4704.33,-424.554 4696.28,-417.667 4698.28,-428.072 4704.33,-424.554\"/>\r\n</g>\r\n<!-- 135 -->\r\n<g id=\"node136\" class=\"node\"><title>135</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4856,-417.5C4856,-417.5 4770,-417.5 4770,-417.5 4764,-417.5 4758,-411.5 4758,-405.5 4758,-405.5 4758,-361.5 4758,-361.5 4758,-355.5 4764,-349.5 4770,-349.5 4770,-349.5 4856,-349.5 4856,-349.5 4862,-349.5 4868,-355.5 4868,-361.5 4868,-361.5 4868,-405.5 4868,-405.5 4868,-411.5 4862,-417.5 4856,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4771\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4773.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4772.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4766\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 133->135 -->\r\n<g id=\"edge135\" class=\"edge\"><title>133->135</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4768.59,-460.907C4775.07,-449.763 4782.1,-437.658 4788.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4791.72,-428.072 4793.72,-417.667 4785.67,-424.554 4791.72,-428.072\"/>\r\n</g>\r\n<!-- 139 -->\r\n<g id=\"node140\" class=\"node\"><title>139</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M4632.5,-1020C4632.5,-1020 4453.5,-1020 4453.5,-1020 4447.5,-1020 4441.5,-1014 4441.5,-1008 4441.5,-1008 4441.5,-949 4441.5,-949 4441.5,-943 4447.5,-937 4453.5,-937 4453.5,-937 4632.5,-937 4632.5,-937 4638.5,-937 4644.5,-943 4644.5,-949 4644.5,-949 4644.5,-1008 4644.5,-1008 4644.5,-1014 4638.5,-1020 4632.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4449.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.33</text>\r\n<text text-anchor=\"start\" x=\"4493\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 193</text>\r\n<text text-anchor=\"start\" x=\"4494.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 1]</text>\r\n<text text-anchor=\"start\" x=\"4496\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 138->139 -->\r\n<g id=\"edge139\" class=\"edge\"><title>138->139</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4543,-1055.91C4543,-1047.65 4543,-1038.86 4543,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.5,-1030.02 4543,-1020.02 4539.5,-1030.02 4546.5,-1030.02\"/>\r\n</g>\r\n<!-- 144 -->\r\n<g id=\"node145\" class=\"node\"><title>144</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4777,-1012.5C4777,-1012.5 4675,-1012.5 4675,-1012.5 4669,-1012.5 4663,-1006.5 4663,-1000.5 4663,-1000.5 4663,-956.5 4663,-956.5 4663,-950.5 4669,-944.5 4675,-944.5 4675,-944.5 4777,-944.5 4777,-944.5 4783,-944.5 4789,-950.5 4789,-956.5 4789,-956.5 4789,-1000.5 4789,-1000.5 4789,-1006.5 4783,-1012.5 4777,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"4684\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4678.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 402</text>\r\n<text text-anchor=\"start\" x=\"4677.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 402]</text>\r\n<text text-anchor=\"start\" x=\"4671\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 138->144 -->\r\n<g id=\"edge144\" class=\"edge\"><title>138->144</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4606.49,-1055.91C4625.65,-1043.66 4646.62,-1030.25 4665.57,-1018.13\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4667.58,-1021 4674.12,-1012.67 4663.81,-1015.1 4667.58,-1021\"/>\r\n</g>\r\n<!-- 140 -->\r\n<g id=\"node141\" class=\"node\"><title>140</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4587.5,-893.5C4587.5,-893.5 4498.5,-893.5 4498.5,-893.5 4492.5,-893.5 4486.5,-887.5 4486.5,-881.5 4486.5,-881.5 4486.5,-837.5 4486.5,-837.5 4486.5,-831.5 4492.5,-825.5 4498.5,-825.5 4498.5,-825.5 4587.5,-825.5 4587.5,-825.5 4593.5,-825.5 4599.5,-831.5 4599.5,-837.5 4599.5,-837.5 4599.5,-881.5 4599.5,-881.5 4599.5,-887.5 4593.5,-893.5 4587.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4501\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4495.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 190</text>\r\n<text text-anchor=\"start\" x=\"4494.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [190, 0]</text>\r\n<text text-anchor=\"start\" x=\"4496\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139->140 -->\r\n<g id=\"edge140\" class=\"edge\"><title>139->140</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4543,-936.907C4543,-926.204 4543,-914.615 4543,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.5,-903.667 4543,-893.667 4539.5,-903.667 4546.5,-903.667\"/>\r\n</g>\r\n<!-- 141 -->\r\n<g id=\"node142\" class=\"node\"><title>141</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M4814.5,-901C4814.5,-901 4635.5,-901 4635.5,-901 4629.5,-901 4623.5,-895 4623.5,-889 4623.5,-889 4623.5,-830 4623.5,-830 4623.5,-824 4629.5,-818 4635.5,-818 4635.5,-818 4814.5,-818 4814.5,-818 4820.5,-818 4826.5,-824 4826.5,-830 4826.5,-830 4826.5,-889 4826.5,-889 4826.5,-895 4820.5,-901 4814.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"4631.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.72</text>\r\n<text text-anchor=\"start\" x=\"4675\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"4685.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"4678\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139->141 -->\r\n<g id=\"edge141\" class=\"edge\"><title>139->141</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4606.14,-936.907C4621.39,-927.106 4637.79,-916.563 4653.39,-906.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4655.45,-909.373 4661.97,-901.021 4651.66,-903.484 4655.45,-909.373\"/>\r\n</g>\r\n<!-- 142 -->\r\n<g id=\"node143\" class=\"node\"><title>142</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4776,-774.5C4776,-774.5 4674,-774.5 4674,-774.5 4668,-774.5 4662,-768.5 4662,-762.5 4662,-762.5 4662,-718.5 4662,-718.5 4662,-712.5 4668,-706.5 4674,-706.5 4674,-706.5 4776,-706.5 4776,-706.5 4782,-706.5 4788,-712.5 4788,-718.5 4788,-718.5 4788,-762.5 4788,-762.5 4788,-768.5 4782,-774.5 4776,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"4683\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4685.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4670\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 141->142 -->\r\n<g id=\"edge142\" class=\"edge\"><title>141->142</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4725,-817.907C4725,-807.204 4725,-795.615 4725,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4728.5,-784.667 4725,-774.667 4721.5,-784.667 4728.5,-784.667\"/>\r\n</g>\r\n<!-- 143 -->\r\n<g id=\"node144\" class=\"node\"><title>143</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4904,-774.5C4904,-774.5 4818,-774.5 4818,-774.5 4812,-774.5 4806,-768.5 4806,-762.5 4806,-762.5 4806,-718.5 4806,-718.5 4806,-712.5 4812,-706.5 4818,-706.5 4818,-706.5 4904,-706.5 4904,-706.5 4910,-706.5 4916,-712.5 4916,-718.5 4916,-718.5 4916,-762.5 4916,-762.5 4916,-768.5 4910,-774.5 4904,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"4819\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4821.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4820.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4814\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 141->143 -->\r\n<g id=\"edge143\" class=\"edge\"><title>141->143</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4772.18,-817.907C4785.91,-806.101 4800.89,-793.217 4814.56,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4817.15,-783.842 4822.45,-774.667 4812.58,-778.535 4817.15,-783.842\"/>\r\n</g>\r\n</g>\r\n</svg>\r\n",
+ "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\n -->\n<!-- Title: Tree Pages: 1 -->\n<svg width=\"5055pt\" height=\"1266pt\"\n viewBox=\"0.00 0.00 5055.00 1266.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1262)\">\n<title>Tree</title>\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1262 5051,-1262 5051,4 -4,4\"/>\n<!-- 0 -->\n<g id=\"node1\" class=\"node\"><title>0</title>\n<path fill=\"#fcefe7\" stroke=\"black\" d=\"M2987,-1258C2987,-1258 2865,-1258 2865,-1258 2859,-1258 2853,-1252 2853,-1246 2853,-1246 2853,-1187 2853,-1187 2853,-1181 2859,-1175 2865,-1175 2865,-1175 2987,-1175 2987,-1175 2993,-1175 2999,-1181 2999,-1187 2999,-1187 2999,-1246 2999,-1246 2999,-1252 2993,-1258 2987,-1258\"/>\n<text text-anchor=\"start\" x=\"2873\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\n<text text-anchor=\"start\" x=\"2876\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.997</text>\n<text text-anchor=\"start\" x=\"2870\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17634</text>\n<text text-anchor=\"start\" x=\"2861\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9396, 8238]</text>\n<text text-anchor=\"start\" x=\"2879\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 1 -->\n<g id=\"node2\" class=\"node\"><title>1</title>\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M2097,-1139C2097,-1139 1983,-1139 1983,-1139 1977,-1139 1971,-1133 1971,-1127 1971,-1127 1971,-1068 1971,-1068 1971,-1062 1977,-1056 1983,-1056 1983,-1056 2097,-1056 2097,-1056 2103,-1056 2109,-1062 2109,-1068 2109,-1068 2109,-1127 2109,-1127 2109,-1133 2103,-1139 2097,-1139\"/>\n<text text-anchor=\"start\" x=\"2005\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 8.5</text>\n<text text-anchor=\"start\" x=\"1990\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.393</text>\n<text text-anchor=\"start\" x=\"1988.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8156</text>\n<text text-anchor=\"start\" x=\"1979\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [632, 7524]</text>\n<text text-anchor=\"start\" x=\"1985\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 0->1 -->\n<g id=\"edge1\" class=\"edge\"><title>0->1</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2852.74,-1205.83C2687.99,-1184.07 2289.39,-1131.43 2119.19,-1108.96\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2119.42,-1105.46 2109.04,-1107.62 2118.5,-1112.4 2119.42,-1105.46\"/>\n<text text-anchor=\"middle\" x=\"2124.25\" y=\"-1123.76\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\n</g>\n<!-- 58 -->\n<g id=\"node59\" class=\"node\"><title>58</title>\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M4112.5,-1139C4112.5,-1139 3997.5,-1139 3997.5,-1139 3991.5,-1139 3985.5,-1133 3985.5,-1127 3985.5,-1127 3985.5,-1068 3985.5,-1068 3985.5,-1062 3991.5,-1056 3997.5,-1056 3997.5,-1056 4112.5,-1056 4112.5,-1056 4118.5,-1056 4124.5,-1062 4124.5,-1068 4124.5,-1068 4124.5,-1127 4124.5,-1127 4124.5,-1133 4118.5,-1139 4112.5,-1139\"/>\n<text text-anchor=\"start\" x=\"3993.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"4005\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.386</text>\n<text text-anchor=\"start\" x=\"4003.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9478</text>\n<text text-anchor=\"start\" x=\"3994\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8764, 714]</text>\n<text text-anchor=\"start\" x=\"4008\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 0->58 -->\n<g id=\"edge58\" class=\"edge\"><title>0->58</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2999.21,-1207.91C3201.25,-1186.98 3765.53,-1128.5 3975.21,-1106.77\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3975.64,-1110.24 3985.22,-1105.73 3974.91,-1103.28 3975.64,-1110.24\"/>\n<text text-anchor=\"middle\" x=\"3969.46\" y=\"-1121.44\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\n</g>\n<!-- 2 -->\n<g id=\"node3\" class=\"node\"><title>2</title>\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M1462,-1020C1462,-1020 1348,-1020 1348,-1020 1342,-1020 1336,-1014 1336,-1008 1336,-1008 1336,-949 1336,-949 1336,-943 1342,-937 1348,-937 1348,-937 1462,-937 1462,-937 1468,-937 1474,-943 1474,-949 1474,-949 1474,-1008 1474,-1008 1474,-1014 1468,-1020 1462,-1020\"/>\n<text text-anchor=\"start\" x=\"1360\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 16.5</text>\n<text text-anchor=\"start\" x=\"1355\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\n<text text-anchor=\"start\" x=\"1353.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1775</text>\n<text text-anchor=\"start\" x=\"1344\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [610, 1165]</text>\n<text text-anchor=\"start\" x=\"1350\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 1->2 -->\n<g id=\"edge2\" class=\"edge\"><title>1->2</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1970.84,-1083.76C1851.91,-1061.84 1609.39,-1017.16 1484,-994.057\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1484.55,-990.598 1474.08,-992.228 1483.28,-997.482 1484.55,-990.598\"/>\n</g>\n<!-- 47 -->\n<g id=\"node48\" class=\"node\"><title>47</title>\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M2141,-1020C2141,-1020 1939,-1020 1939,-1020 1933,-1020 1927,-1014 1927,-1008 1927,-1008 1927,-949 1927,-949 1927,-943 1933,-937 1939,-937 1939,-937 2141,-937 2141,-937 2147,-937 2153,-943 2153,-949 2153,-949 2153,-1008 2153,-1008 2153,-1014 2147,-1020 2141,-1020\"/>\n<text text-anchor=\"start\" x=\"1935\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.835</text>\n<text text-anchor=\"start\" x=\"1990\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.033</text>\n<text text-anchor=\"start\" x=\"1988.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6381</text>\n<text text-anchor=\"start\" x=\"1983\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 6359]</text>\n<text text-anchor=\"start\" x=\"1985\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 1->47 -->\n<g id=\"edge47\" class=\"edge\"><title>1->47</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2040,-1055.91C2040,-1047.65 2040,-1038.86 2040,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2043.5,-1030.02 2040,-1020.02 2036.5,-1030.02 2043.5,-1030.02\"/>\n</g>\n<!-- 3 -->\n<g id=\"node4\" class=\"node\"><title>3</title>\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M548,-901C548,-901 446,-901 446,-901 440,-901 434,-895 434,-889 434,-889 434,-830 434,-830 434,-824 440,-818 446,-818 446,-818 548,-818 548,-818 554,-818 560,-824 560,-830 560,-830 560,-889 560,-889 560,-895 554,-901 548,-901\"/>\n<text text-anchor=\"start\" x=\"456\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"447\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.377</text>\n<text text-anchor=\"start\" x=\"445.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1028</text>\n<text text-anchor=\"start\" x=\"444\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 953]</text>\n<text text-anchor=\"start\" x=\"442\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 2->3 -->\n<g id=\"edge3\" class=\"edge\"><title>2->3</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1335.63,-968.562C1167.86,-946.944 741.376,-891.989 569.968,-869.902\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"570.398,-866.429 560.033,-868.622 569.503,-873.371 570.398,-866.429\"/>\n</g>\n<!-- 16 -->\n<g id=\"node17\" class=\"node\"><title>16</title>\n<path fill=\"#efb387\" stroke=\"black\" d=\"M1506,-901C1506,-901 1304,-901 1304,-901 1298,-901 1292,-895 1292,-889 1292,-889 1292,-830 1292,-830 1292,-824 1298,-818 1304,-818 1304,-818 1506,-818 1506,-818 1512,-818 1518,-824 1518,-830 1518,-830 1518,-889 1518,-889 1518,-895 1512,-901 1506,-901\"/>\n<text text-anchor=\"start\" x=\"1300\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.535</text>\n<text text-anchor=\"start\" x=\"1355\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.861</text>\n<text text-anchor=\"start\" x=\"1357.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 747</text>\n<text text-anchor=\"start\" x=\"1348\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [535, 212]</text>\n<text text-anchor=\"start\" x=\"1358\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 2->16 -->\n<g id=\"edge16\" class=\"edge\"><title>2->16</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1405,-936.907C1405,-928.649 1405,-919.864 1405,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1408.5,-911.021 1405,-901.021 1401.5,-911.021 1408.5,-911.021\"/>\n</g>\n<!-- 4 -->\n<g id=\"node5\" class=\"node\"><title>4</title>\n<path fill=\"#eda775\" stroke=\"black\" d=\"M307,-782C307,-782 215,-782 215,-782 209,-782 203,-776 203,-770 203,-770 203,-711 203,-711 203,-705 209,-699 215,-699 215,-699 307,-699 307,-699 313,-699 319,-705 319,-711 319,-711 319,-770 319,-770 319,-776 313,-782 307,-782\"/>\n<text text-anchor=\"start\" x=\"212\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 4.5</text>\n<text text-anchor=\"start\" x=\"211\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.781</text>\n<text text-anchor=\"start\" x=\"217.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 95</text>\n<text text-anchor=\"start\" x=\"212.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [73, 22]</text>\n<text text-anchor=\"start\" x=\"214\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 3->4 -->\n<g id=\"edge4\" class=\"edge\"><title>3->4</title>\n<path fill=\"none\" stroke=\"black\" d=\"M433.756,-827.146C401.183,-810.998 361.457,-791.303 328.316,-774.873\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"329.669,-771.637 319.155,-770.331 326.56,-777.909 329.669,-771.637\"/>\n</g>\n<!-- 11 -->\n<g id=\"node12\" class=\"node\"><title>11</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M554,-782C554,-782 440,-782 440,-782 434,-782 428,-776 428,-770 428,-770 428,-711 428,-711 428,-705 434,-699 440,-699 440,-699 554,-699 554,-699 560,-699 566,-705 566,-711 566,-711 566,-770 566,-770 566,-776 560,-782 554,-782\"/>\n<text text-anchor=\"start\" x=\"436\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 0.835</text>\n<text text-anchor=\"start\" x=\"447\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.022</text>\n<text text-anchor=\"start\" x=\"449.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 933</text>\n<text text-anchor=\"start\" x=\"448.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 931]</text>\n<text text-anchor=\"start\" x=\"442\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 3->11 -->\n<g id=\"edge11\" class=\"edge\"><title>3->11</title>\n<path fill=\"none\" stroke=\"black\" d=\"M497,-817.907C497,-809.649 497,-800.864 497,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"500.5,-792.021 497,-782.021 493.5,-792.021 500.5,-792.021\"/>\n</g>\n<!-- 5 -->\n<g id=\"node6\" class=\"node\"><title>5</title>\n<path fill=\"#78bced\" stroke=\"black\" d=\"M176,-663C176,-663 74,-663 74,-663 68,-663 62,-657 62,-651 62,-651 62,-592 62,-592 62,-586 68,-580 74,-580 74,-580 176,-580 176,-580 182,-580 188,-586 188,-592 188,-592 188,-651 188,-651 188,-657 182,-663 176,-663\"/>\n<text text-anchor=\"start\" x=\"95.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 5.5</text>\n<text text-anchor=\"start\" x=\"75\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.797</text>\n<text text-anchor=\"start\" x=\"81.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\n<text text-anchor=\"start\" x=\"80.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 22]</text>\n<text text-anchor=\"start\" x=\"70\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 4->5 -->\n<g id=\"edge5\" class=\"edge\"><title>4->5</title>\n<path fill=\"none\" stroke=\"black\" d=\"M213.815,-698.907C202.845,-689.469 191.074,-679.343 179.806,-669.649\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"181.964,-666.889 172.101,-663.021 177.399,-672.196 181.964,-666.889\"/>\n</g>\n<!-- 10 -->\n<g id=\"node11\" class=\"node\"><title>10</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M304,-655.5C304,-655.5 218,-655.5 218,-655.5 212,-655.5 206,-649.5 206,-643.5 206,-643.5 206,-599.5 206,-599.5 206,-593.5 212,-587.5 218,-587.5 218,-587.5 304,-587.5 304,-587.5 310,-587.5 316,-593.5 316,-599.5 316,-599.5 316,-643.5 316,-643.5 316,-649.5 310,-655.5 304,-655.5\"/>\n<text text-anchor=\"start\" x=\"219\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"217.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\n<text text-anchor=\"start\" x=\"216.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 0]</text>\n<text text-anchor=\"start\" x=\"214\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 4->10 -->\n<g id=\"edge10\" class=\"edge\"><title>4->10</title>\n<path fill=\"none\" stroke=\"black\" d=\"M261,-698.907C261,-688.204 261,-676.615 261,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"264.5,-665.667 261,-655.667 257.5,-665.667 264.5,-665.667\"/>\n</g>\n<!-- 6 -->\n<g id=\"node7\" class=\"node\"><title>6</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M114,-536.5C114,-536.5 12,-536.5 12,-536.5 6,-536.5 0,-530.5 0,-524.5 0,-524.5 0,-480.5 0,-480.5 0,-474.5 6,-468.5 12,-468.5 12,-468.5 114,-468.5 114,-468.5 120,-468.5 126,-474.5 126,-480.5 126,-480.5 126,-524.5 126,-524.5 126,-530.5 120,-536.5 114,-536.5\"/>\n<text text-anchor=\"start\" x=\"21\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"19.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\n<text text-anchor=\"start\" x=\"18.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\n<text text-anchor=\"start\" x=\"8\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 5->6 -->\n<g id=\"edge6\" class=\"edge\"><title>5->6</title>\n<path fill=\"none\" stroke=\"black\" d=\"M103.489,-579.907C97.6421,-568.873 91.2962,-556.898 85.4009,-545.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"88.3507,-543.864 80.5756,-536.667 82.1654,-547.142 88.3507,-543.864\"/>\n</g>\n<!-- 7 -->\n<g id=\"node8\" class=\"node\"><title>7</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M290,-544C290,-544 156,-544 156,-544 150,-544 144,-538 144,-532 144,-532 144,-473 144,-473 144,-467 150,-461 156,-461 156,-461 290,-461 290,-461 296,-461 302,-467 302,-473 302,-473 302,-532 302,-532 302,-538 296,-544 290,-544\"/>\n<text text-anchor=\"start\" x=\"152\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 19.0</text>\n<text text-anchor=\"start\" x=\"181\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"179.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"182.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 7]</text>\n<text text-anchor=\"start\" x=\"176\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 5->7 -->\n<g id=\"edge7\" class=\"edge\"><title>5->7</title>\n<path fill=\"none\" stroke=\"black\" d=\"M159.001,-579.907C166.602,-570.832 174.736,-561.121 182.569,-551.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"185.321,-553.934 189.059,-544.021 179.955,-549.439 185.321,-553.934\"/>\n</g>\n<!-- 8 -->\n<g id=\"node9\" class=\"node\"><title>8</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M268,-417.5C268,-417.5 166,-417.5 166,-417.5 160,-417.5 154,-411.5 154,-405.5 154,-405.5 154,-361.5 154,-361.5 154,-355.5 160,-349.5 166,-349.5 166,-349.5 268,-349.5 268,-349.5 274,-349.5 280,-355.5 280,-361.5 280,-361.5 280,-405.5 280,-405.5 280,-411.5 274,-417.5 268,-417.5\"/>\n<text text-anchor=\"start\" x=\"175\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"177.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"176.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\n<text text-anchor=\"start\" x=\"162\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 7->8 -->\n<g id=\"edge8\" class=\"edge\"><title>7->8</title>\n<path fill=\"none\" stroke=\"black\" d=\"M220.918,-460.907C220.369,-450.204 219.775,-438.615 219.219,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"222.709,-427.475 218.701,-417.667 215.718,-427.833 222.709,-427.475\"/>\n</g>\n<!-- 9 -->\n<g id=\"node10\" class=\"node\"><title>9</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M396,-417.5C396,-417.5 310,-417.5 310,-417.5 304,-417.5 298,-411.5 298,-405.5 298,-405.5 298,-361.5 298,-361.5 298,-355.5 304,-349.5 310,-349.5 310,-349.5 396,-349.5 396,-349.5 402,-349.5 408,-355.5 408,-361.5 408,-361.5 408,-405.5 408,-405.5 408,-411.5 402,-417.5 396,-417.5\"/>\n<text text-anchor=\"start\" x=\"311\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"313.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"312.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\n<text text-anchor=\"start\" x=\"306\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 7->9 -->\n<g id=\"edge9\" class=\"edge\"><title>7->9</title>\n<path fill=\"none\" stroke=\"black\" d=\"M268.103,-460.907C281.222,-449.101 295.537,-436.217 308.612,-424.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"311.056,-426.958 316.148,-417.667 306.373,-421.755 311.056,-426.958\"/>\n</g>\n<!-- 12 -->\n<g id=\"node13\" class=\"node\"><title>12</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M448,-655.5C448,-655.5 346,-655.5 346,-655.5 340,-655.5 334,-649.5 334,-643.5 334,-643.5 334,-599.5 334,-599.5 334,-593.5 340,-587.5 346,-587.5 346,-587.5 448,-587.5 448,-587.5 454,-587.5 460,-593.5 460,-599.5 460,-599.5 460,-643.5 460,-643.5 460,-649.5 454,-655.5 448,-655.5\"/>\n<text text-anchor=\"start\" x=\"355\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"349.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 891</text>\n<text text-anchor=\"start\" x=\"348.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 891]</text>\n<text text-anchor=\"start\" x=\"342\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 11->12 -->\n<g id=\"edge12\" class=\"edge\"><title>11->12</title>\n<path fill=\"none\" stroke=\"black\" d=\"M462.305,-698.907C452.497,-687.432 441.819,-674.938 431.993,-663.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"434.506,-660.995 425.348,-655.667 429.184,-665.543 434.506,-660.995\"/>\n</g>\n<!-- 13 -->\n<g id=\"node14\" class=\"node\"><title>13</title>\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M684,-663C684,-663 490,-663 490,-663 484,-663 478,-657 478,-651 478,-651 478,-592 478,-592 478,-586 484,-580 490,-580 490,-580 684,-580 684,-580 690,-580 696,-586 696,-592 696,-592 696,-651 696,-651 696,-657 690,-663 684,-663\"/>\n<text text-anchor=\"start\" x=\"486\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.44</text>\n<text text-anchor=\"start\" x=\"537\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\n<text text-anchor=\"start\" x=\"543.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\n<text text-anchor=\"start\" x=\"542.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 40]</text>\n<text text-anchor=\"start\" x=\"532\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 11->13 -->\n<g id=\"edge13\" class=\"edge\"><title>11->13</title>\n<path fill=\"none\" stroke=\"black\" d=\"M528.225,-698.907C535.136,-689.923 542.527,-680.315 549.654,-671.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"552.507,-673.081 555.83,-663.021 546.959,-668.813 552.507,-673.081\"/>\n</g>\n<!-- 14 -->\n<g id=\"node15\" class=\"node\"><title>14</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M502,-536.5C502,-536.5 400,-536.5 400,-536.5 394,-536.5 388,-530.5 388,-524.5 388,-524.5 388,-480.5 388,-480.5 388,-474.5 394,-468.5 400,-468.5 400,-468.5 502,-468.5 502,-468.5 508,-468.5 514,-474.5 514,-480.5 514,-480.5 514,-524.5 514,-524.5 514,-530.5 508,-536.5 502,-536.5\"/>\n<text text-anchor=\"start\" x=\"409\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"407.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 40</text>\n<text text-anchor=\"start\" x=\"406.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 40]</text>\n<text text-anchor=\"start\" x=\"396\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 13->14 -->\n<g id=\"edge14\" class=\"edge\"><title>13->14</title>\n<path fill=\"none\" stroke=\"black\" d=\"M539.815,-579.907C526.091,-568.101 511.115,-555.217 497.437,-543.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"499.416,-540.535 489.553,-536.667 494.851,-545.842 499.416,-540.535\"/>\n</g>\n<!-- 15 -->\n<g id=\"node16\" class=\"node\"><title>15</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M630,-536.5C630,-536.5 544,-536.5 544,-536.5 538,-536.5 532,-530.5 532,-524.5 532,-524.5 532,-480.5 532,-480.5 532,-474.5 538,-468.5 544,-468.5 544,-468.5 630,-468.5 630,-468.5 636,-468.5 642,-474.5 642,-480.5 642,-480.5 642,-524.5 642,-524.5 642,-530.5 636,-536.5 630,-536.5\"/>\n<text text-anchor=\"start\" x=\"545\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"547.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"546.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"540\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 13->15 -->\n<g id=\"edge15\" class=\"edge\"><title>13->15</title>\n<path fill=\"none\" stroke=\"black\" d=\"M587,-579.907C587,-569.204 587,-557.615 587,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"590.5,-546.667 587,-536.667 583.5,-546.667 590.5,-546.667\"/>\n</g>\n<!-- 17 -->\n<g id=\"node18\" class=\"node\"><title>17</title>\n<path fill=\"#b6dbf5\" stroke=\"black\" d=\"M1294,-782C1294,-782 1188,-782 1188,-782 1182,-782 1176,-776 1176,-770 1176,-770 1176,-711 1176,-711 1176,-705 1182,-699 1188,-699 1188,-699 1294,-699 1294,-699 1300,-699 1306,-705 1306,-711 1306,-711 1306,-770 1306,-770 1306,-776 1300,-782 1294,-782\"/>\n<text text-anchor=\"start\" x=\"1192\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 5.5</text>\n<text text-anchor=\"start\" x=\"1191\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.963</text>\n<text text-anchor=\"start\" x=\"1193.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 326</text>\n<text text-anchor=\"start\" x=\"1184\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [126, 200]</text>\n<text text-anchor=\"start\" x=\"1186\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 16->17 -->\n<g id=\"edge17\" class=\"edge\"><title>16->17</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1348.1,-817.907C1334.62,-808.288 1320.13,-797.953 1306.31,-788.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1307.97,-784.979 1297.8,-782.021 1303.91,-790.678 1307.97,-784.979\"/>\n</g>\n<!-- 36 -->\n<g id=\"node37\" class=\"node\"><title>36</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M1653.5,-782C1653.5,-782 1492.5,-782 1492.5,-782 1486.5,-782 1480.5,-776 1480.5,-770 1480.5,-770 1480.5,-711 1480.5,-711 1480.5,-705 1486.5,-699 1492.5,-699 1492.5,-699 1653.5,-699 1653.5,-699 1659.5,-699 1665.5,-705 1665.5,-711 1665.5,-711 1665.5,-770 1665.5,-770 1665.5,-776 1659.5,-782 1653.5,-782\"/>\n<text text-anchor=\"start\" x=\"1488.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 11.0</text>\n<text text-anchor=\"start\" x=\"1523\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\n<text text-anchor=\"start\" x=\"1525.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 421</text>\n<text text-anchor=\"start\" x=\"1520\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [409, 12]</text>\n<text text-anchor=\"start\" x=\"1526\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 16->36 -->\n<g id=\"edge36\" class=\"edge\"><title>16->36</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1463.29,-817.907C1477.23,-808.197 1492.22,-797.758 1506.5,-787.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1508.61,-790.608 1514.82,-782.021 1504.61,-784.864 1508.61,-790.608\"/>\n</g>\n<!-- 18 -->\n<g id=\"node19\" class=\"node\"><title>18</title>\n<path fill=\"#5baee9\" stroke=\"black\" d=\"M1061,-663C1061,-663 825,-663 825,-663 819,-663 813,-657 813,-651 813,-651 813,-592 813,-592 813,-586 819,-580 825,-580 825,-580 1061,-580 1061,-580 1067,-580 1073,-586 1073,-592 1073,-592 1073,-651 1073,-651 1073,-657 1067,-663 1061,-663\"/>\n<text text-anchor=\"start\" x=\"821\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.135</text>\n<text text-anchor=\"start\" x=\"893\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.598</text>\n<text text-anchor=\"start\" x=\"895.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 227</text>\n<text text-anchor=\"start\" x=\"890\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 194]</text>\n<text text-anchor=\"start\" x=\"888\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 17->18 -->\n<g id=\"edge18\" class=\"edge\"><title>17->18</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1175.97,-713.968C1140.78,-700.151 1096.31,-682.691 1055.67,-666.738\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1056.84,-663.437 1046.26,-663.04 1054.28,-669.952 1056.84,-663.437\"/>\n</g>\n<!-- 29 -->\n<g id=\"node30\" class=\"node\"><title>29</title>\n<path fill=\"#e78946\" stroke=\"black\" d=\"M1317,-663C1317,-663 1165,-663 1165,-663 1159,-663 1153,-657 1153,-651 1153,-651 1153,-592 1153,-592 1153,-586 1159,-580 1165,-580 1165,-580 1317,-580 1317,-580 1323,-580 1329,-586 1329,-592 1329,-592 1329,-651 1329,-651 1329,-657 1323,-663 1317,-663\"/>\n<text text-anchor=\"start\" x=\"1161\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"1195\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.33</text>\n<text text-anchor=\"start\" x=\"1197.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\n<text text-anchor=\"start\" x=\"1196.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [93, 6]</text>\n<text text-anchor=\"start\" x=\"1194\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 17->29 -->\n<g id=\"edge29\" class=\"edge\"><title>17->29</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1241,-698.907C1241,-690.649 1241,-681.864 1241,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1244.5,-673.021 1241,-663.021 1237.5,-673.021 1244.5,-673.021\"/>\n</g>\n<!-- 19 -->\n<g id=\"node20\" class=\"node\"><title>19</title>\n<path fill=\"#8dc6f0\" stroke=\"black\" d=\"M849.5,-544C849.5,-544 672.5,-544 672.5,-544 666.5,-544 660.5,-538 660.5,-532 660.5,-532 660.5,-473 660.5,-473 660.5,-467 666.5,-461 672.5,-461 672.5,-461 849.5,-461 849.5,-461 855.5,-461 861.5,-467 861.5,-473 861.5,-473 861.5,-532 861.5,-532 861.5,-538 855.5,-544 849.5,-544\"/>\n<text text-anchor=\"start\" x=\"668.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.955</text>\n<text text-anchor=\"start\" x=\"711\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.878</text>\n<text text-anchor=\"start\" x=\"713.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 111</text>\n<text text-anchor=\"start\" x=\"712.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 78]</text>\n<text text-anchor=\"start\" x=\"706\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 18->19 -->\n<g id=\"edge19\" class=\"edge\"><title>18->19</title>\n<path fill=\"none\" stroke=\"black\" d=\"M879.856,-579.907C864.61,-570.106 848.209,-559.563 832.606,-549.533\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"834.337,-546.484 824.032,-544.021 830.552,-552.373 834.337,-546.484\"/>\n</g>\n<!-- 28 -->\n<g id=\"node29\" class=\"node\"><title>28</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M994,-536.5C994,-536.5 892,-536.5 892,-536.5 886,-536.5 880,-530.5 880,-524.5 880,-524.5 880,-480.5 880,-480.5 880,-474.5 886,-468.5 892,-468.5 892,-468.5 994,-468.5 994,-468.5 1000,-468.5 1006,-474.5 1006,-480.5 1006,-480.5 1006,-524.5 1006,-524.5 1006,-530.5 1000,-536.5 994,-536.5\"/>\n<text text-anchor=\"start\" x=\"901\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"895.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 116</text>\n<text text-anchor=\"start\" x=\"894.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 116]</text>\n<text text-anchor=\"start\" x=\"888\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 18->28 -->\n<g id=\"edge28\" class=\"edge\"><title>18->28</title>\n<path fill=\"none\" stroke=\"black\" d=\"M943,-579.907C943,-569.204 943,-557.615 943,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"946.5,-546.667 943,-536.667 939.5,-546.667 946.5,-546.667\"/>\n</g>\n<!-- 20 -->\n<g id=\"node21\" class=\"node\"><title>20</title>\n<path fill=\"#f4caab\" stroke=\"black\" d=\"M689,-425C689,-425 515,-425 515,-425 509,-425 503,-419 503,-413 503,-413 503,-354 503,-354 503,-348 509,-342 515,-342 515,-342 689,-342 689,-342 695,-342 701,-348 701,-354 701,-354 701,-413 701,-413 701,-419 695,-425 689,-425\"/>\n<text text-anchor=\"start\" x=\"511\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.605</text>\n<text text-anchor=\"start\" x=\"552\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.947</text>\n<text text-anchor=\"start\" x=\"558.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 52</text>\n<text text-anchor=\"start\" x=\"553.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 19]</text>\n<text text-anchor=\"start\" x=\"555\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 19->20 -->\n<g id=\"edge20\" class=\"edge\"><title>19->20</title>\n<path fill=\"none\" stroke=\"black\" d=\"M705.836,-460.907C692.763,-451.288 678.719,-440.953 665.315,-431.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"667.196,-428.129 657.067,-425.021 663.047,-433.767 667.196,-428.129\"/>\n</g>\n<!-- 27 -->\n<g id=\"node28\" class=\"node\"><title>27</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M833,-417.5C833,-417.5 731,-417.5 731,-417.5 725,-417.5 719,-411.5 719,-405.5 719,-405.5 719,-361.5 719,-361.5 719,-355.5 725,-349.5 731,-349.5 731,-349.5 833,-349.5 833,-349.5 839,-349.5 845,-355.5 845,-361.5 845,-361.5 845,-405.5 845,-405.5 845,-411.5 839,-417.5 833,-417.5\"/>\n<text text-anchor=\"start\" x=\"740\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"738.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 59</text>\n<text text-anchor=\"start\" x=\"737.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 59]</text>\n<text text-anchor=\"start\" x=\"727\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 19->27 -->\n<g id=\"edge27\" class=\"edge\"><title>19->27</title>\n<path fill=\"none\" stroke=\"black\" d=\"M768.286,-460.907C770.207,-450.204 772.287,-438.615 774.232,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"777.725,-428.128 776.047,-417.667 770.835,-426.891 777.725,-428.128\"/>\n</g>\n<!-- 21 -->\n<g id=\"node22\" class=\"node\"><title>21</title>\n<path fill=\"#eda775\" stroke=\"black\" d=\"M593.5,-306C593.5,-306 442.5,-306 442.5,-306 436.5,-306 430.5,-300 430.5,-294 430.5,-294 430.5,-235 430.5,-235 430.5,-229 436.5,-223 442.5,-223 442.5,-223 593.5,-223 593.5,-223 599.5,-223 605.5,-229 605.5,-235 605.5,-235 605.5,-294 605.5,-294 605.5,-300 599.5,-306 593.5,-306\"/>\n<text text-anchor=\"start\" x=\"438.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.15</text>\n<text text-anchor=\"start\" x=\"468\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.782</text>\n<text text-anchor=\"start\" x=\"474.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\n<text text-anchor=\"start\" x=\"469.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 10]</text>\n<text text-anchor=\"start\" x=\"471\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 20->21 -->\n<g id=\"edge21\" class=\"edge\"><title>20->21</title>\n<path fill=\"none\" stroke=\"black\" d=\"M572.857,-341.907C566.471,-333.014 559.648,-323.509 553.058,-314.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"555.767,-312.103 547.092,-306.021 550.081,-316.185 555.767,-312.103\"/>\n</g>\n<!-- 26 -->\n<g id=\"node27\" class=\"node\"><title>26</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M738,-298.5C738,-298.5 636,-298.5 636,-298.5 630,-298.5 624,-292.5 624,-286.5 624,-286.5 624,-242.5 624,-242.5 624,-236.5 630,-230.5 636,-230.5 636,-230.5 738,-230.5 738,-230.5 744,-230.5 750,-236.5 750,-242.5 750,-242.5 750,-286.5 750,-286.5 750,-292.5 744,-298.5 738,-298.5\"/>\n<text text-anchor=\"start\" x=\"645\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"647.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"646.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\n<text text-anchor=\"start\" x=\"632\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 20->26 -->\n<g id=\"edge26\" class=\"edge\"><title>20->26</title>\n<path fill=\"none\" stroke=\"black\" d=\"M631.49,-341.907C639.747,-330.542 648.729,-318.178 657.015,-306.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"659.858,-308.814 662.904,-298.667 654.195,-304.7 659.858,-308.814\"/>\n</g>\n<!-- 22 -->\n<g id=\"node23\" class=\"node\"><title>22</title>\n<path fill=\"#ea985d\" stroke=\"black\" d=\"M510,-187C510,-187 358,-187 358,-187 352,-187 346,-181 346,-175 346,-175 346,-116 346,-116 346,-110 352,-104 358,-104 358,-104 510,-104 510,-104 516,-104 522,-110 522,-116 522,-116 522,-175 522,-175 522,-181 516,-187 510,-187\"/>\n<text text-anchor=\"start\" x=\"354\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"384\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.619</text>\n<text text-anchor=\"start\" x=\"390.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 39</text>\n<text text-anchor=\"start\" x=\"389.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 6]</text>\n<text text-anchor=\"start\" x=\"387\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 21->22 -->\n<g id=\"edge22\" class=\"edge\"><title>21->22</title>\n<path fill=\"none\" stroke=\"black\" d=\"M488.857,-222.907C482.471,-214.014 475.648,-204.509 469.058,-195.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"471.767,-193.103 463.092,-187.021 466.081,-197.185 471.767,-193.103\"/>\n</g>\n<!-- 25 -->\n<g id=\"node26\" class=\"node\"><title>25</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M654,-179.5C654,-179.5 552,-179.5 552,-179.5 546,-179.5 540,-173.5 540,-167.5 540,-167.5 540,-123.5 540,-123.5 540,-117.5 546,-111.5 552,-111.5 552,-111.5 654,-111.5 654,-111.5 660,-111.5 666,-117.5 666,-123.5 666,-123.5 666,-167.5 666,-167.5 666,-173.5 660,-179.5 654,-179.5\"/>\n<text text-anchor=\"start\" x=\"561\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"563.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"562.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"548\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 21->25 -->\n<g id=\"edge25\" class=\"edge\"><title>21->25</title>\n<path fill=\"none\" stroke=\"black\" d=\"M547.49,-222.907C555.747,-211.542 564.729,-199.178 573.015,-187.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"575.858,-189.814 578.904,-179.667 570.195,-185.7 575.858,-189.814\"/>\n</g>\n<!-- 23 -->\n<g id=\"node24\" class=\"node\"><title>23</title>\n<path fill=\"#d7ebfa\" stroke=\"black\" d=\"M416,-68C416,-68 314,-68 314,-68 308,-68 302,-62 302,-56 302,-56 302,-12 302,-12 302,-6 308,-0 314,-0 314,-0 416,-0 416,-0 422,-0 428,-6 428,-12 428,-12 428,-56 428,-56 428,-62 422,-68 416,-68\"/>\n<text text-anchor=\"start\" x=\"315\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\n<text text-anchor=\"start\" x=\"325.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"324.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 5]</text>\n<text text-anchor=\"start\" x=\"310\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 22->23 -->\n<g id=\"edge23\" class=\"edge\"><title>22->23</title>\n<path fill=\"none\" stroke=\"black\" d=\"M408.307,-103.726C402.789,-94.9703 396.95,-85.7032 391.406,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"394.276,-74.8941 385.983,-68.2996 388.353,-78.6259 394.276,-74.8941\"/>\n</g>\n<!-- 24 -->\n<g id=\"node25\" class=\"node\"><title>24</title>\n<path fill=\"#e68540\" stroke=\"black\" d=\"M550,-68C550,-68 458,-68 458,-68 452,-68 446,-62 446,-56 446,-56 446,-12 446,-12 446,-6 452,-0 458,-0 458,-0 550,-0 550,-0 556,-0 562,-6 562,-12 562,-12 562,-56 562,-56 562,-62 556,-68 550,-68\"/>\n<text text-anchor=\"start\" x=\"454\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.211</text>\n<text text-anchor=\"start\" x=\"460.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"459.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 1]</text>\n<text text-anchor=\"start\" x=\"457\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 22->24 -->\n<g id=\"edge24\" class=\"edge\"><title>22->24</title>\n<path fill=\"none\" stroke=\"black\" d=\"M460.065,-103.726C465.663,-94.9703 471.587,-85.7032 477.211,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"480.275,-78.6103 482.713,-68.2996 474.377,-74.8399 480.275,-78.6103\"/>\n</g>\n<!-- 30 -->\n<g id=\"node31\" class=\"node\"><title>30</title>\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M1215.5,-544C1215.5,-544 1036.5,-544 1036.5,-544 1030.5,-544 1024.5,-538 1024.5,-532 1024.5,-532 1024.5,-473 1024.5,-473 1024.5,-467 1030.5,-461 1036.5,-461 1036.5,-461 1215.5,-461 1215.5,-461 1221.5,-461 1227.5,-467 1227.5,-473 1227.5,-473 1227.5,-532 1227.5,-532 1227.5,-538 1221.5,-544 1215.5,-544\"/>\n<text text-anchor=\"start\" x=\"1032.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.65</text>\n<text text-anchor=\"start\" x=\"1080\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\n<text text-anchor=\"start\" x=\"1086.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1085.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\n<text text-anchor=\"start\" x=\"1071\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 29->30 -->\n<g id=\"edge30\" class=\"edge\"><title>29->30</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1201.1,-579.907C1192,-570.651 1182.25,-560.732 1172.89,-551.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1175.33,-548.699 1165.83,-544.021 1170.34,-553.606 1175.33,-548.699\"/>\n</g>\n<!-- 33 -->\n<g id=\"node34\" class=\"node\"><title>33</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M1350,-544C1350,-544 1258,-544 1258,-544 1252,-544 1246,-538 1246,-532 1246,-532 1246,-473 1246,-473 1246,-467 1252,-461 1258,-461 1258,-461 1350,-461 1350,-461 1356,-461 1362,-467 1362,-473 1362,-473 1362,-532 1362,-532 1362,-538 1356,-544 1350,-544\"/>\n<text text-anchor=\"start\" x=\"1269\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 7.0</text>\n<text text-anchor=\"start\" x=\"1254\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.086</text>\n<text text-anchor=\"start\" x=\"1260.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 93</text>\n<text text-anchor=\"start\" x=\"1259.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 1]</text>\n<text text-anchor=\"start\" x=\"1257\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 29->33 -->\n<g id=\"edge33\" class=\"edge\"><title>29->33</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1262.86,-579.907C1267.55,-571.195 1272.56,-561.897 1277.4,-552.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1280.52,-554.485 1282.18,-544.021 1274.36,-551.166 1280.52,-554.485\"/>\n</g>\n<!-- 31 -->\n<g id=\"node32\" class=\"node\"><title>31</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1019,-417.5C1019,-417.5 917,-417.5 917,-417.5 911,-417.5 905,-411.5 905,-405.5 905,-405.5 905,-361.5 905,-361.5 905,-355.5 911,-349.5 917,-349.5 917,-349.5 1019,-349.5 1019,-349.5 1025,-349.5 1031,-355.5 1031,-361.5 1031,-361.5 1031,-405.5 1031,-405.5 1031,-411.5 1025,-417.5 1019,-417.5\"/>\n<text text-anchor=\"start\" x=\"926\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"928.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"927.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\n<text text-anchor=\"start\" x=\"913\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 30->31 -->\n<g id=\"edge31\" class=\"edge\"><title>30->31</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1071.18,-460.907C1054.94,-448.88 1037.19,-435.735 1021.06,-423.791\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1022.91,-420.805 1012.79,-417.667 1018.74,-426.431 1022.91,-420.805\"/>\n</g>\n<!-- 32 -->\n<g id=\"node33\" class=\"node\"><title>32</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1147,-417.5C1147,-417.5 1061,-417.5 1061,-417.5 1055,-417.5 1049,-411.5 1049,-405.5 1049,-405.5 1049,-361.5 1049,-361.5 1049,-355.5 1055,-349.5 1061,-349.5 1061,-349.5 1147,-349.5 1147,-349.5 1153,-349.5 1159,-355.5 1159,-361.5 1159,-361.5 1159,-405.5 1159,-405.5 1159,-411.5 1153,-417.5 1147,-417.5\"/>\n<text text-anchor=\"start\" x=\"1062\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1064.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1063.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1057\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 30->32 -->\n<g id=\"edge32\" class=\"edge\"><title>30->32</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1118.37,-460.907C1116.35,-450.204 1114.18,-438.615 1112.14,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1115.52,-426.848 1110.24,-417.667 1108.64,-428.142 1115.52,-426.848\"/>\n</g>\n<!-- 34 -->\n<g id=\"node35\" class=\"node\"><title>34</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1275,-417.5C1275,-417.5 1189,-417.5 1189,-417.5 1183,-417.5 1177,-411.5 1177,-405.5 1177,-405.5 1177,-361.5 1177,-361.5 1177,-355.5 1183,-349.5 1189,-349.5 1189,-349.5 1275,-349.5 1275,-349.5 1281,-349.5 1287,-355.5 1287,-361.5 1287,-361.5 1287,-405.5 1287,-405.5 1287,-411.5 1281,-417.5 1275,-417.5\"/>\n<text text-anchor=\"start\" x=\"1190\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1188.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 92</text>\n<text text-anchor=\"start\" x=\"1187.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [92, 0]</text>\n<text text-anchor=\"start\" x=\"1185\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 33->34 -->\n<g id=\"edge34\" class=\"edge\"><title>33->34</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1279.02,-460.907C1272.16,-449.763 1264.71,-437.658 1257.81,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1260.63,-424.349 1252.41,-417.667 1254.67,-428.018 1260.63,-424.349\"/>\n</g>\n<!-- 35 -->\n<g id=\"node36\" class=\"node\"><title>35</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1419,-417.5C1419,-417.5 1317,-417.5 1317,-417.5 1311,-417.5 1305,-411.5 1305,-405.5 1305,-405.5 1305,-361.5 1305,-361.5 1305,-355.5 1311,-349.5 1317,-349.5 1317,-349.5 1419,-349.5 1419,-349.5 1425,-349.5 1431,-355.5 1431,-361.5 1431,-361.5 1431,-405.5 1431,-405.5 1431,-411.5 1425,-417.5 1419,-417.5\"/>\n<text text-anchor=\"start\" x=\"1326\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1328.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1327.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"1313\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 33->35 -->\n<g id=\"edge35\" class=\"edge\"><title>33->35</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1326.2,-460.907C1332.24,-449.873 1338.79,-437.898 1344.88,-426.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1348.13,-428.12 1349.86,-417.667 1341.99,-424.76 1348.13,-428.12\"/>\n</g>\n<!-- 37 -->\n<g id=\"node38\" class=\"node\"><title>37</title>\n<path fill=\"#deeffb\" stroke=\"black\" d=\"M1624,-663C1624,-663 1522,-663 1522,-663 1516,-663 1510,-657 1510,-651 1510,-651 1510,-592 1510,-592 1510,-586 1516,-580 1522,-580 1522,-580 1624,-580 1624,-580 1630,-580 1636,-586 1636,-592 1636,-592 1636,-651 1636,-651 1636,-657 1630,-663 1624,-663\"/>\n<text text-anchor=\"start\" x=\"1524\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\n<text text-anchor=\"start\" x=\"1523\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\n<text text-anchor=\"start\" x=\"1529.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 22</text>\n<text text-anchor=\"start\" x=\"1524.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 12]</text>\n<text text-anchor=\"start\" x=\"1518\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 36->37 -->\n<g id=\"edge37\" class=\"edge\"><title>36->37</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1573,-698.907C1573,-690.649 1573,-681.864 1573,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1576.5,-673.021 1573,-663.021 1569.5,-673.021 1576.5,-673.021\"/>\n</g>\n<!-- 46 -->\n<g id=\"node47\" class=\"node\"><title>46</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1755.5,-655.5C1755.5,-655.5 1666.5,-655.5 1666.5,-655.5 1660.5,-655.5 1654.5,-649.5 1654.5,-643.5 1654.5,-643.5 1654.5,-599.5 1654.5,-599.5 1654.5,-593.5 1660.5,-587.5 1666.5,-587.5 1666.5,-587.5 1755.5,-587.5 1755.5,-587.5 1761.5,-587.5 1767.5,-593.5 1767.5,-599.5 1767.5,-599.5 1767.5,-643.5 1767.5,-643.5 1767.5,-649.5 1761.5,-655.5 1755.5,-655.5\"/>\n<text text-anchor=\"start\" x=\"1669\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1663.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 399</text>\n<text text-anchor=\"start\" x=\"1662.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [399, 0]</text>\n<text text-anchor=\"start\" x=\"1664\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 36->46 -->\n<g id=\"edge46\" class=\"edge\"><title>36->46</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1620.88,-698.907C1634.8,-687.101 1650,-674.217 1663.88,-662.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1666.52,-664.803 1671.88,-655.667 1661.99,-659.464 1666.52,-664.803\"/>\n</g>\n<!-- 38 -->\n<g id=\"node39\" class=\"node\"><title>38</title>\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M1665,-544C1665,-544 1491,-544 1491,-544 1485,-544 1479,-538 1479,-532 1479,-532 1479,-473 1479,-473 1479,-467 1485,-461 1491,-461 1491,-461 1665,-461 1665,-461 1671,-461 1677,-467 1677,-473 1677,-473 1677,-532 1677,-532 1677,-538 1671,-544 1665,-544\"/>\n<text text-anchor=\"start\" x=\"1487\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.355</text>\n<text text-anchor=\"start\" x=\"1528\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\n<text text-anchor=\"start\" x=\"1534.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"1533.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 12]</text>\n<text text-anchor=\"start\" x=\"1523\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 37->38 -->\n<g id=\"edge38\" class=\"edge\"><title>37->38</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1574.73,-579.907C1575.09,-571.558 1575.47,-562.671 1575.84,-554.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1579.34,-554.161 1576.27,-544.021 1572.34,-553.862 1579.34,-554.161\"/>\n</g>\n<!-- 45 -->\n<g id=\"node46\" class=\"node\"><title>45</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1793,-536.5C1793,-536.5 1707,-536.5 1707,-536.5 1701,-536.5 1695,-530.5 1695,-524.5 1695,-524.5 1695,-480.5 1695,-480.5 1695,-474.5 1701,-468.5 1707,-468.5 1707,-468.5 1793,-468.5 1793,-468.5 1799,-468.5 1805,-474.5 1805,-480.5 1805,-480.5 1805,-524.5 1805,-524.5 1805,-530.5 1799,-536.5 1793,-536.5\"/>\n<text text-anchor=\"start\" x=\"1708\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1710.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1709.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"1703\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 37->45 -->\n<g id=\"edge45\" class=\"edge\"><title>37->45</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1634.41,-579.907C1652.77,-567.769 1672.86,-554.493 1691.06,-542.462\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1693.41,-545.101 1699.82,-536.667 1689.55,-539.262 1693.41,-545.101\"/>\n</g>\n<!-- 39 -->\n<g id=\"node40\" class=\"node\"><title>39</title>\n<path fill=\"#5aade9\" stroke=\"black\" d=\"M1697,-425C1697,-425 1461,-425 1461,-425 1455,-425 1449,-419 1449,-413 1449,-413 1449,-354 1449,-354 1449,-348 1455,-342 1461,-342 1461,-342 1697,-342 1697,-342 1703,-342 1709,-348 1709,-354 1709,-354 1709,-413 1709,-413 1709,-419 1703,-425 1697,-425\"/>\n<text text-anchor=\"start\" x=\"1457\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.265</text>\n<text text-anchor=\"start\" x=\"1529\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\n<text text-anchor=\"start\" x=\"1535.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"1534.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 12]</text>\n<text text-anchor=\"start\" x=\"1524\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 38->39 -->\n<g id=\"edge39\" class=\"edge\"><title>38->39</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1578.35,-460.907C1578.42,-452.649 1578.49,-443.864 1578.57,-435.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1582.07,-435.05 1578.65,-425.021 1575.07,-434.99 1582.07,-435.05\"/>\n</g>\n<!-- 44 -->\n<g id=\"node45\" class=\"node\"><title>44</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1825,-417.5C1825,-417.5 1739,-417.5 1739,-417.5 1733,-417.5 1727,-411.5 1727,-405.5 1727,-405.5 1727,-361.5 1727,-361.5 1727,-355.5 1733,-349.5 1739,-349.5 1739,-349.5 1825,-349.5 1825,-349.5 1831,-349.5 1837,-355.5 1837,-361.5 1837,-361.5 1837,-405.5 1837,-405.5 1837,-411.5 1831,-417.5 1825,-417.5\"/>\n<text text-anchor=\"start\" x=\"1740\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1742.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1741.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"1735\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 38->44 -->\n<g id=\"edge44\" class=\"edge\"><title>38->44</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1654.43,-460.889C1675.2,-449.538 1697.59,-437.016 1718,-425 1719.27,-424.249 1720.56,-423.487 1721.86,-422.714\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1723.73,-425.67 1730.48,-417.501 1720.11,-419.679 1723.73,-425.67\"/>\n</g>\n<!-- 40 -->\n<g id=\"node41\" class=\"node\"><title>40</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1486,-298.5C1486,-298.5 1400,-298.5 1400,-298.5 1394,-298.5 1388,-292.5 1388,-286.5 1388,-286.5 1388,-242.5 1388,-242.5 1388,-236.5 1394,-230.5 1400,-230.5 1400,-230.5 1486,-230.5 1486,-230.5 1492,-230.5 1498,-236.5 1498,-242.5 1498,-242.5 1498,-286.5 1498,-286.5 1498,-292.5 1492,-298.5 1486,-298.5\"/>\n<text text-anchor=\"start\" x=\"1401\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1403.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1402.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1396\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 39->40 -->\n<g id=\"edge40\" class=\"edge\"><title>39->40</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1531.82,-341.907C1518.09,-330.101 1503.11,-317.217 1489.44,-305.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1491.42,-302.535 1481.55,-298.667 1486.85,-307.842 1491.42,-302.535\"/>\n</g>\n<!-- 41 -->\n<g id=\"node42\" class=\"node\"><title>41</title>\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M1680,-306C1680,-306 1528,-306 1528,-306 1522,-306 1516,-300 1516,-294 1516,-294 1516,-235 1516,-235 1516,-229 1522,-223 1528,-223 1528,-223 1680,-223 1680,-223 1686,-223 1692,-229 1692,-235 1692,-235 1692,-294 1692,-294 1692,-300 1686,-306 1680,-306\"/>\n<text text-anchor=\"start\" x=\"1524\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"1554\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\n<text text-anchor=\"start\" x=\"1560.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"1559.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 12]</text>\n<text text-anchor=\"start\" x=\"1549\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 39->41 -->\n<g id=\"edge41\" class=\"edge\"><title>39->41</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1587.67,-341.907C1589.46,-333.558 1591.36,-324.671 1593.21,-316.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1596.67,-316.531 1595.34,-306.021 1589.83,-315.069 1596.67,-316.531\"/>\n</g>\n<!-- 42 -->\n<g id=\"node43\" class=\"node\"><title>42</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1526,-179.5C1526,-179.5 1440,-179.5 1440,-179.5 1434,-179.5 1428,-173.5 1428,-167.5 1428,-167.5 1428,-123.5 1428,-123.5 1428,-117.5 1434,-111.5 1440,-111.5 1440,-111.5 1526,-111.5 1526,-111.5 1532,-111.5 1538,-117.5 1538,-123.5 1538,-123.5 1538,-167.5 1538,-167.5 1538,-173.5 1532,-179.5 1526,-179.5\"/>\n<text text-anchor=\"start\" x=\"1441\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"1443.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1442.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"1436\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 41->42 -->\n<g id=\"edge42\" class=\"edge\"><title>41->42</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1562.02,-222.907C1549.92,-211.211 1536.73,-198.457 1524.66,-186.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1526.92,-184.102 1517.3,-179.667 1522.06,-189.134 1526.92,-184.102\"/>\n</g>\n<!-- 43 -->\n<g id=\"node44\" class=\"node\"><title>43</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1670,-179.5C1670,-179.5 1568,-179.5 1568,-179.5 1562,-179.5 1556,-173.5 1556,-167.5 1556,-167.5 1556,-123.5 1556,-123.5 1556,-117.5 1562,-111.5 1568,-111.5 1568,-111.5 1670,-111.5 1670,-111.5 1676,-111.5 1682,-117.5 1682,-123.5 1682,-123.5 1682,-167.5 1682,-167.5 1682,-173.5 1676,-179.5 1670,-179.5\"/>\n<text text-anchor=\"start\" x=\"1577\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1575.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\n<text text-anchor=\"start\" x=\"1574.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\n<text text-anchor=\"start\" x=\"1564\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 41->43 -->\n<g id=\"edge43\" class=\"edge\"><title>41->43</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1609.2,-222.907C1610.58,-212.204 1612.06,-200.615 1613.45,-189.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1616.95,-190.031 1614.75,-179.667 1610,-189.141 1616.95,-190.031\"/>\n</g>\n<!-- 48 -->\n<g id=\"node49\" class=\"node\"><title>48</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2016.5,-901C2016.5,-901 1865.5,-901 1865.5,-901 1859.5,-901 1853.5,-895 1853.5,-889 1853.5,-889 1853.5,-830 1853.5,-830 1853.5,-824 1859.5,-818 1865.5,-818 1865.5,-818 2016.5,-818 2016.5,-818 2022.5,-818 2028.5,-824 2028.5,-830 2028.5,-830 2028.5,-889 2028.5,-889 2028.5,-895 2022.5,-901 2016.5,-901\"/>\n<text text-anchor=\"start\" x=\"1861.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.46</text>\n<text text-anchor=\"start\" x=\"1891\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.002</text>\n<text text-anchor=\"start\" x=\"1889.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6350</text>\n<text text-anchor=\"start\" x=\"1888\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 6349]</text>\n<text text-anchor=\"start\" x=\"1886\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 47->48 -->\n<g id=\"edge48\" class=\"edge\"><title>47->48</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2005.65,-936.907C1997.97,-927.832 1989.76,-918.121 1981.84,-908.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1984.42,-906.394 1975.29,-901.021 1979.07,-910.916 1984.42,-906.394\"/>\n</g>\n<!-- 53 -->\n<g id=\"node54\" class=\"node\"><title>53</title>\n<path fill=\"#f1bd97\" stroke=\"black\" d=\"M2219.5,-901C2219.5,-901 2058.5,-901 2058.5,-901 2052.5,-901 2046.5,-895 2046.5,-889 2046.5,-889 2046.5,-830 2046.5,-830 2046.5,-824 2052.5,-818 2058.5,-818 2058.5,-818 2219.5,-818 2219.5,-818 2225.5,-818 2231.5,-824 2231.5,-830 2231.5,-830 2231.5,-889 2231.5,-889 2231.5,-895 2225.5,-901 2219.5,-901\"/>\n<text text-anchor=\"start\" x=\"2054.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 66.5</text>\n<text text-anchor=\"start\" x=\"2089\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\n<text text-anchor=\"start\" x=\"2095.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\n<text text-anchor=\"start\" x=\"2090.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 10]</text>\n<text text-anchor=\"start\" x=\"2092\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 47->53 -->\n<g id=\"edge53\" class=\"edge\"><title>47->53</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2074.35,-936.907C2082.03,-927.832 2090.24,-918.121 2098.16,-908.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2100.93,-910.916 2104.71,-901.021 2095.58,-906.394 2100.93,-910.916\"/>\n</g>\n<!-- 49 -->\n<g id=\"node50\" class=\"node\"><title>49</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1798,-774.5C1798,-774.5 1696,-774.5 1696,-774.5 1690,-774.5 1684,-768.5 1684,-762.5 1684,-762.5 1684,-718.5 1684,-718.5 1684,-712.5 1690,-706.5 1696,-706.5 1696,-706.5 1798,-706.5 1798,-706.5 1804,-706.5 1810,-712.5 1810,-718.5 1810,-718.5 1810,-762.5 1810,-762.5 1810,-768.5 1804,-774.5 1798,-774.5\"/>\n<text text-anchor=\"start\" x=\"1705\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1695.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6348</text>\n<text text-anchor=\"start\" x=\"1694\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6348]</text>\n<text text-anchor=\"start\" x=\"1692\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 48->49 -->\n<g id=\"edge49\" class=\"edge\"><title>48->49</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1873.69,-817.907C1853.29,-805.604 1830.95,-792.131 1810.79,-779.971\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1812.37,-776.834 1801.99,-774.667 1808.75,-782.829 1812.37,-776.834\"/>\n</g>\n<!-- 50 -->\n<g id=\"node51\" class=\"node\"><title>50</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M2044,-782C2044,-782 1840,-782 1840,-782 1834,-782 1828,-776 1828,-770 1828,-770 1828,-711 1828,-711 1828,-705 1834,-699 1840,-699 1840,-699 2044,-699 2044,-699 2050,-699 2056,-705 2056,-711 2056,-711 2056,-770 2056,-770 2056,-776 2050,-782 2044,-782\"/>\n<text text-anchor=\"start\" x=\"1836\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.165</text>\n<text text-anchor=\"start\" x=\"1900\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"1902.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1901.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"1895\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 48->50 -->\n<g id=\"edge50\" class=\"edge\"><title>48->50</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1941.35,-817.907C1941.42,-809.649 1941.49,-800.864 1941.57,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1945.07,-792.05 1941.65,-782.021 1938.07,-791.99 1945.07,-792.05\"/>\n</g>\n<!-- 51 -->\n<g id=\"node52\" class=\"node\"><title>51</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1921,-655.5C1921,-655.5 1835,-655.5 1835,-655.5 1829,-655.5 1823,-649.5 1823,-643.5 1823,-643.5 1823,-599.5 1823,-599.5 1823,-593.5 1829,-587.5 1835,-587.5 1835,-587.5 1921,-587.5 1921,-587.5 1927,-587.5 1933,-593.5 1933,-599.5 1933,-599.5 1933,-643.5 1933,-643.5 1933,-649.5 1927,-655.5 1921,-655.5\"/>\n<text text-anchor=\"start\" x=\"1836\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1838.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1837.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"1831\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 50->51 -->\n<g id=\"edge51\" class=\"edge\"><title>50->51</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1919.8,-698.907C1913.76,-687.873 1907.21,-675.898 1901.12,-664.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1904.01,-662.76 1896.14,-655.667 1897.87,-666.12 1904.01,-662.76\"/>\n</g>\n<!-- 52 -->\n<g id=\"node53\" class=\"node\"><title>52</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2065,-655.5C2065,-655.5 1963,-655.5 1963,-655.5 1957,-655.5 1951,-649.5 1951,-643.5 1951,-643.5 1951,-599.5 1951,-599.5 1951,-593.5 1957,-587.5 1963,-587.5 1963,-587.5 2065,-587.5 2065,-587.5 2071,-587.5 2077,-593.5 2077,-599.5 2077,-599.5 2077,-643.5 2077,-643.5 2077,-649.5 2071,-655.5 2065,-655.5\"/>\n<text text-anchor=\"start\" x=\"1972\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1974.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1973.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"1959\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 50->52 -->\n<g id=\"edge52\" class=\"edge\"><title>50->52</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1966.98,-698.907C1973.84,-687.763 1981.29,-675.658 1988.19,-664.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1991.33,-666.018 1993.59,-655.667 1985.37,-662.349 1991.33,-666.018\"/>\n</g>\n<!-- 54 -->\n<g id=\"node55\" class=\"node\"><title>54</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2188,-774.5C2188,-774.5 2086,-774.5 2086,-774.5 2080,-774.5 2074,-768.5 2074,-762.5 2074,-762.5 2074,-718.5 2074,-718.5 2074,-712.5 2080,-706.5 2086,-706.5 2086,-706.5 2188,-706.5 2188,-706.5 2194,-706.5 2200,-712.5 2200,-718.5 2200,-718.5 2200,-762.5 2200,-762.5 2200,-768.5 2194,-774.5 2188,-774.5\"/>\n<text text-anchor=\"start\" x=\"2095\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2097.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"2096.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\n<text text-anchor=\"start\" x=\"2082\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 53->54 -->\n<g id=\"edge54\" class=\"edge\"><title>53->54</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2138.31,-817.907C2138.12,-807.204 2137.93,-795.615 2137.74,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2141.24,-784.606 2137.57,-774.667 2134.24,-784.725 2141.24,-784.606\"/>\n</g>\n<!-- 55 -->\n<g id=\"node56\" class=\"node\"><title>55</title>\n<path fill=\"#e78d4c\" stroke=\"black\" d=\"M2417.5,-782C2417.5,-782 2230.5,-782 2230.5,-782 2224.5,-782 2218.5,-776 2218.5,-770 2218.5,-770 2218.5,-711 2218.5,-711 2218.5,-705 2224.5,-699 2230.5,-699 2230.5,-699 2417.5,-699 2417.5,-699 2423.5,-699 2429.5,-705 2429.5,-711 2429.5,-711 2429.5,-770 2429.5,-770 2429.5,-776 2423.5,-782 2417.5,-782\"/>\n<text text-anchor=\"start\" x=\"2226.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.015</text>\n<text text-anchor=\"start\" x=\"2274\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.426</text>\n<text text-anchor=\"start\" x=\"2280.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\n<text text-anchor=\"start\" x=\"2279.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 2]</text>\n<text text-anchor=\"start\" x=\"2277\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 53->55 -->\n<g id=\"edge55\" class=\"edge\"><title>53->55</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2203.18,-817.907C2218.68,-808.106 2235.35,-797.563 2251.21,-787.533\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2253.35,-790.324 2259.93,-782.021 2249.61,-784.408 2253.35,-790.324\"/>\n</g>\n<!-- 56 -->\n<g id=\"node57\" class=\"node\"><title>56</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2231,-655.5C2231,-655.5 2145,-655.5 2145,-655.5 2139,-655.5 2133,-649.5 2133,-643.5 2133,-643.5 2133,-599.5 2133,-599.5 2133,-593.5 2139,-587.5 2145,-587.5 2145,-587.5 2231,-587.5 2231,-587.5 2237,-587.5 2243,-593.5 2243,-599.5 2243,-599.5 2243,-643.5 2243,-643.5 2243,-649.5 2237,-655.5 2231,-655.5\"/>\n<text text-anchor=\"start\" x=\"2146\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2144.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\n<text text-anchor=\"start\" x=\"2143.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\n<text text-anchor=\"start\" x=\"2141\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 55->56 -->\n<g id=\"edge56\" class=\"edge\"><title>55->56</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2276.82,-698.907C2263.09,-687.101 2248.11,-674.217 2234.44,-662.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2236.42,-659.535 2226.55,-655.667 2231.85,-664.842 2236.42,-659.535\"/>\n</g>\n<!-- 57 -->\n<g id=\"node58\" class=\"node\"><title>57</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2375,-655.5C2375,-655.5 2273,-655.5 2273,-655.5 2267,-655.5 2261,-649.5 2261,-643.5 2261,-643.5 2261,-599.5 2261,-599.5 2261,-593.5 2267,-587.5 2273,-587.5 2273,-587.5 2375,-587.5 2375,-587.5 2381,-587.5 2387,-593.5 2387,-599.5 2387,-599.5 2387,-643.5 2387,-643.5 2387,-649.5 2381,-655.5 2375,-655.5\"/>\n<text text-anchor=\"start\" x=\"2282\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2284.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2283.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"2269\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 55->57 -->\n<g id=\"edge57\" class=\"edge\"><title>55->57</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2324,-698.907C2324,-688.204 2324,-676.615 2324,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2327.5,-665.667 2324,-655.667 2320.5,-665.667 2327.5,-665.667\"/>\n</g>\n<!-- 59 -->\n<g id=\"node60\" class=\"node\"><title>59</title>\n<path fill=\"#e68640\" stroke=\"black\" d=\"M4112,-1020C4112,-1020 3998,-1020 3998,-1020 3992,-1020 3986,-1014 3986,-1008 3986,-1008 3986,-949 3986,-949 3986,-943 3992,-937 3998,-937 3998,-937 4112,-937 4112,-937 4118,-937 4124,-943 4124,-949 4124,-949 4124,-1008 4124,-1008 4124,-1014 4118,-1020 4112,-1020\"/>\n<text text-anchor=\"start\" x=\"4027.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"4005\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.219</text>\n<text text-anchor=\"start\" x=\"4003.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8883</text>\n<text text-anchor=\"start\" x=\"3994\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8572, 311]</text>\n<text text-anchor=\"start\" x=\"4008\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 58->59 -->\n<g id=\"edge59\" class=\"edge\"><title>58->59</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4055,-1055.91C4055,-1047.65 4055,-1038.86 4055,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4058.5,-1030.02 4055,-1020.02 4051.5,-1030.02 4058.5,-1030.02\"/>\n</g>\n<!-- 134 -->\n<g id=\"node135\" class=\"node\"><title>134</title>\n<path fill=\"#97ccf1\" stroke=\"black\" d=\"M4738.5,-1020C4738.5,-1020 4631.5,-1020 4631.5,-1020 4625.5,-1020 4619.5,-1014 4619.5,-1008 4619.5,-1008 4619.5,-949 4619.5,-949 4619.5,-943 4625.5,-937 4631.5,-937 4631.5,-937 4738.5,-937 4738.5,-937 4744.5,-937 4750.5,-943 4750.5,-949 4750.5,-949 4750.5,-1008 4750.5,-1008 4750.5,-1014 4744.5,-1020 4738.5,-1020\"/>\n<text text-anchor=\"start\" x=\"4627.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 351.5</text>\n<text text-anchor=\"start\" x=\"4635\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.907</text>\n<text text-anchor=\"start\" x=\"4637.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 595</text>\n<text text-anchor=\"start\" x=\"4628\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 403]</text>\n<text text-anchor=\"start\" x=\"4630\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 58->134 -->\n<g id=\"edge134\" class=\"edge\"><title>58->134</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4124.53,-1083.59C4243.58,-1061.48 4485.55,-1016.54 4608.94,-993.625\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4609.87,-997.013 4619.06,-991.745 4608.59,-990.13 4609.87,-997.013\"/>\n</g>\n<!-- 60 -->\n<g id=\"node61\" class=\"node\"><title>60</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3719,-901C3719,-901 3605,-901 3605,-901 3599,-901 3593,-895 3593,-889 3593,-889 3593,-830 3593,-830 3593,-824 3599,-818 3605,-818 3605,-818 3719,-818 3719,-818 3725,-818 3731,-824 3731,-830 3731,-830 3731,-889 3731,-889 3731,-895 3725,-901 3719,-901\"/>\n<text text-anchor=\"start\" x=\"3613\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\n<text text-anchor=\"start\" x=\"3612\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.108</text>\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8542</text>\n<text text-anchor=\"start\" x=\"3601\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8420, 122]</text>\n<text text-anchor=\"start\" x=\"3615\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 59->60 -->\n<g id=\"edge60\" class=\"edge\"><title>59->60</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3985.64,-956.852C3917.25,-936.489 3812.83,-905.403 3741.2,-884.08\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3741.91,-880.637 3731.32,-881.138 3739.91,-887.346 3741.91,-880.637\"/>\n</g>\n<!-- 117 -->\n<g id=\"node118\" class=\"node\"><title>117</title>\n<path fill=\"#d8ecfa\" stroke=\"black\" d=\"M4439.5,-901C4439.5,-901 4324.5,-901 4324.5,-901 4318.5,-901 4312.5,-895 4312.5,-889 4312.5,-889 4312.5,-830 4312.5,-830 4312.5,-824 4318.5,-818 4324.5,-818 4324.5,-818 4439.5,-818 4439.5,-818 4445.5,-818 4451.5,-824 4451.5,-830 4451.5,-830 4451.5,-889 4451.5,-889 4451.5,-895 4445.5,-901 4439.5,-901\"/>\n<text text-anchor=\"start\" x=\"4320.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 6052.0</text>\n<text text-anchor=\"start\" x=\"4332\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\n<text text-anchor=\"start\" x=\"4334.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 341</text>\n<text text-anchor=\"start\" x=\"4325\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 189]</text>\n<text text-anchor=\"start\" x=\"4327\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 59->117 -->\n<g id=\"edge117\" class=\"edge\"><title>59->117</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4124.35,-952.687C4176.61,-933.988 4248.34,-908.323 4302.85,-888.821\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4304.23,-892.042 4312.47,-885.378 4301.88,-885.451 4304.23,-892.042\"/>\n</g>\n<!-- 61 -->\n<g id=\"node62\" class=\"node\"><title>61</title>\n<path fill=\"#e99355\" stroke=\"black\" d=\"M3069,-782C3069,-782 2867,-782 2867,-782 2861,-782 2855,-776 2855,-770 2855,-770 2855,-711 2855,-711 2855,-705 2861,-699 2867,-699 2867,-699 3069,-699 3069,-699 3075,-699 3081,-705 3081,-711 3081,-711 3081,-770 3081,-770 3081,-776 3075,-782 3069,-782\"/>\n<text text-anchor=\"start\" x=\"2863\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.825</text>\n<text text-anchor=\"start\" x=\"2918\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.541</text>\n<text text-anchor=\"start\" x=\"2920.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 911</text>\n<text text-anchor=\"start\" x=\"2911\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [798, 113]</text>\n<text text-anchor=\"start\" x=\"2921\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 60->61 -->\n<g id=\"edge61\" class=\"edge\"><title>60->61</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3592.92,-846.854C3475.95,-827.135 3237.4,-786.918 3091.23,-762.275\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3091.74,-758.813 3081.3,-760.601 3090.58,-765.715 3091.74,-758.813\"/>\n</g>\n<!-- 98 -->\n<g id=\"node99\" class=\"node\"><title>98</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3749,-782C3749,-782 3575,-782 3575,-782 3569,-782 3563,-776 3563,-770 3563,-770 3563,-711 3563,-711 3563,-705 3569,-699 3575,-699 3575,-699 3749,-699 3749,-699 3755,-699 3761,-705 3761,-711 3761,-711 3761,-770 3761,-770 3761,-776 3755,-782 3749,-782\"/>\n<text text-anchor=\"start\" x=\"3571\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\n<text text-anchor=\"start\" x=\"3612\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.013</text>\n<text text-anchor=\"start\" x=\"3610.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7631</text>\n<text text-anchor=\"start\" x=\"3609\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7622, 9]</text>\n<text text-anchor=\"start\" x=\"3615\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 60->98 -->\n<g id=\"edge98\" class=\"edge\"><title>60->98</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3662,-817.907C3662,-809.649 3662,-800.864 3662,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3665.5,-792.021 3662,-782.021 3658.5,-792.021 3665.5,-792.021\"/>\n</g>\n<!-- 62 -->\n<g id=\"node63\" class=\"node\"><title>62</title>\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M2515,-663C2515,-663 2417,-663 2417,-663 2411,-663 2405,-657 2405,-651 2405,-651 2405,-592 2405,-592 2405,-586 2411,-580 2417,-580 2417,-580 2515,-580 2515,-580 2521,-580 2527,-586 2527,-592 2527,-592 2527,-651 2527,-651 2527,-657 2521,-663 2515,-663\"/>\n<text text-anchor=\"start\" x=\"2425\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"2416\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.142</text>\n<text text-anchor=\"start\" x=\"2418.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 746</text>\n<text text-anchor=\"start\" x=\"2413\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [731, 15]</text>\n<text text-anchor=\"start\" x=\"2419\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 61->62 -->\n<g id=\"edge62\" class=\"edge\"><title>61->62</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2854.72,-713.097C2757.18,-690.364 2619.46,-658.266 2536.82,-639.007\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2537.56,-635.585 2527.03,-636.723 2535.97,-642.402 2537.56,-635.585\"/>\n</g>\n<!-- 81 -->\n<g id=\"node82\" class=\"node\"><title>81</title>\n<path fill=\"#c0e0f7\" stroke=\"black\" d=\"M3075,-663C3075,-663 2861,-663 2861,-663 2855,-663 2849,-657 2849,-651 2849,-651 2849,-592 2849,-592 2849,-586 2855,-580 2861,-580 2861,-580 3075,-580 3075,-580 3081,-580 3087,-586 3087,-592 3087,-592 3087,-651 3087,-651 3087,-657 3081,-663 3075,-663\"/>\n<text text-anchor=\"start\" x=\"2857\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.06</text>\n<text text-anchor=\"start\" x=\"2918\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.974</text>\n<text text-anchor=\"start\" x=\"2920.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 165</text>\n<text text-anchor=\"start\" x=\"2919.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 98]</text>\n<text text-anchor=\"start\" x=\"2913\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 61->81 -->\n<g id=\"edge81\" class=\"edge\"><title>61->81</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2968,-698.907C2968,-690.649 2968,-681.864 2968,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2971.5,-673.021 2968,-663.021 2964.5,-673.021 2971.5,-673.021\"/>\n</g>\n<!-- 63 -->\n<g id=\"node64\" class=\"node\"><title>63</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2115.5,-544C2115.5,-544 2026.5,-544 2026.5,-544 2020.5,-544 2014.5,-538 2014.5,-532 2014.5,-532 2014.5,-473 2014.5,-473 2014.5,-467 2020.5,-461 2026.5,-461 2026.5,-461 2115.5,-461 2115.5,-461 2121.5,-461 2127.5,-467 2127.5,-473 2127.5,-473 2127.5,-532 2127.5,-532 2127.5,-538 2121.5,-544 2115.5,-544\"/>\n<text text-anchor=\"start\" x=\"2028\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 8.0</text>\n<text text-anchor=\"start\" x=\"2025\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.06</text>\n<text text-anchor=\"start\" x=\"2023.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 575</text>\n<text text-anchor=\"start\" x=\"2022.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 4]</text>\n<text text-anchor=\"start\" x=\"2024\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 62->63 -->\n<g id=\"edge63\" class=\"edge\"><title>62->63</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2404.66,-583.702C2401.77,-582.382 2398.87,-581.14 2396,-580 2309.91,-545.828 2204.66,-524.51 2137.72,-513.313\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2138.16,-509.838 2127.72,-511.668 2137.02,-516.745 2138.16,-509.838\"/>\n</g>\n<!-- 70 -->\n<g id=\"node71\" class=\"node\"><title>70</title>\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M2514,-544C2514,-544 2416,-544 2416,-544 2410,-544 2404,-538 2404,-532 2404,-532 2404,-473 2404,-473 2404,-467 2410,-461 2416,-461 2416,-461 2514,-461 2514,-461 2520,-461 2526,-467 2526,-473 2526,-473 2526,-532 2526,-532 2526,-538 2520,-544 2514,-544\"/>\n<text text-anchor=\"start\" x=\"2424\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\n<text text-anchor=\"start\" x=\"2415\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.344</text>\n<text text-anchor=\"start\" x=\"2417.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 171</text>\n<text text-anchor=\"start\" x=\"2412\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [160, 11]</text>\n<text text-anchor=\"start\" x=\"2418\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 62->70 -->\n<g id=\"edge70\" class=\"edge\"><title>62->70</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2465.65,-579.907C2465.58,-571.649 2465.51,-562.864 2465.43,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2468.93,-553.99 2465.35,-544.021 2461.93,-554.05 2468.93,-553.99\"/>\n</g>\n<!-- 64 -->\n<g id=\"node65\" class=\"node\"><title>64</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M1977.5,-425C1977.5,-425 1870.5,-425 1870.5,-425 1864.5,-425 1858.5,-419 1858.5,-413 1858.5,-413 1858.5,-354 1858.5,-354 1858.5,-348 1864.5,-342 1870.5,-342 1870.5,-342 1977.5,-342 1977.5,-342 1983.5,-342 1989.5,-348 1989.5,-354 1989.5,-354 1989.5,-413 1989.5,-413 1989.5,-419 1983.5,-425 1977.5,-425\"/>\n<text text-anchor=\"start\" x=\"1866.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 353.5</text>\n<text text-anchor=\"start\" x=\"1874\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\n<text text-anchor=\"start\" x=\"1876.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 574</text>\n<text text-anchor=\"start\" x=\"1875.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [571, 3]</text>\n<text text-anchor=\"start\" x=\"1877\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 63->64 -->\n<g id=\"edge64\" class=\"edge\"><title>63->64</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2020,-460.907C2008.03,-451.379 1995.17,-441.148 1982.89,-431.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1984.91,-428.51 1974.91,-425.021 1980.56,-433.987 1984.91,-428.51\"/>\n</g>\n<!-- 69 -->\n<g id=\"node70\" class=\"node\"><title>69</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2122,-417.5C2122,-417.5 2020,-417.5 2020,-417.5 2014,-417.5 2008,-411.5 2008,-405.5 2008,-405.5 2008,-361.5 2008,-361.5 2008,-355.5 2014,-349.5 2020,-349.5 2020,-349.5 2122,-349.5 2122,-349.5 2128,-349.5 2134,-355.5 2134,-361.5 2134,-361.5 2134,-405.5 2134,-405.5 2134,-411.5 2128,-417.5 2122,-417.5\"/>\n<text text-anchor=\"start\" x=\"2029\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2031.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2030.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2016\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 63->69 -->\n<g id=\"edge69\" class=\"edge\"><title>63->69</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2071,-460.907C2071,-450.204 2071,-438.615 2071,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2074.5,-427.667 2071,-417.667 2067.5,-427.667 2074.5,-427.667\"/>\n</g>\n<!-- 65 -->\n<g id=\"node66\" class=\"node\"><title>65</title>\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M1854.5,-306C1854.5,-306 1747.5,-306 1747.5,-306 1741.5,-306 1735.5,-300 1735.5,-294 1735.5,-294 1735.5,-235 1735.5,-235 1735.5,-229 1741.5,-223 1747.5,-223 1747.5,-223 1854.5,-223 1854.5,-223 1860.5,-223 1866.5,-229 1866.5,-235 1866.5,-235 1866.5,-294 1866.5,-294 1866.5,-300 1860.5,-306 1854.5,-306\"/>\n<text text-anchor=\"start\" x=\"1743.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 326.5</text>\n<text text-anchor=\"start\" x=\"1751\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.161</text>\n<text text-anchor=\"start\" x=\"1753.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 127</text>\n<text text-anchor=\"start\" x=\"1752.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 3]</text>\n<text text-anchor=\"start\" x=\"1754\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 64->65 -->\n<g id=\"edge65\" class=\"edge\"><title>64->65</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1881.33,-341.907C1871.5,-332.56 1860.96,-322.538 1850.86,-312.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1853.26,-310.377 1843.6,-306.021 1848.43,-315.449 1853.26,-310.377\"/>\n</g>\n<!-- 68 -->\n<g id=\"node69\" class=\"node\"><title>68</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1985.5,-298.5C1985.5,-298.5 1896.5,-298.5 1896.5,-298.5 1890.5,-298.5 1884.5,-292.5 1884.5,-286.5 1884.5,-286.5 1884.5,-242.5 1884.5,-242.5 1884.5,-236.5 1890.5,-230.5 1896.5,-230.5 1896.5,-230.5 1985.5,-230.5 1985.5,-230.5 1991.5,-230.5 1997.5,-236.5 1997.5,-242.5 1997.5,-242.5 1997.5,-286.5 1997.5,-286.5 1997.5,-292.5 1991.5,-298.5 1985.5,-298.5\"/>\n<text text-anchor=\"start\" x=\"1899\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1893.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 447</text>\n<text text-anchor=\"start\" x=\"1892.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [447, 0]</text>\n<text text-anchor=\"start\" x=\"1894\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 64->68 -->\n<g id=\"edge68\" class=\"edge\"><title>64->68</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1929.9,-341.907C1931.45,-331.204 1933.14,-319.615 1934.71,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1938.21,-309.066 1936.18,-298.667 1931.28,-308.06 1938.21,-309.066\"/>\n</g>\n<!-- 66 -->\n<g id=\"node67\" class=\"node\"><title>66</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1816.5,-179.5C1816.5,-179.5 1727.5,-179.5 1727.5,-179.5 1721.5,-179.5 1715.5,-173.5 1715.5,-167.5 1715.5,-167.5 1715.5,-123.5 1715.5,-123.5 1715.5,-117.5 1721.5,-111.5 1727.5,-111.5 1727.5,-111.5 1816.5,-111.5 1816.5,-111.5 1822.5,-111.5 1828.5,-117.5 1828.5,-123.5 1828.5,-123.5 1828.5,-167.5 1828.5,-167.5 1828.5,-173.5 1822.5,-179.5 1816.5,-179.5\"/>\n<text text-anchor=\"start\" x=\"1730\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1724.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 124</text>\n<text text-anchor=\"start\" x=\"1723.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [124, 0]</text>\n<text text-anchor=\"start\" x=\"1725\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 65->66 -->\n<g id=\"edge66\" class=\"edge\"><title>65->66</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1790.94,-222.907C1788.26,-212.094 1785.35,-200.376 1782.64,-189.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1786.02,-188.531 1780.22,-179.667 1779.23,-190.215 1786.02,-188.531\"/>\n</g>\n<!-- 67 -->\n<g id=\"node68\" class=\"node\"><title>67</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1961,-179.5C1961,-179.5 1859,-179.5 1859,-179.5 1853,-179.5 1847,-173.5 1847,-167.5 1847,-167.5 1847,-123.5 1847,-123.5 1847,-117.5 1853,-111.5 1859,-111.5 1859,-111.5 1961,-111.5 1961,-111.5 1967,-111.5 1973,-117.5 1973,-123.5 1973,-123.5 1973,-167.5 1973,-167.5 1973,-173.5 1967,-179.5 1961,-179.5\"/>\n<text text-anchor=\"start\" x=\"1868\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1870.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"1869.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"1855\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 65->67 -->\n<g id=\"edge67\" class=\"edge\"><title>65->67</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1838.82,-222.907C1849.61,-211.321 1861.37,-198.698 1872.17,-187.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1874.85,-189.37 1879.1,-179.667 1869.72,-184.598 1874.85,-189.37\"/>\n</g>\n<!-- 71 -->\n<g id=\"node72\" class=\"node\"><title>71</title>\n<path fill=\"#e9f4fc\" stroke=\"black\" d=\"M2366,-425C2366,-425 2164,-425 2164,-425 2158,-425 2152,-419 2152,-413 2152,-413 2152,-354 2152,-354 2152,-348 2158,-342 2164,-342 2164,-342 2366,-342 2366,-342 2372,-342 2378,-348 2378,-354 2378,-354 2378,-413 2378,-413 2378,-419 2372,-425 2366,-425\"/>\n<text text-anchor=\"start\" x=\"2160\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.265</text>\n<text text-anchor=\"start\" x=\"2215\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\n<text text-anchor=\"start\" x=\"2221.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"2224.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 9]</text>\n<text text-anchor=\"start\" x=\"2210\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 70->71 -->\n<g id=\"edge71\" class=\"edge\"><title>70->71</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2403.91,-465.76C2384.79,-454.579 2363.43,-442.084 2343.31,-430.31\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2344.86,-427.165 2334.46,-425.136 2341.33,-433.207 2344.86,-427.165\"/>\n</g>\n<!-- 74 -->\n<g id=\"node75\" class=\"node\"><title>74</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M2520.5,-425C2520.5,-425 2409.5,-425 2409.5,-425 2403.5,-425 2397.5,-419 2397.5,-413 2397.5,-413 2397.5,-354 2397.5,-354 2397.5,-348 2403.5,-342 2409.5,-342 2409.5,-342 2520.5,-342 2520.5,-342 2526.5,-342 2532.5,-348 2532.5,-354 2532.5,-354 2532.5,-413 2532.5,-413 2532.5,-419 2526.5,-425 2520.5,-425\"/>\n<text text-anchor=\"start\" x=\"2405.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 17844.5</text>\n<text text-anchor=\"start\" x=\"2423\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.1</text>\n<text text-anchor=\"start\" x=\"2417.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 154</text>\n<text text-anchor=\"start\" x=\"2416.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 2]</text>\n<text text-anchor=\"start\" x=\"2418\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 70->74 -->\n<g id=\"edge74\" class=\"edge\"><title>70->74</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2465,-460.907C2465,-452.649 2465,-443.864 2465,-435.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2468.5,-435.021 2465,-425.021 2461.5,-435.021 2468.5,-435.021\"/>\n</g>\n<!-- 72 -->\n<g id=\"node73\" class=\"node\"><title>72</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2163,-298.5C2163,-298.5 2061,-298.5 2061,-298.5 2055,-298.5 2049,-292.5 2049,-286.5 2049,-286.5 2049,-242.5 2049,-242.5 2049,-236.5 2055,-230.5 2061,-230.5 2061,-230.5 2163,-230.5 2163,-230.5 2169,-230.5 2175,-236.5 2175,-242.5 2175,-242.5 2175,-286.5 2175,-286.5 2175,-292.5 2169,-298.5 2163,-298.5\"/>\n<text text-anchor=\"start\" x=\"2070\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2072.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"2071.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\n<text text-anchor=\"start\" x=\"2057\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 71->72 -->\n<g id=\"edge72\" class=\"edge\"><title>71->72</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2211.92,-341.907C2196.19,-329.88 2179,-316.735 2163.38,-304.791\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2165.44,-301.961 2155.37,-298.667 2161.19,-307.522 2165.44,-301.961\"/>\n</g>\n<!-- 73 -->\n<g id=\"node74\" class=\"node\"><title>73</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2291,-298.5C2291,-298.5 2205,-298.5 2205,-298.5 2199,-298.5 2193,-292.5 2193,-286.5 2193,-286.5 2193,-242.5 2193,-242.5 2193,-236.5 2199,-230.5 2205,-230.5 2205,-230.5 2291,-230.5 2291,-230.5 2297,-230.5 2303,-236.5 2303,-242.5 2303,-242.5 2303,-286.5 2303,-286.5 2303,-292.5 2297,-298.5 2291,-298.5\"/>\n<text text-anchor=\"start\" x=\"2206\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2208.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"2207.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\n<text text-anchor=\"start\" x=\"2201\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 71->73 -->\n<g id=\"edge73\" class=\"edge\"><title>71->73</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2259.1,-341.907C2257.55,-331.204 2255.86,-319.615 2254.29,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2257.72,-308.06 2252.82,-298.667 2250.79,-309.066 2257.72,-308.06\"/>\n</g>\n<!-- 75 -->\n<g id=\"node76\" class=\"node\"><title>75</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M2458.5,-306C2458.5,-306 2333.5,-306 2333.5,-306 2327.5,-306 2321.5,-300 2321.5,-294 2321.5,-294 2321.5,-235 2321.5,-235 2321.5,-229 2327.5,-223 2333.5,-223 2333.5,-223 2458.5,-223 2458.5,-223 2464.5,-223 2470.5,-229 2470.5,-235 2470.5,-235 2470.5,-294 2470.5,-294 2470.5,-300 2464.5,-306 2458.5,-306\"/>\n<text text-anchor=\"start\" x=\"2329.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 5.5</text>\n<text text-anchor=\"start\" x=\"2346\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.057</text>\n<text text-anchor=\"start\" x=\"2348.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 153</text>\n<text text-anchor=\"start\" x=\"2347.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 1]</text>\n<text text-anchor=\"start\" x=\"2349\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 74->75 -->\n<g id=\"edge75\" class=\"edge\"><title>74->75</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2441.06,-341.907C2435.92,-333.195 2430.44,-323.897 2425.13,-314.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2427.99,-312.857 2419.9,-306.021 2421.96,-316.412 2427.99,-312.857\"/>\n</g>\n<!-- 80 -->\n<g id=\"node81\" class=\"node\"><title>80</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2603,-298.5C2603,-298.5 2501,-298.5 2501,-298.5 2495,-298.5 2489,-292.5 2489,-286.5 2489,-286.5 2489,-242.5 2489,-242.5 2489,-236.5 2495,-230.5 2501,-230.5 2501,-230.5 2603,-230.5 2603,-230.5 2609,-230.5 2615,-236.5 2615,-242.5 2615,-242.5 2615,-286.5 2615,-286.5 2615,-292.5 2609,-298.5 2603,-298.5\"/>\n<text text-anchor=\"start\" x=\"2510\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2512.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2511.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2497\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 74->80 -->\n<g id=\"edge80\" class=\"edge\"><title>74->80</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2495.18,-341.907C2503.64,-330.542 2512.83,-318.178 2521.31,-306.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2524.18,-308.78 2527.34,-298.667 2518.56,-304.603 2524.18,-308.78\"/>\n</g>\n<!-- 76 -->\n<g id=\"node77\" class=\"node\"><title>76</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2403.5,-187C2403.5,-187 2296.5,-187 2296.5,-187 2290.5,-187 2284.5,-181 2284.5,-175 2284.5,-175 2284.5,-116 2284.5,-116 2284.5,-110 2290.5,-104 2296.5,-104 2296.5,-104 2403.5,-104 2403.5,-104 2409.5,-104 2415.5,-110 2415.5,-116 2415.5,-116 2415.5,-175 2415.5,-175 2415.5,-181 2409.5,-187 2403.5,-187\"/>\n<text text-anchor=\"start\" x=\"2292.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 239.5</text>\n<text text-anchor=\"start\" x=\"2300\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"2310.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2309.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\n<text text-anchor=\"start\" x=\"2303\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 75->76 -->\n<g id=\"edge76\" class=\"edge\"><title>75->76</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2380.04,-222.907C2376.69,-214.377 2373.11,-205.284 2369.64,-196.456\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2372.85,-195.047 2365.93,-187.021 2366.33,-197.608 2372.85,-195.047\"/>\n</g>\n<!-- 79 -->\n<g id=\"node80\" class=\"node\"><title>79</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2534.5,-179.5C2534.5,-179.5 2445.5,-179.5 2445.5,-179.5 2439.5,-179.5 2433.5,-173.5 2433.5,-167.5 2433.5,-167.5 2433.5,-123.5 2433.5,-123.5 2433.5,-117.5 2439.5,-111.5 2445.5,-111.5 2445.5,-111.5 2534.5,-111.5 2534.5,-111.5 2540.5,-111.5 2546.5,-117.5 2546.5,-123.5 2546.5,-123.5 2546.5,-167.5 2546.5,-167.5 2546.5,-173.5 2540.5,-179.5 2534.5,-179.5\"/>\n<text text-anchor=\"start\" x=\"2448\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2442.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 150</text>\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [150, 0]</text>\n<text text-anchor=\"start\" x=\"2443\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 75->79 -->\n<g id=\"edge79\" class=\"edge\"><title>75->79</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2428.61,-222.907C2437.74,-211.542 2447.68,-199.178 2456.84,-187.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2459.82,-189.655 2463.35,-179.667 2454.36,-185.271 2459.82,-189.655\"/>\n</g>\n<!-- 77 -->\n<g id=\"node78\" class=\"node\"><title>77</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2341,-68C2341,-68 2255,-68 2255,-68 2249,-68 2243,-62 2243,-56 2243,-56 2243,-12 2243,-12 2243,-6 2249,-0 2255,-0 2255,-0 2341,-0 2341,-0 2347,-0 2353,-6 2353,-12 2353,-12 2353,-56 2353,-56 2353,-62 2347,-68 2341,-68\"/>\n<text text-anchor=\"start\" x=\"2256\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2258.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2257.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"2251\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 76->77 -->\n<g id=\"edge77\" class=\"edge\"><title>76->77</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2330.64,-103.726C2326.57,-95.1527 2322.26,-86.0891 2318.16,-77.4555\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2321.26,-75.8314 2313.81,-68.2996 2314.94,-78.8342 2321.26,-75.8314\"/>\n</g>\n<!-- 78 -->\n<g id=\"node79\" class=\"node\"><title>78</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2485,-68C2485,-68 2383,-68 2383,-68 2377,-68 2371,-62 2371,-56 2371,-56 2371,-12 2371,-12 2371,-6 2377,-0 2383,-0 2383,-0 2485,-0 2485,-0 2491,-0 2497,-6 2497,-12 2497,-12 2497,-56 2497,-56 2497,-62 2491,-68 2485,-68\"/>\n<text text-anchor=\"start\" x=\"2392\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2394.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2393.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"2379\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 76->78 -->\n<g id=\"edge78\" class=\"edge\"><title>76->78</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2381.28,-103.726C2388.14,-94.7878 2395.4,-85.3168 2402.28,-76.3558\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2405.15,-78.3643 2408.46,-68.2996 2399.59,-74.1036 2405.15,-78.3643\"/>\n</g>\n<!-- 82 -->\n<g id=\"node83\" class=\"node\"><title>82</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2977,-544C2977,-544 2755,-544 2755,-544 2749,-544 2743,-538 2743,-532 2743,-532 2743,-473 2743,-473 2743,-467 2749,-461 2755,-461 2755,-461 2977,-461 2977,-461 2983,-461 2989,-467 2989,-473 2989,-473 2989,-532 2989,-532 2989,-538 2983,-544 2977,-544\"/>\n<text text-anchor=\"start\" x=\"2751\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\n<text text-anchor=\"start\" x=\"2816\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"2822.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 99</text>\n<text text-anchor=\"start\" x=\"2817.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 33]</text>\n<text text-anchor=\"start\" x=\"2819\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 81->82 -->\n<g id=\"edge82\" class=\"edge\"><title>81->82</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2932.61,-579.907C2924.7,-570.832 2916.23,-561.121 2908.08,-551.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2910.54,-549.259 2901.33,-544.021 2905.26,-553.859 2910.54,-549.259\"/>\n</g>\n<!-- 95 -->\n<g id=\"node96\" class=\"node\"><title>95</title>\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M3121,-544C3121,-544 3019,-544 3019,-544 3013,-544 3007,-538 3007,-532 3007,-532 3007,-473 3007,-473 3007,-467 3013,-461 3019,-461 3019,-461 3121,-461 3121,-461 3127,-461 3133,-467 3133,-473 3133,-473 3133,-532 3133,-532 3133,-538 3127,-544 3121,-544\"/>\n<text text-anchor=\"start\" x=\"3022\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 2.5</text>\n<text text-anchor=\"start\" x=\"3020\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\n<text text-anchor=\"start\" x=\"3026.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 66</text>\n<text text-anchor=\"start\" x=\"3025.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 65]</text>\n<text text-anchor=\"start\" x=\"3015\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 81->95 -->\n<g id=\"edge95\" class=\"edge\"><title>81->95</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3003.39,-579.907C3011.3,-570.832 3019.77,-561.121 3027.92,-551.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3030.74,-553.859 3034.67,-544.021 3025.46,-549.259 3030.74,-553.859\"/>\n</g>\n<!-- 83 -->\n<g id=\"node84\" class=\"node\"><title>83</title>\n<path fill=\"#ecf6fd\" stroke=\"black\" d=\"M2809.5,-425C2809.5,-425 2702.5,-425 2702.5,-425 2696.5,-425 2690.5,-419 2690.5,-413 2690.5,-413 2690.5,-354 2690.5,-354 2690.5,-348 2696.5,-342 2702.5,-342 2702.5,-342 2809.5,-342 2809.5,-342 2815.5,-342 2821.5,-348 2821.5,-354 2821.5,-354 2821.5,-413 2821.5,-413 2821.5,-419 2815.5,-425 2809.5,-425\"/>\n<text text-anchor=\"start\" x=\"2698.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 189.5</text>\n<text text-anchor=\"start\" x=\"2706\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\n<text text-anchor=\"start\" x=\"2712.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 61</text>\n<text text-anchor=\"start\" x=\"2707.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 32]</text>\n<text text-anchor=\"start\" x=\"2701\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 82->83 -->\n<g id=\"edge83\" class=\"edge\"><title>82->83</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2827.84,-460.907C2819.22,-451.742 2809.99,-441.927 2801.12,-432.489\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2803.5,-429.909 2794.1,-425.021 2798.4,-434.704 2803.5,-429.909\"/>\n</g>\n<!-- 92 -->\n<g id=\"node93\" class=\"node\"><title>92</title>\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M2944,-425C2944,-425 2852,-425 2852,-425 2846,-425 2840,-419 2840,-413 2840,-413 2840,-354 2840,-354 2840,-348 2846,-342 2852,-342 2852,-342 2944,-342 2944,-342 2950,-342 2956,-348 2956,-354 2956,-354 2956,-413 2956,-413 2956,-419 2950,-425 2944,-425\"/>\n<text text-anchor=\"start\" x=\"2855\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 7.0</text>\n<text text-anchor=\"start\" x=\"2848\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.176</text>\n<text text-anchor=\"start\" x=\"2854.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\n<text text-anchor=\"start\" x=\"2853.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 1]</text>\n<text text-anchor=\"start\" x=\"2851\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 82->92 -->\n<g id=\"edge92\" class=\"edge\"><title>82->92</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2877.1,-460.907C2879.41,-452.468 2881.87,-443.477 2884.26,-434.738\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2887.66,-435.59 2886.92,-425.021 2880.9,-433.743 2887.66,-435.59\"/>\n</g>\n<!-- 84 -->\n<g id=\"node85\" class=\"node\"><title>84</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2731,-298.5C2731,-298.5 2645,-298.5 2645,-298.5 2639,-298.5 2633,-292.5 2633,-286.5 2633,-286.5 2633,-242.5 2633,-242.5 2633,-236.5 2639,-230.5 2645,-230.5 2645,-230.5 2731,-230.5 2731,-230.5 2737,-230.5 2743,-236.5 2743,-242.5 2743,-242.5 2743,-286.5 2743,-286.5 2743,-292.5 2737,-298.5 2731,-298.5\"/>\n<text text-anchor=\"start\" x=\"2646\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2644.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"2643.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\n<text text-anchor=\"start\" x=\"2641\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 83->84 -->\n<g id=\"edge84\" class=\"edge\"><title>83->84</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2732.41,-341.907C2725.93,-330.763 2718.9,-318.658 2712.37,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2715.33,-305.554 2707.28,-298.667 2709.28,-309.072 2715.33,-305.554\"/>\n</g>\n<!-- 85 -->\n<g id=\"node86\" class=\"node\"><title>85</title>\n<path fill=\"#96cbf1\" stroke=\"black\" d=\"M2880.5,-306C2880.5,-306 2773.5,-306 2773.5,-306 2767.5,-306 2761.5,-300 2761.5,-294 2761.5,-294 2761.5,-235 2761.5,-235 2761.5,-229 2767.5,-223 2773.5,-223 2773.5,-223 2880.5,-223 2880.5,-223 2886.5,-223 2892.5,-229 2892.5,-235 2892.5,-235 2892.5,-294 2892.5,-294 2892.5,-300 2886.5,-306 2880.5,-306\"/>\n<text text-anchor=\"start\" x=\"2769.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 358.5</text>\n<text text-anchor=\"start\" x=\"2777\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.903</text>\n<text text-anchor=\"start\" x=\"2783.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\n<text text-anchor=\"start\" x=\"2778.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [15, 32]</text>\n<text text-anchor=\"start\" x=\"2772\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 83->85 -->\n<g id=\"edge85\" class=\"edge\"><title>83->85</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2780.63,-341.907C2785.97,-333.105 2791.68,-323.703 2797.2,-314.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2800.21,-316.386 2802.41,-306.021 2794.23,-312.754 2800.21,-316.386\"/>\n</g>\n<!-- 86 -->\n<g id=\"node87\" class=\"node\"><title>86</title>\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M2793,-187C2793,-187 2691,-187 2691,-187 2685,-187 2679,-181 2679,-175 2679,-175 2679,-116 2679,-116 2679,-110 2685,-104 2691,-104 2691,-104 2793,-104 2793,-104 2799,-104 2805,-110 2805,-116 2805,-116 2805,-175 2805,-175 2805,-181 2799,-187 2793,-187\"/>\n<text text-anchor=\"start\" x=\"2694\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"2692\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.206</text>\n<text text-anchor=\"start\" x=\"2698.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\n<text text-anchor=\"start\" x=\"2697.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 30]</text>\n<text text-anchor=\"start\" x=\"2687\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 85->86 -->\n<g id=\"edge86\" class=\"edge\"><title>85->86</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2797.51,-222.907C2791.05,-214.014 2784.14,-204.509 2777.48,-195.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2780.15,-193.054 2771.44,-187.021 2774.48,-197.168 2780.15,-193.054\"/>\n</g>\n<!-- 89 -->\n<g id=\"node90\" class=\"node\"><title>89</title>\n<path fill=\"#e99355\" stroke=\"black\" d=\"M2958.5,-187C2958.5,-187 2835.5,-187 2835.5,-187 2829.5,-187 2823.5,-181 2823.5,-175 2823.5,-175 2823.5,-116 2823.5,-116 2823.5,-110 2829.5,-104 2835.5,-104 2835.5,-104 2958.5,-104 2958.5,-104 2964.5,-104 2970.5,-110 2970.5,-116 2970.5,-116 2970.5,-175 2970.5,-175 2970.5,-181 2964.5,-187 2958.5,-187\"/>\n<text text-anchor=\"start\" x=\"2831.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 32877.5</text>\n<text text-anchor=\"start\" x=\"2847\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\n<text text-anchor=\"start\" x=\"2853.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"2852.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 2]</text>\n<text text-anchor=\"start\" x=\"2850\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 85->89 -->\n<g id=\"edge89\" class=\"edge\"><title>85->89</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2851.29,-222.907C2856.55,-214.105 2862.18,-204.703 2867.62,-195.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2870.63,-197.399 2872.76,-187.021 2864.62,-193.805 2870.63,-197.399\"/>\n</g>\n<!-- 87 -->\n<g id=\"node88\" class=\"node\"><title>87</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2664,-68C2664,-68 2562,-68 2562,-68 2556,-68 2550,-62 2550,-56 2550,-56 2550,-12 2550,-12 2550,-6 2556,-0 2562,-0 2562,-0 2664,-0 2664,-0 2670,-0 2676,-6 2676,-12 2676,-12 2676,-56 2676,-56 2676,-62 2670,-68 2664,-68\"/>\n<text text-anchor=\"start\" x=\"2571\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2569.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"2568.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 30]</text>\n<text text-anchor=\"start\" x=\"2558\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 86->87 -->\n<g id=\"edge87\" class=\"edge\"><title>86->87</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2693.97,-103.726C2682.9,-94.3318 2671.14,-84.349 2660.11,-74.9883\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2662.12,-72.1026 2652.23,-68.2996 2657.59,-77.4393 2662.12,-72.1026\"/>\n</g>\n<!-- 88 -->\n<g id=\"node89\" class=\"node\"><title>88</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2792,-68C2792,-68 2706,-68 2706,-68 2700,-68 2694,-62 2694,-56 2694,-56 2694,-12 2694,-12 2694,-6 2700,-0 2706,-0 2706,-0 2792,-0 2792,-0 2798,-0 2804,-6 2804,-12 2804,-12 2804,-56 2804,-56 2804,-62 2798,-68 2792,-68\"/>\n<text text-anchor=\"start\" x=\"2707\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2709.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2708.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"2702\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 86->88 -->\n<g id=\"edge88\" class=\"edge\"><title>86->88</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2744.61,-103.726C2745.14,-95.4263 2745.7,-86.6671 2746.23,-78.2834\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2749.73,-78.5025 2746.87,-68.2996 2742.74,-78.0559 2749.73,-78.5025\"/>\n</g>\n<!-- 90 -->\n<g id=\"node91\" class=\"node\"><title>90</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2933,-68C2933,-68 2847,-68 2847,-68 2841,-68 2835,-62 2835,-56 2835,-56 2835,-12 2835,-12 2835,-6 2841,-0 2847,-0 2847,-0 2933,-0 2933,-0 2939,-0 2945,-6 2945,-12 2945,-12 2945,-56 2945,-56 2945,-62 2939,-68 2933,-68\"/>\n<text text-anchor=\"start\" x=\"2848\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2846.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"2845.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\n<text text-anchor=\"start\" x=\"2843\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 89->90 -->\n<g id=\"edge90\" class=\"edge\"><title>89->90</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2894.39,-103.726C2893.86,-95.4263 2893.3,-86.6671 2892.77,-78.2834\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2896.26,-78.0559 2892.13,-68.2996 2889.27,-78.5025 2896.26,-78.0559\"/>\n</g>\n<!-- 91 -->\n<g id=\"node92\" class=\"node\"><title>91</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3077,-68C3077,-68 2975,-68 2975,-68 2969,-68 2963,-62 2963,-56 2963,-56 2963,-12 2963,-12 2963,-6 2969,-0 2975,-0 2975,-0 3077,-0 3077,-0 3083,-0 3089,-6 3089,-12 3089,-12 3089,-56 3089,-56 3089,-62 3083,-68 3077,-68\"/>\n<text text-anchor=\"start\" x=\"2984\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2986.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"2985.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"2971\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 89->91 -->\n<g id=\"edge91\" class=\"edge\"><title>89->91</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2945.03,-103.726C2956.1,-94.3318 2967.86,-84.349 2978.89,-74.9883\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2981.41,-77.4393 2986.77,-68.2996 2976.88,-72.1026 2981.41,-77.4393\"/>\n</g>\n<!-- 93 -->\n<g id=\"node94\" class=\"node\"><title>93</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3009,-298.5C3009,-298.5 2923,-298.5 2923,-298.5 2917,-298.5 2911,-292.5 2911,-286.5 2911,-286.5 2911,-242.5 2911,-242.5 2911,-236.5 2917,-230.5 2923,-230.5 2923,-230.5 3009,-230.5 3009,-230.5 3015,-230.5 3021,-236.5 3021,-242.5 3021,-242.5 3021,-286.5 3021,-286.5 3021,-292.5 3015,-298.5 3009,-298.5\"/>\n<text text-anchor=\"start\" x=\"2924\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2922.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\n<text text-anchor=\"start\" x=\"2921.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 0]</text>\n<text text-anchor=\"start\" x=\"2919\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 92->93 -->\n<g id=\"edge93\" class=\"edge\"><title>92->93</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2921.59,-341.907C2928.07,-330.763 2935.1,-318.658 2941.63,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2944.72,-309.072 2946.72,-298.667 2938.67,-305.554 2944.72,-309.072\"/>\n</g>\n<!-- 94 -->\n<g id=\"node95\" class=\"node\"><title>94</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3153,-298.5C3153,-298.5 3051,-298.5 3051,-298.5 3045,-298.5 3039,-292.5 3039,-286.5 3039,-286.5 3039,-242.5 3039,-242.5 3039,-236.5 3045,-230.5 3051,-230.5 3051,-230.5 3153,-230.5 3153,-230.5 3159,-230.5 3165,-236.5 3165,-242.5 3165,-242.5 3165,-286.5 3165,-286.5 3165,-292.5 3159,-298.5 3153,-298.5\"/>\n<text text-anchor=\"start\" x=\"3060\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3062.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3061.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3047\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 92->94 -->\n<g id=\"edge94\" class=\"edge\"><title>92->94</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2956.02,-347.242C2959.05,-345.458 2962.06,-343.702 2965,-342 2993.58,-325.455 3001.16,-322.095 3030,-306 3031.33,-305.257 3032.67,-304.507 3034.03,-303.75\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3036.06,-306.623 3043.08,-298.685 3032.64,-300.514 3036.06,-306.623\"/>\n</g>\n<!-- 96 -->\n<g id=\"node97\" class=\"node\"><title>96</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3088,-417.5C3088,-417.5 2986,-417.5 2986,-417.5 2980,-417.5 2974,-411.5 2974,-405.5 2974,-405.5 2974,-361.5 2974,-361.5 2974,-355.5 2980,-349.5 2986,-349.5 2986,-349.5 3088,-349.5 3088,-349.5 3094,-349.5 3100,-355.5 3100,-361.5 3100,-361.5 3100,-405.5 3100,-405.5 3100,-411.5 3094,-417.5 3088,-417.5\"/>\n<text text-anchor=\"start\" x=\"2995\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2993.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 65</text>\n<text text-anchor=\"start\" x=\"2992.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 65]</text>\n<text text-anchor=\"start\" x=\"2982\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 95->96 -->\n<g id=\"edge96\" class=\"edge\"><title>95->96</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3058.55,-460.907C3055.5,-450.094 3052.2,-438.376 3049.11,-427.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3052.44,-426.341 3046.35,-417.667 3045.7,-428.242 3052.44,-426.341\"/>\n</g>\n<!-- 97 -->\n<g id=\"node98\" class=\"node\"><title>97</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3216,-417.5C3216,-417.5 3130,-417.5 3130,-417.5 3124,-417.5 3118,-411.5 3118,-405.5 3118,-405.5 3118,-361.5 3118,-361.5 3118,-355.5 3124,-349.5 3130,-349.5 3130,-349.5 3216,-349.5 3216,-349.5 3222,-349.5 3228,-355.5 3228,-361.5 3228,-361.5 3228,-405.5 3228,-405.5 3228,-411.5 3222,-417.5 3216,-417.5\"/>\n<text text-anchor=\"start\" x=\"3131\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3133.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3132.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3126\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 95->97 -->\n<g id=\"edge97\" class=\"edge\"><title>95->97</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3105.74,-460.907C3115.84,-449.432 3126.84,-436.938 3136.96,-425.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3139.82,-427.486 3143.8,-417.667 3134.57,-422.86 3139.82,-427.486\"/>\n</g>\n<!-- 99 -->\n<g id=\"node100\" class=\"node\"><title>99</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3641,-663C3641,-663 3453,-663 3453,-663 3447,-663 3441,-657 3441,-651 3441,-651 3441,-592 3441,-592 3441,-586 3447,-580 3453,-580 3453,-580 3641,-580 3641,-580 3647,-580 3653,-586 3653,-592 3653,-592 3653,-651 3653,-651 3653,-657 3647,-663 3641,-663\"/>\n<text text-anchor=\"start\" x=\"3449\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.3</text>\n<text text-anchor=\"start\" x=\"3497\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.005</text>\n<text text-anchor=\"start\" x=\"3495.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7367</text>\n<text text-anchor=\"start\" x=\"3494\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7364, 3]</text>\n<text text-anchor=\"start\" x=\"3500\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 98->99 -->\n<g id=\"edge99\" class=\"edge\"><title>98->99</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3622.1,-698.907C3613,-689.651 3603.25,-679.732 3593.89,-670.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3596.33,-667.699 3586.83,-663.021 3591.34,-672.606 3596.33,-667.699\"/>\n</g>\n<!-- 106 -->\n<g id=\"node107\" class=\"node\"><title>106</title>\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M3854,-663C3854,-663 3702,-663 3702,-663 3696,-663 3690,-657 3690,-651 3690,-651 3690,-592 3690,-592 3690,-586 3696,-580 3702,-580 3702,-580 3854,-580 3854,-580 3860,-580 3866,-586 3866,-592 3866,-592 3866,-651 3866,-651 3866,-657 3860,-663 3854,-663\"/>\n<text text-anchor=\"start\" x=\"3698\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"3728\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.156</text>\n<text text-anchor=\"start\" x=\"3730.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 264</text>\n<text text-anchor=\"start\" x=\"3729.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [258, 6]</text>\n<text text-anchor=\"start\" x=\"3731\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 98->106 -->\n<g id=\"edge106\" class=\"edge\"><title>98->106</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3702.25,-698.907C3711.42,-689.651 3721.26,-679.732 3730.7,-670.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3733.27,-672.586 3737.83,-663.021 3728.3,-667.658 3733.27,-672.586\"/>\n</g>\n<!-- 100 -->\n<g id=\"node101\" class=\"node\"><title>100</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3459,-536.5C3459,-536.5 3361,-536.5 3361,-536.5 3355,-536.5 3349,-530.5 3349,-524.5 3349,-524.5 3349,-480.5 3349,-480.5 3349,-474.5 3355,-468.5 3361,-468.5 3361,-468.5 3459,-468.5 3459,-468.5 3465,-468.5 3471,-474.5 3471,-480.5 3471,-480.5 3471,-524.5 3471,-524.5 3471,-530.5 3465,-536.5 3459,-536.5\"/>\n<text text-anchor=\"start\" x=\"3368\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3358.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7321</text>\n<text text-anchor=\"start\" x=\"3357\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7321, 0]</text>\n<text text-anchor=\"start\" x=\"3363\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 99->100 -->\n<g id=\"edge100\" class=\"edge\"><title>99->100</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3499.47,-579.907C3485.64,-568.101 3470.56,-555.217 3456.78,-543.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3458.71,-540.5 3448.84,-536.667 3454.17,-545.823 3458.71,-540.5\"/>\n</g>\n<!-- 101 -->\n<g id=\"node102\" class=\"node\"><title>101</title>\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M3593,-544C3593,-544 3501,-544 3501,-544 3495,-544 3489,-538 3489,-532 3489,-532 3489,-473 3489,-473 3489,-467 3495,-461 3501,-461 3501,-461 3593,-461 3593,-461 3599,-461 3605,-467 3605,-473 3605,-473 3605,-532 3605,-532 3605,-538 3599,-544 3593,-544\"/>\n<text text-anchor=\"start\" x=\"3497.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"3497\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.348</text>\n<text text-anchor=\"start\" x=\"3503.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 46</text>\n<text text-anchor=\"start\" x=\"3502.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [43, 3]</text>\n<text text-anchor=\"start\" x=\"3500\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 99->101 -->\n<g id=\"edge101\" class=\"edge\"><title>99->101</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3547,-579.907C3547,-571.649 3547,-562.864 3547,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3550.5,-554.021 3547,-544.021 3543.5,-554.021 3550.5,-554.021\"/>\n</g>\n<!-- 102 -->\n<g id=\"node103\" class=\"node\"><title>102</title>\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M3462,-425C3462,-425 3258,-425 3258,-425 3252,-425 3246,-419 3246,-413 3246,-413 3246,-354 3246,-354 3246,-348 3252,-342 3258,-342 3258,-342 3462,-342 3462,-342 3468,-342 3474,-348 3474,-354 3474,-354 3474,-413 3474,-413 3474,-419 3468,-425 3462,-425\"/>\n<text text-anchor=\"start\" x=\"3254\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.735</text>\n<text text-anchor=\"start\" x=\"3310\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\n<text text-anchor=\"start\" x=\"3320.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"3319.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\n<text text-anchor=\"start\" x=\"3305\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 101->102 -->\n<g id=\"edge102\" class=\"edge\"><title>101->102</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3488.86,-465.122C3471.44,-454.226 3452.11,-442.13 3433.83,-430.692\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3435.28,-427.474 3424.95,-425.137 3431.57,-433.409 3435.28,-427.474\"/>\n</g>\n<!-- 105 -->\n<g id=\"node106\" class=\"node\"><title>105</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3590,-417.5C3590,-417.5 3504,-417.5 3504,-417.5 3498,-417.5 3492,-411.5 3492,-405.5 3492,-405.5 3492,-361.5 3492,-361.5 3492,-355.5 3498,-349.5 3504,-349.5 3504,-349.5 3590,-349.5 3590,-349.5 3596,-349.5 3602,-355.5 3602,-361.5 3602,-361.5 3602,-405.5 3602,-405.5 3602,-411.5 3596,-417.5 3590,-417.5\"/>\n<text text-anchor=\"start\" x=\"3505\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3503.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 42</text>\n<text text-anchor=\"start\" x=\"3502.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\n<text text-anchor=\"start\" x=\"3500\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 101->105 -->\n<g id=\"edge105\" class=\"edge\"><title>101->105</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3547,-460.907C3547,-450.204 3547,-438.615 3547,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3550.5,-427.667 3547,-417.667 3543.5,-427.667 3550.5,-427.667\"/>\n</g>\n<!-- 103 -->\n<g id=\"node104\" class=\"node\"><title>103</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3354,-298.5C3354,-298.5 3252,-298.5 3252,-298.5 3246,-298.5 3240,-292.5 3240,-286.5 3240,-286.5 3240,-242.5 3240,-242.5 3240,-236.5 3246,-230.5 3252,-230.5 3252,-230.5 3354,-230.5 3354,-230.5 3360,-230.5 3366,-236.5 3366,-242.5 3366,-242.5 3366,-286.5 3366,-286.5 3366,-292.5 3360,-298.5 3354,-298.5\"/>\n<text text-anchor=\"start\" x=\"3261\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3263.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3262.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"3248\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 102->103 -->\n<g id=\"edge103\" class=\"edge\"><title>102->103</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3340.22,-341.907C3334.85,-330.873 3329.01,-318.898 3323.59,-307.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3326.68,-306.124 3319.16,-298.667 3320.39,-309.19 3326.68,-306.124\"/>\n</g>\n<!-- 104 -->\n<g id=\"node105\" class=\"node\"><title>104</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3482,-298.5C3482,-298.5 3396,-298.5 3396,-298.5 3390,-298.5 3384,-292.5 3384,-286.5 3384,-286.5 3384,-242.5 3384,-242.5 3384,-236.5 3390,-230.5 3396,-230.5 3396,-230.5 3482,-230.5 3482,-230.5 3488,-230.5 3494,-236.5 3494,-242.5 3494,-242.5 3494,-286.5 3494,-286.5 3494,-292.5 3488,-298.5 3482,-298.5\"/>\n<text text-anchor=\"start\" x=\"3397\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3399.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3398.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3392\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 102->104 -->\n<g id=\"edge104\" class=\"edge\"><title>102->104</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3387.41,-341.907C3395.01,-330.652 3403.27,-318.418 3410.91,-307.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3413.91,-308.913 3416.61,-298.667 3408.11,-304.996 3413.91,-308.913\"/>\n</g>\n<!-- 107 -->\n<g id=\"node108\" class=\"node\"><title>107</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3831.5,-544C3831.5,-544 3724.5,-544 3724.5,-544 3718.5,-544 3712.5,-538 3712.5,-532 3712.5,-532 3712.5,-473 3712.5,-473 3712.5,-467 3718.5,-461 3724.5,-461 3724.5,-461 3831.5,-461 3831.5,-461 3837.5,-461 3843.5,-467 3843.5,-473 3843.5,-473 3843.5,-532 3843.5,-532 3843.5,-538 3837.5,-544 3831.5,-544\"/>\n<text text-anchor=\"start\" x=\"3720.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 769.5</text>\n<text text-anchor=\"start\" x=\"3728\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"3738.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3737.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"3723\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 106->107 -->\n<g id=\"edge107\" class=\"edge\"><title>106->107</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3778,-579.907C3778,-571.649 3778,-562.864 3778,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3781.5,-554.021 3778,-544.021 3774.5,-554.021 3781.5,-554.021\"/>\n</g>\n<!-- 110 -->\n<g id=\"node111\" class=\"node\"><title>110</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M4006.5,-544C4006.5,-544 3891.5,-544 3891.5,-544 3885.5,-544 3879.5,-538 3879.5,-532 3879.5,-532 3879.5,-473 3879.5,-473 3879.5,-467 3885.5,-461 3891.5,-461 3891.5,-461 4006.5,-461 4006.5,-461 4012.5,-461 4018.5,-467 4018.5,-473 4018.5,-473 4018.5,-532 4018.5,-532 4018.5,-538 4012.5,-544 4006.5,-544\"/>\n<text text-anchor=\"start\" x=\"3887.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1695.0</text>\n<text text-anchor=\"start\" x=\"3899\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.114</text>\n<text text-anchor=\"start\" x=\"3901.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 261</text>\n<text text-anchor=\"start\" x=\"3900.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [257, 4]</text>\n<text text-anchor=\"start\" x=\"3902\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 106->110 -->\n<g id=\"edge110\" class=\"edge\"><title>106->110</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3837.33,-579.907C3851.52,-570.197 3866.78,-559.758 3881.31,-549.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3883.5,-552.556 3889.78,-544.021 3879.55,-546.779 3883.5,-552.556\"/>\n</g>\n<!-- 108 -->\n<g id=\"node109\" class=\"node\"><title>108</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3734,-417.5C3734,-417.5 3632,-417.5 3632,-417.5 3626,-417.5 3620,-411.5 3620,-405.5 3620,-405.5 3620,-361.5 3620,-361.5 3620,-355.5 3626,-349.5 3632,-349.5 3632,-349.5 3734,-349.5 3734,-349.5 3740,-349.5 3746,-355.5 3746,-361.5 3746,-361.5 3746,-405.5 3746,-405.5 3746,-411.5 3740,-417.5 3734,-417.5\"/>\n<text text-anchor=\"start\" x=\"3641\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3643.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3642.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3628\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 107->108 -->\n<g id=\"edge108\" class=\"edge\"><title>107->108</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3745.04,-460.907C3735.72,-449.432 3725.58,-436.938 3716.24,-425.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3718.95,-423.224 3709.93,-417.667 3713.52,-427.636 3718.95,-423.224\"/>\n</g>\n<!-- 109 -->\n<g id=\"node110\" class=\"node\"><title>109</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3862,-417.5C3862,-417.5 3776,-417.5 3776,-417.5 3770,-417.5 3764,-411.5 3764,-405.5 3764,-405.5 3764,-361.5 3764,-361.5 3764,-355.5 3770,-349.5 3776,-349.5 3776,-349.5 3862,-349.5 3862,-349.5 3868,-349.5 3874,-355.5 3874,-361.5 3874,-361.5 3874,-405.5 3874,-405.5 3874,-411.5 3868,-417.5 3862,-417.5\"/>\n<text text-anchor=\"start\" x=\"3777\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3779.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3778.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3772\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 107->109 -->\n<g id=\"edge109\" class=\"edge\"><title>107->109</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3792.22,-460.907C3796.05,-449.983 3800.2,-438.137 3804.07,-427.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3807.37,-428.262 3807.38,-417.667 3800.77,-425.947 3807.37,-428.262\"/>\n</g>\n<!-- 111 -->\n<g id=\"node112\" class=\"node\"><title>111</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3993.5,-417.5C3993.5,-417.5 3904.5,-417.5 3904.5,-417.5 3898.5,-417.5 3892.5,-411.5 3892.5,-405.5 3892.5,-405.5 3892.5,-361.5 3892.5,-361.5 3892.5,-355.5 3898.5,-349.5 3904.5,-349.5 3904.5,-349.5 3993.5,-349.5 3993.5,-349.5 3999.5,-349.5 4005.5,-355.5 4005.5,-361.5 4005.5,-361.5 4005.5,-405.5 4005.5,-405.5 4005.5,-411.5 3999.5,-417.5 3993.5,-417.5\"/>\n<text text-anchor=\"start\" x=\"3907\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3901.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 230</text>\n<text text-anchor=\"start\" x=\"3900.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [230, 0]</text>\n<text text-anchor=\"start\" x=\"3902\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 110->111 -->\n<g id=\"edge111\" class=\"edge\"><title>110->111</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3949,-460.907C3949,-450.204 3949,-438.615 3949,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3952.5,-427.667 3949,-417.667 3945.5,-427.667 3952.5,-427.667\"/>\n</g>\n<!-- 112 -->\n<g id=\"node113\" class=\"node\"><title>112</title>\n<path fill=\"#e99456\" stroke=\"black\" d=\"M4204.5,-425C4204.5,-425 4035.5,-425 4035.5,-425 4029.5,-425 4023.5,-419 4023.5,-413 4023.5,-413 4023.5,-354 4023.5,-354 4023.5,-348 4029.5,-342 4035.5,-342 4035.5,-342 4204.5,-342 4204.5,-342 4210.5,-342 4216.5,-348 4216.5,-354 4216.5,-354 4216.5,-413 4216.5,-413 4216.5,-419 4210.5,-425 4204.5,-425\"/>\n<text text-anchor=\"start\" x=\"4031.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 123.5</text>\n<text text-anchor=\"start\" x=\"4070\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.555</text>\n<text text-anchor=\"start\" x=\"4076.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\n<text text-anchor=\"start\" x=\"4075.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [27, 4]</text>\n<text text-anchor=\"start\" x=\"4073\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 110->112 -->\n<g id=\"edge112\" class=\"edge\"><title>110->112</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4008.33,-460.907C4022.52,-451.197 4037.78,-440.758 4052.31,-430.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4054.5,-433.556 4060.78,-425.021 4050.55,-427.779 4054.5,-433.556\"/>\n</g>\n<!-- 113 -->\n<g id=\"node114\" class=\"node\"><title>113</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4085,-298.5C4085,-298.5 3999,-298.5 3999,-298.5 3993,-298.5 3987,-292.5 3987,-286.5 3987,-286.5 3987,-242.5 3987,-242.5 3987,-236.5 3993,-230.5 3999,-230.5 3999,-230.5 4085,-230.5 4085,-230.5 4091,-230.5 4097,-236.5 4097,-242.5 4097,-242.5 4097,-286.5 4097,-286.5 4097,-292.5 4091,-298.5 4085,-298.5\"/>\n<text text-anchor=\"start\" x=\"4000\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3998.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25</text>\n<text text-anchor=\"start\" x=\"3997.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [25, 0]</text>\n<text text-anchor=\"start\" x=\"3995\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 112->113 -->\n<g id=\"edge113\" class=\"edge\"><title>112->113</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4092.94,-341.907C4085.43,-330.652 4077.28,-318.418 4069.74,-307.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4072.57,-305.046 4064.11,-298.667 4066.75,-308.929 4072.57,-305.046\"/>\n</g>\n<!-- 114 -->\n<g id=\"node115\" class=\"node\"><title>114</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M4269,-306C4269,-306 4127,-306 4127,-306 4121,-306 4115,-300 4115,-294 4115,-294 4115,-235 4115,-235 4115,-229 4121,-223 4127,-223 4127,-223 4269,-223 4269,-223 4275,-223 4281,-229 4281,-235 4281,-235 4281,-294 4281,-294 4281,-300 4275,-306 4269,-306\"/>\n<text text-anchor=\"start\" x=\"4123\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 145.0</text>\n<text text-anchor=\"start\" x=\"4148\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"4158.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"4157.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\n<text text-anchor=\"start\" x=\"4143\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 112->114 -->\n<g id=\"edge114\" class=\"edge\"><title>112->114</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4147.06,-341.907C4152.93,-333.105 4159.2,-323.703 4165.26,-314.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4168.35,-316.283 4170.99,-306.021 4162.53,-312.4 4168.35,-316.283\"/>\n</g>\n<!-- 115 -->\n<g id=\"node116\" class=\"node\"><title>115</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4173,-179.5C4173,-179.5 4087,-179.5 4087,-179.5 4081,-179.5 4075,-173.5 4075,-167.5 4075,-167.5 4075,-123.5 4075,-123.5 4075,-117.5 4081,-111.5 4087,-111.5 4087,-111.5 4173,-111.5 4173,-111.5 4179,-111.5 4185,-117.5 4185,-123.5 4185,-123.5 4185,-167.5 4185,-167.5 4185,-173.5 4179,-179.5 4173,-179.5\"/>\n<text text-anchor=\"start\" x=\"4088\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4090.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4089.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4083\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 114->115 -->\n<g id=\"edge115\" class=\"edge\"><title>114->115</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4174.41,-222.907C4167.93,-211.763 4160.9,-199.658 4154.37,-188.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4157.33,-186.554 4149.28,-179.667 4151.28,-190.072 4157.33,-186.554\"/>\n</g>\n<!-- 116 -->\n<g id=\"node117\" class=\"node\"><title>116</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4317,-179.5C4317,-179.5 4215,-179.5 4215,-179.5 4209,-179.5 4203,-173.5 4203,-167.5 4203,-167.5 4203,-123.5 4203,-123.5 4203,-117.5 4209,-111.5 4215,-111.5 4215,-111.5 4317,-111.5 4317,-111.5 4323,-111.5 4329,-117.5 4329,-123.5 4329,-123.5 4329,-167.5 4329,-167.5 4329,-173.5 4323,-179.5 4317,-179.5\"/>\n<text text-anchor=\"start\" x=\"4224\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4226.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"4225.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"4211\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 114->116 -->\n<g id=\"edge116\" class=\"edge\"><title>114->116</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4221.59,-222.907C4228.07,-211.763 4235.1,-199.658 4241.63,-188.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4244.72,-190.072 4246.72,-179.667 4238.67,-186.554 4244.72,-190.072\"/>\n</g>\n<!-- 118 -->\n<g id=\"node119\" class=\"node\"><title>118</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M4431,-782C4431,-782 4333,-782 4333,-782 4327,-782 4321,-776 4321,-770 4321,-770 4321,-711 4321,-711 4321,-705 4327,-699 4333,-699 4333,-699 4431,-699 4431,-699 4437,-699 4443,-705 4443,-711 4443,-711 4443,-770 4443,-770 4443,-776 4437,-782 4431,-782\"/>\n<text text-anchor=\"start\" x=\"4339\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 4.5</text>\n<text text-anchor=\"start\" x=\"4332\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.813</text>\n<text text-anchor=\"start\" x=\"4334.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 203</text>\n<text text-anchor=\"start\" x=\"4329\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [152, 51]</text>\n<text text-anchor=\"start\" x=\"4335\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 117->118 -->\n<g id=\"edge118\" class=\"edge\"><title>117->118</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4382,-817.907C4382,-809.649 4382,-800.864 4382,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4385.5,-792.021 4382,-782.021 4378.5,-792.021 4385.5,-792.021\"/>\n</g>\n<!-- 133 -->\n<g id=\"node134\" class=\"node\"><title>133</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4575,-774.5C4575,-774.5 4473,-774.5 4473,-774.5 4467,-774.5 4461,-768.5 4461,-762.5 4461,-762.5 4461,-718.5 4461,-718.5 4461,-712.5 4467,-706.5 4473,-706.5 4473,-706.5 4575,-706.5 4575,-706.5 4581,-706.5 4587,-712.5 4587,-718.5 4587,-718.5 4587,-762.5 4587,-762.5 4587,-768.5 4581,-774.5 4575,-774.5\"/>\n<text text-anchor=\"start\" x=\"4482\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4476.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 138</text>\n<text text-anchor=\"start\" x=\"4475.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 138]</text>\n<text text-anchor=\"start\" x=\"4469\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 117->133 -->\n<g id=\"edge133\" class=\"edge\"><title>117->133</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4431.27,-817.907C4445.73,-805.99 4461.53,-792.976 4475.91,-781.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4478.25,-783.727 4483.75,-774.667 4473.8,-778.325 4478.25,-783.727\"/>\n</g>\n<!-- 119 -->\n<g id=\"node120\" class=\"node\"><title>119</title>\n<path fill=\"#dbedfa\" stroke=\"black\" d=\"M4466.5,-663C4466.5,-663 4297.5,-663 4297.5,-663 4291.5,-663 4285.5,-657 4285.5,-651 4285.5,-651 4285.5,-592 4285.5,-592 4285.5,-586 4291.5,-580 4297.5,-580 4297.5,-580 4466.5,-580 4466.5,-580 4472.5,-580 4478.5,-586 4478.5,-592 4478.5,-592 4478.5,-651 4478.5,-651 4478.5,-657 4472.5,-663 4466.5,-663\"/>\n<text text-anchor=\"start\" x=\"4293.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 152.0</text>\n<text text-anchor=\"start\" x=\"4332\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.993</text>\n<text text-anchor=\"start\" x=\"4338.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 80</text>\n<text text-anchor=\"start\" x=\"4333.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 44]</text>\n<text text-anchor=\"start\" x=\"4327\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 118->119 -->\n<g id=\"edge119\" class=\"edge\"><title>118->119</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4382,-698.907C4382,-690.649 4382,-681.864 4382,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4385.5,-673.021 4382,-663.021 4378.5,-673.021 4385.5,-673.021\"/>\n</g>\n<!-- 126 -->\n<g id=\"node127\" class=\"node\"><title>126</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M4745,-663C4745,-663 4653,-663 4653,-663 4647,-663 4641,-657 4641,-651 4641,-651 4641,-592 4641,-592 4641,-586 4647,-580 4653,-580 4653,-580 4745,-580 4745,-580 4751,-580 4757,-586 4757,-592 4757,-592 4757,-651 4757,-651 4757,-657 4751,-663 4745,-663\"/>\n<text text-anchor=\"start\" x=\"4652\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 97.5</text>\n<text text-anchor=\"start\" x=\"4649\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.315</text>\n<text text-anchor=\"start\" x=\"4651.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 123</text>\n<text text-anchor=\"start\" x=\"4650.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [116, 7]</text>\n<text text-anchor=\"start\" x=\"4652\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 118->126 -->\n<g id=\"edge126\" class=\"edge\"><title>118->126</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4443.05,-703.139C4446.05,-701.683 4449.04,-700.294 4452,-699 4510.61,-673.358 4580.5,-652.56 4630.96,-639.157\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4632,-642.503 4640.78,-636.576 4630.22,-635.733 4632,-642.503\"/>\n</g>\n<!-- 120 -->\n<g id=\"node121\" class=\"node\"><title>120</title>\n<path fill=\"#42a2e6\" stroke=\"black\" d=\"M4433.5,-544C4433.5,-544 4318.5,-544 4318.5,-544 4312.5,-544 4306.5,-538 4306.5,-532 4306.5,-532 4306.5,-473 4306.5,-473 4306.5,-467 4312.5,-461 4318.5,-461 4318.5,-461 4433.5,-461 4433.5,-461 4439.5,-461 4445.5,-467 4445.5,-473 4445.5,-473 4445.5,-532 4445.5,-532 4445.5,-538 4439.5,-544 4433.5,-544\"/>\n<text text-anchor=\"start\" x=\"4314.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2522.0</text>\n<text text-anchor=\"start\" x=\"4326\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.262</text>\n<text text-anchor=\"start\" x=\"4332.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\n<text text-anchor=\"start\" x=\"4331.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 43]</text>\n<text text-anchor=\"start\" x=\"4321\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 119->120 -->\n<g id=\"edge120\" class=\"edge\"><title>119->120</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4379.92,-579.907C4379.49,-571.558 4379.03,-562.671 4378.59,-554.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4382.09,-553.828 4378.08,-544.021 4375.09,-554.187 4382.09,-553.828\"/>\n</g>\n<!-- 123 -->\n<g id=\"node124\" class=\"node\"><title>123</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4618.5,-544C4618.5,-544 4475.5,-544 4475.5,-544 4469.5,-544 4463.5,-538 4463.5,-532 4463.5,-532 4463.5,-473 4463.5,-473 4463.5,-467 4469.5,-461 4475.5,-461 4475.5,-461 4618.5,-461 4618.5,-461 4624.5,-461 4630.5,-467 4630.5,-473 4630.5,-473 4630.5,-532 4630.5,-532 4630.5,-538 4624.5,-544 4618.5,-544\"/>\n<text text-anchor=\"start\" x=\"4471.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_access_files ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"4497\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.187</text>\n<text text-anchor=\"start\" x=\"4503.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 35</text>\n<text text-anchor=\"start\" x=\"4502.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 1]</text>\n<text text-anchor=\"start\" x=\"4500\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 119->123 -->\n<g id=\"edge123\" class=\"edge\"><title>119->123</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4439.25,-579.907C4452.94,-570.197 4467.66,-559.758 4481.69,-549.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4483.72,-552.66 4489.86,-544.021 4479.67,-546.95 4483.72,-552.66\"/>\n</g>\n<!-- 121 -->\n<g id=\"node122\" class=\"node\"><title>121</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4349,-417.5C4349,-417.5 4247,-417.5 4247,-417.5 4241,-417.5 4235,-411.5 4235,-405.5 4235,-405.5 4235,-361.5 4235,-361.5 4235,-355.5 4241,-349.5 4247,-349.5 4247,-349.5 4349,-349.5 4349,-349.5 4355,-349.5 4361,-355.5 4361,-361.5 4361,-361.5 4361,-405.5 4361,-405.5 4361,-411.5 4355,-417.5 4349,-417.5\"/>\n<text text-anchor=\"start\" x=\"4256\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4254.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\n<text text-anchor=\"start\" x=\"4253.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 43]</text>\n<text text-anchor=\"start\" x=\"4243\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 120->121 -->\n<g id=\"edge121\" class=\"edge\"><title>120->121</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4348.94,-460.907C4341.43,-449.652 4333.28,-437.418 4325.74,-426.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4328.57,-424.046 4320.11,-417.667 4322.75,-427.929 4328.57,-424.046\"/>\n</g>\n<!-- 122 -->\n<g id=\"node123\" class=\"node\"><title>122</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4477,-417.5C4477,-417.5 4391,-417.5 4391,-417.5 4385,-417.5 4379,-411.5 4379,-405.5 4379,-405.5 4379,-361.5 4379,-361.5 4379,-355.5 4385,-349.5 4391,-349.5 4391,-349.5 4477,-349.5 4477,-349.5 4483,-349.5 4489,-355.5 4489,-361.5 4489,-361.5 4489,-405.5 4489,-405.5 4489,-411.5 4483,-417.5 4477,-417.5\"/>\n<text text-anchor=\"start\" x=\"4392\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4394.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4393.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4387\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 120->122 -->\n<g id=\"edge122\" class=\"edge\"><title>120->122</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4396.12,-460.907C4401.59,-449.873 4407.53,-437.898 4413.04,-426.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4416.25,-428.181 4417.56,-417.667 4409.98,-425.072 4416.25,-428.181\"/>\n</g>\n<!-- 124 -->\n<g id=\"node125\" class=\"node\"><title>124</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4605,-417.5C4605,-417.5 4519,-417.5 4519,-417.5 4513,-417.5 4507,-411.5 4507,-405.5 4507,-405.5 4507,-361.5 4507,-361.5 4507,-355.5 4513,-349.5 4519,-349.5 4519,-349.5 4605,-349.5 4605,-349.5 4611,-349.5 4617,-355.5 4617,-361.5 4617,-361.5 4617,-405.5 4617,-405.5 4617,-411.5 4611,-417.5 4605,-417.5\"/>\n<text text-anchor=\"start\" x=\"4520\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4518.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 34</text>\n<text text-anchor=\"start\" x=\"4517.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 0]</text>\n<text text-anchor=\"start\" x=\"4515\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 123->124 -->\n<g id=\"edge124\" class=\"edge\"><title>123->124</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4552.2,-460.907C4553.58,-450.204 4555.06,-438.615 4556.45,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4559.95,-428.031 4557.75,-417.667 4553,-427.141 4559.95,-428.031\"/>\n</g>\n<!-- 125 -->\n<g id=\"node126\" class=\"node\"><title>125</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4749,-417.5C4749,-417.5 4647,-417.5 4647,-417.5 4641,-417.5 4635,-411.5 4635,-405.5 4635,-405.5 4635,-361.5 4635,-361.5 4635,-355.5 4641,-349.5 4647,-349.5 4647,-349.5 4749,-349.5 4749,-349.5 4755,-349.5 4761,-355.5 4761,-361.5 4761,-361.5 4761,-405.5 4761,-405.5 4761,-411.5 4755,-417.5 4749,-417.5\"/>\n<text text-anchor=\"start\" x=\"4656\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4658.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4657.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4643\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 123->125 -->\n<g id=\"edge125\" class=\"edge\"><title>123->125</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4599.39,-460.907C4614.77,-448.99 4631.57,-435.976 4646.87,-424.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4649.43,-426.559 4655.19,-417.667 4645.15,-421.025 4649.43,-426.559\"/>\n</g>\n<!-- 127 -->\n<g id=\"node128\" class=\"node\"><title>127</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4749.5,-536.5C4749.5,-536.5 4660.5,-536.5 4660.5,-536.5 4654.5,-536.5 4648.5,-530.5 4648.5,-524.5 4648.5,-524.5 4648.5,-480.5 4648.5,-480.5 4648.5,-474.5 4654.5,-468.5 4660.5,-468.5 4660.5,-468.5 4749.5,-468.5 4749.5,-468.5 4755.5,-468.5 4761.5,-474.5 4761.5,-480.5 4761.5,-480.5 4761.5,-524.5 4761.5,-524.5 4761.5,-530.5 4755.5,-536.5 4749.5,-536.5\"/>\n<text text-anchor=\"start\" x=\"4663\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4657.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\n<text text-anchor=\"start\" x=\"4656.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [106, 0]</text>\n<text text-anchor=\"start\" x=\"4658\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 126->127 -->\n<g id=\"edge127\" class=\"edge\"><title>126->127</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4701.08,-579.907C4701.63,-569.204 4702.22,-557.615 4702.78,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4706.28,-546.833 4703.3,-536.667 4699.29,-546.475 4706.28,-546.833\"/>\n</g>\n<!-- 128 -->\n<g id=\"node129\" class=\"node\"><title>128</title>\n<path fill=\"#f7d9c4\" stroke=\"black\" d=\"M4978.5,-544C4978.5,-544 4791.5,-544 4791.5,-544 4785.5,-544 4779.5,-538 4779.5,-532 4779.5,-532 4779.5,-473 4779.5,-473 4779.5,-467 4785.5,-461 4791.5,-461 4791.5,-461 4978.5,-461 4978.5,-461 4984.5,-461 4990.5,-467 4990.5,-473 4990.5,-473 4990.5,-532 4990.5,-532 4990.5,-538 4984.5,-544 4978.5,-544\"/>\n<text text-anchor=\"start\" x=\"4787.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\n<text text-anchor=\"start\" x=\"4835\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.977</text>\n<text text-anchor=\"start\" x=\"4841.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"4840.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 7]</text>\n<text text-anchor=\"start\" x=\"4838\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 126->128 -->\n<g id=\"edge128\" class=\"edge\"><title>126->128</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4757.09,-583.962C4774.4,-573.071 4793.6,-560.993 4811.75,-549.577\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4813.96,-552.321 4820.56,-544.034 4810.23,-546.396 4813.96,-552.321\"/>\n</g>\n<!-- 129 -->\n<g id=\"node130\" class=\"node\"><title>129</title>\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M4907,-425C4907,-425 4805,-425 4805,-425 4799,-425 4793,-419 4793,-413 4793,-413 4793,-354 4793,-354 4793,-348 4799,-342 4805,-342 4805,-342 4907,-342 4907,-342 4913,-342 4919,-348 4919,-354 4919,-354 4919,-413 4919,-413 4919,-419 4913,-425 4907,-425\"/>\n<text text-anchor=\"start\" x=\"4828.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 2.0</text>\n<text text-anchor=\"start\" x=\"4806\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\n<text text-anchor=\"start\" x=\"4816.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"4815.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 7]</text>\n<text text-anchor=\"start\" x=\"4801\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 128->129 -->\n<g id=\"edge129\" class=\"edge\"><title>128->129</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4874.94,-460.907C4872.85,-452.468 4870.62,-443.477 4868.45,-434.738\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4871.85,-433.885 4866.04,-425.021 4865.05,-435.569 4871.85,-433.885\"/>\n</g>\n<!-- 132 -->\n<g id=\"node133\" class=\"node\"><title>132</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5035,-417.5C5035,-417.5 4949,-417.5 4949,-417.5 4943,-417.5 4937,-411.5 4937,-405.5 4937,-405.5 4937,-361.5 4937,-361.5 4937,-355.5 4943,-349.5 4949,-349.5 4949,-349.5 5035,-349.5 5035,-349.5 5041,-349.5 5047,-355.5 5047,-361.5 5047,-361.5 5047,-405.5 5047,-405.5 5047,-411.5 5041,-417.5 5035,-417.5\"/>\n<text text-anchor=\"start\" x=\"4950\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4952.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"4951.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\n<text text-anchor=\"start\" x=\"4945\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 128->132 -->\n<g id=\"edge132\" class=\"edge\"><title>128->132</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4922.12,-460.907C4932.72,-449.321 4944.26,-436.698 4954.86,-425.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4957.5,-427.408 4961.67,-417.667 4952.34,-422.684 4957.5,-427.408\"/>\n</g>\n<!-- 130 -->\n<g id=\"node131\" class=\"node\"><title>130</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4831,-298.5C4831,-298.5 4745,-298.5 4745,-298.5 4739,-298.5 4733,-292.5 4733,-286.5 4733,-286.5 4733,-242.5 4733,-242.5 4733,-236.5 4739,-230.5 4745,-230.5 4745,-230.5 4831,-230.5 4831,-230.5 4837,-230.5 4843,-236.5 4843,-242.5 4843,-242.5 4843,-286.5 4843,-286.5 4843,-292.5 4837,-298.5 4831,-298.5\"/>\n<text text-anchor=\"start\" x=\"4746\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4748.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4747.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"4741\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 129->130 -->\n<g id=\"edge130\" class=\"edge\"><title>129->130</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4832.41,-341.907C4825.93,-330.763 4818.9,-318.658 4812.37,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4815.33,-305.554 4807.28,-298.667 4809.28,-309.072 4815.33,-305.554\"/>\n</g>\n<!-- 131 -->\n<g id=\"node132\" class=\"node\"><title>131</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4975,-298.5C4975,-298.5 4873,-298.5 4873,-298.5 4867,-298.5 4861,-292.5 4861,-286.5 4861,-286.5 4861,-242.5 4861,-242.5 4861,-236.5 4867,-230.5 4873,-230.5 4873,-230.5 4975,-230.5 4975,-230.5 4981,-230.5 4987,-236.5 4987,-242.5 4987,-242.5 4987,-286.5 4987,-286.5 4987,-292.5 4981,-298.5 4975,-298.5\"/>\n<text text-anchor=\"start\" x=\"4882\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4884.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"4883.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\n<text text-anchor=\"start\" x=\"4869\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 129->131 -->\n<g id=\"edge131\" class=\"edge\"><title>129->131</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4879.59,-341.907C4886.07,-330.763 4893.1,-318.658 4899.63,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4902.72,-309.072 4904.72,-298.667 4896.67,-305.554 4902.72,-309.072\"/>\n</g>\n<!-- 135 -->\n<g id=\"node136\" class=\"node\"><title>135</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M4774.5,-901C4774.5,-901 4595.5,-901 4595.5,-901 4589.5,-901 4583.5,-895 4583.5,-889 4583.5,-889 4583.5,-830 4583.5,-830 4583.5,-824 4589.5,-818 4595.5,-818 4595.5,-818 4774.5,-818 4774.5,-818 4780.5,-818 4786.5,-824 4786.5,-830 4786.5,-830 4786.5,-889 4786.5,-889 4786.5,-895 4780.5,-901 4774.5,-901\"/>\n<text text-anchor=\"start\" x=\"4591.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.33</text>\n<text text-anchor=\"start\" x=\"4635\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.047</text>\n<text text-anchor=\"start\" x=\"4637.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 193</text>\n<text text-anchor=\"start\" x=\"4636.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [192, 1]</text>\n<text text-anchor=\"start\" x=\"4638\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 134->135 -->\n<g id=\"edge135\" class=\"edge\"><title>134->135</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4685,-936.907C4685,-928.649 4685,-919.864 4685,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4688.5,-911.021 4685,-901.021 4681.5,-911.021 4688.5,-911.021\"/>\n</g>\n<!-- 140 -->\n<g id=\"node141\" class=\"node\"><title>140</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4919,-893.5C4919,-893.5 4817,-893.5 4817,-893.5 4811,-893.5 4805,-887.5 4805,-881.5 4805,-881.5 4805,-837.5 4805,-837.5 4805,-831.5 4811,-825.5 4817,-825.5 4817,-825.5 4919,-825.5 4919,-825.5 4925,-825.5 4931,-831.5 4931,-837.5 4931,-837.5 4931,-881.5 4931,-881.5 4931,-887.5 4925,-893.5 4919,-893.5\"/>\n<text text-anchor=\"start\" x=\"4826\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4820.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 402</text>\n<text text-anchor=\"start\" x=\"4819.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 402]</text>\n<text text-anchor=\"start\" x=\"4813\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 134->140 -->\n<g id=\"edge140\" class=\"edge\"><title>134->140</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4748.49,-936.907C4767.65,-924.659 4788.62,-911.252 4807.57,-899.135\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4809.58,-902.002 4816.12,-893.667 4805.81,-896.105 4809.58,-902.002\"/>\n</g>\n<!-- 136 -->\n<g id=\"node137\" class=\"node\"><title>136</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4729.5,-774.5C4729.5,-774.5 4640.5,-774.5 4640.5,-774.5 4634.5,-774.5 4628.5,-768.5 4628.5,-762.5 4628.5,-762.5 4628.5,-718.5 4628.5,-718.5 4628.5,-712.5 4634.5,-706.5 4640.5,-706.5 4640.5,-706.5 4729.5,-706.5 4729.5,-706.5 4735.5,-706.5 4741.5,-712.5 4741.5,-718.5 4741.5,-718.5 4741.5,-762.5 4741.5,-762.5 4741.5,-768.5 4735.5,-774.5 4729.5,-774.5\"/>\n<text text-anchor=\"start\" x=\"4643\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4637.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 190</text>\n<text text-anchor=\"start\" x=\"4636.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [190, 0]</text>\n<text text-anchor=\"start\" x=\"4638\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 135->136 -->\n<g id=\"edge136\" class=\"edge\"><title>135->136</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4685,-817.907C4685,-807.204 4685,-795.615 4685,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4688.5,-784.667 4685,-774.667 4681.5,-784.667 4688.5,-784.667\"/>\n</g>\n<!-- 137 -->\n<g id=\"node138\" class=\"node\"><title>137</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M4876,-782C4876,-782 4784,-782 4784,-782 4778,-782 4772,-776 4772,-770 4772,-770 4772,-711 4772,-711 4772,-705 4778,-699 4784,-699 4784,-699 4876,-699 4876,-699 4882,-699 4888,-705 4888,-711 4888,-711 4888,-770 4888,-770 4888,-776 4882,-782 4876,-782\"/>\n<text text-anchor=\"start\" x=\"4781.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.0</text>\n<text text-anchor=\"start\" x=\"4780\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"4790.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4789.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\n<text text-anchor=\"start\" x=\"4783\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 135->137 -->\n<g id=\"edge137\" class=\"edge\"><title>135->137</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4735.31,-817.907C4747.12,-808.379 4759.79,-798.148 4771.91,-788.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4774.2,-791.024 4779.78,-782.021 4769.8,-785.577 4774.2,-791.024\"/>\n</g>\n<!-- 138 -->\n<g id=\"node139\" class=\"node\"><title>138</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4873,-655.5C4873,-655.5 4787,-655.5 4787,-655.5 4781,-655.5 4775,-649.5 4775,-643.5 4775,-643.5 4775,-599.5 4775,-599.5 4775,-593.5 4781,-587.5 4787,-587.5 4787,-587.5 4873,-587.5 4873,-587.5 4879,-587.5 4885,-593.5 4885,-599.5 4885,-599.5 4885,-643.5 4885,-643.5 4885,-649.5 4879,-655.5 4873,-655.5\"/>\n<text text-anchor=\"start\" x=\"4788\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4790.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4789.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4783\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 137->138 -->\n<g id=\"edge138\" class=\"edge\"><title>137->138</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4830,-698.907C4830,-688.204 4830,-676.615 4830,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4833.5,-665.667 4830,-655.667 4826.5,-665.667 4833.5,-665.667\"/>\n</g>\n<!-- 139 -->\n<g id=\"node140\" class=\"node\"><title>139</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5017,-655.5C5017,-655.5 4915,-655.5 4915,-655.5 4909,-655.5 4903,-649.5 4903,-643.5 4903,-643.5 4903,-599.5 4903,-599.5 4903,-593.5 4909,-587.5 4915,-587.5 4915,-587.5 5017,-587.5 5017,-587.5 5023,-587.5 5029,-593.5 5029,-599.5 5029,-599.5 5029,-643.5 5029,-643.5 5029,-649.5 5023,-655.5 5017,-655.5\"/>\n<text text-anchor=\"start\" x=\"4924\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4926.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4925.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4911\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 137->139 -->\n<g id=\"edge139\" class=\"edge\"><title>137->139</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4877.18,-698.907C4890.91,-687.101 4905.89,-674.217 4919.56,-662.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4922.15,-664.842 4927.45,-655.667 4917.58,-659.535 4922.15,-664.842\"/>\n</g>\n</g>\n</svg>\n",
"text/plain": [
- "<graphviz.files.Source at 0x1fea954b608>"
+ "<graphviz.sources.Source at 0x19fc1e0a3a0>"
]
},
"execution_count": 5,
@@ -265,9 +334,11 @@
"import graphviz\n",
"import os\n",
"\n",
+ "clf = clf_vector[idx_max[1]]\n",
+ "\n",
"os.environ[\"PATH\"] += os.pathsep + 'C:\\\\Users\\\\s\\\\anaconda3\\\\pkgs\\\\graphviz-2.38-hfd603c8_2\\\\Library\\\\bin\\\\graphviz' \n",
"# 시각화\n",
- "dot_data = tree.export_graphviz(clf_vector[12],\n",
+ "dot_data = tree.export_graphviz(clf,\n",
" out_file = None,\n",
" feature_names = X_train.columns,\n",
" class_names = [\"Normal\", \"Abnormal\"],\n",
@@ -282,25 +353,25 @@
},
{
"cell_type": "code",
- "execution_count": 19,
+ "execution_count": 6,
"metadata": {},
"outputs": [
{
"name": "stdout",
"output_type": "stream",
"text": [
- "accuracy: 0.9964276263561789\n",
- "precision: 0.9958128078817734\n",
+ "accuracy: 0.9965599364911352\n",
+ "precision: 0.9960581423996058\n",
"racall: 0.9975326918332099\n",
- "f1 score: 0.9966720078885738\n",
- "error rate: 0.003572373643821117\n"
+ "f1 score: 0.9967948717948717\n",
+ "error rate: 0.003440063508864779\n"
]
}
],
"source": [
"from sklearn.metrics import confusion_matrix\n",
"\n",
- "clf_y_pred = clf_vector[12].predict(X_test)\n",
+ "clf_y_pred = clf.predict(X_test)\n",
"\n",
"conf_mat = confusion_matrix(y_test, clf_y_pred)\n",
"accuracy = (conf_mat[0][0]+conf_mat[1][1])/conf_mat.sum()\n",
@@ -325,7 +396,7 @@
"outputs": [
{
"data": {
- "image/png": "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",
+ "image/png": "iVBORw0KGgoAAAANSUhEUgAAAYIAAAEGCAYAAABo25JHAAAAOXRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjMuMiwgaHR0cHM6Ly9tYXRwbG90bGliLm9yZy8vihELAAAACXBIWXMAAAsTAAALEwEAmpwYAAAmXUlEQVR4nO3deZwU1bn/8c/jACKgKDLcH3HEAVQUoowy7leFoAjoDYkal0QNJrwMrsk1rpcbFDTGKD/FhUC4ikSTgIkrURSvCi4oshhkU5Eg6iiJgAIiiww894+qGXqpnulZaoahvu/Xa17dVXWq6jk93f30qeUcc3dERCS5dmvsAEREpHEpEYiIJJwSgYhIwikRiIgknBKBiEjCNWvsAGqqffv2Xlxc3NhhiIg0KfPmzVvt7oVRy5pcIiguLmbu3LmNHYaISJNiZh/lWqZDQyIiCadEICKScEoEIiIJp0QgIpJwSgQiIgkXWyIwswlm9rmZLcqx3MzsXjNbZmYLzOzIuGIREZHc4mwRTAT6V7F8AHBQ+HcJMDbGWEREJIfY7iNw91fNrLiKIoOAhz3oB3uWme1tZh3dfWVcMUlyVHSv7g6eOh3OC547qb2wB2WrXw9PXzeqXMV2CLeTuv3I9Zz0x4hyqdshK86I9TL2F7X9HdvM3n76/tPLpW6HjHKZr2Ha9nPGmeO1zooz92uYurzyeY7XkIg4c732ZLw22f/rHXXMjCPyNcz6n2SXi3oNcae0uB0nHRx5T1idNOYNZfsBn6RMl4XzshKBmV1C0GqgU6dOtd7hO5+s5eE3P2Lz1m2RH5gdz7PfiMGz7A9M5psgnw9k1Aci1wfSUzYa+SbJ9wORGmPa/qP2mb396Nii3+jZH97sD1L6BzK9XO4PZNVfMhpaQ3Z1Q0/uusslAouYF/lRdvfxwHiA0tLSWn/cH3z9Q6a88xldC1tjZhhgVhGMVT4HKpcTlsksZzsKppcL1w3Kpq9HxXLAdgvnVWzPKqaJjGPHdqK2v2O99Fh21Cl1+1QZZ3rdyYgr6jWzlMLp28let6JORGwnbb2U2MjcX0Yd07af47XPWi/lRc4dZ/T7Ir1+O+an1iH7fZH7NUz5t1T7vkuNI+f/OmX7ZNU9e/uZ74vUcrn+R1Hvi9TXIXUfme/PXJ+P9PplbL+K/1H2+y73a5/+WPVrmPt9F7H9tM9Z9a9hZB1zrZe6UkwaMxGUAfunTBcBn8W5w23bna6FrXnpl73j3I2ISJPSmJePTgEuCq8eOhZYF/f5AccbJLuKiDQlsbUIzGwS0Btob2ZlwE1AcwB3HwdMBQYCy4CNwMVxxVLBfUfzS0REAnFeNXR+NcsduDyu/UfvE9QgEBFJl6g7ix3fcWJMRESAhCUCUItARCRTohKBrjMXEcmWrETQ2AGIiOyEkpUIvGFuzhARaUoSlQjAdapYRCRDohKBLh8VEcmWrESAEoGISKZkJQLXfQQiIpkSlQhALQIRkUyJSgS6fFREJFuyEoE6nRMRyZKsRAA6NiQikiFZicB1H4GISKZEJQJQg0BEJFOiEoHOEYiIZEtWItBQlSIiWZKVCNQiEBHJkqhEADpHICKSKVGJQAPTiIhkS1Yi0JjFIiJZkpUIHJ0kEBHJkKxEgPKAiEimRCUCNDCNiEiWRCUCnSMQEcmWrESgFoGISJZEJQJQIhARyZSoRKDbCEREsiUrEWjMYhGRLMlKBOjQkIhIpmQlAh0bEhHJEmsiMLP+Zva+mS0zsxsilrc1s7+Z2TtmttjMLo4znqBFoCaBiEiq2BKBmRUAY4ABQHfgfDPrnlHscmCJu/cEegP/38xaxBUTGqpSRCRLnC2Co4Fl7r7c3b8BJgODMso4sKcFP9PbAF8A5XEFpHMEIiLZ4kwE+wGfpEyXhfNS3Q8cCnwGLAR+7u7bMzdkZpeY2Vwzm7tq1apaB6SBaUREssWZCKK+czNP154GzAe+BZQA95vZXlkruY9391J3Ly0sLKxbUGoSiIikiTMRlAH7p0wXEfzyT3Ux8IQHlgEfAofEFZDrljIRkSxxJoI5wEFm1jk8AXweMCWjzMdAXwAz+zegG7A8roB0aEhEJFuzuDbs7uVmdgUwDSgAJrj7YjMbGi4fB9wCTDSzhQTf0de7++r4YtLJYhGRTLElAgB3nwpMzZg3LuX5Z0C/OGNI2zegNoGISLqE3VnsahGIiGRIVCIAtQdERDIlKhHoHIGISLZEJQJA3VCLiGRIVCLQfQQiItmSlQh0aEhEJEuyEgFKBCIimZKVCDRUpYhIlmQlAtD1oyIiGRKVCFBfQyIiWfJOBGbWOs5AGoKGqhQRyVZtIjCz481sCfBuON3TzH4Xe2QxcA1VKSKSJZ8Wwd0EA8isAXD3d4CT4gwqTmoQiIiky+vQkLt/kjFrWwyxxE63k4mIZMunG+pPzOx4wMMBZq4iPEzU1GhgGhGRbPm0CIYClxMMPF9GMLbwZTHGFBvHdbJYRCRDPi2Cbu7+o9QZZnYCMDOekOKjFoGISLZ8WgT35Tlvp+eOMoGISIacLQIzOw44Hig0s6tTFu1FMAZxk6QuJkRE0lV1aKgF0CYss2fK/PXA2XEGFRcNVSkiki1nInD3V4BXzGyiu3/UgDHFSnlARCRdPieLN5rZnUAPoGXFTHf/TmxRxUT3EYiIZMvnZPGfgPeAzsAIYAUwJ8aYYqOBaUREsuWTCPZ19weBre7+irv/BDg25rhi4Wg8AhGRTPkcGtoaPq40s9OBz4Ci+EKKj1oEIiLZ8kkEt5pZW+CXBPcP7AX8Is6g4qKhKkVEslWbCNz9mfDpOqAPVN5Z3OS4higTEclS1Q1lBcA5BH0MPe/ui8zsDOC/gD2AIxomxPqk+whERDJV1SJ4ENgfmA3ca2YfAccBN7j7Uw0QWyyUB0RE0lWVCEqBw919u5m1BFYDB7r7PxsmtPrnupFARCRLVZePfuPu2wHcfTOwtKZJwMz6m9n7ZrbMzG7IUaa3mc03s8Vm9kpNtl9TOlksIpKtqhbBIWa2IHxuQNdw2gB398Or2nB4jmEMcCrBOAZzzGyKuy9JKbM38Dugv7t/bGYdal+V6gVjFisTiIikqioRHFrHbR8NLHP35QBmNhkYBCxJKfND4Al3/xjA3T+v4z6rpBaBiEi2qjqdq2tHc/sBqWMdlwHHZJQ5GGhuZjMIeji9x90fztyQmV0CXALQqVOnWgekgWlERLLlNXh9LUV952aerm0G9AJOB04DfmVmB2et5D7e3UvdvbSwsLDWAQXdUCsViIikyufO4toqI7j8tEIRQfcUmWVWu/vXwNdm9irQE1gaR0C6aEhEJFteLQIz28PMutVw23OAg8yss5m1AM4DpmSUeRo40cyamVkrgkNH79ZwP/lTX0MiIlmqTQRm9h/AfOD5cLrEzDK/0LO4ezlwBTCN4Mv9L+6+2MyGmtnQsMy74XYXENy49oC7L6plXfKiq4ZERNLlc2joZoIrgGYAuPt8MyvOZ+PuPhWYmjFvXMb0ncCd+WyvrnRoSEQkWz6HhsrdfV3skTQAjVksIpItnxbBIjP7IVBgZgcBVwFvxBtWPBxdPioikimfFsGVBOMVbwH+TNAd9S9ijCk2GphGRCRbPi2Cbu4+DBgWdzBxc3QfgYhIpnxaBHeZ2XtmdouZ9Yg9ohjpzmIRkWzVJgJ37wP0BlYB481soZn9d9yBxUEDlImIZMvrhjJ3/6e73wsMJbinYHicQcVJ9xGIiKTL54ayQ83sZjNbBNxPcMVQUeyRxUE3EoiIZMnnZPFDwCSgn7tn9hXUpLjGLBYRyVJtInD3YxsikIagk8UiItlyJgIz+4u7n2NmC0k/qJLXCGU7Iw1MIyKSraoWwc/DxzMaIpCGoKEqRUSy5TxZ7O4rw6eXuftHqX/AZQ0TXv1Si0BEJFs+l4+eGjFvQH0H0hB0jkBEJFtV5wguJfjl38XMFqQs2hOYGXdgsVGTQEQkTVXnCP4MPAf8BrghZf5X7v5FrFHFSGlARCRdVYnA3X2FmV2eucDM2jW1ZOCuu8lERKJU1yI4A5hHdlf+DnSJMa56V5EHdGRIRCRdzkTg7meEj50bLpz4VLQHdPmoiEi6fPoaOsHMWofPLzCzu8ysU/yh1a+KQ0NqEYiIpMvn8tGxwEYz6wlcB3wEPBJrVDHY0SIQEZFU+Q5e78Ag4B53v4fgEtImRecIRESi5dP76FdmdiNwIXCimRUAzeMNq/45FYeGlAlERFLl0yI4l2Dg+p+4+z+B/YA7Y41KREQaTD5DVf4T+BPQ1szOADa7+8OxR1bPdBuBiEi0fK4aOgeYDfwAOAd4y8zOjjuwuOjIkIhIunzOEQwDjnL3zwHMrBB4EXgszsDqW+XJYl03JCKSJp9zBLtVJIHQmjzX26nsOFncyIGIiOxk8mkRPG9m0wjGLYbg5PHU+EKKx44WgYiIpMpnzOJrzexM4N8JvkfHu/uTsUdWzypvKFMmEBFJU9V4BAcBo4CuwELgGnf/tKECq2+VXUyoTSAikqaqY/0TgGeAswh6IL2vphs3s/5m9r6ZLTOzG6ood5SZbYvzaiS1CEREolV1aGhPd/+f8Pn7ZvZ2TTYc3oE8hmCoyzJgjplNcfclEeV+C0yryfZFRKR+VJUIWprZEew4v7pH6rS7V5cYjgaWuftyADObTNBf0ZKMclcCjwNH1TD2GtENZSIi0apKBCuBu1Km/5ky7cB3qtn2fsAnKdNlwDGpBcxsP+D74bZyJgIzuwS4BKBTp1r2gF3Z6ZyODYmIpKpqYJo+ddx21Ddu5u/y0cD17r6tqi9odx8PjAcoLS2t1W/7yvsIarOyiMguLJ/7CGqrDNg/ZboI+CyjTCkwOUwC7YGBZlbu7k/VdzDqhlpEJFqciWAOcJCZdQY+Bc4DfphaIHUYTDObCDwTRxIADUwjIpJLbInA3cvN7AqCq4EKgAnuvtjMhobLx8W17xzxADpHICKSqdpEYME354+ALu4+Mhyv+P+5++zq1nX3qWR0R5ErAbj74LwiriXdRyAiEi2fzuN+BxwHnB9Of0Vwf0CTpDwgIpIun0NDx7j7kWb2dwB3/9LMWsQcV73TfQQiItHyaRFsDe/+dagcj2B7rFHFwNFlQyIiUfJJBPcCTwIdzOzXwOvAbbFGFQd1Qy0iEimfbqj/ZGbzgL4E36Pfc/d3Y4+snulksYhItHyuGuoEbAT+ljrP3T+OM7D6pqEqRUSi5XOy+FmCH9QGtAQ6A+8DPWKMq95pqEoRkWj5HBo6LHXazI4EfhZbRDHRUJUiItFqPAh92P10rF1Gx0HnCEREouVzjuDqlMndgCOBVbFFJCIiDSqfcwR7pjwvJzhn8Hg84cRHYxaLiESrMhGEN5K1cfdrGyie2Li6HxURiZTzHIGZNXP3bQSHgnYZygMiIumqahHMJkgC881sCvBX4OuKhe7+RMyx1SvXUJUiIpHyOUfQDlhDMK5wxf0EDjStRKChKkVEIlWVCDqEVwwtYkcCqNDk+vLUUJUiItGqSgQFQBvyG4R+p6f7CEREolWVCFa6+8gGi6SB6PJREZF0Vd1ZvEt9Y7pGphERiVRVIujbYFE0AB0aEhGJljMRuPsXDRlI3NQgEBGJVuNO55quim6o1SQQEUmVmESgbqhFRKIlJxGEj2oQiIikS04i0FCVIiKREpMIKqhFICKSLjGJwJvezdAiIg0iOYlAJ4tFRCIlLxEoE4iIpElOIkBDlImIRIk1EZhZfzN738yWmdkNEct/ZGYLwr83zKxnXLGoRSAiEi22RBCOdzwGGAB0B843s+4ZxT4ETnb3w4FbgPFxxVMZV9w7EBFpYuJsERwNLHP35e7+DTAZGJRawN3fcPcvw8lZQFFcwWioShGRaHEmgv2AT1Kmy8J5ufwUeC5qgZldYmZzzWzuqlWrahWMhqoUEYkWZyLIe2QzM+tDkAiuj1ru7uPdvdTdSwsLC+sWlDKBiEiafAavr60yYP+U6SLgs8xCZnY48AAwwN3XxBWMuqEWEYkWZ4tgDnCQmXU2sxbAecCU1AJm1gl4ArjQ3ZfGGIs6nRMRySG2FoG7l5vZFcA0oACY4O6LzWxouHwcMBzYF/hdeBK33N1LY4oHUKdzIiKZ4jw0hLtPBaZmzBuX8nwIMCTOGCr3VfFEeUBEJE1y7ixWX0MiIpESkwg0VKWISLTEJAK1CEREoiUmEVRQg0BEJF1iEoFuIxARiZacRKAxi0VEIiUoEVScLG7kQEREdjLJSQTho/KAiEi65CQCZQIRkUjJSQSoiwkRkSiJSQRoqEoRkUiJSQQ6MiQiEi0xiaCCupgQEUmXmESggWlERKIlJxGg+whERKIkJxGo0zkRkUjJSQTho1oEIiLpkpMIdEeZiEik5CSC8FEtAhGRdIlJBOgcgYhIpOQkgpDuIxARSdessQNoKK6haXZKW7dupaysjM2bNzd2KCK7hJYtW1JUVETz5s3zXic5iUCHhnZKZWVl7LnnnhQXF6u1JlJH7s6aNWsoKyujc+fOea+XmENDrk7ndkqbN29m3333VRIQqQdmxr777lvjFnZyEkH4qG6odz5KAiL1pzafp+QkAg1VKSISKTmJoLEDkJ1WQUEBJSUl9OjRg549e3LXXXexffv2Wm1r+PDhvPjiizmXjxs3jocffrjG2502bRolJSWUlJTQpk0bunXrRklJCRdddFGt4kw1atQoDjnkEL797W/Ts2fPyvh69+7N3Llz67x9gLlz53LVVVcBsGXLFk455RRKSkp49NFHGTJkCEuWLKnT9kePHp32upaXl9O+fXtuvPHGtHLFxcWsXr26cnrGjBmcccYZldPPPfccpaWlHHrooRxyyCFcc801dYoLYNiwYey///60adOmynK/+c1vOPDAA+nWrRvTpk2rnD9v3jwOO+wwDjzwQK666qrKH7X3338/Dz30UJ3jA4Jfyk3pr1evXl4bzy1c6Qdc/4wv+nRtrdaXeCxZsqSxQ/DWrVtXPv/Xv/7lffv29eHDhzdiRFU7+eSTfc6cOVnzy8vLa7ytsWPHer9+/XzdunXu7r527VqfOHFilfupqzfffNNPOumkWq+fWc+tW7f6YYcd5lu3bq2c9+yzz/rxxx/vXbp08e3bt1fOP+CAA3zVqlWV09OnT/fTTz/d3d0XLlzoXbp08Xfffbdyu2PGjKl1nBXefPNN/+yzz9LeZ5kWL17shx9+uG/evNmXL1/uXbp0qaznUUcd5W+88YZv377d+/fv71OnTnV396+//tpLSkoitxf1uQLmeo7v1cRcNYSGqtzpjfjbYpZ8tr5et9n9W3tx03/0yLt8hw4dGD9+PEcddRQ333wz27dv54YbbmDGjBls2bKFyy+/nJ/97GcA3HHHHTzyyCPstttuDBgwgNtvv53BgwdzxhlncPbZZ3PDDTcwZcoUmjVrRr9+/Rg1ahQ333wzbdq04ZprrmH+/PkMHTqUjRs30rVrVyZMmMA+++xD7969OeaYY5g+fTpr167lwQcf5MQTT4yMt7i4mJ/85Ce88MILXHHFFbRr146bbrqJLVu20LVrVx566CHatGnDvHnzuPrqq9mwYQPt27dn4sSJdOzYkdtuu43p06ez1157AdC2bVt+/OMfZ+3n0ksvZc6cOWzatImzzz6bESNGAETW8a9//SsjRoygoKCAtm3b8uqrrzJjxgxGjRrFhAkTuOCCC1i1ahUlJSU8/vjj/PSnP2XUqFGUlpbywgsvRMafWc/zzjuvMraXX36ZI488kmbNdnydTZo0iZ///OeMHTuWWbNmcdxxx1X7v7/jjjsYNmwYhxxyCADNmjXjsssuy/Odk9uxxx5bbZmnn36a8847j913353OnTtz4IEHMnv2bIqLi1m/fn1l/BdddBFPPfUUAwYMoFWrVhQXFzN79myOPvroOsWYoEQQ0DkCqU6XLl3Yvn07n3/+OU8//TRt27Zlzpw5bNmyhRNOOIF+/frx3nvv8dRTT/HWW2/RqlUrvvjii7RtfPHFFzz55JO89957mBlr167N2s9FF13Efffdx8knn8zw4cMZMWIEo0ePBoJDG7Nnz2bq1KmMGDGiysNNLVu25PXXX2f16tWceeaZvPjii7Ru3Zrf/va33HXXXdx4441ceeWVPP300xQWFvLoo48ybNgw7rnnHr766iu6du1a7Wvy61//mnbt2rFt2zb69u3LggULKCoqiqzjyJEjmTZtGvvtt19WvTt06MADDzzAqFGjeOaZZ9KWrV69mltvvTUr/uHDh6fVM9PMmTPp1atX5fSmTZt46aWX+P3vf8/atWuZNGlSXolg0aJF/PKXv6y23PTp0/nP//zPrPmtWrXijTfeqHb9KJ9++mlawigqKuLTTz+lefPmFBUVZc2vUFpaymuvvaZEkC8NTLPzq8kv97h5+IZ54YUXWLBgAY899hgA69at44MPPuDFF1/k4osvplWrVgC0a9cubf299tqLli1bMmTIEE4//fS049AV21m7di0nn3wyAD/+8Y/5wQ9+ULn8zDPPBKBXr16sWLGiyljPPfdcAGbNmsWSJUs44YQTAPjmm2847rjjeP/991m0aBGnnnoqANu2baNjx464e95XmPzlL39h/PjxlJeXs3LlSpYsWUL37t0j63jCCScwePBgzjnnnMp65CNX/Jn1zLRy5UoOPfTQyulnnnmGPn360KpVK8466yxuueUW7r77bgoKCiLrW9OrbPr06cP8+fNrtE51POILysxyzq/QoUMH3nvvvTrvP9ZEYGb9gXuAAuABd789Y7mFywcCG4HB7v52HLGo0znJ1/LlyykoKKBDhw64O/fddx+nnXZaWpnnn3++yi+QZs2aMXv2bF566SUmT57M/fffz8svv5x3DLvvvjsQnMguLy+vsmzr1q2B4Mvk1FNPZdKkSWnLFy5cSI8ePXjzzTcj112+fDldunTJuf0PP/yQUaNGMWfOHPbZZx8GDx7M5s2bc9Zx3LhxvPXWWzz77LOUlJTk/aWZK/7MembaY4890q6bnzRpEjNnzqS4uBiANWvWMH36dE455RT23XdfvvzyS9q3bw8ELbeK5z169GDevHn07NmzyjjjaBEUFRXxySefVE6XlZXxrW99i6KiIsrKyrLmV9i8eTN77LFHrfaZKrarhsysABgDDAC6A+ebWfeMYgOAg8K/S4CxccWz485iZQLJbdWqVQwdOpQrrrgCM+O0005j7NixbN26FYClS5fy9ddf069fPyZMmMDGjRsBsg4NbdiwgXXr1jFw4EBGjx6d9WXYtm1b9tlnH1577TUAHnnkkcrWQW0de+yxzJw5k2XLlgGwceNGli5dSrdu3Vi1alVlIti6dSuLFy8G4MYbb+Tyyy9n/frg3Mz69esZP3582nbXr19P69atadu2Lf/617947rnnqqzjP/7xD4455hhGjhxJ+/bt077gahN/dQ499NDKddavX8/rr7/Oxx9/zIoVK1ixYgVjxoypTC69e/fmkUceAYKW0R//+Ef69OkDwLXXXsttt91Wuc/t27dz1113Ze2vokWQ+VfbJADw3e9+l8mTJ7NlyxY+/PBDPvjgA44++mg6duzInnvuyaxZs3B3Hn74YQYNGlS53tKlS/n2t79d6/1WiLNFcDSwzN2XA5jZZGAQkHqd2CDg4fCM9iwz29vMOrr7yvoORkNVSi6bNm2ipKSErVu30qxZMy688EKuvvpqAIYMGcKKFSs48sgjcXcKCwt56qmn6N+/P/Pnz6e0tJQWLVowcOBAbrvttsptfvXVVwwaNIjNmzfj7tx9991Z+/3DH/5QebK4S5cudb4UsLCwkIkTJ3L++eezZcsWAG699VYOPvhgHnvsMa666irWrVtHeXk5v/jFL+jRoweXXnopGzZs4KijjqJ58+Y0b9486zh5z549OeKII+jRowddunSpPHSTq47XXnstH3zwAe5O37596dmzJ6+88kqd4q/KgAEDuPDCCwF44okn+M53vlPZogIYNGgQ1113HVu2bOFXv/oVl156KT179sTd6d+/PxdccAEAhx9+OKNHj+b8889n48aNmBmnn356Pi99la677jr+/Oc/s3HjRoqKihgyZAg333wzU6ZMYe7cuYwcOZIePXpwzjnn0L17d5o1a8aYMWMoKCgAYOzYsQwePJhNmzYxYMAABgwYULntmTNnctNNN9U5xtgu8wTOJjgcVDF9IXB/RplngH9PmX4JKI3Y1iXAXGBup06dcl6CVZW5K9b4ZX+c55+t3Vir9SUeO8Plo9L0fe973/OlS5c2dhgN6u233/YLLrggcllNLx+N84ayqN/emWc+8imDu49391J3Ly0sLKxVML0OaMeYHx1Jx7Z1P54mIjuX22+/nZUr6/1Awk5t9erV3HLLLfWyrTgPDZUB+6dMFwGf1aKMiEiVunXrRrdu3Ro7jAZVcRVYfYizRTAHOMjMOptZC+A8YEpGmSnARRY4FljnMZwfkJ2b69pekXpTm89TbC0Cdy83syuAaQSXj05w98VmNjRcPg6YSnDp6DKCy0cvjise2Tm1bNmSNWvWqCtqkXrg4XgELVu2rNF61tR+jZWWlnp9dYQljU8jlInUr1wjlJnZPHcvjVonMXcWy86pefPmNRpJSUTqX2K6oRYRkWhKBCIiCadEICKScE3uZLGZrQI+quXq7YHV1ZbatajOyaA6J0Nd6nyAu0fekdvkEkFdmNncXGfNd1WqczKozskQV511aEhEJOGUCEREEi5piWB89UV2OapzMqjOyRBLnRN1jkBERLIlrUUgIiIZlAhERBJul0wEZtbfzN43s2VmdkPEcjOze8PlC8zsyMaIsz7lUecfhXVdYGZvmFnVI3Q3AdXVOaXcUWa2zczObsj44pBPnc2st5nNN7PFZlb9GJE7uTze223N7G9m9k5Y5ybdi7GZTTCzz81sUY7l9f/9lWvosqb6R9Dl9T+ALkAL4B2ge0aZgcBzBCOkHQu81dhxN0Cdjwf2CZ8PSEKdU8q9TNDl+dmNHXcD/J/3JhgXvFM43aGx426AOv8X8NvweSHwBdCisWOvQ51PAo4EFuVYXu/fX7tii+BoYJm7L3f3b4DJwKCMMoOAhz0wC9jbzDo2dKD1qNo6u/sb7v5lODmLYDS4piyf/zPAlcDjwOcNGVxM8qnzD4En3P1jAHdv6vXOp84O7GnBgBZtCBJBecOGWX/c/VWCOuRS799fu2Ii2A/4JGW6LJxX0zJNSU3r81OCXxRNWbV1NrP9gO8D4xowrjjl838+GNjHzGaY2Twzu6jBootHPnW+HziUYJjbhcDP3X17w4TXKOr9+2tXHI8gapirzGtk8ynTlORdHzPrQ5AI/j3WiOKXT51HA9e7+7ZdZPSzfOrcDOgF9AX2AN40s1nuvjTu4GKST51PA+YD3wG6Av9rZq+5+/qYY2ss9f79tSsmgjJg/5TpIoJfCjUt05TkVR8zOxx4ABjg7msaKLa45FPnUmBymATaAwPNrNzdn2qQCOtfvu/t1e7+NfC1mb0K9ASaaiLIp84XA7d7cAB9mZl9CBwCzG6YEBtcvX9/7YqHhuYAB5lZZzNrAZwHTMkoMwW4KDz7fiywzt1XNnSg9ajaOptZJ+AJ4MIm/OswVbV1dvfO7l7s7sXAY8BlTTgJQH7v7aeBE82smZm1Ao4B3m3gOOtTPnX+mKAFhJn9G9ANWN6gUTasev/+2uVaBO5ebmZXANMIrjiY4O6LzWxouHwcwRUkA4FlwEaCXxRNVp51Hg7sC/wu/IVc7k2458Y867xLyafO7v6umT0PLAC2Aw+4e+RliE1Bnv/nW4CJZraQ4LDJ9e7eZLunNrNJQG+gvZmVATcBzSG+7y91MSEiknC74qEhERGpASUCEZGEUyIQEUk4JQIRkYRTIhARSTglAtkphb2Fzk/5K66i7IZ62N9EM/sw3NfbZnZcLbbxgJl1D5//V8ayN+oaY7iditdlUdjj5t7VlC8xs4H1sW/ZdenyUdkpmdkGd29T32Wr2MZE4Bl3f8zM+gGj3P3wOmyvzjFVt10z+wOw1N1/XUX5wUCpu19R37HIrkMtAmkSzKyNmb0U/lpfaGZZPY2aWUczezXlF/OJ4fx+ZvZmuO5fzay6L+hXgQPDda8Ot7XIzH4RzmttZs+G/d8vMrNzw/kzzKzUzG4H9gjj+FO4bEP4+GjqL/SwJXKWmRWY2Z1mNseCPuZ/lsfL8iZhZ2NmdrQF40z8PXzsFt6JOxI4N4zl3DD2CeF+/h71OkoCNXbf2/rTX9QfsI2gI7H5wJMEd8HvFS5rT3BXZUWLdkP4+EtgWPi8ANgzLPsq0Dqcfz0wPGJ/EwnHKwB+ALxF0HnbQqA1QffGi4EjgLOA/0lZt234OIPg13dlTCllKmL8PvCH8HkLgl4k9wAuAf47nL87MBfoHBHnhpT6/RXoH07vBTQLn58CPB4+Hwzcn7L+bcAF4fO9Cfogat3Y/2/9Ne7fLtfFhOwyNrl7ScWEmTUHbjOzkwi6TtgP+DfgnynrzAEmhGWfcvf5ZnYy0B2YGXat0YLgl3SUO83sv4FVBD209gWe9KADN8zsCeBE4HlglJn9luBw0ms1qNdzwL1mtjvQH3jV3TeFh6MOtx2jqLUFDgI+zFh/DzObDxQD84D/TSn/BzM7iKAnyuY59t8P+K6ZXRNOtwQ60bT7I5I6UiKQpuJHBKNP9XL3rWa2guBLrJK7vxomitOBR8zsTuBL4H/d/fw89nGtuz9WMWFmp0QVcvelZtaLoL+X35jZC+4+Mp9KuPtmM5tB0HXyucCkit0BV7r7tGo2scndS8ysLfAMcDlwL0F/O9Pd/fvhifUZOdY34Cx3fz+feCUZdI5Amoq2wOdhEugDHJBZwMwOCMv8D/AgwXB/s4ATzKzimH8rMzs4z32+CnwvXKc1wWGd18zsW8BGd/8jMCrcT6atYcskymSCjsJOJOhMjfDx0op1zOzgcJ+R3H0dcBVwTbhOW+DTcPHglKJfERwiqzANuNLC5pGZHZFrH5IcSgTSVPwJKDWzuQStg/ciyvQG5pvZ3wmO49/j7qsIvhgnmdkCgsRwSD47dPe3Cc4dzCY4Z/CAu/8dOAyYHR6iGQbcGrH6eGBBxcniDC8QjEv7ogfDL0IwTsQS4G0LBi3/PdW02MNY3iHomvkOgtbJTILzBxWmA90rThYTtByah7EtCqcl4XT5qIhIwqlFICKScEoEIiIJp0QgIpJwSgQiIgmnRCAiknBKBCIiCadEICKScP8HxMoMaKtNK9wAAAAASUVORK5CYII=",
"text/plain": [
"<Figure size 432x288 with 1 Axes>"
]
@@ -339,15 +410,8 @@
"source": [
"from sklearn.metrics import plot_roc_curve\n",
"\n",
- "roc_curve = plot_roc_curve(clf_vector[13], X_test, y_test)"
+ "roc_curve = plot_roc_curve(clf, X_test, y_test)"
]
- },
- {
- "cell_type": "code",
- "execution_count": null,
- "metadata": {},
- "outputs": [],
- "source": []
}
],
"metadata": {
@@ -368,7 +432,7 @@
"name": "python",
"nbconvert_exporter": "python",
"pygments_lexer": "ipython3",
- "version": "3.7.6"
+ "version": "3.8.5"
},
"orig_nbformat": 4
},
diff --git a/experiment/decision tree classifier/output/decision tree b/experiment/decision tree classifier/output/decision tree
index ebefd0584901b936590b2625ac2b44234e695af0..c4f822e0a4b0e18e8d78b3edb76002383fc68a3d 100644
--- a/experiment/decision tree classifier/output/decision tree
+++ b/experiment/decision tree classifier/output/decision tree
@@ -46,248 +46,240 @@ edge [fontname=helvetica] ;
20 -> 21 ;
22 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.619<br/>samples = 39<br/>value = [33, 6]<br/>class = Normal>, fillcolor="#ea985d"] ;
21 -> 22 ;
-23 [label=<dst_host_count ≤ 131.5<br/>entropy = 0.991<br/>samples = 9<br/>value = [4, 5]<br/>class = Abnormal>, fillcolor="#d7ebfa"] ;
+23 [label=<entropy = 0.991<br/>samples = 9<br/>value = [4, 5]<br/>class = Abnormal>, fillcolor="#d7ebfa"] ;
22 -> 23 ;
-24 [label=<entropy = 0.0<br/>samples = 4<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-23 -> 24 ;
-25 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-23 -> 25 ;
-26 [label=<protocol_type ≤ 0.5<br/>entropy = 0.211<br/>samples = 30<br/>value = [29, 1]<br/>class = Normal>, fillcolor="#e68540"] ;
-22 -> 26 ;
-27 [label=<entropy = 0.0<br/>samples = 29<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-26 -> 27 ;
-28 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-26 -> 28 ;
-29 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-21 -> 29 ;
-30 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-20 -> 30 ;
-31 [label=<entropy = 0.0<br/>samples = 59<br/>value = [0, 59]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-19 -> 31 ;
-32 [label=<entropy = 0.0<br/>samples = 116<br/>value = [0, 116]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-18 -> 32 ;
-33 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.33<br/>samples = 99<br/>value = [93, 6]<br/>class = Normal>, fillcolor="#e78946"] ;
-17 -> 33 ;
-34 [label=<dst_host_diff_srv_rate ≤ 0.65<br/>entropy = 0.65<br/>samples = 6<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+24 [label=<entropy = 0.211<br/>samples = 30<br/>value = [29, 1]<br/>class = Normal>, fillcolor="#e68540"] ;
+22 -> 24 ;
+25 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+21 -> 25 ;
+26 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+20 -> 26 ;
+27 [label=<entropy = 0.0<br/>samples = 59<br/>value = [0, 59]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+19 -> 27 ;
+28 [label=<entropy = 0.0<br/>samples = 116<br/>value = [0, 116]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+18 -> 28 ;
+29 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.33<br/>samples = 99<br/>value = [93, 6]<br/>class = Normal>, fillcolor="#e78946"] ;
+17 -> 29 ;
+30 [label=<dst_host_diff_srv_rate ≤ 0.65<br/>entropy = 0.65<br/>samples = 6<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+29 -> 30 ;
+31 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+30 -> 31 ;
+32 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+30 -> 32 ;
+33 [label=<count ≤ 7.0<br/>entropy = 0.086<br/>samples = 93<br/>value = [92, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
+29 -> 33 ;
+34 [label=<entropy = 0.0<br/>samples = 92<br/>value = [92, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
33 -> 34 ;
-35 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-34 -> 35 ;
-36 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-34 -> 36 ;
-37 [label=<count ≤ 7.0<br/>entropy = 0.086<br/>samples = 93<br/>value = [92, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
-33 -> 37 ;
-38 [label=<entropy = 0.0<br/>samples = 92<br/>value = [92, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+35 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+33 -> 35 ;
+36 [label=<dst_host_srv_count ≤ 11.0<br/>entropy = 0.187<br/>samples = 421<br/>value = [409, 12]<br/>class = Normal>, fillcolor="#e6853f"] ;
+16 -> 36 ;
+37 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.994<br/>samples = 22<br/>value = [10, 12]<br/>class = Abnormal>, fillcolor="#deeffb"] ;
+36 -> 37 ;
+38 [label=<dst_host_rerror_rate ≤ 0.355<br/>entropy = 0.811<br/>samples = 16<br/>value = [4, 12]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
37 -> 38 ;
-39 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-37 -> 39 ;
-40 [label=<dst_host_srv_count ≤ 11.0<br/>entropy = 0.187<br/>samples = 421<br/>value = [409, 12]<br/>class = Normal>, fillcolor="#e6853f"] ;
-16 -> 40 ;
-41 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.994<br/>samples = 22<br/>value = [10, 12]<br/>class = Abnormal>, fillcolor="#deeffb"] ;
-40 -> 41 ;
-42 [label=<dst_host_rerror_rate ≤ 0.355<br/>entropy = 0.811<br/>samples = 16<br/>value = [4, 12]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
+39 [label=<dst_host_same_src_port_rate ≤ 0.265<br/>entropy = 0.592<br/>samples = 14<br/>value = [2, 12]<br/>class = Abnormal>, fillcolor="#5aade9"] ;
+38 -> 39 ;
+40 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+39 -> 40 ;
+41 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.391<br/>samples = 13<br/>value = [1, 12]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
+39 -> 41 ;
+42 [label=<entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
41 -> 42 ;
-43 [label=<dst_host_same_src_port_rate ≤ 0.265<br/>entropy = 0.592<br/>samples = 14<br/>value = [2, 12]<br/>class = Abnormal>, fillcolor="#5aade9"] ;
-42 -> 43 ;
-44 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-43 -> 44 ;
-45 [label=<src_bytes ≤ 19.0<br/>entropy = 0.391<br/>samples = 13<br/>value = [1, 12]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
-43 -> 45 ;
-46 [label=<entropy = 0.0<br/>samples = 11<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-45 -> 46 ;
-47 [label=<entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
-45 -> 47 ;
-48 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-42 -> 48 ;
-49 [label=<entropy = 0.0<br/>samples = 6<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-41 -> 49 ;
-50 [label=<entropy = 0.0<br/>samples = 399<br/>value = [399, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-40 -> 50 ;
-51 [label=<dst_host_same_srv_rate ≤ 0.835<br/>entropy = 0.033<br/>samples = 6381<br/>value = [22, 6359]<br/>class = Abnormal>, fillcolor="#3a9de5"] ;
-1 -> 51 ;
-52 [label=<srv_diff_host_rate ≤ 0.46<br/>entropy = 0.002<br/>samples = 6350<br/>value = [1, 6349]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-51 -> 52 ;
-53 [label=<entropy = 0.0<br/>samples = 6348<br/>value = [0, 6348]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-52 -> 53 ;
-54 [label=<diff_srv_rate ≤ 0.08<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
-52 -> 54 ;
-55 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-54 -> 55 ;
-56 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-54 -> 56 ;
-57 [label=<dst_host_srv_count ≤ 66.5<br/>entropy = 0.907<br/>samples = 31<br/>value = [21, 10]<br/>class = Normal>, fillcolor="#f1bd97"] ;
-51 -> 57 ;
-58 [label=<entropy = 0.0<br/>samples = 8<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-57 -> 58 ;
-59 [label=<dst_host_same_src_port_rate ≤ 0.54<br/>entropy = 0.426<br/>samples = 23<br/>value = [21, 2]<br/>class = Normal>, fillcolor="#e78d4c"] ;
-57 -> 59 ;
-60 [label=<entropy = 0.0<br/>samples = 21<br/>value = [21, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+43 [label=<entropy = 0.0<br/>samples = 11<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+41 -> 43 ;
+44 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+38 -> 44 ;
+45 [label=<entropy = 0.0<br/>samples = 6<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+37 -> 45 ;
+46 [label=<entropy = 0.0<br/>samples = 399<br/>value = [399, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+36 -> 46 ;
+47 [label=<dst_host_same_srv_rate ≤ 0.835<br/>entropy = 0.033<br/>samples = 6381<br/>value = [22, 6359]<br/>class = Abnormal>, fillcolor="#3a9de5"] ;
+1 -> 47 ;
+48 [label=<srv_diff_host_rate ≤ 0.46<br/>entropy = 0.002<br/>samples = 6350<br/>value = [1, 6349]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+47 -> 48 ;
+49 [label=<entropy = 0.0<br/>samples = 6348<br/>value = [0, 6348]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+48 -> 49 ;
+50 [label=<dst_host_srv_serror_rate ≤ 0.165<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
+48 -> 50 ;
+51 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+50 -> 51 ;
+52 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+50 -> 52 ;
+53 [label=<dst_host_srv_count ≤ 66.5<br/>entropy = 0.907<br/>samples = 31<br/>value = [21, 10]<br/>class = Normal>, fillcolor="#f1bd97"] ;
+47 -> 53 ;
+54 [label=<entropy = 0.0<br/>samples = 8<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+53 -> 54 ;
+55 [label=<dst_host_diff_srv_rate ≤ 0.015<br/>entropy = 0.426<br/>samples = 23<br/>value = [21, 2]<br/>class = Normal>, fillcolor="#e78d4c"] ;
+53 -> 55 ;
+56 [label=<entropy = 0.0<br/>samples = 21<br/>value = [21, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+55 -> 56 ;
+57 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+55 -> 57 ;
+58 [label=<protocol_type ≤ 1.5<br/>entropy = 0.386<br/>samples = 9478<br/>value = [8764, 714]<br/>class = Normal>, fillcolor="#e78b49"] ;
+0 -> 58 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
+59 [label=<hot ≤ 0.5<br/>entropy = 0.219<br/>samples = 8883<br/>value = [8572, 311]<br/>class = Normal>, fillcolor="#e68640"] ;
+58 -> 59 ;
+60 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.108<br/>samples = 8542<br/>value = [8420, 122]<br/>class = Normal>, fillcolor="#e5833c"] ;
59 -> 60 ;
-61 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-59 -> 61 ;
-62 [label=<protocol_type ≤ 1.5<br/>entropy = 0.386<br/>samples = 9478<br/>value = [8764, 714]<br/>class = Normal>, fillcolor="#e78b49"] ;
-0 -> 62 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
-63 [label=<hot ≤ 0.5<br/>entropy = 0.219<br/>samples = 8883<br/>value = [8572, 311]<br/>class = Normal>, fillcolor="#e68640"] ;
+61 [label=<dst_host_same_srv_rate ≤ 0.825<br/>entropy = 0.541<br/>samples = 911<br/>value = [798, 113]<br/>class = Normal>, fillcolor="#e99355"] ;
+60 -> 61 ;
+62 [label=<service ≤ 1.5<br/>entropy = 0.142<br/>samples = 746<br/>value = [731, 15]<br/>class = Normal>, fillcolor="#e6843d"] ;
+61 -> 62 ;
+63 [label=<duration ≤ 8.0<br/>entropy = 0.06<br/>samples = 575<br/>value = [571, 4]<br/>class = Normal>, fillcolor="#e5823a"] ;
62 -> 63 ;
-64 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.108<br/>samples = 8542<br/>value = [8420, 122]<br/>class = Normal>, fillcolor="#e5833c"] ;
+64 [label=<src_bytes ≤ 353.5<br/>entropy = 0.047<br/>samples = 574<br/>value = [571, 3]<br/>class = Normal>, fillcolor="#e5823a"] ;
63 -> 64 ;
-65 [label=<dst_host_same_srv_rate ≤ 0.825<br/>entropy = 0.541<br/>samples = 911<br/>value = [798, 113]<br/>class = Normal>, fillcolor="#e99355"] ;
+65 [label=<src_bytes ≤ 326.5<br/>entropy = 0.161<br/>samples = 127<br/>value = [124, 3]<br/>class = Normal>, fillcolor="#e6843e"] ;
64 -> 65 ;
-66 [label=<service ≤ 1.5<br/>entropy = 0.142<br/>samples = 746<br/>value = [731, 15]<br/>class = Normal>, fillcolor="#e6843d"] ;
+66 [label=<entropy = 0.0<br/>samples = 124<br/>value = [124, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
65 -> 66 ;
-67 [label=<duration ≤ 8.0<br/>entropy = 0.06<br/>samples = 575<br/>value = [571, 4]<br/>class = Normal>, fillcolor="#e5823a"] ;
-66 -> 67 ;
-68 [label=<src_bytes ≤ 353.5<br/>entropy = 0.047<br/>samples = 574<br/>value = [571, 3]<br/>class = Normal>, fillcolor="#e5823a"] ;
-67 -> 68 ;
-69 [label=<src_bytes ≤ 326.5<br/>entropy = 0.161<br/>samples = 127<br/>value = [124, 3]<br/>class = Normal>, fillcolor="#e6843e"] ;
-68 -> 69 ;
-70 [label=<entropy = 0.0<br/>samples = 124<br/>value = [124, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-69 -> 70 ;
-71 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-69 -> 71 ;
-72 [label=<entropy = 0.0<br/>samples = 447<br/>value = [447, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-68 -> 72 ;
-73 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-67 -> 73 ;
-74 [label=<service ≤ 9.5<br/>entropy = 0.344<br/>samples = 171<br/>value = [160, 11]<br/>class = Normal>, fillcolor="#e78a47"] ;
-66 -> 74 ;
-75 [label=<src_bytes ≤ 102.5<br/>entropy = 0.998<br/>samples = 17<br/>value = [8, 9]<br/>class = Abnormal>, fillcolor="#e9f4fc"] ;
+67 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+65 -> 67 ;
+68 [label=<entropy = 0.0<br/>samples = 447<br/>value = [447, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+64 -> 68 ;
+69 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+63 -> 69 ;
+70 [label=<service ≤ 9.5<br/>entropy = 0.344<br/>samples = 171<br/>value = [160, 11]<br/>class = Normal>, fillcolor="#e78a47"] ;
+62 -> 70 ;
+71 [label=<dst_host_same_srv_rate ≤ 0.265<br/>entropy = 0.998<br/>samples = 17<br/>value = [8, 9]<br/>class = Abnormal>, fillcolor="#e9f4fc"] ;
+70 -> 71 ;
+72 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+71 -> 72 ;
+73 [label=<entropy = 0.0<br/>samples = 8<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+71 -> 73 ;
+74 [label=<duration ≤ 17844.5<br/>entropy = 0.1<br/>samples = 154<br/>value = [152, 2]<br/>class = Normal>, fillcolor="#e5833c"] ;
+70 -> 74 ;
+75 [label=<dst_host_count ≤ 5.5<br/>entropy = 0.057<br/>samples = 153<br/>value = [152, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
74 -> 75 ;
-76 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+76 [label=<src_bytes ≤ 239.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
75 -> 76 ;
-77 [label=<entropy = 0.0<br/>samples = 8<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-75 -> 77 ;
-78 [label=<dst_host_srv_rerror_rate ≤ 0.25<br/>entropy = 0.1<br/>samples = 154<br/>value = [152, 2]<br/>class = Normal>, fillcolor="#e5833c"] ;
-74 -> 78 ;
-79 [label=<dst_host_count ≤ 5.5<br/>entropy = 0.057<br/>samples = 153<br/>value = [152, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
-78 -> 79 ;
-80 [label=<src_bytes ≤ 239.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
-79 -> 80 ;
-81 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-80 -> 81 ;
-82 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-80 -> 82 ;
-83 [label=<entropy = 0.0<br/>samples = 150<br/>value = [150, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-79 -> 83 ;
-84 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-78 -> 84 ;
-85 [label=<dst_host_srv_diff_host_rate ≤ 0.06<br/>entropy = 0.974<br/>samples = 165<br/>value = [67, 98]<br/>class = Abnormal>, fillcolor="#c0e0f7"] ;
-65 -> 85 ;
-86 [label=<dst_host_srv_diff_host_rate ≤ 0.005<br/>entropy = 0.918<br/>samples = 99<br/>value = [66, 33]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+77 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+76 -> 77 ;
+78 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+76 -> 78 ;
+79 [label=<entropy = 0.0<br/>samples = 150<br/>value = [150, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+75 -> 79 ;
+80 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+74 -> 80 ;
+81 [label=<dst_host_srv_diff_host_rate ≤ 0.06<br/>entropy = 0.974<br/>samples = 165<br/>value = [67, 98]<br/>class = Abnormal>, fillcolor="#c0e0f7"] ;
+61 -> 81 ;
+82 [label=<dst_host_srv_diff_host_rate ≤ 0.005<br/>entropy = 0.918<br/>samples = 99<br/>value = [66, 33]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+81 -> 82 ;
+83 [label=<src_bytes ≤ 189.5<br/>entropy = 0.998<br/>samples = 61<br/>value = [29, 32]<br/>class = Abnormal>, fillcolor="#ecf6fd"] ;
+82 -> 83 ;
+84 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+83 -> 84 ;
+85 [label=<src_bytes ≤ 358.5<br/>entropy = 0.903<br/>samples = 47<br/>value = [15, 32]<br/>class = Abnormal>, fillcolor="#96cbf1"] ;
+83 -> 85 ;
+86 [label=<num_root ≤ 0.5<br/>entropy = 0.206<br/>samples = 31<br/>value = [1, 30]<br/>class = Abnormal>, fillcolor="#40a0e6"] ;
85 -> 86 ;
-87 [label=<src_bytes ≤ 189.5<br/>entropy = 0.998<br/>samples = 61<br/>value = [29, 32]<br/>class = Abnormal>, fillcolor="#ecf6fd"] ;
+87 [label=<entropy = 0.0<br/>samples = 30<br/>value = [0, 30]<br/>class = Abnormal>, fillcolor="#399de5"] ;
86 -> 87 ;
-88 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-87 -> 88 ;
-89 [label=<src_bytes ≤ 358.5<br/>entropy = 0.903<br/>samples = 47<br/>value = [15, 32]<br/>class = Abnormal>, fillcolor="#96cbf1"] ;
-87 -> 89 ;
-90 [label=<num_root ≤ 0.5<br/>entropy = 0.206<br/>samples = 31<br/>value = [1, 30]<br/>class = Abnormal>, fillcolor="#40a0e6"] ;
+88 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+86 -> 88 ;
+89 [label=<src_bytes ≤ 32877.5<br/>entropy = 0.544<br/>samples = 16<br/>value = [14, 2]<br/>class = Normal>, fillcolor="#e99355"] ;
+85 -> 89 ;
+90 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
89 -> 90 ;
-91 [label=<entropy = 0.0<br/>samples = 30<br/>value = [0, 30]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-90 -> 91 ;
-92 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-90 -> 92 ;
-93 [label=<src_bytes ≤ 32877.5<br/>entropy = 0.544<br/>samples = 16<br/>value = [14, 2]<br/>class = Normal>, fillcolor="#e99355"] ;
-89 -> 93 ;
-94 [label=<entropy = 0.0<br/>samples = 14<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-93 -> 94 ;
-95 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-93 -> 95 ;
-96 [label=<duration ≤ 7.0<br/>entropy = 0.176<br/>samples = 38<br/>value = [37, 1]<br/>class = Normal>, fillcolor="#e6843e"] ;
-86 -> 96 ;
-97 [label=<entropy = 0.0<br/>samples = 37<br/>value = [37, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-96 -> 97 ;
-98 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-96 -> 98 ;
-99 [label=<num_root ≤ 2.5<br/>entropy = 0.113<br/>samples = 66<br/>value = [1, 65]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
-85 -> 99 ;
-100 [label=<entropy = 0.0<br/>samples = 65<br/>value = [0, 65]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+91 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+89 -> 91 ;
+92 [label=<duration ≤ 7.0<br/>entropy = 0.176<br/>samples = 38<br/>value = [37, 1]<br/>class = Normal>, fillcolor="#e6843e"] ;
+82 -> 92 ;
+93 [label=<entropy = 0.0<br/>samples = 37<br/>value = [37, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+92 -> 93 ;
+94 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+92 -> 94 ;
+95 [label=<num_root ≤ 2.5<br/>entropy = 0.113<br/>samples = 66<br/>value = [1, 65]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
+81 -> 95 ;
+96 [label=<entropy = 0.0<br/>samples = 65<br/>value = [0, 65]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+95 -> 96 ;
+97 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+95 -> 97 ;
+98 [label=<dst_host_rerror_rate ≤ 0.025<br/>entropy = 0.013<br/>samples = 7631<br/>value = [7622, 9]<br/>class = Normal>, fillcolor="#e58139"] ;
+60 -> 98 ;
+99 [label=<dst_host_srv_serror_rate ≤ 0.3<br/>entropy = 0.005<br/>samples = 7367<br/>value = [7364, 3]<br/>class = Normal>, fillcolor="#e58139"] ;
+98 -> 99 ;
+100 [label=<entropy = 0.0<br/>samples = 7321<br/>value = [7321, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
99 -> 100 ;
-101 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+101 [label=<logged_in ≤ 0.5<br/>entropy = 0.348<br/>samples = 46<br/>value = [43, 3]<br/>class = Normal>, fillcolor="#e78a47"] ;
99 -> 101 ;
-102 [label=<dst_host_rerror_rate ≤ 0.025<br/>entropy = 0.013<br/>samples = 7631<br/>value = [7622, 9]<br/>class = Normal>, fillcolor="#e58139"] ;
-64 -> 102 ;
-103 [label=<dst_host_srv_serror_rate ≤ 0.3<br/>entropy = 0.005<br/>samples = 7367<br/>value = [7364, 3]<br/>class = Normal>, fillcolor="#e58139"] ;
+102 [label=<dst_host_srv_serror_rate ≤ 0.735<br/>entropy = 0.811<br/>samples = 4<br/>value = [1, 3]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
+101 -> 102 ;
+103 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
102 -> 103 ;
-104 [label=<entropy = 0.0<br/>samples = 7321<br/>value = [7321, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-103 -> 104 ;
-105 [label=<logged_in ≤ 0.5<br/>entropy = 0.348<br/>samples = 46<br/>value = [43, 3]<br/>class = Normal>, fillcolor="#e78a47"] ;
-103 -> 105 ;
-106 [label=<dst_host_serror_rate ≤ 0.675<br/>entropy = 0.811<br/>samples = 4<br/>value = [1, 3]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
-105 -> 106 ;
-107 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+104 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+102 -> 104 ;
+105 [label=<entropy = 0.0<br/>samples = 42<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+101 -> 105 ;
+106 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.156<br/>samples = 264<br/>value = [258, 6]<br/>class = Normal>, fillcolor="#e6843e"] ;
+98 -> 106 ;
+107 [label=<src_bytes ≤ 769.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
106 -> 107 ;
-108 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-106 -> 108 ;
-109 [label=<entropy = 0.0<br/>samples = 42<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-105 -> 109 ;
-110 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.156<br/>samples = 264<br/>value = [258, 6]<br/>class = Normal>, fillcolor="#e6843e"] ;
-102 -> 110 ;
-111 [label=<srv_count ≤ 1.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+108 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+107 -> 108 ;
+109 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+107 -> 109 ;
+110 [label=<src_bytes ≤ 1695.0<br/>entropy = 0.114<br/>samples = 261<br/>value = [257, 4]<br/>class = Normal>, fillcolor="#e5833c"] ;
+106 -> 110 ;
+111 [label=<entropy = 0.0<br/>samples = 230<br/>value = [230, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
110 -> 111 ;
-112 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-111 -> 112 ;
-113 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-111 -> 113 ;
-114 [label=<src_bytes ≤ 1695.0<br/>entropy = 0.114<br/>samples = 261<br/>value = [257, 4]<br/>class = Normal>, fillcolor="#e5833c"] ;
-110 -> 114 ;
-115 [label=<entropy = 0.0<br/>samples = 230<br/>value = [230, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+112 [label=<dst_host_srv_count ≤ 123.5<br/>entropy = 0.555<br/>samples = 31<br/>value = [27, 4]<br/>class = Normal>, fillcolor="#e99456"] ;
+110 -> 112 ;
+113 [label=<entropy = 0.0<br/>samples = 25<br/>value = [25, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+112 -> 113 ;
+114 [label=<dst_host_count ≤ 145.0<br/>entropy = 0.918<br/>samples = 6<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+112 -> 114 ;
+115 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
114 -> 115 ;
-116 [label=<dst_host_srv_count ≤ 123.5<br/>entropy = 0.555<br/>samples = 31<br/>value = [27, 4]<br/>class = Normal>, fillcolor="#e99456"] ;
+116 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
114 -> 116 ;
-117 [label=<entropy = 0.0<br/>samples = 25<br/>value = [25, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-116 -> 117 ;
-118 [label=<dst_host_count ≤ 145.0<br/>entropy = 0.918<br/>samples = 6<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
-116 -> 118 ;
-119 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+117 [label=<src_bytes ≤ 6052.0<br/>entropy = 0.991<br/>samples = 341<br/>value = [152, 189]<br/>class = Abnormal>, fillcolor="#d8ecfa"] ;
+59 -> 117 ;
+118 [label=<duration ≤ 4.5<br/>entropy = 0.813<br/>samples = 203<br/>value = [152, 51]<br/>class = Normal>, fillcolor="#eeab7b"] ;
+117 -> 118 ;
+119 [label=<dst_host_srv_count ≤ 152.0<br/>entropy = 0.993<br/>samples = 80<br/>value = [36, 44]<br/>class = Abnormal>, fillcolor="#dbedfa"] ;
118 -> 119 ;
-120 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-118 -> 120 ;
-121 [label=<src_bytes ≤ 6052.0<br/>entropy = 0.991<br/>samples = 341<br/>value = [152, 189]<br/>class = Abnormal>, fillcolor="#d8ecfa"] ;
-63 -> 121 ;
-122 [label=<duration ≤ 4.5<br/>entropy = 0.813<br/>samples = 203<br/>value = [152, 51]<br/>class = Normal>, fillcolor="#eeab7b"] ;
-121 -> 122 ;
-123 [label=<dst_host_srv_count ≤ 152.0<br/>entropy = 0.993<br/>samples = 80<br/>value = [36, 44]<br/>class = Abnormal>, fillcolor="#dbedfa"] ;
-122 -> 123 ;
-124 [label=<dst_bytes ≤ 2522.0<br/>entropy = 0.262<br/>samples = 45<br/>value = [2, 43]<br/>class = Abnormal>, fillcolor="#42a2e6"] ;
+120 [label=<dst_bytes ≤ 2522.0<br/>entropy = 0.262<br/>samples = 45<br/>value = [2, 43]<br/>class = Abnormal>, fillcolor="#42a2e6"] ;
+119 -> 120 ;
+121 [label=<entropy = 0.0<br/>samples = 43<br/>value = [0, 43]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+120 -> 121 ;
+122 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+120 -> 122 ;
+123 [label=<num_access_files ≤ 0.5<br/>entropy = 0.187<br/>samples = 35<br/>value = [34, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
+119 -> 123 ;
+124 [label=<entropy = 0.0<br/>samples = 34<br/>value = [34, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
123 -> 124 ;
-125 [label=<entropy = 0.0<br/>samples = 43<br/>value = [0, 43]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-124 -> 125 ;
-126 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-124 -> 126 ;
-127 [label=<num_access_files ≤ 0.5<br/>entropy = 0.187<br/>samples = 35<br/>value = [34, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
-123 -> 127 ;
-128 [label=<entropy = 0.0<br/>samples = 34<br/>value = [34, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-127 -> 128 ;
-129 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-127 -> 129 ;
-130 [label=<duration ≤ 97.5<br/>entropy = 0.315<br/>samples = 123<br/>value = [116, 7]<br/>class = Normal>, fillcolor="#e78945"] ;
-122 -> 130 ;
-131 [label=<entropy = 0.0<br/>samples = 106<br/>value = [106, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-130 -> 131 ;
-132 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.977<br/>samples = 17<br/>value = [10, 7]<br/>class = Normal>, fillcolor="#f7d9c4"] ;
-130 -> 132 ;
-133 [label=<dst_bytes ≤ 25291.5<br/>entropy = 0.544<br/>samples = 8<br/>value = [1, 7]<br/>class = Abnormal>, fillcolor="#55abe9"] ;
-132 -> 133 ;
-134 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-133 -> 134 ;
-135 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-133 -> 135 ;
-136 [label=<entropy = 0.0<br/>samples = 9<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-132 -> 136 ;
-137 [label=<entropy = 0.0<br/>samples = 138<br/>value = [0, 138]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-121 -> 137 ;
-138 [label=<src_bytes ≤ 351.5<br/>entropy = 0.907<br/>samples = 595<br/>value = [192, 403]<br/>class = Abnormal>, fillcolor="#97ccf1"] ;
-62 -> 138 ;
-139 [label=<dst_host_diff_srv_rate ≤ 0.33<br/>entropy = 0.047<br/>samples = 193<br/>value = [192, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
-138 -> 139 ;
-140 [label=<entropy = 0.0<br/>samples = 190<br/>value = [190, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-139 -> 140 ;
-141 [label=<dst_host_diff_srv_rate ≤ 0.72<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
-139 -> 141 ;
-142 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-141 -> 142 ;
-143 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-141 -> 143 ;
-144 [label=<entropy = 0.0<br/>samples = 402<br/>value = [0, 402]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-138 -> 144 ;
+125 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+123 -> 125 ;
+126 [label=<duration ≤ 97.5<br/>entropy = 0.315<br/>samples = 123<br/>value = [116, 7]<br/>class = Normal>, fillcolor="#e78945"] ;
+118 -> 126 ;
+127 [label=<entropy = 0.0<br/>samples = 106<br/>value = [106, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+126 -> 127 ;
+128 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.977<br/>samples = 17<br/>value = [10, 7]<br/>class = Normal>, fillcolor="#f7d9c4"] ;
+126 -> 128 ;
+129 [label=<hot ≤ 2.0<br/>entropy = 0.544<br/>samples = 8<br/>value = [1, 7]<br/>class = Abnormal>, fillcolor="#55abe9"] ;
+128 -> 129 ;
+130 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+129 -> 130 ;
+131 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+129 -> 131 ;
+132 [label=<entropy = 0.0<br/>samples = 9<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+128 -> 132 ;
+133 [label=<entropy = 0.0<br/>samples = 138<br/>value = [0, 138]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+117 -> 133 ;
+134 [label=<src_bytes ≤ 351.5<br/>entropy = 0.907<br/>samples = 595<br/>value = [192, 403]<br/>class = Abnormal>, fillcolor="#97ccf1"] ;
+58 -> 134 ;
+135 [label=<dst_host_diff_srv_rate ≤ 0.33<br/>entropy = 0.047<br/>samples = 193<br/>value = [192, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
+134 -> 135 ;
+136 [label=<entropy = 0.0<br/>samples = 190<br/>value = [190, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+135 -> 136 ;
+137 [label=<srv_count ≤ 2.0<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+135 -> 137 ;
+138 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+137 -> 138 ;
+139 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+137 -> 139 ;
+140 [label=<entropy = 0.0<br/>samples = 402<br/>value = [0, 402]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+134 -> 140 ;
}
diff --git a/experiment/decision tree classifier/output/decision tree max depth.png b/experiment/decision tree classifier/output/decision tree max depth.png
index 109bc9e32fda9ed390a0353057c5d9408472e253..0a3b5f84ff12aecb8ad6686227c7c7d335b32a51 100644
Binary files a/experiment/decision tree classifier/output/decision tree max depth.png and b/experiment/decision tree classifier/output/decision tree max depth.png differ
diff --git a/experiment/decision tree classifier/output/decision tree.jpg b/experiment/decision tree classifier/output/decision tree.jpg
index 6e9c8c9f6a92d8d3eec9d8a793fbc8fa7a9d0a2a..cd3ea350540e40125b1b98f3073d524ffad01662 100644
Binary files a/experiment/decision tree classifier/output/decision tree.jpg and b/experiment/decision tree classifier/output/decision tree.jpg differ
diff --git a/experiment/random forest/RandomForest.ipynb b/experiment/random forest/RandomForest.ipynb
index c51a38157cab5a34f2bf08451c2f1ef45861453a..bac415170e6017219751c405fe01502cc864c62e 100644
--- a/experiment/random forest/RandomForest.ipynb
+++ b/experiment/random forest/RandomForest.ipynb
@@ -2,7 +2,7 @@
"cells": [
{
"cell_type": "code",
- "execution_count": 33,
+ "execution_count": 1,
"metadata": {},
"outputs": [
{
@@ -75,68 +75,14 @@
"cell_type": "code",
"execution_count": 2,
"metadata": {},
- "outputs": [
- {
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "<class 'pandas.core.frame.DataFrame'>\n",
- "RangeIndex: 17634 entries, 0 to 17633\n",
- "Data columns (total 38 columns):\n",
- " # Column Non-Null Count Dtype \n",
- "--- ------ -------------- ----- \n",
- " 0 duration 17634 non-null int64 \n",
- " 1 protocol_type 17634 non-null int64 \n",
- " 2 service 17634 non-null int64 \n",
- " 3 flag 17634 non-null int64 \n",
- " 4 src_bytes 17634 non-null int64 \n",
- " 5 dst_bytes 17634 non-null int64 \n",
- " 6 land 17634 non-null int64 \n",
- " 7 wrong_fragment 17634 non-null int64 \n",
- " 8 hot 17634 non-null int64 \n",
- " 9 num_failed_logins 17634 non-null int64 \n",
- " 10 logged_in 17634 non-null int64 \n",
- " 11 num_compromised 17634 non-null int64 \n",
- " 12 root_shell 17634 non-null int64 \n",
- " 13 su_attempted 17634 non-null int64 \n",
- " 14 num_root 17634 non-null int64 \n",
- " 15 num_file_creations 17634 non-null int64 \n",
- " 16 num_shells 17634 non-null int64 \n",
- " 17 num_access_files 17634 non-null int64 \n",
- " 18 is_guest_login 17634 non-null int64 \n",
- " 19 count 17634 non-null int64 \n",
- " 20 srv_count 17634 non-null int64 \n",
- " 21 serror_rate 17634 non-null float64\n",
- " 22 srv_serror_rate 17634 non-null float64\n",
- " 23 rerror_rate 17634 non-null float64\n",
- " 24 srv_rerror_rate 17634 non-null float64\n",
- " 25 same_srv_rate 17634 non-null float64\n",
- " 26 diff_srv_rate 17634 non-null float64\n",
- " 27 srv_diff_host_rate 17634 non-null float64\n",
- " 28 dst_host_count 17634 non-null int64 \n",
- " 29 dst_host_srv_count 17634 non-null int64 \n",
- " 30 dst_host_same_srv_rate 17634 non-null float64\n",
- " 31 dst_host_diff_srv_rate 17634 non-null float64\n",
- " 32 dst_host_same_src_port_rate 17634 non-null float64\n",
- " 33 dst_host_srv_diff_host_rate 17634 non-null float64\n",
- " 34 dst_host_serror_rate 17634 non-null float64\n",
- " 35 dst_host_srv_serror_rate 17634 non-null float64\n",
- " 36 dst_host_rerror_rate 17634 non-null float64\n",
- " 37 dst_host_srv_rerror_rate 17634 non-null float64\n",
- "dtypes: float64(15), int64(23)\n",
- "memory usage: 5.1 MB\n"
- ]
- }
- ],
+ "outputs": [],
"source": [
"X, y = df.drop(columns=[\"class\", \"index_num\"]), df['class']\n",
"X_train, X_test, y_train, y_test = train_test_split(X, y, test_size=0.3, shuffle=True, random_state=0)\n",
"X_train.reset_index(drop=True, inplace=True)\n",
"X_test.reset_index(drop=True, inplace=True)\n",
"y_train.reset_index(drop=True, inplace=True)\n",
- "y_test.reset_index(drop=True, inplace=True)\n",
- "\n",
- "X_train.info()"
+ "y_test.reset_index(drop=True, inplace=True)"
]
},
{
@@ -145,51 +91,162 @@
"metadata": {},
"outputs": [
{
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "Shape of X_train: (17634, 38)\n",
- "Shape of X_test: (7558, 38)\n",
- "Shape of y_train: (17634,)\n",
- "Shape of y_test: (7558,)\n"
- ]
- }
- ],
- "source": [
- "print(f\"Shape of X_train: {X_train.shape}\\nShape of X_test: {X_test.shape}\")\n",
- "print(f\"Shape of y_train: {y_train.shape}\\nShape of y_test: {y_test.shape}\")"
- ]
- },
- {
- "cell_type": "code",
- "execution_count": 42,
- "metadata": {},
- "outputs": [
- {
- "name": "stdout",
- "output_type": "stream",
- "text": [
- "depth: 1 0.9022228102672665\n",
- "depth: 2 0.9511775602011114\n",
- "depth: 3 0.9735379730087325\n",
- "depth: 4 0.9785657581370732\n",
- "depth: 5 0.9842550939401958\n",
- "depth: 6 0.9899444297433183\n",
- "depth: 7 0.9928552527123577\n",
- "depth: 8 0.9943106641968775\n",
- "depth: 9 0.9960306959513099\n",
- "depth: 10 0.9966922466260916\n",
- "depth: 11 0.997221487165917\n",
- "depth: 12 0.9973537973008733\n",
- "depth: 13 0.997221487165917\n",
- "depth: 14 0.9970891770309606\n",
- "depth: 15 0.997221487165917\n",
- "depth: 16 0.9970891770309606\n",
- "depth: 17 0.997221487165917\n",
- "depth: 18 0.9969568668960043\n",
- "depth: 19 0.9970891770309606\n",
- "depth: 20 0.9969568668960043\n"
- ]
+ "data": {
+ "text/html": [
+ "<div>\n",
+ "<style scoped>\n",
+ " .dataframe tbody tr th:only-of-type {\n",
+ " vertical-align: middle;\n",
+ " }\n",
+ "\n",
+ " .dataframe tbody tr th {\n",
+ " vertical-align: top;\n",
+ " }\n",
+ "\n",
+ " .dataframe thead th {\n",
+ " text-align: right;\n",
+ " }\n",
+ "</style>\n",
+ "<table border=\"1\" class=\"dataframe\">\n",
+ " <thead>\n",
+ " <tr style=\"text-align: right;\">\n",
+ " <th></th>\n",
+ " <th>depth</th>\n",
+ " <th>accuracy</th>\n",
+ " </tr>\n",
+ " </thead>\n",
+ " <tbody>\n",
+ " <tr>\n",
+ " <th>0</th>\n",
+ " <td>1</td>\n",
+ " <td>0.902223</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>1</th>\n",
+ " <td>2</td>\n",
+ " <td>0.951178</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>2</th>\n",
+ " <td>3</td>\n",
+ " <td>0.973538</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>3</th>\n",
+ " <td>4</td>\n",
+ " <td>0.978566</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>4</th>\n",
+ " <td>5</td>\n",
+ " <td>0.984255</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>5</th>\n",
+ " <td>6</td>\n",
+ " <td>0.989944</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>6</th>\n",
+ " <td>7</td>\n",
+ " <td>0.992855</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>7</th>\n",
+ " <td>8</td>\n",
+ " <td>0.994311</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>8</th>\n",
+ " <td>9</td>\n",
+ " <td>0.996031</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>9</th>\n",
+ " <td>10</td>\n",
+ " <td>0.996692</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>10</th>\n",
+ " <td>11</td>\n",
+ " <td>0.997221</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>11</th>\n",
+ " <td>12</td>\n",
+ " <td>0.997354</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>12</th>\n",
+ " <td>13</td>\n",
+ " <td>0.997221</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>13</th>\n",
+ " <td>14</td>\n",
+ " <td>0.997089</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>14</th>\n",
+ " <td>15</td>\n",
+ " <td>0.997221</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>15</th>\n",
+ " <td>16</td>\n",
+ " <td>0.997089</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>16</th>\n",
+ " <td>17</td>\n",
+ " <td>0.997221</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>17</th>\n",
+ " <td>18</td>\n",
+ " <td>0.996957</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>18</th>\n",
+ " <td>19</td>\n",
+ " <td>0.997089</td>\n",
+ " </tr>\n",
+ " <tr>\n",
+ " <th>19</th>\n",
+ " <td>20</td>\n",
+ " <td>0.996957</td>\n",
+ " </tr>\n",
+ " </tbody>\n",
+ "</table>\n",
+ "</div>"
+ ],
+ "text/plain": [
+ " depth accuracy\n",
+ "0 1 0.902223\n",
+ "1 2 0.951178\n",
+ "2 3 0.973538\n",
+ "3 4 0.978566\n",
+ "4 5 0.984255\n",
+ "5 6 0.989944\n",
+ "6 7 0.992855\n",
+ "7 8 0.994311\n",
+ "8 9 0.996031\n",
+ "9 10 0.996692\n",
+ "10 11 0.997221\n",
+ "11 12 0.997354\n",
+ "12 13 0.997221\n",
+ "13 14 0.997089\n",
+ "14 15 0.997221\n",
+ "15 16 0.997089\n",
+ "16 17 0.997221\n",
+ "17 18 0.996957\n",
+ "18 19 0.997089\n",
+ "19 20 0.996957"
+ ]
+ },
+ "execution_count": 3,
+ "metadata": {},
+ "output_type": "execute_result"
}
],
"source": [
@@ -206,20 +263,21 @@
"plot_vector = []\n",
"for clf_item in clf_vector:\n",
" clf_y_pred = clf_item.predict(X_test)\n",
+ " accuracy = accuracy_score(y_test, clf_y_pred)\n",
+ " plot_vector.append([clf_item.max_depth, accuracy])\n",
"\n",
- " accu = accuracy_score(y_test, clf_y_pred)\n",
- " print(f\"depth: {clf_item.max_depth} {accu}\")\n",
- " plot_vector.append([clf_item.max_depth, accu])"
+ "plot_vec = pd.DataFrame(plot_vector)\n",
+ "plot_vec.rename(columns={0: \"depth\", 1: \"accuracy\"})"
]
},
{
"cell_type": "code",
- "execution_count": 40,
+ "execution_count": 4,
"metadata": {},
"outputs": [
{
"data": {
- "image/png": "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",
+ "image/png": "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",
"text/plain": [
"<Figure size 432x288 with 1 Axes>"
]
@@ -228,40 +286,49 @@
"needs_background": "light"
},
"output_type": "display_data"
+ },
+ {
+ "name": "stdout",
+ "output_type": "stream",
+ "text": [
+ "max depth at the level of 12\n"
+ ]
}
],
"source": [
- "plot_vec = pd.DataFrame(plot_vector)\n",
"depth_x = plot_vec[:][0]\n",
"plt.xlabel('Max Depth')\n",
+ "plt.ylabel('Accuracy')\n",
"plt.title('Random Forest Max Depth Metric')\n",
"plt.plot(depth_x, plot_vec[:][1], 'r', label='accuracy')\n",
"plt.grid(True)\n",
- "plt.legend()\n",
"plt.savefig('./output/random forest max depth.png')\n",
- "plt.show()"
+ "plt.show()\n",
+ "\n",
+ "idx_max = plot_vec.idxmax(0)\n",
+ "print(f\"max depth at the level of {idx_max[1]+1}\")"
]
},
{
"cell_type": "code",
- "execution_count": 44,
+ "execution_count": 5,
"metadata": {},
"outputs": [
{
"name": "stdout",
"output_type": "stream",
"text": [
- "accuracy: 0.997221487165917\n",
- "precision: 0.9967964514539182\n",
- "racall: 0.998026153466568\n",
- "f1 score: 0.9974109234373073\n",
- "error rate: 0.0027785128340830907\n"
+ "accuracy: 0.9973537973008733\n",
+ "precision: 0.9965525732578183\n",
+ "racall: 0.9985196150999259\n",
+ "f1 score: 0.997535124476214\n",
+ "error rate: 0.0026462026991267533\n"
]
}
],
"source": [
"from sklearn.metrics import confusion_matrix\n",
- "clf = clf_vector[14]\n",
+ "clf = clf_vector[idx_max[1]]\n",
"clf_y_pred = clf.predict(X_test)\n",
"\n",
"conf_mat = confusion_matrix(y_test, clf_y_pred)\n",
@@ -282,17 +349,17 @@
},
{
"cell_type": "code",
- "execution_count": 9,
+ "execution_count": 6,
"metadata": {},
"outputs": [
{
"data": {
- "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\r\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\r\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\r\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\r\n -->\r\n<!-- Title: Tree Pages: 1 -->\r\n<svg width=\"8663pt\" height=\"1742pt\"\r\n viewBox=\"0.00 0.00 8663.00 1742.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\r\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1738)\">\r\n<title>Tree</title>\r\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1738 8659,-1738 8659,4 -4,4\"/>\r\n<!-- 0 -->\r\n<g id=\"node1\" class=\"node\"><title>0</title>\r\n<path fill=\"#fbebdf\" stroke=\"black\" d=\"M4403,-1734C4403,-1734 4281,-1734 4281,-1734 4275,-1734 4269,-1728 4269,-1722 4269,-1722 4269,-1663 4269,-1663 4269,-1657 4275,-1651 4281,-1651 4281,-1651 4403,-1651 4403,-1651 4409,-1651 4415,-1657 4415,-1663 4415,-1663 4415,-1722 4415,-1722 4415,-1728 4409,-1734 4403,-1734\"/>\r\n<text text-anchor=\"start\" x=\"4289\" y=\"-1718.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\r\n<text text-anchor=\"start\" x=\"4292\" y=\"-1703.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"4286\" y=\"-1688.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11238</text>\r\n<text text-anchor=\"start\" x=\"4277\" y=\"-1673.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9597, 8037]</text>\r\n<text text-anchor=\"start\" x=\"4295\" y=\"-1658.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 1 -->\r\n<g id=\"node2\" class=\"node\"><title>1</title>\r\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M3204,-1615C3204,-1615 3062,-1615 3062,-1615 3056,-1615 3050,-1609 3050,-1603 3050,-1603 3050,-1544 3050,-1544 3050,-1538 3056,-1532 3062,-1532 3062,-1532 3204,-1532 3204,-1532 3210,-1532 3216,-1538 3216,-1544 3216,-1544 3216,-1603 3216,-1603 3216,-1609 3210,-1615 3204,-1615\"/>\r\n<text text-anchor=\"start\" x=\"3058\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 243.0</text>\r\n<text text-anchor=\"start\" x=\"3083\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.399</text>\r\n<text text-anchor=\"start\" x=\"3081.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5132</text>\r\n<text text-anchor=\"start\" x=\"3072\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [627, 7309]</text>\r\n<text text-anchor=\"start\" x=\"3078\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 0->1 -->\r\n<g id=\"edge1\" class=\"edge\"><title>0->1</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4268.64,-1684.4C4059.19,-1664.13 3458.56,-1606.01 3226.28,-1583.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3226.46,-1580.03 3216.17,-1582.55 3225.78,-1587 3226.46,-1580.03\"/>\r\n<text text-anchor=\"middle\" x=\"3232.06\" y=\"-1598.15\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\r\n</g>\r\n<!-- 110 -->\r\n<g id=\"node111\" class=\"node\"><title>110</title>\r\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M5649,-1615C5649,-1615 5535,-1615 5535,-1615 5529,-1615 5523,-1609 5523,-1603 5523,-1603 5523,-1544 5523,-1544 5523,-1538 5529,-1532 5535,-1532 5535,-1532 5649,-1532 5649,-1532 5655,-1532 5661,-1538 5661,-1544 5661,-1544 5661,-1603 5661,-1603 5661,-1609 5655,-1615 5649,-1615\"/>\r\n<text text-anchor=\"start\" x=\"5543\" y=\"-1599.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\r\n<text text-anchor=\"start\" x=\"5542\" y=\"-1584.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.385</text>\r\n<text text-anchor=\"start\" x=\"5540.5\" y=\"-1569.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6106</text>\r\n<text text-anchor=\"start\" x=\"5531\" y=\"-1554.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8970, 728]</text>\r\n<text text-anchor=\"start\" x=\"5545\" y=\"-1539.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 0->110 -->\r\n<g id=\"edge110\" class=\"edge\"><title>0->110</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4415.07,-1684.66C4634.28,-1664.14 5285.23,-1603.21 5512.57,-1581.93\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5513.12,-1585.4 5522.75,-1580.98 5512.47,-1578.43 5513.12,-1585.4\"/>\r\n<text text-anchor=\"middle\" x=\"5506.8\" y=\"-1596.53\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\r\n</g>\r\n<!-- 2 -->\r\n<g id=\"node3\" class=\"node\"><title>2</title>\r\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M2507.5,-1496C2507.5,-1496 2392.5,-1496 2392.5,-1496 2386.5,-1496 2380.5,-1490 2380.5,-1484 2380.5,-1484 2380.5,-1425 2380.5,-1425 2380.5,-1419 2386.5,-1413 2392.5,-1413 2392.5,-1413 2507.5,-1413 2507.5,-1413 2513.5,-1413 2519.5,-1419 2519.5,-1425 2519.5,-1425 2519.5,-1484 2519.5,-1484 2519.5,-1490 2513.5,-1496 2507.5,-1496\"/>\r\n<text text-anchor=\"start\" x=\"2388.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"2400\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\r\n<text text-anchor=\"start\" x=\"2398.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1043</text>\r\n<text text-anchor=\"start\" x=\"2389\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 1054]</text>\r\n<text text-anchor=\"start\" x=\"2395\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1->2 -->\r\n<g id=\"edge2\" class=\"edge\"><title>1->2</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3049.93,-1558.27C2917.4,-1535.57 2659.82,-1491.44 2529.55,-1469.13\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2530.07,-1465.67 2519.63,-1467.43 2528.89,-1472.57 2530.07,-1465.67\"/>\r\n</g>\r\n<!-- 67 -->\r\n<g id=\"node68\" class=\"node\"><title>67</title>\r\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M3235,-1496C3235,-1496 3031,-1496 3031,-1496 3025,-1496 3019,-1490 3019,-1484 3019,-1484 3019,-1425 3019,-1425 3019,-1419 3025,-1413 3031,-1413 3031,-1413 3235,-1413 3235,-1413 3241,-1413 3247,-1419 3247,-1425 3247,-1425 3247,-1484 3247,-1484 3247,-1490 3241,-1496 3235,-1496\"/>\r\n<text text-anchor=\"start\" x=\"3027\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.955</text>\r\n<text text-anchor=\"start\" x=\"3083\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.093</text>\r\n<text text-anchor=\"start\" x=\"3081.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4089</text>\r\n<text text-anchor=\"start\" x=\"3076\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 6255]</text>\r\n<text text-anchor=\"start\" x=\"3078\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 1->67 -->\r\n<g id=\"edge67\" class=\"edge\"><title>1->67</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3133,-1531.91C3133,-1523.65 3133,-1514.86 3133,-1506.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3136.5,-1506.02 3133,-1496.02 3129.5,-1506.02 3136.5,-1506.02\"/>\r\n</g>\r\n<!-- 3 -->\r\n<g id=\"node4\" class=\"node\"><title>3</title>\r\n<path fill=\"#fcf2ea\" stroke=\"black\" d=\"M1898,-1377C1898,-1377 1696,-1377 1696,-1377 1690,-1377 1684,-1371 1684,-1365 1684,-1365 1684,-1306 1684,-1306 1684,-1300 1690,-1294 1696,-1294 1696,-1294 1898,-1294 1898,-1294 1904,-1294 1910,-1300 1910,-1306 1910,-1306 1910,-1365 1910,-1365 1910,-1371 1904,-1377 1898,-1377\"/>\r\n<text text-anchor=\"start\" x=\"1692\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.625</text>\r\n<text text-anchor=\"start\" x=\"1747\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\r\n<text text-anchor=\"start\" x=\"1749.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 674</text>\r\n<text text-anchor=\"start\" x=\"1740\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 493]</text>\r\n<text text-anchor=\"start\" x=\"1750\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 2->3 -->\r\n<g id=\"edge3\" class=\"edge\"><title>2->3</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2380.43,-1441.03C2270.78,-1421.39 2056.28,-1382.96 1920.15,-1358.56\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1920.54,-1355.08 1910.08,-1356.76 1919.3,-1361.97 1920.54,-1355.08\"/>\r\n</g>\r\n<!-- 66 -->\r\n<g id=\"node67\" class=\"node\"><title>66</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2501,-1369.5C2501,-1369.5 2399,-1369.5 2399,-1369.5 2393,-1369.5 2387,-1363.5 2387,-1357.5 2387,-1357.5 2387,-1313.5 2387,-1313.5 2387,-1307.5 2393,-1301.5 2399,-1301.5 2399,-1301.5 2501,-1301.5 2501,-1301.5 2507,-1301.5 2513,-1307.5 2513,-1313.5 2513,-1313.5 2513,-1357.5 2513,-1357.5 2513,-1363.5 2507,-1369.5 2501,-1369.5\"/>\r\n<text text-anchor=\"start\" x=\"2408\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2402.5\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 369</text>\r\n<text text-anchor=\"start\" x=\"2401.5\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 561]</text>\r\n<text text-anchor=\"start\" x=\"2395\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 2->66 -->\r\n<g id=\"edge66\" class=\"edge\"><title>2->66</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2450,-1412.91C2450,-1402.2 2450,-1390.62 2450,-1379.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2453.5,-1379.67 2450,-1369.67 2446.5,-1379.67 2453.5,-1379.67\"/>\r\n</g>\r\n<!-- 4 -->\r\n<g id=\"node5\" class=\"node\"><title>4</title>\r\n<path fill=\"#74baed\" stroke=\"black\" d=\"M1427.5,-1258C1427.5,-1258 1258.5,-1258 1258.5,-1258 1252.5,-1258 1246.5,-1252 1246.5,-1246 1246.5,-1246 1246.5,-1187 1246.5,-1187 1246.5,-1181 1252.5,-1175 1258.5,-1175 1258.5,-1175 1427.5,-1175 1427.5,-1175 1433.5,-1175 1439.5,-1181 1439.5,-1187 1439.5,-1187 1439.5,-1246 1439.5,-1246 1439.5,-1252 1433.5,-1258 1427.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1254.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.07</text>\r\n<text text-anchor=\"start\" x=\"1293\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.779</text>\r\n<text text-anchor=\"start\" x=\"1295.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 393</text>\r\n<text text-anchor=\"start\" x=\"1286\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 467]</text>\r\n<text text-anchor=\"start\" x=\"1288\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 3->4 -->\r\n<g id=\"edge4\" class=\"edge\"><title>3->4</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1683.9,-1305.35C1612.16,-1286.87 1519.94,-1263.1 1449.51,-1244.95\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1450.28,-1241.53 1439.72,-1242.43 1448.53,-1248.31 1450.28,-1241.53\"/>\r\n</g>\r\n<!-- 41 -->\r\n<g id=\"node42\" class=\"node\"><title>41</title>\r\n<path fill=\"#e78945\" stroke=\"black\" d=\"M1908,-1258C1908,-1258 1686,-1258 1686,-1258 1680,-1258 1674,-1252 1674,-1246 1674,-1246 1674,-1187 1674,-1187 1674,-1181 1680,-1175 1686,-1175 1686,-1175 1908,-1175 1908,-1175 1914,-1175 1920,-1181 1920,-1187 1920,-1187 1920,-1246 1920,-1246 1920,-1252 1914,-1258 1908,-1258\"/>\r\n<text text-anchor=\"start\" x=\"1682\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"1747\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.325</text>\r\n<text text-anchor=\"start\" x=\"1749.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 281</text>\r\n<text text-anchor=\"start\" x=\"1744\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [412, 26]</text>\r\n<text text-anchor=\"start\" x=\"1750\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 3->41 -->\r\n<g id=\"edge41\" class=\"edge\"><title>3->41</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1797,-1293.91C1797,-1285.65 1797,-1276.86 1797,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1800.5,-1268.02 1797,-1258.02 1793.5,-1268.02 1800.5,-1268.02\"/>\r\n</g>\r\n<!-- 5 -->\r\n<g id=\"node6\" class=\"node\"><title>5</title>\r\n<path fill=\"#cbe5f8\" stroke=\"black\" d=\"M1046,-1139C1046,-1139 880,-1139 880,-1139 874,-1139 868,-1133 868,-1127 868,-1127 868,-1068 868,-1068 868,-1062 874,-1056 880,-1056 880,-1056 1046,-1056 1046,-1056 1052,-1056 1058,-1062 1058,-1068 1058,-1068 1058,-1127 1058,-1127 1058,-1133 1052,-1139 1046,-1139\"/>\r\n<text text-anchor=\"start\" x=\"876\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.09</text>\r\n<text text-anchor=\"start\" x=\"913\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.983</text>\r\n<text text-anchor=\"start\" x=\"915.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 215</text>\r\n<text text-anchor=\"start\" x=\"906\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 190]</text>\r\n<text text-anchor=\"start\" x=\"908\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4->5 -->\r\n<g id=\"edge5\" class=\"edge\"><title>4->5</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1246.13,-1185.67C1191.67,-1168.91 1123.66,-1147.97 1067.95,-1130.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1068.64,-1127.36 1058.05,-1127.77 1066.58,-1134.05 1068.64,-1127.36\"/>\r\n</g>\r\n<!-- 40 -->\r\n<g id=\"node41\" class=\"node\"><title>40</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1394,-1131.5C1394,-1131.5 1292,-1131.5 1292,-1131.5 1286,-1131.5 1280,-1125.5 1280,-1119.5 1280,-1119.5 1280,-1075.5 1280,-1075.5 1280,-1069.5 1286,-1063.5 1292,-1063.5 1292,-1063.5 1394,-1063.5 1394,-1063.5 1400,-1063.5 1406,-1069.5 1406,-1075.5 1406,-1075.5 1406,-1119.5 1406,-1119.5 1406,-1125.5 1400,-1131.5 1394,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"1301\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1295.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 178</text>\r\n<text text-anchor=\"start\" x=\"1294.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 277]</text>\r\n<text text-anchor=\"start\" x=\"1288\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 4->40 -->\r\n<g id=\"edge40\" class=\"edge\"><title>4->40</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1343,-1174.91C1343,-1164.2 1343,-1152.62 1343,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1346.5,-1141.67 1343,-1131.67 1339.5,-1141.67 1346.5,-1141.67\"/>\r\n</g>\r\n<!-- 6 -->\r\n<g id=\"node7\" class=\"node\"><title>6</title>\r\n<path fill=\"#eca16c\" stroke=\"black\" d=\"M749,-1020C749,-1020 651,-1020 651,-1020 645,-1020 639,-1014 639,-1008 639,-1008 639,-949 639,-949 639,-943 645,-937 651,-937 651,-937 749,-937 749,-937 755,-937 761,-943 761,-949 761,-949 761,-1008 761,-1008 761,-1014 755,-1020 749,-1020\"/>\r\n<text text-anchor=\"start\" x=\"665\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 4.5</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.729</text>\r\n<text text-anchor=\"start\" x=\"652.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 107</text>\r\n<text text-anchor=\"start\" x=\"647\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 33]</text>\r\n<text text-anchor=\"start\" x=\"653\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 5->6 -->\r\n<g id=\"edge6\" class=\"edge\"><title>5->6</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M871.753,-1055.91C838.678,-1041.19 801.843,-1024.81 770.793,-1010.99\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"771.913,-1007.66 761.353,-1006.79 769.067,-1014.06 771.913,-1007.66\"/>\r\n</g>\r\n<!-- 23 -->\r\n<g id=\"node24\" class=\"node\"><title>23</title>\r\n<path fill=\"#47a4e7\" stroke=\"black\" d=\"M1052.5,-1020C1052.5,-1020 873.5,-1020 873.5,-1020 867.5,-1020 861.5,-1014 861.5,-1008 861.5,-1008 861.5,-949 861.5,-949 861.5,-943 867.5,-937 873.5,-937 873.5,-937 1052.5,-937 1052.5,-937 1058.5,-937 1064.5,-943 1064.5,-949 1064.5,-949 1064.5,-1008 1064.5,-1008 1064.5,-1014 1058.5,-1020 1052.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"869.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\r\n<text text-anchor=\"start\" x=\"913\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.349</text>\r\n<text text-anchor=\"start\" x=\"915.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 108</text>\r\n<text text-anchor=\"start\" x=\"910\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 157]</text>\r\n<text text-anchor=\"start\" x=\"908\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 5->23 -->\r\n<g id=\"edge23\" class=\"edge\"><title>5->23</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M963,-1055.91C963,-1047.65 963,-1038.86 963,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"966.5,-1030.02 963,-1020.02 959.5,-1030.02 966.5,-1030.02\"/>\r\n</g>\r\n<!-- 7 -->\r\n<g id=\"node8\" class=\"node\"><title>7</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M549,-901C549,-901 397,-901 397,-901 391,-901 385,-895 385,-889 385,-889 385,-830 385,-830 385,-824 391,-818 397,-818 397,-818 549,-818 549,-818 555,-818 561,-824 561,-830 561,-830 561,-889 561,-889 561,-895 555,-901 549,-901\"/>\r\n<text text-anchor=\"start\" x=\"393\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"423\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.231</text>\r\n<text text-anchor=\"start\" x=\"429.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"424.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [128, 5]</text>\r\n<text text-anchor=\"start\" x=\"426\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 6->7 -->\r\n<g id=\"edge7\" class=\"edge\"><title>6->7</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M638.87,-945.992C614.906,-933.641 586.954,-919.234 560.901,-905.806\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"562.266,-902.572 551.774,-901.102 559.059,-908.794 562.266,-902.572\"/>\r\n</g>\r\n<!-- 18 -->\r\n<g id=\"node19\" class=\"node\"><title>18</title>\r\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M769.5,-901C769.5,-901 630.5,-901 630.5,-901 624.5,-901 618.5,-895 618.5,-889 618.5,-889 618.5,-830 618.5,-830 618.5,-824 624.5,-818 630.5,-818 630.5,-818 769.5,-818 769.5,-818 775.5,-818 781.5,-824 781.5,-830 781.5,-830 781.5,-889 781.5,-889 781.5,-895 775.5,-901 769.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"626.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.185</text>\r\n<text text-anchor=\"start\" x=\"650\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.216</text>\r\n<text text-anchor=\"start\" x=\"656.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"655.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 28]</text>\r\n<text text-anchor=\"start\" x=\"645\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 6->18 -->\r\n<g id=\"edge18\" class=\"edge\"><title>6->18</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M700,-936.907C700,-928.649 700,-919.864 700,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"703.5,-911.021 700,-901.021 696.5,-911.021 703.5,-911.021\"/>\r\n</g>\r\n<!-- 8 -->\r\n<g id=\"node9\" class=\"node\"><title>8</title>\r\n<path fill=\"#f8dbc6\" stroke=\"black\" d=\"M386.5,-782C386.5,-782 209.5,-782 209.5,-782 203.5,-782 197.5,-776 197.5,-770 197.5,-770 197.5,-711 197.5,-711 197.5,-705 203.5,-699 209.5,-699 209.5,-699 386.5,-699 386.5,-699 392.5,-699 398.5,-705 398.5,-711 398.5,-711 398.5,-770 398.5,-770 398.5,-776 392.5,-782 386.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"205.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"252\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.98</text>\r\n<text text-anchor=\"start\" x=\"258.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"257.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 5]</text>\r\n<text text-anchor=\"start\" x=\"251\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7->8 -->\r\n<g id=\"edge8\" class=\"edge\"><title>7->8</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M412.285,-817.907C397.761,-808.197 382.147,-797.758 367.269,-787.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"368.867,-784.669 358.608,-782.021 364.976,-790.488 368.867,-784.669\"/>\r\n</g>\r\n<!-- 17 -->\r\n<g id=\"node18\" class=\"node\"><title>17</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M517.5,-774.5C517.5,-774.5 428.5,-774.5 428.5,-774.5 422.5,-774.5 416.5,-768.5 416.5,-762.5 416.5,-762.5 416.5,-718.5 416.5,-718.5 416.5,-712.5 422.5,-706.5 428.5,-706.5 428.5,-706.5 517.5,-706.5 517.5,-706.5 523.5,-706.5 529.5,-712.5 529.5,-718.5 529.5,-718.5 529.5,-762.5 529.5,-762.5 529.5,-768.5 523.5,-774.5 517.5,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"431\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"429.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 77</text>\r\n<text text-anchor=\"start\" x=\"424.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [121, 0]</text>\r\n<text text-anchor=\"start\" x=\"426\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 7->17 -->\r\n<g id=\"edge17\" class=\"edge\"><title>7->17</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M473,-817.907C473,-807.204 473,-795.615 473,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"476.5,-784.667 473,-774.667 469.5,-784.667 476.5,-784.667\"/>\r\n</g>\r\n<!-- 9 -->\r\n<g id=\"node10\" class=\"node\"><title>9</title>\r\n<path fill=\"#88c4ef\" stroke=\"black\" d=\"M233.5,-663C233.5,-663 54.5,-663 54.5,-663 48.5,-663 42.5,-657 42.5,-651 42.5,-651 42.5,-592 42.5,-592 42.5,-586 48.5,-580 54.5,-580 54.5,-580 233.5,-580 233.5,-580 239.5,-580 245.5,-586 245.5,-592 245.5,-592 245.5,-651 245.5,-651 245.5,-657 239.5,-663 233.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"50.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\r\n<text text-anchor=\"start\" x=\"94\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"104.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"103.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 5]</text>\r\n<text text-anchor=\"start\" x=\"89\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 8->9 -->\r\n<g id=\"edge9\" class=\"edge\"><title>8->9</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M244.57,-698.907C231.909,-689.288 218.306,-678.953 205.324,-669.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"207.415,-666.283 197.335,-663.021 203.18,-671.857 207.415,-666.283\"/>\r\n</g>\r\n<!-- 16 -->\r\n<g id=\"node17\" class=\"node\"><title>16</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M362,-655.5C362,-655.5 276,-655.5 276,-655.5 270,-655.5 264,-649.5 264,-643.5 264,-643.5 264,-599.5 264,-599.5 264,-593.5 270,-587.5 276,-587.5 276,-587.5 362,-587.5 362,-587.5 368,-587.5 374,-593.5 374,-599.5 374,-599.5 374,-643.5 374,-643.5 374,-649.5 368,-655.5 362,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"277\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"279.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"278.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"272\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 8->16 -->\r\n<g id=\"edge16\" class=\"edge\"><title>8->16</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M305.286,-698.907C307.207,-688.204 309.287,-676.615 311.232,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"314.725,-666.128 313.047,-655.667 307.835,-664.891 314.725,-666.128\"/>\r\n</g>\r\n<!-- 10 -->\r\n<g id=\"node11\" class=\"node\"><title>10</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M98,-536.5C98,-536.5 12,-536.5 12,-536.5 6,-536.5 0,-530.5 0,-524.5 0,-524.5 0,-480.5 0,-480.5 0,-474.5 6,-468.5 12,-468.5 12,-468.5 98,-468.5 98,-468.5 104,-468.5 110,-474.5 110,-480.5 110,-480.5 110,-524.5 110,-524.5 110,-530.5 104,-536.5 98,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"13\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"15.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"14.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 9->10 -->\r\n<g id=\"edge10\" class=\"edge\"><title>9->10</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M113.122,-579.907C104.476,-568.542 95.0716,-556.178 86.3963,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"89.0695,-542.507 80.2296,-536.667 83.4982,-546.745 89.0695,-542.507\"/>\r\n</g>\r\n<!-- 11 -->\r\n<g id=\"node12\" class=\"node\"><title>11</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M325.5,-544C325.5,-544 140.5,-544 140.5,-544 134.5,-544 128.5,-538 128.5,-532 128.5,-532 128.5,-473 128.5,-473 128.5,-467 134.5,-461 140.5,-461 140.5,-461 325.5,-461 325.5,-461 331.5,-461 337.5,-467 337.5,-473 337.5,-473 337.5,-532 337.5,-532 337.5,-538 331.5,-544 325.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"136.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"187\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"193.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"192.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"178\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 9->11 -->\r\n<g id=\"edge11\" class=\"edge\"><title>9->11</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M174.878,-579.907C181.712,-570.923 189.021,-561.315 196.069,-552.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"198.908,-554.099 202.176,-544.021 193.336,-549.861 198.908,-554.099\"/>\r\n</g>\r\n<!-- 12 -->\r\n<g id=\"node13\" class=\"node\"><title>12</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M208,-425C208,-425 120,-425 120,-425 114,-425 108,-419 108,-413 108,-413 108,-354 108,-354 108,-348 114,-342 120,-342 120,-342 208,-342 208,-342 214,-342 220,-348 220,-354 220,-354 220,-413 220,-413 220,-419 214,-425 208,-425\"/>\r\n<text text-anchor=\"start\" x=\"116\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"122\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"124.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"123.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"117\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 11->12 -->\r\n<g id=\"edge12\" class=\"edge\"><title>11->12</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M209.061,-460.907C203.923,-452.195 198.439,-442.897 193.129,-433.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"195.992,-431.857 187.897,-425.021 189.962,-435.412 195.992,-431.857\"/>\r\n</g>\r\n<!-- 15 -->\r\n<g id=\"node16\" class=\"node\"><title>15</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M352,-417.5C352,-417.5 250,-417.5 250,-417.5 244,-417.5 238,-411.5 238,-405.5 238,-405.5 238,-361.5 238,-361.5 238,-355.5 244,-349.5 250,-349.5 250,-349.5 352,-349.5 352,-349.5 358,-349.5 364,-355.5 364,-361.5 364,-361.5 364,-405.5 364,-405.5 364,-411.5 358,-417.5 352,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"259\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"261.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"260.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"246\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 11->15 -->\r\n<g id=\"edge15\" class=\"edge\"><title>11->15</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M256.592,-460.907C263.07,-449.763 270.105,-437.658 276.625,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"279.725,-428.072 281.723,-417.667 273.672,-424.554 279.725,-428.072\"/>\r\n</g>\r\n<!-- 13 -->\r\n<g id=\"node14\" class=\"node\"><title>13</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M147,-298.5C147,-298.5 45,-298.5 45,-298.5 39,-298.5 33,-292.5 33,-286.5 33,-286.5 33,-242.5 33,-242.5 33,-236.5 39,-230.5 45,-230.5 45,-230.5 147,-230.5 147,-230.5 153,-230.5 159,-236.5 159,-242.5 159,-242.5 159,-286.5 159,-286.5 159,-292.5 153,-298.5 147,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"54\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"56.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"55.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"41\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 12->13 -->\r\n<g id=\"edge13\" class=\"edge\"><title>12->13</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M140.408,-341.907C133.93,-330.763 126.895,-318.658 120.375,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"123.328,-305.554 115.277,-298.667 117.275,-309.072 123.328,-305.554\"/>\r\n</g>\r\n<!-- 14 -->\r\n<g id=\"node15\" class=\"node\"><title>14</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M275,-298.5C275,-298.5 189,-298.5 189,-298.5 183,-298.5 177,-292.5 177,-286.5 177,-286.5 177,-242.5 177,-242.5 177,-236.5 183,-230.5 189,-230.5 189,-230.5 275,-230.5 275,-230.5 281,-230.5 287,-236.5 287,-242.5 287,-242.5 287,-286.5 287,-286.5 287,-292.5 281,-298.5 275,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"190\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"192.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"191.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"185\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 12->14 -->\r\n<g id=\"edge14\" class=\"edge\"><title>12->14</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M187.592,-341.907C194.07,-330.763 201.105,-318.658 207.625,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"210.725,-309.072 212.723,-298.667 204.672,-305.554 210.725,-309.072\"/>\r\n</g>\r\n<!-- 19 -->\r\n<g id=\"node20\" class=\"node\"><title>19</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M646,-782C646,-782 560,-782 560,-782 554,-782 548,-776 548,-770 548,-770 548,-711 548,-711 548,-705 554,-699 560,-699 560,-699 646,-699 646,-699 652,-699 658,-705 658,-711 658,-711 658,-770 658,-770 658,-776 652,-782 646,-782\"/>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 20.0</text>\r\n<text text-anchor=\"start\" x=\"561\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"562.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"556\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 18->19 -->\r\n<g id=\"edge19\" class=\"edge\"><title>18->19</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M666.346,-817.907C658.823,-808.832 650.771,-799.121 643.018,-789.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"645.671,-787.485 636.594,-782.021 640.282,-791.953 645.671,-787.485\"/>\r\n</g>\r\n<!-- 22 -->\r\n<g id=\"node23\" class=\"node\"><title>22</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M790,-774.5C790,-774.5 688,-774.5 688,-774.5 682,-774.5 676,-768.5 676,-762.5 676,-762.5 676,-718.5 676,-718.5 676,-712.5 682,-706.5 688,-706.5 688,-706.5 790,-706.5 790,-706.5 796,-706.5 802,-712.5 802,-718.5 802,-718.5 802,-762.5 802,-762.5 802,-768.5 796,-774.5 790,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"697\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"695.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"694.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"684\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 18->22 -->\r\n<g id=\"edge22\" class=\"edge\"><title>18->22</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M713.531,-817.907C717.135,-807.094 721.041,-795.376 724.686,-784.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"728.102,-785.261 727.944,-774.667 721.462,-783.047 728.102,-785.261\"/>\r\n</g>\r\n<!-- 20 -->\r\n<g id=\"node21\" class=\"node\"><title>20</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M510,-655.5C510,-655.5 424,-655.5 424,-655.5 418,-655.5 412,-649.5 412,-643.5 412,-643.5 412,-599.5 412,-599.5 412,-593.5 418,-587.5 424,-587.5 424,-587.5 510,-587.5 510,-587.5 516,-587.5 522,-593.5 522,-599.5 522,-599.5 522,-643.5 522,-643.5 522,-649.5 516,-655.5 510,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"425\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"427.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"426.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"420\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 19->20 -->\r\n<g id=\"edge20\" class=\"edge\"><title>19->20</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M555.815,-698.907C542.091,-687.101 527.115,-674.217 513.437,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"515.416,-659.535 505.553,-655.667 510.851,-664.842 515.416,-659.535\"/>\r\n</g>\r\n<!-- 21 -->\r\n<g id=\"node22\" class=\"node\"><title>21</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M654,-655.5C654,-655.5 552,-655.5 552,-655.5 546,-655.5 540,-649.5 540,-643.5 540,-643.5 540,-599.5 540,-599.5 540,-593.5 546,-587.5 552,-587.5 552,-587.5 654,-587.5 654,-587.5 660,-587.5 666,-593.5 666,-599.5 666,-599.5 666,-643.5 666,-643.5 666,-649.5 660,-655.5 654,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"561\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"563.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"562.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"548\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 19->21 -->\r\n<g id=\"edge21\" class=\"edge\"><title>19->21</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M603,-698.907C603,-688.204 603,-676.615 603,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"606.5,-665.667 603,-655.667 599.5,-665.667 606.5,-665.667\"/>\r\n</g>\r\n<!-- 24 -->\r\n<g id=\"node25\" class=\"node\"><title>24</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M938,-893.5C938,-893.5 852,-893.5 852,-893.5 846,-893.5 840,-887.5 840,-881.5 840,-881.5 840,-837.5 840,-837.5 840,-831.5 846,-825.5 852,-825.5 852,-825.5 938,-825.5 938,-825.5 944,-825.5 950,-831.5 950,-837.5 950,-837.5 950,-881.5 950,-881.5 950,-887.5 944,-893.5 938,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"853\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"855.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"854.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"848\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 23->24 -->\r\n<g id=\"edge24\" class=\"edge\"><title>23->24</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M939.408,-936.907C932.93,-925.763 925.895,-913.658 919.375,-902.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"922.328,-900.554 914.277,-893.667 916.275,-904.072 922.328,-900.554\"/>\r\n</g>\r\n<!-- 25 -->\r\n<g id=\"node26\" class=\"node\"><title>25</title>\r\n<path fill=\"#42a1e6\" stroke=\"black\" d=\"M1082,-901C1082,-901 980,-901 980,-901 974,-901 968,-895 968,-889 968,-889 968,-830 968,-830 968,-824 974,-818 980,-818 980,-818 1082,-818 1082,-818 1088,-818 1094,-824 1094,-830 1094,-830 1094,-889 1094,-889 1094,-895 1088,-901 1082,-901\"/>\r\n<text text-anchor=\"start\" x=\"981.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"981\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.254</text>\r\n<text text-anchor=\"start\" x=\"983.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\r\n<text text-anchor=\"start\" x=\"982.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 157]</text>\r\n<text text-anchor=\"start\" x=\"976\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 23->25 -->\r\n<g id=\"edge25\" class=\"edge\"><title>23->25</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M986.592,-936.907C991.656,-928.195 997.06,-918.897 1002.29,-909.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1005.45,-911.425 1007.45,-901.021 999.398,-907.908 1005.45,-911.425\"/>\r\n</g>\r\n<!-- 26 -->\r\n<g id=\"node27\" class=\"node\"><title>26</title>\r\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M944.5,-782C944.5,-782 833.5,-782 833.5,-782 827.5,-782 821.5,-776 821.5,-770 821.5,-770 821.5,-711 821.5,-711 821.5,-705 827.5,-699 833.5,-699 833.5,-699 944.5,-699 944.5,-699 950.5,-699 956.5,-705 956.5,-711 956.5,-711 956.5,-770 956.5,-770 956.5,-776 950.5,-782 944.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"829.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.975</text>\r\n<text text-anchor=\"start\" x=\"839\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.203</text>\r\n<text text-anchor=\"start\" x=\"841.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 102</text>\r\n<text text-anchor=\"start\" x=\"840.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 153]</text>\r\n<text text-anchor=\"start\" x=\"834\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 25->26 -->\r\n<g id=\"edge26\" class=\"edge\"><title>25->26</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M981.734,-817.907C970.279,-808.469 957.989,-798.343 946.224,-788.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"948.123,-785.679 938.179,-782.021 943.671,-791.081 948.123,-785.679\"/>\r\n</g>\r\n<!-- 37 -->\r\n<g id=\"node38\" class=\"node\"><title>37</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M1155.5,-782C1155.5,-782 986.5,-782 986.5,-782 980.5,-782 974.5,-776 974.5,-770 974.5,-770 974.5,-711 974.5,-711 974.5,-705 980.5,-699 986.5,-699 986.5,-699 1155.5,-699 1155.5,-699 1161.5,-699 1167.5,-705 1167.5,-711 1167.5,-711 1167.5,-770 1167.5,-770 1167.5,-776 1161.5,-782 1155.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"982.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 109.5</text>\r\n<text text-anchor=\"start\" x=\"1021\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"1031.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"1030.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\r\n<text text-anchor=\"start\" x=\"1016\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 25->37 -->\r\n<g id=\"edge37\" class=\"edge\"><title>25->37</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1044.88,-817.907C1047.76,-809.468 1050.84,-800.477 1053.82,-791.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1057.22,-792.615 1057.15,-782.021 1050.6,-790.351 1057.22,-792.615\"/>\r\n</g>\r\n<!-- 27 -->\r\n<g id=\"node28\" class=\"node\"><title>27</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M798,-655.5C798,-655.5 696,-655.5 696,-655.5 690,-655.5 684,-649.5 684,-643.5 684,-643.5 684,-599.5 684,-599.5 684,-593.5 690,-587.5 696,-587.5 696,-587.5 798,-587.5 798,-587.5 804,-587.5 810,-593.5 810,-599.5 810,-599.5 810,-643.5 810,-643.5 810,-649.5 804,-655.5 798,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"705\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"703.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\r\n<text text-anchor=\"start\" x=\"702.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 24]</text>\r\n<text text-anchor=\"start\" x=\"692\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26->27 -->\r\n<g id=\"edge27\" class=\"edge\"><title>26->27</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M839.734,-698.907C825.27,-686.99 809.475,-673.976 795.086,-662.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"797.197,-659.325 787.254,-655.667 792.746,-664.727 797.197,-659.325\"/>\r\n</g>\r\n<!-- 28 -->\r\n<g id=\"node29\" class=\"node\"><title>28</title>\r\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M942,-663C942,-663 840,-663 840,-663 834,-663 828,-657 828,-651 828,-651 828,-592 828,-592 828,-586 834,-580 840,-580 840,-580 942,-580 942,-580 948,-580 954,-586 954,-592 954,-592 954,-651 954,-651 954,-657 948,-663 942,-663\"/>\r\n<text text-anchor=\"start\" x=\"846\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 52.0</text>\r\n<text text-anchor=\"start\" x=\"845\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.23</text>\r\n<text text-anchor=\"start\" x=\"847.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"842.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 129]</text>\r\n<text text-anchor=\"start\" x=\"836\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 26->28 -->\r\n<g id=\"edge28\" class=\"edge\"><title>26->28</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M889.694,-698.907C889.837,-690.558 889.989,-681.671 890.136,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"893.636,-673.079 890.307,-663.021 886.637,-672.959 893.636,-673.079\"/>\r\n</g>\r\n<!-- 29 -->\r\n<g id=\"node30\" class=\"node\"><title>29</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M857,-536.5C857,-536.5 755,-536.5 755,-536.5 749,-536.5 743,-530.5 743,-524.5 743,-524.5 743,-480.5 743,-480.5 743,-474.5 749,-468.5 755,-468.5 755,-468.5 857,-468.5 857,-468.5 863,-468.5 869,-474.5 869,-480.5 869,-480.5 869,-524.5 869,-524.5 869,-530.5 863,-536.5 857,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"764\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"762.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 71</text>\r\n<text text-anchor=\"start\" x=\"757.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 109]</text>\r\n<text text-anchor=\"start\" x=\"751\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 28->29 -->\r\n<g id=\"edge29\" class=\"edge\"><title>28->29</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M861.51,-579.907C853.253,-568.542 844.271,-556.178 835.985,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"838.805,-542.7 830.096,-536.667 833.142,-546.814 838.805,-542.7\"/>\r\n</g>\r\n<!-- 30 -->\r\n<g id=\"node31\" class=\"node\"><title>30</title>\r\n<path fill=\"#6ab6ec\" stroke=\"black\" d=\"M1051,-544C1051,-544 899,-544 899,-544 893,-544 887,-538 887,-532 887,-532 887,-473 887,-473 887,-467 893,-461 899,-461 899,-461 1051,-461 1051,-461 1057,-461 1063,-467 1063,-473 1063,-473 1063,-532 1063,-532 1063,-538 1057,-544 1051,-544\"/>\r\n<text text-anchor=\"start\" x=\"895\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"925\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\r\n<text text-anchor=\"start\" x=\"931.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"930.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 20]</text>\r\n<text text-anchor=\"start\" x=\"920\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 28->30 -->\r\n<g id=\"edge30\" class=\"edge\"><title>28->30</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M920.143,-579.907C926.529,-571.014 933.352,-561.509 939.942,-552.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"942.919,-554.185 945.908,-544.021 937.233,-550.103 942.919,-554.185\"/>\r\n</g>\r\n<!-- 31 -->\r\n<g id=\"node32\" class=\"node\"><title>31</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M928,-417.5C928,-417.5 826,-417.5 826,-417.5 820,-417.5 814,-411.5 814,-405.5 814,-405.5 814,-361.5 814,-361.5 814,-355.5 820,-349.5 826,-349.5 826,-349.5 928,-349.5 928,-349.5 934,-349.5 940,-355.5 940,-361.5 940,-361.5 940,-405.5 940,-405.5 940,-411.5 934,-417.5 928,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"835\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"837.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"832.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\r\n<text text-anchor=\"start\" x=\"822\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 30->31 -->\r\n<g id=\"edge31\" class=\"edge\"><title>30->31</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M940.999,-460.907C931.387,-449.432 920.923,-436.938 911.293,-425.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"913.885,-423.086 904.781,-417.667 908.519,-427.58 913.885,-423.086\"/>\r\n</g>\r\n<!-- 32 -->\r\n<g id=\"node33\" class=\"node\"><title>32</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1176,-425C1176,-425 970,-425 970,-425 964,-425 958,-419 958,-413 958,-413 958,-354 958,-354 958,-348 964,-342 970,-342 970,-342 1176,-342 1176,-342 1182,-342 1188,-348 1188,-354 1188,-354 1188,-413 1188,-413 1188,-419 1182,-425 1176,-425\"/>\r\n<text text-anchor=\"start\" x=\"966\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1031\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1033.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1032.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 5]</text>\r\n<text text-anchor=\"start\" x=\"1026\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 30->32 -->\r\n<g id=\"edge32\" class=\"edge\"><title>30->32</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1009,-460.907C1016.6,-451.832 1024.74,-442.121 1032.57,-432.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1035.32,-434.934 1039.06,-425.021 1029.96,-430.439 1035.32,-434.934\"/>\r\n</g>\r\n<!-- 33 -->\r\n<g id=\"node34\" class=\"node\"><title>33</title>\r\n<path fill=\"#f5cdb0\" stroke=\"black\" d=\"M1050,-306C1050,-306 958,-306 958,-306 952,-306 946,-300 946,-294 946,-294 946,-235 946,-235 946,-229 952,-223 958,-223 958,-223 1050,-223 1050,-223 1056,-223 1062,-229 1062,-235 1062,-235 1062,-294 1062,-294 1062,-300 1056,-306 1050,-306\"/>\r\n<text text-anchor=\"start\" x=\"955.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"954\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.954</text>\r\n<text text-anchor=\"start\" x=\"964.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"963.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 3]</text>\r\n<text text-anchor=\"start\" x=\"957\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 32->33 -->\r\n<g id=\"edge33\" class=\"edge\"><title>32->33</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1049.06,-341.907C1043.92,-333.195 1038.44,-323.897 1033.13,-314.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1035.99,-312.857 1027.9,-306.021 1029.96,-316.412 1035.99,-312.857\"/>\r\n</g>\r\n<!-- 36 -->\r\n<g id=\"node37\" class=\"node\"><title>36</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1194,-298.5C1194,-298.5 1092,-298.5 1092,-298.5 1086,-298.5 1080,-292.5 1080,-286.5 1080,-286.5 1080,-242.5 1080,-242.5 1080,-236.5 1086,-230.5 1092,-230.5 1092,-230.5 1194,-230.5 1194,-230.5 1200,-230.5 1206,-236.5 1206,-242.5 1206,-242.5 1206,-286.5 1206,-286.5 1206,-292.5 1200,-298.5 1194,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"1101\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1103.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1102.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"1088\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 32->36 -->\r\n<g id=\"edge36\" class=\"edge\"><title>32->36</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1097.29,-341.907C1103.95,-330.763 1111.2,-318.658 1117.91,-307.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1121.03,-309.045 1123.16,-298.667 1115.02,-305.451 1121.03,-309.045\"/>\r\n</g>\r\n<!-- 34 -->\r\n<g id=\"node35\" class=\"node\"><title>34</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M979,-179.5C979,-179.5 893,-179.5 893,-179.5 887,-179.5 881,-173.5 881,-167.5 881,-167.5 881,-123.5 881,-123.5 881,-117.5 887,-111.5 893,-111.5 893,-111.5 979,-111.5 979,-111.5 985,-111.5 991,-117.5 991,-123.5 991,-123.5 991,-167.5 991,-167.5 991,-173.5 985,-179.5 979,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"894\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"896.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"895.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"889\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 33->34 -->\r\n<g id=\"edge34\" class=\"edge\"><title>33->34</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M980.408,-222.907C973.93,-211.763 966.895,-199.658 960.375,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"963.328,-186.554 955.277,-179.667 957.275,-190.072 963.328,-186.554\"/>\r\n</g>\r\n<!-- 35 -->\r\n<g id=\"node36\" class=\"node\"><title>35</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1123,-179.5C1123,-179.5 1021,-179.5 1021,-179.5 1015,-179.5 1009,-173.5 1009,-167.5 1009,-167.5 1009,-123.5 1009,-123.5 1009,-117.5 1015,-111.5 1021,-111.5 1021,-111.5 1123,-111.5 1123,-111.5 1129,-111.5 1135,-117.5 1135,-123.5 1135,-123.5 1135,-167.5 1135,-167.5 1135,-173.5 1129,-179.5 1123,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"1030\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1032.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1031.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"1017\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 33->35 -->\r\n<g id=\"edge35\" class=\"edge\"><title>33->35</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1027.59,-222.907C1034.07,-211.763 1041.1,-199.658 1047.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1050.72,-190.072 1052.72,-179.667 1044.67,-186.554 1050.72,-190.072\"/>\r\n</g>\r\n<!-- 38 -->\r\n<g id=\"node39\" class=\"node\"><title>38</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1086,-655.5C1086,-655.5 984,-655.5 984,-655.5 978,-655.5 972,-649.5 972,-643.5 972,-643.5 972,-599.5 972,-599.5 972,-593.5 978,-587.5 984,-587.5 984,-587.5 1086,-587.5 1086,-587.5 1092,-587.5 1098,-593.5 1098,-599.5 1098,-599.5 1098,-643.5 1098,-643.5 1098,-649.5 1092,-655.5 1086,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"993\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"995.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"994.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"980\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 37->38 -->\r\n<g id=\"edge38\" class=\"edge\"><title>37->38</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1058.51,-698.907C1055.18,-688.094 1051.58,-676.376 1048.21,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1051.49,-664.195 1045.21,-655.667 1044.8,-666.254 1051.49,-664.195\"/>\r\n</g>\r\n<!-- 39 -->\r\n<g id=\"node40\" class=\"node\"><title>39</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1214,-655.5C1214,-655.5 1128,-655.5 1128,-655.5 1122,-655.5 1116,-649.5 1116,-643.5 1116,-643.5 1116,-599.5 1116,-599.5 1116,-593.5 1122,-587.5 1128,-587.5 1128,-587.5 1214,-587.5 1214,-587.5 1220,-587.5 1226,-593.5 1226,-599.5 1226,-599.5 1226,-643.5 1226,-643.5 1226,-649.5 1220,-655.5 1214,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1129\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1131.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1130.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"1124\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 37->39 -->\r\n<g id=\"edge39\" class=\"edge\"><title>37->39</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1105.69,-698.907C1115.5,-687.432 1126.18,-674.938 1136.01,-663.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1138.82,-665.543 1142.65,-655.667 1133.49,-660.995 1138.82,-665.543\"/>\r\n</g>\r\n<!-- 42 -->\r\n<g id=\"node43\" class=\"node\"><title>42</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M1774,-1139C1774,-1139 1640,-1139 1640,-1139 1634,-1139 1628,-1133 1628,-1127 1628,-1127 1628,-1068 1628,-1068 1628,-1062 1634,-1056 1640,-1056 1640,-1056 1774,-1056 1774,-1056 1780,-1056 1786,-1062 1786,-1068 1786,-1068 1786,-1127 1786,-1127 1786,-1133 1780,-1139 1774,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1636\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 22.5</text>\r\n<text text-anchor=\"start\" x=\"1657\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"1663.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"1658.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 20]</text>\r\n<text text-anchor=\"start\" x=\"1660\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41->42 -->\r\n<g id=\"edge42\" class=\"edge\"><title>41->42</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1765.77,-1174.91C1758.86,-1165.92 1751.47,-1156.32 1744.35,-1147.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1747.04,-1144.81 1738.17,-1139.02 1741.49,-1149.08 1747.04,-1144.81\"/>\r\n</g>\r\n<!-- 57 -->\r\n<g id=\"node58\" class=\"node\"><title>57</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M1932,-1139C1932,-1139 1840,-1139 1840,-1139 1834,-1139 1828,-1133 1828,-1127 1828,-1127 1828,-1068 1828,-1068 1828,-1062 1834,-1056 1840,-1056 1840,-1056 1932,-1056 1932,-1056 1938,-1056 1944,-1062 1944,-1068 1944,-1068 1944,-1127 1944,-1127 1944,-1133 1938,-1139 1932,-1139\"/>\r\n<text text-anchor=\"start\" x=\"1845\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.0</text>\r\n<text text-anchor=\"start\" x=\"1836\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.118</text>\r\n<text text-anchor=\"start\" x=\"1838.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 243</text>\r\n<text text-anchor=\"start\" x=\"1837.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [372, 6]</text>\r\n<text text-anchor=\"start\" x=\"1839\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 41->57 -->\r\n<g id=\"edge57\" class=\"edge\"><title>41->57</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1827.88,-1174.91C1834.71,-1165.92 1842.02,-1156.32 1849.07,-1147.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1851.91,-1149.1 1855.18,-1139.02 1846.34,-1144.86 1851.91,-1149.1\"/>\r\n</g>\r\n<!-- 43 -->\r\n<g id=\"node44\" class=\"node\"><title>43</title>\r\n<path fill=\"#a6d3f3\" stroke=\"black\" d=\"M1621.5,-1020C1621.5,-1020 1506.5,-1020 1506.5,-1020 1500.5,-1020 1494.5,-1014 1494.5,-1008 1494.5,-1008 1494.5,-949 1494.5,-949 1494.5,-943 1500.5,-937 1506.5,-937 1506.5,-937 1621.5,-937 1621.5,-937 1627.5,-937 1633.5,-943 1633.5,-949 1633.5,-949 1633.5,-1008 1633.5,-1008 1633.5,-1014 1627.5,-1020 1621.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1502.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1514\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.938</text>\r\n<text text-anchor=\"start\" x=\"1520.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"1515.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 20]</text>\r\n<text text-anchor=\"start\" x=\"1509\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 42->43 -->\r\n<g id=\"edge43\" class=\"edge\"><title>42->43</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1657.39,-1055.91C1645.74,-1046.38 1633.24,-1036.15 1621.29,-1026.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1623.48,-1023.64 1613.53,-1020.02 1619.05,-1029.06 1623.48,-1023.64\"/>\r\n</g>\r\n<!-- 56 -->\r\n<g id=\"node57\" class=\"node\"><title>56</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1750,-1012.5C1750,-1012.5 1664,-1012.5 1664,-1012.5 1658,-1012.5 1652,-1006.5 1652,-1000.5 1652,-1000.5 1652,-956.5 1652,-956.5 1652,-950.5 1658,-944.5 1664,-944.5 1664,-944.5 1750,-944.5 1750,-944.5 1756,-944.5 1762,-950.5 1762,-956.5 1762,-956.5 1762,-1000.5 1762,-1000.5 1762,-1006.5 1756,-1012.5 1750,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"1665\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1663.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"1662.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"1660\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 42->56 -->\r\n<g id=\"edge56\" class=\"edge\"><title>42->56</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1707,-1055.91C1707,-1045.2 1707,-1033.62 1707,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1710.5,-1022.67 1707,-1012.67 1703.5,-1022.67 1710.5,-1022.67\"/>\r\n</g>\r\n<!-- 44 -->\r\n<g id=\"node45\" class=\"node\"><title>44</title>\r\n<path fill=\"#a1d1f3\" stroke=\"black\" d=\"M1422,-901C1422,-901 1320,-901 1320,-901 1314,-901 1308,-895 1308,-889 1308,-889 1308,-830 1308,-830 1308,-824 1314,-818 1320,-818 1320,-818 1422,-818 1422,-818 1428,-818 1434,-824 1434,-830 1434,-830 1434,-889 1434,-889 1434,-895 1428,-901 1422,-901\"/>\r\n<text text-anchor=\"start\" x=\"1322.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"1321\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.929</text>\r\n<text text-anchor=\"start\" x=\"1327.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"1322.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 19]</text>\r\n<text text-anchor=\"start\" x=\"1316\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 43->44 -->\r\n<g id=\"edge44\" class=\"edge\"><title>43->44</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1497.04,-936.907C1479.54,-926.301 1460.61,-914.825 1442.87,-904.071\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1444.64,-901.047 1434.27,-898.856 1441.01,-907.033 1444.64,-901.047\"/>\r\n</g>\r\n<!-- 53 -->\r\n<g id=\"node54\" class=\"node\"><title>53</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1700,-901C1700,-901 1464,-901 1464,-901 1458,-901 1452,-895 1452,-889 1452,-889 1452,-830 1452,-830 1452,-824 1458,-818 1464,-818 1464,-818 1700,-818 1700,-818 1706,-818 1712,-824 1712,-830 1712,-830 1712,-889 1712,-889 1712,-895 1706,-901 1700,-901\"/>\r\n<text text-anchor=\"start\" x=\"1460\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.375</text>\r\n<text text-anchor=\"start\" x=\"1540\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1542.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1541.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1535\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 43->53 -->\r\n<g id=\"edge53\" class=\"edge\"><title>43->53</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1570.25,-936.907C1571.53,-928.558 1572.9,-919.671 1574.23,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1577.7,-911.437 1575.77,-901.021 1570.79,-910.372 1577.7,-911.437\"/>\r\n</g>\r\n<!-- 45 -->\r\n<g id=\"node46\" class=\"node\"><title>45</title>\r\n<path fill=\"#fae6d7\" stroke=\"black\" d=\"M1353,-782C1353,-782 1261,-782 1261,-782 1255,-782 1249,-776 1249,-770 1249,-770 1249,-711 1249,-711 1249,-705 1255,-699 1261,-699 1261,-699 1353,-699 1353,-699 1359,-699 1365,-705 1365,-711 1365,-711 1365,-770 1365,-770 1365,-776 1359,-782 1353,-782\"/>\r\n<text text-anchor=\"start\" x=\"1262\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.5</text>\r\n<text text-anchor=\"start\" x=\"1257\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\r\n<text text-anchor=\"start\" x=\"1263.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\r\n<text text-anchor=\"start\" x=\"1262.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 8]</text>\r\n<text text-anchor=\"start\" x=\"1260\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 44->45 -->\r\n<g id=\"edge45\" class=\"edge\"><title>44->45</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1348.8,-817.907C1344.03,-809.195 1338.94,-799.897 1334.02,-790.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1337.03,-789.114 1329.17,-782.021 1330.89,-792.474 1337.03,-789.114\"/>\r\n</g>\r\n<!-- 52 -->\r\n<g id=\"node53\" class=\"node\"><title>52</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1497,-774.5C1497,-774.5 1395,-774.5 1395,-774.5 1389,-774.5 1383,-768.5 1383,-762.5 1383,-762.5 1383,-718.5 1383,-718.5 1383,-712.5 1389,-706.5 1395,-706.5 1395,-706.5 1497,-706.5 1497,-706.5 1503,-706.5 1509,-712.5 1509,-718.5 1509,-718.5 1509,-762.5 1509,-762.5 1509,-768.5 1503,-774.5 1497,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1404\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1406.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"1401.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\r\n<text text-anchor=\"start\" x=\"1391\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 44->52 -->\r\n<g id=\"edge52\" class=\"edge\"><title>44->52</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1397.02,-817.907C1404.24,-806.652 1412.08,-794.418 1419.33,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1422.29,-784.975 1424.74,-774.667 1416.4,-781.197 1422.29,-784.975\"/>\r\n</g>\r\n<!-- 46 -->\r\n<g id=\"node47\" class=\"node\"><title>46</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1358,-655.5C1358,-655.5 1256,-655.5 1256,-655.5 1250,-655.5 1244,-649.5 1244,-643.5 1244,-643.5 1244,-599.5 1244,-599.5 1244,-593.5 1250,-587.5 1256,-587.5 1256,-587.5 1358,-587.5 1358,-587.5 1364,-587.5 1370,-593.5 1370,-599.5 1370,-599.5 1370,-643.5 1370,-643.5 1370,-649.5 1364,-655.5 1358,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"1265\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1267.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1266.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"1252\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 45->46 -->\r\n<g id=\"edge46\" class=\"edge\"><title>45->46</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1307,-698.907C1307,-688.204 1307,-676.615 1307,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1310.5,-665.667 1307,-655.667 1303.5,-665.667 1310.5,-665.667\"/>\r\n</g>\r\n<!-- 47 -->\r\n<g id=\"node48\" class=\"node\"><title>47</title>\r\n<path fill=\"#e88e4d\" stroke=\"black\" d=\"M1627.5,-663C1627.5,-663 1400.5,-663 1400.5,-663 1394.5,-663 1388.5,-657 1388.5,-651 1388.5,-651 1388.5,-592 1388.5,-592 1388.5,-586 1394.5,-580 1400.5,-580 1400.5,-580 1627.5,-580 1627.5,-580 1633.5,-580 1639.5,-586 1639.5,-592 1639.5,-592 1639.5,-651 1639.5,-651 1639.5,-657 1633.5,-663 1627.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"1396.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.32</text>\r\n<text text-anchor=\"start\" x=\"1464\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.439</text>\r\n<text text-anchor=\"start\" x=\"1474.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"1469.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 1]</text>\r\n<text text-anchor=\"start\" x=\"1467\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 45->47 -->\r\n<g id=\"edge47\" class=\"edge\"><title>45->47</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1365.01,-704.221C1368.05,-702.443 1371.05,-700.694 1374,-699 1391.75,-688.795 1410.91,-678.106 1429.2,-668.064\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1431.01,-671.064 1438.1,-663.191 1427.65,-664.924 1431.01,-671.064\"/>\r\n</g>\r\n<!-- 48 -->\r\n<g id=\"node49\" class=\"node\"><title>48</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1483,-536.5C1483,-536.5 1397,-536.5 1397,-536.5 1391,-536.5 1385,-530.5 1385,-524.5 1385,-524.5 1385,-480.5 1385,-480.5 1385,-474.5 1391,-468.5 1397,-468.5 1397,-468.5 1483,-468.5 1483,-468.5 1489,-468.5 1495,-474.5 1495,-480.5 1495,-480.5 1495,-524.5 1495,-524.5 1495,-530.5 1489,-536.5 1483,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"1398\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1400.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"1399.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"1393\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 47->48 -->\r\n<g id=\"edge48\" class=\"edge\"><title>47->48</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1488.33,-579.907C1481.28,-568.763 1473.62,-556.658 1466.53,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1469.28,-543.248 1460.98,-536.667 1463.36,-546.989 1469.28,-543.248\"/>\r\n</g>\r\n<!-- 49 -->\r\n<g id=\"node50\" class=\"node\"><title>49</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1650.5,-544C1650.5,-544 1525.5,-544 1525.5,-544 1519.5,-544 1513.5,-538 1513.5,-532 1513.5,-532 1513.5,-473 1513.5,-473 1513.5,-467 1519.5,-461 1525.5,-461 1525.5,-461 1650.5,-461 1650.5,-461 1656.5,-461 1662.5,-467 1662.5,-473 1662.5,-473 1662.5,-532 1662.5,-532 1662.5,-538 1656.5,-544 1650.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"1521.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_serror_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"1546\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"1548.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"1547.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"1541\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 47->49 -->\r\n<g id=\"edge49\" class=\"edge\"><title>47->49</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1539.67,-579.907C1545.24,-571.105 1551.19,-561.703 1556.94,-552.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1559.98,-554.343 1562.37,-544.021 1554.07,-550.601 1559.98,-554.343\"/>\r\n</g>\r\n<!-- 50 -->\r\n<g id=\"node51\" class=\"node\"><title>50</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1563,-417.5C1563,-417.5 1477,-417.5 1477,-417.5 1471,-417.5 1465,-411.5 1465,-405.5 1465,-405.5 1465,-361.5 1465,-361.5 1465,-355.5 1471,-349.5 1477,-349.5 1477,-349.5 1563,-349.5 1563,-349.5 1569,-349.5 1575,-355.5 1575,-361.5 1575,-361.5 1575,-405.5 1575,-405.5 1575,-411.5 1569,-417.5 1563,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1478\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1480.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1479.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1473\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 49->50 -->\r\n<g id=\"edge50\" class=\"edge\"><title>49->50</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1564.41,-460.907C1557.93,-449.763 1550.9,-437.658 1544.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1547.33,-424.554 1539.28,-417.667 1541.28,-428.072 1547.33,-424.554\"/>\r\n</g>\r\n<!-- 51 -->\r\n<g id=\"node52\" class=\"node\"><title>51</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1707,-417.5C1707,-417.5 1605,-417.5 1605,-417.5 1599,-417.5 1593,-411.5 1593,-405.5 1593,-405.5 1593,-361.5 1593,-361.5 1593,-355.5 1599,-349.5 1605,-349.5 1605,-349.5 1707,-349.5 1707,-349.5 1713,-349.5 1719,-355.5 1719,-361.5 1719,-361.5 1719,-405.5 1719,-405.5 1719,-411.5 1713,-417.5 1707,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"1614\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1616.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1615.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1601\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 49->51 -->\r\n<g id=\"edge51\" class=\"edge\"><title>49->51</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1611.59,-460.907C1618.07,-449.763 1625.1,-437.658 1631.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1634.72,-428.072 1636.72,-417.667 1628.67,-424.554 1634.72,-428.072\"/>\r\n</g>\r\n<!-- 54 -->\r\n<g id=\"node55\" class=\"node\"><title>54</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1625,-774.5C1625,-774.5 1539,-774.5 1539,-774.5 1533,-774.5 1527,-768.5 1527,-762.5 1527,-762.5 1527,-718.5 1527,-718.5 1527,-712.5 1533,-706.5 1539,-706.5 1539,-706.5 1625,-706.5 1625,-706.5 1631,-706.5 1637,-712.5 1637,-718.5 1637,-718.5 1637,-762.5 1637,-762.5 1637,-768.5 1631,-774.5 1625,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1540\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1542.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1541.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"1535\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 53->54 -->\r\n<g id=\"edge54\" class=\"edge\"><title>53->54</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1582,-817.907C1582,-807.204 1582,-795.615 1582,-784.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1585.5,-784.667 1582,-774.667 1578.5,-784.667 1585.5,-784.667\"/>\r\n</g>\r\n<!-- 55 -->\r\n<g id=\"node56\" class=\"node\"><title>55</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1769,-774.5C1769,-774.5 1667,-774.5 1667,-774.5 1661,-774.5 1655,-768.5 1655,-762.5 1655,-762.5 1655,-718.5 1655,-718.5 1655,-712.5 1661,-706.5 1667,-706.5 1667,-706.5 1769,-706.5 1769,-706.5 1775,-706.5 1781,-712.5 1781,-718.5 1781,-718.5 1781,-762.5 1781,-762.5 1781,-768.5 1775,-774.5 1769,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1676\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1678.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"1677.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"1663\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 53->55 -->\r\n<g id=\"edge55\" class=\"edge\"><title>53->55</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1629.18,-817.907C1642.91,-806.101 1657.89,-793.217 1671.56,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1674.15,-783.842 1679.45,-774.667 1669.58,-778.535 1674.15,-783.842\"/>\r\n</g>\r\n<!-- 58 -->\r\n<g id=\"node59\" class=\"node\"><title>58</title>\r\n<path fill=\"#eda877\" stroke=\"black\" d=\"M1979.5,-1020C1979.5,-1020 1792.5,-1020 1792.5,-1020 1786.5,-1020 1780.5,-1014 1780.5,-1008 1780.5,-1008 1780.5,-949 1780.5,-949 1780.5,-943 1786.5,-937 1792.5,-937 1792.5,-937 1979.5,-937 1979.5,-937 1985.5,-937 1991.5,-943 1991.5,-949 1991.5,-949 1991.5,-1008 1991.5,-1008 1991.5,-1014 1985.5,-1020 1979.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"1788.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"1836\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.792</text>\r\n<text text-anchor=\"start\" x=\"1842.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"1841.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 5]</text>\r\n<text text-anchor=\"start\" x=\"1839\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57->58 -->\r\n<g id=\"edge58\" class=\"edge\"><title>57->58</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1886,-1055.91C1886,-1047.65 1886,-1038.86 1886,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1889.5,-1030.02 1886,-1020.02 1882.5,-1030.02 1889.5,-1030.02\"/>\r\n</g>\r\n<!-- 61 -->\r\n<g id=\"node62\" class=\"node\"><title>61</title>\r\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M2132.5,-1020C2132.5,-1020 2021.5,-1020 2021.5,-1020 2015.5,-1020 2009.5,-1014 2009.5,-1008 2009.5,-1008 2009.5,-949 2009.5,-949 2009.5,-943 2015.5,-937 2021.5,-937 2021.5,-937 2132.5,-937 2132.5,-937 2138.5,-937 2144.5,-943 2144.5,-949 2144.5,-949 2144.5,-1008 2144.5,-1008 2144.5,-1014 2138.5,-1020 2132.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2017.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.165</text>\r\n<text text-anchor=\"start\" x=\"2027\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.028</text>\r\n<text text-anchor=\"start\" x=\"2029.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 232</text>\r\n<text text-anchor=\"start\" x=\"2028.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [356, 1]</text>\r\n<text text-anchor=\"start\" x=\"2030\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 57->61 -->\r\n<g id=\"edge61\" class=\"edge\"><title>57->61</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1944.08,-1060.92C1962.36,-1049.73 1982.8,-1037.2 2002.07,-1025.4\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2004.13,-1028.24 2010.83,-1020.03 2000.48,-1022.27 2004.13,-1028.24\"/>\r\n</g>\r\n<!-- 59 -->\r\n<g id=\"node60\" class=\"node\"><title>59</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1844,-893.5C1844,-893.5 1742,-893.5 1742,-893.5 1736,-893.5 1730,-887.5 1730,-881.5 1730,-881.5 1730,-837.5 1730,-837.5 1730,-831.5 1736,-825.5 1742,-825.5 1742,-825.5 1844,-825.5 1844,-825.5 1850,-825.5 1856,-831.5 1856,-837.5 1856,-837.5 1856,-881.5 1856,-881.5 1856,-887.5 1850,-893.5 1844,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1751\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1753.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"1752.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"1738\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 58->59 -->\r\n<g id=\"edge59\" class=\"edge\"><title>58->59</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1853.73,-936.907C1844.7,-925.542 1834.87,-913.178 1825.81,-901.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1828.33,-899.317 1819.36,-893.667 1822.85,-903.673 1828.33,-899.317\"/>\r\n</g>\r\n<!-- 60 -->\r\n<g id=\"node61\" class=\"node\"><title>60</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1972,-893.5C1972,-893.5 1886,-893.5 1886,-893.5 1880,-893.5 1874,-887.5 1874,-881.5 1874,-881.5 1874,-837.5 1874,-837.5 1874,-831.5 1880,-825.5 1886,-825.5 1886,-825.5 1972,-825.5 1972,-825.5 1978,-825.5 1984,-831.5 1984,-837.5 1984,-837.5 1984,-881.5 1984,-881.5 1984,-887.5 1978,-893.5 1972,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"1887\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1889.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"1884.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\r\n<text text-anchor=\"start\" x=\"1882\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 58->60 -->\r\n<g id=\"edge60\" class=\"edge\"><title>58->60</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M1900.92,-936.907C1904.93,-925.983 1909.29,-914.137 1913.34,-903.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"1916.65,-904.26 1916.81,-893.667 1910.08,-901.846 1916.65,-904.26\"/>\r\n</g>\r\n<!-- 62 -->\r\n<g id=\"node63\" class=\"node\"><title>62</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M2106,-901C2106,-901 2014,-901 2014,-901 2008,-901 2002,-895 2002,-889 2002,-889 2002,-830 2002,-830 2002,-824 2008,-818 2014,-818 2014,-818 2106,-818 2106,-818 2112,-818 2118,-824 2118,-830 2118,-830 2118,-889 2118,-889 2118,-895 2112,-901 2106,-901\"/>\r\n<text text-anchor=\"start\" x=\"2029\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">land ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2010\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.169</text>\r\n<text text-anchor=\"start\" x=\"2016.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"2015.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 1]</text>\r\n<text text-anchor=\"start\" x=\"2013\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 61->62 -->\r\n<g id=\"edge62\" class=\"edge\"><title>61->62</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2071.1,-936.907C2069.89,-928.558 2068.6,-919.671 2067.34,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2070.79,-910.414 2065.89,-901.021 2063.86,-911.42 2070.79,-910.414\"/>\r\n</g>\r\n<!-- 65 -->\r\n<g id=\"node66\" class=\"node\"><title>65</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2237.5,-893.5C2237.5,-893.5 2148.5,-893.5 2148.5,-893.5 2142.5,-893.5 2136.5,-887.5 2136.5,-881.5 2136.5,-881.5 2136.5,-837.5 2136.5,-837.5 2136.5,-831.5 2142.5,-825.5 2148.5,-825.5 2148.5,-825.5 2237.5,-825.5 2237.5,-825.5 2243.5,-825.5 2249.5,-831.5 2249.5,-837.5 2249.5,-837.5 2249.5,-881.5 2249.5,-881.5 2249.5,-887.5 2243.5,-893.5 2237.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"2151\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2145.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 204</text>\r\n<text text-anchor=\"start\" x=\"2144.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [317, 0]</text>\r\n<text text-anchor=\"start\" x=\"2146\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 61->65 -->\r\n<g id=\"edge65\" class=\"edge\"><title>61->65</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2117.25,-936.907C2128.84,-925.211 2141.49,-912.457 2153.06,-900.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2155.56,-903.233 2160.12,-893.667 2150.59,-898.304 2155.56,-903.233\"/>\r\n</g>\r\n<!-- 63 -->\r\n<g id=\"node64\" class=\"node\"><title>63</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2042,-774.5C2042,-774.5 1956,-774.5 1956,-774.5 1950,-774.5 1944,-768.5 1944,-762.5 1944,-762.5 1944,-718.5 1944,-718.5 1944,-712.5 1950,-706.5 1956,-706.5 1956,-706.5 2042,-706.5 2042,-706.5 2048,-706.5 2054,-712.5 2054,-718.5 2054,-718.5 2054,-762.5 2054,-762.5 2054,-768.5 2048,-774.5 2042,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"1957\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"1955.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"1954.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 0]</text>\r\n<text text-anchor=\"start\" x=\"1952\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 62->63 -->\r\n<g id=\"edge63\" class=\"edge\"><title>62->63</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2038.84,-817.907C2033.08,-806.873 2026.84,-794.898 2021.04,-783.773\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2024.02,-781.916 2016.29,-774.667 2017.81,-785.152 2024.02,-781.916\"/>\r\n</g>\r\n<!-- 64 -->\r\n<g id=\"node65\" class=\"node\"><title>64</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2186,-774.5C2186,-774.5 2084,-774.5 2084,-774.5 2078,-774.5 2072,-768.5 2072,-762.5 2072,-762.5 2072,-718.5 2072,-718.5 2072,-712.5 2078,-706.5 2084,-706.5 2084,-706.5 2186,-706.5 2186,-706.5 2192,-706.5 2198,-712.5 2198,-718.5 2198,-718.5 2198,-762.5 2198,-762.5 2198,-768.5 2192,-774.5 2186,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2093\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2095.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2094.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2080\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 62->64 -->\r\n<g id=\"edge64\" class=\"edge\"><title>62->64</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2086.02,-817.907C2093.24,-806.652 2101.08,-794.418 2108.33,-783.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2111.29,-784.975 2113.74,-774.667 2105.4,-781.197 2111.29,-784.975\"/>\r\n</g>\r\n<!-- 68 -->\r\n<g id=\"node69\" class=\"node\"><title>68</title>\r\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M3094,-1377C3094,-1377 2970,-1377 2970,-1377 2964,-1377 2958,-1371 2958,-1365 2958,-1365 2958,-1306 2958,-1306 2958,-1300 2964,-1294 2970,-1294 2970,-1294 3094,-1294 3094,-1294 3100,-1294 3106,-1300 3106,-1306 3106,-1306 3106,-1365 3106,-1365 3106,-1371 3100,-1377 3094,-1377\"/>\r\n<text text-anchor=\"start\" x=\"2966\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"2982\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.244</text>\r\n<text text-anchor=\"start\" x=\"2980.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1189</text>\r\n<text text-anchor=\"start\" x=\"2975\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 1787]</text>\r\n<text text-anchor=\"start\" x=\"2977\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67->68 -->\r\n<g id=\"edge68\" class=\"edge\"><title>67->68</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3097.96,-1412.91C3090.12,-1403.83 3081.74,-1394.12 3073.67,-1384.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3076.16,-1382.3 3066.98,-1377.02 3070.86,-1386.88 3076.16,-1382.3\"/>\r\n</g>\r\n<!-- 109 -->\r\n<g id=\"node110\" class=\"node\"><title>109</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3238,-1369.5C3238,-1369.5 3136,-1369.5 3136,-1369.5 3130,-1369.5 3124,-1363.5 3124,-1357.5 3124,-1357.5 3124,-1313.5 3124,-1313.5 3124,-1307.5 3130,-1301.5 3136,-1301.5 3136,-1301.5 3238,-1301.5 3238,-1301.5 3244,-1301.5 3250,-1307.5 3250,-1313.5 3250,-1313.5 3250,-1357.5 3250,-1357.5 3250,-1363.5 3244,-1369.5 3238,-1369.5\"/>\r\n<text text-anchor=\"start\" x=\"3145\" y=\"-1354.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3135.5\" y=\"-1339.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2900</text>\r\n<text text-anchor=\"start\" x=\"3134\" y=\"-1324.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4468]</text>\r\n<text text-anchor=\"start\" x=\"3132\" y=\"-1309.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 67->109 -->\r\n<g id=\"edge109\" class=\"edge\"><title>67->109</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3151.74,-1412.91C3156.83,-1401.87 3162.35,-1389.9 3167.49,-1378.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3170.68,-1380.21 3171.69,-1369.67 3164.32,-1377.28 3170.68,-1380.21\"/>\r\n</g>\r\n<!-- 69 -->\r\n<g id=\"node70\" class=\"node\"><title>69</title>\r\n<path fill=\"#60b0ea\" stroke=\"black\" d=\"M2967,-1258C2967,-1258 2765,-1258 2765,-1258 2759,-1258 2753,-1252 2753,-1246 2753,-1246 2753,-1187 2753,-1187 2753,-1181 2759,-1175 2765,-1175 2765,-1175 2967,-1175 2967,-1175 2973,-1175 2979,-1181 2979,-1187 2979,-1187 2979,-1246 2979,-1246 2979,-1252 2973,-1258 2967,-1258\"/>\r\n<text text-anchor=\"start\" x=\"2761\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.648</text>\r\n<text text-anchor=\"start\" x=\"2818.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 255</text>\r\n<text text-anchor=\"start\" x=\"2813\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [66, 332]</text>\r\n<text text-anchor=\"start\" x=\"2811\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 68->69 -->\r\n<g id=\"edge69\" class=\"edge\"><title>68->69</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2974.41,-1293.91C2960.63,-1284.2 2945.82,-1273.76 2931.71,-1263.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2933.68,-1260.92 2923.49,-1258.02 2929.65,-1266.64 2933.68,-1260.92\"/>\r\n</g>\r\n<!-- 98 -->\r\n<g id=\"node99\" class=\"node\"><title>98</title>\r\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M3299,-1258C3299,-1258 3125,-1258 3125,-1258 3119,-1258 3113,-1252 3113,-1246 3113,-1246 3113,-1187 3113,-1187 3113,-1181 3119,-1175 3125,-1175 3125,-1175 3299,-1175 3299,-1175 3305,-1175 3311,-1181 3311,-1187 3311,-1187 3311,-1246 3311,-1246 3311,-1252 3305,-1258 3299,-1258\"/>\r\n<text text-anchor=\"start\" x=\"3121\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.054</text>\r\n<text text-anchor=\"start\" x=\"3164.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 934</text>\r\n<text text-anchor=\"start\" x=\"3159\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 1455]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 68->98 -->\r\n<g id=\"edge98\" class=\"edge\"><title>68->98</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3094.45,-1293.91C3109.53,-1284.11 3125.75,-1273.56 3141.18,-1263.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3143.18,-1266.41 3149.66,-1258.02 3139.37,-1260.54 3143.18,-1266.41\"/>\r\n</g>\r\n<!-- 70 -->\r\n<g id=\"node71\" class=\"node\"><title>70</title>\r\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M2757.5,-1139C2757.5,-1139 2556.5,-1139 2556.5,-1139 2550.5,-1139 2544.5,-1133 2544.5,-1127 2544.5,-1127 2544.5,-1068 2544.5,-1068 2544.5,-1062 2550.5,-1056 2556.5,-1056 2556.5,-1056 2757.5,-1056 2757.5,-1056 2763.5,-1056 2769.5,-1062 2769.5,-1068 2769.5,-1068 2769.5,-1127 2769.5,-1127 2769.5,-1133 2763.5,-1139 2757.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"2552.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.665</text>\r\n<text text-anchor=\"start\" x=\"2607\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.069</text>\r\n<text text-anchor=\"start\" x=\"2609.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 155</text>\r\n<text text-anchor=\"start\" x=\"2608.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 239]</text>\r\n<text text-anchor=\"start\" x=\"2602\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69->70 -->\r\n<g id=\"edge70\" class=\"edge\"><title>69->70</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2793.49,-1174.91C2775.66,-1164.92 2756.45,-1154.17 2738.23,-1143.98\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2739.82,-1140.85 2729.38,-1139.02 2736.4,-1146.96 2739.82,-1140.85\"/>\r\n</g>\r\n<!-- 77 -->\r\n<g id=\"node78\" class=\"node\"><title>77</title>\r\n<path fill=\"#c1e0f7\" stroke=\"black\" d=\"M2917,-1139C2917,-1139 2815,-1139 2815,-1139 2809,-1139 2803,-1133 2803,-1127 2803,-1127 2803,-1068 2803,-1068 2803,-1062 2809,-1056 2815,-1056 2815,-1056 2917,-1056 2917,-1056 2923,-1056 2929,-1062 2929,-1068 2929,-1068 2929,-1127 2929,-1127 2929,-1133 2923,-1139 2917,-1139\"/>\r\n<text text-anchor=\"start\" x=\"2813\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 26.0</text>\r\n<text text-anchor=\"start\" x=\"2816\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.975</text>\r\n<text text-anchor=\"start\" x=\"2818.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 100</text>\r\n<text text-anchor=\"start\" x=\"2817.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [64, 93]</text>\r\n<text text-anchor=\"start\" x=\"2811\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 69->77 -->\r\n<g id=\"edge77\" class=\"edge\"><title>69->77</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2866,-1174.91C2866,-1166.65 2866,-1157.86 2866,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2869.5,-1149.02 2866,-1139.02 2862.5,-1149.02 2869.5,-1149.02\"/>\r\n</g>\r\n<!-- 71 -->\r\n<g id=\"node72\" class=\"node\"><title>71</title>\r\n<path fill=\"#72b9ec\" stroke=\"black\" d=\"M2533,-1020C2533,-1020 2431,-1020 2431,-1020 2425,-1020 2419,-1014 2419,-1008 2419,-1008 2419,-949 2419,-949 2419,-943 2425,-937 2431,-937 2431,-937 2533,-937 2533,-937 2539,-937 2545,-943 2545,-949 2545,-949 2545,-1008 2545,-1008 2545,-1014 2539,-1020 2533,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2433\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 5.5</text>\r\n<text text-anchor=\"start\" x=\"2432\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.764</text>\r\n<text text-anchor=\"start\" x=\"2442.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 7]</text>\r\n<text text-anchor=\"start\" x=\"2427\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 70->71 -->\r\n<g id=\"edge71\" class=\"edge\"><title>70->71</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2596.28,-1055.91C2581.76,-1046.2 2566.15,-1035.76 2551.27,-1025.81\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2552.87,-1022.67 2542.61,-1020.02 2548.98,-1028.49 2552.87,-1022.67\"/>\r\n</g>\r\n<!-- 76 -->\r\n<g id=\"node77\" class=\"node\"><title>76</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2708,-1012.5C2708,-1012.5 2606,-1012.5 2606,-1012.5 2600,-1012.5 2594,-1006.5 2594,-1000.5 2594,-1000.5 2594,-956.5 2594,-956.5 2594,-950.5 2600,-944.5 2606,-944.5 2606,-944.5 2708,-944.5 2708,-944.5 2714,-944.5 2720,-950.5 2720,-956.5 2720,-956.5 2720,-1000.5 2720,-1000.5 2720,-1006.5 2714,-1012.5 2708,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"2615\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2609.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 148</text>\r\n<text text-anchor=\"start\" x=\"2608.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 232]</text>\r\n<text text-anchor=\"start\" x=\"2602\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 70->76 -->\r\n<g id=\"edge76\" class=\"edge\"><title>70->76</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2657,-1055.91C2657,-1045.2 2657,-1033.62 2657,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2660.5,-1022.67 2657,-1012.67 2653.5,-1022.67 2660.5,-1022.67\"/>\r\n</g>\r\n<!-- 72 -->\r\n<g id=\"node73\" class=\"node\"><title>72</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2382,-893.5C2382,-893.5 2280,-893.5 2280,-893.5 2274,-893.5 2268,-887.5 2268,-881.5 2268,-881.5 2268,-837.5 2268,-837.5 2268,-831.5 2274,-825.5 2280,-825.5 2280,-825.5 2382,-825.5 2382,-825.5 2388,-825.5 2394,-831.5 2394,-837.5 2394,-837.5 2394,-881.5 2394,-881.5 2394,-887.5 2388,-893.5 2382,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"2289\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2291.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"2290.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"2276\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 71->72 -->\r\n<g id=\"edge72\" class=\"edge\"><title>71->72</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2429.61,-936.907C2414.23,-924.99 2397.43,-911.976 2382.13,-900.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2383.85,-897.025 2373.81,-893.667 2379.57,-902.559 2383.85,-897.025\"/>\r\n</g>\r\n<!-- 73 -->\r\n<g id=\"node74\" class=\"node\"><title>73</title>\r\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M2539.5,-901C2539.5,-901 2424.5,-901 2424.5,-901 2418.5,-901 2412.5,-895 2412.5,-889 2412.5,-889 2412.5,-830 2412.5,-830 2412.5,-824 2418.5,-818 2424.5,-818 2424.5,-818 2539.5,-818 2539.5,-818 2545.5,-818 2551.5,-824 2551.5,-830 2551.5,-830 2551.5,-889 2551.5,-889 2551.5,-895 2545.5,-901 2539.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2420.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2432\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2442.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\r\n<text text-anchor=\"start\" x=\"2435\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 71->73 -->\r\n<g id=\"edge73\" class=\"edge\"><title>71->73</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2482,-936.907C2482,-928.649 2482,-919.864 2482,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2485.5,-911.021 2482,-901.021 2478.5,-911.021 2485.5,-911.021\"/>\r\n</g>\r\n<!-- 74 -->\r\n<g id=\"node75\" class=\"node\"><title>74</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2353,-774.5C2353,-774.5 2267,-774.5 2267,-774.5 2261,-774.5 2255,-768.5 2255,-762.5 2255,-762.5 2255,-718.5 2255,-718.5 2255,-712.5 2261,-706.5 2267,-706.5 2267,-706.5 2353,-706.5 2353,-706.5 2359,-706.5 2365,-712.5 2365,-718.5 2365,-718.5 2365,-762.5 2365,-762.5 2365,-768.5 2359,-774.5 2353,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2268\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2270.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2269.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"2263\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 73->74 -->\r\n<g id=\"edge74\" class=\"edge\"><title>73->74</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2422.33,-817.907C2404.48,-805.769 2384.96,-792.493 2367.28,-780.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2369,-777.397 2358.76,-774.667 2365.06,-783.185 2369,-777.397\"/>\r\n</g>\r\n<!-- 75 -->\r\n<g id=\"node76\" class=\"node\"><title>75</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2497,-774.5C2497,-774.5 2395,-774.5 2395,-774.5 2389,-774.5 2383,-768.5 2383,-762.5 2383,-762.5 2383,-718.5 2383,-718.5 2383,-712.5 2389,-706.5 2395,-706.5 2395,-706.5 2497,-706.5 2497,-706.5 2503,-706.5 2509,-712.5 2509,-718.5 2509,-718.5 2509,-762.5 2509,-762.5 2509,-768.5 2503,-774.5 2497,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2404\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2406.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2405.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"2391\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 73->75 -->\r\n<g id=\"edge75\" class=\"edge\"><title>73->75</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2469.51,-817.907C2466.18,-807.094 2462.58,-795.376 2459.21,-784.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2462.49,-783.195 2456.21,-774.667 2455.8,-785.254 2462.49,-783.195\"/>\r\n</g>\r\n<!-- 78 -->\r\n<g id=\"node79\" class=\"node\"><title>78</title>\r\n<path fill=\"#eeac7d\" stroke=\"black\" d=\"M2894.5,-1020C2894.5,-1020 2779.5,-1020 2779.5,-1020 2773.5,-1020 2767.5,-1014 2767.5,-1008 2767.5,-1008 2767.5,-949 2767.5,-949 2767.5,-943 2773.5,-937 2779.5,-937 2779.5,-937 2894.5,-937 2894.5,-937 2900.5,-937 2906.5,-943 2906.5,-949 2906.5,-949 2906.5,-1008 2906.5,-1008 2906.5,-1014 2900.5,-1020 2894.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"2775.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2791\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.82</text>\r\n<text text-anchor=\"start\" x=\"2793.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"2788.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [64, 22]</text>\r\n<text text-anchor=\"start\" x=\"2790\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 77->78 -->\r\n<g id=\"edge78\" class=\"edge\"><title>77->78</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2855.94,-1055.91C2853.85,-1047.47 2851.62,-1038.48 2849.45,-1029.74\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2852.85,-1028.89 2847.04,-1020.02 2846.05,-1030.57 2852.85,-1028.89\"/>\r\n</g>\r\n<!-- 97 -->\r\n<g id=\"node98\" class=\"node\"><title>97</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3039,-1012.5C3039,-1012.5 2937,-1012.5 2937,-1012.5 2931,-1012.5 2925,-1006.5 2925,-1000.5 2925,-1000.5 2925,-956.5 2925,-956.5 2925,-950.5 2931,-944.5 2937,-944.5 2937,-944.5 3039,-944.5 3039,-944.5 3045,-944.5 3051,-950.5 3051,-956.5 3051,-956.5 3051,-1000.5 3051,-1000.5 3051,-1006.5 3045,-1012.5 3039,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"2946\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2944.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 49</text>\r\n<text text-anchor=\"start\" x=\"2943.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 71]</text>\r\n<text text-anchor=\"start\" x=\"2933\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 77->97 -->\r\n<g id=\"edge97\" class=\"edge\"><title>77->97</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2908.33,-1055.91C2920.52,-1044.21 2933.82,-1031.46 2946,-1019.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2948.62,-1022.11 2953.42,-1012.67 2943.78,-1017.06 2948.62,-1022.11\"/>\r\n</g>\r\n<!-- 79 -->\r\n<g id=\"node80\" class=\"node\"><title>79</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M2803.5,-901C2803.5,-901 2616.5,-901 2616.5,-901 2610.5,-901 2604.5,-895 2604.5,-889 2604.5,-889 2604.5,-830 2604.5,-830 2604.5,-824 2610.5,-818 2616.5,-818 2616.5,-818 2803.5,-818 2803.5,-818 2809.5,-818 2815.5,-824 2815.5,-830 2815.5,-830 2815.5,-889 2815.5,-889 2815.5,-895 2809.5,-901 2803.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"2612.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.045</text>\r\n<text text-anchor=\"start\" x=\"2660\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.235</text>\r\n<text text-anchor=\"start\" x=\"2666.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 32</text>\r\n<text text-anchor=\"start\" x=\"2665.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [50, 2]</text>\r\n<text text-anchor=\"start\" x=\"2663\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 78->79 -->\r\n<g id=\"edge79\" class=\"edge\"><title>78->79</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2792.94,-936.907C2782.79,-927.56 2771.91,-917.538 2761.48,-907.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2763.71,-905.222 2753.98,-901.021 2758.97,-910.371 2763.71,-905.222\"/>\r\n</g>\r\n<!-- 86 -->\r\n<g id=\"node87\" class=\"node\"><title>86</title>\r\n<path fill=\"#c4e2f7\" stroke=\"black\" d=\"M2960,-901C2960,-901 2858,-901 2858,-901 2852,-901 2846,-895 2846,-889 2846,-889 2846,-830 2846,-830 2846,-824 2852,-818 2858,-818 2858,-818 2960,-818 2960,-818 2966,-818 2972,-824 2972,-830 2972,-830 2972,-889 2972,-889 2972,-895 2966,-901 2960,-901\"/>\r\n<text text-anchor=\"start\" x=\"2860.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"2859\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.977</text>\r\n<text text-anchor=\"start\" x=\"2865.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"2860.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 20]</text>\r\n<text text-anchor=\"start\" x=\"2854\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 78->86 -->\r\n<g id=\"edge86\" class=\"edge\"><title>78->86</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2861.98,-936.907C2867.4,-928.105 2873.18,-918.703 2878.78,-909.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2881.8,-911.372 2884.06,-901.021 2875.84,-907.703 2881.8,-911.372\"/>\r\n</g>\r\n<!-- 80 -->\r\n<g id=\"node81\" class=\"node\"><title>80</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2625,-774.5C2625,-774.5 2539,-774.5 2539,-774.5 2533,-774.5 2527,-768.5 2527,-762.5 2527,-762.5 2527,-718.5 2527,-718.5 2527,-712.5 2533,-706.5 2539,-706.5 2539,-706.5 2625,-706.5 2625,-706.5 2631,-706.5 2637,-712.5 2637,-718.5 2637,-718.5 2637,-762.5 2637,-762.5 2637,-768.5 2631,-774.5 2625,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"2540\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2538.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"2537.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 0]</text>\r\n<text text-anchor=\"start\" x=\"2535\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79->80 -->\r\n<g id=\"edge80\" class=\"edge\"><title>79->80</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2665.59,-817.907C2652.67,-806.101 2638.58,-793.217 2625.71,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2628.03,-778.83 2618.29,-774.667 2623.3,-783.997 2628.03,-778.83\"/>\r\n</g>\r\n<!-- 81 -->\r\n<g id=\"node82\" class=\"node\"><title>81</title>\r\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M2753,-782C2753,-782 2667,-782 2667,-782 2661,-782 2655,-776 2655,-770 2655,-770 2655,-711 2655,-711 2655,-705 2661,-699 2667,-699 2667,-699 2753,-699 2753,-699 2759,-699 2765,-705 2765,-711 2765,-711 2765,-770 2765,-770 2765,-776 2759,-782 2753,-782\"/>\r\n<text text-anchor=\"start\" x=\"2665\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.5</text>\r\n<text text-anchor=\"start\" x=\"2664\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"2670.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"2665.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 2]</text>\r\n<text text-anchor=\"start\" x=\"2663\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 79->81 -->\r\n<g id=\"edge81\" class=\"edge\"><title>79->81</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2710,-817.907C2710,-809.649 2710,-800.864 2710,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2713.5,-792.021 2710,-782.021 2706.5,-792.021 2713.5,-792.021\"/>\r\n</g>\r\n<!-- 82 -->\r\n<g id=\"node83\" class=\"node\"><title>82</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M2591.5,-663C2591.5,-663 2414.5,-663 2414.5,-663 2408.5,-663 2402.5,-657 2402.5,-651 2402.5,-651 2402.5,-592 2402.5,-592 2402.5,-586 2408.5,-580 2414.5,-580 2414.5,-580 2591.5,-580 2591.5,-580 2597.5,-580 2603.5,-586 2603.5,-592 2603.5,-592 2603.5,-651 2603.5,-651 2603.5,-657 2597.5,-663 2591.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"2410.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.365</text>\r\n<text text-anchor=\"start\" x=\"2453\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"2463.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"2462.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"2448\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 81->82 -->\r\n<g id=\"edge82\" class=\"edge\"><title>81->82</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2655,-704.337C2651.97,-702.511 2648.95,-700.722 2646,-699 2628.23,-688.643 2608.96,-677.969 2590.49,-668\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2591.96,-664.819 2581.5,-663.168 2588.65,-670.985 2591.96,-664.819\"/>\r\n</g>\r\n<!-- 85 -->\r\n<g id=\"node86\" class=\"node\"><title>85</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2720,-655.5C2720,-655.5 2634,-655.5 2634,-655.5 2628,-655.5 2622,-649.5 2622,-643.5 2622,-643.5 2622,-599.5 2622,-599.5 2622,-593.5 2628,-587.5 2634,-587.5 2634,-587.5 2720,-587.5 2720,-587.5 2726,-587.5 2732,-593.5 2732,-599.5 2732,-599.5 2732,-643.5 2732,-643.5 2732,-649.5 2726,-655.5 2720,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2635\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2637.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2636.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\r\n<text text-anchor=\"start\" x=\"2630\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 81->85 -->\r\n<g id=\"edge85\" class=\"edge\"><title>81->85</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2698.55,-698.907C2695.5,-688.094 2692.2,-676.376 2689.11,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2692.44,-664.341 2686.35,-655.667 2685.7,-666.242 2692.44,-664.341\"/>\r\n</g>\r\n<!-- 83 -->\r\n<g id=\"node84\" class=\"node\"><title>83</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2486,-536.5C2486,-536.5 2384,-536.5 2384,-536.5 2378,-536.5 2372,-530.5 2372,-524.5 2372,-524.5 2372,-480.5 2372,-480.5 2372,-474.5 2378,-468.5 2384,-468.5 2384,-468.5 2486,-468.5 2486,-468.5 2492,-468.5 2498,-474.5 2498,-480.5 2498,-480.5 2498,-524.5 2498,-524.5 2498,-530.5 2492,-536.5 2486,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2393\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2395.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2394.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"2380\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 82->83 -->\r\n<g id=\"edge83\" class=\"edge\"><title>82->83</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2479.41,-579.907C2472.93,-568.763 2465.9,-556.658 2459.37,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2462.33,-543.554 2454.28,-536.667 2456.28,-547.072 2462.33,-543.554\"/>\r\n</g>\r\n<!-- 84 -->\r\n<g id=\"node85\" class=\"node\"><title>84</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2614,-536.5C2614,-536.5 2528,-536.5 2528,-536.5 2522,-536.5 2516,-530.5 2516,-524.5 2516,-524.5 2516,-480.5 2516,-480.5 2516,-474.5 2522,-468.5 2528,-468.5 2528,-468.5 2614,-468.5 2614,-468.5 2620,-468.5 2626,-474.5 2626,-480.5 2626,-480.5 2626,-524.5 2626,-524.5 2626,-530.5 2620,-536.5 2614,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"2529\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2531.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2530.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2524\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 82->84 -->\r\n<g id=\"edge84\" class=\"edge\"><title>82->84</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2526.59,-579.907C2533.07,-568.763 2540.1,-556.658 2546.63,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2549.72,-547.072 2551.72,-536.667 2543.67,-543.554 2549.72,-547.072\"/>\r\n</g>\r\n<!-- 87 -->\r\n<g id=\"node88\" class=\"node\"><title>87</title>\r\n<path fill=\"#eb9e67\" stroke=\"black\" d=\"M3022.5,-782C3022.5,-782 2795.5,-782 2795.5,-782 2789.5,-782 2783.5,-776 2783.5,-770 2783.5,-770 2783.5,-711 2783.5,-711 2783.5,-705 2789.5,-699 2795.5,-699 2795.5,-699 3022.5,-699 3022.5,-699 3028.5,-699 3034.5,-705 3034.5,-711 3034.5,-711 3034.5,-770 3034.5,-770 3034.5,-776 3028.5,-782 3022.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"2791.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.39</text>\r\n<text text-anchor=\"start\" x=\"2859\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.696</text>\r\n<text text-anchor=\"start\" x=\"2869.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"2864.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 3]</text>\r\n<text text-anchor=\"start\" x=\"2862\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 86->87 -->\r\n<g id=\"edge87\" class=\"edge\"><title>86->87</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2909,-817.907C2909,-809.649 2909,-800.864 2909,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2912.5,-792.021 2909,-782.021 2905.5,-792.021 2912.5,-792.021\"/>\r\n</g>\r\n<!-- 90 -->\r\n<g id=\"node91\" class=\"node\"><title>90</title>\r\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M3241.5,-782C3241.5,-782 3064.5,-782 3064.5,-782 3058.5,-782 3052.5,-776 3052.5,-770 3052.5,-770 3052.5,-711 3052.5,-711 3052.5,-705 3058.5,-699 3064.5,-699 3064.5,-699 3241.5,-699 3241.5,-699 3247.5,-699 3253.5,-705 3253.5,-711 3253.5,-711 3253.5,-770 3253.5,-770 3253.5,-776 3247.5,-782 3241.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"3060.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.065</text>\r\n<text text-anchor=\"start\" x=\"3107\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.31</text>\r\n<text text-anchor=\"start\" x=\"3109.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"3108.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 17]</text>\r\n<text text-anchor=\"start\" x=\"3098\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 86->90 -->\r\n<g id=\"edge90\" class=\"edge\"><title>86->90</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2972.15,-828.217C2998.66,-815.509 3030.03,-800.465 3059.14,-786.506\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3061,-789.495 3068.51,-782.016 3057.98,-783.184 3061,-789.495\"/>\r\n</g>\r\n<!-- 88 -->\r\n<g id=\"node89\" class=\"node\"><title>88</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2848,-655.5C2848,-655.5 2762,-655.5 2762,-655.5 2756,-655.5 2750,-649.5 2750,-643.5 2750,-643.5 2750,-599.5 2750,-599.5 2750,-593.5 2756,-587.5 2762,-587.5 2762,-587.5 2848,-587.5 2848,-587.5 2854,-587.5 2860,-593.5 2860,-599.5 2860,-599.5 2860,-643.5 2860,-643.5 2860,-649.5 2854,-655.5 2848,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2763\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2765.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2760.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [13, 0]</text>\r\n<text text-anchor=\"start\" x=\"2758\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 87->88 -->\r\n<g id=\"edge88\" class=\"edge\"><title>87->88</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2872.92,-698.907C2862.72,-687.432 2851.61,-674.938 2841.39,-663.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2843.74,-660.816 2834.48,-655.667 2838.51,-665.466 2843.74,-660.816\"/>\r\n</g>\r\n<!-- 89 -->\r\n<g id=\"node90\" class=\"node\"><title>89</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2992,-655.5C2992,-655.5 2890,-655.5 2890,-655.5 2884,-655.5 2878,-649.5 2878,-643.5 2878,-643.5 2878,-599.5 2878,-599.5 2878,-593.5 2884,-587.5 2890,-587.5 2890,-587.5 2992,-587.5 2992,-587.5 2998,-587.5 3004,-593.5 3004,-599.5 3004,-599.5 3004,-643.5 3004,-643.5 3004,-649.5 2998,-655.5 2992,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"2899\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2901.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"2900.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"2886\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 87->89 -->\r\n<g id=\"edge89\" class=\"edge\"><title>87->89</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2920.1,-698.907C2923.06,-688.094 2926.26,-676.376 2929.26,-665.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2932.67,-666.236 2931.93,-655.667 2925.91,-664.389 2932.67,-666.236\"/>\r\n</g>\r\n<!-- 91 -->\r\n<g id=\"node92\" class=\"node\"><title>91</title>\r\n<path fill=\"#45a3e7\" stroke=\"black\" d=\"M3208,-663C3208,-663 3034,-663 3034,-663 3028,-663 3022,-657 3022,-651 3022,-651 3022,-592 3022,-592 3022,-586 3028,-580 3034,-580 3034,-580 3208,-580 3208,-580 3214,-580 3220,-586 3220,-592 3220,-592 3220,-651 3220,-651 3220,-657 3214,-663 3208,-663\"/>\r\n<text text-anchor=\"start\" x=\"3030\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"3071\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.323</text>\r\n<text text-anchor=\"start\" x=\"3077.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\r\n<text text-anchor=\"start\" x=\"3076.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 16]</text>\r\n<text text-anchor=\"start\" x=\"3066\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90->91 -->\r\n<g id=\"edge91\" class=\"edge\"><title>90->91</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3141.9,-698.907C3139.59,-690.468 3137.13,-681.477 3134.74,-672.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3138.1,-671.743 3132.08,-663.021 3131.34,-673.59 3138.1,-671.743\"/>\r\n</g>\r\n<!-- 96 -->\r\n<g id=\"node97\" class=\"node\"><title>96</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3352,-655.5C3352,-655.5 3250,-655.5 3250,-655.5 3244,-655.5 3238,-649.5 3238,-643.5 3238,-643.5 3238,-599.5 3238,-599.5 3238,-593.5 3244,-587.5 3250,-587.5 3250,-587.5 3352,-587.5 3352,-587.5 3358,-587.5 3364,-593.5 3364,-599.5 3364,-599.5 3364,-643.5 3364,-643.5 3364,-649.5 3358,-655.5 3352,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3259\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3261.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3260.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3246\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 90->96 -->\r\n<g id=\"edge96\" class=\"edge\"><title>90->96</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3204.35,-698.907C3219.42,-686.99 3235.89,-673.976 3250.88,-662.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3253.37,-664.614 3259.05,-655.667 3249.03,-659.123 3253.37,-664.614\"/>\r\n</g>\r\n<!-- 92 -->\r\n<g id=\"node93\" class=\"node\"><title>92</title>\r\n<path fill=\"#4fa8e8\" stroke=\"black\" d=\"M3128.5,-544C3128.5,-544 2909.5,-544 2909.5,-544 2903.5,-544 2897.5,-538 2897.5,-532 2897.5,-532 2897.5,-473 2897.5,-473 2897.5,-467 2903.5,-461 2909.5,-461 2909.5,-461 3128.5,-461 3128.5,-461 3134.5,-461 3140.5,-467 3140.5,-473 3140.5,-473 3140.5,-532 3140.5,-532 3140.5,-538 3134.5,-544 3128.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"2905.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"2969\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"2979.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"2978.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 9]</text>\r\n<text text-anchor=\"start\" x=\"2964\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 91->92 -->\r\n<g id=\"edge92\" class=\"edge\"><title>91->92</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3085.61,-579.907C3077.7,-570.832 3069.23,-561.121 3061.08,-551.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3063.54,-549.259 3054.33,-544.021 3058.26,-553.859 3063.54,-549.259\"/>\r\n</g>\r\n<!-- 95 -->\r\n<g id=\"node96\" class=\"node\"><title>95</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3273,-536.5C3273,-536.5 3171,-536.5 3171,-536.5 3165,-536.5 3159,-530.5 3159,-524.5 3159,-524.5 3159,-480.5 3159,-480.5 3159,-474.5 3165,-468.5 3171,-468.5 3171,-468.5 3273,-468.5 3273,-468.5 3279,-468.5 3285,-474.5 3285,-480.5 3285,-480.5 3285,-524.5 3285,-524.5 3285,-530.5 3279,-536.5 3273,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"3180\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3182.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3181.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 7]</text>\r\n<text text-anchor=\"start\" x=\"3167\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 91->95 -->\r\n<g id=\"edge95\" class=\"edge\"><title>91->95</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3156.04,-579.907C3165.95,-568.432 3176.73,-555.938 3186.66,-544.442\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3189.48,-546.524 3193.37,-536.667 3184.18,-541.95 3189.48,-546.524\"/>\r\n</g>\r\n<!-- 93 -->\r\n<g id=\"node94\" class=\"node\"><title>93</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2994,-417.5C2994,-417.5 2908,-417.5 2908,-417.5 2902,-417.5 2896,-411.5 2896,-405.5 2896,-405.5 2896,-361.5 2896,-361.5 2896,-355.5 2902,-349.5 2908,-349.5 2908,-349.5 2994,-349.5 2994,-349.5 3000,-349.5 3006,-355.5 3006,-361.5 3006,-361.5 3006,-405.5 3006,-405.5 3006,-411.5 3000,-417.5 2994,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"2909\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"2911.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"2910.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"2904\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 92->93 -->\r\n<g id=\"edge93\" class=\"edge\"><title>92->93</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M2995.41,-460.907C2988.93,-449.763 2981.9,-437.658 2975.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"2978.33,-424.554 2970.28,-417.667 2972.28,-428.072 2978.33,-424.554\"/>\r\n</g>\r\n<!-- 94 -->\r\n<g id=\"node95\" class=\"node\"><title>94</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3138,-417.5C3138,-417.5 3036,-417.5 3036,-417.5 3030,-417.5 3024,-411.5 3024,-405.5 3024,-405.5 3024,-361.5 3024,-361.5 3024,-355.5 3030,-349.5 3036,-349.5 3036,-349.5 3138,-349.5 3138,-349.5 3144,-349.5 3150,-355.5 3150,-361.5 3150,-361.5 3150,-405.5 3150,-405.5 3150,-411.5 3144,-417.5 3138,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3045\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3047.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3046.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"3032\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 92->94 -->\r\n<g id=\"edge94\" class=\"edge\"><title>92->94</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3042.59,-460.907C3049.07,-449.763 3056.1,-437.658 3062.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3065.72,-428.072 3067.72,-417.667 3059.67,-424.554 3065.72,-428.072\"/>\r\n</g>\r\n<!-- 99 -->\r\n<g id=\"node100\" class=\"node\"><title>99</title>\r\n<path fill=\"#51a9e8\" stroke=\"black\" d=\"M3269.5,-1139C3269.5,-1139 3154.5,-1139 3154.5,-1139 3148.5,-1139 3142.5,-1133 3142.5,-1127 3142.5,-1127 3142.5,-1068 3142.5,-1068 3142.5,-1062 3148.5,-1056 3154.5,-1056 3154.5,-1056 3269.5,-1056 3269.5,-1056 3275.5,-1056 3281.5,-1062 3281.5,-1068 3281.5,-1068 3281.5,-1127 3281.5,-1127 3281.5,-1133 3275.5,-1139 3269.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"3150.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.495</text>\r\n<text text-anchor=\"start\" x=\"3168.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 54</text>\r\n<text text-anchor=\"start\" x=\"3167.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 74]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 98->99 -->\r\n<g id=\"edge99\" class=\"edge\"><title>98->99</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-1174.91C3212,-1166.65 3212,-1157.86 3212,-1149.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-1149.02 3212,-1139.02 3208.5,-1149.02 3215.5,-1149.02\"/>\r\n</g>\r\n<!-- 108 -->\r\n<g id=\"node109\" class=\"node\"><title>108</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3414,-1131.5C3414,-1131.5 3312,-1131.5 3312,-1131.5 3306,-1131.5 3300,-1125.5 3300,-1119.5 3300,-1119.5 3300,-1075.5 3300,-1075.5 3300,-1069.5 3306,-1063.5 3312,-1063.5 3312,-1063.5 3414,-1063.5 3414,-1063.5 3420,-1063.5 3426,-1069.5 3426,-1075.5 3426,-1075.5 3426,-1119.5 3426,-1119.5 3426,-1125.5 3420,-1131.5 3414,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"3321\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 880</text>\r\n<text text-anchor=\"start\" x=\"3310\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1381]</text>\r\n<text text-anchor=\"start\" x=\"3308\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 98->108 -->\r\n<g id=\"edge108\" class=\"edge\"><title>98->108</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3264.39,-1174.91C3279.77,-1162.99 3296.57,-1149.98 3311.87,-1138.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3314.43,-1140.56 3320.19,-1131.67 3310.15,-1135.03 3314.43,-1140.56\"/>\r\n</g>\r\n<!-- 100 -->\r\n<g id=\"node101\" class=\"node\"><title>100</title>\r\n<path fill=\"#eb9d65\" stroke=\"black\" d=\"M3265.5,-1020C3265.5,-1020 3158.5,-1020 3158.5,-1020 3152.5,-1020 3146.5,-1014 3146.5,-1008 3146.5,-1008 3146.5,-949 3146.5,-949 3146.5,-943 3152.5,-937 3158.5,-937 3158.5,-937 3265.5,-937 3265.5,-937 3271.5,-937 3277.5,-943 3277.5,-949 3277.5,-949 3277.5,-1008 3277.5,-1008 3277.5,-1014 3271.5,-1020 3265.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"3154.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.3</text>\r\n<text text-anchor=\"start\" x=\"3162\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.684</text>\r\n<text text-anchor=\"start\" x=\"3172.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"3171.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 2]</text>\r\n<text text-anchor=\"start\" x=\"3165\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 99->100 -->\r\n<g id=\"edge100\" class=\"edge\"><title>99->100</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-1055.91C3212,-1047.65 3212,-1038.86 3212,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-1030.02 3212,-1020.02 3208.5,-1030.02 3215.5,-1030.02\"/>\r\n</g>\r\n<!-- 107 -->\r\n<g id=\"node108\" class=\"node\"><title>107</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3410,-1012.5C3410,-1012.5 3308,-1012.5 3308,-1012.5 3302,-1012.5 3296,-1006.5 3296,-1000.5 3296,-1000.5 3296,-956.5 3296,-956.5 3296,-950.5 3302,-944.5 3308,-944.5 3308,-944.5 3410,-944.5 3410,-944.5 3416,-944.5 3422,-950.5 3422,-956.5 3422,-956.5 3422,-1000.5 3422,-1000.5 3422,-1006.5 3416,-1012.5 3410,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"3317\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3315.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 45</text>\r\n<text text-anchor=\"start\" x=\"3314.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 72]</text>\r\n<text text-anchor=\"start\" x=\"3304\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 99->107 -->\r\n<g id=\"edge107\" class=\"edge\"><title>99->107</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3263,-1055.91C3277.97,-1043.99 3294.33,-1030.98 3309.22,-1019.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3311.68,-1021.63 3317.33,-1012.67 3307.32,-1016.16 3311.68,-1021.63\"/>\r\n</g>\r\n<!-- 101 -->\r\n<g id=\"node102\" class=\"node\"><title>101</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3263,-893.5C3263,-893.5 3161,-893.5 3161,-893.5 3155,-893.5 3149,-887.5 3149,-881.5 3149,-881.5 3149,-837.5 3149,-837.5 3149,-831.5 3155,-825.5 3161,-825.5 3161,-825.5 3263,-825.5 3263,-825.5 3269,-825.5 3275,-831.5 3275,-837.5 3275,-837.5 3275,-881.5 3275,-881.5 3275,-887.5 3269,-893.5 3263,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"3170\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3172.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3171.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3157\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 100->101 -->\r\n<g id=\"edge101\" class=\"edge\"><title>100->101</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3212,-936.907C3212,-926.204 3212,-914.615 3212,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3215.5,-903.667 3212,-893.667 3208.5,-903.667 3215.5,-903.667\"/>\r\n</g>\r\n<!-- 102 -->\r\n<g id=\"node103\" class=\"node\"><title>102</title>\r\n<path fill=\"#e88f4f\" stroke=\"black\" d=\"M3506.5,-901C3506.5,-901 3367.5,-901 3367.5,-901 3361.5,-901 3355.5,-895 3355.5,-889 3355.5,-889 3355.5,-830 3355.5,-830 3355.5,-824 3361.5,-818 3367.5,-818 3367.5,-818 3506.5,-818 3506.5,-818 3512.5,-818 3518.5,-824 3518.5,-830 3518.5,-830 3518.5,-889 3518.5,-889 3518.5,-895 3512.5,-901 3506.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"3363.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.415</text>\r\n<text text-anchor=\"start\" x=\"3387\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 1]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 100->102 -->\r\n<g id=\"edge102\" class=\"edge\"><title>100->102</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3277.8,-941.853C3280.91,-940.206 3283.99,-938.582 3287,-937 3306.53,-926.75 3327.57,-915.897 3347.55,-905.687\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3349.32,-908.709 3356.64,-901.045 3346.14,-902.475 3349.32,-908.709\"/>\r\n</g>\r\n<!-- 103 -->\r\n<g id=\"node104\" class=\"node\"><title>103</title>\r\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M3483,-782C3483,-782 3391,-782 3391,-782 3385,-782 3379,-776 3379,-770 3379,-770 3379,-711 3379,-711 3379,-705 3385,-699 3391,-699 3391,-699 3483,-699 3483,-699 3489,-699 3495,-705 3495,-711 3495,-711 3495,-770 3495,-770 3495,-776 3489,-782 3483,-782\"/>\r\n<text text-anchor=\"start\" x=\"3394\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"3387\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 1]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102->103 -->\r\n<g id=\"edge103\" class=\"edge\"><title>102->103</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3437,-817.907C3437,-809.649 3437,-800.864 3437,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3440.5,-792.021 3437,-782.021 3433.5,-792.021 3440.5,-792.021\"/>\r\n</g>\r\n<!-- 106 -->\r\n<g id=\"node107\" class=\"node\"><title>106</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3611,-774.5C3611,-774.5 3525,-774.5 3525,-774.5 3519,-774.5 3513,-768.5 3513,-762.5 3513,-762.5 3513,-718.5 3513,-718.5 3513,-712.5 3519,-706.5 3525,-706.5 3525,-706.5 3611,-706.5 3611,-706.5 3617,-706.5 3623,-712.5 3623,-718.5 3623,-718.5 3623,-762.5 3623,-762.5 3623,-768.5 3617,-774.5 3611,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"3526\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3528.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3527.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"3521\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 102->106 -->\r\n<g id=\"edge106\" class=\"edge\"><title>102->106</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3482.45,-817.907C3495.67,-806.101 3510.1,-793.217 3523.27,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3525.74,-783.939 3530.86,-774.667 3521.07,-778.718 3525.74,-783.939\"/>\r\n</g>\r\n<!-- 104 -->\r\n<g id=\"node105\" class=\"node\"><title>104</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3480,-655.5C3480,-655.5 3394,-655.5 3394,-655.5 3388,-655.5 3382,-649.5 3382,-643.5 3382,-643.5 3382,-599.5 3382,-599.5 3382,-593.5 3388,-587.5 3394,-587.5 3394,-587.5 3480,-587.5 3480,-587.5 3486,-587.5 3492,-593.5 3492,-599.5 3492,-599.5 3492,-643.5 3492,-643.5 3492,-649.5 3486,-655.5 3480,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3395\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3397.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3396.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\r\n<text text-anchor=\"start\" x=\"3390\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 103->104 -->\r\n<g id=\"edge104\" class=\"edge\"><title>103->104</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3437,-698.907C3437,-688.204 3437,-676.615 3437,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3440.5,-665.667 3437,-655.667 3433.5,-665.667 3440.5,-665.667\"/>\r\n</g>\r\n<!-- 105 -->\r\n<g id=\"node106\" class=\"node\"><title>105</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3624,-655.5C3624,-655.5 3522,-655.5 3522,-655.5 3516,-655.5 3510,-649.5 3510,-643.5 3510,-643.5 3510,-599.5 3510,-599.5 3510,-593.5 3516,-587.5 3522,-587.5 3522,-587.5 3624,-587.5 3624,-587.5 3630,-587.5 3636,-593.5 3636,-599.5 3636,-599.5 3636,-643.5 3636,-643.5 3636,-649.5 3630,-655.5 3624,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3531\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3533.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3532.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3518\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 103->105 -->\r\n<g id=\"edge105\" class=\"edge\"><title>103->105</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3484.18,-698.907C3497.91,-687.101 3512.89,-674.217 3526.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3529.15,-664.842 3534.45,-655.667 3524.58,-659.535 3529.15,-664.842\"/>\r\n</g>\r\n<!-- 111 -->\r\n<g id=\"node112\" class=\"node\"><title>111</title>\r\n<path fill=\"#f3c3a0\" stroke=\"black\" d=\"M5649,-1496C5649,-1496 5535,-1496 5535,-1496 5529,-1496 5523,-1490 5523,-1484 5523,-1484 5523,-1425 5523,-1425 5523,-1419 5529,-1413 5535,-1413 5535,-1413 5649,-1413 5649,-1413 5655,-1413 5661,-1419 5661,-1425 5661,-1425 5661,-1484 5661,-1484 5661,-1490 5655,-1496 5649,-1496\"/>\r\n<text text-anchor=\"start\" x=\"5547\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 58.0</text>\r\n<text text-anchor=\"start\" x=\"5542\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.927</text>\r\n<text text-anchor=\"start\" x=\"5544.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 987</text>\r\n<text text-anchor=\"start\" x=\"5531\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1011, 526]</text>\r\n<text text-anchor=\"start\" x=\"5545\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110->111 -->\r\n<g id=\"edge111\" class=\"edge\"><title>110->111</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5592,-1531.91C5592,-1523.65 5592,-1514.86 5592,-1506.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5595.5,-1506.02 5592,-1496.02 5588.5,-1506.02 5595.5,-1506.02\"/>\r\n</g>\r\n<!-- 210 -->\r\n<g id=\"node211\" class=\"node\"><title>210</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M7449.5,-1496C7449.5,-1496 7280.5,-1496 7280.5,-1496 7274.5,-1496 7268.5,-1490 7268.5,-1484 7268.5,-1484 7268.5,-1425 7268.5,-1425 7268.5,-1419 7274.5,-1413 7280.5,-1413 7280.5,-1413 7449.5,-1413 7449.5,-1413 7455.5,-1413 7461.5,-1419 7461.5,-1425 7461.5,-1425 7461.5,-1484 7461.5,-1484 7461.5,-1490 7455.5,-1496 7449.5,-1496\"/>\r\n<text text-anchor=\"start\" x=\"7276.5\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 181.5</text>\r\n<text text-anchor=\"start\" x=\"7315\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.167</text>\r\n<text text-anchor=\"start\" x=\"7313.5\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5119</text>\r\n<text text-anchor=\"start\" x=\"7304\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7959, 202]</text>\r\n<text text-anchor=\"start\" x=\"7318\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 110->210 -->\r\n<g id=\"edge210\" class=\"edge\"><title>110->210</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5661.23,-1567.93C5933.15,-1549.99 6929.12,-1484.26 7258.47,-1462.53\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7258.74,-1466.02 7268.49,-1461.87 7258.28,-1459.03 7258.74,-1466.02\"/>\r\n</g>\r\n<!-- 112 -->\r\n<g id=\"node113\" class=\"node\"><title>112</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M5262.5,-1377C5262.5,-1377 5075.5,-1377 5075.5,-1377 5069.5,-1377 5063.5,-1371 5063.5,-1365 5063.5,-1365 5063.5,-1306 5063.5,-1306 5063.5,-1300 5069.5,-1294 5075.5,-1294 5075.5,-1294 5262.5,-1294 5262.5,-1294 5268.5,-1294 5274.5,-1300 5274.5,-1306 5274.5,-1306 5274.5,-1365 5274.5,-1365 5274.5,-1371 5268.5,-1377 5262.5,-1377\"/>\r\n<text text-anchor=\"start\" x=\"5071.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.015</text>\r\n<text text-anchor=\"start\" x=\"5119\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.594</text>\r\n<text text-anchor=\"start\" x=\"5121.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 567</text>\r\n<text text-anchor=\"start\" x=\"5112\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [768, 129]</text>\r\n<text text-anchor=\"start\" x=\"5122\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 111->112 -->\r\n<g id=\"edge112\" class=\"edge\"><title>111->112</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5522.62,-1434.31C5458.12,-1416.47 5360.78,-1389.54 5284.54,-1368.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5285.45,-1365.08 5274.88,-1365.79 5283.59,-1371.83 5285.45,-1365.08\"/>\r\n</g>\r\n<!-- 191 -->\r\n<g id=\"node192\" class=\"node\"><title>191</title>\r\n<path fill=\"#b2d9f5\" stroke=\"black\" d=\"M6069,-1377C6069,-1377 5963,-1377 5963,-1377 5957,-1377 5951,-1371 5951,-1365 5951,-1365 5951,-1306 5951,-1306 5951,-1300 5957,-1294 5963,-1294 5963,-1294 6069,-1294 6069,-1294 6075,-1294 6081,-1300 6081,-1306 6081,-1306 6081,-1365 6081,-1365 6081,-1371 6075,-1377 6069,-1377\"/>\r\n<text text-anchor=\"start\" x=\"5976.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 37.5</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.958</text>\r\n<text text-anchor=\"start\" x=\"5968.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 420</text>\r\n<text text-anchor=\"start\" x=\"5959\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [243, 397]</text>\r\n<text text-anchor=\"start\" x=\"5961\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 111->191 -->\r\n<g id=\"edge191\" class=\"edge\"><title>111->191</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5661.07,-1434.44C5737.92,-1413.24 5861.67,-1379.09 5940.88,-1357.23\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5942.09,-1360.53 5950.79,-1354.49 5940.22,-1353.78 5942.09,-1360.53\"/>\r\n</g>\r\n<!-- 113 -->\r\n<g id=\"node114\" class=\"node\"><title>113</title>\r\n<path fill=\"#f9e0ce\" stroke=\"black\" d=\"M4985,-1258C4985,-1258 4887,-1258 4887,-1258 4881,-1258 4875,-1252 4875,-1246 4875,-1246 4875,-1187 4875,-1187 4875,-1181 4881,-1175 4887,-1175 4887,-1175 4985,-1175 4985,-1175 4991,-1175 4997,-1181 4997,-1187 4997,-1187 4997,-1246 4997,-1246 4997,-1252 4991,-1258 4985,-1258\"/>\r\n<text text-anchor=\"start\" x=\"4901\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 3.5</text>\r\n<text text-anchor=\"start\" x=\"4886\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.985</text>\r\n<text text-anchor=\"start\" x=\"4888.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 142</text>\r\n<text text-anchor=\"start\" x=\"4883\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 97]</text>\r\n<text text-anchor=\"start\" x=\"4889\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 112->113 -->\r\n<g id=\"edge113\" class=\"edge\"><title>112->113</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5088.16,-1293.91C5061.47,-1280.51 5032.02,-1265.72 5006.19,-1252.75\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5007.73,-1249.6 4997.22,-1248.24 5004.59,-1255.86 5007.73,-1249.6\"/>\r\n</g>\r\n<!-- 148 -->\r\n<g id=\"node149\" class=\"node\"><title>148</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M5266,-1258C5266,-1258 5072,-1258 5072,-1258 5066,-1258 5060,-1252 5060,-1246 5060,-1246 5060,-1187 5060,-1187 5060,-1181 5066,-1175 5072,-1175 5072,-1175 5266,-1175 5266,-1175 5272,-1175 5278,-1181 5278,-1187 5278,-1187 5278,-1246 5278,-1246 5278,-1252 5272,-1258 5266,-1258\"/>\r\n<text text-anchor=\"start\" x=\"5068\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.85</text>\r\n<text text-anchor=\"start\" x=\"5119\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.277</text>\r\n<text text-anchor=\"start\" x=\"5121.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 425</text>\r\n<text text-anchor=\"start\" x=\"5116\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [639, 32]</text>\r\n<text text-anchor=\"start\" x=\"5122\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 112->148 -->\r\n<g id=\"edge148\" class=\"edge\"><title>112->148</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5169,-1293.91C5169,-1285.65 5169,-1276.86 5169,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5172.5,-1268.02 5169,-1258.02 5165.5,-1268.02 5172.5,-1268.02\"/>\r\n</g>\r\n<!-- 114 -->\r\n<g id=\"node115\" class=\"node\"><title>114</title>\r\n<path fill=\"#fffefd\" stroke=\"black\" d=\"M4760.5,-1139C4760.5,-1139 4645.5,-1139 4645.5,-1139 4639.5,-1139 4633.5,-1133 4633.5,-1127 4633.5,-1127 4633.5,-1068 4633.5,-1068 4633.5,-1062 4639.5,-1056 4645.5,-1056 4645.5,-1056 4760.5,-1056 4760.5,-1056 4766.5,-1056 4772.5,-1062 4772.5,-1068 4772.5,-1068 4772.5,-1127 4772.5,-1127 4772.5,-1133 4766.5,-1139 4760.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"4641.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4661\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"4655.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 124</text>\r\n<text text-anchor=\"start\" x=\"4654.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [98, 97]</text>\r\n<text text-anchor=\"start\" x=\"4656\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 113->114 -->\r\n<g id=\"edge114\" class=\"edge\"><title>113->114</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4874.78,-1184.76C4846.43,-1170.52 4812.4,-1153.43 4782.13,-1138.24\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4783.38,-1134.94 4772.87,-1133.58 4780.23,-1141.2 4783.38,-1134.94\"/>\r\n</g>\r\n<!-- 147 -->\r\n<g id=\"node148\" class=\"node\"><title>147</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4979,-1131.5C4979,-1131.5 4893,-1131.5 4893,-1131.5 4887,-1131.5 4881,-1125.5 4881,-1119.5 4881,-1119.5 4881,-1075.5 4881,-1075.5 4881,-1069.5 4887,-1063.5 4893,-1063.5 4893,-1063.5 4979,-1063.5 4979,-1063.5 4985,-1063.5 4991,-1069.5 4991,-1075.5 4991,-1075.5 4991,-1119.5 4991,-1119.5 4991,-1125.5 4985,-1131.5 4979,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"4894\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4892.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"4891.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 0]</text>\r\n<text text-anchor=\"start\" x=\"4889\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 113->147 -->\r\n<g id=\"edge147\" class=\"edge\"><title>113->147</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4936,-1174.91C4936,-1164.2 4936,-1152.62 4936,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4939.5,-1141.67 4936,-1131.67 4932.5,-1141.67 4939.5,-1141.67\"/>\r\n</g>\r\n<!-- 115 -->\r\n<g id=\"node116\" class=\"node\"><title>115</title>\r\n<path fill=\"#9bcdf2\" stroke=\"black\" d=\"M4524,-1020C4524,-1020 4422,-1020 4422,-1020 4416,-1020 4410,-1014 4410,-1008 4410,-1008 4410,-949 4410,-949 4410,-943 4416,-937 4422,-937 4422,-937 4524,-937 4524,-937 4530,-937 4536,-943 4536,-949 4536,-949 4536,-1008 4536,-1008 4536,-1014 4530,-1020 4524,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4432\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"4423\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.916</text>\r\n<text text-anchor=\"start\" x=\"4429.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 91</text>\r\n<text text-anchor=\"start\" x=\"4424.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 97]</text>\r\n<text text-anchor=\"start\" x=\"4418\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 114->115 -->\r\n<g id=\"edge115\" class=\"edge\"><title>114->115</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4633.37,-1061.08C4605.45,-1046.88 4573.29,-1030.51 4545.12,-1016.19\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4546.63,-1013.03 4536.13,-1011.61 4543.46,-1019.27 4546.63,-1013.03\"/>\r\n</g>\r\n<!-- 146 -->\r\n<g id=\"node147\" class=\"node\"><title>146</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4746,-1012.5C4746,-1012.5 4660,-1012.5 4660,-1012.5 4654,-1012.5 4648,-1006.5 4648,-1000.5 4648,-1000.5 4648,-956.5 4648,-956.5 4648,-950.5 4654,-944.5 4660,-944.5 4660,-944.5 4746,-944.5 4746,-944.5 4752,-944.5 4758,-950.5 4758,-956.5 4758,-956.5 4758,-1000.5 4758,-1000.5 4758,-1006.5 4752,-1012.5 4746,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"4661\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 33</text>\r\n<text text-anchor=\"start\" x=\"4658.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [50, 0]</text>\r\n<text text-anchor=\"start\" x=\"4656\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 114->146 -->\r\n<g id=\"edge146\" class=\"edge\"><title>114->146</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4703,-1055.91C4703,-1045.2 4703,-1033.62 4703,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4706.5,-1022.67 4703,-1012.67 4699.5,-1022.67 4706.5,-1022.67\"/>\r\n</g>\r\n<!-- 116 -->\r\n<g id=\"node117\" class=\"node\"><title>116</title>\r\n<path fill=\"#8bc5f0\" stroke=\"black\" d=\"M4202.5,-901C4202.5,-901 4041.5,-901 4041.5,-901 4035.5,-901 4029.5,-895 4029.5,-889 4029.5,-889 4029.5,-830 4029.5,-830 4029.5,-824 4035.5,-818 4041.5,-818 4041.5,-818 4202.5,-818 4202.5,-818 4208.5,-818 4214.5,-824 4214.5,-830 4214.5,-830 4214.5,-889 4214.5,-889 4214.5,-895 4208.5,-901 4202.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"4037.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 51.0</text>\r\n<text text-anchor=\"start\" x=\"4072\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.871</text>\r\n<text text-anchor=\"start\" x=\"4078.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\r\n<text text-anchor=\"start\" x=\"4073.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 97]</text>\r\n<text text-anchor=\"start\" x=\"4067\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 115->116 -->\r\n<g id=\"edge116\" class=\"edge\"><title>115->116</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4409.84,-956.448C4358.23,-939.243 4284.25,-914.582 4224.21,-894.571\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4225.3,-891.243 4214.7,-891.401 4223.08,-897.884 4225.3,-891.243\"/>\r\n</g>\r\n<!-- 145 -->\r\n<g id=\"node146\" class=\"node\"><title>145</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4516,-893.5C4516,-893.5 4430,-893.5 4430,-893.5 4424,-893.5 4418,-887.5 4418,-881.5 4418,-881.5 4418,-837.5 4418,-837.5 4418,-831.5 4424,-825.5 4430,-825.5 4430,-825.5 4516,-825.5 4516,-825.5 4522,-825.5 4528,-831.5 4528,-837.5 4528,-837.5 4528,-881.5 4528,-881.5 4528,-887.5 4522,-893.5 4516,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"4431\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4433.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4432.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\r\n<text text-anchor=\"start\" x=\"4426\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 115->145 -->\r\n<g id=\"edge145\" class=\"edge\"><title>115->145</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4473,-936.907C4473,-926.204 4473,-914.615 4473,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4476.5,-903.667 4473,-893.667 4469.5,-903.667 4476.5,-903.667\"/>\r\n</g>\r\n<!-- 117 -->\r\n<g id=\"node118\" class=\"node\"><title>117</title>\r\n<path fill=\"#55abe9\" stroke=\"black\" d=\"M3967,-782C3967,-782 3773,-782 3773,-782 3767,-782 3761,-776 3761,-770 3761,-770 3761,-711 3761,-711 3761,-705 3767,-699 3773,-699 3773,-699 3967,-699 3967,-699 3973,-699 3979,-705 3979,-711 3979,-711 3979,-770 3979,-770 3979,-776 3973,-782 3967,-782\"/>\r\n<text text-anchor=\"start\" x=\"3769\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.15</text>\r\n<text text-anchor=\"start\" x=\"3820\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 58</text>\r\n<text text-anchor=\"start\" x=\"3821.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 77]</text>\r\n<text text-anchor=\"start\" x=\"3815\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 116->117 -->\r\n<g id=\"edge117\" class=\"edge\"><title>116->117</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4034.57,-817.907C4012.58,-807.698 3988.86,-796.683 3966.45,-786.282\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3967.82,-783.057 3957.28,-782.021 3964.87,-789.407 3967.82,-783.057\"/>\r\n</g>\r\n<!-- 136 -->\r\n<g id=\"node137\" class=\"node\"><title>136</title>\r\n<path fill=\"#f7d8c2\" stroke=\"black\" d=\"M4168,-782C4168,-782 4076,-782 4076,-782 4070,-782 4064,-776 4064,-770 4064,-770 4064,-711 4064,-711 4064,-705 4070,-699 4076,-699 4076,-699 4168,-699 4168,-699 4174,-699 4180,-705 4180,-711 4180,-711 4180,-770 4180,-770 4180,-776 4174,-782 4168,-782\"/>\r\n<text text-anchor=\"start\" x=\"4081\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4072\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.976</text>\r\n<text text-anchor=\"start\" x=\"4078.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"4073.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 20]</text>\r\n<text text-anchor=\"start\" x=\"4075\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 116->136 -->\r\n<g id=\"edge136\" class=\"edge\"><title>116->136</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4122,-817.907C4122,-809.649 4122,-800.864 4122,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4125.5,-792.021 4122,-782.021 4118.5,-792.021 4125.5,-792.021\"/>\r\n</g>\r\n<!-- 118 -->\r\n<g id=\"node119\" class=\"node\"><title>118</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3752,-655.5C3752,-655.5 3666,-655.5 3666,-655.5 3660,-655.5 3654,-649.5 3654,-643.5 3654,-643.5 3654,-599.5 3654,-599.5 3654,-593.5 3660,-587.5 3666,-587.5 3666,-587.5 3752,-587.5 3752,-587.5 3758,-587.5 3764,-593.5 3764,-599.5 3764,-599.5 3764,-643.5 3764,-643.5 3764,-649.5 3758,-655.5 3752,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"3667\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3669.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3668.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"3662\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 117->118 -->\r\n<g id=\"edge118\" class=\"edge\"><title>117->118</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3814.14,-698.907C3797.59,-686.88 3779.5,-673.735 3763.07,-661.791\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3764.79,-658.714 3754.64,-655.667 3760.67,-664.377 3764.79,-658.714\"/>\r\n</g>\r\n<!-- 119 -->\r\n<g id=\"node120\" class=\"node\"><title>119</title>\r\n<path fill=\"#46a3e7\" stroke=\"black\" d=\"M3946,-663C3946,-663 3794,-663 3794,-663 3788,-663 3782,-657 3782,-651 3782,-651 3782,-592 3782,-592 3782,-586 3788,-580 3794,-580 3794,-580 3946,-580 3946,-580 3952,-580 3958,-586 3958,-592 3958,-592 3958,-651 3958,-651 3958,-657 3952,-663 3946,-663\"/>\r\n<text text-anchor=\"start\" x=\"3790\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 8.5</text>\r\n<text text-anchor=\"start\" x=\"3820\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.331</text>\r\n<text text-anchor=\"start\" x=\"3826.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 53</text>\r\n<text text-anchor=\"start\" x=\"3825.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 77]</text>\r\n<text text-anchor=\"start\" x=\"3815\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 117->119 -->\r\n<g id=\"edge119\" class=\"edge\"><title>117->119</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3870,-698.907C3870,-690.649 3870,-681.864 3870,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3873.5,-673.021 3870,-663.021 3866.5,-673.021 3873.5,-673.021\"/>\r\n</g>\r\n<!-- 120 -->\r\n<g id=\"node121\" class=\"node\"><title>120</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M3633.5,-544C3633.5,-544 3544.5,-544 3544.5,-544 3538.5,-544 3532.5,-538 3532.5,-532 3532.5,-532 3532.5,-473 3532.5,-473 3532.5,-467 3538.5,-461 3544.5,-461 3544.5,-461 3633.5,-461 3633.5,-461 3639.5,-461 3645.5,-467 3645.5,-473 3645.5,-473 3645.5,-532 3645.5,-532 3645.5,-538 3639.5,-544 3633.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3540.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3547\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"3549.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3548.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 4]</text>\r\n<text text-anchor=\"start\" x=\"3542\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 119->120 -->\r\n<g id=\"edge120\" class=\"edge\"><title>119->120</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3781.97,-583.74C3778.95,-582.478 3775.95,-581.228 3773,-580 3734.03,-563.764 3690.41,-545.624 3655.42,-531.085\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3656.37,-527.69 3645.79,-527.085 3653.68,-534.154 3656.37,-527.69\"/>\r\n</g>\r\n<!-- 127 -->\r\n<g id=\"node128\" class=\"node\"><title>127</title>\r\n<path fill=\"#3c9ee5\" stroke=\"black\" d=\"M3918,-544C3918,-544 3816,-544 3816,-544 3810,-544 3804,-538 3804,-532 3804,-532 3804,-473 3804,-473 3804,-467 3810,-461 3816,-461 3816,-461 3918,-461 3918,-461 3924,-461 3930,-467 3930,-473 3930,-473 3930,-532 3930,-532 3930,-538 3924,-544 3918,-544\"/>\r\n<text text-anchor=\"start\" x=\"3839.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3817\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.103</text>\r\n<text text-anchor=\"start\" x=\"3823.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\r\n<text text-anchor=\"start\" x=\"3822.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 73]</text>\r\n<text text-anchor=\"start\" x=\"3812\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 119->127 -->\r\n<g id=\"edge127\" class=\"edge\"><title>119->127</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3868.96,-579.907C3868.75,-571.558 3868.52,-562.671 3868.3,-554.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3871.79,-553.928 3868.04,-544.021 3864.8,-554.107 3871.79,-553.928\"/>\r\n</g>\r\n<!-- 121 -->\r\n<g id=\"node122\" class=\"node\"><title>121</title>\r\n<path fill=\"#f8e0ce\" stroke=\"black\" d=\"M3496,-425C3496,-425 3356,-425 3356,-425 3350,-425 3344,-419 3344,-413 3344,-413 3344,-354 3344,-354 3344,-348 3350,-342 3356,-342 3356,-342 3496,-342 3496,-342 3502,-342 3508,-348 3508,-354 3508,-354 3508,-413 3508,-413 3508,-419 3502,-425 3496,-425\"/>\r\n<text text-anchor=\"start\" x=\"3352\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 2568776.0</text>\r\n<text text-anchor=\"start\" x=\"3376\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.985</text>\r\n<text text-anchor=\"start\" x=\"3386.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"3385.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 3]</text>\r\n<text text-anchor=\"start\" x=\"3379\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 120->121 -->\r\n<g id=\"edge121\" class=\"edge\"><title>120->121</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3532.45,-460.907C3519.05,-451.288 3504.65,-440.953 3490.91,-431.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3492.62,-428.009 3482.45,-425.021 3488.53,-433.695 3492.62,-428.009\"/>\r\n</g>\r\n<!-- 126 -->\r\n<g id=\"node127\" class=\"node\"><title>126</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3640,-417.5C3640,-417.5 3538,-417.5 3538,-417.5 3532,-417.5 3526,-411.5 3526,-405.5 3526,-405.5 3526,-361.5 3526,-361.5 3526,-355.5 3532,-349.5 3538,-349.5 3538,-349.5 3640,-349.5 3640,-349.5 3646,-349.5 3652,-355.5 3652,-361.5 3652,-361.5 3652,-405.5 3652,-405.5 3652,-411.5 3646,-417.5 3640,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3547\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3549.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3548.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3534\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 120->126 -->\r\n<g id=\"edge126\" class=\"edge\"><title>120->126</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3589,-460.907C3589,-450.204 3589,-438.615 3589,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3592.5,-427.667 3589,-417.667 3585.5,-427.667 3592.5,-427.667\"/>\r\n</g>\r\n<!-- 122 -->\r\n<g id=\"node123\" class=\"node\"><title>122</title>\r\n<path fill=\"#eca06a\" stroke=\"black\" d=\"M3358.5,-306C3358.5,-306 3243.5,-306 3243.5,-306 3237.5,-306 3231.5,-300 3231.5,-294 3231.5,-294 3231.5,-235 3231.5,-235 3231.5,-229 3237.5,-223 3243.5,-223 3243.5,-223 3358.5,-223 3358.5,-223 3364.5,-223 3370.5,-229 3370.5,-235 3370.5,-235 3370.5,-294 3370.5,-294 3370.5,-300 3364.5,-306 3358.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"3239.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"3251\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\r\n<text text-anchor=\"start\" x=\"3261.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"3260.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 1]</text>\r\n<text text-anchor=\"start\" x=\"3254\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 121->122 -->\r\n<g id=\"edge122\" class=\"edge\"><title>121->122</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3382.63,-341.907C3372.65,-332.56 3361.94,-322.538 3351.67,-312.929\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3353.98,-310.299 3344.29,-306.021 3349.2,-315.41 3353.98,-310.299\"/>\r\n</g>\r\n<!-- 125 -->\r\n<g id=\"node126\" class=\"node\"><title>125</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3503,-298.5C3503,-298.5 3401,-298.5 3401,-298.5 3395,-298.5 3389,-292.5 3389,-286.5 3389,-286.5 3389,-242.5 3389,-242.5 3389,-236.5 3395,-230.5 3401,-230.5 3401,-230.5 3503,-230.5 3503,-230.5 3509,-230.5 3515,-236.5 3515,-242.5 3515,-242.5 3515,-286.5 3515,-286.5 3515,-292.5 3509,-298.5 3503,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3410\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3412.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3411.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"3397\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 121->125 -->\r\n<g id=\"edge125\" class=\"edge\"><title>121->125</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3435.02,-341.907C3437.42,-331.094 3440.03,-319.376 3442.46,-308.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3445.88,-309.188 3444.63,-298.667 3439.04,-307.67 3445.88,-309.188\"/>\r\n</g>\r\n<!-- 123 -->\r\n<g id=\"node124\" class=\"node\"><title>123</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3276,-179.5C3276,-179.5 3190,-179.5 3190,-179.5 3184,-179.5 3178,-173.5 3178,-167.5 3178,-167.5 3178,-123.5 3178,-123.5 3178,-117.5 3184,-111.5 3190,-111.5 3190,-111.5 3276,-111.5 3276,-111.5 3282,-111.5 3288,-117.5 3288,-123.5 3288,-123.5 3288,-167.5 3288,-167.5 3288,-173.5 3282,-179.5 3276,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3191\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3193.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"3192.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"3186\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 122->123 -->\r\n<g id=\"edge123\" class=\"edge\"><title>122->123</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3277.41,-222.907C3270.93,-211.763 3263.9,-199.658 3257.37,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3260.33,-186.554 3252.28,-179.667 3254.28,-190.072 3260.33,-186.554\"/>\r\n</g>\r\n<!-- 124 -->\r\n<g id=\"node125\" class=\"node\"><title>124</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3420,-179.5C3420,-179.5 3318,-179.5 3318,-179.5 3312,-179.5 3306,-173.5 3306,-167.5 3306,-167.5 3306,-123.5 3306,-123.5 3306,-117.5 3312,-111.5 3318,-111.5 3318,-111.5 3420,-111.5 3420,-111.5 3426,-111.5 3432,-117.5 3432,-123.5 3432,-123.5 3432,-167.5 3432,-167.5 3432,-173.5 3426,-179.5 3420,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3327\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3329.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3328.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"3314\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 122->124 -->\r\n<g id=\"edge124\" class=\"edge\"><title>122->124</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3324.59,-222.907C3331.07,-211.763 3338.1,-199.658 3344.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3347.72,-190.072 3349.72,-179.667 3341.67,-186.554 3347.72,-190.072\"/>\r\n</g>\r\n<!-- 128 -->\r\n<g id=\"node129\" class=\"node\"><title>128</title>\r\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M3784,-425C3784,-425 3682,-425 3682,-425 3676,-425 3670,-419 3670,-413 3670,-413 3670,-354 3670,-354 3670,-348 3676,-342 3682,-342 3682,-342 3784,-342 3784,-342 3790,-342 3796,-348 3796,-354 3796,-354 3796,-413 3796,-413 3796,-419 3790,-425 3784,-425\"/>\r\n<text text-anchor=\"start\" x=\"3684.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"3683\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\r\n<text text-anchor=\"start\" x=\"3689.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 43</text>\r\n<text text-anchor=\"start\" x=\"3688.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 65]</text>\r\n<text text-anchor=\"start\" x=\"3678\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127->128 -->\r\n<g id=\"edge128\" class=\"edge\"><title>127->128</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3820.51,-460.907C3809.7,-451.469 3798.1,-441.343 3787,-431.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3789.24,-428.961 3779.41,-425.021 3784.64,-434.234 3789.24,-428.961\"/>\r\n</g>\r\n<!-- 135 -->\r\n<g id=\"node136\" class=\"node\"><title>135</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3928,-417.5C3928,-417.5 3826,-417.5 3826,-417.5 3820,-417.5 3814,-411.5 3814,-405.5 3814,-405.5 3814,-361.5 3814,-361.5 3814,-355.5 3820,-349.5 3826,-349.5 3826,-349.5 3928,-349.5 3928,-349.5 3934,-349.5 3940,-355.5 3940,-361.5 3940,-361.5 3940,-405.5 3940,-405.5 3940,-411.5 3934,-417.5 3928,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3835\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3837.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"3836.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\r\n<text text-anchor=\"start\" x=\"3822\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 127->135 -->\r\n<g id=\"edge135\" class=\"edge\"><title>127->135</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3870.47,-460.907C3871.38,-450.204 3872.37,-438.615 3873.3,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3876.8,-427.929 3874.17,-417.667 3869.83,-427.333 3876.8,-427.929\"/>\r\n</g>\r\n<!-- 129 -->\r\n<g id=\"node130\" class=\"node\"><title>129</title>\r\n<path fill=\"#3ea0e6\" stroke=\"black\" d=\"M3818,-306C3818,-306 3596,-306 3596,-306 3590,-306 3584,-300 3584,-294 3584,-294 3584,-235 3584,-235 3584,-229 3590,-223 3596,-223 3596,-223 3818,-223 3818,-223 3824,-223 3830,-229 3830,-235 3830,-235 3830,-294 3830,-294 3830,-300 3824,-306 3818,-306\"/>\r\n<text text-anchor=\"start\" x=\"3592\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.105</text>\r\n<text text-anchor=\"start\" x=\"3657\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.172</text>\r\n<text text-anchor=\"start\" x=\"3663.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"3662.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 38]</text>\r\n<text text-anchor=\"start\" x=\"3652\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 128->129 -->\r\n<g id=\"edge129\" class=\"edge\"><title>128->129</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3723.98,-341.907C3722.12,-333.558 3720.15,-324.671 3718.23,-316.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3721.59,-315.023 3716,-306.021 3714.76,-316.542 3721.59,-315.023\"/>\r\n</g>\r\n<!-- 134 -->\r\n<g id=\"node135\" class=\"node\"><title>134</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3962,-298.5C3962,-298.5 3860,-298.5 3860,-298.5 3854,-298.5 3848,-292.5 3848,-286.5 3848,-286.5 3848,-242.5 3848,-242.5 3848,-236.5 3854,-230.5 3860,-230.5 3860,-230.5 3962,-230.5 3962,-230.5 3968,-230.5 3974,-236.5 3974,-242.5 3974,-242.5 3974,-286.5 3974,-286.5 3974,-292.5 3968,-298.5 3962,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"3869\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3867.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"3866.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"3856\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 128->134 -->\r\n<g id=\"edge134\" class=\"edge\"><title>128->134</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3794.76,-341.907C3813.22,-329.769 3833.42,-316.493 3851.72,-304.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3854.11,-307.084 3860.54,-298.667 3850.26,-301.235 3854.11,-307.084\"/>\r\n</g>\r\n<!-- 130 -->\r\n<g id=\"node131\" class=\"node\"><title>130</title>\r\n<path fill=\"#49a5e7\" stroke=\"black\" d=\"M3687.5,-187C3687.5,-187 3580.5,-187 3580.5,-187 3574.5,-187 3568.5,-181 3568.5,-175 3568.5,-175 3568.5,-116 3568.5,-116 3568.5,-110 3574.5,-104 3580.5,-104 3580.5,-104 3687.5,-104 3687.5,-104 3693.5,-104 3699.5,-110 3699.5,-116 3699.5,-116 3699.5,-175 3699.5,-175 3699.5,-181 3693.5,-187 3687.5,-187\"/>\r\n<text text-anchor=\"start\" x=\"3576.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 414.5</text>\r\n<text text-anchor=\"start\" x=\"3584\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"3594.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"3589.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 12]</text>\r\n<text text-anchor=\"start\" x=\"3579\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 129->130 -->\r\n<g id=\"edge130\" class=\"edge\"><title>129->130</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3681.67,-222.907C3676.18,-214.105 3670.31,-204.703 3664.64,-195.612\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3667.55,-193.652 3659.28,-187.021 3661.61,-197.358 3667.55,-193.652\"/>\r\n</g>\r\n<!-- 133 -->\r\n<g id=\"node134\" class=\"node\"><title>133</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3832,-179.5C3832,-179.5 3730,-179.5 3730,-179.5 3724,-179.5 3718,-173.5 3718,-167.5 3718,-167.5 3718,-123.5 3718,-123.5 3718,-117.5 3724,-111.5 3730,-111.5 3730,-111.5 3832,-111.5 3832,-111.5 3838,-111.5 3844,-117.5 3844,-123.5 3844,-123.5 3844,-167.5 3844,-167.5 3844,-173.5 3838,-179.5 3832,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"3739\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3737.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"3736.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 26]</text>\r\n<text text-anchor=\"start\" x=\"3726\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 129->133 -->\r\n<g id=\"edge133\" class=\"edge\"><title>129->133</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3732.67,-222.907C3739.72,-211.763 3747.38,-199.658 3754.47,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3757.64,-189.989 3760.02,-179.667 3751.72,-186.248 3757.64,-189.989\"/>\r\n</g>\r\n<!-- 131 -->\r\n<g id=\"node132\" class=\"node\"><title>131</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3617,-68C3617,-68 3515,-68 3515,-68 3509,-68 3503,-62 3503,-56 3503,-56 3503,-12 3503,-12 3503,-6 3509,-0 3515,-0 3515,-0 3617,-0 3617,-0 3623,-0 3629,-6 3629,-12 3629,-12 3629,-56 3629,-56 3629,-62 3623,-68 3617,-68\"/>\r\n<text text-anchor=\"start\" x=\"3524\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3526.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"3521.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 12]</text>\r\n<text text-anchor=\"start\" x=\"3511\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 130->131 -->\r\n<g id=\"edge131\" class=\"edge\"><title>130->131</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3608.68,-103.726C3603.24,-94.9703 3597.49,-85.7032 3592.02,-76.9051\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3594.93,-74.9484 3586.68,-68.2996 3588.98,-78.6413 3594.93,-74.9484\"/>\r\n</g>\r\n<!-- 132 -->\r\n<g id=\"node133\" class=\"node\"><title>132</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3745,-68C3745,-68 3659,-68 3659,-68 3653,-68 3647,-62 3647,-56 3647,-56 3647,-12 3647,-12 3647,-6 3653,-0 3659,-0 3659,-0 3745,-0 3745,-0 3751,-0 3757,-6 3757,-12 3757,-12 3757,-56 3757,-56 3757,-62 3751,-68 3745,-68\"/>\r\n<text text-anchor=\"start\" x=\"3660\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3662.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"3661.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"3655\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 130->132 -->\r\n<g id=\"edge132\" class=\"edge\"><title>130->132</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M3659.32,-103.726C3664.76,-94.9703 3670.51,-85.7032 3675.98,-76.9051\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"3679.02,-78.6413 3681.32,-68.2996 3673.07,-74.9484 3679.02,-78.6413\"/>\r\n</g>\r\n<!-- 137 -->\r\n<g id=\"node138\" class=\"node\"><title>137</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4096,-655.5C4096,-655.5 4010,-655.5 4010,-655.5 4004,-655.5 3998,-649.5 3998,-643.5 3998,-643.5 3998,-599.5 3998,-599.5 3998,-593.5 4004,-587.5 4010,-587.5 4010,-587.5 4096,-587.5 4096,-587.5 4102,-587.5 4108,-593.5 4108,-599.5 4108,-599.5 4108,-643.5 4108,-643.5 4108,-649.5 4102,-655.5 4096,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4011\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4009.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\r\n<text text-anchor=\"start\" x=\"4008.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [23, 0]</text>\r\n<text text-anchor=\"start\" x=\"4006\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 136->137 -->\r\n<g id=\"edge137\" class=\"edge\"><title>136->137</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4098.06,-698.907C4091.49,-687.763 4084.35,-675.658 4077.73,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4080.65,-662.503 4072.56,-655.667 4074.63,-666.059 4080.65,-662.503\"/>\r\n</g>\r\n<!-- 138 -->\r\n<g id=\"node139\" class=\"node\"><title>138</title>\r\n<path fill=\"#74baed\" stroke=\"black\" d=\"M4240,-663C4240,-663 4138,-663 4138,-663 4132,-663 4126,-657 4126,-651 4126,-651 4126,-592 4126,-592 4126,-586 4132,-580 4138,-580 4138,-580 4240,-580 4240,-580 4246,-580 4252,-586 4252,-592 4252,-592 4252,-651 4252,-651 4252,-657 4246,-663 4240,-663\"/>\r\n<text text-anchor=\"start\" x=\"4140.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4139\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.779</text>\r\n<text text-anchor=\"start\" x=\"4145.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"4144.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 20]</text>\r\n<text text-anchor=\"start\" x=\"4134\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 136->138 -->\r\n<g id=\"edge138\" class=\"edge\"><title>136->138</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4145.25,-698.907C4150.23,-690.195 4155.56,-680.897 4160.71,-671.893\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4163.86,-673.438 4165.8,-663.021 4157.79,-669.959 4163.86,-673.438\"/>\r\n</g>\r\n<!-- 139 -->\r\n<g id=\"node140\" class=\"node\"><title>139</title>\r\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M4129.5,-544C4129.5,-544 3960.5,-544 3960.5,-544 3954.5,-544 3948.5,-538 3948.5,-532 3948.5,-532 3948.5,-473 3948.5,-473 3948.5,-467 3954.5,-461 3960.5,-461 3960.5,-461 4129.5,-461 4129.5,-461 4135.5,-461 4141.5,-467 4141.5,-473 4141.5,-473 4141.5,-532 4141.5,-532 4141.5,-538 4135.5,-544 4129.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"3956.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 210.5</text>\r\n<text text-anchor=\"start\" x=\"3995\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.286</text>\r\n<text text-anchor=\"start\" x=\"4001.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\r\n<text text-anchor=\"start\" x=\"4000.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 19]</text>\r\n<text text-anchor=\"start\" x=\"3990\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 138->139 -->\r\n<g id=\"edge139\" class=\"edge\"><title>138->139</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4139.04,-579.907C4127.31,-570.379 4114.72,-560.148 4102.69,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4104.84,-547.61 4094.87,-544.021 4100.43,-553.043 4104.84,-547.61\"/>\r\n</g>\r\n<!-- 142 -->\r\n<g id=\"node143\" class=\"node\"><title>142</title>\r\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M4398.5,-544C4398.5,-544 4171.5,-544 4171.5,-544 4165.5,-544 4159.5,-538 4159.5,-532 4159.5,-532 4159.5,-473 4159.5,-473 4159.5,-467 4165.5,-461 4171.5,-461 4171.5,-461 4398.5,-461 4398.5,-461 4404.5,-461 4410.5,-467 4410.5,-473 4410.5,-473 4410.5,-532 4410.5,-532 4410.5,-538 4404.5,-544 4398.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4167.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.42</text>\r\n<text text-anchor=\"start\" x=\"4239\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"4245.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4244.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\r\n<text text-anchor=\"start\" x=\"4238\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 138->142 -->\r\n<g id=\"edge142\" class=\"edge\"><title>138->142</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4222.31,-579.907C4229.75,-570.832 4237.72,-561.121 4245.39,-551.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4248.11,-553.972 4251.75,-544.021 4242.7,-549.531 4248.11,-553.972\"/>\r\n</g>\r\n<!-- 140 -->\r\n<g id=\"node141\" class=\"node\"><title>140</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4072,-417.5C4072,-417.5 3970,-417.5 3970,-417.5 3964,-417.5 3958,-411.5 3958,-405.5 3958,-405.5 3958,-361.5 3958,-361.5 3958,-355.5 3964,-349.5 3970,-349.5 3970,-349.5 4072,-349.5 4072,-349.5 4078,-349.5 4084,-355.5 4084,-361.5 4084,-361.5 4084,-405.5 4084,-405.5 4084,-411.5 4078,-417.5 4072,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"3979\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"3981.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"3976.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 19]</text>\r\n<text text-anchor=\"start\" x=\"3966\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 139->140 -->\r\n<g id=\"edge140\" class=\"edge\"><title>139->140</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4036.67,-460.907C4034.48,-450.204 4032.1,-438.615 4029.88,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4033.24,-426.76 4027.8,-417.667 4026.38,-428.166 4033.24,-426.76\"/>\r\n</g>\r\n<!-- 141 -->\r\n<g id=\"node142\" class=\"node\"><title>141</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4200,-417.5C4200,-417.5 4114,-417.5 4114,-417.5 4108,-417.5 4102,-411.5 4102,-405.5 4102,-405.5 4102,-361.5 4102,-361.5 4102,-355.5 4108,-349.5 4114,-349.5 4114,-349.5 4200,-349.5 4200,-349.5 4206,-349.5 4212,-355.5 4212,-361.5 4212,-361.5 4212,-405.5 4212,-405.5 4212,-411.5 4206,-417.5 4200,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4115\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4117.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4116.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4110\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 139->141 -->\r\n<g id=\"edge141\" class=\"edge\"><title>139->141</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4083.86,-460.907C4094.95,-449.321 4107.03,-436.698 4118.12,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4120.86,-427.311 4125.25,-417.667 4115.81,-422.47 4120.86,-427.311\"/>\r\n</g>\r\n<!-- 143 -->\r\n<g id=\"node144\" class=\"node\"><title>143</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4328,-417.5C4328,-417.5 4242,-417.5 4242,-417.5 4236,-417.5 4230,-411.5 4230,-405.5 4230,-405.5 4230,-361.5 4230,-361.5 4230,-355.5 4236,-349.5 4242,-349.5 4242,-349.5 4328,-349.5 4328,-349.5 4334,-349.5 4340,-355.5 4340,-361.5 4340,-361.5 4340,-405.5 4340,-405.5 4340,-411.5 4334,-417.5 4328,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4243\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4245.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4244.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"4238\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 142->143 -->\r\n<g id=\"edge143\" class=\"edge\"><title>142->143</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4285,-460.907C4285,-450.204 4285,-438.615 4285,-427.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4288.5,-427.667 4285,-417.667 4281.5,-427.667 4288.5,-427.667\"/>\r\n</g>\r\n<!-- 144 -->\r\n<g id=\"node145\" class=\"node\"><title>144</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4472,-417.5C4472,-417.5 4370,-417.5 4370,-417.5 4364,-417.5 4358,-411.5 4358,-405.5 4358,-405.5 4358,-361.5 4358,-361.5 4358,-355.5 4364,-349.5 4370,-349.5 4370,-349.5 4472,-349.5 4472,-349.5 4478,-349.5 4484,-355.5 4484,-361.5 4484,-361.5 4484,-405.5 4484,-405.5 4484,-411.5 4478,-417.5 4472,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4379\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4381.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4380.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4366\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 142->144 -->\r\n<g id=\"edge144\" class=\"edge\"><title>142->144</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4332.18,-460.907C4345.91,-449.101 4360.89,-436.217 4374.56,-424.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4377.15,-426.842 4382.45,-417.667 4372.58,-421.535 4377.15,-426.842\"/>\r\n</g>\r\n<!-- 149 -->\r\n<g id=\"node150\" class=\"node\"><title>149</title>\r\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M5169,-1139C5169,-1139 5071,-1139 5071,-1139 5065,-1139 5059,-1133 5059,-1127 5059,-1127 5059,-1068 5059,-1068 5059,-1062 5065,-1056 5071,-1056 5071,-1056 5169,-1056 5169,-1056 5175,-1056 5181,-1062 5181,-1068 5181,-1068 5181,-1127 5181,-1127 5181,-1133 5175,-1139 5169,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5077\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 8.0</text>\r\n<text text-anchor=\"start\" x=\"5070\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.164</text>\r\n<text text-anchor=\"start\" x=\"5072.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 401</text>\r\n<text text-anchor=\"start\" x=\"5067\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [608, 15]</text>\r\n<text text-anchor=\"start\" x=\"5073\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 148->149 -->\r\n<g id=\"edge149\" class=\"edge\"><title>148->149</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5152,-1174.91C5148.43,-1166.38 5144.62,-1157.28 5140.92,-1148.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5144.06,-1146.89 5136.97,-1139.02 5137.6,-1149.6 5144.06,-1146.89\"/>\r\n</g>\r\n<!-- 180 -->\r\n<g id=\"node181\" class=\"node\"><title>180</title>\r\n<path fill=\"#f3c6a6\" stroke=\"black\" d=\"M5398.5,-1139C5398.5,-1139 5211.5,-1139 5211.5,-1139 5205.5,-1139 5199.5,-1133 5199.5,-1127 5199.5,-1127 5199.5,-1068 5199.5,-1068 5199.5,-1062 5205.5,-1056 5211.5,-1056 5211.5,-1056 5398.5,-1056 5398.5,-1056 5404.5,-1056 5410.5,-1062 5410.5,-1068 5410.5,-1068 5410.5,-1127 5410.5,-1127 5410.5,-1133 5404.5,-1139 5398.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5207.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\r\n<text text-anchor=\"start\" x=\"5255\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.938</text>\r\n<text text-anchor=\"start\" x=\"5261.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"5256.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 17]</text>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 148->180 -->\r\n<g id=\"edge180\" class=\"edge\"><title>148->180</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5216.18,-1174.91C5227.16,-1165.47 5238.93,-1155.34 5250.19,-1145.65\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5252.6,-1148.2 5257.9,-1139.02 5248.04,-1142.89 5252.6,-1148.2\"/>\r\n</g>\r\n<!-- 150 -->\r\n<g id=\"node151\" class=\"node\"><title>150</title>\r\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M5029,-1020C5029,-1020 4931,-1020 4931,-1020 4925,-1020 4919,-1014 4919,-1008 4919,-1008 4919,-949 4919,-949 4919,-943 4925,-937 4931,-937 4931,-937 5029,-937 5029,-937 5035,-937 5041,-943 5041,-949 5041,-949 5041,-1008 5041,-1008 5041,-1014 5035,-1020 5029,-1020\"/>\r\n<text text-anchor=\"start\" x=\"4939\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4930\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.147</text>\r\n<text text-anchor=\"start\" x=\"4932.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 399</text>\r\n<text text-anchor=\"start\" x=\"4927\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [608, 13]</text>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 149->150 -->\r\n<g id=\"edge150\" class=\"edge\"><title>149->150</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5071.43,-1055.91C5060.13,-1046.47 5048.02,-1036.34 5036.42,-1026.65\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5038.4,-1023.75 5028.49,-1020.02 5033.92,-1029.12 5038.4,-1023.75\"/>\r\n</g>\r\n<!-- 179 -->\r\n<g id=\"node180\" class=\"node\"><title>179</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5173,-1012.5C5173,-1012.5 5071,-1012.5 5071,-1012.5 5065,-1012.5 5059,-1006.5 5059,-1000.5 5059,-1000.5 5059,-956.5 5059,-956.5 5059,-950.5 5065,-944.5 5071,-944.5 5071,-944.5 5173,-944.5 5173,-944.5 5179,-944.5 5185,-950.5 5185,-956.5 5185,-956.5 5185,-1000.5 5185,-1000.5 5185,-1006.5 5179,-1012.5 5173,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"5080\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5082.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5081.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"5067\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 149->179 -->\r\n<g id=\"edge179\" class=\"edge\"><title>149->179</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5120.69,-1055.91C5120.88,-1045.2 5121.07,-1033.62 5121.26,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5124.76,-1022.73 5121.43,-1012.67 5117.76,-1022.61 5124.76,-1022.73\"/>\r\n</g>\r\n<!-- 151 -->\r\n<g id=\"node152\" class=\"node\"><title>151</title>\r\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M4870,-901C4870,-901 4648,-901 4648,-901 4642,-901 4636,-895 4636,-889 4636,-889 4636,-830 4636,-830 4636,-824 4642,-818 4648,-818 4648,-818 4870,-818 4870,-818 4876,-818 4882,-824 4882,-830 4882,-830 4882,-889 4882,-889 4882,-895 4876,-901 4870,-901\"/>\r\n<text text-anchor=\"start\" x=\"4644\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.155</text>\r\n<text text-anchor=\"start\" x=\"4709\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.035</text>\r\n<text text-anchor=\"start\" x=\"4711.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 351</text>\r\n<text text-anchor=\"start\" x=\"4710.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [546, 2]</text>\r\n<text text-anchor=\"start\" x=\"4712\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 150->151 -->\r\n<g id=\"edge151\" class=\"edge\"><title>150->151</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4918.73,-945.064C4895.86,-932.958 4869.46,-918.979 4844.79,-905.918\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4846.26,-902.738 4835.79,-901.152 4842.99,-908.925 4846.26,-902.738\"/>\r\n</g>\r\n<!-- 166 -->\r\n<g id=\"node167\" class=\"node\"><title>166</title>\r\n<path fill=\"#ea975c\" stroke=\"black\" d=\"M5054,-901C5054,-901 4912,-901 4912,-901 4906,-901 4900,-895 4900,-889 4900,-889 4900,-830 4900,-830 4900,-824 4906,-818 4912,-818 4912,-818 5054,-818 5054,-818 5060,-818 5066,-824 5066,-830 5066,-830 5066,-889 5066,-889 5066,-895 5060,-901 5054,-901\"/>\r\n<text text-anchor=\"start\" x=\"4908\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 135.0</text>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.612</text>\r\n<text text-anchor=\"start\" x=\"4939.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\r\n<text text-anchor=\"start\" x=\"4934.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [62, 11]</text>\r\n<text text-anchor=\"start\" x=\"4936\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 150->166 -->\r\n<g id=\"edge166\" class=\"edge\"><title>150->166</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4981.04,-936.907C4981.25,-928.558 4981.48,-919.671 4981.7,-911.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4985.2,-911.107 4981.96,-901.021 4978.21,-910.928 4985.2,-911.107\"/>\r\n</g>\r\n<!-- 152 -->\r\n<g id=\"node153\" class=\"node\"><title>152</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4604.5,-782C4604.5,-782 4417.5,-782 4417.5,-782 4411.5,-782 4405.5,-776 4405.5,-770 4405.5,-770 4405.5,-711 4405.5,-711 4405.5,-705 4411.5,-699 4417.5,-699 4417.5,-699 4604.5,-699 4604.5,-699 4610.5,-699 4616.5,-705 4616.5,-711 4616.5,-711 4616.5,-770 4616.5,-770 4616.5,-776 4610.5,-782 4604.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4413.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.065</text>\r\n<text text-anchor=\"start\" x=\"4461\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.019</text>\r\n<text text-anchor=\"start\" x=\"4463.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 349</text>\r\n<text text-anchor=\"start\" x=\"4462.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [545, 1]</text>\r\n<text text-anchor=\"start\" x=\"4464\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 151->152 -->\r\n<g id=\"edge152\" class=\"edge\"><title>151->152</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4672.96,-817.907C4651.41,-807.743 4628.18,-796.781 4606.22,-786.42\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4607.43,-783.122 4596.89,-782.021 4604.44,-789.453 4607.43,-783.122\"/>\r\n</g>\r\n<!-- 163 -->\r\n<g id=\"node164\" class=\"node\"><title>163</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M4873.5,-782C4873.5,-782 4646.5,-782 4646.5,-782 4640.5,-782 4634.5,-776 4634.5,-770 4634.5,-770 4634.5,-711 4634.5,-711 4634.5,-705 4640.5,-699 4646.5,-699 4646.5,-699 4873.5,-699 4873.5,-699 4879.5,-699 4885.5,-705 4885.5,-711 4885.5,-711 4885.5,-770 4885.5,-770 4885.5,-776 4879.5,-782 4873.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"4642.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.43</text>\r\n<text text-anchor=\"start\" x=\"4718\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"4720.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4719.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\r\n<text text-anchor=\"start\" x=\"4713\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 151->163 -->\r\n<g id=\"edge163\" class=\"edge\"><title>151->163</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4759.35,-817.907C4759.42,-809.649 4759.49,-800.864 4759.57,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4763.07,-792.05 4759.65,-782.021 4756.07,-791.99 4763.07,-792.05\"/>\r\n</g>\r\n<!-- 153 -->\r\n<g id=\"node154\" class=\"node\"><title>153</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4382.5,-655.5C4382.5,-655.5 4293.5,-655.5 4293.5,-655.5 4287.5,-655.5 4281.5,-649.5 4281.5,-643.5 4281.5,-643.5 4281.5,-599.5 4281.5,-599.5 4281.5,-593.5 4287.5,-587.5 4293.5,-587.5 4293.5,-587.5 4382.5,-587.5 4382.5,-587.5 4388.5,-587.5 4394.5,-593.5 4394.5,-599.5 4394.5,-599.5 4394.5,-643.5 4394.5,-643.5 4394.5,-649.5 4388.5,-655.5 4382.5,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4296\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4290.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 244</text>\r\n<text text-anchor=\"start\" x=\"4289.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [382, 0]</text>\r\n<text text-anchor=\"start\" x=\"4291\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 152->153 -->\r\n<g id=\"edge153\" class=\"edge\"><title>152->153</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4450.98,-698.907C4433.03,-686.769 4413.4,-673.493 4395.61,-661.462\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4397.29,-658.37 4387.04,-655.667 4393.36,-664.168 4397.29,-658.37\"/>\r\n</g>\r\n<!-- 154 -->\r\n<g id=\"node155\" class=\"node\"><title>154</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M4601.5,-663C4601.5,-663 4424.5,-663 4424.5,-663 4418.5,-663 4412.5,-657 4412.5,-651 4412.5,-651 4412.5,-592 4412.5,-592 4412.5,-586 4418.5,-580 4424.5,-580 4424.5,-580 4601.5,-580 4601.5,-580 4607.5,-580 4613.5,-586 4613.5,-592 4613.5,-592 4613.5,-651 4613.5,-651 4613.5,-657 4607.5,-663 4601.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"4420.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.005</text>\r\n<text text-anchor=\"start\" x=\"4463\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.054</text>\r\n<text text-anchor=\"start\" x=\"4465.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 105</text>\r\n<text text-anchor=\"start\" x=\"4464.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [163, 1]</text>\r\n<text text-anchor=\"start\" x=\"4466\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 152->154 -->\r\n<g id=\"edge154\" class=\"edge\"><title>152->154</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4511.69,-698.907C4511.84,-690.558 4511.99,-681.671 4512.14,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4515.64,-673.079 4512.31,-663.021 4508.64,-672.959 4515.64,-673.079\"/>\r\n</g>\r\n<!-- 155 -->\r\n<g id=\"node156\" class=\"node\"><title>155</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4529.5,-536.5C4529.5,-536.5 4440.5,-536.5 4440.5,-536.5 4434.5,-536.5 4428.5,-530.5 4428.5,-524.5 4428.5,-524.5 4428.5,-480.5 4428.5,-480.5 4428.5,-474.5 4434.5,-468.5 4440.5,-468.5 4440.5,-468.5 4529.5,-468.5 4529.5,-468.5 4535.5,-468.5 4541.5,-474.5 4541.5,-480.5 4541.5,-480.5 4541.5,-524.5 4541.5,-524.5 4541.5,-530.5 4535.5,-536.5 4529.5,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"4443\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4441.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 83</text>\r\n<text text-anchor=\"start\" x=\"4436.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [132, 0]</text>\r\n<text text-anchor=\"start\" x=\"4438\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 154->155 -->\r\n<g id=\"edge155\" class=\"edge\"><title>154->155</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4503.29,-579.907C4500.7,-569.094 4497.89,-557.376 4495.28,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4498.67,-545.578 4492.94,-536.667 4491.86,-547.207 4498.67,-545.578\"/>\r\n</g>\r\n<!-- 156 -->\r\n<g id=\"node157\" class=\"node\"><title>156</title>\r\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4758.5,-544C4758.5,-544 4571.5,-544 4571.5,-544 4565.5,-544 4559.5,-538 4559.5,-532 4559.5,-532 4559.5,-473 4559.5,-473 4559.5,-467 4565.5,-461 4571.5,-461 4571.5,-461 4758.5,-461 4758.5,-461 4764.5,-461 4770.5,-467 4770.5,-473 4770.5,-473 4770.5,-532 4770.5,-532 4770.5,-538 4764.5,-544 4758.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4567.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.075</text>\r\n<text text-anchor=\"start\" x=\"4615\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.201</text>\r\n<text text-anchor=\"start\" x=\"4621.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 22</text>\r\n<text text-anchor=\"start\" x=\"4620.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 1]</text>\r\n<text text-anchor=\"start\" x=\"4618\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 154->156 -->\r\n<g id=\"edge156\" class=\"edge\"><title>154->156</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4565.74,-579.907C4578.12,-570.379 4591.41,-560.148 4604.11,-550.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4606.57,-552.894 4612.36,-544.021 4602.3,-547.347 4606.57,-552.894\"/>\r\n</g>\r\n<!-- 157 -->\r\n<g id=\"node158\" class=\"node\"><title>157</title>\r\n<path fill=\"#e89152\" stroke=\"black\" d=\"M4619,-425C4619,-425 4527,-425 4527,-425 4521,-425 4515,-419 4515,-413 4515,-413 4515,-354 4515,-354 4515,-348 4521,-342 4527,-342 4527,-342 4619,-342 4619,-342 4625,-342 4631,-348 4631,-354 4631,-354 4631,-413 4631,-413 4631,-419 4625,-425 4619,-425\"/>\r\n<text text-anchor=\"start\" x=\"4543.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"4523\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.503</text>\r\n<text text-anchor=\"start\" x=\"4533.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"4532.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 1]</text>\r\n<text text-anchor=\"start\" x=\"4526\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 156->157 -->\r\n<g id=\"edge157\" class=\"edge\"><title>156->157</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4633.08,-460.907C4626.02,-451.923 4618.46,-442.315 4611.18,-433.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4613.8,-430.718 4604.86,-425.021 4608.29,-435.045 4613.8,-430.718\"/>\r\n</g>\r\n<!-- 162 -->\r\n<g id=\"node163\" class=\"node\"><title>162</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4747,-417.5C4747,-417.5 4661,-417.5 4661,-417.5 4655,-417.5 4649,-411.5 4649,-405.5 4649,-405.5 4649,-361.5 4649,-361.5 4649,-355.5 4655,-349.5 4661,-349.5 4661,-349.5 4747,-349.5 4747,-349.5 4753,-349.5 4759,-355.5 4759,-361.5 4759,-361.5 4759,-405.5 4759,-405.5 4759,-411.5 4753,-417.5 4747,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4662\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4660.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"4659.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [23, 0]</text>\r\n<text text-anchor=\"start\" x=\"4657\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 156->162 -->\r\n<g id=\"edge162\" class=\"edge\"><title>156->162</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4678.53,-460.907C4682.14,-450.094 4686.04,-438.376 4689.69,-427.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4693.1,-428.261 4692.94,-417.667 4686.46,-426.047 4693.1,-428.261\"/>\r\n</g>\r\n<!-- 158 -->\r\n<g id=\"node159\" class=\"node\"><title>158</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4533,-298.5C4533,-298.5 4447,-298.5 4447,-298.5 4441,-298.5 4435,-292.5 4435,-286.5 4435,-286.5 4435,-242.5 4435,-242.5 4435,-236.5 4441,-230.5 4447,-230.5 4447,-230.5 4533,-230.5 4533,-230.5 4539,-230.5 4545,-236.5 4545,-242.5 4545,-242.5 4545,-286.5 4545,-286.5 4545,-292.5 4539,-298.5 4533,-298.5\"/>\r\n<text text-anchor=\"start\" x=\"4448\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4450.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4449.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"4443\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 157->158 -->\r\n<g id=\"edge158\" class=\"edge\"><title>157->158</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4544.2,-341.907C4536.22,-330.652 4527.54,-318.418 4519.52,-307.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4522.17,-304.798 4513.53,-298.667 4516.46,-308.848 4522.17,-304.798\"/>\r\n</g>\r\n<!-- 159 -->\r\n<g id=\"node160\" class=\"node\"><title>159</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M4736.5,-306C4736.5,-306 4575.5,-306 4575.5,-306 4569.5,-306 4563.5,-300 4563.5,-294 4563.5,-294 4563.5,-235 4563.5,-235 4563.5,-229 4569.5,-223 4575.5,-223 4575.5,-223 4736.5,-223 4736.5,-223 4742.5,-223 4748.5,-229 4748.5,-235 4748.5,-235 4748.5,-294 4748.5,-294 4748.5,-300 4742.5,-306 4736.5,-306\"/>\r\n<text text-anchor=\"start\" x=\"4571.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 52.5</text>\r\n<text text-anchor=\"start\" x=\"4606\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"4616.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"4615.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 1]</text>\r\n<text text-anchor=\"start\" x=\"4609\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 157->159 -->\r\n<g id=\"edge159\" class=\"edge\"><title>157->159</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4601.8,-341.907C4608.11,-333.014 4614.85,-323.509 4621.36,-314.331\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4624.32,-316.202 4627.25,-306.021 4618.61,-312.152 4624.32,-316.202\"/>\r\n</g>\r\n<!-- 160 -->\r\n<g id=\"node161\" class=\"node\"><title>160</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4631,-179.5C4631,-179.5 4545,-179.5 4545,-179.5 4539,-179.5 4533,-173.5 4533,-167.5 4533,-167.5 4533,-123.5 4533,-123.5 4533,-117.5 4539,-111.5 4545,-111.5 4545,-111.5 4631,-111.5 4631,-111.5 4637,-111.5 4643,-117.5 4643,-123.5 4643,-123.5 4643,-167.5 4643,-167.5 4643,-173.5 4637,-179.5 4631,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"4546\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4548.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"4547.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\r\n<text text-anchor=\"start\" x=\"4541\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 159->160 -->\r\n<g id=\"edge160\" class=\"edge\"><title>159->160</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4632.41,-222.907C4625.93,-211.763 4618.9,-199.658 4612.37,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4615.33,-186.554 4607.28,-179.667 4609.28,-190.072 4615.33,-186.554\"/>\r\n</g>\r\n<!-- 161 -->\r\n<g id=\"node162\" class=\"node\"><title>161</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4775,-179.5C4775,-179.5 4673,-179.5 4673,-179.5 4667,-179.5 4661,-173.5 4661,-167.5 4661,-167.5 4661,-123.5 4661,-123.5 4661,-117.5 4667,-111.5 4673,-111.5 4673,-111.5 4775,-111.5 4775,-111.5 4781,-111.5 4787,-117.5 4787,-123.5 4787,-123.5 4787,-167.5 4787,-167.5 4787,-173.5 4781,-179.5 4775,-179.5\"/>\r\n<text text-anchor=\"start\" x=\"4682\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4684.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4683.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4669\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 159->161 -->\r\n<g id=\"edge161\" class=\"edge\"><title>159->161</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4679.59,-222.907C4686.07,-211.763 4693.1,-199.658 4699.63,-188.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4702.72,-190.072 4704.72,-179.667 4696.67,-186.554 4702.72,-190.072\"/>\r\n</g>\r\n<!-- 164 -->\r\n<g id=\"node165\" class=\"node\"><title>164</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4735,-655.5C4735,-655.5 4649,-655.5 4649,-655.5 4643,-655.5 4637,-649.5 4637,-643.5 4637,-643.5 4637,-599.5 4637,-599.5 4637,-593.5 4643,-587.5 4649,-587.5 4649,-587.5 4735,-587.5 4735,-587.5 4741,-587.5 4747,-593.5 4747,-599.5 4747,-599.5 4747,-643.5 4747,-643.5 4747,-649.5 4741,-655.5 4735,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4650\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4652.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4651.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4645\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 163->164 -->\r\n<g id=\"edge164\" class=\"edge\"><title>163->164</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4736.41,-698.907C4729.93,-687.763 4722.9,-675.658 4716.37,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4719.33,-662.554 4711.28,-655.667 4713.28,-666.072 4719.33,-662.554\"/>\r\n</g>\r\n<!-- 165 -->\r\n<g id=\"node166\" class=\"node\"><title>165</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4879,-655.5C4879,-655.5 4777,-655.5 4777,-655.5 4771,-655.5 4765,-649.5 4765,-643.5 4765,-643.5 4765,-599.5 4765,-599.5 4765,-593.5 4771,-587.5 4777,-587.5 4777,-587.5 4879,-587.5 4879,-587.5 4885,-587.5 4891,-593.5 4891,-599.5 4891,-599.5 4891,-643.5 4891,-643.5 4891,-649.5 4885,-655.5 4879,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"4786\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4788.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4787.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"4773\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 163->165 -->\r\n<g id=\"edge165\" class=\"edge\"><title>163->165</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4783.59,-698.907C4790.07,-687.763 4797.1,-675.658 4803.63,-664.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4806.72,-666.072 4808.72,-655.667 4800.67,-662.554 4806.72,-666.072\"/>\r\n</g>\r\n<!-- 167 -->\r\n<g id=\"node168\" class=\"node\"><title>167</title>\r\n<path fill=\"#eda572\" stroke=\"black\" d=\"M5020,-782C5020,-782 4928,-782 4928,-782 4922,-782 4916,-776 4916,-770 4916,-770 4916,-711 4916,-711 4916,-705 4922,-699 4928,-699 4928,-699 5020,-699 5020,-699 5026,-699 5032,-705 5032,-711 5032,-711 5032,-770 5032,-770 5032,-776 5026,-782 5020,-782\"/>\r\n<text text-anchor=\"start\" x=\"4925.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"4924\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.768</text>\r\n<text text-anchor=\"start\" x=\"4930.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"4925.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [38, 11]</text>\r\n<text text-anchor=\"start\" x=\"4927\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 166->167 -->\r\n<g id=\"edge167\" class=\"edge\"><title>166->167</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4979.88,-817.907C4979.24,-809.558 4978.55,-800.671 4977.89,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4981.37,-791.723 4977.12,-782.021 4974.39,-792.26 4981.37,-791.723\"/>\r\n</g>\r\n<!-- 178 -->\r\n<g id=\"node179\" class=\"node\"><title>178</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5148,-774.5C5148,-774.5 5062,-774.5 5062,-774.5 5056,-774.5 5050,-768.5 5050,-762.5 5050,-762.5 5050,-718.5 5050,-718.5 5050,-712.5 5056,-706.5 5062,-706.5 5062,-706.5 5148,-706.5 5148,-706.5 5154,-706.5 5160,-712.5 5160,-718.5 5160,-718.5 5160,-762.5 5160,-762.5 5160,-768.5 5154,-774.5 5148,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5063\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5061.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"5060.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [24, 0]</text>\r\n<text text-anchor=\"start\" x=\"5058\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 166->178 -->\r\n<g id=\"edge178\" class=\"edge\"><title>166->178</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5025.33,-817.907C5037.52,-806.211 5050.82,-793.457 5063,-781.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5065.62,-784.115 5070.42,-774.667 5060.78,-779.062 5065.62,-784.115\"/>\r\n</g>\r\n<!-- 168 -->\r\n<g id=\"node169\" class=\"node\"><title>168</title>\r\n<path fill=\"#88c4ef\" stroke=\"black\" d=\"M5025,-663C5025,-663 4923,-663 4923,-663 4917,-663 4911,-657 4911,-651 4911,-651 4911,-592 4911,-592 4911,-586 4917,-580 4923,-580 4923,-580 5025,-580 5025,-580 5031,-580 5037,-586 5037,-592 5037,-592 5037,-651 5037,-651 5037,-657 5031,-663 5025,-663\"/>\r\n<text text-anchor=\"start\" x=\"4933\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 9.5</text>\r\n<text text-anchor=\"start\" x=\"4924\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"4934.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"4933.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 5]</text>\r\n<text text-anchor=\"start\" x=\"4919\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 167->168 -->\r\n<g id=\"edge168\" class=\"edge\"><title>167->168</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4974,-698.907C4974,-690.649 4974,-681.864 4974,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4977.5,-673.021 4974,-663.021 4970.5,-673.021 4977.5,-673.021\"/>\r\n</g>\r\n<!-- 173 -->\r\n<g id=\"node174\" class=\"node\"><title>173</title>\r\n<path fill=\"#e9965a\" stroke=\"black\" d=\"M5219,-663C5219,-663 5127,-663 5127,-663 5121,-663 5115,-657 5115,-651 5115,-651 5115,-592 5115,-592 5115,-586 5121,-580 5127,-580 5127,-580 5219,-580 5219,-580 5225,-580 5231,-586 5231,-592 5231,-592 5231,-651 5231,-651 5231,-657 5225,-663 5219,-663\"/>\r\n<text text-anchor=\"start\" x=\"5138\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"5123\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.592</text>\r\n<text text-anchor=\"start\" x=\"5129.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"5128.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 6]</text>\r\n<text text-anchor=\"start\" x=\"5126\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 167->173 -->\r\n<g id=\"edge173\" class=\"edge\"><title>167->173</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5032.07,-704.311C5035.08,-702.51 5038.08,-700.731 5041,-699 5062.04,-686.545 5085.07,-673.125 5105.92,-661.056\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5107.81,-664.009 5114.71,-655.973 5104.3,-657.949 5107.81,-664.009\"/>\r\n</g>\r\n<!-- 169 -->\r\n<g id=\"node170\" class=\"node\"><title>169</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M4961.5,-544C4961.5,-544 4800.5,-544 4800.5,-544 4794.5,-544 4788.5,-538 4788.5,-532 4788.5,-532 4788.5,-473 4788.5,-473 4788.5,-467 4794.5,-461 4800.5,-461 4800.5,-461 4961.5,-461 4961.5,-461 4967.5,-461 4973.5,-467 4973.5,-473 4973.5,-473 4973.5,-532 4973.5,-532 4973.5,-538 4967.5,-544 4961.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"4796.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 11.5</text>\r\n<text text-anchor=\"start\" x=\"4835\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"4841.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"4840.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"4826\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 168->169 -->\r\n<g id=\"edge169\" class=\"edge\"><title>168->169</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4941.73,-579.907C4934.59,-570.923 4926.96,-561.315 4919.59,-552.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4922.17,-549.671 4913.21,-544.021 4916.69,-554.027 4922.17,-549.671\"/>\r\n</g>\r\n<!-- 172 -->\r\n<g id=\"node173\" class=\"node\"><title>172</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5090,-536.5C5090,-536.5 5004,-536.5 5004,-536.5 4998,-536.5 4992,-530.5 4992,-524.5 4992,-524.5 4992,-480.5 4992,-480.5 4992,-474.5 4998,-468.5 5004,-468.5 5004,-468.5 5090,-468.5 5090,-468.5 5096,-468.5 5102,-474.5 5102,-480.5 5102,-480.5 5102,-524.5 5102,-524.5 5102,-530.5 5096,-536.5 5090,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"5005\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5007.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5006.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5000\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 168->172 -->\r\n<g id=\"edge172\" class=\"edge\"><title>168->172</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4999.33,-579.907C5006.28,-568.763 5013.83,-556.658 5020.83,-545.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5023.98,-547.004 5026.31,-536.667 5018.04,-543.298 5023.98,-547.004\"/>\r\n</g>\r\n<!-- 170 -->\r\n<g id=\"node171\" class=\"node\"><title>170</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4905,-417.5C4905,-417.5 4803,-417.5 4803,-417.5 4797,-417.5 4791,-411.5 4791,-405.5 4791,-405.5 4791,-361.5 4791,-361.5 4791,-355.5 4797,-349.5 4803,-349.5 4803,-349.5 4905,-349.5 4905,-349.5 4911,-349.5 4917,-355.5 4917,-361.5 4917,-361.5 4917,-405.5 4917,-405.5 4917,-411.5 4911,-417.5 4905,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4812\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4814.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"4813.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"4799\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 169->170 -->\r\n<g id=\"edge170\" class=\"edge\"><title>169->170</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4871.63,-460.907C4869.14,-450.094 4866.43,-438.376 4863.91,-427.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4867.31,-426.624 4861.65,-417.667 4860.49,-428.198 4867.31,-426.624\"/>\r\n</g>\r\n<!-- 171 -->\r\n<g id=\"node172\" class=\"node\"><title>171</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5033,-417.5C5033,-417.5 4947,-417.5 4947,-417.5 4941,-417.5 4935,-411.5 4935,-405.5 4935,-405.5 4935,-361.5 4935,-361.5 4935,-355.5 4941,-349.5 4947,-349.5 4947,-349.5 5033,-349.5 5033,-349.5 5039,-349.5 5045,-355.5 5045,-361.5 5045,-361.5 5045,-405.5 5045,-405.5 5045,-411.5 5039,-417.5 5033,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"4948\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"4950.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"4949.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"4943\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 169->171 -->\r\n<g id=\"edge171\" class=\"edge\"><title>169->171</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M4918.82,-460.907C4929.61,-449.321 4941.37,-436.698 4952.17,-425.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"4954.85,-427.37 4959.1,-417.667 4949.72,-422.598 4954.85,-427.37\"/>\r\n</g>\r\n<!-- 174 -->\r\n<g id=\"node175\" class=\"node\"><title>174</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5218,-536.5C5218,-536.5 5132,-536.5 5132,-536.5 5126,-536.5 5120,-530.5 5120,-524.5 5120,-524.5 5120,-480.5 5120,-480.5 5120,-474.5 5126,-468.5 5132,-468.5 5132,-468.5 5218,-468.5 5218,-468.5 5224,-468.5 5230,-474.5 5230,-480.5 5230,-480.5 5230,-524.5 5230,-524.5 5230,-530.5 5224,-536.5 5218,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"5133\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5131.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"5130.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [31, 0]</text>\r\n<text text-anchor=\"start\" x=\"5128\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 173->174 -->\r\n<g id=\"edge174\" class=\"edge\"><title>173->174</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5173.69,-579.907C5173.88,-569.204 5174.07,-557.615 5174.26,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5177.76,-546.725 5174.43,-536.667 5170.76,-546.606 5177.76,-546.725\"/>\r\n</g>\r\n<!-- 175 -->\r\n<g id=\"node176\" class=\"node\"><title>175</title>\r\n<path fill=\"#deeffb\" stroke=\"black\" d=\"M5362,-544C5362,-544 5260,-544 5260,-544 5254,-544 5248,-538 5248,-532 5248,-532 5248,-473 5248,-473 5248,-467 5254,-461 5260,-461 5260,-461 5362,-461 5362,-461 5368,-461 5374,-467 5374,-473 5374,-473 5374,-532 5374,-532 5374,-538 5368,-544 5362,-544\"/>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 95.5</text>\r\n<text text-anchor=\"start\" x=\"5261\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\r\n<text text-anchor=\"start\" x=\"5271.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\r\n<text text-anchor=\"start\" x=\"5270.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 6]</text>\r\n<text text-anchor=\"start\" x=\"5256\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 173->175 -->\r\n<g id=\"edge175\" class=\"edge\"><title>173->175</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5220.88,-579.907C5232.01,-570.469 5243.95,-560.343 5255.39,-550.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5257.84,-553.157 5263.21,-544.021 5253.32,-547.818 5257.84,-553.157\"/>\r\n</g>\r\n<!-- 176 -->\r\n<g id=\"node177\" class=\"node\"><title>176</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5286,-417.5C5286,-417.5 5200,-417.5 5200,-417.5 5194,-417.5 5188,-411.5 5188,-405.5 5188,-405.5 5188,-361.5 5188,-361.5 5188,-355.5 5194,-349.5 5200,-349.5 5200,-349.5 5286,-349.5 5286,-349.5 5292,-349.5 5298,-355.5 5298,-361.5 5298,-361.5 5298,-405.5 5298,-405.5 5298,-411.5 5292,-417.5 5286,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"5201\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5203.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5202.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"5196\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 175->176 -->\r\n<g id=\"edge176\" class=\"edge\"><title>175->176</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5287.41,-460.907C5280.93,-449.763 5273.9,-437.658 5267.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5270.33,-424.554 5262.28,-417.667 5264.28,-428.072 5270.33,-424.554\"/>\r\n</g>\r\n<!-- 177 -->\r\n<g id=\"node178\" class=\"node\"><title>177</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5430,-417.5C5430,-417.5 5328,-417.5 5328,-417.5 5322,-417.5 5316,-411.5 5316,-405.5 5316,-405.5 5316,-361.5 5316,-361.5 5316,-355.5 5322,-349.5 5328,-349.5 5328,-349.5 5430,-349.5 5430,-349.5 5436,-349.5 5442,-355.5 5442,-361.5 5442,-361.5 5442,-405.5 5442,-405.5 5442,-411.5 5436,-417.5 5430,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"5337\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5339.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"5338.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5324\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 175->177 -->\r\n<g id=\"edge177\" class=\"edge\"><title>175->177</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5334.59,-460.907C5341.07,-449.763 5348.1,-437.658 5354.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5357.72,-428.072 5359.72,-417.667 5351.67,-424.554 5357.72,-428.072\"/>\r\n</g>\r\n<!-- 181 -->\r\n<g id=\"node182\" class=\"node\"><title>181</title>\r\n<path fill=\"#5dafea\" stroke=\"black\" d=\"M5358.5,-1020C5358.5,-1020 5243.5,-1020 5243.5,-1020 5237.5,-1020 5231.5,-1014 5231.5,-1008 5231.5,-1008 5231.5,-949 5231.5,-949 5231.5,-943 5237.5,-937 5243.5,-937 5243.5,-937 5358.5,-937 5358.5,-937 5364.5,-937 5370.5,-943 5370.5,-949 5370.5,-949 5370.5,-1008 5370.5,-1008 5370.5,-1014 5364.5,-1020 5358.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5239.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"5251\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.619</text>\r\n<text text-anchor=\"start\" x=\"5261.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"5256.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 11]</text>\r\n<text text-anchor=\"start\" x=\"5246\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 180->181 -->\r\n<g id=\"edge181\" class=\"edge\"><title>180->181</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5303.61,-1055.91C5303.33,-1047.56 5303.02,-1038.67 5302.73,-1030.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5306.23,-1029.9 5302.39,-1020.02 5299.23,-1030.13 5306.23,-1029.9\"/>\r\n</g>\r\n<!-- 188 -->\r\n<g id=\"node189\" class=\"node\"><title>188</title>\r\n<path fill=\"#ea9b62\" stroke=\"black\" d=\"M5627.5,-1020C5627.5,-1020 5400.5,-1020 5400.5,-1020 5394.5,-1020 5388.5,-1014 5388.5,-1008 5388.5,-1008 5388.5,-949 5388.5,-949 5388.5,-943 5394.5,-937 5400.5,-937 5400.5,-937 5627.5,-937 5627.5,-937 5633.5,-937 5639.5,-943 5639.5,-949 5639.5,-949 5639.5,-1008 5639.5,-1008 5639.5,-1014 5633.5,-1020 5627.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5396.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.99</text>\r\n<text text-anchor=\"start\" x=\"5464\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.661</text>\r\n<text text-anchor=\"start\" x=\"5470.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\r\n<text text-anchor=\"start\" x=\"5469.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 6]</text>\r\n<text text-anchor=\"start\" x=\"5467\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 180->188 -->\r\n<g id=\"edge188\" class=\"edge\"><title>180->188</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5377.51,-1055.91C5395.34,-1045.92 5414.55,-1035.17 5432.77,-1024.98\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5434.6,-1027.96 5441.62,-1020.02 5431.18,-1021.85 5434.6,-1027.96\"/>\r\n</g>\r\n<!-- 182 -->\r\n<g id=\"node183\" class=\"node\"><title>182</title>\r\n<path fill=\"#4ba6e7\" stroke=\"black\" d=\"M5296.5,-901C5296.5,-901 5109.5,-901 5109.5,-901 5103.5,-901 5097.5,-895 5097.5,-889 5097.5,-889 5097.5,-830 5097.5,-830 5097.5,-824 5103.5,-818 5109.5,-818 5109.5,-818 5296.5,-818 5296.5,-818 5302.5,-818 5308.5,-824 5308.5,-830 5308.5,-830 5308.5,-889 5308.5,-889 5308.5,-895 5302.5,-901 5296.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"5105.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"5153\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.414</text>\r\n<text text-anchor=\"start\" x=\"5163.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5158.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 11]</text>\r\n<text text-anchor=\"start\" x=\"5148\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 181->182 -->\r\n<g id=\"edge182\" class=\"edge\"><title>181->182</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5267,-936.907C5259.4,-927.832 5251.26,-918.121 5243.43,-908.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5246.04,-906.439 5236.94,-901.021 5240.68,-910.934 5246.04,-906.439\"/>\r\n</g>\r\n<!-- 187 -->\r\n<g id=\"node188\" class=\"node\"><title>187</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5425,-893.5C5425,-893.5 5339,-893.5 5339,-893.5 5333,-893.5 5327,-887.5 5327,-881.5 5327,-881.5 5327,-837.5 5327,-837.5 5327,-831.5 5333,-825.5 5339,-825.5 5339,-825.5 5425,-825.5 5425,-825.5 5431,-825.5 5437,-831.5 5437,-837.5 5437,-837.5 5437,-881.5 5437,-881.5 5437,-887.5 5431,-893.5 5425,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5340\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5342.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5341.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5335\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 181->187 -->\r\n<g id=\"edge187\" class=\"edge\"><title>181->187</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5329.1,-936.907C5336.89,-925.652 5345.36,-913.418 5353.2,-902.106\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5356.22,-903.881 5359.04,-893.667 5350.47,-899.897 5356.22,-903.881\"/>\r\n</g>\r\n<!-- 183 -->\r\n<g id=\"node184\" class=\"node\"><title>183</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M5417.5,-782C5417.5,-782 5190.5,-782 5190.5,-782 5184.5,-782 5178.5,-776 5178.5,-770 5178.5,-770 5178.5,-711 5178.5,-711 5178.5,-705 5184.5,-699 5190.5,-699 5190.5,-699 5417.5,-699 5417.5,-699 5423.5,-699 5429.5,-705 5429.5,-711 5429.5,-711 5429.5,-770 5429.5,-770 5429.5,-776 5423.5,-782 5417.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"5186.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"5258\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"5264.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5263.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"5249\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 182->183 -->\r\n<g id=\"edge183\" class=\"edge\"><title>182->183</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5238.04,-817.907C5245.88,-808.832 5254.26,-799.121 5262.33,-789.769\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5265.14,-791.878 5269.02,-782.021 5259.84,-787.303 5265.14,-791.878\"/>\r\n</g>\r\n<!-- 186 -->\r\n<g id=\"node187\" class=\"node\"><title>186</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5562,-774.5C5562,-774.5 5460,-774.5 5460,-774.5 5454,-774.5 5448,-768.5 5448,-762.5 5448,-762.5 5448,-718.5 5448,-718.5 5448,-712.5 5454,-706.5 5460,-706.5 5460,-706.5 5562,-706.5 5562,-706.5 5568,-706.5 5574,-712.5 5574,-718.5 5574,-718.5 5574,-762.5 5574,-762.5 5574,-768.5 5568,-774.5 5562,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5469\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5471.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5470.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5456\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 182->186 -->\r\n<g id=\"edge186\" class=\"edge\"><title>182->186</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5308.53,-821.119C5311.72,-820.059 5314.88,-819.017 5318,-818 5370.94,-800.747 5386.69,-803.631 5438,-782 5440.34,-781.015 5442.7,-779.975 5445.06,-778.892\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5446.68,-781.998 5454.2,-774.533 5443.67,-775.681 5446.68,-781.998\"/>\r\n</g>\r\n<!-- 184 -->\r\n<g id=\"node185\" class=\"node\"><title>184</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5347,-655.5C5347,-655.5 5261,-655.5 5261,-655.5 5255,-655.5 5249,-649.5 5249,-643.5 5249,-643.5 5249,-599.5 5249,-599.5 5249,-593.5 5255,-587.5 5261,-587.5 5261,-587.5 5347,-587.5 5347,-587.5 5353,-587.5 5359,-593.5 5359,-599.5 5359,-599.5 5359,-643.5 5359,-643.5 5359,-649.5 5353,-655.5 5347,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"5262\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5264.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5263.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"5257\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 183->184 -->\r\n<g id=\"edge184\" class=\"edge\"><title>183->184</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5304,-698.907C5304,-688.204 5304,-676.615 5304,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5307.5,-665.667 5304,-655.667 5300.5,-665.667 5307.5,-665.667\"/>\r\n</g>\r\n<!-- 185 -->\r\n<g id=\"node186\" class=\"node\"><title>185</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5491,-655.5C5491,-655.5 5389,-655.5 5389,-655.5 5383,-655.5 5377,-649.5 5377,-643.5 5377,-643.5 5377,-599.5 5377,-599.5 5377,-593.5 5383,-587.5 5389,-587.5 5389,-587.5 5491,-587.5 5491,-587.5 5497,-587.5 5503,-593.5 5503,-599.5 5503,-599.5 5503,-643.5 5503,-643.5 5503,-649.5 5497,-655.5 5491,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"5398\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5400.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5399.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"5385\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 183->185 -->\r\n<g id=\"edge185\" class=\"edge\"><title>183->185</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5351.18,-698.907C5364.91,-687.101 5379.89,-674.217 5393.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5396.15,-664.842 5401.45,-655.667 5391.58,-659.535 5396.15,-664.842\"/>\r\n</g>\r\n<!-- 189 -->\r\n<g id=\"node190\" class=\"node\"><title>189</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5553,-893.5C5553,-893.5 5467,-893.5 5467,-893.5 5461,-893.5 5455,-887.5 5455,-881.5 5455,-881.5 5455,-837.5 5455,-837.5 5455,-831.5 5461,-825.5 5467,-825.5 5467,-825.5 5553,-825.5 5553,-825.5 5559,-825.5 5565,-831.5 5565,-837.5 5565,-837.5 5565,-881.5 5565,-881.5 5565,-887.5 5559,-893.5 5553,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5468\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5466.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\r\n<text text-anchor=\"start\" x=\"5465.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\r\n<text text-anchor=\"start\" x=\"5463\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 188->189 -->\r\n<g id=\"edge189\" class=\"edge\"><title>188->189</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5512.61,-936.907C5512.25,-926.204 5511.85,-914.615 5511.48,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5514.97,-903.541 5511.13,-893.667 5507.98,-903.781 5514.97,-903.541\"/>\r\n</g>\r\n<!-- 190 -->\r\n<g id=\"node191\" class=\"node\"><title>190</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5697,-893.5C5697,-893.5 5595,-893.5 5595,-893.5 5589,-893.5 5583,-887.5 5583,-881.5 5583,-881.5 5583,-837.5 5583,-837.5 5583,-831.5 5589,-825.5 5595,-825.5 5595,-825.5 5697,-825.5 5697,-825.5 5703,-825.5 5709,-831.5 5709,-837.5 5709,-837.5 5709,-881.5 5709,-881.5 5709,-887.5 5703,-893.5 5697,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5604\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5606.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"5605.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\r\n<text text-anchor=\"start\" x=\"5591\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 188->190 -->\r\n<g id=\"edge190\" class=\"edge\"><title>188->190</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5559.8,-936.907C5573.12,-925.101 5587.65,-912.217 5600.93,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5603.42,-902.919 5608.58,-893.667 5598.78,-897.681 5603.42,-902.919\"/>\r\n</g>\r\n<!-- 192 -->\r\n<g id=\"node193\" class=\"node\"><title>192</title>\r\n<path fill=\"#e99457\" stroke=\"black\" d=\"M6069.5,-1258C6069.5,-1258 5962.5,-1258 5962.5,-1258 5956.5,-1258 5950.5,-1252 5950.5,-1246 5950.5,-1246 5950.5,-1187 5950.5,-1187 5950.5,-1181 5956.5,-1175 5962.5,-1175 5962.5,-1175 6069.5,-1175 6069.5,-1175 6075.5,-1175 6081.5,-1181 6081.5,-1187 6081.5,-1187 6081.5,-1246 6081.5,-1246 6081.5,-1252 6075.5,-1258 6069.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"5958.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 258.5</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.566</text>\r\n<text text-anchor=\"start\" x=\"5968.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 179</text>\r\n<text text-anchor=\"start\" x=\"5963\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [241, 37]</text>\r\n<text text-anchor=\"start\" x=\"5969\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 191->192 -->\r\n<g id=\"edge192\" class=\"edge\"><title>191->192</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6016,-1293.91C6016,-1285.65 6016,-1276.86 6016,-1268.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6019.5,-1268.02 6016,-1258.02 6012.5,-1268.02 6019.5,-1268.02\"/>\r\n</g>\r\n<!-- 207 -->\r\n<g id=\"node208\" class=\"node\"><title>207</title>\r\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M6350.5,-1258C6350.5,-1258 6243.5,-1258 6243.5,-1258 6237.5,-1258 6231.5,-1252 6231.5,-1246 6231.5,-1246 6231.5,-1187 6231.5,-1187 6231.5,-1181 6237.5,-1175 6243.5,-1175 6243.5,-1175 6350.5,-1175 6350.5,-1175 6356.5,-1175 6362.5,-1181 6362.5,-1187 6362.5,-1187 6362.5,-1246 6362.5,-1246 6362.5,-1252 6356.5,-1258 6350.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"6239.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 299.0</text>\r\n<text text-anchor=\"start\" x=\"6247\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.049</text>\r\n<text text-anchor=\"start\" x=\"6249.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 241</text>\r\n<text text-anchor=\"start\" x=\"6248.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 360]</text>\r\n<text text-anchor=\"start\" x=\"6242\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 191->207 -->\r\n<g id=\"edge207\" class=\"edge\"><title>191->207</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6081.17,-1307.36C6123.16,-1289.88 6177.9,-1267.09 6221.74,-1248.84\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6223.32,-1251.97 6231.21,-1244.89 6220.63,-1245.51 6223.32,-1251.97\"/>\r\n</g>\r\n<!-- 193 -->\r\n<g id=\"node194\" class=\"node\"><title>193</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M5962,-1139C5962,-1139 5870,-1139 5870,-1139 5864,-1139 5858,-1133 5858,-1127 5858,-1127 5858,-1068 5858,-1068 5858,-1062 5864,-1056 5870,-1056 5870,-1056 5962,-1056 5962,-1056 5968,-1056 5974,-1062 5974,-1068 5974,-1068 5974,-1127 5974,-1127 5974,-1133 5968,-1139 5962,-1139\"/>\r\n<text text-anchor=\"start\" x=\"5867.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"5866\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.079</text>\r\n<text text-anchor=\"start\" x=\"5868.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 128</text>\r\n<text text-anchor=\"start\" x=\"5867.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [203, 2]</text>\r\n<text text-anchor=\"start\" x=\"5869\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 192->193 -->\r\n<g id=\"edge193\" class=\"edge\"><title>192->193</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5981.31,-1174.91C5973.55,-1165.83 5965.25,-1156.12 5957.26,-1146.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5959.79,-1144.35 5950.63,-1139.02 5954.47,-1148.9 5959.79,-1144.35\"/>\r\n</g>\r\n<!-- 198 -->\r\n<g id=\"node199\" class=\"node\"><title>198</title>\r\n<path fill=\"#fdf5ef\" stroke=\"black\" d=\"M6212,-1139C6212,-1139 6018,-1139 6018,-1139 6012,-1139 6006,-1133 6006,-1127 6006,-1127 6006,-1068 6006,-1068 6006,-1062 6012,-1056 6018,-1056 6018,-1056 6212,-1056 6212,-1056 6218,-1056 6224,-1062 6224,-1068 6224,-1068 6224,-1127 6224,-1127 6224,-1133 6218,-1139 6212,-1139\"/>\r\n<text text-anchor=\"start\" x=\"6014\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.03</text>\r\n<text text-anchor=\"start\" x=\"6065\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.999</text>\r\n<text text-anchor=\"start\" x=\"6071.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"6066.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [38, 35]</text>\r\n<text text-anchor=\"start\" x=\"6068\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 192->198 -->\r\n<g id=\"edge198\" class=\"edge\"><title>192->198</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6050.35,-1174.91C6058.03,-1165.83 6066.24,-1156.12 6074.16,-1146.77\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6076.93,-1148.92 6080.71,-1139.02 6071.58,-1144.39 6076.93,-1148.92\"/>\r\n</g>\r\n<!-- 194 -->\r\n<g id=\"node195\" class=\"node\"><title>194</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5760.5,-1012.5C5760.5,-1012.5 5671.5,-1012.5 5671.5,-1012.5 5665.5,-1012.5 5659.5,-1006.5 5659.5,-1000.5 5659.5,-1000.5 5659.5,-956.5 5659.5,-956.5 5659.5,-950.5 5665.5,-944.5 5671.5,-944.5 5671.5,-944.5 5760.5,-944.5 5760.5,-944.5 5766.5,-944.5 5772.5,-950.5 5772.5,-956.5 5772.5,-956.5 5772.5,-1000.5 5772.5,-1000.5 5772.5,-1006.5 5766.5,-1012.5 5760.5,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"5674\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5672.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 98</text>\r\n<text text-anchor=\"start\" x=\"5667.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [155, 0]</text>\r\n<text text-anchor=\"start\" x=\"5669\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 193->194 -->\r\n<g id=\"edge194\" class=\"edge\"><title>193->194</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5857.88,-1064.27C5833.94,-1050.81 5806.01,-1034.87 5781,-1020 5779.87,-1019.33 5778.74,-1018.65 5777.6,-1017.97\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5779.11,-1014.8 5768.74,-1012.62 5775.49,-1020.79 5779.11,-1014.8\"/>\r\n</g>\r\n<!-- 195 -->\r\n<g id=\"node196\" class=\"node\"><title>195</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M6029.5,-1020C6029.5,-1020 5802.5,-1020 5802.5,-1020 5796.5,-1020 5790.5,-1014 5790.5,-1008 5790.5,-1008 5790.5,-949 5790.5,-949 5790.5,-943 5796.5,-937 5802.5,-937 5802.5,-937 6029.5,-937 6029.5,-937 6035.5,-937 6041.5,-943 6041.5,-949 6041.5,-949 6041.5,-1008 6041.5,-1008 6041.5,-1014 6035.5,-1020 6029.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"5798.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.66</text>\r\n<text text-anchor=\"start\" x=\"5866\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.242</text>\r\n<text text-anchor=\"start\" x=\"5872.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\r\n<text text-anchor=\"start\" x=\"5871.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 2]</text>\r\n<text text-anchor=\"start\" x=\"5869\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 193->195 -->\r\n<g id=\"edge195\" class=\"edge\"><title>193->195</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5916,-1055.91C5916,-1047.65 5916,-1038.86 5916,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5919.5,-1030.02 5916,-1020.02 5912.5,-1030.02 5919.5,-1030.02\"/>\r\n</g>\r\n<!-- 196 -->\r\n<g id=\"node197\" class=\"node\"><title>196</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5825,-893.5C5825,-893.5 5739,-893.5 5739,-893.5 5733,-893.5 5727,-887.5 5727,-881.5 5727,-881.5 5727,-837.5 5727,-837.5 5727,-831.5 5733,-825.5 5739,-825.5 5739,-825.5 5825,-825.5 5825,-825.5 5831,-825.5 5837,-831.5 5837,-837.5 5837,-837.5 5837,-881.5 5837,-881.5 5837,-887.5 5831,-893.5 5825,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5740\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5738.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"5737.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 0]</text>\r\n<text text-anchor=\"start\" x=\"5735\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 195->196 -->\r\n<g id=\"edge196\" class=\"edge\"><title>195->196</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5869.51,-936.907C5855.99,-925.101 5841.23,-912.217 5827.75,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5829.82,-897.608 5819.99,-893.667 5825.22,-902.881 5829.82,-897.608\"/>\r\n</g>\r\n<!-- 197 -->\r\n<g id=\"node198\" class=\"node\"><title>197</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5969,-893.5C5969,-893.5 5867,-893.5 5867,-893.5 5861,-893.5 5855,-887.5 5855,-881.5 5855,-881.5 5855,-837.5 5855,-837.5 5855,-831.5 5861,-825.5 5867,-825.5 5867,-825.5 5969,-825.5 5969,-825.5 5975,-825.5 5981,-831.5 5981,-837.5 5981,-837.5 5981,-881.5 5981,-881.5 5981,-887.5 5975,-893.5 5969,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"5876\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5878.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"5877.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"5863\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 195->197 -->\r\n<g id=\"edge197\" class=\"edge\"><title>195->197</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M5916.69,-936.907C5916.88,-926.204 5917.07,-914.615 5917.26,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"5920.76,-903.725 5917.43,-893.667 5913.76,-903.606 5920.76,-903.725\"/>\r\n</g>\r\n<!-- 199 -->\r\n<g id=\"node200\" class=\"node\"><title>199</title>\r\n<path fill=\"#e68844\" stroke=\"black\" d=\"M6186.5,-1020C6186.5,-1020 6071.5,-1020 6071.5,-1020 6065.5,-1020 6059.5,-1014 6059.5,-1008 6059.5,-1008 6059.5,-949 6059.5,-949 6059.5,-943 6065.5,-937 6071.5,-937 6071.5,-937 6186.5,-937 6186.5,-937 6192.5,-937 6198.5,-943 6198.5,-949 6198.5,-949 6198.5,-1008 6198.5,-1008 6198.5,-1014 6192.5,-1020 6186.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6067.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1623.0</text>\r\n<text text-anchor=\"start\" x=\"6079\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.292</text>\r\n<text text-anchor=\"start\" x=\"6085.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"6084.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 2]</text>\r\n<text text-anchor=\"start\" x=\"6082\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 198->199 -->\r\n<g id=\"edge199\" class=\"edge\"><title>198->199</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6119.86,-1055.91C6120.86,-1047.56 6121.92,-1038.67 6122.95,-1030.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6126.44,-1030.37 6124.15,-1020.02 6119.49,-1029.53 6126.44,-1030.37\"/>\r\n</g>\r\n<!-- 204 -->\r\n<g id=\"node205\" class=\"node\"><title>204</title>\r\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M6434.5,-1020C6434.5,-1020 6309.5,-1020 6309.5,-1020 6303.5,-1020 6297.5,-1014 6297.5,-1008 6297.5,-1008 6297.5,-949 6297.5,-949 6297.5,-943 6303.5,-937 6309.5,-937 6309.5,-937 6434.5,-937 6434.5,-937 6440.5,-937 6446.5,-943 6446.5,-949 6446.5,-949 6446.5,-1008 6446.5,-1008 6446.5,-1014 6440.5,-1020 6434.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6305.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_serror_rate ≤ 0.2</text>\r\n<text text-anchor=\"start\" x=\"6322\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.191</text>\r\n<text text-anchor=\"start\" x=\"6328.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"6327.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 33]</text>\r\n<text text-anchor=\"start\" x=\"6317\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 198->204 -->\r\n<g id=\"edge204\" class=\"edge\"><title>198->204</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6204.16,-1055.91C6231.4,-1043.51 6261.24,-1029.92 6288.11,-1017.69\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6289.83,-1020.75 6297.48,-1013.42 6286.93,-1014.38 6289.83,-1020.75\"/>\r\n</g>\r\n<!-- 200 -->\r\n<g id=\"node201\" class=\"node\"><title>200</title>\r\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M6150.5,-901C6150.5,-901 6011.5,-901 6011.5,-901 6005.5,-901 5999.5,-895 5999.5,-889 5999.5,-889 5999.5,-830 5999.5,-830 5999.5,-824 6005.5,-818 6011.5,-818 6011.5,-818 6150.5,-818 6150.5,-818 6156.5,-818 6162.5,-824 6162.5,-830 6162.5,-830 6162.5,-889 6162.5,-889 6162.5,-895 6156.5,-901 6150.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6007.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.625</text>\r\n<text text-anchor=\"start\" x=\"6039\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"6041.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"6040.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 2]</text>\r\n<text text-anchor=\"start\" x=\"6034\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 199->200 -->\r\n<g id=\"edge200\" class=\"edge\"><title>199->200</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6112.35,-936.907C6108.85,-928.377 6105.12,-919.284 6101.49,-910.456\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6104.66,-908.944 6097.62,-901.021 6098.18,-911.601 6104.66,-908.944\"/>\r\n</g>\r\n<!-- 203 -->\r\n<g id=\"node204\" class=\"node\"><title>203</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6279,-893.5C6279,-893.5 6193,-893.5 6193,-893.5 6187,-893.5 6181,-887.5 6181,-881.5 6181,-881.5 6181,-837.5 6181,-837.5 6181,-831.5 6187,-825.5 6193,-825.5 6193,-825.5 6279,-825.5 6279,-825.5 6285,-825.5 6291,-831.5 6291,-837.5 6291,-837.5 6291,-881.5 6291,-881.5 6291,-887.5 6285,-893.5 6279,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6194\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6192.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"6191.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [35, 0]</text>\r\n<text text-anchor=\"start\" x=\"6189\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 199->203 -->\r\n<g id=\"edge203\" class=\"edge\"><title>199->203</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6166.12,-936.907C6176.72,-925.321 6188.26,-912.698 6198.86,-901.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6201.5,-903.408 6205.67,-893.667 6196.34,-898.684 6201.5,-903.408\"/>\r\n</g>\r\n<!-- 201 -->\r\n<g id=\"node202\" class=\"node\"><title>201</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6056,-774.5C6056,-774.5 5970,-774.5 5970,-774.5 5964,-774.5 5958,-768.5 5958,-762.5 5958,-762.5 5958,-718.5 5958,-718.5 5958,-712.5 5964,-706.5 5970,-706.5 5970,-706.5 6056,-706.5 6056,-706.5 6062,-706.5 6068,-712.5 6068,-718.5 6068,-718.5 6068,-762.5 6068,-762.5 6068,-768.5 6062,-774.5 6056,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"5971\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"5973.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"5972.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"5966\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 200->201 -->\r\n<g id=\"edge201\" class=\"edge\"><title>200->201</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6057.41,-817.907C6050.93,-806.763 6043.9,-794.658 6037.37,-783.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6040.33,-781.554 6032.28,-774.667 6034.28,-785.072 6040.33,-781.554\"/>\r\n</g>\r\n<!-- 202 -->\r\n<g id=\"node203\" class=\"node\"><title>202</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6200,-774.5C6200,-774.5 6098,-774.5 6098,-774.5 6092,-774.5 6086,-768.5 6086,-762.5 6086,-762.5 6086,-718.5 6086,-718.5 6086,-712.5 6092,-706.5 6098,-706.5 6098,-706.5 6200,-706.5 6200,-706.5 6206,-706.5 6212,-712.5 6212,-718.5 6212,-718.5 6212,-762.5 6212,-762.5 6212,-768.5 6206,-774.5 6200,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"6107\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6109.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6108.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"6094\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 200->202 -->\r\n<g id=\"edge202\" class=\"edge\"><title>200->202</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6104.59,-817.907C6111.07,-806.763 6118.1,-794.658 6124.63,-783.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6127.72,-785.072 6129.72,-774.667 6121.67,-781.554 6127.72,-785.072\"/>\r\n</g>\r\n<!-- 205 -->\r\n<g id=\"node206\" class=\"node\"><title>205</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6423,-893.5C6423,-893.5 6321,-893.5 6321,-893.5 6315,-893.5 6309,-887.5 6309,-881.5 6309,-881.5 6309,-837.5 6309,-837.5 6309,-831.5 6315,-825.5 6321,-825.5 6321,-825.5 6423,-825.5 6423,-825.5 6429,-825.5 6435,-831.5 6435,-837.5 6435,-837.5 6435,-881.5 6435,-881.5 6435,-887.5 6429,-893.5 6423,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6330\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6328.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 26</text>\r\n<text text-anchor=\"start\" x=\"6327.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 33]</text>\r\n<text text-anchor=\"start\" x=\"6317\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 204->205 -->\r\n<g id=\"edge205\" class=\"edge\"><title>204->205</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6372,-936.907C6372,-926.204 6372,-914.615 6372,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6375.5,-903.667 6372,-893.667 6368.5,-903.667 6375.5,-903.667\"/>\r\n</g>\r\n<!-- 206 -->\r\n<g id=\"node207\" class=\"node\"><title>206</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6551,-893.5C6551,-893.5 6465,-893.5 6465,-893.5 6459,-893.5 6453,-887.5 6453,-881.5 6453,-881.5 6453,-837.5 6453,-837.5 6453,-831.5 6459,-825.5 6465,-825.5 6465,-825.5 6551,-825.5 6551,-825.5 6557,-825.5 6563,-831.5 6563,-837.5 6563,-837.5 6563,-881.5 6563,-881.5 6563,-887.5 6557,-893.5 6551,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"6466\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6468.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6467.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"6461\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 204->206 -->\r\n<g id=\"edge206\" class=\"edge\"><title>204->206</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6419.18,-936.907C6432.91,-925.101 6447.89,-912.217 6461.56,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6464.15,-902.842 6469.45,-893.667 6459.58,-897.535 6464.15,-902.842\"/>\r\n</g>\r\n<!-- 208 -->\r\n<g id=\"node209\" class=\"node\"><title>208</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6340,-1131.5C6340,-1131.5 6254,-1131.5 6254,-1131.5 6248,-1131.5 6242,-1125.5 6242,-1119.5 6242,-1119.5 6242,-1075.5 6242,-1075.5 6242,-1069.5 6248,-1063.5 6254,-1063.5 6254,-1063.5 6340,-1063.5 6340,-1063.5 6346,-1063.5 6352,-1069.5 6352,-1075.5 6352,-1075.5 6352,-1119.5 6352,-1119.5 6352,-1125.5 6346,-1131.5 6340,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"6255\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6257.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6256.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"6250\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 207->208 -->\r\n<g id=\"edge208\" class=\"edge\"><title>207->208</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6297,-1174.91C6297,-1164.2 6297,-1152.62 6297,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6300.5,-1141.67 6297,-1131.67 6293.5,-1141.67 6300.5,-1141.67\"/>\r\n</g>\r\n<!-- 209 -->\r\n<g id=\"node210\" class=\"node\"><title>209</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6484,-1131.5C6484,-1131.5 6382,-1131.5 6382,-1131.5 6376,-1131.5 6370,-1125.5 6370,-1119.5 6370,-1119.5 6370,-1075.5 6370,-1075.5 6370,-1069.5 6376,-1063.5 6382,-1063.5 6382,-1063.5 6484,-1063.5 6484,-1063.5 6490,-1063.5 6496,-1069.5 6496,-1075.5 6496,-1075.5 6496,-1119.5 6496,-1119.5 6496,-1125.5 6490,-1131.5 6484,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"6391\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6385.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 239</text>\r\n<text text-anchor=\"start\" x=\"6384.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 360]</text>\r\n<text text-anchor=\"start\" x=\"6378\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 207->209 -->\r\n<g id=\"edge209\" class=\"edge\"><title>207->209</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6344.18,-1174.91C6357.91,-1163.1 6372.89,-1150.22 6386.56,-1138.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6389.15,-1140.84 6394.45,-1131.67 6384.58,-1135.54 6389.15,-1140.84\"/>\r\n</g>\r\n<!-- 211 -->\r\n<g id=\"node212\" class=\"node\"><title>211</title>\r\n<path fill=\"#e78c4a\" stroke=\"black\" d=\"M7426.5,-1377C7426.5,-1377 7303.5,-1377 7303.5,-1377 7297.5,-1377 7291.5,-1371 7291.5,-1365 7291.5,-1365 7291.5,-1306 7291.5,-1306 7291.5,-1300 7297.5,-1294 7303.5,-1294 7303.5,-1294 7426.5,-1294 7426.5,-1294 7432.5,-1294 7438.5,-1300 7438.5,-1306 7438.5,-1306 7438.5,-1365 7438.5,-1365 7438.5,-1371 7432.5,-1377 7426.5,-1377\"/>\r\n<text text-anchor=\"start\" x=\"7299.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 49282.0</text>\r\n<text text-anchor=\"start\" x=\"7315\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.399</text>\r\n<text text-anchor=\"start\" x=\"7313.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1212</text>\r\n<text text-anchor=\"start\" x=\"7304\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1767, 152]</text>\r\n<text text-anchor=\"start\" x=\"7318\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 210->211 -->\r\n<g id=\"edge211\" class=\"edge\"><title>210->211</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7365,-1412.91C7365,-1404.65 7365,-1395.86 7365,-1387.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7368.5,-1387.02 7365,-1377.02 7361.5,-1387.02 7368.5,-1387.02\"/>\r\n</g>\r\n<!-- 268 -->\r\n<g id=\"node269\" class=\"node\"><title>268</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M7710,-1377C7710,-1377 7568,-1377 7568,-1377 7562,-1377 7556,-1371 7556,-1365 7556,-1365 7556,-1306 7556,-1306 7556,-1300 7562,-1294 7568,-1294 7568,-1294 7710,-1294 7710,-1294 7716,-1294 7722,-1300 7722,-1306 7722,-1306 7722,-1365 7722,-1365 7722,-1371 7716,-1377 7710,-1377\"/>\r\n<text text-anchor=\"start\" x=\"7564\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 212.5</text>\r\n<text text-anchor=\"start\" x=\"7589\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.067</text>\r\n<text text-anchor=\"start\" x=\"7587.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3907</text>\r\n<text text-anchor=\"start\" x=\"7582\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6192, 50]</text>\r\n<text text-anchor=\"start\" x=\"7592\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 210->268 -->\r\n<g id=\"edge268\" class=\"edge\"><title>210->268</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7460.06,-1412.91C7488.11,-1400.93 7518.76,-1387.84 7546.64,-1375.94\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7548.16,-1379.1 7555.98,-1371.95 7545.41,-1372.66 7548.16,-1379.1\"/>\r\n</g>\r\n<!-- 212 -->\r\n<g id=\"node213\" class=\"node\"><title>212</title>\r\n<path fill=\"#e68540\" stroke=\"black\" d=\"M7326,-1258C7326,-1258 7220,-1258 7220,-1258 7214,-1258 7208,-1252 7208,-1246 7208,-1246 7208,-1187 7208,-1187 7208,-1181 7214,-1175 7220,-1175 7220,-1175 7326,-1175 7326,-1175 7332,-1175 7338,-1181 7338,-1187 7338,-1187 7338,-1246 7338,-1246 7338,-1252 7332,-1258 7326,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7245.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7227\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.21</text>\r\n<text text-anchor=\"start\" x=\"7221.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1149</text>\r\n<text text-anchor=\"start\" x=\"7216\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1751, 60]</text>\r\n<text text-anchor=\"start\" x=\"7226\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 211->212 -->\r\n<g id=\"edge212\" class=\"edge\"><title>211->212</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7333.08,-1293.91C7326.02,-1284.92 7318.46,-1275.32 7311.18,-1266.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7313.8,-1263.72 7304.86,-1258.02 7308.29,-1268.05 7313.8,-1263.72\"/>\r\n</g>\r\n<!-- 265 -->\r\n<g id=\"node266\" class=\"node\"><title>265</title>\r\n<path fill=\"#5baeea\" stroke=\"black\" d=\"M7547.5,-1258C7547.5,-1258 7368.5,-1258 7368.5,-1258 7362.5,-1258 7356.5,-1252 7356.5,-1246 7356.5,-1246 7356.5,-1187 7356.5,-1187 7356.5,-1181 7362.5,-1175 7368.5,-1175 7368.5,-1175 7547.5,-1175 7547.5,-1175 7553.5,-1175 7559.5,-1181 7559.5,-1187 7559.5,-1187 7559.5,-1246 7559.5,-1246 7559.5,-1252 7553.5,-1258 7547.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7364.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.01</text>\r\n<text text-anchor=\"start\" x=\"7408\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.605</text>\r\n<text text-anchor=\"start\" x=\"7414.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 63</text>\r\n<text text-anchor=\"start\" x=\"7409.5\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 92]</text>\r\n<text text-anchor=\"start\" x=\"7403\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 211->265 -->\r\n<g id=\"edge265\" class=\"edge\"><title>211->265</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7397.27,-1293.91C7404.41,-1284.92 7412.04,-1275.32 7419.41,-1266.05\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7422.31,-1268.03 7425.79,-1258.02 7416.83,-1263.67 7422.31,-1268.03\"/>\r\n</g>\r\n<!-- 213 -->\r\n<g id=\"node214\" class=\"node\"><title>213</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M7228.5,-1139C7228.5,-1139 7097.5,-1139 7097.5,-1139 7091.5,-1139 7085.5,-1133 7085.5,-1127 7085.5,-1127 7085.5,-1068 7085.5,-1068 7085.5,-1062 7091.5,-1056 7097.5,-1056 7097.5,-1056 7228.5,-1056 7228.5,-1056 7234.5,-1056 7240.5,-1062 7240.5,-1068 7240.5,-1068 7240.5,-1127 7240.5,-1127 7240.5,-1133 7234.5,-1139 7228.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7093.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 603675.0</text>\r\n<text text-anchor=\"start\" x=\"7113\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.053</text>\r\n<text text-anchor=\"start\" x=\"7111.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1054</text>\r\n<text text-anchor=\"start\" x=\"7106\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1652, 10]</text>\r\n<text text-anchor=\"start\" x=\"7116\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 212->213 -->\r\n<g id=\"edge213\" class=\"edge\"><title>212->213</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7234.84,-1174.91C7226.22,-1165.74 7216.99,-1155.93 7208.12,-1146.49\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7210.5,-1143.91 7201.1,-1139.02 7205.4,-1148.7 7210.5,-1143.91\"/>\r\n</g>\r\n<!-- 238 -->\r\n<g id=\"node239\" class=\"node\"><title>238</title>\r\n<path fill=\"#f2c19d\" stroke=\"black\" d=\"M7364,-1139C7364,-1139 7272,-1139 7272,-1139 7266,-1139 7260,-1133 7260,-1127 7260,-1127 7260,-1068 7260,-1068 7260,-1062 7266,-1056 7272,-1056 7272,-1056 7364,-1056 7364,-1056 7370,-1056 7376,-1062 7376,-1068 7376,-1068 7376,-1127 7376,-1127 7376,-1133 7370,-1139 7364,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7268.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7268\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.921</text>\r\n<text text-anchor=\"start\" x=\"7274.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 95</text>\r\n<text text-anchor=\"start\" x=\"7269.5\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [99, 50]</text>\r\n<text text-anchor=\"start\" x=\"7271\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 212->238 -->\r\n<g id=\"edge238\" class=\"edge\"><title>212->238</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7288.61,-1174.91C7291.89,-1166.38 7295.39,-1157.28 7298.79,-1148.46\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7302.09,-1149.61 7302.42,-1139.02 7295.56,-1147.1 7302.09,-1149.61\"/>\r\n</g>\r\n<!-- 214 -->\r\n<g id=\"node215\" class=\"node\"><title>214</title>\r\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M7056,-1020C7056,-1020 6882,-1020 6882,-1020 6876,-1020 6870,-1014 6870,-1008 6870,-1008 6870,-949 6870,-949 6870,-943 6876,-937 6882,-937 6882,-937 7056,-937 7056,-937 7062,-937 7068,-943 7068,-949 7068,-949 7068,-1008 7068,-1008 7068,-1014 7062,-1020 7056,-1020\"/>\r\n<text text-anchor=\"start\" x=\"6878\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"6919\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.044</text>\r\n<text text-anchor=\"start\" x=\"6917.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1052</text>\r\n<text text-anchor=\"start\" x=\"6916\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1651, 8]</text>\r\n<text text-anchor=\"start\" x=\"6922\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 213->214 -->\r\n<g id=\"edge214\" class=\"edge\"><title>213->214</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7095.69,-1055.91C7079.29,-1046.02 7061.64,-1035.37 7044.87,-1025.25\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7046.56,-1022.19 7036.19,-1020.02 7042.94,-1028.18 7046.56,-1022.19\"/>\r\n</g>\r\n<!-- 235 -->\r\n<g id=\"node236\" class=\"node\"><title>235</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M7214,-1020C7214,-1020 7112,-1020 7112,-1020 7106,-1020 7100,-1014 7100,-1008 7100,-1008 7100,-949 7100,-949 7100,-943 7106,-937 7112,-937 7112,-937 7214,-937 7214,-937 7220,-937 7226,-943 7226,-949 7226,-949 7226,-1008 7226,-1008 7226,-1014 7220,-1020 7214,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7133.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 6.0</text>\r\n<text text-anchor=\"start\" x=\"7113\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"7123.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7122.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"7108\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 213->235 -->\r\n<g id=\"edge235\" class=\"edge\"><title>213->235</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7163,-1055.91C7163,-1047.65 7163,-1038.86 7163,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7166.5,-1030.02 7163,-1020.02 7159.5,-1030.02 7166.5,-1030.02\"/>\r\n</g>\r\n<!-- 215 -->\r\n<g id=\"node216\" class=\"node\"><title>215</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6770.5,-901C6770.5,-901 6593.5,-901 6593.5,-901 6587.5,-901 6581.5,-895 6581.5,-889 6581.5,-889 6581.5,-830 6581.5,-830 6581.5,-824 6587.5,-818 6593.5,-818 6593.5,-818 6770.5,-818 6770.5,-818 6776.5,-818 6782.5,-824 6782.5,-830 6782.5,-830 6782.5,-889 6782.5,-889 6782.5,-895 6776.5,-901 6770.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6589.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.385</text>\r\n<text text-anchor=\"start\" x=\"6636\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.02</text>\r\n<text text-anchor=\"start\" x=\"6634.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 974</text>\r\n<text text-anchor=\"start\" x=\"6629\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1539, 3]</text>\r\n<text text-anchor=\"start\" x=\"6635\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 214->215 -->\r\n<g id=\"edge215\" class=\"edge\"><title>214->215</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6869.83,-937.071C6844.43,-926.718 6816.98,-915.527 6791.11,-904.982\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6792.24,-901.662 6781.66,-901.128 6789.6,-908.145 6792.24,-901.662\"/>\r\n</g>\r\n<!-- 224 -->\r\n<g id=\"node225\" class=\"node\"><title>224</title>\r\n<path fill=\"#e68742\" stroke=\"black\" d=\"M7065.5,-901C7065.5,-901 6872.5,-901 6872.5,-901 6866.5,-901 6860.5,-895 6860.5,-889 6860.5,-889 6860.5,-830 6860.5,-830 6860.5,-824 6866.5,-818 6872.5,-818 6872.5,-818 7065.5,-818 7065.5,-818 7071.5,-818 7077.5,-824 7077.5,-830 7077.5,-830 7077.5,-889 7077.5,-889 7077.5,-895 7071.5,-901 7065.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"6868.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.01</text>\r\n<text text-anchor=\"start\" x=\"6919\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.255</text>\r\n<text text-anchor=\"start\" x=\"6925.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 78</text>\r\n<text text-anchor=\"start\" x=\"6920.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [112, 5]</text>\r\n<text text-anchor=\"start\" x=\"6922\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 214->224 -->\r\n<g id=\"edge224\" class=\"edge\"><title>214->224</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6969,-936.907C6969,-928.649 6969,-919.864 6969,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6972.5,-911.021 6969,-901.021 6965.5,-911.021 6972.5,-911.021\"/>\r\n</g>\r\n<!-- 216 -->\r\n<g id=\"node217\" class=\"node\"><title>216</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6550,-774.5C6550,-774.5 6452,-774.5 6452,-774.5 6446,-774.5 6440,-768.5 6440,-762.5 6440,-762.5 6440,-718.5 6440,-718.5 6440,-712.5 6446,-706.5 6452,-706.5 6452,-706.5 6550,-706.5 6550,-706.5 6556,-706.5 6562,-712.5 6562,-718.5 6562,-718.5 6562,-762.5 6562,-762.5 6562,-768.5 6556,-774.5 6550,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"6459\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6453.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 923</text>\r\n<text text-anchor=\"start\" x=\"6448\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1461, 0]</text>\r\n<text text-anchor=\"start\" x=\"6454\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 215->216 -->\r\n<g id=\"edge216\" class=\"edge\"><title>215->216</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6619.2,-817.907C6600.25,-805.659 6579.51,-792.252 6560.77,-780.135\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6562.61,-777.156 6552.31,-774.667 6558.81,-783.035 6562.61,-777.156\"/>\r\n</g>\r\n<!-- 217 -->\r\n<g id=\"node218\" class=\"node\"><title>217</title>\r\n<path fill=\"#e68641\" stroke=\"black\" d=\"M6707.5,-782C6707.5,-782 6592.5,-782 6592.5,-782 6586.5,-782 6580.5,-776 6580.5,-770 6580.5,-770 6580.5,-711 6580.5,-711 6580.5,-705 6586.5,-699 6592.5,-699 6592.5,-699 6707.5,-699 6707.5,-699 6713.5,-699 6719.5,-705 6719.5,-711 6719.5,-711 6719.5,-770 6719.5,-770 6719.5,-776 6713.5,-782 6707.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"6588.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 1316.5</text>\r\n<text text-anchor=\"start\" x=\"6600\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.229</text>\r\n<text text-anchor=\"start\" x=\"6606.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"6605.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [78, 3]</text>\r\n<text text-anchor=\"start\" x=\"6603\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 215->217 -->\r\n<g id=\"edge217\" class=\"edge\"><title>215->217</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6670.9,-817.907C6668.59,-809.468 6666.13,-800.477 6663.74,-791.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6667.1,-790.743 6661.08,-782.021 6660.34,-792.59 6667.1,-790.743\"/>\r\n</g>\r\n<!-- 218 -->\r\n<g id=\"node219\" class=\"node\"><title>218</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6501,-655.5C6501,-655.5 6415,-655.5 6415,-655.5 6409,-655.5 6403,-649.5 6403,-643.5 6403,-643.5 6403,-599.5 6403,-599.5 6403,-593.5 6409,-587.5 6415,-587.5 6415,-587.5 6501,-587.5 6501,-587.5 6507,-587.5 6513,-593.5 6513,-599.5 6513,-599.5 6513,-643.5 6513,-643.5 6513,-649.5 6507,-655.5 6501,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"6416\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6414.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 28</text>\r\n<text text-anchor=\"start\" x=\"6413.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\r\n<text text-anchor=\"start\" x=\"6411\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 217->218 -->\r\n<g id=\"edge218\" class=\"edge\"><title>217->218</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6581.38,-698.928C6562.11,-687.415 6541.18,-674.8 6522,-663 6520.9,-662.322 6519.79,-661.636 6518.67,-660.944\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6520.32,-657.849 6509.97,-655.545 6516.62,-663.795 6520.32,-657.849\"/>\r\n</g>\r\n<!-- 219 -->\r\n<g id=\"node220\" class=\"node\"><title>219</title>\r\n<path fill=\"#e78c49\" stroke=\"black\" d=\"M6685,-663C6685,-663 6543,-663 6543,-663 6537,-663 6531,-657 6531,-651 6531,-651 6531,-592 6531,-592 6531,-586 6537,-580 6543,-580 6543,-580 6685,-580 6685,-580 6691,-580 6697,-586 6697,-592 6697,-592 6697,-651 6697,-651 6697,-657 6691,-663 6685,-663\"/>\r\n<text text-anchor=\"start\" x=\"6539\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 130.0</text>\r\n<text text-anchor=\"start\" x=\"6564\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.391</text>\r\n<text text-anchor=\"start\" x=\"6570.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"6569.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [36, 3]</text>\r\n<text text-anchor=\"start\" x=\"6567\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 217->219 -->\r\n<g id=\"edge219\" class=\"edge\"><title>217->219</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6637.51,-698.907C6634.91,-690.468 6632.15,-681.477 6629.46,-672.738\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6632.75,-671.549 6626.47,-663.021 6626.06,-673.608 6632.75,-671.549\"/>\r\n</g>\r\n<!-- 220 -->\r\n<g id=\"node221\" class=\"node\"><title>220</title>\r\n<path fill=\"#bddef6\" stroke=\"black\" d=\"M6490.5,-544C6490.5,-544 6367.5,-544 6367.5,-544 6361.5,-544 6355.5,-538 6355.5,-532 6355.5,-532 6355.5,-473 6355.5,-473 6355.5,-467 6361.5,-461 6367.5,-461 6367.5,-461 6490.5,-461 6490.5,-461 6496.5,-461 6502.5,-467 6502.5,-473 6502.5,-473 6502.5,-532 6502.5,-532 6502.5,-538 6496.5,-544 6490.5,-544\"/>\r\n<text text-anchor=\"start\" x=\"6363.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 24132.5</text>\r\n<text text-anchor=\"start\" x=\"6379\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.971</text>\r\n<text text-anchor=\"start\" x=\"6389.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6388.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 3]</text>\r\n<text text-anchor=\"start\" x=\"6374\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 219->220 -->\r\n<g id=\"edge220\" class=\"edge\"><title>219->220</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6549.82,-579.907C6534.32,-570.106 6517.65,-559.563 6501.79,-549.533\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6503.39,-546.408 6493.07,-544.021 6499.65,-552.324 6503.39,-546.408\"/>\r\n</g>\r\n<!-- 223 -->\r\n<g id=\"node224\" class=\"node\"><title>223</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6619,-536.5C6619,-536.5 6533,-536.5 6533,-536.5 6527,-536.5 6521,-530.5 6521,-524.5 6521,-524.5 6521,-480.5 6521,-480.5 6521,-474.5 6527,-468.5 6533,-468.5 6533,-468.5 6619,-468.5 6619,-468.5 6625,-468.5 6631,-474.5 6631,-480.5 6631,-480.5 6631,-524.5 6631,-524.5 6631,-530.5 6625,-536.5 6619,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6534\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6532.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\r\n<text text-anchor=\"start\" x=\"6531.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [34, 0]</text>\r\n<text text-anchor=\"start\" x=\"6529\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 219->223 -->\r\n<g id=\"edge223\" class=\"edge\"><title>219->223</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6600.82,-579.907C6597.3,-569.094 6593.5,-557.376 6589.95,-546.441\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6593.19,-545.097 6586.77,-536.667 6586.53,-547.259 6593.19,-545.097\"/>\r\n</g>\r\n<!-- 221 -->\r\n<g id=\"node222\" class=\"node\"><title>221</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6412,-417.5C6412,-417.5 6310,-417.5 6310,-417.5 6304,-417.5 6298,-411.5 6298,-405.5 6298,-405.5 6298,-361.5 6298,-361.5 6298,-355.5 6304,-349.5 6310,-349.5 6310,-349.5 6412,-349.5 6412,-349.5 6418,-349.5 6424,-355.5 6424,-361.5 6424,-361.5 6424,-405.5 6424,-405.5 6424,-411.5 6418,-417.5 6412,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"6319\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6321.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6320.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"6306\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 220->221 -->\r\n<g id=\"edge221\" class=\"edge\"><title>220->221</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6405.41,-460.907C6398.93,-449.763 6391.9,-437.658 6385.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6388.33,-424.554 6380.28,-417.667 6382.28,-428.072 6388.33,-424.554\"/>\r\n</g>\r\n<!-- 222 -->\r\n<g id=\"node223\" class=\"node\"><title>222</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6540,-417.5C6540,-417.5 6454,-417.5 6454,-417.5 6448,-417.5 6442,-411.5 6442,-405.5 6442,-405.5 6442,-361.5 6442,-361.5 6442,-355.5 6448,-349.5 6454,-349.5 6454,-349.5 6540,-349.5 6540,-349.5 6546,-349.5 6552,-355.5 6552,-361.5 6552,-361.5 6552,-405.5 6552,-405.5 6552,-411.5 6546,-417.5 6540,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"6455\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6457.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"6456.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\r\n<text text-anchor=\"start\" x=\"6450\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 220->222 -->\r\n<g id=\"edge222\" class=\"edge\"><title>220->222</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6452.59,-460.907C6459.07,-449.763 6466.1,-437.658 6472.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6475.72,-428.072 6477.72,-417.667 6469.67,-424.554 6475.72,-428.072\"/>\r\n</g>\r\n<!-- 225 -->\r\n<g id=\"node226\" class=\"node\"><title>225</title>\r\n<path fill=\"#e88f4f\" stroke=\"black\" d=\"M7014,-782C7014,-782 6916,-782 6916,-782 6910,-782 6904,-776 6904,-770 6904,-770 6904,-711 6904,-711 6904,-705 6910,-699 6916,-699 6916,-699 7014,-699 7014,-699 7020,-699 7026,-705 7026,-711 7026,-711 7026,-770 7026,-770 7026,-776 7020,-782 7014,-782\"/>\r\n<text text-anchor=\"start\" x=\"6912\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 79.5</text>\r\n<text text-anchor=\"start\" x=\"6915\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.469</text>\r\n<text text-anchor=\"start\" x=\"6921.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\r\n<text text-anchor=\"start\" x=\"6920.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [45, 5]</text>\r\n<text text-anchor=\"start\" x=\"6918\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 224->225 -->\r\n<g id=\"edge225\" class=\"edge\"><title>224->225</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6967.61,-817.907C6967.33,-809.558 6967.02,-800.671 6966.73,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6970.23,-791.895 6966.39,-782.021 6963.23,-792.135 6970.23,-791.895\"/>\r\n</g>\r\n<!-- 234 -->\r\n<g id=\"node235\" class=\"node\"><title>234</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7142,-774.5C7142,-774.5 7056,-774.5 7056,-774.5 7050,-774.5 7044,-768.5 7044,-762.5 7044,-762.5 7044,-718.5 7044,-718.5 7044,-712.5 7050,-706.5 7056,-706.5 7056,-706.5 7142,-706.5 7142,-706.5 7148,-706.5 7154,-712.5 7154,-718.5 7154,-718.5 7154,-762.5 7154,-762.5 7154,-768.5 7148,-774.5 7142,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"7057\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7055.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\r\n<text text-anchor=\"start\" x=\"7054.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [67, 0]</text>\r\n<text text-anchor=\"start\" x=\"7052\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 224->234 -->\r\n<g id=\"edge234\" class=\"edge\"><title>224->234</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7014.1,-817.907C7027.22,-806.101 7041.54,-793.217 7054.61,-781.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7057.06,-783.958 7062.15,-774.667 7052.37,-778.755 7057.06,-783.958\"/>\r\n</g>\r\n<!-- 226 -->\r\n<g id=\"node227\" class=\"node\"><title>226</title>\r\n<path fill=\"#f5cdb0\" stroke=\"black\" d=\"M6845,-663C6845,-663 6753,-663 6753,-663 6747,-663 6741,-657 6741,-651 6741,-651 6741,-592 6741,-592 6741,-586 6747,-580 6753,-580 6753,-580 6845,-580 6845,-580 6851,-580 6857,-586 6857,-592 6857,-592 6857,-651 6857,-651 6857,-657 6851,-663 6845,-663\"/>\r\n<text text-anchor=\"start\" x=\"6750.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"6749\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.954</text>\r\n<text text-anchor=\"start\" x=\"6759.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"6758.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 3]</text>\r\n<text text-anchor=\"start\" x=\"6752\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 225->226 -->\r\n<g id=\"edge226\" class=\"edge\"><title>225->226</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6907.41,-698.907C6893.63,-689.197 6878.82,-678.758 6864.71,-668.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6866.68,-665.921 6856.49,-663.021 6862.65,-671.643 6866.68,-665.921\"/>\r\n</g>\r\n<!-- 229 -->\r\n<g id=\"node230\" class=\"node\"><title>229</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M7089,-663C7089,-663 6887,-663 6887,-663 6881,-663 6875,-657 6875,-651 6875,-651 6875,-592 6875,-592 6875,-586 6881,-580 6887,-580 6887,-580 7089,-580 7089,-580 7095,-580 7101,-586 7101,-592 7101,-592 7101,-651 7101,-651 7101,-657 7095,-663 7089,-663\"/>\r\n<text text-anchor=\"start\" x=\"6883\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.315</text>\r\n<text text-anchor=\"start\" x=\"6938\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"6944.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"6943.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 2]</text>\r\n<text text-anchor=\"start\" x=\"6941\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 225->229 -->\r\n<g id=\"edge229\" class=\"edge\"><title>225->229</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6972.98,-698.907C6974.62,-690.558 6976.37,-681.671 6978.07,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6981.54,-673.508 6980.03,-663.021 6974.67,-672.158 6981.54,-673.508\"/>\r\n</g>\r\n<!-- 227 -->\r\n<g id=\"node228\" class=\"node\"><title>227</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6763,-536.5C6763,-536.5 6661,-536.5 6661,-536.5 6655,-536.5 6649,-530.5 6649,-524.5 6649,-524.5 6649,-480.5 6649,-480.5 6649,-474.5 6655,-468.5 6661,-468.5 6661,-468.5 6763,-468.5 6763,-468.5 6769,-468.5 6775,-474.5 6775,-480.5 6775,-480.5 6775,-524.5 6775,-524.5 6775,-530.5 6769,-536.5 6763,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6670\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6672.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6671.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\r\n<text text-anchor=\"start\" x=\"6657\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 226->227 -->\r\n<g id=\"edge227\" class=\"edge\"><title>226->227</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6768.82,-579.907C6760.36,-568.542 6751.17,-556.178 6742.69,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6745.44,-542.603 6736.66,-536.667 6739.82,-546.78 6745.44,-542.603\"/>\r\n</g>\r\n<!-- 228 -->\r\n<g id=\"node229\" class=\"node\"><title>228</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6891,-536.5C6891,-536.5 6805,-536.5 6805,-536.5 6799,-536.5 6793,-530.5 6793,-524.5 6793,-524.5 6793,-480.5 6793,-480.5 6793,-474.5 6799,-468.5 6805,-468.5 6805,-468.5 6891,-468.5 6891,-468.5 6897,-468.5 6903,-474.5 6903,-480.5 6903,-480.5 6903,-524.5 6903,-524.5 6903,-530.5 6897,-536.5 6891,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6806\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6808.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"6807.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\r\n<text text-anchor=\"start\" x=\"6801\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 226->228 -->\r\n<g id=\"edge228\" class=\"edge\"><title>226->228</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6816,-579.907C6820.58,-568.983 6825.54,-557.137 6830.16,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6833.47,-547.243 6834.11,-536.667 6827.02,-544.539 6833.47,-547.243\"/>\r\n</g>\r\n<!-- 230 -->\r\n<g id=\"node231\" class=\"node\"><title>230</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7019,-536.5C7019,-536.5 6933,-536.5 6933,-536.5 6927,-536.5 6921,-530.5 6921,-524.5 6921,-524.5 6921,-480.5 6921,-480.5 6921,-474.5 6927,-468.5 6933,-468.5 6933,-468.5 7019,-468.5 7019,-468.5 7025,-468.5 7031,-474.5 7031,-480.5 7031,-480.5 7031,-524.5 7031,-524.5 7031,-530.5 7025,-536.5 7019,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"6934\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"6932.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"6931.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [37, 0]</text>\r\n<text text-anchor=\"start\" x=\"6929\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 229->230 -->\r\n<g id=\"edge230\" class=\"edge\"><title>229->230</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M6983.84,-579.907C6982.74,-569.204 6981.55,-557.615 6980.44,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"6983.9,-546.258 6979.4,-536.667 6976.94,-546.972 6983.9,-546.258\"/>\r\n</g>\r\n<!-- 231 -->\r\n<g id=\"node232\" class=\"node\"><title>231</title>\r\n<path fill=\"#f6d5bd\" stroke=\"black\" d=\"M7255,-544C7255,-544 7061,-544 7061,-544 7055,-544 7049,-538 7049,-532 7049,-532 7049,-473 7049,-473 7049,-467 7055,-461 7061,-461 7061,-461 7255,-461 7255,-461 7261,-461 7267,-467 7267,-473 7267,-473 7267,-532 7267,-532 7267,-538 7261,-544 7255,-544\"/>\r\n<text text-anchor=\"start\" x=\"7057\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.44</text>\r\n<text text-anchor=\"start\" x=\"7108\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.971</text>\r\n<text text-anchor=\"start\" x=\"7118.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"7117.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 2]</text>\r\n<text text-anchor=\"start\" x=\"7111\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 229->231 -->\r\n<g id=\"edge231\" class=\"edge\"><title>229->231</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7046.98,-579.907C7061.09,-570.197 7076.26,-559.758 7090.71,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7092.87,-552.573 7099.12,-544.021 7088.9,-546.807 7092.87,-552.573\"/>\r\n</g>\r\n<!-- 232 -->\r\n<g id=\"node233\" class=\"node\"><title>232</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7141,-417.5C7141,-417.5 7039,-417.5 7039,-417.5 7033,-417.5 7027,-411.5 7027,-405.5 7027,-405.5 7027,-361.5 7027,-361.5 7027,-355.5 7033,-349.5 7039,-349.5 7039,-349.5 7141,-349.5 7141,-349.5 7147,-349.5 7153,-355.5 7153,-361.5 7153,-361.5 7153,-405.5 7153,-405.5 7153,-411.5 7147,-417.5 7141,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"7048\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7050.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7049.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7035\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 231->232 -->\r\n<g id=\"edge232\" class=\"edge\"><title>231->232</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7134.41,-460.907C7127.93,-449.763 7120.9,-437.658 7114.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7117.33,-424.554 7109.28,-417.667 7111.28,-428.072 7117.33,-424.554\"/>\r\n</g>\r\n<!-- 233 -->\r\n<g id=\"node234\" class=\"node\"><title>233</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7269,-417.5C7269,-417.5 7183,-417.5 7183,-417.5 7177,-417.5 7171,-411.5 7171,-405.5 7171,-405.5 7171,-361.5 7171,-361.5 7171,-355.5 7177,-349.5 7183,-349.5 7183,-349.5 7269,-349.5 7269,-349.5 7275,-349.5 7281,-355.5 7281,-361.5 7281,-361.5 7281,-405.5 7281,-405.5 7281,-411.5 7275,-417.5 7269,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"7184\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7186.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7185.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\r\n<text text-anchor=\"start\" x=\"7179\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 231->233 -->\r\n<g id=\"edge233\" class=\"edge\"><title>231->233</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7181.59,-460.907C7188.07,-449.763 7195.1,-437.658 7201.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7204.72,-428.072 7206.72,-417.667 7198.67,-424.554 7204.72,-428.072\"/>\r\n</g>\r\n<!-- 236 -->\r\n<g id=\"node237\" class=\"node\"><title>236</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7212,-893.5C7212,-893.5 7110,-893.5 7110,-893.5 7104,-893.5 7098,-887.5 7098,-881.5 7098,-881.5 7098,-837.5 7098,-837.5 7098,-831.5 7104,-825.5 7110,-825.5 7110,-825.5 7212,-825.5 7212,-825.5 7218,-825.5 7224,-831.5 7224,-837.5 7224,-837.5 7224,-881.5 7224,-881.5 7224,-887.5 7218,-893.5 7212,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7119\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7121.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7120.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7106\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 235->236 -->\r\n<g id=\"edge236\" class=\"edge\"><title>235->236</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7162.31,-936.907C7162.12,-926.204 7161.93,-914.615 7161.74,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7165.24,-903.606 7161.57,-893.667 7158.24,-903.725 7165.24,-903.606\"/>\r\n</g>\r\n<!-- 237 -->\r\n<g id=\"node238\" class=\"node\"><title>237</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7340,-893.5C7340,-893.5 7254,-893.5 7254,-893.5 7248,-893.5 7242,-887.5 7242,-881.5 7242,-881.5 7242,-837.5 7242,-837.5 7242,-831.5 7248,-825.5 7254,-825.5 7254,-825.5 7340,-825.5 7340,-825.5 7346,-825.5 7352,-831.5 7352,-837.5 7352,-837.5 7352,-881.5 7352,-881.5 7352,-887.5 7346,-893.5 7340,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7255\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7257.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7256.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"7250\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 235->237 -->\r\n<g id=\"edge237\" class=\"edge\"><title>235->237</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7209.49,-936.907C7223.01,-925.101 7237.77,-912.217 7251.25,-900.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7253.78,-902.881 7259.01,-893.667 7249.18,-897.608 7253.78,-902.881\"/>\r\n</g>\r\n<!-- 239 -->\r\n<g id=\"node240\" class=\"node\"><title>239</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7369,-1012.5C7369,-1012.5 7267,-1012.5 7267,-1012.5 7261,-1012.5 7255,-1006.5 7255,-1000.5 7255,-1000.5 7255,-956.5 7255,-956.5 7255,-950.5 7261,-944.5 7267,-944.5 7267,-944.5 7369,-944.5 7369,-944.5 7375,-944.5 7381,-950.5 7381,-956.5 7381,-956.5 7381,-1000.5 7381,-1000.5 7381,-1006.5 7375,-1012.5 7369,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"7276\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7278.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\r\n<text text-anchor=\"start\" x=\"7277.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 9]</text>\r\n<text text-anchor=\"start\" x=\"7263\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 238->239 -->\r\n<g id=\"edge239\" class=\"edge\"><title>238->239</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7318,-1055.91C7318,-1045.2 7318,-1033.62 7318,-1022.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7321.5,-1022.67 7318,-1012.67 7314.5,-1022.67 7321.5,-1022.67\"/>\r\n</g>\r\n<!-- 240 -->\r\n<g id=\"node241\" class=\"node\"><title>240</title>\r\n<path fill=\"#f0b58b\" stroke=\"black\" d=\"M7545.5,-1020C7545.5,-1020 7438.5,-1020 7438.5,-1020 7432.5,-1020 7426.5,-1014 7426.5,-1008 7426.5,-1008 7426.5,-949 7426.5,-949 7426.5,-943 7432.5,-937 7438.5,-937 7438.5,-937 7545.5,-937 7545.5,-937 7551.5,-937 7557.5,-943 7557.5,-949 7557.5,-949 7557.5,-1008 7557.5,-1008 7557.5,-1014 7551.5,-1020 7545.5,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7434.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 948.0</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.872</text>\r\n<text text-anchor=\"start\" x=\"7448.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 89</text>\r\n<text text-anchor=\"start\" x=\"7443.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [99, 41]</text>\r\n<text text-anchor=\"start\" x=\"7445\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 238->240 -->\r\n<g id=\"edge240\" class=\"edge\"><title>238->240</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7376.42,-1057.22C7391.42,-1047.13 7407.69,-1036.19 7423.15,-1025.79\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7425.31,-1028.56 7431.65,-1020.08 7421.4,-1022.76 7425.31,-1028.56\"/>\r\n</g>\r\n<!-- 241 -->\r\n<g id=\"node242\" class=\"node\"><title>241</title>\r\n<path fill=\"#e68743\" stroke=\"black\" d=\"M7589,-901C7589,-901 7395,-901 7395,-901 7389,-901 7383,-895 7383,-889 7383,-889 7383,-830 7383,-830 7383,-824 7389,-818 7395,-818 7395,-818 7589,-818 7589,-818 7595,-818 7601,-824 7601,-830 7601,-830 7601,-889 7601,-889 7601,-895 7595,-901 7589,-901\"/>\r\n<text text-anchor=\"start\" x=\"7391\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.53</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\r\n<text text-anchor=\"start\" x=\"7448.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 38</text>\r\n<text text-anchor=\"start\" x=\"7447.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [60, 3]</text>\r\n<text text-anchor=\"start\" x=\"7445\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 240->241 -->\r\n<g id=\"edge241\" class=\"edge\"><title>240->241</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7492,-936.907C7492,-928.649 7492,-919.864 7492,-911.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7495.5,-911.021 7492,-901.021 7488.5,-911.021 7495.5,-911.021\"/>\r\n</g>\r\n<!-- 250 -->\r\n<g id=\"node251\" class=\"node\"><title>250</title>\r\n<path fill=\"#fefcfa\" stroke=\"black\" d=\"M7848.5,-901C7848.5,-901 7661.5,-901 7661.5,-901 7655.5,-901 7649.5,-895 7649.5,-889 7649.5,-889 7649.5,-830 7649.5,-830 7649.5,-824 7655.5,-818 7661.5,-818 7661.5,-818 7848.5,-818 7848.5,-818 7854.5,-818 7860.5,-824 7860.5,-830 7860.5,-830 7860.5,-889 7860.5,-889 7860.5,-895 7854.5,-901 7848.5,-901\"/>\r\n<text text-anchor=\"start\" x=\"7657.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.025</text>\r\n<text text-anchor=\"start\" x=\"7713\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\r\n<text text-anchor=\"start\" x=\"7711.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\r\n<text text-anchor=\"start\" x=\"7706.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [39, 38]</text>\r\n<text text-anchor=\"start\" x=\"7708\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 240->250 -->\r\n<g id=\"edge250\" class=\"edge\"><title>240->250</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7557.69,-948.278C7586.91,-935.279 7621.97,-919.683 7654.37,-905.266\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7656.17,-908.297 7663.88,-901.034 7653.33,-901.901 7656.17,-908.297\"/>\r\n</g>\r\n<!-- 242 -->\r\n<g id=\"node243\" class=\"node\"><title>242</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M7383.5,-782C7383.5,-782 7276.5,-782 7276.5,-782 7270.5,-782 7264.5,-776 7264.5,-770 7264.5,-770 7264.5,-711 7264.5,-711 7264.5,-705 7270.5,-699 7276.5,-699 7276.5,-699 7383.5,-699 7383.5,-699 7389.5,-699 7395.5,-705 7395.5,-711 7395.5,-711 7395.5,-770 7395.5,-770 7395.5,-776 7389.5,-782 7383.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7272.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 357.5</text>\r\n<text text-anchor=\"start\" x=\"7280\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.122</text>\r\n<text text-anchor=\"start\" x=\"7286.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 36</text>\r\n<text text-anchor=\"start\" x=\"7285.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [59, 1]</text>\r\n<text text-anchor=\"start\" x=\"7283\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 241->242 -->\r\n<g id=\"edge242\" class=\"edge\"><title>241->242</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7435.79,-817.907C7422.48,-808.288 7408.17,-797.953 7394.51,-788.09\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7396.26,-785.038 7386.11,-782.021 7392.16,-790.713 7396.26,-785.038\"/>\r\n</g>\r\n<!-- 247 -->\r\n<g id=\"node248\" class=\"node\"><title>247</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M7568.5,-782C7568.5,-782 7425.5,-782 7425.5,-782 7419.5,-782 7413.5,-776 7413.5,-770 7413.5,-770 7413.5,-711 7413.5,-711 7413.5,-705 7419.5,-699 7425.5,-699 7425.5,-699 7568.5,-699 7568.5,-699 7574.5,-699 7580.5,-705 7580.5,-711 7580.5,-711 7580.5,-770 7580.5,-770 7580.5,-776 7574.5,-782 7568.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7421.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.5</text>\r\n<text text-anchor=\"start\" x=\"7447\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"7457.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7456.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 241->247 -->\r\n<g id=\"edge247\" class=\"edge\"><title>241->247</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7493.73,-817.907C7494.09,-809.558 7494.47,-800.671 7494.84,-792.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7498.34,-792.161 7495.27,-782.021 7491.34,-791.862 7498.34,-792.161\"/>\r\n</g>\r\n<!-- 243 -->\r\n<g id=\"node244\" class=\"node\"><title>243</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7237,-655.5C7237,-655.5 7151,-655.5 7151,-655.5 7145,-655.5 7139,-649.5 7139,-643.5 7139,-643.5 7139,-599.5 7139,-599.5 7139,-593.5 7145,-587.5 7151,-587.5 7151,-587.5 7237,-587.5 7237,-587.5 7243,-587.5 7249,-593.5 7249,-599.5 7249,-599.5 7249,-643.5 7249,-643.5 7249,-649.5 7243,-655.5 7237,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7152\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7150.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"7149.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [40, 0]</text>\r\n<text text-anchor=\"start\" x=\"7147\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 242->243 -->\r\n<g id=\"edge243\" class=\"edge\"><title>242->243</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7282.82,-698.907C7269.09,-687.101 7254.11,-674.217 7240.44,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7242.42,-659.535 7232.55,-655.667 7237.85,-664.842 7242.42,-659.535\"/>\r\n</g>\r\n<!-- 244 -->\r\n<g id=\"node245\" class=\"node\"><title>244</title>\r\n<path fill=\"#e68843\" stroke=\"black\" d=\"M7386.5,-663C7386.5,-663 7279.5,-663 7279.5,-663 7273.5,-663 7267.5,-657 7267.5,-651 7267.5,-651 7267.5,-592 7267.5,-592 7267.5,-586 7273.5,-580 7279.5,-580 7279.5,-580 7386.5,-580 7386.5,-580 7392.5,-580 7398.5,-586 7398.5,-592 7398.5,-592 7398.5,-651 7398.5,-651 7398.5,-657 7392.5,-663 7386.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"7275.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 428.5</text>\r\n<text text-anchor=\"start\" x=\"7283\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.286</text>\r\n<text text-anchor=\"start\" x=\"7289.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\r\n<text text-anchor=\"start\" x=\"7288.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [19, 1]</text>\r\n<text text-anchor=\"start\" x=\"7286\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 242->244 -->\r\n<g id=\"edge244\" class=\"edge\"><title>242->244</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7331.04,-698.907C7331.25,-690.558 7331.48,-681.671 7331.7,-673.02\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7335.2,-673.107 7331.96,-663.021 7328.21,-672.928 7335.2,-673.107\"/>\r\n</g>\r\n<!-- 245 -->\r\n<g id=\"node246\" class=\"node\"><title>245</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7399,-536.5C7399,-536.5 7297,-536.5 7297,-536.5 7291,-536.5 7285,-530.5 7285,-524.5 7285,-524.5 7285,-480.5 7285,-480.5 7285,-474.5 7291,-468.5 7297,-468.5 7297,-468.5 7399,-468.5 7399,-468.5 7405,-468.5 7411,-474.5 7411,-480.5 7411,-480.5 7411,-524.5 7411,-524.5 7411,-530.5 7405,-536.5 7399,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7306\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7308.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7307.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\r\n<text text-anchor=\"start\" x=\"7293\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 244->245 -->\r\n<g id=\"edge245\" class=\"edge\"><title>244->245</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7338.2,-579.907C7339.58,-569.204 7341.06,-557.615 7342.45,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7345.95,-547.031 7343.75,-536.667 7339,-546.141 7345.95,-547.031\"/>\r\n</g>\r\n<!-- 246 -->\r\n<g id=\"node247\" class=\"node\"><title>246</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7527,-536.5C7527,-536.5 7441,-536.5 7441,-536.5 7435,-536.5 7429,-530.5 7429,-524.5 7429,-524.5 7429,-480.5 7429,-480.5 7429,-474.5 7435,-468.5 7441,-468.5 7441,-468.5 7527,-468.5 7527,-468.5 7533,-468.5 7539,-474.5 7539,-480.5 7539,-480.5 7539,-524.5 7539,-524.5 7539,-530.5 7533,-536.5 7527,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7442\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7440.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11</text>\r\n<text text-anchor=\"start\" x=\"7439.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [19, 0]</text>\r\n<text text-anchor=\"start\" x=\"7437\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 244->246 -->\r\n<g id=\"edge246\" class=\"edge\"><title>244->246</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7385.39,-579.907C7400.77,-567.99 7417.57,-554.976 7432.87,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7435.43,-545.559 7441.19,-536.667 7431.15,-540.025 7435.43,-545.559\"/>\r\n</g>\r\n<!-- 248 -->\r\n<g id=\"node249\" class=\"node\"><title>248</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7515,-655.5C7515,-655.5 7429,-655.5 7429,-655.5 7423,-655.5 7417,-649.5 7417,-643.5 7417,-643.5 7417,-599.5 7417,-599.5 7417,-593.5 7423,-587.5 7429,-587.5 7429,-587.5 7515,-587.5 7515,-587.5 7521,-587.5 7527,-593.5 7527,-599.5 7527,-599.5 7527,-643.5 7527,-643.5 7527,-649.5 7521,-655.5 7515,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7430\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7432.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7431.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"7425\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 247->248 -->\r\n<g id=\"edge248\" class=\"edge\"><title>247->248</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7488.33,-698.907C7486.04,-688.204 7483.56,-676.615 7481.25,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7484.6,-664.715 7479.09,-655.667 7477.75,-666.178 7484.6,-664.715\"/>\r\n</g>\r\n<!-- 249 -->\r\n<g id=\"node250\" class=\"node\"><title>249</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7659,-655.5C7659,-655.5 7557,-655.5 7557,-655.5 7551,-655.5 7545,-649.5 7545,-643.5 7545,-643.5 7545,-599.5 7545,-599.5 7545,-593.5 7551,-587.5 7557,-587.5 7557,-587.5 7659,-587.5 7659,-587.5 7665,-587.5 7671,-593.5 7671,-599.5 7671,-599.5 7671,-643.5 7671,-643.5 7671,-649.5 7665,-655.5 7659,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7566\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7568.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"7567.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"7553\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 247->249 -->\r\n<g id=\"edge249\" class=\"edge\"><title>247->249</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7535.51,-698.907C7546.5,-687.321 7558.48,-674.698 7569.47,-663.111\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7572.19,-665.331 7576.53,-655.667 7567.11,-660.513 7572.19,-665.331\"/>\r\n</g>\r\n<!-- 251 -->\r\n<g id=\"node252\" class=\"node\"><title>251</title>\r\n<path fill=\"#79bded\" stroke=\"black\" d=\"M7812.5,-782C7812.5,-782 7697.5,-782 7697.5,-782 7691.5,-782 7685.5,-776 7685.5,-770 7685.5,-770 7685.5,-711 7685.5,-711 7685.5,-705 7691.5,-699 7697.5,-699 7697.5,-699 7812.5,-699 7812.5,-699 7818.5,-699 7824.5,-705 7824.5,-711 7824.5,-711 7824.5,-770 7824.5,-770 7824.5,-776 7818.5,-782 7812.5,-782\"/>\r\n<text text-anchor=\"start\" x=\"7693.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2968.0</text>\r\n<text text-anchor=\"start\" x=\"7705\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.801</text>\r\n<text text-anchor=\"start\" x=\"7711.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\r\n<text text-anchor=\"start\" x=\"7706.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 31]</text>\r\n<text text-anchor=\"start\" x=\"7700\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 250->251 -->\r\n<g id=\"edge251\" class=\"edge\"><title>250->251</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7755,-817.907C7755,-809.649 7755,-800.864 7755,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7758.5,-792.021 7755,-782.021 7751.5,-792.021 7758.5,-792.021\"/>\r\n</g>\r\n<!-- 256 -->\r\n<g id=\"node257\" class=\"node\"><title>256</title>\r\n<path fill=\"#eb9f69\" stroke=\"black\" d=\"M8128,-782C8128,-782 8036,-782 8036,-782 8030,-782 8024,-776 8024,-770 8024,-770 8024,-711 8024,-711 8024,-705 8030,-699 8036,-699 8036,-699 8128,-699 8128,-699 8134,-699 8140,-705 8140,-711 8140,-711 8140,-770 8140,-770 8140,-776 8134,-782 8128,-782\"/>\r\n<text text-anchor=\"start\" x=\"8035\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 13.0</text>\r\n<text text-anchor=\"start\" x=\"8032\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.711</text>\r\n<text text-anchor=\"start\" x=\"8038.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 27</text>\r\n<text text-anchor=\"start\" x=\"8037.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 7]</text>\r\n<text text-anchor=\"start\" x=\"8035\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 250->256 -->\r\n<g id=\"edge256\" class=\"edge\"><title>250->256</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7860.72,-820.675C7911.13,-802.637 7969.96,-781.589 8014.28,-765.731\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8015.55,-768.991 8023.79,-762.327 8013.2,-762.401 8015.55,-768.991\"/>\r\n</g>\r\n<!-- 252 -->\r\n<g id=\"node253\" class=\"node\"><title>252</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7803,-655.5C7803,-655.5 7701,-655.5 7701,-655.5 7695,-655.5 7689,-649.5 7689,-643.5 7689,-643.5 7689,-599.5 7689,-599.5 7689,-593.5 7695,-587.5 7701,-587.5 7701,-587.5 7803,-587.5 7803,-587.5 7809,-587.5 7815,-593.5 7815,-599.5 7815,-599.5 7815,-643.5 7815,-643.5 7815,-649.5 7809,-655.5 7803,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"7710\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7708.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\r\n<text text-anchor=\"start\" x=\"7707.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\r\n<text text-anchor=\"start\" x=\"7697\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 251->252 -->\r\n<g id=\"edge252\" class=\"edge\"><title>251->252</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7753.96,-698.907C7753.68,-688.204 7753.39,-676.615 7753.11,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7756.61,-665.574 7752.85,-655.667 7749.61,-665.753 7756.61,-665.574\"/>\r\n</g>\r\n<!-- 253 -->\r\n<g id=\"node254\" class=\"node\"><title>253</title>\r\n<path fill=\"#efb388\" stroke=\"black\" d=\"M7937,-663C7937,-663 7845,-663 7845,-663 7839,-663 7833,-657 7833,-651 7833,-651 7833,-592 7833,-592 7833,-586 7839,-580 7845,-580 7845,-580 7937,-580 7937,-580 7943,-580 7949,-586 7949,-592 7949,-592 7949,-651 7949,-651 7949,-657 7943,-663 7937,-663\"/>\r\n<text text-anchor=\"start\" x=\"7844\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 75.5</text>\r\n<text text-anchor=\"start\" x=\"7841\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"7851.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\r\n<text text-anchor=\"start\" x=\"7846.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 4]</text>\r\n<text text-anchor=\"start\" x=\"7844\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 251->253 -->\r\n<g id=\"edge253\" class=\"edge\"><title>251->253</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7802.18,-698.907C7813.16,-689.469 7824.93,-679.343 7836.19,-669.649\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7838.6,-672.196 7843.9,-663.021 7834.04,-666.889 7838.6,-672.196\"/>\r\n</g>\r\n<!-- 254 -->\r\n<g id=\"node255\" class=\"node\"><title>254</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7795,-536.5C7795,-536.5 7709,-536.5 7709,-536.5 7703,-536.5 7697,-530.5 7697,-524.5 7697,-524.5 7697,-480.5 7697,-480.5 7697,-474.5 7703,-468.5 7709,-468.5 7709,-468.5 7795,-468.5 7795,-468.5 7801,-468.5 7807,-474.5 7807,-480.5 7807,-480.5 7807,-524.5 7807,-524.5 7807,-530.5 7801,-536.5 7795,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7710\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7712.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"7707.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [10, 0]</text>\r\n<text text-anchor=\"start\" x=\"7705\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 253->254 -->\r\n<g id=\"edge254\" class=\"edge\"><title>253->254</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7842.77,-579.907C7828.62,-567.99 7813.15,-554.976 7799.07,-543.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7801.31,-540.429 7791.4,-536.667 7796.8,-545.784 7801.31,-540.429\"/>\r\n</g>\r\n<!-- 255 -->\r\n<g id=\"node256\" class=\"node\"><title>255</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7939,-536.5C7939,-536.5 7837,-536.5 7837,-536.5 7831,-536.5 7825,-530.5 7825,-524.5 7825,-524.5 7825,-480.5 7825,-480.5 7825,-474.5 7831,-468.5 7837,-468.5 7837,-468.5 7939,-468.5 7939,-468.5 7945,-468.5 7951,-474.5 7951,-480.5 7951,-480.5 7951,-524.5 7951,-524.5 7951,-530.5 7945,-536.5 7939,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7846\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7848.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"7847.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\r\n<text text-anchor=\"start\" x=\"7833\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 253->255 -->\r\n<g id=\"edge255\" class=\"edge\"><title>253->255</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7889.96,-579.907C7889.68,-569.204 7889.39,-557.615 7889.11,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7892.61,-546.574 7888.85,-536.667 7885.61,-546.753 7892.61,-546.574\"/>\r\n</g>\r\n<!-- 257 -->\r\n<g id=\"node258\" class=\"node\"><title>257</title>\r\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M8175.5,-663C8175.5,-663 7988.5,-663 7988.5,-663 7982.5,-663 7976.5,-657 7976.5,-651 7976.5,-651 7976.5,-592 7976.5,-592 7976.5,-586 7982.5,-580 7988.5,-580 7988.5,-580 8175.5,-580 8175.5,-580 8181.5,-580 8187.5,-586 8187.5,-592 8187.5,-592 8187.5,-651 8187.5,-651 8187.5,-657 8181.5,-663 8175.5,-663\"/>\r\n<text text-anchor=\"start\" x=\"7984.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.325</text>\r\n<text text-anchor=\"start\" x=\"8036\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\r\n<text text-anchor=\"start\" x=\"8042.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"8041.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\r\n<text text-anchor=\"start\" x=\"8027\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 256->257 -->\r\n<g id=\"edge257\" class=\"edge\"><title>256->257</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8082,-698.907C8082,-690.649 8082,-681.864 8082,-673.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8085.5,-673.021 8082,-663.021 8078.5,-673.021 8085.5,-673.021\"/>\r\n</g>\r\n<!-- 260 -->\r\n<g id=\"node261\" class=\"node\"><title>260</title>\r\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M8365,-663C8365,-663 8223,-663 8223,-663 8217,-663 8211,-657 8211,-651 8211,-651 8211,-592 8211,-592 8211,-586 8217,-580 8223,-580 8223,-580 8365,-580 8365,-580 8371,-580 8377,-586 8377,-592 8377,-592 8377,-651 8377,-651 8377,-657 8371,-663 8365,-663\"/>\r\n<text text-anchor=\"start\" x=\"8219\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 216.0</text>\r\n<text text-anchor=\"start\" x=\"8244\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.353</text>\r\n<text text-anchor=\"start\" x=\"8250.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\r\n<text text-anchor=\"start\" x=\"8249.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [28, 2]</text>\r\n<text text-anchor=\"start\" x=\"8247\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 256->260 -->\r\n<g id=\"edge260\" class=\"edge\"><title>256->260</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8140.21,-707.374C8162.17,-695.257 8187.58,-681.231 8211.35,-668.114\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8213.3,-671.033 8220.37,-663.137 8209.92,-664.904 8213.3,-671.033\"/>\r\n</g>\r\n<!-- 258 -->\r\n<g id=\"node259\" class=\"node\"><title>258</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8083,-536.5C8083,-536.5 7981,-536.5 7981,-536.5 7975,-536.5 7969,-530.5 7969,-524.5 7969,-524.5 7969,-480.5 7969,-480.5 7969,-474.5 7975,-468.5 7981,-468.5 7981,-468.5 8083,-468.5 8083,-468.5 8089,-468.5 8095,-474.5 8095,-480.5 8095,-480.5 8095,-524.5 8095,-524.5 8095,-530.5 8089,-536.5 8083,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"7990\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7992.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"7991.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 5]</text>\r\n<text text-anchor=\"start\" x=\"7977\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 257->258 -->\r\n<g id=\"edge258\" class=\"edge\"><title>257->258</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8064.65,-579.907C8059.98,-568.983 8054.92,-557.137 8050.21,-546.107\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8053.32,-544.487 8046.17,-536.667 8046.89,-547.238 8053.32,-544.487\"/>\r\n</g>\r\n<!-- 259 -->\r\n<g id=\"node260\" class=\"node\"><title>259</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8211,-536.5C8211,-536.5 8125,-536.5 8125,-536.5 8119,-536.5 8113,-530.5 8113,-524.5 8113,-524.5 8113,-480.5 8113,-480.5 8113,-474.5 8119,-468.5 8125,-468.5 8125,-468.5 8211,-468.5 8211,-468.5 8217,-468.5 8223,-474.5 8223,-480.5 8223,-480.5 8223,-524.5 8223,-524.5 8223,-530.5 8217,-536.5 8211,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"8126\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8128.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8127.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8121\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 257->259 -->\r\n<g id=\"edge259\" class=\"edge\"><title>257->259</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8111.84,-579.907C8120.19,-568.542 8129.28,-556.178 8137.66,-544.774\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8140.52,-546.797 8143.62,-536.667 8134.88,-542.652 8140.52,-546.797\"/>\r\n</g>\r\n<!-- 261 -->\r\n<g id=\"node262\" class=\"node\"><title>261</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8339,-536.5C8339,-536.5 8253,-536.5 8253,-536.5 8247,-536.5 8241,-530.5 8241,-524.5 8241,-524.5 8241,-480.5 8241,-480.5 8241,-474.5 8247,-468.5 8253,-468.5 8253,-468.5 8339,-468.5 8339,-468.5 8345,-468.5 8351,-474.5 8351,-480.5 8351,-480.5 8351,-524.5 8351,-524.5 8351,-530.5 8345,-536.5 8339,-536.5\"/>\r\n<text text-anchor=\"start\" x=\"8254\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8252.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\r\n<text text-anchor=\"start\" x=\"8251.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [21, 0]</text>\r\n<text text-anchor=\"start\" x=\"8249\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 260->261 -->\r\n<g id=\"edge261\" class=\"edge\"><title>260->261</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8294.69,-579.907C8294.88,-569.204 8295.07,-557.615 8295.26,-546.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8298.76,-546.725 8295.43,-536.667 8291.76,-546.606 8298.76,-546.725\"/>\r\n</g>\r\n<!-- 262 -->\r\n<g id=\"node263\" class=\"node\"><title>262</title>\r\n<path fill=\"#eca572\" stroke=\"black\" d=\"M8537,-544C8537,-544 8381,-544 8381,-544 8375,-544 8369,-538 8369,-532 8369,-532 8369,-473 8369,-473 8369,-467 8375,-461 8381,-461 8381,-461 8537,-461 8537,-461 8543,-461 8549,-467 8549,-473 8549,-473 8549,-532 8549,-532 8549,-538 8543,-544 8537,-544\"/>\r\n<text text-anchor=\"start\" x=\"8377\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_file_creations ≤ 10.5</text>\r\n<text text-anchor=\"start\" x=\"8409\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.764</text>\r\n<text text-anchor=\"start\" x=\"8419.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"8418.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 2]</text>\r\n<text text-anchor=\"start\" x=\"8412\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 260->262 -->\r\n<g id=\"edge262\" class=\"edge\"><title>260->262</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8351.25,-579.907C8364.94,-570.197 8379.66,-559.758 8393.69,-549.811\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8395.72,-552.66 8401.86,-544.021 8391.67,-546.95 8395.72,-552.66\"/>\r\n</g>\r\n<!-- 263 -->\r\n<g id=\"node264\" class=\"node\"><title>263</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8434,-417.5C8434,-417.5 8348,-417.5 8348,-417.5 8342,-417.5 8336,-411.5 8336,-405.5 8336,-405.5 8336,-361.5 8336,-361.5 8336,-355.5 8342,-349.5 8348,-349.5 8348,-349.5 8434,-349.5 8434,-349.5 8440,-349.5 8446,-355.5 8446,-361.5 8446,-361.5 8446,-405.5 8446,-405.5 8446,-411.5 8440,-417.5 8434,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"8349\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8351.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\r\n<text text-anchor=\"start\" x=\"8350.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 0]</text>\r\n<text text-anchor=\"start\" x=\"8344\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 262->263 -->\r\n<g id=\"edge263\" class=\"edge\"><title>262->263</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8435.41,-460.907C8428.93,-449.763 8421.9,-437.658 8415.37,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8418.33,-424.554 8410.28,-417.667 8412.28,-428.072 8418.33,-424.554\"/>\r\n</g>\r\n<!-- 264 -->\r\n<g id=\"node265\" class=\"node\"><title>264</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8578,-417.5C8578,-417.5 8476,-417.5 8476,-417.5 8470,-417.5 8464,-411.5 8464,-405.5 8464,-405.5 8464,-361.5 8464,-361.5 8464,-355.5 8470,-349.5 8476,-349.5 8476,-349.5 8578,-349.5 8578,-349.5 8584,-349.5 8590,-355.5 8590,-361.5 8590,-361.5 8590,-405.5 8590,-405.5 8590,-411.5 8584,-417.5 8578,-417.5\"/>\r\n<text text-anchor=\"start\" x=\"8485\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8487.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8486.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"8472\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 262->264 -->\r\n<g id=\"edge264\" class=\"edge\"><title>262->264</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8482.59,-460.907C8489.07,-449.763 8496.1,-437.658 8502.63,-426.439\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8505.72,-428.072 8507.72,-417.667 8499.67,-424.554 8505.72,-428.072\"/>\r\n</g>\r\n<!-- 266 -->\r\n<g id=\"node267\" class=\"node\"><title>266</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7509,-1131.5C7509,-1131.5 7407,-1131.5 7407,-1131.5 7401,-1131.5 7395,-1125.5 7395,-1119.5 7395,-1119.5 7395,-1075.5 7395,-1075.5 7395,-1069.5 7401,-1063.5 7407,-1063.5 7407,-1063.5 7509,-1063.5 7509,-1063.5 7515,-1063.5 7521,-1069.5 7521,-1075.5 7521,-1075.5 7521,-1119.5 7521,-1119.5 7521,-1125.5 7515,-1131.5 7509,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7416\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7414.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 55</text>\r\n<text text-anchor=\"start\" x=\"7413.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 92]</text>\r\n<text text-anchor=\"start\" x=\"7403\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 265->266 -->\r\n<g id=\"edge266\" class=\"edge\"><title>265->266</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7458,-1174.91C7458,-1164.2 7458,-1152.62 7458,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7461.5,-1141.67 7458,-1131.67 7454.5,-1141.67 7461.5,-1141.67\"/>\r\n</g>\r\n<!-- 267 -->\r\n<g id=\"node268\" class=\"node\"><title>267</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7637,-1131.5C7637,-1131.5 7551,-1131.5 7551,-1131.5 7545,-1131.5 7539,-1125.5 7539,-1119.5 7539,-1119.5 7539,-1075.5 7539,-1075.5 7539,-1069.5 7545,-1063.5 7551,-1063.5 7551,-1063.5 7637,-1063.5 7637,-1063.5 7643,-1063.5 7649,-1069.5 7649,-1075.5 7649,-1075.5 7649,-1119.5 7649,-1119.5 7649,-1125.5 7643,-1131.5 7637,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7552\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7554.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\r\n<text text-anchor=\"start\" x=\"7549.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\r\n<text text-anchor=\"start\" x=\"7547\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 265->267 -->\r\n<g id=\"edge267\" class=\"edge\"><title>265->267</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7505.18,-1174.91C7518.91,-1163.1 7533.89,-1150.22 7547.56,-1138.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7550.15,-1140.84 7555.45,-1131.67 7545.58,-1135.54 7550.15,-1140.84\"/>\r\n</g>\r\n<!-- 269 -->\r\n<g id=\"node270\" class=\"node\"><title>269</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7688,-1250.5C7688,-1250.5 7590,-1250.5 7590,-1250.5 7584,-1250.5 7578,-1244.5 7578,-1238.5 7578,-1238.5 7578,-1194.5 7578,-1194.5 7578,-1188.5 7584,-1182.5 7590,-1182.5 7590,-1182.5 7688,-1182.5 7688,-1182.5 7694,-1182.5 7700,-1188.5 7700,-1194.5 7700,-1194.5 7700,-1238.5 7700,-1238.5 7700,-1244.5 7694,-1250.5 7688,-1250.5\"/>\r\n<text text-anchor=\"start\" x=\"7597\" y=\"-1235.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7587.5\" y=\"-1220.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1936</text>\r\n<text text-anchor=\"start\" x=\"7586\" y=\"-1205.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3046, 0]</text>\r\n<text text-anchor=\"start\" x=\"7592\" y=\"-1190.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 268->269 -->\r\n<g id=\"edge269\" class=\"edge\"><title>268->269</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7639,-1293.91C7639,-1283.2 7639,-1271.62 7639,-1260.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7642.5,-1260.67 7639,-1250.67 7635.5,-1260.67 7642.5,-1260.67\"/>\r\n</g>\r\n<!-- 270 -->\r\n<g id=\"node271\" class=\"node\"><title>270</title>\r\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M7845.5,-1258C7845.5,-1258 7730.5,-1258 7730.5,-1258 7724.5,-1258 7718.5,-1252 7718.5,-1246 7718.5,-1246 7718.5,-1187 7718.5,-1187 7718.5,-1181 7724.5,-1175 7730.5,-1175 7730.5,-1175 7845.5,-1175 7845.5,-1175 7851.5,-1175 7857.5,-1181 7857.5,-1187 7857.5,-1187 7857.5,-1246 7857.5,-1246 7857.5,-1252 7851.5,-1258 7845.5,-1258\"/>\r\n<text text-anchor=\"start\" x=\"7726.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 7254.0</text>\r\n<text text-anchor=\"start\" x=\"7738\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.116</text>\r\n<text text-anchor=\"start\" x=\"7736.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1971</text>\r\n<text text-anchor=\"start\" x=\"7731\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3146, 50]</text>\r\n<text text-anchor=\"start\" x=\"7741\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 268->270 -->\r\n<g id=\"edge270\" class=\"edge\"><title>268->270</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7690.69,-1293.91C7702.83,-1284.38 7715.86,-1274.15 7728.31,-1264.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7730.69,-1266.95 7736.4,-1258.02 7726.37,-1261.44 7730.69,-1266.95\"/>\r\n</g>\r\n<!-- 271 -->\r\n<g id=\"node272\" class=\"node\"><title>271</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7837,-1131.5C7837,-1131.5 7739,-1131.5 7739,-1131.5 7733,-1131.5 7727,-1125.5 7727,-1119.5 7727,-1119.5 7727,-1075.5 7727,-1075.5 7727,-1069.5 7733,-1063.5 7739,-1063.5 7739,-1063.5 7837,-1063.5 7837,-1063.5 7843,-1063.5 7849,-1069.5 7849,-1075.5 7849,-1075.5 7849,-1119.5 7849,-1119.5 7849,-1125.5 7843,-1131.5 7837,-1131.5\"/>\r\n<text text-anchor=\"start\" x=\"7746\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7736.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1790</text>\r\n<text text-anchor=\"start\" x=\"7735\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2907, 0]</text>\r\n<text text-anchor=\"start\" x=\"7741\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 270->271 -->\r\n<g id=\"edge271\" class=\"edge\"><title>270->271</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7788,-1174.91C7788,-1164.2 7788,-1152.62 7788,-1141.78\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7791.5,-1141.67 7788,-1131.67 7784.5,-1141.67 7791.5,-1141.67\"/>\r\n</g>\r\n<!-- 272 -->\r\n<g id=\"node273\" class=\"node\"><title>272</title>\r\n<path fill=\"#ea9b62\" stroke=\"black\" d=\"M8002.5,-1139C8002.5,-1139 7879.5,-1139 7879.5,-1139 7873.5,-1139 7867.5,-1133 7867.5,-1127 7867.5,-1127 7867.5,-1068 7867.5,-1068 7867.5,-1062 7873.5,-1056 7879.5,-1056 7879.5,-1056 8002.5,-1056 8002.5,-1056 8008.5,-1056 8014.5,-1062 8014.5,-1068 8014.5,-1068 8014.5,-1127 8014.5,-1127 8014.5,-1133 8008.5,-1139 8002.5,-1139\"/>\r\n<text text-anchor=\"start\" x=\"7875.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 21866.0</text>\r\n<text text-anchor=\"start\" x=\"7891\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.665</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 181</text>\r\n<text text-anchor=\"start\" x=\"7888\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [239, 50]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 270->272 -->\r\n<g id=\"edge272\" class=\"edge\"><title>270->272</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7841.08,-1174.91C7853.54,-1165.38 7866.92,-1155.15 7879.71,-1145.37\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7882.19,-1147.88 7888.01,-1139.02 7877.94,-1142.32 7882.19,-1147.88\"/>\r\n</g>\r\n<!-- 273 -->\r\n<g id=\"node274\" class=\"node\"><title>273</title>\r\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M7987,-1020C7987,-1020 7895,-1020 7895,-1020 7889,-1020 7883,-1014 7883,-1008 7883,-1008 7883,-949 7883,-949 7883,-943 7889,-937 7895,-937 7895,-937 7987,-937 7987,-937 7993,-937 7999,-943 7999,-949 7999,-949 7999,-1008 7999,-1008 7999,-1014 7993,-1020 7987,-1020\"/>\r\n<text text-anchor=\"start\" x=\"7913.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 1.5</text>\r\n<text text-anchor=\"start\" x=\"7891\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.069</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 152</text>\r\n<text text-anchor=\"start\" x=\"7892.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [239, 2]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 272->273 -->\r\n<g id=\"edge273\" class=\"edge\"><title>272->273</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7941,-1055.91C7941,-1047.65 7941,-1038.86 7941,-1030.3\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7944.5,-1030.02 7941,-1020.02 7937.5,-1030.02 7944.5,-1030.02\"/>\r\n</g>\r\n<!-- 280 -->\r\n<g id=\"node281\" class=\"node\"><title>280</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8131,-1012.5C8131,-1012.5 8029,-1012.5 8029,-1012.5 8023,-1012.5 8017,-1006.5 8017,-1000.5 8017,-1000.5 8017,-956.5 8017,-956.5 8017,-950.5 8023,-944.5 8029,-944.5 8029,-944.5 8131,-944.5 8131,-944.5 8137,-944.5 8143,-950.5 8143,-956.5 8143,-956.5 8143,-1000.5 8143,-1000.5 8143,-1006.5 8137,-1012.5 8131,-1012.5\"/>\r\n<text text-anchor=\"start\" x=\"8038\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8036.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\r\n<text text-anchor=\"start\" x=\"8035.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 48]</text>\r\n<text text-anchor=\"start\" x=\"8025\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 272->280 -->\r\n<g id=\"edge280\" class=\"edge\"><title>272->280</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7989.23,-1055.91C8003.38,-1043.99 8018.85,-1030.98 8032.93,-1019.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8035.2,-1021.78 8040.6,-1012.67 8030.69,-1016.43 8035.2,-1021.78\"/>\r\n</g>\r\n<!-- 274 -->\r\n<g id=\"node275\" class=\"node\"><title>274</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7985.5,-893.5C7985.5,-893.5 7896.5,-893.5 7896.5,-893.5 7890.5,-893.5 7884.5,-887.5 7884.5,-881.5 7884.5,-881.5 7884.5,-837.5 7884.5,-837.5 7884.5,-831.5 7890.5,-825.5 7896.5,-825.5 7896.5,-825.5 7985.5,-825.5 7985.5,-825.5 7991.5,-825.5 7997.5,-831.5 7997.5,-837.5 7997.5,-837.5 7997.5,-881.5 7997.5,-881.5 7997.5,-887.5 7991.5,-893.5 7985.5,-893.5\"/>\r\n<text text-anchor=\"start\" x=\"7899\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"7893.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 147</text>\r\n<text text-anchor=\"start\" x=\"7892.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [234, 0]</text>\r\n<text text-anchor=\"start\" x=\"7894\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 273->274 -->\r\n<g id=\"edge274\" class=\"edge\"><title>273->274</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7941,-936.907C7941,-926.204 7941,-914.615 7941,-903.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"7944.5,-903.667 7941,-893.667 7937.5,-903.667 7944.5,-903.667\"/>\r\n</g>\r\n<!-- 275 -->\r\n<g id=\"node276\" class=\"node\"><title>275</title>\r\n<path fill=\"#efb388\" stroke=\"black\" d=\"M8496,-901C8496,-901 8404,-901 8404,-901 8398,-901 8392,-895 8392,-889 8392,-889 8392,-830 8392,-830 8392,-824 8398,-818 8404,-818 8404,-818 8496,-818 8496,-818 8502,-818 8508,-824 8508,-830 8508,-830 8508,-889 8508,-889 8508,-895 8502,-901 8496,-901\"/>\r\n<text text-anchor=\"start\" x=\"8401.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\r\n<text text-anchor=\"start\" x=\"8400\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 2]</text>\r\n<text text-anchor=\"start\" x=\"8403\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 273->275 -->\r\n<g id=\"edge275\" class=\"edge\"><title>273->275</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M7999.2,-940.641C8002.13,-939.318 8005.07,-938.094 8008,-937 8134.66,-889.679 8292.83,-871.357 8381.5,-864.466\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8381.99,-867.939 8391.7,-863.7 8381.47,-860.959 8381.99,-867.939\"/>\r\n</g>\r\n<!-- 276 -->\r\n<g id=\"node277\" class=\"node\"><title>276</title>\r\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M8515,-782C8515,-782 8385,-782 8385,-782 8379,-782 8373,-776 8373,-770 8373,-770 8373,-711 8373,-711 8373,-705 8379,-699 8385,-699 8385,-699 8515,-699 8515,-699 8521,-699 8527,-705 8527,-711 8527,-711 8527,-770 8527,-770 8527,-776 8521,-782 8515,-782\"/>\r\n<text text-anchor=\"start\" x=\"8381\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_rerror_rate ≤ 0.25</text>\r\n<text text-anchor=\"start\" x=\"8400\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\r\n<text text-anchor=\"start\" x=\"8395\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 275->276 -->\r\n<g id=\"edge276\" class=\"edge\"><title>275->276</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8450,-817.907C8450,-809.649 8450,-800.864 8450,-792.302\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8453.5,-792.021 8450,-782.021 8446.5,-792.021 8453.5,-792.021\"/>\r\n</g>\r\n<!-- 279 -->\r\n<g id=\"node280\" class=\"node\"><title>279</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8643,-774.5C8643,-774.5 8557,-774.5 8557,-774.5 8551,-774.5 8545,-768.5 8545,-762.5 8545,-762.5 8545,-718.5 8545,-718.5 8545,-712.5 8551,-706.5 8557,-706.5 8557,-706.5 8643,-706.5 8643,-706.5 8649,-706.5 8655,-712.5 8655,-718.5 8655,-718.5 8655,-762.5 8655,-762.5 8655,-768.5 8649,-774.5 8643,-774.5\"/>\r\n<text text-anchor=\"start\" x=\"8558\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8560.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\r\n<text text-anchor=\"start\" x=\"8559.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\r\n<text text-anchor=\"start\" x=\"8553\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 275->279 -->\r\n<g id=\"edge279\" class=\"edge\"><title>275->279</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8502.04,-817.907C8517.32,-805.99 8534.01,-792.976 8549.21,-781.12\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8551.75,-783.577 8557.48,-774.667 8547.44,-778.058 8551.75,-783.577\"/>\r\n</g>\r\n<!-- 277 -->\r\n<g id=\"node278\" class=\"node\"><title>277</title>\r\n<path fill=\"#e58139\" stroke=\"black\" d=\"M8493,-655.5C8493,-655.5 8407,-655.5 8407,-655.5 8401,-655.5 8395,-649.5 8395,-643.5 8395,-643.5 8395,-599.5 8395,-599.5 8395,-593.5 8401,-587.5 8407,-587.5 8407,-587.5 8493,-587.5 8493,-587.5 8499,-587.5 8505,-593.5 8505,-599.5 8505,-599.5 8505,-643.5 8505,-643.5 8505,-649.5 8499,-655.5 8493,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"8408\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8410.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8409.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\r\n<text text-anchor=\"start\" x=\"8403\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\r\n</g>\r\n<!-- 276->277 -->\r\n<g id=\"edge277\" class=\"edge\"><title>276->277</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8450,-698.907C8450,-688.204 8450,-676.615 8450,-665.776\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8453.5,-665.667 8450,-655.667 8446.5,-665.667 8453.5,-665.667\"/>\r\n</g>\r\n<!-- 278 -->\r\n<g id=\"node279\" class=\"node\"><title>278</title>\r\n<path fill=\"#399de5\" stroke=\"black\" d=\"M8637,-655.5C8637,-655.5 8535,-655.5 8535,-655.5 8529,-655.5 8523,-649.5 8523,-643.5 8523,-643.5 8523,-599.5 8523,-599.5 8523,-593.5 8529,-587.5 8535,-587.5 8535,-587.5 8637,-587.5 8637,-587.5 8643,-587.5 8649,-593.5 8649,-599.5 8649,-599.5 8649,-643.5 8649,-643.5 8649,-649.5 8643,-655.5 8637,-655.5\"/>\r\n<text text-anchor=\"start\" x=\"8544\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\r\n<text text-anchor=\"start\" x=\"8546.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\r\n<text text-anchor=\"start\" x=\"8545.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\r\n<text text-anchor=\"start\" x=\"8531\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\r\n</g>\r\n<!-- 276->278 -->\r\n<g id=\"edge278\" class=\"edge\"><title>276->278</title>\r\n<path fill=\"none\" stroke=\"black\" d=\"M8497.18,-698.907C8510.91,-687.101 8525.89,-674.217 8539.56,-662.45\"/>\r\n<polygon fill=\"black\" stroke=\"black\" points=\"8542.15,-664.842 8547.45,-655.667 8537.58,-659.535 8542.15,-664.842\"/>\r\n</g>\r\n</g>\r\n</svg>\r\n",
+ "image/svg+xml": "<?xml version=\"1.0\" encoding=\"UTF-8\" standalone=\"no\"?>\n<!DOCTYPE svg PUBLIC \"-//W3C//DTD SVG 1.1//EN\"\n \"http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd\">\n<!-- Generated by graphviz version 2.38.0 (20140413.2041)\n -->\n<!-- Title: Tree Pages: 1 -->\n<svg width=\"7540pt\" height=\"1504pt\"\n viewBox=\"0.00 0.00 7540.00 1504.00\" xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\">\n<g id=\"graph0\" class=\"graph\" transform=\"scale(1 1) rotate(0) translate(4 1500)\">\n<title>Tree</title>\n<polygon fill=\"white\" stroke=\"none\" points=\"-4,4 -4,-1500 7536,-1500 7536,4 -4,4\"/>\n<!-- 0 -->\n<g id=\"node1\" class=\"node\"><title>0</title>\n<path fill=\"#fbebdf\" stroke=\"black\" d=\"M3584,-1496C3584,-1496 3462,-1496 3462,-1496 3456,-1496 3450,-1490 3450,-1484 3450,-1484 3450,-1425 3450,-1425 3450,-1419 3456,-1413 3462,-1413 3462,-1413 3584,-1413 3584,-1413 3590,-1413 3596,-1419 3596,-1425 3596,-1425 3596,-1484 3596,-1484 3596,-1490 3590,-1496 3584,-1496\"/>\n<text text-anchor=\"start\" x=\"3470\" y=\"-1480.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 28.5</text>\n<text text-anchor=\"start\" x=\"3473\" y=\"-1465.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.994</text>\n<text text-anchor=\"start\" x=\"3467\" y=\"-1450.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 11238</text>\n<text text-anchor=\"start\" x=\"3458\" y=\"-1435.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9597, 8037]</text>\n<text text-anchor=\"start\" x=\"3476\" y=\"-1420.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 1 -->\n<g id=\"node2\" class=\"node\"><title>1</title>\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M2881,-1377C2881,-1377 2739,-1377 2739,-1377 2733,-1377 2727,-1371 2727,-1365 2727,-1365 2727,-1306 2727,-1306 2727,-1300 2733,-1294 2739,-1294 2739,-1294 2881,-1294 2881,-1294 2887,-1294 2893,-1300 2893,-1306 2893,-1306 2893,-1365 2893,-1365 2893,-1371 2887,-1377 2881,-1377\"/>\n<text text-anchor=\"start\" x=\"2735\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 243.0</text>\n<text text-anchor=\"start\" x=\"2760\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.399</text>\n<text text-anchor=\"start\" x=\"2758.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5132</text>\n<text text-anchor=\"start\" x=\"2749\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [627, 7309]</text>\n<text text-anchor=\"start\" x=\"2755\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 0->1 -->\n<g id=\"edge1\" class=\"edge\"><title>0->1</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3449.71,-1441.47C3319.23,-1420.06 3046.88,-1375.37 2903.26,-1351.8\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2903.58,-1348.31 2893.15,-1350.14 2902.45,-1355.22 2903.58,-1348.31\"/>\n<text text-anchor=\"middle\" x=\"2907.73\" y=\"-1366.75\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">True</text>\n</g>\n<!-- 94 -->\n<g id=\"node95\" class=\"node\"><title>94</title>\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M4320,-1377C4320,-1377 4206,-1377 4206,-1377 4200,-1377 4194,-1371 4194,-1365 4194,-1365 4194,-1306 4194,-1306 4194,-1300 4200,-1294 4206,-1294 4206,-1294 4320,-1294 4320,-1294 4326,-1294 4332,-1300 4332,-1306 4332,-1306 4332,-1365 4332,-1365 4332,-1371 4326,-1377 4320,-1377\"/>\n<text text-anchor=\"start\" x=\"4205.5\" y=\"-1361.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 333.5</text>\n<text text-anchor=\"start\" x=\"4213\" y=\"-1346.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.385</text>\n<text text-anchor=\"start\" x=\"4211.5\" y=\"-1331.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6106</text>\n<text text-anchor=\"start\" x=\"4202\" y=\"-1316.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8970, 728]</text>\n<text text-anchor=\"start\" x=\"4216\" y=\"-1301.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 0->94 -->\n<g id=\"edge94\" class=\"edge\"><title>0->94</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3596.32,-1441.91C3736.09,-1419.81 4039.54,-1371.83 4183.78,-1349.03\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4184.56,-1352.45 4193.89,-1347.43 4183.46,-1345.53 4184.56,-1352.45\"/>\n<text text-anchor=\"middle\" x=\"4179.19\" y=\"-1363.95\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">False</text>\n</g>\n<!-- 2 -->\n<g id=\"node3\" class=\"node\"><title>2</title>\n<path fill=\"#a1d0f3\" stroke=\"black\" d=\"M2277.5,-1258C2277.5,-1258 2162.5,-1258 2162.5,-1258 2156.5,-1258 2150.5,-1252 2150.5,-1246 2150.5,-1246 2150.5,-1187 2150.5,-1187 2150.5,-1181 2156.5,-1175 2162.5,-1175 2162.5,-1175 2277.5,-1175 2277.5,-1175 2283.5,-1175 2289.5,-1181 2289.5,-1187 2289.5,-1187 2289.5,-1246 2289.5,-1246 2289.5,-1252 2283.5,-1258 2277.5,-1258\"/>\n<text text-anchor=\"start\" x=\"2158.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"2170\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.928</text>\n<text text-anchor=\"start\" x=\"2168.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1043</text>\n<text text-anchor=\"start\" x=\"2159\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 1054]</text>\n<text text-anchor=\"start\" x=\"2165\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 1->2 -->\n<g id=\"edge2\" class=\"edge\"><title>1->2</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2726.72,-1317.98C2613.1,-1295.45 2410.91,-1255.36 2299.36,-1233.24\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2300.01,-1229.8 2289.52,-1231.29 2298.64,-1236.66 2300.01,-1229.8\"/>\n</g>\n<!-- 55 -->\n<g id=\"node56\" class=\"node\"><title>55</title>\n<path fill=\"#3b9ee5\" stroke=\"black\" d=\"M2903.5,-1258C2903.5,-1258 2716.5,-1258 2716.5,-1258 2710.5,-1258 2704.5,-1252 2704.5,-1246 2704.5,-1246 2704.5,-1187 2704.5,-1187 2704.5,-1181 2710.5,-1175 2716.5,-1175 2716.5,-1175 2903.5,-1175 2903.5,-1175 2909.5,-1175 2915.5,-1181 2915.5,-1187 2915.5,-1187 2915.5,-1246 2915.5,-1246 2915.5,-1252 2909.5,-1258 2903.5,-1258\"/>\n<text text-anchor=\"start\" x=\"2712.5\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\n<text text-anchor=\"start\" x=\"2760\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.093</text>\n<text text-anchor=\"start\" x=\"2758.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4089</text>\n<text text-anchor=\"start\" x=\"2753\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [75, 6255]</text>\n<text text-anchor=\"start\" x=\"2755\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 1->55 -->\n<g id=\"edge55\" class=\"edge\"><title>1->55</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2810,-1293.91C2810,-1285.65 2810,-1276.86 2810,-1268.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2813.5,-1268.02 2810,-1258.02 2806.5,-1268.02 2813.5,-1268.02\"/>\n</g>\n<!-- 3 -->\n<g id=\"node4\" class=\"node\"><title>3</title>\n<path fill=\"#fcf2ea\" stroke=\"black\" d=\"M1667,-1139C1667,-1139 1465,-1139 1465,-1139 1459,-1139 1453,-1133 1453,-1127 1453,-1127 1453,-1068 1453,-1068 1453,-1062 1459,-1056 1465,-1056 1465,-1056 1667,-1056 1667,-1056 1673,-1056 1679,-1062 1679,-1068 1679,-1068 1679,-1127 1679,-1127 1679,-1133 1673,-1139 1667,-1139\"/>\n<text text-anchor=\"start\" x=\"1461\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.625</text>\n<text text-anchor=\"start\" x=\"1516\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\n<text text-anchor=\"start\" x=\"1518.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 674</text>\n<text text-anchor=\"start\" x=\"1509\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [552, 493]</text>\n<text text-anchor=\"start\" x=\"1519\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 2->3 -->\n<g id=\"edge3\" class=\"edge\"><title>2->3</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2150.32,-1203.03C2040.51,-1183.39 1825.68,-1144.96 1689.33,-1120.56\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1689.71,-1117.08 1679.25,-1118.76 1688.48,-1123.97 1689.71,-1117.08\"/>\n</g>\n<!-- 54 -->\n<g id=\"node55\" class=\"node\"><title>54</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2271,-1131.5C2271,-1131.5 2169,-1131.5 2169,-1131.5 2163,-1131.5 2157,-1125.5 2157,-1119.5 2157,-1119.5 2157,-1075.5 2157,-1075.5 2157,-1069.5 2163,-1063.5 2169,-1063.5 2169,-1063.5 2271,-1063.5 2271,-1063.5 2277,-1063.5 2283,-1069.5 2283,-1075.5 2283,-1075.5 2283,-1119.5 2283,-1119.5 2283,-1125.5 2277,-1131.5 2271,-1131.5\"/>\n<text text-anchor=\"start\" x=\"2178\" y=\"-1116.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2172.5\" y=\"-1101.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 369</text>\n<text text-anchor=\"start\" x=\"2171.5\" y=\"-1086.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 561]</text>\n<text text-anchor=\"start\" x=\"2165\" y=\"-1071.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 2->54 -->\n<g id=\"edge54\" class=\"edge\"><title>2->54</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2220,-1174.91C2220,-1164.2 2220,-1152.62 2220,-1141.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2223.5,-1141.67 2220,-1131.67 2216.5,-1141.67 2223.5,-1141.67\"/>\n</g>\n<!-- 4 -->\n<g id=\"node5\" class=\"node\"><title>4</title>\n<path fill=\"#74baed\" stroke=\"black\" d=\"M1185.5,-1020C1185.5,-1020 1016.5,-1020 1016.5,-1020 1010.5,-1020 1004.5,-1014 1004.5,-1008 1004.5,-1008 1004.5,-949 1004.5,-949 1004.5,-943 1010.5,-937 1016.5,-937 1016.5,-937 1185.5,-937 1185.5,-937 1191.5,-937 1197.5,-943 1197.5,-949 1197.5,-949 1197.5,-1008 1197.5,-1008 1197.5,-1014 1191.5,-1020 1185.5,-1020\"/>\n<text text-anchor=\"start\" x=\"1012.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.07</text>\n<text text-anchor=\"start\" x=\"1051\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.779</text>\n<text text-anchor=\"start\" x=\"1053.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 393</text>\n<text text-anchor=\"start\" x=\"1044\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 467]</text>\n<text text-anchor=\"start\" x=\"1046\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 3->4 -->\n<g id=\"edge4\" class=\"edge\"><title>3->4</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1452.84,-1068.03C1378.1,-1049.22 1280.79,-1024.74 1207.45,-1006.29\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1208.28,-1002.88 1197.73,-1003.84 1206.57,-1009.67 1208.28,-1002.88\"/>\n</g>\n<!-- 39 -->\n<g id=\"node40\" class=\"node\"><title>39</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M1646.5,-1020C1646.5,-1020 1485.5,-1020 1485.5,-1020 1479.5,-1020 1473.5,-1014 1473.5,-1008 1473.5,-1008 1473.5,-949 1473.5,-949 1473.5,-943 1479.5,-937 1485.5,-937 1485.5,-937 1646.5,-937 1646.5,-937 1652.5,-937 1658.5,-943 1658.5,-949 1658.5,-949 1658.5,-1008 1658.5,-1008 1658.5,-1014 1652.5,-1020 1646.5,-1020\"/>\n<text text-anchor=\"start\" x=\"1481.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 13.0</text>\n<text text-anchor=\"start\" x=\"1516\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.325</text>\n<text text-anchor=\"start\" x=\"1518.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 281</text>\n<text text-anchor=\"start\" x=\"1513\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [412, 26]</text>\n<text text-anchor=\"start\" x=\"1519\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 3->39 -->\n<g id=\"edge39\" class=\"edge\"><title>3->39</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1566,-1055.91C1566,-1047.65 1566,-1038.86 1566,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1569.5,-1030.02 1566,-1020.02 1562.5,-1030.02 1569.5,-1030.02\"/>\n</g>\n<!-- 5 -->\n<g id=\"node6\" class=\"node\"><title>5</title>\n<path fill=\"#cbe5f8\" stroke=\"black\" d=\"M953,-901C953,-901 787,-901 787,-901 781,-901 775,-895 775,-889 775,-889 775,-830 775,-830 775,-824 781,-818 787,-818 787,-818 953,-818 953,-818 959,-818 965,-824 965,-830 965,-830 965,-889 965,-889 965,-895 959,-901 953,-901\"/>\n<text text-anchor=\"start\" x=\"783\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.09</text>\n<text text-anchor=\"start\" x=\"820\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.983</text>\n<text text-anchor=\"start\" x=\"822.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 215</text>\n<text text-anchor=\"start\" x=\"813\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [140, 190]</text>\n<text text-anchor=\"start\" x=\"815\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 4->5 -->\n<g id=\"edge5\" class=\"edge\"><title>4->5</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1020.86,-936.907C1000.88,-926.789 979.338,-915.879 958.963,-905.559\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"960.505,-902.417 950.003,-901.021 957.342,-908.662 960.505,-902.417\"/>\n</g>\n<!-- 38 -->\n<g id=\"node39\" class=\"node\"><title>38</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1152,-893.5C1152,-893.5 1050,-893.5 1050,-893.5 1044,-893.5 1038,-887.5 1038,-881.5 1038,-881.5 1038,-837.5 1038,-837.5 1038,-831.5 1044,-825.5 1050,-825.5 1050,-825.5 1152,-825.5 1152,-825.5 1158,-825.5 1164,-831.5 1164,-837.5 1164,-837.5 1164,-881.5 1164,-881.5 1164,-887.5 1158,-893.5 1152,-893.5\"/>\n<text text-anchor=\"start\" x=\"1059\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1053.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 178</text>\n<text text-anchor=\"start\" x=\"1052.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 277]</text>\n<text text-anchor=\"start\" x=\"1046\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 4->38 -->\n<g id=\"edge38\" class=\"edge\"><title>4->38</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1101,-936.907C1101,-926.204 1101,-914.615 1101,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1104.5,-903.667 1101,-893.667 1097.5,-903.667 1104.5,-903.667\"/>\n</g>\n<!-- 6 -->\n<g id=\"node7\" class=\"node\"><title>6</title>\n<path fill=\"#eca16c\" stroke=\"black\" d=\"M717,-782C717,-782 619,-782 619,-782 613,-782 607,-776 607,-770 607,-770 607,-711 607,-711 607,-705 613,-699 619,-699 619,-699 717,-699 717,-699 723,-699 729,-705 729,-711 729,-711 729,-770 729,-770 729,-776 723,-782 717,-782\"/>\n<text text-anchor=\"start\" x=\"633\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 4.5</text>\n<text text-anchor=\"start\" x=\"618\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.729</text>\n<text text-anchor=\"start\" x=\"620.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 107</text>\n<text text-anchor=\"start\" x=\"615\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [129, 33]</text>\n<text text-anchor=\"start\" x=\"621\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 5->6 -->\n<g id=\"edge6\" class=\"edge\"><title>5->6</title>\n<path fill=\"none\" stroke=\"black\" d=\"M799.917,-817.907C779.866,-806.294 758.016,-793.638 737.972,-782.029\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"739.612,-778.933 729.204,-776.95 736.103,-784.991 739.612,-778.933\"/>\n</g>\n<!-- 23 -->\n<g id=\"node24\" class=\"node\"><title>23</title>\n<path fill=\"#47a4e7\" stroke=\"black\" d=\"M959.5,-782C959.5,-782 780.5,-782 780.5,-782 774.5,-782 768.5,-776 768.5,-770 768.5,-770 768.5,-711 768.5,-711 768.5,-705 774.5,-699 780.5,-699 780.5,-699 959.5,-699 959.5,-699 965.5,-699 971.5,-705 971.5,-711 971.5,-711 971.5,-770 971.5,-770 971.5,-776 965.5,-782 959.5,-782\"/>\n<text text-anchor=\"start\" x=\"776.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\n<text text-anchor=\"start\" x=\"820\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.349</text>\n<text text-anchor=\"start\" x=\"822.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 108</text>\n<text text-anchor=\"start\" x=\"817\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 157]</text>\n<text text-anchor=\"start\" x=\"815\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 5->23 -->\n<g id=\"edge23\" class=\"edge\"><title>5->23</title>\n<path fill=\"none\" stroke=\"black\" d=\"M870,-817.907C870,-809.649 870,-800.864 870,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"873.5,-792.021 870,-782.021 866.5,-792.021 873.5,-792.021\"/>\n</g>\n<!-- 7 -->\n<g id=\"node8\" class=\"node\"><title>7</title>\n<path fill=\"#e68641\" stroke=\"black\" d=\"M549,-663C549,-663 397,-663 397,-663 391,-663 385,-657 385,-651 385,-651 385,-592 385,-592 385,-586 391,-580 397,-580 397,-580 549,-580 549,-580 555,-580 561,-586 561,-592 561,-592 561,-651 561,-651 561,-657 555,-663 549,-663\"/>\n<text text-anchor=\"start\" x=\"393\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\n<text text-anchor=\"start\" x=\"423\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.231</text>\n<text text-anchor=\"start\" x=\"429.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\n<text text-anchor=\"start\" x=\"424.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [128, 5]</text>\n<text text-anchor=\"start\" x=\"426\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 6->7 -->\n<g id=\"edge7\" class=\"edge\"><title>6->7</title>\n<path fill=\"none\" stroke=\"black\" d=\"M606.836,-702.801C588.626,-691.876 568.443,-679.766 549.39,-668.334\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"551.103,-665.28 540.727,-663.136 547.501,-671.282 551.103,-665.28\"/>\n</g>\n<!-- 18 -->\n<g id=\"node19\" class=\"node\"><title>18</title>\n<path fill=\"#40a0e6\" stroke=\"black\" d=\"M737.5,-663C737.5,-663 598.5,-663 598.5,-663 592.5,-663 586.5,-657 586.5,-651 586.5,-651 586.5,-592 586.5,-592 586.5,-586 592.5,-580 598.5,-580 598.5,-580 737.5,-580 737.5,-580 743.5,-580 749.5,-586 749.5,-592 749.5,-592 749.5,-651 749.5,-651 749.5,-657 743.5,-663 737.5,-663\"/>\n<text text-anchor=\"start\" x=\"594.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">same_srv_rate ≤ 0.185</text>\n<text text-anchor=\"start\" x=\"618\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.216</text>\n<text text-anchor=\"start\" x=\"624.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\n<text text-anchor=\"start\" x=\"623.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 28]</text>\n<text text-anchor=\"start\" x=\"613\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 6->18 -->\n<g id=\"edge18\" class=\"edge\"><title>6->18</title>\n<path fill=\"none\" stroke=\"black\" d=\"M668,-698.907C668,-690.649 668,-681.864 668,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"671.5,-673.021 668,-663.021 664.5,-673.021 671.5,-673.021\"/>\n</g>\n<!-- 8 -->\n<g id=\"node9\" class=\"node\"><title>8</title>\n<path fill=\"#f8dbc6\" stroke=\"black\" d=\"M386.5,-544C386.5,-544 209.5,-544 209.5,-544 203.5,-544 197.5,-538 197.5,-532 197.5,-532 197.5,-473 197.5,-473 197.5,-467 203.5,-461 209.5,-461 209.5,-461 386.5,-461 386.5,-461 392.5,-461 398.5,-467 398.5,-473 398.5,-473 398.5,-532 398.5,-532 398.5,-538 392.5,-544 386.5,-544\"/>\n<text text-anchor=\"start\" x=\"205.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.005</text>\n<text text-anchor=\"start\" x=\"252\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.98</text>\n<text text-anchor=\"start\" x=\"258.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"257.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 5]</text>\n<text text-anchor=\"start\" x=\"251\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 7->8 -->\n<g id=\"edge8\" class=\"edge\"><title>7->8</title>\n<path fill=\"none\" stroke=\"black\" d=\"M412.285,-579.907C397.761,-570.197 382.147,-559.758 367.269,-549.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"368.867,-546.669 358.608,-544.021 364.976,-552.488 368.867,-546.669\"/>\n</g>\n<!-- 17 -->\n<g id=\"node18\" class=\"node\"><title>17</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M517.5,-536.5C517.5,-536.5 428.5,-536.5 428.5,-536.5 422.5,-536.5 416.5,-530.5 416.5,-524.5 416.5,-524.5 416.5,-480.5 416.5,-480.5 416.5,-474.5 422.5,-468.5 428.5,-468.5 428.5,-468.5 517.5,-468.5 517.5,-468.5 523.5,-468.5 529.5,-474.5 529.5,-480.5 529.5,-480.5 529.5,-524.5 529.5,-524.5 529.5,-530.5 523.5,-536.5 517.5,-536.5\"/>\n<text text-anchor=\"start\" x=\"431\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"429.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 77</text>\n<text text-anchor=\"start\" x=\"424.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [121, 0]</text>\n<text text-anchor=\"start\" x=\"426\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 7->17 -->\n<g id=\"edge17\" class=\"edge\"><title>7->17</title>\n<path fill=\"none\" stroke=\"black\" d=\"M473,-579.907C473,-569.204 473,-557.615 473,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"476.5,-546.667 473,-536.667 469.5,-546.667 476.5,-546.667\"/>\n</g>\n<!-- 9 -->\n<g id=\"node10\" class=\"node\"><title>9</title>\n<path fill=\"#88c4ef\" stroke=\"black\" d=\"M233.5,-425C233.5,-425 54.5,-425 54.5,-425 48.5,-425 42.5,-419 42.5,-413 42.5,-413 42.5,-354 42.5,-354 42.5,-348 48.5,-342 54.5,-342 54.5,-342 233.5,-342 233.5,-342 239.5,-342 245.5,-348 245.5,-354 245.5,-354 245.5,-413 245.5,-413 245.5,-419 239.5,-425 233.5,-425\"/>\n<text text-anchor=\"start\" x=\"50.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\n<text text-anchor=\"start\" x=\"94\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.863</text>\n<text text-anchor=\"start\" x=\"104.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"103.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 5]</text>\n<text text-anchor=\"start\" x=\"89\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 8->9 -->\n<g id=\"edge9\" class=\"edge\"><title>8->9</title>\n<path fill=\"none\" stroke=\"black\" d=\"M244.57,-460.907C231.909,-451.288 218.306,-440.953 205.324,-431.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"207.415,-428.283 197.335,-425.021 203.18,-433.857 207.415,-428.283\"/>\n</g>\n<!-- 16 -->\n<g id=\"node17\" class=\"node\"><title>16</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M362,-417.5C362,-417.5 276,-417.5 276,-417.5 270,-417.5 264,-411.5 264,-405.5 264,-405.5 264,-361.5 264,-361.5 264,-355.5 270,-349.5 276,-349.5 276,-349.5 362,-349.5 362,-349.5 368,-349.5 374,-355.5 374,-361.5 374,-361.5 374,-405.5 374,-405.5 374,-411.5 368,-417.5 362,-417.5\"/>\n<text text-anchor=\"start\" x=\"277\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"279.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"278.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"272\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 8->16 -->\n<g id=\"edge16\" class=\"edge\"><title>8->16</title>\n<path fill=\"none\" stroke=\"black\" d=\"M305.286,-460.907C307.207,-450.204 309.287,-438.615 311.232,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"314.725,-428.128 313.047,-417.667 307.835,-426.891 314.725,-428.128\"/>\n</g>\n<!-- 10 -->\n<g id=\"node11\" class=\"node\"><title>10</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M98,-298.5C98,-298.5 12,-298.5 12,-298.5 6,-298.5 0,-292.5 0,-286.5 0,-286.5 0,-242.5 0,-242.5 0,-236.5 6,-230.5 12,-230.5 12,-230.5 98,-230.5 98,-230.5 104,-230.5 110,-236.5 110,-242.5 110,-242.5 110,-286.5 110,-286.5 110,-292.5 104,-298.5 98,-298.5\"/>\n<text text-anchor=\"start\" x=\"13\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"15.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"14.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"8\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 9->10 -->\n<g id=\"edge10\" class=\"edge\"><title>9->10</title>\n<path fill=\"none\" stroke=\"black\" d=\"M113.122,-341.907C104.476,-330.542 95.0716,-318.178 86.3963,-306.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"89.0695,-304.507 80.2296,-298.667 83.4982,-308.745 89.0695,-304.507\"/>\n</g>\n<!-- 11 -->\n<g id=\"node12\" class=\"node\"><title>11</title>\n<path fill=\"#61b1ea\" stroke=\"black\" d=\"M325.5,-306C325.5,-306 140.5,-306 140.5,-306 134.5,-306 128.5,-300 128.5,-294 128.5,-294 128.5,-235 128.5,-235 128.5,-229 134.5,-223 140.5,-223 140.5,-223 325.5,-223 325.5,-223 331.5,-223 337.5,-229 337.5,-235 337.5,-235 337.5,-294 337.5,-294 337.5,-300 331.5,-306 325.5,-306\"/>\n<text text-anchor=\"start\" x=\"136.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"187\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\n<text text-anchor=\"start\" x=\"193.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"192.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 5]</text>\n<text text-anchor=\"start\" x=\"178\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 9->11 -->\n<g id=\"edge11\" class=\"edge\"><title>9->11</title>\n<path fill=\"none\" stroke=\"black\" d=\"M174.878,-341.907C181.712,-332.923 189.021,-323.315 196.069,-314.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"198.908,-316.099 202.176,-306.021 193.336,-311.861 198.908,-316.099\"/>\n</g>\n<!-- 12 -->\n<g id=\"node13\" class=\"node\"><title>12</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M209,-187C209,-187 121,-187 121,-187 115,-187 109,-181 109,-175 109,-175 109,-116 109,-116 109,-110 115,-104 121,-104 121,-104 209,-104 209,-104 215,-104 221,-110 221,-116 221,-116 221,-175 221,-175 221,-181 215,-187 209,-187\"/>\n<text text-anchor=\"start\" x=\"117\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_root ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"123\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"125.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"124.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"118\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 11->12 -->\n<g id=\"edge12\" class=\"edge\"><title>11->12</title>\n<path fill=\"none\" stroke=\"black\" d=\"M209.408,-222.907C204.344,-214.195 198.94,-204.897 193.707,-195.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"196.602,-193.908 188.551,-187.021 190.549,-197.425 196.602,-193.908\"/>\n</g>\n<!-- 15 -->\n<g id=\"node16\" class=\"node\"><title>15</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M353,-179.5C353,-179.5 251,-179.5 251,-179.5 245,-179.5 239,-173.5 239,-167.5 239,-167.5 239,-123.5 239,-123.5 239,-117.5 245,-111.5 251,-111.5 251,-111.5 353,-111.5 353,-111.5 359,-111.5 365,-117.5 365,-123.5 365,-123.5 365,-167.5 365,-167.5 365,-173.5 359,-179.5 353,-179.5\"/>\n<text text-anchor=\"start\" x=\"260\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"262.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"261.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"247\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 11->15 -->\n<g id=\"edge15\" class=\"edge\"><title>11->15</title>\n<path fill=\"none\" stroke=\"black\" d=\"M256.939,-222.907C263.512,-211.763 270.65,-199.658 277.267,-188.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"280.375,-190.059 282.44,-179.667 274.345,-186.503 280.375,-190.059\"/>\n</g>\n<!-- 13 -->\n<g id=\"node14\" class=\"node\"><title>13</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M148,-68C148,-68 46,-68 46,-68 40,-68 34,-62 34,-56 34,-56 34,-12 34,-12 34,-6 40,-0 46,-0 46,-0 148,-0 148,-0 154,-0 160,-6 160,-12 160,-12 160,-56 160,-56 160,-62 154,-68 148,-68\"/>\n<text text-anchor=\"start\" x=\"55\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"57.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"56.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"42\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 12->13 -->\n<g id=\"edge13\" class=\"edge\"><title>12->13</title>\n<path fill=\"none\" stroke=\"black\" d=\"M139.679,-103.726C134.242,-94.9703 128.487,-85.7032 123.023,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"125.928,-74.9484 117.679,-68.2996 119.981,-78.6413 125.928,-74.9484\"/>\n</g>\n<!-- 14 -->\n<g id=\"node15\" class=\"node\"><title>14</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M276,-68C276,-68 190,-68 190,-68 184,-68 178,-62 178,-56 178,-56 178,-12 178,-12 178,-6 184,-0 190,-0 190,-0 276,-0 276,-0 282,-0 288,-6 288,-12 288,-12 288,-56 288,-56 288,-62 282,-68 276,-68\"/>\n<text text-anchor=\"start\" x=\"191\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"193.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"192.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"186\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 12->14 -->\n<g id=\"edge14\" class=\"edge\"><title>12->14</title>\n<path fill=\"none\" stroke=\"black\" d=\"M190.321,-103.726C195.758,-94.9703 201.513,-85.7032 206.977,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"210.019,-78.6413 212.321,-68.2996 204.072,-74.9484 210.019,-78.6413\"/>\n</g>\n<!-- 19 -->\n<g id=\"node20\" class=\"node\"><title>19</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M646,-544C646,-544 560,-544 560,-544 554,-544 548,-538 548,-532 548,-532 548,-473 548,-473 548,-467 554,-461 560,-461 560,-461 646,-461 646,-461 652,-461 658,-467 658,-473 658,-473 658,-532 658,-532 658,-538 652,-544 646,-544\"/>\n<text text-anchor=\"start\" x=\"563.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 20.0</text>\n<text text-anchor=\"start\" x=\"561\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"563.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"562.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 1]</text>\n<text text-anchor=\"start\" x=\"556\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 18->19 -->\n<g id=\"edge19\" class=\"edge\"><title>18->19</title>\n<path fill=\"none\" stroke=\"black\" d=\"M645.449,-579.907C640.609,-571.195 635.443,-561.897 630.441,-552.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"633.428,-551.063 625.512,-544.021 627.308,-554.462 633.428,-551.063\"/>\n</g>\n<!-- 22 -->\n<g id=\"node23\" class=\"node\"><title>22</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M790,-536.5C790,-536.5 688,-536.5 688,-536.5 682,-536.5 676,-530.5 676,-524.5 676,-524.5 676,-480.5 676,-480.5 676,-474.5 682,-468.5 688,-468.5 688,-468.5 790,-468.5 790,-468.5 796,-468.5 802,-474.5 802,-480.5 802,-480.5 802,-524.5 802,-524.5 802,-530.5 796,-536.5 790,-536.5\"/>\n<text text-anchor=\"start\" x=\"697\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"695.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\n<text text-anchor=\"start\" x=\"694.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 27]</text>\n<text text-anchor=\"start\" x=\"684\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 18->22 -->\n<g id=\"edge22\" class=\"edge\"><title>18->22</title>\n<path fill=\"none\" stroke=\"black\" d=\"M692.633,-579.907C699.396,-568.763 706.742,-556.658 713.55,-545.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"716.677,-547.032 718.873,-536.667 710.693,-543.4 716.677,-547.032\"/>\n</g>\n<!-- 20 -->\n<g id=\"node21\" class=\"node\"><title>20</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M511,-417.5C511,-417.5 425,-417.5 425,-417.5 419,-417.5 413,-411.5 413,-405.5 413,-405.5 413,-361.5 413,-361.5 413,-355.5 419,-349.5 425,-349.5 425,-349.5 511,-349.5 511,-349.5 517,-349.5 523,-355.5 523,-361.5 523,-361.5 523,-405.5 523,-405.5 523,-411.5 517,-417.5 511,-417.5\"/>\n<text text-anchor=\"start\" x=\"426\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"428.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"427.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"421\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 19->20 -->\n<g id=\"edge20\" class=\"edge\"><title>19->20</title>\n<path fill=\"none\" stroke=\"black\" d=\"M556.162,-460.907C542.539,-449.101 527.673,-436.217 514.096,-424.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"516.119,-421.571 506.27,-417.667 511.534,-426.861 516.119,-421.571\"/>\n</g>\n<!-- 21 -->\n<g id=\"node22\" class=\"node\"><title>21</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M655,-417.5C655,-417.5 553,-417.5 553,-417.5 547,-417.5 541,-411.5 541,-405.5 541,-405.5 541,-361.5 541,-361.5 541,-355.5 547,-349.5 553,-349.5 553,-349.5 655,-349.5 655,-349.5 661,-349.5 667,-355.5 667,-361.5 667,-361.5 667,-405.5 667,-405.5 667,-411.5 661,-417.5 655,-417.5\"/>\n<text text-anchor=\"start\" x=\"562\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"564.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"563.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"549\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 19->21 -->\n<g id=\"edge21\" class=\"edge\"><title>19->21</title>\n<path fill=\"none\" stroke=\"black\" d=\"M603.347,-460.907C603.438,-450.204 603.537,-438.615 603.63,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"607.131,-427.697 603.717,-417.667 600.131,-427.637 607.131,-427.697\"/>\n</g>\n<!-- 24 -->\n<g id=\"node25\" class=\"node\"><title>24</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M874,-655.5C874,-655.5 788,-655.5 788,-655.5 782,-655.5 776,-649.5 776,-643.5 776,-643.5 776,-599.5 776,-599.5 776,-593.5 782,-587.5 788,-587.5 788,-587.5 874,-587.5 874,-587.5 880,-587.5 886,-593.5 886,-599.5 886,-599.5 886,-643.5 886,-643.5 886,-649.5 880,-655.5 874,-655.5\"/>\n<text text-anchor=\"start\" x=\"789\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"791.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"790.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"784\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 23->24 -->\n<g id=\"edge24\" class=\"edge\"><title>23->24</title>\n<path fill=\"none\" stroke=\"black\" d=\"M856.469,-698.907C852.865,-688.094 848.959,-676.376 845.314,-665.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"848.538,-664.047 842.056,-655.667 841.898,-666.261 848.538,-664.047\"/>\n</g>\n<!-- 25 -->\n<g id=\"node26\" class=\"node\"><title>25</title>\n<path fill=\"#42a1e6\" stroke=\"black\" d=\"M1018,-663C1018,-663 916,-663 916,-663 910,-663 904,-657 904,-651 904,-651 904,-592 904,-592 904,-586 910,-580 916,-580 916,-580 1018,-580 1018,-580 1024,-580 1030,-586 1030,-592 1030,-592 1030,-651 1030,-651 1030,-657 1024,-663 1018,-663\"/>\n<text text-anchor=\"start\" x=\"917.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"917\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.254</text>\n<text text-anchor=\"start\" x=\"919.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 106</text>\n<text text-anchor=\"start\" x=\"918.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 157]</text>\n<text text-anchor=\"start\" x=\"912\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 23->25 -->\n<g id=\"edge25\" class=\"edge\"><title>23->25</title>\n<path fill=\"none\" stroke=\"black\" d=\"M903.654,-698.907C911.177,-689.832 919.229,-680.121 926.982,-670.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"929.718,-672.953 933.406,-663.021 924.329,-668.485 929.718,-672.953\"/>\n</g>\n<!-- 26 -->\n<g id=\"node27\" class=\"node\"><title>26</title>\n<path fill=\"#3fa0e6\" stroke=\"black\" d=\"M943.5,-544C943.5,-544 832.5,-544 832.5,-544 826.5,-544 820.5,-538 820.5,-532 820.5,-532 820.5,-473 820.5,-473 820.5,-467 826.5,-461 832.5,-461 832.5,-461 943.5,-461 943.5,-461 949.5,-461 955.5,-467 955.5,-473 955.5,-473 955.5,-532 955.5,-532 955.5,-538 949.5,-544 943.5,-544\"/>\n<text text-anchor=\"start\" x=\"828.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.975</text>\n<text text-anchor=\"start\" x=\"838\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.203</text>\n<text text-anchor=\"start\" x=\"840.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 102</text>\n<text text-anchor=\"start\" x=\"839.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 153]</text>\n<text text-anchor=\"start\" x=\"833\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 25->26 -->\n<g id=\"edge26\" class=\"edge\"><title>25->26</title>\n<path fill=\"none\" stroke=\"black\" d=\"M939.591,-579.907C933.586,-571.014 927.169,-561.509 920.971,-552.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"923.857,-550.35 915.36,-544.021 918.056,-554.267 923.857,-550.35\"/>\n</g>\n<!-- 35 -->\n<g id=\"node36\" class=\"node\"><title>35</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M1088,-544C1088,-544 986,-544 986,-544 980,-544 974,-538 974,-532 974,-532 974,-473 974,-473 974,-467 980,-461 986,-461 986,-461 1088,-461 1088,-461 1094,-461 1100,-467 1100,-473 1100,-473 1100,-532 1100,-532 1100,-538 1094,-544 1088,-544\"/>\n<text text-anchor=\"start\" x=\"988.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"987\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"997.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"996.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 4]</text>\n<text text-anchor=\"start\" x=\"982\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 25->35 -->\n<g id=\"edge35\" class=\"edge\"><title>25->35</title>\n<path fill=\"none\" stroke=\"black\" d=\"M991.286,-579.907C996.553,-571.105 1002.18,-561.703 1007.62,-552.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1010.63,-554.399 1012.76,-544.021 1004.62,-550.805 1010.63,-554.399\"/>\n</g>\n<!-- 27 -->\n<g id=\"node28\" class=\"node\"><title>27</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M799,-417.5C799,-417.5 697,-417.5 697,-417.5 691,-417.5 685,-411.5 685,-405.5 685,-405.5 685,-361.5 685,-361.5 685,-355.5 691,-349.5 697,-349.5 697,-349.5 799,-349.5 799,-349.5 805,-349.5 811,-355.5 811,-361.5 811,-361.5 811,-405.5 811,-405.5 811,-411.5 805,-417.5 799,-417.5\"/>\n<text text-anchor=\"start\" x=\"706\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"704.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"703.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 24]</text>\n<text text-anchor=\"start\" x=\"693\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 26->27 -->\n<g id=\"edge27\" class=\"edge\"><title>26->27</title>\n<path fill=\"none\" stroke=\"black\" d=\"M839.428,-460.907C825.168,-448.99 809.595,-435.976 795.408,-424.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"797.605,-421.394 787.687,-417.667 793.116,-426.765 797.605,-421.394\"/>\n</g>\n<!-- 28 -->\n<g id=\"node29\" class=\"node\"><title>28</title>\n<path fill=\"#41a1e6\" stroke=\"black\" d=\"M943,-425C943,-425 841,-425 841,-425 835,-425 829,-419 829,-413 829,-413 829,-354 829,-354 829,-348 835,-342 841,-342 841,-342 943,-342 943,-342 949,-342 955,-348 955,-354 955,-354 955,-413 955,-413 955,-419 949,-425 943,-425\"/>\n<text text-anchor=\"start\" x=\"847\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 52.0</text>\n<text text-anchor=\"start\" x=\"846\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.23</text>\n<text text-anchor=\"start\" x=\"848.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 86</text>\n<text text-anchor=\"start\" x=\"843.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 129]</text>\n<text text-anchor=\"start\" x=\"837\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 26->28 -->\n<g id=\"edge28\" class=\"edge\"><title>26->28</title>\n<path fill=\"none\" stroke=\"black\" d=\"M889.388,-460.907C889.673,-452.558 889.977,-443.671 890.273,-435.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"893.771,-435.135 890.615,-425.021 886.775,-434.895 893.771,-435.135\"/>\n</g>\n<!-- 29 -->\n<g id=\"node30\" class=\"node\"><title>29</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M859,-298.5C859,-298.5 757,-298.5 757,-298.5 751,-298.5 745,-292.5 745,-286.5 745,-286.5 745,-242.5 745,-242.5 745,-236.5 751,-230.5 757,-230.5 757,-230.5 859,-230.5 859,-230.5 865,-230.5 871,-236.5 871,-242.5 871,-242.5 871,-286.5 871,-286.5 871,-292.5 865,-298.5 859,-298.5\"/>\n<text text-anchor=\"start\" x=\"766\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"764.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 71</text>\n<text text-anchor=\"start\" x=\"759.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 109]</text>\n<text text-anchor=\"start\" x=\"753\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 28->29 -->\n<g id=\"edge29\" class=\"edge\"><title>28->29</title>\n<path fill=\"none\" stroke=\"black\" d=\"M862.857,-341.907C854.776,-330.652 845.993,-318.418 837.871,-307.106\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"840.487,-304.749 831.812,-298.667 834.801,-308.831 840.487,-304.749\"/>\n</g>\n<!-- 30 -->\n<g id=\"node31\" class=\"node\"><title>30</title>\n<path fill=\"#6ab6ec\" stroke=\"black\" d=\"M1053,-306C1053,-306 901,-306 901,-306 895,-306 889,-300 889,-294 889,-294 889,-235 889,-235 889,-229 895,-223 901,-223 901,-223 1053,-223 1053,-223 1059,-223 1065,-229 1065,-235 1065,-235 1065,-294 1065,-294 1065,-300 1059,-306 1053,-306\"/>\n<text text-anchor=\"start\" x=\"897\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 2.5</text>\n<text text-anchor=\"start\" x=\"927\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\n<text text-anchor=\"start\" x=\"933.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\n<text text-anchor=\"start\" x=\"932.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 20]</text>\n<text text-anchor=\"start\" x=\"922\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 28->30 -->\n<g id=\"edge30\" class=\"edge\"><title>28->30</title>\n<path fill=\"none\" stroke=\"black\" d=\"M921.49,-341.907C927.951,-333.014 934.857,-323.509 941.524,-314.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"944.516,-316.168 947.562,-306.021 938.853,-312.054 944.516,-316.168\"/>\n</g>\n<!-- 31 -->\n<g id=\"node32\" class=\"node\"><title>31</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M930,-179.5C930,-179.5 828,-179.5 828,-179.5 822,-179.5 816,-173.5 816,-167.5 816,-167.5 816,-123.5 816,-123.5 816,-117.5 822,-111.5 828,-111.5 828,-111.5 930,-111.5 930,-111.5 936,-111.5 942,-117.5 942,-123.5 942,-123.5 942,-167.5 942,-167.5 942,-173.5 936,-179.5 930,-179.5\"/>\n<text text-anchor=\"start\" x=\"837\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"839.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"834.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\n<text text-anchor=\"start\" x=\"824\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 30->31 -->\n<g id=\"edge31\" class=\"edge\"><title>30->31</title>\n<path fill=\"none\" stroke=\"black\" d=\"M942.999,-222.907C933.387,-211.432 922.923,-198.938 913.293,-187.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"915.885,-185.086 906.781,-179.667 910.519,-189.58 915.885,-185.086\"/>\n</g>\n<!-- 32 -->\n<g id=\"node33\" class=\"node\"><title>32</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M1178,-187C1178,-187 972,-187 972,-187 966,-187 960,-181 960,-175 960,-175 960,-116 960,-116 960,-110 966,-104 972,-104 972,-104 1178,-104 1178,-104 1184,-104 1190,-110 1190,-116 1190,-116 1190,-175 1190,-175 1190,-181 1184,-187 1178,-187\"/>\n<text text-anchor=\"start\" x=\"968\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"1033\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"1035.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1034.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 5]</text>\n<text text-anchor=\"start\" x=\"1028\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 30->32 -->\n<g id=\"edge32\" class=\"edge\"><title>30->32</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1011,-222.907C1018.6,-213.832 1026.74,-204.121 1034.57,-194.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1037.32,-196.934 1041.06,-187.021 1031.96,-192.439 1037.32,-196.934\"/>\n</g>\n<!-- 33 -->\n<g id=\"node34\" class=\"node\"><title>33</title>\n<path fill=\"#f5cdb0\" stroke=\"black\" d=\"M1052,-68C1052,-68 960,-68 960,-68 954,-68 948,-62 948,-56 948,-56 948,-12 948,-12 948,-6 954,-0 960,-0 960,-0 1052,-0 1052,-0 1058,-0 1064,-6 1064,-12 1064,-12 1064,-56 1064,-56 1064,-62 1058,-68 1052,-68\"/>\n<text text-anchor=\"start\" x=\"956\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.954</text>\n<text text-anchor=\"start\" x=\"966.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"965.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 3]</text>\n<text text-anchor=\"start\" x=\"959\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 32->33 -->\n<g id=\"edge33\" class=\"edge\"><title>32->33</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1049.31,-103.726C1043.79,-94.9703 1037.95,-85.7032 1032.41,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1035.28,-74.8941 1026.98,-68.2996 1029.35,-78.6259 1035.28,-74.8941\"/>\n</g>\n<!-- 34 -->\n<g id=\"node35\" class=\"node\"><title>34</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1196,-68C1196,-68 1094,-68 1094,-68 1088,-68 1082,-62 1082,-56 1082,-56 1082,-12 1082,-12 1082,-6 1088,-0 1094,-0 1094,-0 1196,-0 1196,-0 1202,-0 1208,-6 1208,-12 1208,-12 1208,-56 1208,-56 1208,-62 1202,-68 1196,-68\"/>\n<text text-anchor=\"start\" x=\"1103\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1105.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1104.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"1090\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 32->34 -->\n<g id=\"edge34\" class=\"edge\"><title>32->34</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1101.07,-103.726C1106.66,-94.9703 1112.59,-85.7032 1118.21,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1121.28,-78.6103 1123.71,-68.2996 1115.38,-74.8399 1121.28,-78.6103\"/>\n</g>\n<!-- 36 -->\n<g id=\"node37\" class=\"node\"><title>36</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1087,-417.5C1087,-417.5 985,-417.5 985,-417.5 979,-417.5 973,-411.5 973,-405.5 973,-405.5 973,-361.5 973,-361.5 973,-355.5 979,-349.5 985,-349.5 985,-349.5 1087,-349.5 1087,-349.5 1093,-349.5 1099,-355.5 1099,-361.5 1099,-361.5 1099,-405.5 1099,-405.5 1099,-411.5 1093,-417.5 1087,-417.5\"/>\n<text text-anchor=\"start\" x=\"994\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"996.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"995.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"981\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 35->36 -->\n<g id=\"edge36\" class=\"edge\"><title>35->36</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1036.65,-460.907C1036.56,-450.204 1036.46,-438.615 1036.37,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1039.87,-427.637 1036.28,-417.667 1032.87,-427.697 1039.87,-427.637\"/>\n</g>\n<!-- 37 -->\n<g id=\"node38\" class=\"node\"><title>37</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1215,-417.5C1215,-417.5 1129,-417.5 1129,-417.5 1123,-417.5 1117,-411.5 1117,-405.5 1117,-405.5 1117,-361.5 1117,-361.5 1117,-355.5 1123,-349.5 1129,-349.5 1129,-349.5 1215,-349.5 1215,-349.5 1221,-349.5 1227,-355.5 1227,-361.5 1227,-361.5 1227,-405.5 1227,-405.5 1227,-411.5 1221,-417.5 1215,-417.5\"/>\n<text text-anchor=\"start\" x=\"1130\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1132.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1131.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"1125\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 35->37 -->\n<g id=\"edge37\" class=\"edge\"><title>35->37</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1083.84,-460.907C1097.46,-449.101 1112.33,-436.217 1125.9,-424.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1128.47,-426.861 1133.73,-417.667 1123.88,-421.571 1128.47,-426.861\"/>\n</g>\n<!-- 40 -->\n<g id=\"node41\" class=\"node\"><title>40</title>\n<path fill=\"#6ab6ec\" stroke=\"black\" d=\"M1526.5,-901C1526.5,-901 1347.5,-901 1347.5,-901 1341.5,-901 1335.5,-895 1335.5,-889 1335.5,-889 1335.5,-830 1335.5,-830 1335.5,-824 1341.5,-818 1347.5,-818 1347.5,-818 1526.5,-818 1526.5,-818 1532.5,-818 1538.5,-824 1538.5,-830 1538.5,-830 1538.5,-889 1538.5,-889 1538.5,-895 1532.5,-901 1526.5,-901\"/>\n<text text-anchor=\"start\" x=\"1343.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.24</text>\n<text text-anchor=\"start\" x=\"1387\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\n<text text-anchor=\"start\" x=\"1393.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"1392.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 16]</text>\n<text text-anchor=\"start\" x=\"1382\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 39->40 -->\n<g id=\"edge40\" class=\"edge\"><title>39->40</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1521.24,-936.907C1510.94,-927.56 1499.89,-917.538 1489.29,-907.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1491.44,-905.146 1481.68,-901.021 1486.73,-910.332 1491.44,-905.146\"/>\n</g>\n<!-- 47 -->\n<g id=\"node48\" class=\"node\"><title>47</title>\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M1773,-901C1773,-901 1569,-901 1569,-901 1563,-901 1557,-895 1557,-889 1557,-889 1557,-830 1557,-830 1557,-824 1563,-818 1569,-818 1569,-818 1773,-818 1773,-818 1779,-818 1785,-824 1785,-830 1785,-830 1785,-889 1785,-889 1785,-895 1779,-901 1773,-901\"/>\n<text text-anchor=\"start\" x=\"1565\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.525</text>\n<text text-anchor=\"start\" x=\"1621\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.163</text>\n<text text-anchor=\"start\" x=\"1623.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 264</text>\n<text text-anchor=\"start\" x=\"1618\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [408, 10]</text>\n<text text-anchor=\"start\" x=\"1624\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 39->47 -->\n<g id=\"edge47\" class=\"edge\"><title>39->47</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1602.43,-936.907C1610.65,-927.742 1619.46,-917.927 1627.93,-908.489\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1630.56,-910.801 1634.64,-901.021 1625.35,-906.126 1630.56,-910.801\"/>\n</g>\n<!-- 41 -->\n<g id=\"node42\" class=\"node\"><title>41</title>\n<path fill=\"#52a9e8\" stroke=\"black\" d=\"M1377.5,-782C1377.5,-782 1252.5,-782 1252.5,-782 1246.5,-782 1240.5,-776 1240.5,-770 1240.5,-770 1240.5,-711 1240.5,-711 1240.5,-705 1246.5,-699 1252.5,-699 1252.5,-699 1377.5,-699 1377.5,-699 1383.5,-699 1389.5,-705 1389.5,-711 1389.5,-711 1389.5,-770 1389.5,-770 1389.5,-776 1383.5,-782 1377.5,-782\"/>\n<text text-anchor=\"start\" x=\"1248.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"1265\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.503</text>\n<text text-anchor=\"start\" x=\"1271.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\n<text text-anchor=\"start\" x=\"1270.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 16]</text>\n<text text-anchor=\"start\" x=\"1260\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 40->41 -->\n<g id=\"edge41\" class=\"edge\"><title>40->41</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1394.67,-817.907C1385.02,-808.651 1374.68,-798.732 1364.75,-789.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1366.89,-786.416 1357.25,-782.021 1362.05,-791.469 1366.89,-786.416\"/>\n</g>\n<!-- 46 -->\n<g id=\"node47\" class=\"node\"><title>46</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1506,-774.5C1506,-774.5 1420,-774.5 1420,-774.5 1414,-774.5 1408,-768.5 1408,-762.5 1408,-762.5 1408,-718.5 1408,-718.5 1408,-712.5 1414,-706.5 1420,-706.5 1420,-706.5 1506,-706.5 1506,-706.5 1512,-706.5 1518,-712.5 1518,-718.5 1518,-718.5 1518,-762.5 1518,-762.5 1518,-768.5 1512,-774.5 1506,-774.5\"/>\n<text text-anchor=\"start\" x=\"1421\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1423.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1422.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"1416\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 40->46 -->\n<g id=\"edge46\" class=\"edge\"><title>40->46</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1446.02,-817.907C1448.42,-807.094 1451.03,-795.376 1453.46,-784.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1456.88,-785.188 1455.63,-774.667 1450.04,-783.67 1456.88,-785.188\"/>\n</g>\n<!-- 42 -->\n<g id=\"node43\" class=\"node\"><title>42</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M1271,-663C1271,-663 1075,-663 1075,-663 1069,-663 1063,-657 1063,-651 1063,-651 1063,-592 1063,-592 1063,-586 1069,-580 1075,-580 1075,-580 1271,-580 1271,-580 1277,-580 1283,-586 1283,-592 1283,-592 1283,-651 1283,-651 1283,-657 1277,-663 1271,-663\"/>\n<text text-anchor=\"start\" x=\"1071\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.06</text>\n<text text-anchor=\"start\" x=\"1123\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"1133.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"1132.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 1]</text>\n<text text-anchor=\"start\" x=\"1126\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 41->42 -->\n<g id=\"edge42\" class=\"edge\"><title>41->42</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1265.73,-698.907C1254.28,-689.469 1241.99,-679.343 1230.22,-669.649\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1232.12,-666.679 1222.18,-663.021 1227.67,-672.081 1232.12,-666.679\"/>\n</g>\n<!-- 45 -->\n<g id=\"node46\" class=\"node\"><title>45</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1415,-655.5C1415,-655.5 1313,-655.5 1313,-655.5 1307,-655.5 1301,-649.5 1301,-643.5 1301,-643.5 1301,-599.5 1301,-599.5 1301,-593.5 1307,-587.5 1313,-587.5 1313,-587.5 1415,-587.5 1415,-587.5 1421,-587.5 1427,-593.5 1427,-599.5 1427,-599.5 1427,-643.5 1427,-643.5 1427,-649.5 1421,-655.5 1415,-655.5\"/>\n<text text-anchor=\"start\" x=\"1322\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1320.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"1319.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\n<text text-anchor=\"start\" x=\"1309\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 41->45 -->\n<g id=\"edge45\" class=\"edge\"><title>41->45</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1332,-698.907C1336.58,-687.983 1341.54,-676.137 1346.16,-665.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1349.47,-666.243 1350.11,-655.667 1343.02,-663.539 1349.47,-666.243\"/>\n</g>\n<!-- 43 -->\n<g id=\"node44\" class=\"node\"><title>43</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1216,-536.5C1216,-536.5 1130,-536.5 1130,-536.5 1124,-536.5 1118,-530.5 1118,-524.5 1118,-524.5 1118,-480.5 1118,-480.5 1118,-474.5 1124,-468.5 1130,-468.5 1130,-468.5 1216,-468.5 1216,-468.5 1222,-468.5 1228,-474.5 1228,-480.5 1228,-480.5 1228,-524.5 1228,-524.5 1228,-530.5 1222,-536.5 1216,-536.5\"/>\n<text text-anchor=\"start\" x=\"1131\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1133.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1132.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"1126\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 42->43 -->\n<g id=\"edge43\" class=\"edge\"><title>42->43</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1173,-579.907C1173,-569.204 1173,-557.615 1173,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1176.5,-546.667 1173,-536.667 1169.5,-546.667 1176.5,-546.667\"/>\n</g>\n<!-- 44 -->\n<g id=\"node45\" class=\"node\"><title>44</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1360,-536.5C1360,-536.5 1258,-536.5 1258,-536.5 1252,-536.5 1246,-530.5 1246,-524.5 1246,-524.5 1246,-480.5 1246,-480.5 1246,-474.5 1252,-468.5 1258,-468.5 1258,-468.5 1360,-468.5 1360,-468.5 1366,-468.5 1372,-474.5 1372,-480.5 1372,-480.5 1372,-524.5 1372,-524.5 1372,-530.5 1366,-536.5 1360,-536.5\"/>\n<text text-anchor=\"start\" x=\"1267\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1269.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1268.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"1254\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 42->44 -->\n<g id=\"edge44\" class=\"edge\"><title>42->44</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1220.18,-579.907C1233.91,-568.101 1248.89,-555.217 1262.56,-543.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1265.15,-545.842 1270.45,-536.667 1260.58,-540.535 1265.15,-545.842\"/>\n</g>\n<!-- 48 -->\n<g id=\"node49\" class=\"node\"><title>48</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M1666,-782C1666,-782 1574,-782 1574,-782 1568,-782 1562,-776 1562,-770 1562,-770 1562,-711 1562,-711 1562,-705 1568,-699 1574,-699 1574,-699 1666,-699 1666,-699 1672,-699 1678,-705 1678,-711 1678,-711 1678,-770 1678,-770 1678,-776 1672,-782 1666,-782\"/>\n<text text-anchor=\"start\" x=\"1579\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 6.0</text>\n<text text-anchor=\"start\" x=\"1570\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.109</text>\n<text text-anchor=\"start\" x=\"1572.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 262</text>\n<text text-anchor=\"start\" x=\"1571.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [408, 6]</text>\n<text text-anchor=\"start\" x=\"1573\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 47->48 -->\n<g id=\"edge48\" class=\"edge\"><title>47->48</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1653.31,-817.907C1649.59,-809.377 1645.62,-800.284 1641.78,-791.456\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1644.87,-789.789 1637.66,-782.021 1638.45,-792.586 1644.87,-789.789\"/>\n</g>\n<!-- 53 -->\n<g id=\"node54\" class=\"node\"><title>53</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1810,-774.5C1810,-774.5 1708,-774.5 1708,-774.5 1702,-774.5 1696,-768.5 1696,-762.5 1696,-762.5 1696,-718.5 1696,-718.5 1696,-712.5 1702,-706.5 1708,-706.5 1708,-706.5 1810,-706.5 1810,-706.5 1816,-706.5 1822,-712.5 1822,-718.5 1822,-718.5 1822,-762.5 1822,-762.5 1822,-768.5 1816,-774.5 1810,-774.5\"/>\n<text text-anchor=\"start\" x=\"1717\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1719.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1718.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"1704\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 47->53 -->\n<g id=\"edge53\" class=\"edge\"><title>47->53</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1701.53,-817.907C1710.08,-806.542 1719.38,-794.178 1727.96,-782.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1730.84,-784.763 1734.05,-774.667 1725.25,-780.555 1730.84,-784.763\"/>\n</g>\n<!-- 49 -->\n<g id=\"node50\" class=\"node\"><title>49</title>\n<path fill=\"#efb083\" stroke=\"black\" d=\"M1684.5,-663C1684.5,-663 1457.5,-663 1457.5,-663 1451.5,-663 1445.5,-657 1445.5,-651 1445.5,-651 1445.5,-592 1445.5,-592 1445.5,-586 1451.5,-580 1457.5,-580 1457.5,-580 1684.5,-580 1684.5,-580 1690.5,-580 1696.5,-586 1696.5,-592 1696.5,-592 1696.5,-651 1696.5,-651 1696.5,-657 1690.5,-663 1684.5,-663\"/>\n<text text-anchor=\"start\" x=\"1453.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.93</text>\n<text text-anchor=\"start\" x=\"1521\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.845</text>\n<text text-anchor=\"start\" x=\"1527.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"1526.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 6]</text>\n<text text-anchor=\"start\" x=\"1524\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 48->49 -->\n<g id=\"edge49\" class=\"edge\"><title>48->49</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1603,-698.907C1599.43,-690.377 1595.62,-681.284 1591.92,-672.456\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1595.06,-670.893 1587.97,-663.021 1588.6,-673.597 1595.06,-670.893\"/>\n</g>\n<!-- 52 -->\n<g id=\"node53\" class=\"node\"><title>52</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1815.5,-655.5C1815.5,-655.5 1726.5,-655.5 1726.5,-655.5 1720.5,-655.5 1714.5,-649.5 1714.5,-643.5 1714.5,-643.5 1714.5,-599.5 1714.5,-599.5 1714.5,-593.5 1720.5,-587.5 1726.5,-587.5 1726.5,-587.5 1815.5,-587.5 1815.5,-587.5 1821.5,-587.5 1827.5,-593.5 1827.5,-599.5 1827.5,-599.5 1827.5,-643.5 1827.5,-643.5 1827.5,-649.5 1821.5,-655.5 1815.5,-655.5\"/>\n<text text-anchor=\"start\" x=\"1729\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1723.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 250</text>\n<text text-anchor=\"start\" x=\"1722.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [392, 0]</text>\n<text text-anchor=\"start\" x=\"1724\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 48->52 -->\n<g id=\"edge52\" class=\"edge\"><title>48->52</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1672.39,-698.907C1687.77,-686.99 1704.57,-673.976 1719.87,-662.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1722.43,-664.559 1728.19,-655.667 1718.15,-659.025 1722.43,-664.559\"/>\n</g>\n<!-- 50 -->\n<g id=\"node51\" class=\"node\"><title>50</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1551,-536.5C1551,-536.5 1465,-536.5 1465,-536.5 1459,-536.5 1453,-530.5 1453,-524.5 1453,-524.5 1453,-480.5 1453,-480.5 1453,-474.5 1459,-468.5 1465,-468.5 1465,-468.5 1551,-468.5 1551,-468.5 1557,-468.5 1563,-474.5 1563,-480.5 1563,-480.5 1563,-524.5 1563,-524.5 1563,-530.5 1557,-536.5 1551,-536.5\"/>\n<text text-anchor=\"start\" x=\"1466\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1468.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"1463.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [16, 0]</text>\n<text text-anchor=\"start\" x=\"1461\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 49->50 -->\n<g id=\"edge50\" class=\"edge\"><title>49->50</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1549.14,-579.907C1543.2,-568.873 1536.75,-556.898 1530.76,-545.773\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1533.68,-543.812 1525.86,-536.667 1527.52,-547.131 1533.68,-543.812\"/>\n</g>\n<!-- 51 -->\n<g id=\"node52\" class=\"node\"><title>51</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1695,-536.5C1695,-536.5 1593,-536.5 1593,-536.5 1587,-536.5 1581,-530.5 1581,-524.5 1581,-524.5 1581,-480.5 1581,-480.5 1581,-474.5 1587,-468.5 1593,-468.5 1593,-468.5 1695,-468.5 1695,-468.5 1701,-468.5 1707,-474.5 1707,-480.5 1707,-480.5 1707,-524.5 1707,-524.5 1707,-530.5 1701,-536.5 1695,-536.5\"/>\n<text text-anchor=\"start\" x=\"1602\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1604.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"1603.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"1589\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 49->51 -->\n<g id=\"edge51\" class=\"edge\"><title>49->51</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1596.33,-579.907C1603.28,-568.763 1610.83,-556.658 1617.83,-545.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1620.98,-547.004 1623.31,-536.667 1615.04,-543.298 1620.98,-547.004\"/>\n</g>\n<!-- 56 -->\n<g id=\"node57\" class=\"node\"><title>56</title>\n<path fill=\"#6db7ec\" stroke=\"black\" d=\"M2797,-1139C2797,-1139 2593,-1139 2593,-1139 2587,-1139 2581,-1133 2581,-1127 2581,-1127 2581,-1068 2581,-1068 2581,-1062 2587,-1056 2593,-1056 2593,-1056 2797,-1056 2797,-1056 2803,-1056 2809,-1062 2809,-1068 2809,-1068 2809,-1127 2809,-1127 2809,-1133 2803,-1139 2797,-1139\"/>\n<text text-anchor=\"start\" x=\"2589\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.955</text>\n<text text-anchor=\"start\" x=\"2649\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.74</text>\n<text text-anchor=\"start\" x=\"2647.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 194</text>\n<text text-anchor=\"start\" x=\"2642\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [63, 238]</text>\n<text text-anchor=\"start\" x=\"2640\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 55->56 -->\n<g id=\"edge56\" class=\"edge\"><title>55->56</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2770.1,-1174.91C2761,-1165.65 2751.25,-1155.73 2741.89,-1146.21\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2744.33,-1143.7 2734.83,-1139.02 2739.34,-1148.61 2744.33,-1143.7\"/>\n</g>\n<!-- 77 -->\n<g id=\"node78\" class=\"node\"><title>77</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3008.5,-1139C3008.5,-1139 2839.5,-1139 2839.5,-1139 2833.5,-1139 2827.5,-1133 2827.5,-1127 2827.5,-1127 2827.5,-1068 2827.5,-1068 2827.5,-1062 2833.5,-1056 2839.5,-1056 2839.5,-1056 3008.5,-1056 3008.5,-1056 3014.5,-1056 3020.5,-1062 3020.5,-1068 3020.5,-1068 3020.5,-1127 3020.5,-1127 3020.5,-1133 3014.5,-1139 3008.5,-1139\"/>\n<text text-anchor=\"start\" x=\"2835.5\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.97</text>\n<text text-anchor=\"start\" x=\"2874\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.021</text>\n<text text-anchor=\"start\" x=\"2872.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3895</text>\n<text text-anchor=\"start\" x=\"2867\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12, 6017]</text>\n<text text-anchor=\"start\" x=\"2869\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 55->77 -->\n<g id=\"edge77\" class=\"edge\"><title>55->77</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2849.55,-1174.91C2858.57,-1165.65 2868.24,-1155.73 2877.51,-1146.21\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2880.05,-1148.63 2884.52,-1139.02 2875.03,-1143.74 2880.05,-1148.63\"/>\n</g>\n<!-- 57 -->\n<g id=\"node58\" class=\"node\"><title>57</title>\n<path fill=\"#e6f3fc\" stroke=\"black\" d=\"M2603,-1020C2603,-1020 2367,-1020 2367,-1020 2361,-1020 2355,-1014 2355,-1008 2355,-1008 2355,-949 2355,-949 2355,-943 2361,-937 2367,-937 2367,-937 2603,-937 2603,-937 2609,-937 2615,-943 2615,-949 2615,-949 2615,-1008 2615,-1008 2615,-1014 2609,-1020 2603,-1020\"/>\n<text text-anchor=\"start\" x=\"2363\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.215</text>\n<text text-anchor=\"start\" x=\"2435\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.997</text>\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 85</text>\n<text text-anchor=\"start\" x=\"2436.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [63, 72]</text>\n<text text-anchor=\"start\" x=\"2430\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 56->57 -->\n<g id=\"edge57\" class=\"edge\"><title>56->57</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2622.14,-1055.91C2604.22,-1045.92 2584.92,-1035.17 2566.62,-1024.98\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2568.17,-1021.83 2557.73,-1020.02 2564.76,-1027.95 2568.17,-1021.83\"/>\n</g>\n<!-- 76 -->\n<g id=\"node77\" class=\"node\"><title>76</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2747,-1012.5C2747,-1012.5 2645,-1012.5 2645,-1012.5 2639,-1012.5 2633,-1006.5 2633,-1000.5 2633,-1000.5 2633,-956.5 2633,-956.5 2633,-950.5 2639,-944.5 2645,-944.5 2645,-944.5 2747,-944.5 2747,-944.5 2753,-944.5 2759,-950.5 2759,-956.5 2759,-956.5 2759,-1000.5 2759,-1000.5 2759,-1006.5 2753,-1012.5 2747,-1012.5\"/>\n<text text-anchor=\"start\" x=\"2654\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2648.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 109</text>\n<text text-anchor=\"start\" x=\"2647.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 166]</text>\n<text text-anchor=\"start\" x=\"2641\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 56->76 -->\n<g id=\"edge76\" class=\"edge\"><title>56->76</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2695.35,-1055.91C2695.44,-1045.2 2695.54,-1033.62 2695.63,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2699.13,-1022.7 2695.72,-1012.67 2692.13,-1022.64 2699.13,-1022.7\"/>\n</g>\n<!-- 58 -->\n<g id=\"node59\" class=\"node\"><title>58</title>\n<path fill=\"#eda876\" stroke=\"black\" d=\"M2361,-901C2361,-901 2269,-901 2269,-901 2263,-901 2257,-895 2257,-889 2257,-889 2257,-830 2257,-830 2257,-824 2263,-818 2269,-818 2269,-818 2361,-818 2361,-818 2367,-818 2373,-824 2373,-830 2373,-830 2373,-889 2373,-889 2373,-895 2367,-901 2361,-901\"/>\n<text text-anchor=\"start\" x=\"2280\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 4.5</text>\n<text text-anchor=\"start\" x=\"2265\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.786</text>\n<text text-anchor=\"start\" x=\"2271.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 53</text>\n<text text-anchor=\"start\" x=\"2266.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [62, 19]</text>\n<text text-anchor=\"start\" x=\"2268\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 57->58 -->\n<g id=\"edge58\" class=\"edge\"><title>57->58</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2426.02,-936.907C2411.67,-927.032 2396.23,-916.402 2381.55,-906.303\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2383.24,-903.214 2373.01,-900.428 2379.27,-908.981 2383.24,-903.214\"/>\n</g>\n<!-- 73 -->\n<g id=\"node74\" class=\"node\"><title>73</title>\n<path fill=\"#3d9fe5\" stroke=\"black\" d=\"M2542.5,-901C2542.5,-901 2427.5,-901 2427.5,-901 2421.5,-901 2415.5,-895 2415.5,-889 2415.5,-889 2415.5,-830 2415.5,-830 2415.5,-824 2421.5,-818 2427.5,-818 2427.5,-818 2542.5,-818 2542.5,-818 2548.5,-818 2554.5,-824 2554.5,-830 2554.5,-830 2554.5,-889 2554.5,-889 2554.5,-895 2548.5,-901 2542.5,-901\"/>\n<text text-anchor=\"start\" x=\"2423.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"2435\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.133</text>\n<text text-anchor=\"start\" x=\"2441.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 32</text>\n<text text-anchor=\"start\" x=\"2440.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 53]</text>\n<text text-anchor=\"start\" x=\"2430\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 57->73 -->\n<g id=\"edge73\" class=\"edge\"><title>57->73</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2485,-936.907C2485,-928.649 2485,-919.864 2485,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2488.5,-911.021 2485,-901.021 2481.5,-911.021 2488.5,-911.021\"/>\n</g>\n<!-- 59 -->\n<g id=\"node60\" class=\"node\"><title>59</title>\n<path fill=\"#e68743\" stroke=\"black\" d=\"M2188.5,-782C2188.5,-782 2097.5,-782 2097.5,-782 2091.5,-782 2085.5,-776 2085.5,-770 2085.5,-770 2085.5,-711 2085.5,-711 2085.5,-705 2091.5,-699 2097.5,-699 2097.5,-699 2188.5,-699 2188.5,-699 2194.5,-699 2200.5,-705 2200.5,-711 2200.5,-711 2200.5,-770 2200.5,-770 2200.5,-776 2194.5,-782 2188.5,-782\"/>\n<text text-anchor=\"start\" x=\"2093.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"2097\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.28</text>\n<text text-anchor=\"start\" x=\"2099.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 36</text>\n<text text-anchor=\"start\" x=\"2098.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [59, 3]</text>\n<text text-anchor=\"start\" x=\"2096\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 58->59 -->\n<g id=\"edge59\" class=\"edge\"><title>58->59</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2256.77,-818.889C2241.47,-808.485 2224.87,-797.188 2209.19,-786.523\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2210.82,-783.403 2200.59,-780.673 2206.89,-789.191 2210.82,-783.403\"/>\n</g>\n<!-- 70 -->\n<g id=\"node71\" class=\"node\"><title>70</title>\n<path fill=\"#5eafea\" stroke=\"black\" d=\"M2399.5,-782C2399.5,-782 2230.5,-782 2230.5,-782 2224.5,-782 2218.5,-776 2218.5,-770 2218.5,-770 2218.5,-711 2218.5,-711 2218.5,-705 2224.5,-699 2230.5,-699 2230.5,-699 2399.5,-699 2399.5,-699 2405.5,-699 2411.5,-705 2411.5,-711 2411.5,-711 2411.5,-770 2411.5,-770 2411.5,-776 2405.5,-782 2399.5,-782\"/>\n<text text-anchor=\"start\" x=\"2226.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 140.5</text>\n<text text-anchor=\"start\" x=\"2265\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.629</text>\n<text text-anchor=\"start\" x=\"2271.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"2270.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 16]</text>\n<text text-anchor=\"start\" x=\"2260\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 58->70 -->\n<g id=\"edge70\" class=\"edge\"><title>58->70</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2315,-817.907C2315,-809.649 2315,-800.864 2315,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2318.5,-792.021 2315,-782.021 2311.5,-792.021 2318.5,-792.021\"/>\n</g>\n<!-- 60 -->\n<g id=\"node61\" class=\"node\"><title>60</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M2094,-663C2094,-663 1858,-663 1858,-663 1852,-663 1846,-657 1846,-651 1846,-651 1846,-592 1846,-592 1846,-586 1852,-580 1858,-580 1858,-580 2094,-580 2094,-580 2100,-580 2106,-586 2106,-592 2106,-592 2106,-651 2106,-651 2106,-657 2100,-663 2094,-663\"/>\n<text text-anchor=\"start\" x=\"1854\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.025</text>\n<text text-anchor=\"start\" x=\"1926\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.323</text>\n<text text-anchor=\"start\" x=\"1932.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\n<text text-anchor=\"start\" x=\"1931.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 3]</text>\n<text text-anchor=\"start\" x=\"1929\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 59->60 -->\n<g id=\"edge60\" class=\"edge\"><title>59->60</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2085.06,-698.907C2071.2,-689.197 2056.3,-678.758 2042.1,-668.811\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2044.04,-665.892 2033.84,-663.021 2040.02,-671.625 2044.04,-665.892\"/>\n</g>\n<!-- 69 -->\n<g id=\"node70\" class=\"node\"><title>69</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2222,-655.5C2222,-655.5 2136,-655.5 2136,-655.5 2130,-655.5 2124,-649.5 2124,-643.5 2124,-643.5 2124,-599.5 2124,-599.5 2124,-593.5 2130,-587.5 2136,-587.5 2136,-587.5 2222,-587.5 2222,-587.5 2228,-587.5 2234,-593.5 2234,-599.5 2234,-599.5 2234,-643.5 2234,-643.5 2234,-649.5 2228,-655.5 2222,-655.5\"/>\n<text text-anchor=\"start\" x=\"2137\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2139.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"2134.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [11, 0]</text>\n<text text-anchor=\"start\" x=\"2132\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 59->69 -->\n<g id=\"edge69\" class=\"edge\"><title>59->69</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2155.49,-698.907C2158.82,-688.094 2162.42,-676.376 2165.79,-665.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2169.2,-666.254 2168.79,-655.667 2162.51,-664.195 2169.2,-666.254\"/>\n</g>\n<!-- 61 -->\n<g id=\"node62\" class=\"node\"><title>61</title>\n<path fill=\"#e88e4e\" stroke=\"black\" d=\"M1957,-544C1957,-544 1865,-544 1865,-544 1859,-544 1853,-538 1853,-532 1853,-532 1853,-473 1853,-473 1853,-467 1859,-461 1865,-461 1865,-461 1957,-461 1957,-461 1963,-461 1969,-467 1969,-473 1969,-473 1969,-532 1969,-532 1969,-538 1963,-544 1957,-544\"/>\n<text text-anchor=\"start\" x=\"1862.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"1861\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.459</text>\n<text text-anchor=\"start\" x=\"1867.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 21</text>\n<text text-anchor=\"start\" x=\"1866.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [28, 3]</text>\n<text text-anchor=\"start\" x=\"1864\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 60->61 -->\n<g id=\"edge61\" class=\"edge\"><title>60->61</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1953.45,-579.907C1948.61,-571.195 1943.44,-561.897 1938.44,-552.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1941.43,-551.063 1933.51,-544.021 1935.31,-554.462 1941.43,-551.063\"/>\n</g>\n<!-- 68 -->\n<g id=\"node69\" class=\"node\"><title>68</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2085,-536.5C2085,-536.5 1999,-536.5 1999,-536.5 1993,-536.5 1987,-530.5 1987,-524.5 1987,-524.5 1987,-480.5 1987,-480.5 1987,-474.5 1993,-468.5 1999,-468.5 1999,-468.5 2085,-468.5 2085,-468.5 2091,-468.5 2097,-474.5 2097,-480.5 2097,-480.5 2097,-524.5 2097,-524.5 2097,-530.5 2091,-536.5 2085,-536.5\"/>\n<text text-anchor=\"start\" x=\"2000\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2002.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"1997.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [20, 0]</text>\n<text text-anchor=\"start\" x=\"1995\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 60->68 -->\n<g id=\"edge68\" class=\"edge\"><title>60->68</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1998.9,-579.907C2005.19,-568.763 2012.01,-556.658 2018.34,-545.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2021.43,-547.096 2023.29,-536.667 2015.33,-543.657 2021.43,-547.096\"/>\n</g>\n<!-- 62 -->\n<g id=\"node63\" class=\"node\"><title>62</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M1886,-425C1886,-425 1734,-425 1734,-425 1728,-425 1722,-419 1722,-413 1722,-413 1722,-354 1722,-354 1722,-348 1728,-342 1734,-342 1734,-342 1886,-342 1886,-342 1892,-342 1898,-348 1898,-354 1898,-354 1898,-413 1898,-413 1898,-419 1892,-425 1886,-425\"/>\n<text text-anchor=\"start\" x=\"1730\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"1760\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.258</text>\n<text text-anchor=\"start\" x=\"1766.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\n<text text-anchor=\"start\" x=\"1765.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 1]</text>\n<text text-anchor=\"start\" x=\"1763\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 61->62 -->\n<g id=\"edge62\" class=\"edge\"><title>61->62</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1875.96,-460.907C1868.12,-451.832 1859.74,-442.121 1851.67,-432.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1854.16,-430.303 1844.98,-425.021 1848.86,-434.878 1854.16,-430.303\"/>\n</g>\n<!-- 65 -->\n<g id=\"node66\" class=\"node\"><title>65</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M2097.5,-425C2097.5,-425 1928.5,-425 1928.5,-425 1922.5,-425 1916.5,-419 1916.5,-413 1916.5,-413 1916.5,-354 1916.5,-354 1916.5,-348 1922.5,-342 1928.5,-342 1928.5,-342 2097.5,-342 2097.5,-342 2103.5,-342 2109.5,-348 2109.5,-354 2109.5,-354 2109.5,-413 2109.5,-413 2109.5,-419 2103.5,-425 2097.5,-425\"/>\n<text text-anchor=\"start\" x=\"1924.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 128.5</text>\n<text text-anchor=\"start\" x=\"1963\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\n<text text-anchor=\"start\" x=\"1973.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"1972.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 2]</text>\n<text text-anchor=\"start\" x=\"1966\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 61->65 -->\n<g id=\"edge65\" class=\"edge\"><title>61->65</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1946.39,-460.907C1954.3,-451.832 1962.77,-442.121 1970.92,-432.769\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1973.74,-434.859 1977.67,-425.021 1968.46,-430.259 1973.74,-434.859\"/>\n</g>\n<!-- 63 -->\n<g id=\"node64\" class=\"node\"><title>63</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M1742,-298.5C1742,-298.5 1640,-298.5 1640,-298.5 1634,-298.5 1628,-292.5 1628,-286.5 1628,-286.5 1628,-242.5 1628,-242.5 1628,-236.5 1634,-230.5 1640,-230.5 1640,-230.5 1742,-230.5 1742,-230.5 1748,-230.5 1754,-236.5 1754,-242.5 1754,-242.5 1754,-286.5 1754,-286.5 1754,-292.5 1748,-298.5 1742,-298.5\"/>\n<text text-anchor=\"start\" x=\"1649\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1651.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"1650.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"1636\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 62->63 -->\n<g id=\"edge63\" class=\"edge\"><title>62->63</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1768.71,-341.907C1756.82,-330.211 1743.85,-317.457 1731.97,-305.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1734.32,-303.182 1724.73,-298.667 1729.41,-308.174 1734.32,-303.182\"/>\n</g>\n<!-- 64 -->\n<g id=\"node65\" class=\"node\"><title>64</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M1870,-298.5C1870,-298.5 1784,-298.5 1784,-298.5 1778,-298.5 1772,-292.5 1772,-286.5 1772,-286.5 1772,-242.5 1772,-242.5 1772,-236.5 1778,-230.5 1784,-230.5 1784,-230.5 1870,-230.5 1870,-230.5 1876,-230.5 1882,-236.5 1882,-242.5 1882,-242.5 1882,-286.5 1882,-286.5 1882,-292.5 1876,-298.5 1870,-298.5\"/>\n<text text-anchor=\"start\" x=\"1785\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1783.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"1782.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 0]</text>\n<text text-anchor=\"start\" x=\"1780\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 62->64 -->\n<g id=\"edge64\" class=\"edge\"><title>62->64</title>\n<path fill=\"none\" stroke=\"black\" d=\"M1815.9,-341.907C1817.45,-331.204 1819.14,-319.615 1820.71,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1824.21,-309.066 1822.18,-298.667 1817.28,-308.06 1824.21,-309.066\"/>\n</g>\n<!-- 66 -->\n<g id=\"node67\" class=\"node\"><title>66</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2031,-298.5C2031,-298.5 1929,-298.5 1929,-298.5 1923,-298.5 1917,-292.5 1917,-286.5 1917,-286.5 1917,-242.5 1917,-242.5 1917,-236.5 1923,-230.5 1929,-230.5 1929,-230.5 2031,-230.5 2031,-230.5 2037,-230.5 2043,-236.5 2043,-242.5 2043,-242.5 2043,-286.5 2043,-286.5 2043,-292.5 2037,-298.5 2031,-298.5\"/>\n<text text-anchor=\"start\" x=\"1938\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"1940.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"1939.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"1925\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 65->66 -->\n<g id=\"edge66\" class=\"edge\"><title>65->66</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2001.55,-341.907C1998.5,-331.094 1995.2,-319.376 1992.11,-308.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"1995.44,-307.341 1989.35,-298.667 1988.7,-309.242 1995.44,-307.341\"/>\n</g>\n<!-- 67 -->\n<g id=\"node68\" class=\"node\"><title>67</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2159,-298.5C2159,-298.5 2073,-298.5 2073,-298.5 2067,-298.5 2061,-292.5 2061,-286.5 2061,-286.5 2061,-242.5 2061,-242.5 2061,-236.5 2067,-230.5 2073,-230.5 2073,-230.5 2159,-230.5 2159,-230.5 2165,-230.5 2171,-236.5 2171,-242.5 2171,-242.5 2171,-286.5 2171,-286.5 2171,-292.5 2165,-298.5 2159,-298.5\"/>\n<text text-anchor=\"start\" x=\"2074\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2076.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2075.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"2069\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 65->67 -->\n<g id=\"edge67\" class=\"edge\"><title>65->67</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2048.74,-341.907C2058.84,-330.432 2069.84,-317.938 2079.96,-306.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2082.82,-308.486 2086.8,-298.667 2077.57,-303.86 2082.82,-308.486\"/>\n</g>\n<!-- 71 -->\n<g id=\"node72\" class=\"node\"><title>71</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2366,-655.5C2366,-655.5 2264,-655.5 2264,-655.5 2258,-655.5 2252,-649.5 2252,-643.5 2252,-643.5 2252,-599.5 2252,-599.5 2252,-593.5 2258,-587.5 2264,-587.5 2264,-587.5 2366,-587.5 2366,-587.5 2372,-587.5 2378,-593.5 2378,-599.5 2378,-599.5 2378,-643.5 2378,-643.5 2378,-649.5 2372,-655.5 2366,-655.5\"/>\n<text text-anchor=\"start\" x=\"2273\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2271.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"2270.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 16]</text>\n<text text-anchor=\"start\" x=\"2260\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 70->71 -->\n<g id=\"edge71\" class=\"edge\"><title>70->71</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2315,-698.907C2315,-688.204 2315,-676.615 2315,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2318.5,-665.667 2315,-655.667 2311.5,-665.667 2318.5,-665.667\"/>\n</g>\n<!-- 72 -->\n<g id=\"node73\" class=\"node\"><title>72</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2494,-655.5C2494,-655.5 2408,-655.5 2408,-655.5 2402,-655.5 2396,-649.5 2396,-643.5 2396,-643.5 2396,-599.5 2396,-599.5 2396,-593.5 2402,-587.5 2408,-587.5 2408,-587.5 2494,-587.5 2494,-587.5 2500,-587.5 2506,-593.5 2506,-599.5 2506,-599.5 2506,-643.5 2506,-643.5 2506,-649.5 2500,-655.5 2494,-655.5\"/>\n<text text-anchor=\"start\" x=\"2409\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2411.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2410.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"2404\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 70->72 -->\n<g id=\"edge72\" class=\"edge\"><title>70->72</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2362.18,-698.907C2375.91,-687.101 2390.89,-674.217 2404.56,-662.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2407.15,-664.842 2412.45,-655.667 2402.58,-659.535 2407.15,-664.842\"/>\n</g>\n<!-- 74 -->\n<g id=\"node75\" class=\"node\"><title>74</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2528,-774.5C2528,-774.5 2442,-774.5 2442,-774.5 2436,-774.5 2430,-768.5 2430,-762.5 2430,-762.5 2430,-718.5 2430,-718.5 2430,-712.5 2436,-706.5 2442,-706.5 2442,-706.5 2528,-706.5 2528,-706.5 2534,-706.5 2540,-712.5 2540,-718.5 2540,-718.5 2540,-762.5 2540,-762.5 2540,-768.5 2534,-774.5 2528,-774.5\"/>\n<text text-anchor=\"start\" x=\"2443\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2445.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2444.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"2438\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 73->74 -->\n<g id=\"edge74\" class=\"edge\"><title>73->74</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2485,-817.907C2485,-807.204 2485,-795.615 2485,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2488.5,-784.667 2485,-774.667 2481.5,-784.667 2488.5,-784.667\"/>\n</g>\n<!-- 75 -->\n<g id=\"node76\" class=\"node\"><title>75</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2672,-774.5C2672,-774.5 2570,-774.5 2570,-774.5 2564,-774.5 2558,-768.5 2558,-762.5 2558,-762.5 2558,-718.5 2558,-718.5 2558,-712.5 2564,-706.5 2570,-706.5 2570,-706.5 2672,-706.5 2672,-706.5 2678,-706.5 2684,-712.5 2684,-718.5 2684,-718.5 2684,-762.5 2684,-762.5 2684,-768.5 2678,-774.5 2672,-774.5\"/>\n<text text-anchor=\"start\" x=\"2579\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2577.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 31</text>\n<text text-anchor=\"start\" x=\"2576.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 53]</text>\n<text text-anchor=\"start\" x=\"2566\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 73->75 -->\n<g id=\"edge75\" class=\"edge\"><title>73->75</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2532.18,-817.907C2545.91,-806.101 2560.89,-793.217 2574.56,-781.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2577.15,-783.842 2582.45,-774.667 2572.58,-778.535 2577.15,-783.842\"/>\n</g>\n<!-- 78 -->\n<g id=\"node79\" class=\"node\"><title>78</title>\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M2977,-1020C2977,-1020 2871,-1020 2871,-1020 2865,-1020 2859,-1014 2859,-1008 2859,-1008 2859,-949 2859,-949 2859,-943 2865,-937 2871,-937 2871,-937 2977,-937 2977,-937 2983,-937 2989,-943 2989,-949 2989,-949 2989,-1008 2989,-1008 2989,-1014 2983,-1020 2977,-1020\"/>\n<text text-anchor=\"start\" x=\"2875\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 9.5</text>\n<text text-anchor=\"start\" x=\"2878\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.06</text>\n<text text-anchor=\"start\" x=\"2872.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1110</text>\n<text text-anchor=\"start\" x=\"2867\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [12, 1723]</text>\n<text text-anchor=\"start\" x=\"2869\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 77->78 -->\n<g id=\"edge78\" class=\"edge\"><title>77->78</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2924,-1055.91C2924,-1047.65 2924,-1038.86 2924,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2927.5,-1030.02 2924,-1020.02 2920.5,-1030.02 2927.5,-1030.02\"/>\n</g>\n<!-- 93 -->\n<g id=\"node94\" class=\"node\"><title>93</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3121,-1012.5C3121,-1012.5 3019,-1012.5 3019,-1012.5 3013,-1012.5 3007,-1006.5 3007,-1000.5 3007,-1000.5 3007,-956.5 3007,-956.5 3007,-950.5 3013,-944.5 3019,-944.5 3019,-944.5 3121,-944.5 3121,-944.5 3127,-944.5 3133,-950.5 3133,-956.5 3133,-956.5 3133,-1000.5 3133,-1000.5 3133,-1006.5 3127,-1012.5 3121,-1012.5\"/>\n<text text-anchor=\"start\" x=\"3028\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3018.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2785</text>\n<text text-anchor=\"start\" x=\"3017\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4294]</text>\n<text text-anchor=\"start\" x=\"3015\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 77->93 -->\n<g id=\"edge93\" class=\"edge\"><title>77->93</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2974.65,-1055.91C2989.53,-1043.99 3005.77,-1030.98 3020.56,-1019.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3023,-1021.65 3028.61,-1012.67 3018.62,-1016.19 3023,-1021.65\"/>\n</g>\n<!-- 79 -->\n<g id=\"node80\" class=\"node\"><title>79</title>\n<path fill=\"#3a9de5\" stroke=\"black\" d=\"M3010,-901C3010,-901 2836,-901 2836,-901 2830,-901 2824,-895 2824,-889 2824,-889 2824,-830 2824,-830 2824,-824 2830,-818 2836,-818 2836,-818 3010,-818 3010,-818 3016,-818 3022,-824 3022,-830 3022,-830 3022,-889 3022,-889 3022,-895 3016,-901 3010,-901\"/>\n<text text-anchor=\"start\" x=\"2832\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.055</text>\n<text text-anchor=\"start\" x=\"2873\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.038</text>\n<text text-anchor=\"start\" x=\"2871.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1102</text>\n<text text-anchor=\"start\" x=\"2870\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 1719]</text>\n<text text-anchor=\"start\" x=\"2868\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 78->79 -->\n<g id=\"edge79\" class=\"edge\"><title>78->79</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2923.65,-936.907C2923.58,-928.649 2923.51,-919.864 2923.43,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2926.93,-910.99 2923.35,-901.021 2919.93,-911.05 2926.93,-910.99\"/>\n</g>\n<!-- 88 -->\n<g id=\"node89\" class=\"node\"><title>88</title>\n<path fill=\"#fae6d7\" stroke=\"black\" d=\"M3151,-901C3151,-901 3059,-901 3059,-901 3053,-901 3047,-895 3047,-889 3047,-889 3047,-830 3047,-830 3047,-824 3053,-818 3059,-818 3059,-818 3151,-818 3151,-818 3157,-818 3163,-824 3163,-830 3163,-830 3163,-889 3163,-889 3163,-895 3157,-901 3151,-901\"/>\n<text text-anchor=\"start\" x=\"3056\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 6.5</text>\n<text text-anchor=\"start\" x=\"3055\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.991</text>\n<text text-anchor=\"start\" x=\"3065.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"3064.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 4]</text>\n<text text-anchor=\"start\" x=\"3058\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 78->88 -->\n<g id=\"edge88\" class=\"edge\"><title>78->88</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2986.8,-936.907C3003.4,-926.173 3021.39,-914.547 3038.2,-903.681\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3040.37,-906.444 3046.87,-898.076 3036.57,-900.565 3040.37,-906.444\"/>\n</g>\n<!-- 80 -->\n<g id=\"node81\" class=\"node\"><title>80</title>\n<path fill=\"#4aa5e7\" stroke=\"black\" d=\"M2829.5,-782C2829.5,-782 2714.5,-782 2714.5,-782 2708.5,-782 2702.5,-776 2702.5,-770 2702.5,-770 2702.5,-711 2702.5,-711 2702.5,-705 2708.5,-699 2714.5,-699 2714.5,-699 2829.5,-699 2829.5,-699 2835.5,-699 2841.5,-705 2841.5,-711 2841.5,-711 2841.5,-770 2841.5,-770 2841.5,-776 2835.5,-782 2829.5,-782\"/>\n<text text-anchor=\"start\" x=\"2710.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"2722\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.397</text>\n<text text-anchor=\"start\" x=\"2728.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 59</text>\n<text text-anchor=\"start\" x=\"2727.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 82]</text>\n<text text-anchor=\"start\" x=\"2717\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 79->80 -->\n<g id=\"edge80\" class=\"edge\"><title>79->80</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2870.61,-817.907C2858.31,-808.379 2845.11,-798.148 2832.49,-788.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2834.34,-785.379 2824.3,-782.021 2830.06,-790.912 2834.34,-785.379\"/>\n</g>\n<!-- 87 -->\n<g id=\"node88\" class=\"node\"><title>87</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2974,-774.5C2974,-774.5 2872,-774.5 2872,-774.5 2866,-774.5 2860,-768.5 2860,-762.5 2860,-762.5 2860,-718.5 2860,-718.5 2860,-712.5 2866,-706.5 2872,-706.5 2872,-706.5 2974,-706.5 2974,-706.5 2980,-706.5 2986,-712.5 2986,-718.5 2986,-718.5 2986,-762.5 2986,-762.5 2986,-768.5 2980,-774.5 2974,-774.5\"/>\n<text text-anchor=\"start\" x=\"2881\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2871.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1043</text>\n<text text-anchor=\"start\" x=\"2870\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1637]</text>\n<text text-anchor=\"start\" x=\"2868\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 79->87 -->\n<g id=\"edge87\" class=\"edge\"><title>79->87</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2923,-817.907C2923,-807.204 2923,-795.615 2923,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2926.5,-784.667 2923,-774.667 2919.5,-784.667 2926.5,-784.667\"/>\n</g>\n<!-- 81 -->\n<g id=\"node82\" class=\"node\"><title>81</title>\n<path fill=\"#f0b78e\" stroke=\"black\" d=\"M2730.5,-663C2730.5,-663 2545.5,-663 2545.5,-663 2539.5,-663 2533.5,-657 2533.5,-651 2533.5,-651 2533.5,-592 2533.5,-592 2533.5,-586 2539.5,-580 2545.5,-580 2545.5,-580 2730.5,-580 2730.5,-580 2736.5,-580 2742.5,-586 2742.5,-592 2742.5,-592 2742.5,-651 2742.5,-651 2742.5,-657 2736.5,-663 2730.5,-663\"/>\n<text text-anchor=\"start\" x=\"2541.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.7</text>\n<text text-anchor=\"start\" x=\"2588\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.881</text>\n<text text-anchor=\"start\" x=\"2598.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"2597.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [7, 3]</text>\n<text text-anchor=\"start\" x=\"2591\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 80->81 -->\n<g id=\"edge81\" class=\"edge\"><title>80->81</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2725.51,-698.907C2714.7,-689.469 2703.1,-679.343 2692,-669.649\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2694.24,-666.961 2684.41,-663.021 2689.64,-672.234 2694.24,-666.961\"/>\n</g>\n<!-- 86 -->\n<g id=\"node87\" class=\"node\"><title>86</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2875,-655.5C2875,-655.5 2773,-655.5 2773,-655.5 2767,-655.5 2761,-649.5 2761,-643.5 2761,-643.5 2761,-599.5 2761,-599.5 2761,-593.5 2767,-587.5 2773,-587.5 2773,-587.5 2875,-587.5 2875,-587.5 2881,-587.5 2887,-593.5 2887,-599.5 2887,-599.5 2887,-643.5 2887,-643.5 2887,-649.5 2881,-655.5 2875,-655.5\"/>\n<text text-anchor=\"start\" x=\"2782\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2780.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 51</text>\n<text text-anchor=\"start\" x=\"2779.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 79]</text>\n<text text-anchor=\"start\" x=\"2769\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 80->86 -->\n<g id=\"edge86\" class=\"edge\"><title>80->86</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2790.04,-698.907C2794.9,-687.983 2800.16,-676.137 2805.06,-665.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2808.4,-666.227 2809.26,-655.667 2802,-663.384 2808.4,-666.227\"/>\n</g>\n<!-- 82 -->\n<g id=\"node83\" class=\"node\"><title>82</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2594,-536.5C2594,-536.5 2508,-536.5 2508,-536.5 2502,-536.5 2496,-530.5 2496,-524.5 2496,-524.5 2496,-480.5 2496,-480.5 2496,-474.5 2502,-468.5 2508,-468.5 2508,-468.5 2594,-468.5 2594,-468.5 2600,-468.5 2606,-474.5 2606,-480.5 2606,-480.5 2606,-524.5 2606,-524.5 2606,-530.5 2600,-536.5 2594,-536.5\"/>\n<text text-anchor=\"start\" x=\"2509\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2511.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2510.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"2504\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 81->82 -->\n<g id=\"edge82\" class=\"edge\"><title>81->82</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2607.82,-579.907C2599.36,-568.542 2590.17,-556.178 2581.69,-544.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2584.44,-542.603 2575.66,-536.667 2578.82,-546.78 2584.44,-542.603\"/>\n</g>\n<!-- 83 -->\n<g id=\"node84\" class=\"node\"><title>83</title>\n<path fill=\"#7bbeee\" stroke=\"black\" d=\"M2813.5,-544C2813.5,-544 2636.5,-544 2636.5,-544 2630.5,-544 2624.5,-538 2624.5,-532 2624.5,-532 2624.5,-473 2624.5,-473 2624.5,-467 2630.5,-461 2636.5,-461 2636.5,-461 2813.5,-461 2813.5,-461 2819.5,-461 2825.5,-467 2825.5,-473 2825.5,-473 2825.5,-532 2825.5,-532 2825.5,-538 2819.5,-544 2813.5,-544\"/>\n<text text-anchor=\"start\" x=\"2632.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.265</text>\n<text text-anchor=\"start\" x=\"2675\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\n<text text-anchor=\"start\" x=\"2685.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"2684.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 3]</text>\n<text text-anchor=\"start\" x=\"2670\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 81->83 -->\n<g id=\"edge83\" class=\"edge\"><title>81->83</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2668.18,-579.907C2674.86,-570.923 2682.01,-561.315 2688.9,-552.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2691.71,-554.134 2694.87,-544.021 2686.09,-549.957 2691.71,-554.134\"/>\n</g>\n<!-- 84 -->\n<g id=\"node85\" class=\"node\"><title>84</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M2708,-417.5C2708,-417.5 2606,-417.5 2606,-417.5 2600,-417.5 2594,-411.5 2594,-405.5 2594,-405.5 2594,-361.5 2594,-361.5 2594,-355.5 2600,-349.5 2606,-349.5 2606,-349.5 2708,-349.5 2708,-349.5 2714,-349.5 2720,-355.5 2720,-361.5 2720,-361.5 2720,-405.5 2720,-405.5 2720,-411.5 2714,-417.5 2708,-417.5\"/>\n<text text-anchor=\"start\" x=\"2615\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2617.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"2616.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 3]</text>\n<text text-anchor=\"start\" x=\"2602\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 83->84 -->\n<g id=\"edge84\" class=\"edge\"><title>83->84</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2701.41,-460.907C2694.93,-449.763 2687.9,-437.658 2681.37,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2684.33,-424.554 2676.28,-417.667 2678.28,-428.072 2684.33,-424.554\"/>\n</g>\n<!-- 85 -->\n<g id=\"node86\" class=\"node\"><title>85</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2836,-417.5C2836,-417.5 2750,-417.5 2750,-417.5 2744,-417.5 2738,-411.5 2738,-405.5 2738,-405.5 2738,-361.5 2738,-361.5 2738,-355.5 2744,-349.5 2750,-349.5 2750,-349.5 2836,-349.5 2836,-349.5 2842,-349.5 2848,-355.5 2848,-361.5 2848,-361.5 2848,-405.5 2848,-405.5 2848,-411.5 2842,-417.5 2836,-417.5\"/>\n<text text-anchor=\"start\" x=\"2751\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2753.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2752.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"2746\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 83->85 -->\n<g id=\"edge85\" class=\"edge\"><title>83->85</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2748.59,-460.907C2755.07,-449.763 2762.1,-437.658 2768.63,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2771.72,-428.072 2773.72,-417.667 2765.67,-424.554 2771.72,-428.072\"/>\n</g>\n<!-- 89 -->\n<g id=\"node90\" class=\"node\"><title>89</title>\n<path fill=\"#6ab6ec\" stroke=\"black\" d=\"M3193.5,-782C3193.5,-782 3016.5,-782 3016.5,-782 3010.5,-782 3004.5,-776 3004.5,-770 3004.5,-770 3004.5,-711 3004.5,-711 3004.5,-705 3010.5,-699 3016.5,-699 3016.5,-699 3193.5,-699 3193.5,-699 3199.5,-699 3205.5,-705 3205.5,-711 3205.5,-711 3205.5,-770 3205.5,-770 3205.5,-776 3199.5,-782 3193.5,-782\"/>\n<text text-anchor=\"start\" x=\"3012.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.065</text>\n<text text-anchor=\"start\" x=\"3055\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\n<text text-anchor=\"start\" x=\"3065.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"3064.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 4]</text>\n<text text-anchor=\"start\" x=\"3050\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 88->89 -->\n<g id=\"edge89\" class=\"edge\"><title>88->89</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3105,-817.907C3105,-809.649 3105,-800.864 3105,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3108.5,-792.021 3105,-782.021 3101.5,-792.021 3108.5,-792.021\"/>\n</g>\n<!-- 92 -->\n<g id=\"node93\" class=\"node\"><title>92</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3322,-774.5C3322,-774.5 3236,-774.5 3236,-774.5 3230,-774.5 3224,-768.5 3224,-762.5 3224,-762.5 3224,-718.5 3224,-718.5 3224,-712.5 3230,-706.5 3236,-706.5 3236,-706.5 3322,-706.5 3322,-706.5 3328,-706.5 3334,-712.5 3334,-718.5 3334,-718.5 3334,-762.5 3334,-762.5 3334,-768.5 3328,-774.5 3322,-774.5\"/>\n<text text-anchor=\"start\" x=\"3237\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3239.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3238.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"3232\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 88->92 -->\n<g id=\"edge92\" class=\"edge\"><title>88->92</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3163.42,-819.215C3182.09,-806.665 3202.73,-792.788 3221.34,-780.274\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3223.38,-783.115 3229.73,-774.63 3219.48,-777.306 3223.38,-783.115\"/>\n</g>\n<!-- 90 -->\n<g id=\"node91\" class=\"node\"><title>90</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3012,-655.5C3012,-655.5 2926,-655.5 2926,-655.5 2920,-655.5 2914,-649.5 2914,-643.5 2914,-643.5 2914,-599.5 2914,-599.5 2914,-593.5 2920,-587.5 2926,-587.5 2926,-587.5 3012,-587.5 3012,-587.5 3018,-587.5 3024,-593.5 3024,-599.5 3024,-599.5 3024,-643.5 3024,-643.5 3024,-649.5 3018,-655.5 3012,-655.5\"/>\n<text text-anchor=\"start\" x=\"2927\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2929.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2928.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"2922\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 89->90 -->\n<g id=\"edge90\" class=\"edge\"><title>89->90</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3057.82,-698.907C3044.09,-687.101 3029.11,-674.217 3015.44,-662.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3017.42,-659.535 3007.55,-655.667 3012.85,-664.842 3017.42,-659.535\"/>\n</g>\n<!-- 91 -->\n<g id=\"node92\" class=\"node\"><title>91</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3156,-655.5C3156,-655.5 3054,-655.5 3054,-655.5 3048,-655.5 3042,-649.5 3042,-643.5 3042,-643.5 3042,-599.5 3042,-599.5 3042,-593.5 3048,-587.5 3054,-587.5 3054,-587.5 3156,-587.5 3156,-587.5 3162,-587.5 3168,-593.5 3168,-599.5 3168,-599.5 3168,-643.5 3168,-643.5 3168,-649.5 3162,-655.5 3156,-655.5\"/>\n<text text-anchor=\"start\" x=\"3063\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3065.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"3064.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"3050\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 89->91 -->\n<g id=\"edge91\" class=\"edge\"><title>89->91</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3105,-698.907C3105,-688.204 3105,-676.615 3105,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3108.5,-665.667 3105,-655.667 3101.5,-665.667 3108.5,-665.667\"/>\n</g>\n<!-- 95 -->\n<g id=\"node96\" class=\"node\"><title>95</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M4316,-1258C4316,-1258 4210,-1258 4210,-1258 4204,-1258 4198,-1252 4198,-1246 4198,-1246 4198,-1187 4198,-1187 4198,-1181 4204,-1175 4210,-1175 4210,-1175 4316,-1175 4316,-1175 4322,-1175 4328,-1181 4328,-1187 4328,-1187 4328,-1246 4328,-1246 4328,-1252 4322,-1258 4316,-1258\"/>\n<text text-anchor=\"start\" x=\"4228\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 3.5</text>\n<text text-anchor=\"start\" x=\"4213\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.087</text>\n<text text-anchor=\"start\" x=\"4211.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4325</text>\n<text text-anchor=\"start\" x=\"4206\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6818, 75]</text>\n<text text-anchor=\"start\" x=\"4216\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 94->95 -->\n<g id=\"edge95\" class=\"edge\"><title>94->95</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4263,-1293.91C4263,-1285.65 4263,-1276.86 4263,-1268.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4266.5,-1268.02 4263,-1258.02 4259.5,-1268.02 4266.5,-1268.02\"/>\n</g>\n<!-- 162 -->\n<g id=\"node163\" class=\"node\"><title>162</title>\n<path fill=\"#eda775\" stroke=\"black\" d=\"M6524,-1258C6524,-1258 6410,-1258 6410,-1258 6404,-1258 6398,-1252 6398,-1246 6398,-1246 6398,-1187 6398,-1187 6398,-1181 6404,-1175 6410,-1175 6410,-1175 6524,-1175 6524,-1175 6530,-1175 6536,-1181 6536,-1187 6536,-1187 6536,-1246 6536,-1246 6536,-1252 6530,-1258 6524,-1258\"/>\n<text text-anchor=\"start\" x=\"6414\" y=\"-1242.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 52.5</text>\n<text text-anchor=\"start\" x=\"6417\" y=\"-1227.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.783</text>\n<text text-anchor=\"start\" x=\"6415.5\" y=\"-1212.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1781</text>\n<text text-anchor=\"start\" x=\"6406\" y=\"-1197.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2152, 653]</text>\n<text text-anchor=\"start\" x=\"6420\" y=\"-1182.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 94->162 -->\n<g id=\"edge162\" class=\"edge\"><title>94->162</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4332.29,-1330.82C4658.6,-1313.5 6040.64,-1240.13 6387.69,-1221.71\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6388.09,-1225.19 6397.89,-1221.17 6387.72,-1218.2 6388.09,-1225.19\"/>\n</g>\n<!-- 96 -->\n<g id=\"node97\" class=\"node\"><title>96</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4258,-1139C4258,-1139 4022,-1139 4022,-1139 4016,-1139 4010,-1133 4010,-1127 4010,-1127 4010,-1068 4010,-1068 4010,-1062 4016,-1056 4022,-1056 4022,-1056 4258,-1056 4258,-1056 4264,-1056 4270,-1062 4270,-1068 4270,-1068 4270,-1127 4270,-1127 4270,-1133 4264,-1139 4258,-1139\"/>\n<text text-anchor=\"start\" x=\"4018\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.825</text>\n<text text-anchor=\"start\" x=\"4090\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.197</text>\n<text text-anchor=\"start\" x=\"4088.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1552</text>\n<text text-anchor=\"start\" x=\"4083\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2343, 74]</text>\n<text text-anchor=\"start\" x=\"4093\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 95->96 -->\n<g id=\"edge96\" class=\"edge\"><title>95->96</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4220.33,-1174.91C4210.5,-1165.56 4199.96,-1155.54 4189.86,-1145.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4192.26,-1143.38 4182.6,-1139.02 4187.43,-1148.45 4192.26,-1143.38\"/>\n</g>\n<!-- 155 -->\n<g id=\"node156\" class=\"node\"><title>155</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4474,-1139C4474,-1139 4300,-1139 4300,-1139 4294,-1139 4288,-1133 4288,-1127 4288,-1127 4288,-1068 4288,-1068 4288,-1062 4294,-1056 4300,-1056 4300,-1056 4474,-1056 4474,-1056 4480,-1056 4486,-1062 4486,-1068 4486,-1068 4486,-1127 4486,-1127 4486,-1133 4480,-1139 4474,-1139\"/>\n<text text-anchor=\"start\" x=\"4296\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.025</text>\n<text text-anchor=\"start\" x=\"4337\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.003</text>\n<text text-anchor=\"start\" x=\"4335.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2773</text>\n<text text-anchor=\"start\" x=\"4334\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4475, 1]</text>\n<text text-anchor=\"start\" x=\"4340\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 95->155 -->\n<g id=\"edge155\" class=\"edge\"><title>95->155</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4306.02,-1174.91C4315.93,-1165.56 4326.55,-1155.54 4336.73,-1145.93\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4339.18,-1148.43 4344.05,-1139.02 4334.38,-1143.34 4339.18,-1148.43\"/>\n</g>\n<!-- 97 -->\n<g id=\"node98\" class=\"node\"><title>97</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M3960.5,-1020C3960.5,-1020 3853.5,-1020 3853.5,-1020 3847.5,-1020 3841.5,-1014 3841.5,-1008 3841.5,-1008 3841.5,-949 3841.5,-949 3841.5,-943 3847.5,-937 3853.5,-937 3853.5,-937 3960.5,-937 3960.5,-937 3966.5,-937 3972.5,-943 3972.5,-949 3972.5,-949 3972.5,-1008 3972.5,-1008 3972.5,-1014 3966.5,-1020 3960.5,-1020\"/>\n<text text-anchor=\"start\" x=\"3849.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 126.5</text>\n<text text-anchor=\"start\" x=\"3857\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.106</text>\n<text text-anchor=\"start\" x=\"3855.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1299</text>\n<text text-anchor=\"start\" x=\"3850\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1969, 28]</text>\n<text text-anchor=\"start\" x=\"3860\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 96->97 -->\n<g id=\"edge97\" class=\"edge\"><title>96->97</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4059.16,-1055.91C4033.99,-1043.27 4006.37,-1029.4 3981.64,-1016.98\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3983.18,-1013.84 3972.68,-1012.48 3980.04,-1020.09 3983.18,-1013.84\"/>\n</g>\n<!-- 124 -->\n<g id=\"node125\" class=\"node\"><title>124</title>\n<path fill=\"#e89051\" stroke=\"black\" d=\"M4259,-1020C4259,-1020 4023,-1020 4023,-1020 4017,-1020 4011,-1014 4011,-1008 4011,-1008 4011,-949 4011,-949 4011,-943 4017,-937 4023,-937 4023,-937 4259,-937 4259,-937 4265,-937 4271,-943 4271,-949 4271,-949 4271,-1008 4271,-1008 4271,-1014 4265,-1020 4259,-1020\"/>\n<text text-anchor=\"start\" x=\"4019\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.875</text>\n<text text-anchor=\"start\" x=\"4091\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.498</text>\n<text text-anchor=\"start\" x=\"4093.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 253</text>\n<text text-anchor=\"start\" x=\"4088\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [374, 46]</text>\n<text text-anchor=\"start\" x=\"4094\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 96->124 -->\n<g id=\"edge124\" class=\"edge\"><title>96->124</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4140.35,-1055.91C4140.42,-1047.65 4140.49,-1038.86 4140.57,-1030.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4144.07,-1030.05 4140.65,-1020.02 4137.07,-1029.99 4144.07,-1030.05\"/>\n</g>\n<!-- 98 -->\n<g id=\"node99\" class=\"node\"><title>98</title>\n<path fill=\"#e78946\" stroke=\"black\" d=\"M3801.5,-901C3801.5,-901 3632.5,-901 3632.5,-901 3626.5,-901 3620.5,-895 3620.5,-889 3620.5,-889 3620.5,-830 3620.5,-830 3620.5,-824 3626.5,-818 3632.5,-818 3632.5,-818 3801.5,-818 3801.5,-818 3807.5,-818 3813.5,-824 3813.5,-830 3813.5,-830 3813.5,-889 3813.5,-889 3813.5,-895 3807.5,-901 3801.5,-901\"/>\n<text text-anchor=\"start\" x=\"3628.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_serror_rate ≤ 0.03</text>\n<text text-anchor=\"start\" x=\"3667\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.337</text>\n<text text-anchor=\"start\" x=\"3669.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 304</text>\n<text text-anchor=\"start\" x=\"3664\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [420, 28]</text>\n<text text-anchor=\"start\" x=\"3670\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 97->98 -->\n<g id=\"edge98\" class=\"edge\"><title>97->98</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3841.35,-937.071C3825.27,-927.172 3807.95,-916.507 3791.49,-906.373\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3793.33,-903.392 3782.98,-901.128 3789.66,-909.352 3793.33,-903.392\"/>\n</g>\n<!-- 123 -->\n<g id=\"node124\" class=\"node\"><title>123</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3956,-893.5C3956,-893.5 3858,-893.5 3858,-893.5 3852,-893.5 3846,-887.5 3846,-881.5 3846,-881.5 3846,-837.5 3846,-837.5 3846,-831.5 3852,-825.5 3858,-825.5 3858,-825.5 3956,-825.5 3956,-825.5 3962,-825.5 3968,-831.5 3968,-837.5 3968,-837.5 3968,-881.5 3968,-881.5 3968,-887.5 3962,-893.5 3956,-893.5\"/>\n<text text-anchor=\"start\" x=\"3865\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3859.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 995</text>\n<text text-anchor=\"start\" x=\"3854\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1549, 0]</text>\n<text text-anchor=\"start\" x=\"3860\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 97->123 -->\n<g id=\"edge123\" class=\"edge\"><title>97->123</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3907,-936.907C3907,-926.204 3907,-914.615 3907,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3910.5,-903.667 3907,-893.667 3903.5,-903.667 3910.5,-903.667\"/>\n</g>\n<!-- 99 -->\n<g id=\"node100\" class=\"node\"><title>99</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M3564.5,-782C3564.5,-782 3421.5,-782 3421.5,-782 3415.5,-782 3409.5,-776 3409.5,-770 3409.5,-770 3409.5,-711 3409.5,-711 3409.5,-705 3415.5,-699 3421.5,-699 3421.5,-699 3564.5,-699 3564.5,-699 3570.5,-699 3576.5,-705 3576.5,-711 3576.5,-711 3576.5,-770 3576.5,-770 3576.5,-776 3570.5,-782 3564.5,-782\"/>\n<text text-anchor=\"start\" x=\"3417.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_access_files ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"3447\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.26</text>\n<text text-anchor=\"start\" x=\"3445.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 274</text>\n<text text-anchor=\"start\" x=\"3440\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [391, 18]</text>\n<text text-anchor=\"start\" x=\"3446\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 98->99 -->\n<g id=\"edge99\" class=\"edge\"><title>98->99</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3639.28,-817.907C3620,-807.834 3599.21,-796.977 3579.53,-786.698\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3581.06,-783.548 3570.58,-782.021 3577.82,-789.753 3581.06,-783.548\"/>\n</g>\n<!-- 116 -->\n<g id=\"node117\" class=\"node\"><title>116</title>\n<path fill=\"#eeac7d\" stroke=\"black\" d=\"M3817.5,-782C3817.5,-782 3616.5,-782 3616.5,-782 3610.5,-782 3604.5,-776 3604.5,-770 3604.5,-770 3604.5,-711 3604.5,-711 3604.5,-705 3610.5,-699 3616.5,-699 3616.5,-699 3817.5,-699 3817.5,-699 3823.5,-699 3829.5,-705 3829.5,-711 3829.5,-711 3829.5,-770 3829.5,-770 3829.5,-776 3823.5,-782 3817.5,-782\"/>\n<text text-anchor=\"start\" x=\"3612.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.475</text>\n<text text-anchor=\"start\" x=\"3667\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.821</text>\n<text text-anchor=\"start\" x=\"3673.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"3668.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 10]</text>\n<text text-anchor=\"start\" x=\"3670\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 98->116 -->\n<g id=\"edge116\" class=\"edge\"><title>98->116</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3717,-817.907C3717,-809.649 3717,-800.864 3717,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3720.5,-792.021 3717,-782.021 3713.5,-792.021 3720.5,-792.021\"/>\n</g>\n<!-- 100 -->\n<g id=\"node101\" class=\"node\"><title>100</title>\n<path fill=\"#e68641\" stroke=\"black\" d=\"M3400,-663C3400,-663 3198,-663 3198,-663 3192,-663 3186,-657 3186,-651 3186,-651 3186,-592 3186,-592 3186,-586 3192,-580 3198,-580 3198,-580 3400,-580 3400,-580 3406,-580 3412,-586 3412,-592 3412,-592 3412,-651 3412,-651 3412,-657 3406,-663 3400,-663\"/>\n<text text-anchor=\"start\" x=\"3194\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_srv_rate ≤ 0.505</text>\n<text text-anchor=\"start\" x=\"3249\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.239</text>\n<text text-anchor=\"start\" x=\"3251.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 273</text>\n<text text-anchor=\"start\" x=\"3246\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [391, 16]</text>\n<text text-anchor=\"start\" x=\"3252\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 99->100 -->\n<g id=\"edge100\" class=\"edge\"><title>99->100</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3425.69,-698.907C3409.29,-689.016 3391.64,-678.368 3374.87,-668.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3376.56,-665.188 3366.19,-663.021 3372.94,-671.182 3376.56,-665.188\"/>\n</g>\n<!-- 115 -->\n<g id=\"node116\" class=\"node\"><title>115</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3544,-655.5C3544,-655.5 3442,-655.5 3442,-655.5 3436,-655.5 3430,-649.5 3430,-643.5 3430,-643.5 3430,-599.5 3430,-599.5 3430,-593.5 3436,-587.5 3442,-587.5 3442,-587.5 3544,-587.5 3544,-587.5 3550,-587.5 3556,-593.5 3556,-599.5 3556,-599.5 3556,-643.5 3556,-643.5 3556,-649.5 3550,-655.5 3544,-655.5\"/>\n<text text-anchor=\"start\" x=\"3451\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3453.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3452.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3438\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 99->115 -->\n<g id=\"edge115\" class=\"edge\"><title>99->115</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3493,-698.907C3493,-688.204 3493,-676.615 3493,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3496.5,-665.667 3493,-655.667 3489.5,-665.667 3496.5,-665.667\"/>\n</g>\n<!-- 101 -->\n<g id=\"node102\" class=\"node\"><title>101</title>\n<path fill=\"#e78c4b\" stroke=\"black\" d=\"M3257.5,-544C3257.5,-544 3098.5,-544 3098.5,-544 3092.5,-544 3086.5,-538 3086.5,-532 3086.5,-532 3086.5,-473 3086.5,-473 3086.5,-467 3092.5,-461 3098.5,-461 3098.5,-461 3257.5,-461 3257.5,-461 3263.5,-461 3269.5,-467 3269.5,-473 3269.5,-473 3269.5,-532 3269.5,-532 3269.5,-538 3263.5,-544 3257.5,-544\"/>\n<text text-anchor=\"start\" x=\"3094.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.125</text>\n<text text-anchor=\"start\" x=\"3128\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.411</text>\n<text text-anchor=\"start\" x=\"3130.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 131</text>\n<text text-anchor=\"start\" x=\"3125\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [178, 16]</text>\n<text text-anchor=\"start\" x=\"3131\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 100->101 -->\n<g id=\"edge101\" class=\"edge\"><title>100->101</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3257.02,-579.907C3247.45,-570.651 3237.19,-560.732 3227.34,-551.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3229.53,-548.456 3219.91,-544.021 3224.66,-553.488 3229.53,-548.456\"/>\n</g>\n<!-- 114 -->\n<g id=\"node115\" class=\"node\"><title>114</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3388.5,-536.5C3388.5,-536.5 3299.5,-536.5 3299.5,-536.5 3293.5,-536.5 3287.5,-530.5 3287.5,-524.5 3287.5,-524.5 3287.5,-480.5 3287.5,-480.5 3287.5,-474.5 3293.5,-468.5 3299.5,-468.5 3299.5,-468.5 3388.5,-468.5 3388.5,-468.5 3394.5,-468.5 3400.5,-474.5 3400.5,-480.5 3400.5,-480.5 3400.5,-524.5 3400.5,-524.5 3400.5,-530.5 3394.5,-536.5 3388.5,-536.5\"/>\n<text text-anchor=\"start\" x=\"3302\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3296.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 142</text>\n<text text-anchor=\"start\" x=\"3295.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [213, 0]</text>\n<text text-anchor=\"start\" x=\"3297\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 100->114 -->\n<g id=\"edge114\" class=\"edge\"><title>100->114</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3314.61,-579.907C3318.81,-568.983 3323.37,-557.137 3327.61,-546.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3330.92,-547.257 3331.24,-536.667 3324.39,-544.744 3330.92,-547.257\"/>\n</g>\n<!-- 102 -->\n<g id=\"node103\" class=\"node\"><title>102</title>\n<path fill=\"#e89254\" stroke=\"black\" d=\"M3225,-425C3225,-425 3127,-425 3127,-425 3121,-425 3115,-419 3115,-413 3115,-413 3115,-354 3115,-354 3115,-348 3121,-342 3127,-342 3127,-342 3225,-342 3225,-342 3231,-342 3237,-348 3237,-354 3237,-354 3237,-413 3237,-413 3237,-419 3231,-425 3225,-425\"/>\n<text text-anchor=\"start\" x=\"3135\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 6.5</text>\n<text text-anchor=\"start\" x=\"3126\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.525</text>\n<text text-anchor=\"start\" x=\"3132.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 94</text>\n<text text-anchor=\"start\" x=\"3123\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [119, 16]</text>\n<text text-anchor=\"start\" x=\"3129\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 101->102 -->\n<g id=\"edge102\" class=\"edge\"><title>101->102</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3177.31,-460.907C3177.16,-452.558 3177.01,-443.671 3176.86,-435.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3180.36,-434.959 3176.69,-425.021 3173.36,-435.079 3180.36,-434.959\"/>\n</g>\n<!-- 113 -->\n<g id=\"node114\" class=\"node\"><title>113</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3353,-417.5C3353,-417.5 3267,-417.5 3267,-417.5 3261,-417.5 3255,-411.5 3255,-405.5 3255,-405.5 3255,-361.5 3255,-361.5 3255,-355.5 3261,-349.5 3267,-349.5 3267,-349.5 3353,-349.5 3353,-349.5 3359,-349.5 3365,-355.5 3365,-361.5 3365,-361.5 3365,-405.5 3365,-405.5 3365,-411.5 3359,-417.5 3353,-417.5\"/>\n<text text-anchor=\"start\" x=\"3268\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3266.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\n<text text-anchor=\"start\" x=\"3265.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [59, 0]</text>\n<text text-anchor=\"start\" x=\"3263\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 101->113 -->\n<g id=\"edge113\" class=\"edge\"><title>101->113</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3223.8,-460.907C3237.12,-449.101 3251.65,-436.217 3264.93,-424.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3267.42,-426.919 3272.58,-417.667 3262.78,-421.681 3267.42,-426.919\"/>\n</g>\n<!-- 103 -->\n<g id=\"node104\" class=\"node\"><title>103</title>\n<path fill=\"#c2e1f7\" stroke=\"black\" d=\"M3168,-306C3168,-306 3026,-306 3026,-306 3020,-306 3014,-300 3014,-294 3014,-294 3014,-235 3014,-235 3014,-229 3020,-223 3026,-223 3026,-223 3168,-223 3168,-223 3174,-223 3180,-229 3180,-235 3180,-235 3180,-294 3180,-294 3180,-300 3174,-306 3168,-306\"/>\n<text text-anchor=\"start\" x=\"3022\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 216.5</text>\n<text text-anchor=\"start\" x=\"3047\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.976</text>\n<text text-anchor=\"start\" x=\"3053.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"3052.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 13]</text>\n<text text-anchor=\"start\" x=\"3042\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 102->103 -->\n<g id=\"edge103\" class=\"edge\"><title>102->103</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3148.59,-341.907C3142.59,-333.014 3136.17,-323.509 3129.97,-314.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3132.86,-312.35 3124.36,-306.021 3127.06,-316.267 3132.86,-312.35\"/>\n</g>\n<!-- 108 -->\n<g id=\"node109\" class=\"node\"><title>108</title>\n<path fill=\"#e6843e\" stroke=\"black\" d=\"M3302,-306C3302,-306 3210,-306 3210,-306 3204,-306 3198,-300 3198,-294 3198,-294 3198,-235 3198,-235 3198,-229 3204,-223 3210,-223 3210,-223 3302,-223 3302,-223 3308,-223 3314,-229 3314,-235 3314,-235 3314,-294 3314,-294 3314,-300 3308,-306 3302,-306\"/>\n<text text-anchor=\"start\" x=\"3207.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_count ≤ 2.5</text>\n<text text-anchor=\"start\" x=\"3206\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.177</text>\n<text text-anchor=\"start\" x=\"3212.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 81</text>\n<text text-anchor=\"start\" x=\"3207.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [110, 3]</text>\n<text text-anchor=\"start\" x=\"3209\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 102->108 -->\n<g id=\"edge108\" class=\"edge\"><title>102->108</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3203.76,-341.907C3209.84,-333.014 3216.34,-323.509 3222.61,-314.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3225.54,-316.251 3228.29,-306.021 3219.76,-312.3 3225.54,-316.251\"/>\n</g>\n<!-- 104 -->\n<g id=\"node105\" class=\"node\"><title>104</title>\n<path fill=\"#85c3ef\" stroke=\"black\" d=\"M3019,-187C3019,-187 2885,-187 2885,-187 2879,-187 2873,-181 2873,-175 2873,-175 2873,-116 2873,-116 2873,-110 2879,-104 2885,-104 2885,-104 3019,-104 3019,-104 3025,-104 3031,-110 3031,-116 3031,-116 3031,-175 3031,-175 3031,-181 3025,-187 3019,-187\"/>\n<text text-anchor=\"start\" x=\"2881\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 22.0</text>\n<text text-anchor=\"start\" x=\"2902\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.852</text>\n<text text-anchor=\"start\" x=\"2908.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"2907.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 13]</text>\n<text text-anchor=\"start\" x=\"2897\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 103->104 -->\n<g id=\"edge104\" class=\"edge\"><title>103->104</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3046.69,-222.907C3034.88,-213.379 3022.21,-203.148 3010.09,-193.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3012.2,-190.577 3002.22,-187.021 3007.8,-196.024 3012.2,-190.577\"/>\n</g>\n<!-- 107 -->\n<g id=\"node108\" class=\"node\"><title>107</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3147,-179.5C3147,-179.5 3061,-179.5 3061,-179.5 3055,-179.5 3049,-173.5 3049,-167.5 3049,-167.5 3049,-123.5 3049,-123.5 3049,-117.5 3055,-111.5 3061,-111.5 3061,-111.5 3147,-111.5 3147,-111.5 3153,-111.5 3159,-117.5 3159,-123.5 3159,-123.5 3159,-167.5 3159,-167.5 3159,-173.5 3153,-179.5 3147,-179.5\"/>\n<text text-anchor=\"start\" x=\"3062\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3064.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"3063.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"3057\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 103->107 -->\n<g id=\"edge107\" class=\"edge\"><title>103->107</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3099.43,-222.907C3100.07,-212.204 3100.76,-200.615 3101.41,-189.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3104.91,-189.858 3102.02,-179.667 3097.92,-189.44 3104.91,-189.858\"/>\n</g>\n<!-- 105 -->\n<g id=\"node106\" class=\"node\"><title>105</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M2866,-68C2866,-68 2780,-68 2780,-68 2774,-68 2768,-62 2768,-56 2768,-56 2768,-12 2768,-12 2768,-6 2774,-0 2780,-0 2780,-0 2866,-0 2866,-0 2872,-0 2878,-6 2878,-12 2878,-12 2878,-56 2878,-56 2878,-62 2872,-68 2866,-68\"/>\n<text text-anchor=\"start\" x=\"2781\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"2783.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"2782.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"2776\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 104->105 -->\n<g id=\"edge105\" class=\"edge\"><title>104->105</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2903.97,-103.726C2892.9,-94.3318 2881.14,-84.349 2870.11,-74.9883\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2872.12,-72.1026 2862.23,-68.2996 2867.59,-77.4393 2872.12,-72.1026\"/>\n</g>\n<!-- 106 -->\n<g id=\"node107\" class=\"node\"><title>106</title>\n<path fill=\"#57ace9\" stroke=\"black\" d=\"M3010,-68C3010,-68 2908,-68 2908,-68 2902,-68 2896,-62 2896,-56 2896,-56 2896,-12 2896,-12 2896,-6 2902,-0 2908,-0 2908,-0 3010,-0 3010,-0 3016,-0 3022,-6 3022,-12 3022,-12 3022,-56 3022,-56 3022,-62 3016,-68 3010,-68\"/>\n<text text-anchor=\"start\" x=\"2909\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.567</text>\n<text text-anchor=\"start\" x=\"2919.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 9</text>\n<text text-anchor=\"start\" x=\"2914.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 13]</text>\n<text text-anchor=\"start\" x=\"2904\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 104->106 -->\n<g id=\"edge106\" class=\"edge\"><title>104->106</title>\n<path fill=\"none\" stroke=\"black\" d=\"M2954.61,-103.726C2955.14,-95.4263 2955.7,-86.6671 2956.23,-78.2834\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"2959.73,-78.5025 2956.87,-68.2996 2952.74,-78.0559 2959.73,-78.5025\"/>\n</g>\n<!-- 109 -->\n<g id=\"node110\" class=\"node\"><title>109</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M3288,-187C3288,-187 3196,-187 3196,-187 3190,-187 3184,-181 3184,-175 3184,-175 3184,-116 3184,-116 3184,-110 3190,-104 3196,-104 3196,-104 3288,-104 3288,-104 3294,-104 3300,-110 3300,-116 3300,-116 3300,-175 3300,-175 3300,-181 3294,-187 3288,-187\"/>\n<text text-anchor=\"start\" x=\"3214.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"3192\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.074</text>\n<text text-anchor=\"start\" x=\"3198.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 80</text>\n<text text-anchor=\"start\" x=\"3193.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [110, 1]</text>\n<text text-anchor=\"start\" x=\"3195\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 108->109 -->\n<g id=\"edge109\" class=\"edge\"><title>108->109</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3251.14,-222.907C3250.14,-214.558 3249.08,-205.671 3248.05,-197.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3251.51,-196.534 3246.85,-187.021 3244.56,-197.366 3251.51,-196.534\"/>\n</g>\n<!-- 112 -->\n<g id=\"node113\" class=\"node\"><title>112</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3432,-179.5C3432,-179.5 3330,-179.5 3330,-179.5 3324,-179.5 3318,-173.5 3318,-167.5 3318,-167.5 3318,-123.5 3318,-123.5 3318,-117.5 3324,-111.5 3330,-111.5 3330,-111.5 3432,-111.5 3432,-111.5 3438,-111.5 3444,-117.5 3444,-123.5 3444,-123.5 3444,-167.5 3444,-167.5 3444,-173.5 3438,-179.5 3432,-179.5\"/>\n<text text-anchor=\"start\" x=\"3339\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3341.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3340.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3326\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 108->112 -->\n<g id=\"edge112\" class=\"edge\"><title>108->112</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3299.37,-222.907C3311.86,-211.211 3325.49,-198.457 3337.97,-186.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3340.66,-189.056 3345.57,-179.667 3335.87,-183.945 3340.66,-189.056\"/>\n</g>\n<!-- 110 -->\n<g id=\"node111\" class=\"node\"><title>110</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3217.5,-68C3217.5,-68 3128.5,-68 3128.5,-68 3122.5,-68 3116.5,-62 3116.5,-56 3116.5,-56 3116.5,-12 3116.5,-12 3116.5,-6 3122.5,-0 3128.5,-0 3128.5,-0 3217.5,-0 3217.5,-0 3223.5,-0 3229.5,-6 3229.5,-12 3229.5,-12 3229.5,-56 3229.5,-56 3229.5,-62 3223.5,-68 3217.5,-68\"/>\n<text text-anchor=\"start\" x=\"3131\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3129.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 79</text>\n<text text-anchor=\"start\" x=\"3124.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [110, 0]</text>\n<text text-anchor=\"start\" x=\"3126\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 109->110 -->\n<g id=\"edge110\" class=\"edge\"><title>109->110</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3216.31,-103.726C3210.79,-94.9703 3204.95,-85.7032 3199.41,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3202.28,-74.8941 3193.98,-68.2996 3196.35,-78.6259 3202.28,-74.8941\"/>\n</g>\n<!-- 111 -->\n<g id=\"node112\" class=\"node\"><title>111</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3362,-68C3362,-68 3260,-68 3260,-68 3254,-68 3248,-62 3248,-56 3248,-56 3248,-12 3248,-12 3248,-6 3254,-0 3260,-0 3260,-0 3362,-0 3362,-0 3368,-0 3374,-6 3374,-12 3374,-12 3374,-56 3374,-56 3374,-62 3368,-68 3362,-68\"/>\n<text text-anchor=\"start\" x=\"3269\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3271.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3270.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3256\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 109->111 -->\n<g id=\"edge111\" class=\"edge\"><title>109->111</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3267.69,-103.726C3273.21,-94.9703 3279.05,-85.7032 3284.59,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3287.65,-78.6259 3290.02,-68.2996 3281.72,-74.8941 3287.65,-78.6259\"/>\n</g>\n<!-- 117 -->\n<g id=\"node118\" class=\"node\"><title>117</title>\n<path fill=\"#e78a47\" stroke=\"black\" d=\"M3738,-663C3738,-663 3586,-663 3586,-663 3580,-663 3574,-657 3574,-651 3574,-651 3574,-592 3574,-592 3574,-586 3580,-580 3586,-580 3586,-580 3738,-580 3738,-580 3744,-580 3750,-586 3750,-592 3750,-592 3750,-651 3750,-651 3750,-657 3744,-663 3738,-663\"/>\n<text text-anchor=\"start\" x=\"3582\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"3612\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.345</text>\n<text text-anchor=\"start\" x=\"3618.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25</text>\n<text text-anchor=\"start\" x=\"3617.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 2]</text>\n<text text-anchor=\"start\" x=\"3615\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 116->117 -->\n<g id=\"edge117\" class=\"edge\"><title>116->117</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3697.92,-698.907C3693.87,-690.286 3689.54,-681.09 3685.35,-672.175\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3688.47,-670.582 3681.05,-663.021 3682.14,-673.56 3688.47,-670.582\"/>\n</g>\n<!-- 122 -->\n<g id=\"node123\" class=\"node\"><title>122</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3882,-655.5C3882,-655.5 3780,-655.5 3780,-655.5 3774,-655.5 3768,-649.5 3768,-643.5 3768,-643.5 3768,-599.5 3768,-599.5 3768,-593.5 3774,-587.5 3780,-587.5 3780,-587.5 3882,-587.5 3882,-587.5 3888,-587.5 3894,-593.5 3894,-599.5 3894,-599.5 3894,-643.5 3894,-643.5 3894,-649.5 3888,-655.5 3882,-655.5\"/>\n<text text-anchor=\"start\" x=\"3789\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3791.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"3790.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 8]</text>\n<text text-anchor=\"start\" x=\"3776\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 116->122 -->\n<g id=\"edge122\" class=\"edge\"><title>116->122</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3756.55,-698.907C3767.84,-687.321 3780.14,-674.698 3791.43,-663.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3794.21,-665.272 3798.68,-655.667 3789.2,-660.387 3794.21,-665.272\"/>\n</g>\n<!-- 118 -->\n<g id=\"node119\" class=\"node\"><title>118</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M3578,-544C3578,-544 3476,-544 3476,-544 3470,-544 3464,-538 3464,-532 3464,-532 3464,-473 3464,-473 3464,-467 3470,-461 3476,-461 3476,-461 3578,-461 3578,-461 3584,-461 3590,-467 3590,-473 3590,-473 3590,-532 3590,-532 3590,-538 3584,-544 3578,-544\"/>\n<text text-anchor=\"start\" x=\"3482\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.0</text>\n<text text-anchor=\"start\" x=\"3477\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"3487.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3486.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"3472\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 117->118 -->\n<g id=\"edge118\" class=\"edge\"><title>117->118</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3615.16,-579.907C3604.27,-570.469 3592.59,-560.343 3581.4,-550.649\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3583.6,-547.925 3573.75,-544.021 3579.02,-553.215 3583.6,-547.925\"/>\n</g>\n<!-- 121 -->\n<g id=\"node122\" class=\"node\"><title>121</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3706,-536.5C3706,-536.5 3620,-536.5 3620,-536.5 3614,-536.5 3608,-530.5 3608,-524.5 3608,-524.5 3608,-480.5 3608,-480.5 3608,-474.5 3614,-468.5 3620,-468.5 3620,-468.5 3706,-468.5 3706,-468.5 3712,-468.5 3718,-474.5 3718,-480.5 3718,-480.5 3718,-524.5 3718,-524.5 3718,-530.5 3712,-536.5 3706,-536.5\"/>\n<text text-anchor=\"start\" x=\"3621\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3619.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 23</text>\n<text text-anchor=\"start\" x=\"3618.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [28, 0]</text>\n<text text-anchor=\"start\" x=\"3616\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 117->121 -->\n<g id=\"edge121\" class=\"edge\"><title>117->121</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3662.35,-579.907C3662.44,-569.204 3662.54,-557.615 3662.63,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3666.13,-546.697 3662.72,-536.667 3659.13,-546.637 3666.13,-546.697\"/>\n</g>\n<!-- 119 -->\n<g id=\"node120\" class=\"node\"><title>119</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M3525,-417.5C3525,-417.5 3439,-417.5 3439,-417.5 3433,-417.5 3427,-411.5 3427,-405.5 3427,-405.5 3427,-361.5 3427,-361.5 3427,-355.5 3433,-349.5 3439,-349.5 3439,-349.5 3525,-349.5 3525,-349.5 3531,-349.5 3537,-355.5 3537,-361.5 3537,-361.5 3537,-405.5 3537,-405.5 3537,-411.5 3531,-417.5 3525,-417.5\"/>\n<text text-anchor=\"start\" x=\"3440\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3442.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3441.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"3435\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 118->119 -->\n<g id=\"edge119\" class=\"edge\"><title>118->119</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3511.39,-460.907C3507.19,-449.983 3502.63,-438.137 3498.39,-427.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3501.61,-425.744 3494.76,-417.667 3495.08,-428.257 3501.61,-425.744\"/>\n</g>\n<!-- 120 -->\n<g id=\"node121\" class=\"node\"><title>120</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3669,-417.5C3669,-417.5 3567,-417.5 3567,-417.5 3561,-417.5 3555,-411.5 3555,-405.5 3555,-405.5 3555,-361.5 3555,-361.5 3555,-355.5 3561,-349.5 3567,-349.5 3567,-349.5 3669,-349.5 3669,-349.5 3675,-349.5 3681,-355.5 3681,-361.5 3681,-361.5 3681,-405.5 3681,-405.5 3681,-411.5 3675,-417.5 3669,-417.5\"/>\n<text text-anchor=\"start\" x=\"3576\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3578.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3577.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"3563\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 118->120 -->\n<g id=\"edge120\" class=\"edge\"><title>118->120</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3558.57,-460.907C3567.41,-449.542 3577.03,-437.178 3585.9,-425.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3588.83,-427.709 3592.2,-417.667 3583.3,-423.412 3588.83,-427.709\"/>\n</g>\n<!-- 125 -->\n<g id=\"node126\" class=\"node\"><title>125</title>\n<path fill=\"#d2e9f9\" stroke=\"black\" d=\"M4194.5,-901C4194.5,-901 4087.5,-901 4087.5,-901 4081.5,-901 4075.5,-895 4075.5,-889 4075.5,-889 4075.5,-830 4075.5,-830 4075.5,-824 4081.5,-818 4087.5,-818 4087.5,-818 4194.5,-818 4194.5,-818 4200.5,-818 4206.5,-824 4206.5,-830 4206.5,-830 4206.5,-889 4206.5,-889 4206.5,-895 4200.5,-901 4194.5,-901\"/>\n<text text-anchor=\"start\" x=\"4083.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 199.5</text>\n<text text-anchor=\"start\" x=\"4091\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.988</text>\n<text text-anchor=\"start\" x=\"4097.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 29</text>\n<text text-anchor=\"start\" x=\"4092.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [24, 31]</text>\n<text text-anchor=\"start\" x=\"4086\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 124->125 -->\n<g id=\"edge125\" class=\"edge\"><title>124->125</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4141,-936.907C4141,-928.649 4141,-919.864 4141,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4144.5,-911.021 4141,-901.021 4137.5,-911.021 4144.5,-911.021\"/>\n</g>\n<!-- 136 -->\n<g id=\"node137\" class=\"node\"><title>136</title>\n<path fill=\"#e68641\" stroke=\"black\" d=\"M4394,-901C4394,-901 4270,-901 4270,-901 4264,-901 4258,-895 4258,-889 4258,-889 4258,-830 4258,-830 4258,-824 4264,-818 4270,-818 4270,-818 4394,-818 4394,-818 4400,-818 4406,-824 4406,-830 4406,-830 4406,-889 4406,-889 4406,-895 4400,-901 4394,-901\"/>\n<text text-anchor=\"start\" x=\"4266\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">diff_srv_rate ≤ 0.335</text>\n<text text-anchor=\"start\" x=\"4282\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.247</text>\n<text text-anchor=\"start\" x=\"4284.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 224</text>\n<text text-anchor=\"start\" x=\"4279\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [350, 15]</text>\n<text text-anchor=\"start\" x=\"4285\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 124->136 -->\n<g id=\"edge136\" class=\"edge\"><title>124->136</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4207.27,-936.907C4223.41,-927.016 4240.8,-916.368 4257.31,-906.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4259.15,-909.229 4265.85,-901.021 4255.5,-903.26 4259.15,-909.229\"/>\n</g>\n<!-- 126 -->\n<g id=\"node127\" class=\"node\"><title>126</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4049,-774.5C4049,-774.5 3963,-774.5 3963,-774.5 3957,-774.5 3951,-768.5 3951,-762.5 3951,-762.5 3951,-718.5 3951,-718.5 3951,-712.5 3957,-706.5 3963,-706.5 3963,-706.5 4049,-706.5 4049,-706.5 4055,-706.5 4061,-712.5 4061,-718.5 4061,-718.5 4061,-762.5 4061,-762.5 4061,-768.5 4055,-774.5 4049,-774.5\"/>\n<text text-anchor=\"start\" x=\"3964\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3962.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 14</text>\n<text text-anchor=\"start\" x=\"3961.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [19, 0]</text>\n<text text-anchor=\"start\" x=\"3959\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 125->126 -->\n<g id=\"edge126\" class=\"edge\"><title>125->126</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4094.16,-817.907C4080.54,-806.101 4065.67,-793.217 4052.1,-781.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4054.12,-778.571 4044.27,-774.667 4049.53,-783.861 4054.12,-778.571\"/>\n</g>\n<!-- 127 -->\n<g id=\"node128\" class=\"node\"><title>127</title>\n<path fill=\"#59ade9\" stroke=\"black\" d=\"M4193,-782C4193,-782 4091,-782 4091,-782 4085,-782 4079,-776 4079,-770 4079,-770 4079,-711 4079,-711 4079,-705 4085,-699 4091,-699 4091,-699 4193,-699 4193,-699 4199,-699 4205,-705 4205,-711 4205,-711 4205,-770 4205,-770 4205,-776 4199,-782 4193,-782\"/>\n<text text-anchor=\"start\" x=\"4107\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">count ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"4092\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.581</text>\n<text text-anchor=\"start\" x=\"4098.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 15</text>\n<text text-anchor=\"start\" x=\"4097.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 31]</text>\n<text text-anchor=\"start\" x=\"4087\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 125->127 -->\n<g id=\"edge127\" class=\"edge\"><title>125->127</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4141.35,-817.907C4141.42,-809.649 4141.49,-800.864 4141.57,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4145.07,-792.05 4141.65,-782.021 4138.07,-791.99 4145.07,-792.05\"/>\n</g>\n<!-- 128 -->\n<g id=\"node129\" class=\"node\"><title>128</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4026,-655.5C4026,-655.5 3924,-655.5 3924,-655.5 3918,-655.5 3912,-649.5 3912,-643.5 3912,-643.5 3912,-599.5 3912,-599.5 3912,-593.5 3918,-587.5 3924,-587.5 3924,-587.5 4026,-587.5 4026,-587.5 4032,-587.5 4038,-593.5 4038,-599.5 4038,-599.5 4038,-643.5 4038,-643.5 4038,-649.5 4032,-655.5 4026,-655.5\"/>\n<text text-anchor=\"start\" x=\"3933\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3931.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"3930.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 24]</text>\n<text text-anchor=\"start\" x=\"3920\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 127->128 -->\n<g id=\"edge128\" class=\"edge\"><title>127->128</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4084.06,-698.907C4066.74,-686.769 4047.79,-673.493 4030.61,-661.462\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4032.54,-658.538 4022.34,-655.667 4028.52,-664.271 4032.54,-658.538\"/>\n</g>\n<!-- 129 -->\n<g id=\"node130\" class=\"node\"><title>129</title>\n<path fill=\"#c6e3f8\" stroke=\"black\" d=\"M4229.5,-663C4229.5,-663 4068.5,-663 4068.5,-663 4062.5,-663 4056.5,-657 4056.5,-651 4056.5,-651 4056.5,-592 4056.5,-592 4056.5,-586 4062.5,-580 4068.5,-580 4068.5,-580 4229.5,-580 4229.5,-580 4235.5,-580 4241.5,-586 4241.5,-592 4241.5,-592 4241.5,-651 4241.5,-651 4241.5,-657 4235.5,-663 4229.5,-663\"/>\n<text text-anchor=\"start\" x=\"4064.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 79.0</text>\n<text text-anchor=\"start\" x=\"4103\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.98</text>\n<text text-anchor=\"start\" x=\"4109.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"4108.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 7]</text>\n<text text-anchor=\"start\" x=\"4094\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 127->129 -->\n<g id=\"edge129\" class=\"edge\"><title>127->129</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4144.43,-698.907C4144.93,-690.558 4145.46,-681.671 4145.98,-673.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4149.47,-673.212 4146.58,-663.021 4142.48,-672.794 4149.47,-673.212\"/>\n</g>\n<!-- 130 -->\n<g id=\"node131\" class=\"node\"><title>130</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3961,-536.5C3961,-536.5 3859,-536.5 3859,-536.5 3853,-536.5 3847,-530.5 3847,-524.5 3847,-524.5 3847,-480.5 3847,-480.5 3847,-474.5 3853,-468.5 3859,-468.5 3859,-468.5 3961,-468.5 3961,-468.5 3967,-468.5 3973,-474.5 3973,-480.5 3973,-480.5 3973,-524.5 3973,-524.5 3973,-530.5 3967,-536.5 3961,-536.5\"/>\n<text text-anchor=\"start\" x=\"3868\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3870.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3869.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 6]</text>\n<text text-anchor=\"start\" x=\"3855\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 129->130 -->\n<g id=\"edge130\" class=\"edge\"><title>129->130</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4056.9,-579.965C4032.37,-568.718 4006.01,-556.227 3982,-544 3980.27,-543.121 3978.53,-542.223 3976.78,-541.309\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3978.41,-538.215 3967.94,-536.632 3975.14,-544.402 3978.41,-538.215\"/>\n</g>\n<!-- 131 -->\n<g id=\"node132\" class=\"node\"><title>131</title>\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M4182.5,-544C4182.5,-544 4003.5,-544 4003.5,-544 3997.5,-544 3991.5,-538 3991.5,-532 3991.5,-532 3991.5,-473 3991.5,-473 3991.5,-467 3997.5,-461 4003.5,-461 4003.5,-461 4182.5,-461 4182.5,-461 4188.5,-461 4194.5,-467 4194.5,-473 4194.5,-473 4194.5,-532 4194.5,-532 4194.5,-538 4188.5,-544 4182.5,-544\"/>\n<text text-anchor=\"start\" x=\"3999.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.04</text>\n<text text-anchor=\"start\" x=\"4047\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\n<text text-anchor=\"start\" x=\"4053.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4052.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\n<text text-anchor=\"start\" x=\"4046\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 129->131 -->\n<g id=\"edge131\" class=\"edge\"><title>129->131</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4129.57,-579.907C4125.44,-571.286 4121.04,-562.09 4116.78,-553.175\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4119.87,-551.53 4112.39,-544.021 4113.55,-554.552 4119.87,-551.53\"/>\n</g>\n<!-- 132 -->\n<g id=\"node133\" class=\"node\"><title>132</title>\n<path fill=\"#eeab7b\" stroke=\"black\" d=\"M4008,-425C4008,-425 3772,-425 3772,-425 3766,-425 3760,-419 3760,-413 3760,-413 3760,-354 3760,-354 3760,-348 3766,-342 3772,-342 3772,-342 4008,-342 4008,-342 4014,-342 4020,-348 4020,-354 4020,-354 4020,-413 4020,-413 4020,-419 4014,-425 4008,-425\"/>\n<text text-anchor=\"start\" x=\"3768\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.835</text>\n<text text-anchor=\"start\" x=\"3840\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.811</text>\n<text text-anchor=\"start\" x=\"3850.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"3849.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 1]</text>\n<text text-anchor=\"start\" x=\"3843\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 131->132 -->\n<g id=\"edge132\" class=\"edge\"><title>131->132</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4022.57,-460.907C4005.41,-451.016 3986.93,-440.368 3969.39,-430.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3970.72,-426.982 3960.31,-425.021 3967.22,-433.047 3970.72,-426.982\"/>\n</g>\n<!-- 135 -->\n<g id=\"node136\" class=\"node\"><title>135</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4136,-417.5C4136,-417.5 4050,-417.5 4050,-417.5 4044,-417.5 4038,-411.5 4038,-405.5 4038,-405.5 4038,-361.5 4038,-361.5 4038,-355.5 4044,-349.5 4050,-349.5 4050,-349.5 4136,-349.5 4136,-349.5 4142,-349.5 4148,-355.5 4148,-361.5 4148,-361.5 4148,-405.5 4148,-405.5 4148,-411.5 4142,-417.5 4136,-417.5\"/>\n<text text-anchor=\"start\" x=\"4051\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4053.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4052.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4046\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 131->135 -->\n<g id=\"edge135\" class=\"edge\"><title>131->135</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4093,-460.907C4093,-450.204 4093,-438.615 4093,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4096.5,-427.667 4093,-417.667 4089.5,-427.667 4096.5,-427.667\"/>\n</g>\n<!-- 133 -->\n<g id=\"node134\" class=\"node\"><title>133</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M3873,-298.5C3873,-298.5 3771,-298.5 3771,-298.5 3765,-298.5 3759,-292.5 3759,-286.5 3759,-286.5 3759,-242.5 3759,-242.5 3759,-236.5 3765,-230.5 3771,-230.5 3771,-230.5 3873,-230.5 3873,-230.5 3879,-230.5 3885,-236.5 3885,-242.5 3885,-242.5 3885,-286.5 3885,-286.5 3885,-292.5 3879,-298.5 3873,-298.5\"/>\n<text text-anchor=\"start\" x=\"3780\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3782.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3781.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"3767\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 132->133 -->\n<g id=\"edge133\" class=\"edge\"><title>132->133</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3866.41,-341.907C3859.93,-330.763 3852.9,-318.658 3846.37,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3849.33,-305.554 3841.28,-298.667 3843.28,-309.072 3849.33,-305.554\"/>\n</g>\n<!-- 134 -->\n<g id=\"node135\" class=\"node\"><title>134</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4001,-298.5C4001,-298.5 3915,-298.5 3915,-298.5 3909,-298.5 3903,-292.5 3903,-286.5 3903,-286.5 3903,-242.5 3903,-242.5 3903,-236.5 3909,-230.5 3915,-230.5 3915,-230.5 4001,-230.5 4001,-230.5 4007,-230.5 4013,-236.5 4013,-242.5 4013,-242.5 4013,-286.5 4013,-286.5 4013,-292.5 4007,-298.5 4001,-298.5\"/>\n<text text-anchor=\"start\" x=\"3916\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"3918.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"3917.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [3, 0]</text>\n<text text-anchor=\"start\" x=\"3911\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 132->134 -->\n<g id=\"edge134\" class=\"edge\"><title>132->134</title>\n<path fill=\"none\" stroke=\"black\" d=\"M3913.59,-341.907C3920.07,-330.763 3927.1,-318.658 3933.63,-307.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"3936.72,-309.072 3938.72,-298.667 3930.67,-305.554 3936.72,-309.072\"/>\n</g>\n<!-- 137 -->\n<g id=\"node138\" class=\"node\"><title>137</title>\n<path fill=\"#e68742\" stroke=\"black\" d=\"M4425.5,-782C4425.5,-782 4238.5,-782 4238.5,-782 4232.5,-782 4226.5,-776 4226.5,-770 4226.5,-770 4226.5,-711 4226.5,-711 4226.5,-705 4232.5,-699 4238.5,-699 4238.5,-699 4425.5,-699 4425.5,-699 4431.5,-699 4437.5,-705 4437.5,-711 4437.5,-711 4437.5,-770 4437.5,-770 4437.5,-776 4431.5,-782 4425.5,-782\"/>\n<text text-anchor=\"start\" x=\"4234.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\n<text text-anchor=\"start\" x=\"4282\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.263</text>\n<text text-anchor=\"start\" x=\"4284.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 205</text>\n<text text-anchor=\"start\" x=\"4279\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [321, 15]</text>\n<text text-anchor=\"start\" x=\"4285\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 136->137 -->\n<g id=\"edge137\" class=\"edge\"><title>136->137</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4332,-817.907C4332,-809.649 4332,-800.864 4332,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4335.5,-792.021 4332,-782.021 4328.5,-792.021 4335.5,-792.021\"/>\n</g>\n<!-- 154 -->\n<g id=\"node155\" class=\"node\"><title>154</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4554,-774.5C4554,-774.5 4468,-774.5 4468,-774.5 4462,-774.5 4456,-768.5 4456,-762.5 4456,-762.5 4456,-718.5 4456,-718.5 4456,-712.5 4462,-706.5 4468,-706.5 4468,-706.5 4554,-706.5 4554,-706.5 4560,-706.5 4566,-712.5 4566,-718.5 4566,-718.5 4566,-762.5 4566,-762.5 4566,-768.5 4560,-774.5 4554,-774.5\"/>\n<text text-anchor=\"start\" x=\"4469\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4467.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 19</text>\n<text text-anchor=\"start\" x=\"4466.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [29, 0]</text>\n<text text-anchor=\"start\" x=\"4464\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 136->154 -->\n<g id=\"edge154\" class=\"edge\"><title>136->154</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4394.1,-817.907C4412.76,-805.714 4433.17,-792.373 4451.64,-780.298\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4453.8,-783.068 4460.26,-774.667 4449.97,-777.209 4453.8,-783.068\"/>\n</g>\n<!-- 138 -->\n<g id=\"node139\" class=\"node\"><title>138</title>\n<path fill=\"#e78b49\" stroke=\"black\" d=\"M4385.5,-663C4385.5,-663 4278.5,-663 4278.5,-663 4272.5,-663 4266.5,-657 4266.5,-651 4266.5,-651 4266.5,-592 4266.5,-592 4266.5,-586 4272.5,-580 4278.5,-580 4278.5,-580 4385.5,-580 4385.5,-580 4391.5,-580 4397.5,-586 4397.5,-592 4397.5,-592 4397.5,-651 4397.5,-651 4397.5,-657 4391.5,-663 4385.5,-663\"/>\n<text text-anchor=\"start\" x=\"4274.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 205.5</text>\n<text text-anchor=\"start\" x=\"4282\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.382</text>\n<text text-anchor=\"start\" x=\"4284.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 122</text>\n<text text-anchor=\"start\" x=\"4279\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [187, 15]</text>\n<text text-anchor=\"start\" x=\"4285\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 137->138 -->\n<g id=\"edge138\" class=\"edge\"><title>137->138</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4332,-698.907C4332,-690.649 4332,-681.864 4332,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4335.5,-673.021 4332,-663.021 4328.5,-673.021 4335.5,-673.021\"/>\n</g>\n<!-- 153 -->\n<g id=\"node154\" class=\"node\"><title>153</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4516.5,-655.5C4516.5,-655.5 4427.5,-655.5 4427.5,-655.5 4421.5,-655.5 4415.5,-649.5 4415.5,-643.5 4415.5,-643.5 4415.5,-599.5 4415.5,-599.5 4415.5,-593.5 4421.5,-587.5 4427.5,-587.5 4427.5,-587.5 4516.5,-587.5 4516.5,-587.5 4522.5,-587.5 4528.5,-593.5 4528.5,-599.5 4528.5,-599.5 4528.5,-643.5 4528.5,-643.5 4528.5,-649.5 4522.5,-655.5 4516.5,-655.5\"/>\n<text text-anchor=\"start\" x=\"4430\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4428.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 83</text>\n<text text-anchor=\"start\" x=\"4423.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [134, 0]</text>\n<text text-anchor=\"start\" x=\"4425\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 137->153 -->\n<g id=\"edge153\" class=\"edge\"><title>137->153</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4380.57,-698.907C4394.83,-686.99 4410.41,-673.976 4424.59,-662.12\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4426.88,-664.765 4432.31,-655.667 4422.4,-659.394 4426.88,-664.765\"/>\n</g>\n<!-- 139 -->\n<g id=\"node140\" class=\"node\"><title>139</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M4439,-544C4439,-544 4225,-544 4225,-544 4219,-544 4213,-538 4213,-532 4213,-532 4213,-473 4213,-473 4213,-467 4219,-461 4225,-461 4225,-461 4439,-461 4439,-461 4445,-461 4451,-467 4451,-473 4451,-473 4451,-532 4451,-532 4451,-538 4445,-544 4439,-544\"/>\n<text text-anchor=\"start\" x=\"4221\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.11</text>\n<text text-anchor=\"start\" x=\"4282\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.072</text>\n<text text-anchor=\"start\" x=\"4288.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 74</text>\n<text text-anchor=\"start\" x=\"4283.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [115, 1]</text>\n<text text-anchor=\"start\" x=\"4285\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 138->139 -->\n<g id=\"edge139\" class=\"edge\"><title>138->139</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4332,-579.907C4332,-571.649 4332,-562.864 4332,-554.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4335.5,-554.021 4332,-544.021 4328.5,-554.021 4335.5,-554.021\"/>\n</g>\n<!-- 146 -->\n<g id=\"node147\" class=\"node\"><title>146</title>\n<path fill=\"#ea9a5f\" stroke=\"black\" d=\"M4708.5,-544C4708.5,-544 4481.5,-544 4481.5,-544 4475.5,-544 4469.5,-538 4469.5,-532 4469.5,-532 4469.5,-473 4469.5,-473 4469.5,-467 4475.5,-461 4481.5,-461 4481.5,-461 4708.5,-461 4708.5,-461 4714.5,-461 4720.5,-467 4720.5,-473 4720.5,-473 4720.5,-532 4720.5,-532 4720.5,-538 4714.5,-544 4708.5,-544\"/>\n<text text-anchor=\"start\" x=\"4477.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.95</text>\n<text text-anchor=\"start\" x=\"4545\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.641</text>\n<text text-anchor=\"start\" x=\"4551.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\n<text text-anchor=\"start\" x=\"4546.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [72, 14]</text>\n<text text-anchor=\"start\" x=\"4548\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 138->146 -->\n<g id=\"edge146\" class=\"edge\"><title>138->146</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4397.56,-584.103C4400.4,-582.691 4403.22,-581.317 4406,-580 4429.4,-568.907 4454.86,-557.907 4479.29,-547.853\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4480.67,-551.072 4488.6,-544.048 4478.02,-544.593 4480.67,-551.072\"/>\n</g>\n<!-- 140 -->\n<g id=\"node141\" class=\"node\"><title>140</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4264,-417.5C4264,-417.5 4178,-417.5 4178,-417.5 4172,-417.5 4166,-411.5 4166,-405.5 4166,-405.5 4166,-361.5 4166,-361.5 4166,-355.5 4172,-349.5 4178,-349.5 4178,-349.5 4264,-349.5 4264,-349.5 4270,-349.5 4276,-355.5 4276,-361.5 4276,-361.5 4276,-405.5 4276,-405.5 4276,-411.5 4270,-417.5 4264,-417.5\"/>\n<text text-anchor=\"start\" x=\"4179\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4177.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 50</text>\n<text text-anchor=\"start\" x=\"4176.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [82, 0]</text>\n<text text-anchor=\"start\" x=\"4174\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 139->140 -->\n<g id=\"edge140\" class=\"edge\"><title>139->140</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4293.49,-460.907C4282.5,-449.321 4270.52,-436.698 4259.53,-425.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4261.89,-422.513 4252.47,-417.667 4256.81,-427.331 4261.89,-422.513\"/>\n</g>\n<!-- 141 -->\n<g id=\"node142\" class=\"node\"><title>141</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M4398,-425C4398,-425 4306,-425 4306,-425 4300,-425 4294,-419 4294,-413 4294,-413 4294,-354 4294,-354 4294,-348 4300,-342 4306,-342 4306,-342 4398,-342 4398,-342 4404,-342 4410,-348 4410,-354 4410,-354 4410,-413 4410,-413 4410,-419 4404,-425 4398,-425\"/>\n<text text-anchor=\"start\" x=\"4302.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"4302\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.191</text>\n<text text-anchor=\"start\" x=\"4308.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\n<text text-anchor=\"start\" x=\"4307.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [33, 1]</text>\n<text text-anchor=\"start\" x=\"4305\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 139->141 -->\n<g id=\"edge141\" class=\"edge\"><title>139->141</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4338.94,-460.907C4340.37,-452.558 4341.89,-443.671 4343.36,-435.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4346.84,-435.468 4345.07,-425.021 4339.94,-434.288 4346.84,-435.468\"/>\n</g>\n<!-- 142 -->\n<g id=\"node143\" class=\"node\"><title>142</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4283,-298.5C4283,-298.5 4197,-298.5 4197,-298.5 4191,-298.5 4185,-292.5 4185,-286.5 4185,-286.5 4185,-242.5 4185,-242.5 4185,-236.5 4191,-230.5 4197,-230.5 4197,-230.5 4283,-230.5 4283,-230.5 4289,-230.5 4295,-236.5 4295,-242.5 4295,-242.5 4295,-286.5 4295,-286.5 4295,-292.5 4289,-298.5 4283,-298.5\"/>\n<text text-anchor=\"start\" x=\"4198\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4196.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 16</text>\n<text text-anchor=\"start\" x=\"4195.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [25, 0]</text>\n<text text-anchor=\"start\" x=\"4193\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 141->142 -->\n<g id=\"edge142\" class=\"edge\"><title>141->142</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4313.14,-341.907C4302.05,-330.321 4289.97,-317.698 4278.88,-306.111\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4281.19,-303.47 4271.75,-298.667 4276.14,-308.311 4281.19,-303.47\"/>\n</g>\n<!-- 143 -->\n<g id=\"node144\" class=\"node\"><title>143</title>\n<path fill=\"#e89152\" stroke=\"black\" d=\"M4417,-306C4417,-306 4325,-306 4325,-306 4319,-306 4313,-300 4313,-294 4313,-294 4313,-235 4313,-235 4313,-229 4319,-223 4325,-223 4325,-223 4417,-223 4417,-223 4423,-223 4429,-229 4429,-235 4429,-235 4429,-294 4429,-294 4429,-300 4423,-306 4417,-306\"/>\n<text text-anchor=\"start\" x=\"4326\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.0</text>\n<text text-anchor=\"start\" x=\"4321\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.503</text>\n<text text-anchor=\"start\" x=\"4331.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 8</text>\n<text text-anchor=\"start\" x=\"4330.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 1]</text>\n<text text-anchor=\"start\" x=\"4324\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 141->143 -->\n<g id=\"edge143\" class=\"edge\"><title>141->143</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4358.59,-341.907C4359.95,-333.558 4361.39,-324.671 4362.8,-316.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4366.27,-316.453 4364.42,-306.021 4359.36,-315.33 4366.27,-316.453\"/>\n</g>\n<!-- 144 -->\n<g id=\"node145\" class=\"node\"><title>144</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4291,-179.5C4291,-179.5 4189,-179.5 4189,-179.5 4183,-179.5 4177,-173.5 4177,-167.5 4177,-167.5 4177,-123.5 4177,-123.5 4177,-117.5 4183,-111.5 4189,-111.5 4189,-111.5 4291,-111.5 4291,-111.5 4297,-111.5 4303,-117.5 4303,-123.5 4303,-123.5 4303,-167.5 4303,-167.5 4303,-173.5 4297,-179.5 4291,-179.5\"/>\n<text text-anchor=\"start\" x=\"4198\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4200.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4199.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4185\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 143->144 -->\n<g id=\"edge144\" class=\"edge\"><title>143->144</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4325.55,-222.907C4312.33,-211.101 4297.9,-198.217 4284.73,-186.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4286.93,-183.718 4277.14,-179.667 4282.26,-188.939 4286.93,-183.718\"/>\n</g>\n<!-- 145 -->\n<g id=\"node146\" class=\"node\"><title>145</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4419,-179.5C4419,-179.5 4333,-179.5 4333,-179.5 4327,-179.5 4321,-173.5 4321,-167.5 4321,-167.5 4321,-123.5 4321,-123.5 4321,-117.5 4327,-111.5 4333,-111.5 4333,-111.5 4419,-111.5 4419,-111.5 4425,-111.5 4431,-117.5 4431,-123.5 4431,-123.5 4431,-167.5 4431,-167.5 4431,-173.5 4425,-179.5 4419,-179.5\"/>\n<text text-anchor=\"start\" x=\"4334\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4336.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"4335.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 0]</text>\n<text text-anchor=\"start\" x=\"4329\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 143->145 -->\n<g id=\"edge145\" class=\"edge\"><title>143->145</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4372.73,-222.907C4373.19,-212.204 4373.69,-200.615 4374.15,-189.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4377.65,-189.807 4374.58,-179.667 4370.66,-189.508 4377.65,-189.807\"/>\n</g>\n<!-- 147 -->\n<g id=\"node148\" class=\"node\"><title>147</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4542,-417.5C4542,-417.5 4440,-417.5 4440,-417.5 4434,-417.5 4428,-411.5 4428,-405.5 4428,-405.5 4428,-361.5 4428,-361.5 4428,-355.5 4434,-349.5 4440,-349.5 4440,-349.5 4542,-349.5 4542,-349.5 4548,-349.5 4554,-355.5 4554,-361.5 4554,-361.5 4554,-405.5 4554,-405.5 4554,-411.5 4548,-417.5 4542,-417.5\"/>\n<text text-anchor=\"start\" x=\"4449\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4451.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4450.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4436\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 146->147 -->\n<g id=\"edge147\" class=\"edge\"><title>146->147</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4558.92,-460.907C4548.72,-449.432 4537.61,-436.938 4527.39,-425.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4529.74,-422.816 4520.48,-417.667 4524.51,-427.466 4529.74,-422.816\"/>\n</g>\n<!-- 148 -->\n<g id=\"node149\" class=\"node\"><title>148</title>\n<path fill=\"#ea985d\" stroke=\"black\" d=\"M4745.5,-425C4745.5,-425 4584.5,-425 4584.5,-425 4578.5,-425 4572.5,-419 4572.5,-413 4572.5,-413 4572.5,-354 4572.5,-354 4572.5,-348 4578.5,-342 4584.5,-342 4584.5,-342 4745.5,-342 4745.5,-342 4751.5,-342 4757.5,-348 4757.5,-354 4757.5,-354 4757.5,-413 4757.5,-413 4757.5,-419 4751.5,-425 4745.5,-425\"/>\n<text text-anchor=\"start\" x=\"4580.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 45.5</text>\n<text text-anchor=\"start\" x=\"4615\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.617</text>\n<text text-anchor=\"start\" x=\"4621.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 47</text>\n<text text-anchor=\"start\" x=\"4616.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [72, 13]</text>\n<text text-anchor=\"start\" x=\"4618\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 146->148 -->\n<g id=\"edge148\" class=\"edge\"><title>146->148</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4619.29,-460.907C4624.55,-452.105 4630.18,-442.703 4635.62,-433.612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4638.63,-435.399 4640.76,-425.021 4632.62,-431.805 4638.63,-435.399\"/>\n</g>\n<!-- 149 -->\n<g id=\"node150\" class=\"node\"><title>149</title>\n<path fill=\"#c2e1f7\" stroke=\"black\" d=\"M4580,-306C4580,-306 4478,-306 4478,-306 4472,-306 4466,-300 4466,-294 4466,-294 4466,-235 4466,-235 4466,-229 4472,-223 4478,-223 4478,-223 4580,-223 4580,-223 4586,-223 4592,-229 4592,-235 4592,-235 4592,-294 4592,-294 4592,-300 4586,-306 4580,-306\"/>\n<text text-anchor=\"start\" x=\"4484\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">service ≤ 50.5</text>\n<text text-anchor=\"start\" x=\"4479\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.976</text>\n<text text-anchor=\"start\" x=\"4485.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"4484.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 13]</text>\n<text text-anchor=\"start\" x=\"4474\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 148->149 -->\n<g id=\"edge149\" class=\"edge\"><title>148->149</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4617.82,-341.907C4606.84,-332.469 4595.07,-322.343 4583.81,-312.649\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4585.96,-309.889 4576.1,-306.021 4581.4,-315.196 4585.96,-309.889\"/>\n</g>\n<!-- 152 -->\n<g id=\"node153\" class=\"node\"><title>152</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4708,-298.5C4708,-298.5 4622,-298.5 4622,-298.5 4616,-298.5 4610,-292.5 4610,-286.5 4610,-286.5 4610,-242.5 4610,-242.5 4610,-236.5 4616,-230.5 4622,-230.5 4622,-230.5 4708,-230.5 4708,-230.5 4714,-230.5 4720,-236.5 4720,-242.5 4720,-242.5 4720,-286.5 4720,-286.5 4720,-292.5 4714,-298.5 4708,-298.5\"/>\n<text text-anchor=\"start\" x=\"4623\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4621.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 37</text>\n<text text-anchor=\"start\" x=\"4620.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [63, 0]</text>\n<text text-anchor=\"start\" x=\"4618\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 148->152 -->\n<g id=\"edge152\" class=\"edge\"><title>148->152</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4665,-341.907C4665,-331.204 4665,-319.615 4665,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4668.5,-308.667 4665,-298.667 4661.5,-308.667 4668.5,-308.667\"/>\n</g>\n<!-- 150 -->\n<g id=\"node151\" class=\"node\"><title>150</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4574,-179.5C4574,-179.5 4472,-179.5 4472,-179.5 4466,-179.5 4460,-173.5 4460,-167.5 4460,-167.5 4460,-123.5 4460,-123.5 4460,-117.5 4466,-111.5 4472,-111.5 4472,-111.5 4574,-111.5 4574,-111.5 4580,-111.5 4586,-117.5 4586,-123.5 4586,-123.5 4586,-167.5 4586,-167.5 4586,-173.5 4580,-179.5 4574,-179.5\"/>\n<text text-anchor=\"start\" x=\"4481\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4483.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"4478.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 13]</text>\n<text text-anchor=\"start\" x=\"4468\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 149->150 -->\n<g id=\"edge150\" class=\"edge\"><title>149->150</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4526.92,-222.907C4526.37,-212.204 4525.78,-200.615 4525.22,-189.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4528.71,-189.475 4524.7,-179.667 4521.72,-189.833 4528.71,-189.475\"/>\n</g>\n<!-- 151 -->\n<g id=\"node152\" class=\"node\"><title>151</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4702,-179.5C4702,-179.5 4616,-179.5 4616,-179.5 4610,-179.5 4604,-173.5 4604,-167.5 4604,-167.5 4604,-123.5 4604,-123.5 4604,-117.5 4610,-111.5 4616,-111.5 4616,-111.5 4702,-111.5 4702,-111.5 4708,-111.5 4714,-117.5 4714,-123.5 4714,-123.5 4714,-167.5 4714,-167.5 4714,-173.5 4708,-179.5 4702,-179.5\"/>\n<text text-anchor=\"start\" x=\"4617\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4619.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"4618.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [9, 0]</text>\n<text text-anchor=\"start\" x=\"4612\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 149->151 -->\n<g id=\"edge151\" class=\"edge\"><title>149->151</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4574.1,-222.907C4587.22,-211.101 4601.54,-198.217 4614.61,-186.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4617.06,-188.958 4622.15,-179.667 4612.37,-183.755 4617.06,-188.958\"/>\n</g>\n<!-- 156 -->\n<g id=\"node157\" class=\"node\"><title>156</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4436,-1012.5C4436,-1012.5 4338,-1012.5 4338,-1012.5 4332,-1012.5 4326,-1006.5 4326,-1000.5 4326,-1000.5 4326,-956.5 4326,-956.5 4326,-950.5 4332,-944.5 4338,-944.5 4338,-944.5 4436,-944.5 4436,-944.5 4442,-944.5 4448,-950.5 4448,-956.5 4448,-956.5 4448,-1000.5 4448,-1000.5 4448,-1006.5 4442,-1012.5 4436,-1012.5\"/>\n<text text-anchor=\"start\" x=\"4345\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4335.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2699</text>\n<text text-anchor=\"start\" x=\"4334\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4362, 0]</text>\n<text text-anchor=\"start\" x=\"4340\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 155->156 -->\n<g id=\"edge156\" class=\"edge\"><title>155->156</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4387,-1055.91C4387,-1045.2 4387,-1033.62 4387,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4390.5,-1022.67 4387,-1012.67 4383.5,-1022.67 4390.5,-1022.67\"/>\n</g>\n<!-- 157 -->\n<g id=\"node158\" class=\"node\"><title>157</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M4589.5,-1020C4589.5,-1020 4478.5,-1020 4478.5,-1020 4472.5,-1020 4466.5,-1014 4466.5,-1008 4466.5,-1008 4466.5,-949 4466.5,-949 4466.5,-943 4472.5,-937 4478.5,-937 4478.5,-937 4589.5,-937 4589.5,-937 4595.5,-937 4601.5,-943 4601.5,-949 4601.5,-949 4601.5,-1008 4601.5,-1008 4601.5,-1014 4595.5,-1020 4589.5,-1020\"/>\n<text text-anchor=\"start\" x=\"4474.5\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">rerror_rate ≤ 0.155</text>\n<text text-anchor=\"start\" x=\"4484\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.073</text>\n<text text-anchor=\"start\" x=\"4490.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 74</text>\n<text text-anchor=\"start\" x=\"4485.5\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [113, 1]</text>\n<text text-anchor=\"start\" x=\"4487\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 155->157 -->\n<g id=\"edge157\" class=\"edge\"><title>155->157</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4438,-1055.91C4449.97,-1046.38 4462.83,-1036.15 4475.11,-1026.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4477.44,-1028.99 4483.09,-1020.02 4473.09,-1023.51 4477.44,-1028.99\"/>\n</g>\n<!-- 158 -->\n<g id=\"node159\" class=\"node\"><title>158</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4566.5,-893.5C4566.5,-893.5 4477.5,-893.5 4477.5,-893.5 4471.5,-893.5 4465.5,-887.5 4465.5,-881.5 4465.5,-881.5 4465.5,-837.5 4465.5,-837.5 4465.5,-831.5 4471.5,-825.5 4477.5,-825.5 4477.5,-825.5 4566.5,-825.5 4566.5,-825.5 4572.5,-825.5 4578.5,-831.5 4578.5,-837.5 4578.5,-837.5 4578.5,-881.5 4578.5,-881.5 4578.5,-887.5 4572.5,-893.5 4566.5,-893.5\"/>\n<text text-anchor=\"start\" x=\"4480\" y=\"-878.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4478.5\" y=\"-863.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 70</text>\n<text text-anchor=\"start\" x=\"4473.5\" y=\"-848.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [108, 0]</text>\n<text text-anchor=\"start\" x=\"4475\" y=\"-833.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 157->158 -->\n<g id=\"edge158\" class=\"edge\"><title>157->158</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4529.84,-936.907C4528.74,-926.204 4527.55,-914.615 4526.44,-903.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4529.9,-903.258 4525.4,-893.667 4522.94,-903.972 4529.9,-903.258\"/>\n</g>\n<!-- 159 -->\n<g id=\"node160\" class=\"node\"><title>159</title>\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M4699.5,-901C4699.5,-901 4608.5,-901 4608.5,-901 4602.5,-901 4596.5,-895 4596.5,-889 4596.5,-889 4596.5,-830 4596.5,-830 4596.5,-824 4602.5,-818 4608.5,-818 4608.5,-818 4699.5,-818 4699.5,-818 4705.5,-818 4711.5,-824 4711.5,-830 4711.5,-830 4711.5,-889 4711.5,-889 4711.5,-895 4705.5,-901 4699.5,-901\"/>\n<text text-anchor=\"start\" x=\"4604.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"4608\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\n<text text-anchor=\"start\" x=\"4614.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"4613.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\n<text text-anchor=\"start\" x=\"4607\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 157->159 -->\n<g id=\"edge159\" class=\"edge\"><title>157->159</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4575.63,-936.907C4585.13,-927.651 4595.3,-917.732 4605.07,-908.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4607.72,-910.508 4612.44,-901.021 4602.84,-905.496 4607.72,-910.508\"/>\n</g>\n<!-- 160 -->\n<g id=\"node161\" class=\"node\"><title>160</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4699,-774.5C4699,-774.5 4597,-774.5 4597,-774.5 4591,-774.5 4585,-768.5 4585,-762.5 4585,-762.5 4585,-718.5 4585,-718.5 4585,-712.5 4591,-706.5 4597,-706.5 4597,-706.5 4699,-706.5 4699,-706.5 4705,-706.5 4711,-712.5 4711,-718.5 4711,-718.5 4711,-762.5 4711,-762.5 4711,-768.5 4705,-774.5 4699,-774.5\"/>\n<text text-anchor=\"start\" x=\"4606\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4608.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4607.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"4593\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 159->160 -->\n<g id=\"edge160\" class=\"edge\"><title>159->160</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4651.92,-817.907C4651.37,-807.204 4650.78,-795.615 4650.22,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4653.71,-784.475 4649.7,-774.667 4646.72,-784.833 4653.71,-784.475\"/>\n</g>\n<!-- 161 -->\n<g id=\"node162\" class=\"node\"><title>161</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4827,-774.5C4827,-774.5 4741,-774.5 4741,-774.5 4735,-774.5 4729,-768.5 4729,-762.5 4729,-762.5 4729,-718.5 4729,-718.5 4729,-712.5 4735,-706.5 4741,-706.5 4741,-706.5 4827,-706.5 4827,-706.5 4833,-706.5 4839,-712.5 4839,-718.5 4839,-718.5 4839,-762.5 4839,-762.5 4839,-768.5 4833,-774.5 4827,-774.5\"/>\n<text text-anchor=\"start\" x=\"4742\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4744.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4743.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"4737\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 159->161 -->\n<g id=\"edge161\" class=\"edge\"><title>159->161</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4699.1,-817.907C4712.22,-806.101 4726.54,-793.217 4739.61,-781.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4742.06,-783.958 4747.15,-774.667 4737.37,-778.755 4742.06,-783.958\"/>\n</g>\n<!-- 163 -->\n<g id=\"node164\" class=\"node\"><title>163</title>\n<path fill=\"#e99355\" stroke=\"black\" d=\"M6554,-1139C6554,-1139 6380,-1139 6380,-1139 6374,-1139 6368,-1133 6368,-1127 6368,-1127 6368,-1068 6368,-1068 6368,-1062 6374,-1056 6380,-1056 6380,-1056 6554,-1056 6554,-1056 6560,-1056 6566,-1062 6566,-1068 6566,-1068 6566,-1127 6566,-1127 6566,-1133 6560,-1139 6554,-1139\"/>\n<text text-anchor=\"start\" x=\"6376\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_rerror_rate ≤ 0.005</text>\n<text text-anchor=\"start\" x=\"6417\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.543</text>\n<text text-anchor=\"start\" x=\"6415.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1512</text>\n<text text-anchor=\"start\" x=\"6406\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2095, 299]</text>\n<text text-anchor=\"start\" x=\"6420\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 162->163 -->\n<g id=\"edge163\" class=\"edge\"><title>162->163</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6467,-1174.91C6467,-1166.65 6467,-1157.86 6467,-1149.3\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6470.5,-1149.02 6467,-1139.02 6463.5,-1149.02 6470.5,-1149.02\"/>\n</g>\n<!-- 238 -->\n<g id=\"node239\" class=\"node\"><title>238</title>\n<path fill=\"#59ade9\" stroke=\"black\" d=\"M6892,-1139C6892,-1139 6790,-1139 6790,-1139 6784,-1139 6778,-1133 6778,-1127 6778,-1127 6778,-1068 6778,-1068 6778,-1062 6784,-1056 6790,-1056 6790,-1056 6892,-1056 6892,-1056 6898,-1056 6904,-1062 6904,-1068 6904,-1068 6904,-1127 6904,-1127 6904,-1133 6898,-1139 6892,-1139\"/>\n<text text-anchor=\"start\" x=\"6792\" y=\"-1123.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2.0</text>\n<text text-anchor=\"start\" x=\"6791\" y=\"-1108.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.581</text>\n<text text-anchor=\"start\" x=\"6793.5\" y=\"-1093.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 269</text>\n<text text-anchor=\"start\" x=\"6788\" y=\"-1078.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [57, 354]</text>\n<text text-anchor=\"start\" x=\"6786\" y=\"-1063.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 162->238 -->\n<g id=\"edge238\" class=\"edge\"><title>162->238</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6536.03,-1193.9C6602.02,-1173.26 6701.12,-1142.26 6768.3,-1121.24\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6769.47,-1124.54 6777.97,-1118.22 6767.38,-1117.86 6769.47,-1124.54\"/>\n</g>\n<!-- 164 -->\n<g id=\"node165\" class=\"node\"><title>164</title>\n<path fill=\"#e78b48\" stroke=\"black\" d=\"M6354,-1020C6354,-1020 6240,-1020 6240,-1020 6234,-1020 6228,-1014 6228,-1008 6228,-1008 6228,-949 6228,-949 6228,-943 6234,-937 6240,-937 6240,-937 6354,-937 6354,-937 6360,-937 6366,-943 6366,-949 6366,-949 6366,-1008 6366,-1008 6366,-1014 6360,-1020 6354,-1020\"/>\n<text text-anchor=\"start\" x=\"6250\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 40.0</text>\n<text text-anchor=\"start\" x=\"6247\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.375</text>\n<text text-anchor=\"start\" x=\"6245.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1264</text>\n<text text-anchor=\"start\" x=\"6236\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1856, 145]</text>\n<text text-anchor=\"start\" x=\"6250\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 163->164 -->\n<g id=\"edge164\" class=\"edge\"><title>163->164</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6408.02,-1055.91C6393.91,-1046.2 6378.74,-1035.76 6364.29,-1025.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6366.1,-1022.81 6355.88,-1020.02 6362.13,-1028.57 6366.1,-1022.81\"/>\n</g>\n<!-- 217 -->\n<g id=\"node218\" class=\"node\"><title>217</title>\n<path fill=\"#f6d2b9\" stroke=\"black\" d=\"M6748,-1020C6748,-1020 6526,-1020 6526,-1020 6520,-1020 6514,-1014 6514,-1008 6514,-1008 6514,-949 6514,-949 6514,-943 6520,-937 6526,-937 6526,-937 6748,-937 6748,-937 6754,-937 6760,-943 6760,-949 6760,-949 6760,-1008 6760,-1008 6760,-1014 6754,-1020 6748,-1020\"/>\n<text text-anchor=\"start\" x=\"6522\" y=\"-1004.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.005</text>\n<text text-anchor=\"start\" x=\"6587\" y=\"-989.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.966</text>\n<text text-anchor=\"start\" x=\"6589.5\" y=\"-974.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 248</text>\n<text text-anchor=\"start\" x=\"6580\" y=\"-959.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [239, 154]</text>\n<text text-anchor=\"start\" x=\"6590\" y=\"-944.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 163->217 -->\n<g id=\"edge217\" class=\"edge\"><title>163->217</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6525.98,-1055.91C6540.09,-1046.2 6555.26,-1035.76 6569.71,-1025.81\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6571.87,-1028.57 6578.12,-1020.02 6567.9,-1022.81 6571.87,-1028.57\"/>\n</g>\n<!-- 165 -->\n<g id=\"node166\" class=\"node\"><title>165</title>\n<path fill=\"#e78a46\" stroke=\"black\" d=\"M5711,-901C5711,-901 5597,-901 5597,-901 5591,-901 5585,-895 5585,-889 5585,-889 5585,-830 5585,-830 5585,-824 5591,-818 5597,-818 5597,-818 5711,-818 5711,-818 5717,-818 5723,-824 5723,-830 5723,-830 5723,-889 5723,-889 5723,-895 5717,-901 5711,-901\"/>\n<text text-anchor=\"start\" x=\"5622\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 26.0</text>\n<text text-anchor=\"start\" x=\"5608\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.34</text>\n<text text-anchor=\"start\" x=\"5602.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1216</text>\n<text text-anchor=\"start\" x=\"5593\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1808, 122]</text>\n<text text-anchor=\"start\" x=\"5607\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 164->165 -->\n<g id=\"edge165\" class=\"edge\"><title>164->165</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6227.88,-964.923C6107.56,-943.03 5860.34,-898.046 5733.27,-874.923\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5733.68,-871.44 5723.21,-873.094 5732.42,-878.327 5733.68,-871.44\"/>\n</g>\n<!-- 206 -->\n<g id=\"node207\" class=\"node\"><title>206</title>\n<path fill=\"#f1bd98\" stroke=\"black\" d=\"M6410.5,-901C6410.5,-901 6183.5,-901 6183.5,-901 6177.5,-901 6171.5,-895 6171.5,-889 6171.5,-889 6171.5,-830 6171.5,-830 6171.5,-824 6177.5,-818 6183.5,-818 6183.5,-818 6410.5,-818 6410.5,-818 6416.5,-818 6422.5,-824 6422.5,-830 6422.5,-830 6422.5,-889 6422.5,-889 6422.5,-895 6416.5,-901 6410.5,-901\"/>\n<text text-anchor=\"start\" x=\"6179.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.16</text>\n<text text-anchor=\"start\" x=\"6247\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.909</text>\n<text text-anchor=\"start\" x=\"6253.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 48</text>\n<text text-anchor=\"start\" x=\"6248.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [48, 23]</text>\n<text text-anchor=\"start\" x=\"6250\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 164->206 -->\n<g id=\"edge206\" class=\"edge\"><title>164->206</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6297,-936.907C6297,-928.649 6297,-919.864 6297,-911.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6300.5,-911.021 6297,-901.021 6293.5,-911.021 6300.5,-911.021\"/>\n</g>\n<!-- 166 -->\n<g id=\"node167\" class=\"node\"><title>166</title>\n<path fill=\"#e68844\" stroke=\"black\" d=\"M5489.5,-782C5489.5,-782 5328.5,-782 5328.5,-782 5322.5,-782 5316.5,-776 5316.5,-770 5316.5,-770 5316.5,-711 5316.5,-711 5316.5,-705 5322.5,-699 5328.5,-699 5328.5,-699 5489.5,-699 5489.5,-699 5495.5,-699 5501.5,-705 5501.5,-711 5501.5,-711 5501.5,-770 5501.5,-770 5501.5,-776 5495.5,-782 5489.5,-782\"/>\n<text text-anchor=\"start\" x=\"5324.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_count ≤ 50.5</text>\n<text text-anchor=\"start\" x=\"5359\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.303</text>\n<text text-anchor=\"start\" x=\"5357.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1186</text>\n<text text-anchor=\"start\" x=\"5348\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1785, 102]</text>\n<text text-anchor=\"start\" x=\"5362\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 165->166 -->\n<g id=\"edge166\" class=\"edge\"><title>165->166</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5584.78,-825.442C5559.48,-813.36 5530.41,-799.48 5503.3,-786.532\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5504.72,-783.331 5494.18,-782.18 5501.7,-789.648 5504.72,-783.331\"/>\n</g>\n<!-- 201 -->\n<g id=\"node202\" class=\"node\"><title>201</title>\n<path fill=\"#fcefe5\" stroke=\"black\" d=\"M5725,-782C5725,-782 5583,-782 5583,-782 5577,-782 5571,-776 5571,-770 5571,-770 5571,-711 5571,-711 5571,-705 5577,-699 5583,-699 5583,-699 5725,-699 5725,-699 5731,-699 5737,-705 5737,-711 5737,-711 5737,-770 5737,-770 5737,-776 5731,-782 5725,-782\"/>\n<text text-anchor=\"start\" x=\"5579\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 247.5</text>\n<text text-anchor=\"start\" x=\"5604\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.996</text>\n<text text-anchor=\"start\" x=\"5610.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 30</text>\n<text text-anchor=\"start\" x=\"5605.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [23, 20]</text>\n<text text-anchor=\"start\" x=\"5607\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 165->201 -->\n<g id=\"edge201\" class=\"edge\"><title>165->201</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5654,-817.907C5654,-809.649 5654,-800.864 5654,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5657.5,-792.021 5654,-782.021 5650.5,-792.021 5657.5,-792.021\"/>\n</g>\n<!-- 167 -->\n<g id=\"node168\" class=\"node\"><title>167</title>\n<path fill=\"#eda774\" stroke=\"black\" d=\"M5305.5,-663C5305.5,-663 5190.5,-663 5190.5,-663 5184.5,-663 5178.5,-657 5178.5,-651 5178.5,-651 5178.5,-592 5178.5,-592 5178.5,-586 5184.5,-580 5190.5,-580 5190.5,-580 5305.5,-580 5305.5,-580 5311.5,-580 5317.5,-586 5317.5,-592 5317.5,-592 5317.5,-651 5317.5,-651 5317.5,-657 5311.5,-663 5305.5,-663\"/>\n<text text-anchor=\"start\" x=\"5186.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.5</text>\n<text text-anchor=\"start\" x=\"5198\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.778</text>\n<text text-anchor=\"start\" x=\"5200.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 243</text>\n<text text-anchor=\"start\" x=\"5195\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [285, 85]</text>\n<text text-anchor=\"start\" x=\"5201\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 166->167 -->\n<g id=\"edge167\" class=\"edge\"><title>166->167</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5353.14,-698.907C5339.9,-689.288 5325.68,-678.953 5312.11,-669.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5313.91,-666.068 5303.76,-663.021 5309.79,-671.731 5313.91,-666.068\"/>\n</g>\n<!-- 186 -->\n<g id=\"node187\" class=\"node\"><title>186</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M5462,-663C5462,-663 5356,-663 5356,-663 5350,-663 5344,-657 5344,-651 5344,-651 5344,-592 5344,-592 5344,-586 5350,-580 5356,-580 5356,-580 5462,-580 5462,-580 5468,-580 5474,-586 5474,-592 5474,-592 5474,-651 5474,-651 5474,-657 5468,-663 5462,-663\"/>\n<text text-anchor=\"start\" x=\"5359.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">logged_in ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"5359\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.089</text>\n<text text-anchor=\"start\" x=\"5361.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 943</text>\n<text text-anchor=\"start\" x=\"5352\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1500, 17]</text>\n<text text-anchor=\"start\" x=\"5362\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 166->186 -->\n<g id=\"edge186\" class=\"edge\"><title>166->186</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5409,-698.907C5409,-690.649 5409,-681.864 5409,-673.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5412.5,-673.021 5409,-663.021 5405.5,-673.021 5412.5,-673.021\"/>\n</g>\n<!-- 168 -->\n<g id=\"node169\" class=\"node\"><title>168</title>\n<path fill=\"#eb9e66\" stroke=\"black\" d=\"M5154.5,-544C5154.5,-544 5047.5,-544 5047.5,-544 5041.5,-544 5035.5,-538 5035.5,-532 5035.5,-532 5035.5,-473 5035.5,-473 5035.5,-467 5041.5,-461 5047.5,-461 5047.5,-461 5154.5,-461 5154.5,-461 5160.5,-461 5166.5,-467 5166.5,-473 5166.5,-473 5166.5,-532 5166.5,-532 5166.5,-538 5160.5,-544 5154.5,-544\"/>\n<text text-anchor=\"start\" x=\"5043.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 337.5</text>\n<text text-anchor=\"start\" x=\"5051\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.692</text>\n<text text-anchor=\"start\" x=\"5053.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 226</text>\n<text text-anchor=\"start\" x=\"5048\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [285, 65]</text>\n<text text-anchor=\"start\" x=\"5054\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 167->168 -->\n<g id=\"edge168\" class=\"edge\"><title>167->168</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5197,-579.907C5185.03,-570.379 5172.17,-560.148 5159.89,-550.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5161.91,-547.51 5151.91,-544.021 5157.56,-552.987 5161.91,-547.51\"/>\n</g>\n<!-- 185 -->\n<g id=\"node186\" class=\"node\"><title>185</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5299,-536.5C5299,-536.5 5197,-536.5 5197,-536.5 5191,-536.5 5185,-530.5 5185,-524.5 5185,-524.5 5185,-480.5 5185,-480.5 5185,-474.5 5191,-468.5 5197,-468.5 5197,-468.5 5299,-468.5 5299,-468.5 5305,-468.5 5311,-474.5 5311,-480.5 5311,-480.5 5311,-524.5 5311,-524.5 5311,-530.5 5305,-536.5 5299,-536.5\"/>\n<text text-anchor=\"start\" x=\"5206\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5204.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"5203.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 20]</text>\n<text text-anchor=\"start\" x=\"5193\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 167->185 -->\n<g id=\"edge185\" class=\"edge\"><title>167->185</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5248,-579.907C5248,-569.204 5248,-557.615 5248,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5251.5,-546.667 5248,-536.667 5244.5,-546.667 5251.5,-546.667\"/>\n</g>\n<!-- 169 -->\n<g id=\"node170\" class=\"node\"><title>169</title>\n<path fill=\"#3c9fe5\" stroke=\"black\" d=\"M5035,-425C5035,-425 4799,-425 4799,-425 4793,-425 4787,-419 4787,-413 4787,-413 4787,-354 4787,-354 4787,-348 4793,-342 4799,-342 4799,-342 5035,-342 5035,-342 5041,-342 5047,-348 5047,-354 5047,-354 5047,-413 5047,-413 5047,-419 5041,-425 5035,-425\"/>\n<text text-anchor=\"start\" x=\"4795\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.335</text>\n<text text-anchor=\"start\" x=\"4867\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.126</text>\n<text text-anchor=\"start\" x=\"4873.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 40</text>\n<text text-anchor=\"start\" x=\"4872.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 57]</text>\n<text text-anchor=\"start\" x=\"4862\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 168->169 -->\n<g id=\"edge169\" class=\"edge\"><title>168->169</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5037.16,-460.907C5021.75,-451.106 5005.17,-440.563 4989.39,-430.533\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4991.04,-427.433 4980.73,-425.021 4987.29,-433.34 4991.04,-427.433\"/>\n</g>\n<!-- 172 -->\n<g id=\"node173\" class=\"node\"><title>172</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M5169,-425C5169,-425 5077,-425 5077,-425 5071,-425 5065,-419 5065,-413 5065,-413 5065,-354 5065,-354 5065,-348 5071,-342 5077,-342 5077,-342 5169,-342 5169,-342 5175,-342 5181,-348 5181,-354 5181,-354 5181,-413 5181,-413 5181,-419 5175,-425 5169,-425\"/>\n<text text-anchor=\"start\" x=\"5093.5\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">flag ≤ 6.0</text>\n<text text-anchor=\"start\" x=\"5073\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.181</text>\n<text text-anchor=\"start\" x=\"5075.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 186</text>\n<text text-anchor=\"start\" x=\"5074.5\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [284, 8]</text>\n<text text-anchor=\"start\" x=\"5076\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 168->172 -->\n<g id=\"edge172\" class=\"edge\"><title>168->172</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5108.63,-460.907C5110.2,-452.558 5111.87,-443.671 5113.5,-435.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5116.97,-435.495 5115.38,-425.021 5110.09,-434.202 5116.97,-435.495\"/>\n</g>\n<!-- 170 -->\n<g id=\"node171\" class=\"node\"><title>170</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4836,-298.5C4836,-298.5 4750,-298.5 4750,-298.5 4744,-298.5 4738,-292.5 4738,-286.5 4738,-286.5 4738,-242.5 4738,-242.5 4738,-236.5 4744,-230.5 4750,-230.5 4750,-230.5 4836,-230.5 4836,-230.5 4842,-230.5 4848,-236.5 4848,-242.5 4848,-242.5 4848,-286.5 4848,-286.5 4848,-292.5 4842,-298.5 4836,-298.5\"/>\n<text text-anchor=\"start\" x=\"4751\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4753.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4752.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"4746\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 169->170 -->\n<g id=\"edge170\" class=\"edge\"><title>169->170</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4873.98,-341.907C4861.58,-330.211 4848.07,-317.457 4835.69,-305.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4837.83,-302.984 4828.15,-298.667 4833.02,-308.075 4837.83,-302.984\"/>\n</g>\n<!-- 171 -->\n<g id=\"node172\" class=\"node\"><title>171</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4980,-298.5C4980,-298.5 4878,-298.5 4878,-298.5 4872,-298.5 4866,-292.5 4866,-286.5 4866,-286.5 4866,-242.5 4866,-242.5 4866,-236.5 4872,-230.5 4878,-230.5 4878,-230.5 4980,-230.5 4980,-230.5 4986,-230.5 4992,-236.5 4992,-242.5 4992,-242.5 4992,-286.5 4992,-286.5 4992,-292.5 4986,-298.5 4980,-298.5\"/>\n<text text-anchor=\"start\" x=\"4887\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4885.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 39</text>\n<text text-anchor=\"start\" x=\"4884.5\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 57]</text>\n<text text-anchor=\"start\" x=\"4874\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 169->171 -->\n<g id=\"edge171\" class=\"edge\"><title>169->171</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4921.16,-341.907C4922.26,-331.204 4923.45,-319.615 4924.56,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4928.06,-308.972 4925.6,-298.667 4921.1,-308.258 4928.06,-308.972\"/>\n</g>\n<!-- 173 -->\n<g id=\"node174\" class=\"node\"><title>173</title>\n<path fill=\"#eca06a\" stroke=\"black\" d=\"M5137.5,-306C5137.5,-306 5022.5,-306 5022.5,-306 5016.5,-306 5010.5,-300 5010.5,-294 5010.5,-294 5010.5,-235 5010.5,-235 5010.5,-229 5016.5,-223 5022.5,-223 5022.5,-223 5137.5,-223 5137.5,-223 5143.5,-223 5149.5,-229 5149.5,-235 5149.5,-235 5149.5,-294 5149.5,-294 5149.5,-300 5143.5,-306 5137.5,-306\"/>\n<text text-anchor=\"start\" x=\"5018.5\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 4908.5</text>\n<text text-anchor=\"start\" x=\"5030\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.722</text>\n<text text-anchor=\"start\" x=\"5040.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 6</text>\n<text text-anchor=\"start\" x=\"5039.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [8, 2]</text>\n<text text-anchor=\"start\" x=\"5033\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 172->173 -->\n<g id=\"edge173\" class=\"edge\"><title>172->173</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5108.08,-341.907C5104.95,-333.377 5101.6,-324.284 5098.36,-315.456\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5101.63,-314.2 5094.89,-306.021 5095.06,-316.614 5101.63,-314.2\"/>\n</g>\n<!-- 178 -->\n<g id=\"node179\" class=\"node\"><title>178</title>\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M5279,-306C5279,-306 5187,-306 5187,-306 5181,-306 5175,-300 5175,-294 5175,-294 5175,-235 5175,-235 5175,-229 5181,-223 5187,-223 5187,-223 5279,-223 5279,-223 5285,-223 5291,-229 5291,-235 5291,-235 5291,-294 5291,-294 5291,-300 5285,-306 5279,-306\"/>\n<text text-anchor=\"start\" x=\"5186\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 11.0</text>\n<text text-anchor=\"start\" x=\"5183\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.149</text>\n<text text-anchor=\"start\" x=\"5185.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 180</text>\n<text text-anchor=\"start\" x=\"5184.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [276, 6]</text>\n<text text-anchor=\"start\" x=\"5186\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 172->178 -->\n<g id=\"edge178\" class=\"edge\"><title>172->178</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5161.16,-341.907C5169.78,-332.742 5179.01,-322.927 5187.88,-313.489\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5190.6,-315.704 5194.9,-306.021 5185.5,-310.909 5190.6,-315.704\"/>\n</g>\n<!-- 174 -->\n<g id=\"node175\" class=\"node\"><title>174</title>\n<path fill=\"#ffffff\" stroke=\"black\" d=\"M4987,-187C4987,-187 4791,-187 4791,-187 4785,-187 4779,-181 4779,-175 4779,-175 4779,-116 4779,-116 4779,-110 4785,-104 4791,-104 4791,-104 4987,-104 4987,-104 4993,-104 4999,-110 4999,-116 4999,-116 4999,-175 4999,-175 4999,-181 4993,-187 4987,-187\"/>\n<text text-anchor=\"start\" x=\"4787\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.37</text>\n<text text-anchor=\"start\" x=\"4847\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 1.0</text>\n<text text-anchor=\"start\" x=\"4849.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"4848.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 2]</text>\n<text text-anchor=\"start\" x=\"4842\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 173->174 -->\n<g id=\"edge174\" class=\"edge\"><title>173->174</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5013.73,-222.907C4997.59,-213.016 4980.2,-202.368 4963.69,-192.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4965.5,-189.26 4955.15,-187.021 4961.85,-195.229 4965.5,-189.26\"/>\n</g>\n<!-- 177 -->\n<g id=\"node178\" class=\"node\"><title>177</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5115,-179.5C5115,-179.5 5029,-179.5 5029,-179.5 5023,-179.5 5017,-173.5 5017,-167.5 5017,-167.5 5017,-123.5 5017,-123.5 5017,-117.5 5023,-111.5 5029,-111.5 5029,-111.5 5115,-111.5 5115,-111.5 5121,-111.5 5127,-117.5 5127,-123.5 5127,-123.5 5127,-167.5 5127,-167.5 5127,-173.5 5121,-179.5 5115,-179.5\"/>\n<text text-anchor=\"start\" x=\"5030\" y=\"-164.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5032.5\" y=\"-149.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"5031.5\" y=\"-134.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [6, 0]</text>\n<text text-anchor=\"start\" x=\"5025\" y=\"-119.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 173->177 -->\n<g id=\"edge177\" class=\"edge\"><title>173->177</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5077.22,-222.907C5076.49,-212.204 5075.7,-200.615 5074.96,-189.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5078.44,-189.405 5074.27,-179.667 5071.46,-189.882 5078.44,-189.405\"/>\n</g>\n<!-- 175 -->\n<g id=\"node176\" class=\"node\"><title>175</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M4830,-68C4830,-68 4744,-68 4744,-68 4738,-68 4732,-62 4732,-56 4732,-56 4732,-12 4732,-12 4732,-6 4738,-0 4744,-0 4744,-0 4830,-0 4830,-0 4836,-0 4842,-6 4842,-12 4842,-12 4842,-56 4842,-56 4842,-62 4836,-68 4830,-68\"/>\n<text text-anchor=\"start\" x=\"4745\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4747.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"4746.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [2, 0]</text>\n<text text-anchor=\"start\" x=\"4740\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 174->175 -->\n<g id=\"edge175\" class=\"edge\"><title>174->175</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4851.02,-103.726C4842.52,-94.6054 4833.51,-84.93 4825.01,-75.8078\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4827.4,-73.2312 4818.02,-68.2996 4822.27,-78.0025 4827.4,-73.2312\"/>\n</g>\n<!-- 176 -->\n<g id=\"node177\" class=\"node\"><title>176</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M4974,-68C4974,-68 4872,-68 4872,-68 4866,-68 4860,-62 4860,-56 4860,-56 4860,-12 4860,-12 4860,-6 4866,-0 4872,-0 4872,-0 4974,-0 4974,-0 4980,-0 4986,-6 4986,-12 4986,-12 4986,-56 4986,-56 4986,-62 4980,-68 4974,-68\"/>\n<text text-anchor=\"start\" x=\"4881\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"4883.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"4882.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"4868\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 174->176 -->\n<g id=\"edge176\" class=\"edge\"><title>174->176</title>\n<path fill=\"none\" stroke=\"black\" d=\"M4901.66,-103.726C4904.27,-95.3351 4907.02,-86.4745 4909.65,-78.0072\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"4913.04,-78.8877 4912.66,-68.2996 4906.35,-76.8119 4913.04,-78.8877\"/>\n</g>\n<!-- 179 -->\n<g id=\"node180\" class=\"node\"><title>179</title>\n<path fill=\"#e5833c\" stroke=\"black\" d=\"M5308.5,-187C5308.5,-187 5157.5,-187 5157.5,-187 5151.5,-187 5145.5,-181 5145.5,-175 5145.5,-175 5145.5,-116 5145.5,-116 5145.5,-110 5151.5,-104 5157.5,-104 5157.5,-104 5308.5,-104 5308.5,-104 5314.5,-104 5320.5,-110 5320.5,-116 5320.5,-116 5320.5,-175 5320.5,-175 5320.5,-181 5314.5,-187 5308.5,-187\"/>\n<text text-anchor=\"start\" x=\"5153.5\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">num_compromised ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"5183\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.113</text>\n<text text-anchor=\"start\" x=\"5185.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 168</text>\n<text text-anchor=\"start\" x=\"5184.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [262, 4]</text>\n<text text-anchor=\"start\" x=\"5186\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 178->179 -->\n<g id=\"edge179\" class=\"edge\"><title>178->179</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5233,-222.907C5233,-214.649 5233,-205.864 5233,-197.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5236.5,-197.021 5233,-187.021 5229.5,-197.021 5236.5,-197.021\"/>\n</g>\n<!-- 182 -->\n<g id=\"node183\" class=\"node\"><title>182</title>\n<path fill=\"#e99355\" stroke=\"black\" d=\"M5443,-187C5443,-187 5351,-187 5351,-187 5345,-187 5339,-181 5339,-175 5339,-175 5339,-116 5339,-116 5339,-110 5345,-104 5351,-104 5351,-104 5443,-104 5443,-104 5449,-104 5455,-110 5455,-116 5455,-116 5455,-175 5455,-175 5455,-181 5449,-187 5443,-187\"/>\n<text text-anchor=\"start\" x=\"5350\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 12.5</text>\n<text text-anchor=\"start\" x=\"5347\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.544</text>\n<text text-anchor=\"start\" x=\"5353.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"5352.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 2]</text>\n<text text-anchor=\"start\" x=\"5350\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 178->182 -->\n<g id=\"edge182\" class=\"edge\"><title>178->182</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5289.9,-222.907C5303.38,-213.288 5317.87,-202.953 5331.69,-193.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5334.09,-195.678 5340.2,-187.021 5330.03,-189.979 5334.09,-195.678\"/>\n</g>\n<!-- 180 -->\n<g id=\"node181\" class=\"node\"><title>180</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5139.5,-68C5139.5,-68 5050.5,-68 5050.5,-68 5044.5,-68 5038.5,-62 5038.5,-56 5038.5,-56 5038.5,-12 5038.5,-12 5038.5,-6 5044.5,-0 5050.5,-0 5050.5,-0 5139.5,-0 5139.5,-0 5145.5,-0 5151.5,-6 5151.5,-12 5151.5,-12 5151.5,-56 5151.5,-56 5151.5,-62 5145.5,-68 5139.5,-68\"/>\n<text text-anchor=\"start\" x=\"5053\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5047.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 164</text>\n<text text-anchor=\"start\" x=\"5046.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [262, 0]</text>\n<text text-anchor=\"start\" x=\"5048\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 179->180 -->\n<g id=\"edge180\" class=\"edge\"><title>179->180</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5181.61,-103.726C5169.66,-94.2406 5156.95,-84.1551 5145.05,-74.7159\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5146.98,-71.7736 5136.97,-68.2996 5142.62,-77.2571 5146.98,-71.7736\"/>\n</g>\n<!-- 181 -->\n<g id=\"node182\" class=\"node\"><title>181</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5284,-68C5284,-68 5182,-68 5182,-68 5176,-68 5170,-62 5170,-56 5170,-56 5170,-12 5170,-12 5170,-6 5176,-0 5182,-0 5182,-0 5284,-0 5284,-0 5290,-0 5296,-6 5296,-12 5296,-12 5296,-56 5296,-56 5296,-62 5290,-68 5284,-68\"/>\n<text text-anchor=\"start\" x=\"5191\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5193.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 4</text>\n<text text-anchor=\"start\" x=\"5192.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 4]</text>\n<text text-anchor=\"start\" x=\"5178\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 179->181 -->\n<g id=\"edge181\" class=\"edge\"><title>179->181</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5233,-103.726C5233,-95.5175 5233,-86.8595 5233,-78.56\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5236.5,-78.2996 5233,-68.2996 5229.5,-78.2996 5236.5,-78.2996\"/>\n</g>\n<!-- 183 -->\n<g id=\"node184\" class=\"node\"><title>183</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5428,-68C5428,-68 5326,-68 5326,-68 5320,-68 5314,-62 5314,-56 5314,-56 5314,-12 5314,-12 5314,-6 5320,-0 5326,-0 5326,-0 5428,-0 5428,-0 5434,-0 5440,-6 5440,-12 5440,-12 5440,-56 5440,-56 5440,-62 5434,-68 5428,-68\"/>\n<text text-anchor=\"start\" x=\"5335\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5337.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"5336.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"5322\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 182->183 -->\n<g id=\"edge183\" class=\"edge\"><title>182->183</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5389.55,-103.726C5388.04,-95.4263 5386.44,-86.6671 5384.91,-78.2834\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5388.32,-77.508 5383.08,-68.2996 5381.44,-78.7658 5388.32,-77.508\"/>\n</g>\n<!-- 184 -->\n<g id=\"node185\" class=\"node\"><title>184</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5556,-68C5556,-68 5470,-68 5470,-68 5464,-68 5458,-62 5458,-56 5458,-56 5458,-12 5458,-12 5458,-6 5464,-0 5470,-0 5470,-0 5556,-0 5556,-0 5562,-0 5568,-6 5568,-12 5568,-12 5568,-56 5568,-56 5568,-62 5562,-68 5556,-68\"/>\n<text text-anchor=\"start\" x=\"5471\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5469.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 10</text>\n<text text-anchor=\"start\" x=\"5468.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [14, 0]</text>\n<text text-anchor=\"start\" x=\"5466\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 182->184 -->\n<g id=\"edge184\" class=\"edge\"><title>182->184</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5440.19,-103.726C5450.05,-94.423 5460.52,-84.5428 5470.35,-75.2612\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5472.85,-77.7092 5477.72,-68.2996 5468.05,-72.6189 5472.85,-77.7092\"/>\n</g>\n<!-- 187 -->\n<g id=\"node188\" class=\"node\"><title>187</title>\n<path fill=\"#ea9b62\" stroke=\"black\" d=\"M5456.5,-544C5456.5,-544 5341.5,-544 5341.5,-544 5335.5,-544 5329.5,-538 5329.5,-532 5329.5,-532 5329.5,-473 5329.5,-473 5329.5,-467 5335.5,-461 5341.5,-461 5341.5,-461 5456.5,-461 5456.5,-461 5462.5,-461 5468.5,-467 5468.5,-473 5468.5,-473 5468.5,-532 5468.5,-532 5468.5,-538 5462.5,-544 5456.5,-544\"/>\n<text text-anchor=\"start\" x=\"5337.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">protocol_type ≤ 1.0</text>\n<text text-anchor=\"start\" x=\"5349\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.663</text>\n<text text-anchor=\"start\" x=\"5355.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 58</text>\n<text text-anchor=\"start\" x=\"5350.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [72, 15]</text>\n<text text-anchor=\"start\" x=\"5352\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 186->187 -->\n<g id=\"edge187\" class=\"edge\"><title>186->187</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5405.53,-579.907C5404.82,-571.558 5404.06,-562.671 5403.32,-554.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5406.8,-553.686 5402.46,-544.021 5399.83,-554.283 5406.8,-553.686\"/>\n</g>\n<!-- 190 -->\n<g id=\"node191\" class=\"node\"><title>190</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5605,-544C5605,-544 5499,-544 5499,-544 5493,-544 5487,-538 5487,-532 5487,-532 5487,-473 5487,-473 5487,-467 5493,-461 5499,-461 5499,-461 5605,-461 5605,-461 5611,-461 5617,-467 5617,-473 5617,-473 5617,-532 5617,-532 5617,-538 5611,-544 5605,-544\"/>\n<text text-anchor=\"start\" x=\"5495\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">serror_rate ≤ 0.02</text>\n<text text-anchor=\"start\" x=\"5502\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.015</text>\n<text text-anchor=\"start\" x=\"5504.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 885</text>\n<text text-anchor=\"start\" x=\"5499\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1428, 2]</text>\n<text text-anchor=\"start\" x=\"5505\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 186->190 -->\n<g id=\"edge190\" class=\"edge\"><title>186->190</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5458.61,-579.907C5470.26,-570.379 5482.76,-560.148 5494.71,-550.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5496.95,-553.062 5502.47,-544.021 5492.52,-547.644 5496.95,-553.062\"/>\n</g>\n<!-- 188 -->\n<g id=\"node189\" class=\"node\"><title>188</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5306,-417.5C5306,-417.5 5220,-417.5 5220,-417.5 5214,-417.5 5208,-411.5 5208,-405.5 5208,-405.5 5208,-361.5 5208,-361.5 5208,-355.5 5214,-349.5 5220,-349.5 5220,-349.5 5306,-349.5 5306,-349.5 5312,-349.5 5318,-355.5 5318,-361.5 5318,-361.5 5318,-405.5 5318,-405.5 5318,-411.5 5312,-417.5 5306,-417.5\"/>\n<text text-anchor=\"start\" x=\"5221\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5219.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 46</text>\n<text text-anchor=\"start\" x=\"5218.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [72, 0]</text>\n<text text-anchor=\"start\" x=\"5216\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 187->188 -->\n<g id=\"edge188\" class=\"edge\"><title>187->188</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5351.82,-460.907C5338.09,-449.101 5323.11,-436.217 5309.44,-424.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5311.42,-421.535 5301.55,-417.667 5306.85,-426.842 5311.42,-421.535\"/>\n</g>\n<!-- 189 -->\n<g id=\"node190\" class=\"node\"><title>189</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5450,-417.5C5450,-417.5 5348,-417.5 5348,-417.5 5342,-417.5 5336,-411.5 5336,-405.5 5336,-405.5 5336,-361.5 5336,-361.5 5336,-355.5 5342,-349.5 5348,-349.5 5348,-349.5 5450,-349.5 5450,-349.5 5456,-349.5 5462,-355.5 5462,-361.5 5462,-361.5 5462,-405.5 5462,-405.5 5462,-411.5 5456,-417.5 5450,-417.5\"/>\n<text text-anchor=\"start\" x=\"5357\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5355.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"5354.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 15]</text>\n<text text-anchor=\"start\" x=\"5344\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 187->189 -->\n<g id=\"edge189\" class=\"edge\"><title>187->189</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5399,-460.907C5399,-450.204 5399,-438.615 5399,-427.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5402.5,-427.667 5399,-417.667 5395.5,-427.667 5402.5,-427.667\"/>\n</g>\n<!-- 191 -->\n<g id=\"node192\" class=\"node\"><title>191</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5634,-425C5634,-425 5492,-425 5492,-425 5486,-425 5480,-419 5480,-413 5480,-413 5480,-354 5480,-354 5480,-348 5486,-342 5492,-342 5492,-342 5634,-342 5634,-342 5640,-342 5646,-348 5646,-354 5646,-354 5646,-413 5646,-413 5646,-419 5640,-425 5634,-425\"/>\n<text text-anchor=\"start\" x=\"5488\" y=\"-409.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_count ≤ 254.5</text>\n<text text-anchor=\"start\" x=\"5513\" y=\"-394.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.016</text>\n<text text-anchor=\"start\" x=\"5515.5\" y=\"-379.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 867</text>\n<text text-anchor=\"start\" x=\"5510\" y=\"-364.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1396, 2]</text>\n<text text-anchor=\"start\" x=\"5516\" y=\"-349.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 190->191 -->\n<g id=\"edge191\" class=\"edge\"><title>190->191</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5555.82,-460.907C5556.6,-452.558 5557.44,-443.671 5558.25,-435.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5561.74,-435.305 5559.19,-425.021 5554.77,-434.649 5561.74,-435.305\"/>\n</g>\n<!-- 200 -->\n<g id=\"node201\" class=\"node\"><title>200</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5762,-417.5C5762,-417.5 5676,-417.5 5676,-417.5 5670,-417.5 5664,-411.5 5664,-405.5 5664,-405.5 5664,-361.5 5664,-361.5 5664,-355.5 5670,-349.5 5676,-349.5 5676,-349.5 5762,-349.5 5762,-349.5 5768,-349.5 5774,-355.5 5774,-361.5 5774,-361.5 5774,-405.5 5774,-405.5 5774,-411.5 5768,-417.5 5762,-417.5\"/>\n<text text-anchor=\"start\" x=\"5677\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5675.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 18</text>\n<text text-anchor=\"start\" x=\"5674.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [32, 0]</text>\n<text text-anchor=\"start\" x=\"5672\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 190->200 -->\n<g id=\"edge200\" class=\"edge\"><title>190->200</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5609.94,-460.907C5627.26,-448.769 5646.21,-435.493 5663.39,-423.462\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5665.48,-426.271 5671.66,-417.667 5661.46,-420.538 5665.48,-426.271\"/>\n</g>\n<!-- 192 -->\n<g id=\"node193\" class=\"node\"><title>192</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5612,-298.5C5612,-298.5 5514,-298.5 5514,-298.5 5508,-298.5 5502,-292.5 5502,-286.5 5502,-286.5 5502,-242.5 5502,-242.5 5502,-236.5 5508,-230.5 5514,-230.5 5514,-230.5 5612,-230.5 5612,-230.5 5618,-230.5 5624,-236.5 5624,-242.5 5624,-242.5 5624,-286.5 5624,-286.5 5624,-292.5 5618,-298.5 5612,-298.5\"/>\n<text text-anchor=\"start\" x=\"5521\" y=\"-283.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5515.5\" y=\"-268.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 675</text>\n<text text-anchor=\"start\" x=\"5510\" y=\"-253.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1082, 0]</text>\n<text text-anchor=\"start\" x=\"5516\" y=\"-238.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 191->192 -->\n<g id=\"edge192\" class=\"edge\"><title>191->192</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5563,-341.907C5563,-331.204 5563,-319.615 5563,-308.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5566.5,-308.667 5563,-298.667 5559.5,-308.667 5566.5,-308.667\"/>\n</g>\n<!-- 193 -->\n<g id=\"node194\" class=\"node\"><title>193</title>\n<path fill=\"#e5823a\" stroke=\"black\" d=\"M5755,-306C5755,-306 5663,-306 5663,-306 5657,-306 5651,-300 5651,-294 5651,-294 5651,-235 5651,-235 5651,-229 5657,-223 5663,-223 5663,-223 5755,-223 5755,-223 5761,-223 5767,-229 5767,-235 5767,-235 5767,-294 5767,-294 5767,-300 5761,-306 5755,-306\"/>\n<text text-anchor=\"start\" x=\"5662\" y=\"-290.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 11.0</text>\n<text text-anchor=\"start\" x=\"5659\" y=\"-275.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.055</text>\n<text text-anchor=\"start\" x=\"5661.5\" y=\"-260.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 192</text>\n<text text-anchor=\"start\" x=\"5660.5\" y=\"-245.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [314, 2]</text>\n<text text-anchor=\"start\" x=\"5662\" y=\"-230.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 191->193 -->\n<g id=\"edge193\" class=\"edge\"><title>191->193</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5613.65,-341.907C5625.54,-332.379 5638.31,-322.148 5650.51,-312.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5652.82,-315.006 5658.44,-306.021 5648.44,-309.543 5652.82,-315.006\"/>\n</g>\n<!-- 194 -->\n<g id=\"node195\" class=\"node\"><title>194</title>\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M5755,-187C5755,-187 5663,-187 5663,-187 5657,-187 5651,-181 5651,-175 5651,-175 5651,-116 5651,-116 5651,-110 5657,-104 5663,-104 5663,-104 5755,-104 5755,-104 5761,-104 5767,-110 5767,-116 5767,-116 5767,-175 5767,-175 5767,-181 5761,-187 5755,-187\"/>\n<text text-anchor=\"start\" x=\"5666\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">duration ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"5659\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.031</text>\n<text text-anchor=\"start\" x=\"5661.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 189</text>\n<text text-anchor=\"start\" x=\"5660.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [309, 1]</text>\n<text text-anchor=\"start\" x=\"5662\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 193->194 -->\n<g id=\"edge194\" class=\"edge\"><title>193->194</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5709,-222.907C5709,-214.649 5709,-205.864 5709,-197.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5712.5,-197.021 5709,-187.021 5705.5,-197.021 5712.5,-197.021\"/>\n</g>\n<!-- 197 -->\n<g id=\"node198\" class=\"node\"><title>197</title>\n<path fill=\"#ea9a61\" stroke=\"black\" d=\"M6001,-187C6001,-187 5805,-187 5805,-187 5799,-187 5793,-181 5793,-175 5793,-175 5793,-116 5793,-116 5793,-110 5799,-104 5805,-104 5805,-104 6001,-104 6001,-104 6007,-104 6013,-110 6013,-116 6013,-116 6013,-175 6013,-175 6013,-181 6007,-187 6001,-187\"/>\n<text text-anchor=\"start\" x=\"5801\" y=\"-171.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_serror_rate ≤ 0.01</text>\n<text text-anchor=\"start\" x=\"5857\" y=\"-156.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.65</text>\n<text text-anchor=\"start\" x=\"5863.5\" y=\"-141.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"5862.5\" y=\"-126.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 1]</text>\n<text text-anchor=\"start\" x=\"5856\" y=\"-111.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 193->197 -->\n<g id=\"edge197\" class=\"edge\"><title>193->197</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5767.21,-228.396C5785.97,-217.08 5807.05,-204.365 5826.91,-192.39\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5828.88,-195.291 5835.63,-187.13 5825.26,-189.297 5828.88,-195.291\"/>\n</g>\n<!-- 195 -->\n<g id=\"node196\" class=\"node\"><title>195</title>\n<path fill=\"#e5813a\" stroke=\"black\" d=\"M5690,-68C5690,-68 5598,-68 5598,-68 5592,-68 5586,-62 5586,-56 5586,-56 5586,-12 5586,-12 5586,-6 5592,-0 5598,-0 5598,-0 5690,-0 5690,-0 5696,-0 5702,-6 5702,-12 5702,-12 5702,-56 5702,-56 5702,-62 5696,-68 5690,-68\"/>\n<text text-anchor=\"start\" x=\"5594\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.035</text>\n<text text-anchor=\"start\" x=\"5596.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 169</text>\n<text text-anchor=\"start\" x=\"5595.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [267, 1]</text>\n<text text-anchor=\"start\" x=\"5597\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 194->195 -->\n<g id=\"edge195\" class=\"edge\"><title>194->195</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5684.8,-103.726C5679.6,-94.9703 5674.1,-85.7032 5668.88,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5671.88,-75.1121 5663.77,-68.2996 5665.86,-78.6853 5671.88,-75.1121\"/>\n</g>\n<!-- 196 -->\n<g id=\"node197\" class=\"node\"><title>196</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5818,-68C5818,-68 5732,-68 5732,-68 5726,-68 5720,-62 5720,-56 5720,-56 5720,-12 5720,-12 5720,-6 5726,-0 5732,-0 5732,-0 5818,-0 5818,-0 5824,-0 5830,-6 5830,-12 5830,-12 5830,-56 5830,-56 5830,-62 5824,-68 5818,-68\"/>\n<text text-anchor=\"start\" x=\"5733\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5731.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 20</text>\n<text text-anchor=\"start\" x=\"5730.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [42, 0]</text>\n<text text-anchor=\"start\" x=\"5728\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 194->196 -->\n<g id=\"edge196\" class=\"edge\"><title>194->196</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5733.58,-103.726C5738.85,-94.9703 5744.44,-85.7032 5749.74,-76.9051\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5752.76,-78.671 5754.93,-68.2996 5746.77,-75.0574 5752.76,-78.671\"/>\n</g>\n<!-- 198 -->\n<g id=\"node199\" class=\"node\"><title>198</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5946,-68C5946,-68 5860,-68 5860,-68 5854,-68 5848,-62 5848,-56 5848,-56 5848,-12 5848,-12 5848,-6 5854,-0 5860,-0 5860,-0 5946,-0 5946,-0 5952,-0 5958,-6 5958,-12 5958,-12 5958,-56 5958,-56 5958,-62 5952,-68 5946,-68\"/>\n<text text-anchor=\"start\" x=\"5861\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5863.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"5862.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [5, 0]</text>\n<text text-anchor=\"start\" x=\"5856\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 197->198 -->\n<g id=\"edge198\" class=\"edge\"><title>197->198</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5903,-103.726C5903,-95.5175 5903,-86.8595 5903,-78.56\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5906.5,-78.2996 5903,-68.2996 5899.5,-78.2996 5906.5,-78.2996\"/>\n</g>\n<!-- 199 -->\n<g id=\"node200\" class=\"node\"><title>199</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6090,-68C6090,-68 5988,-68 5988,-68 5982,-68 5976,-62 5976,-56 5976,-56 5976,-12 5976,-12 5976,-6 5982,-0 5988,-0 5988,-0 6090,-0 6090,-0 6096,-0 6102,-6 6102,-12 6102,-12 6102,-56 6102,-56 6102,-62 6096,-68 6090,-68\"/>\n<text text-anchor=\"start\" x=\"5997\" y=\"-52.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5999.5\" y=\"-37.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5998.5\" y=\"-22.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"5984\" y=\"-7.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 197->199 -->\n<g id=\"edge199\" class=\"edge\"><title>197->199</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5953.64,-103.726C5965.42,-94.2406 5977.95,-84.1551 5989.67,-74.7159\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5992.05,-77.2972 5997.64,-68.2996 5987.66,-71.8448 5992.05,-77.2972\"/>\n</g>\n<!-- 202 -->\n<g id=\"node203\" class=\"node\"><title>202</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5647,-655.5C5647,-655.5 5561,-655.5 5561,-655.5 5555,-655.5 5549,-649.5 5549,-643.5 5549,-643.5 5549,-599.5 5549,-599.5 5549,-593.5 5555,-587.5 5561,-587.5 5561,-587.5 5647,-587.5 5647,-587.5 5653,-587.5 5659,-593.5 5659,-599.5 5659,-599.5 5659,-643.5 5659,-643.5 5659,-649.5 5653,-655.5 5647,-655.5\"/>\n<text text-anchor=\"start\" x=\"5562\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5560.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 17</text>\n<text text-anchor=\"start\" x=\"5559.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [22, 0]</text>\n<text text-anchor=\"start\" x=\"5557\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 201->202 -->\n<g id=\"edge202\" class=\"edge\"><title>201->202</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5636.65,-698.907C5631.98,-687.983 5626.92,-676.137 5622.21,-665.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5625.32,-663.487 5618.17,-655.667 5618.89,-666.238 5625.32,-663.487\"/>\n</g>\n<!-- 203 -->\n<g id=\"node204\" class=\"node\"><title>203</title>\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M5804.5,-663C5804.5,-663 5689.5,-663 5689.5,-663 5683.5,-663 5677.5,-657 5677.5,-651 5677.5,-651 5677.5,-592 5677.5,-592 5677.5,-586 5683.5,-580 5689.5,-580 5689.5,-580 5804.5,-580 5804.5,-580 5810.5,-580 5816.5,-586 5816.5,-592 5816.5,-592 5816.5,-651 5816.5,-651 5816.5,-657 5810.5,-663 5804.5,-663\"/>\n<text text-anchor=\"start\" x=\"5685.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 3302.5</text>\n<text text-anchor=\"start\" x=\"5697\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\n<text text-anchor=\"start\" x=\"5703.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"5702.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 20]</text>\n<text text-anchor=\"start\" x=\"5692\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 201->203 -->\n<g id=\"edge203\" class=\"edge\"><title>201->203</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5686.27,-698.907C5693.41,-689.923 5701.04,-680.315 5708.41,-671.05\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5711.31,-673.027 5714.79,-663.021 5705.83,-668.671 5711.31,-673.027\"/>\n</g>\n<!-- 204 -->\n<g id=\"node205\" class=\"node\"><title>204</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M5749,-536.5C5749,-536.5 5647,-536.5 5647,-536.5 5641,-536.5 5635,-530.5 5635,-524.5 5635,-524.5 5635,-480.5 5635,-480.5 5635,-474.5 5641,-468.5 5647,-468.5 5647,-468.5 5749,-468.5 5749,-468.5 5755,-468.5 5761,-474.5 5761,-480.5 5761,-480.5 5761,-524.5 5761,-524.5 5761,-530.5 5755,-536.5 5749,-536.5\"/>\n<text text-anchor=\"start\" x=\"5656\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5654.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"5653.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 20]</text>\n<text text-anchor=\"start\" x=\"5643\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 203->204 -->\n<g id=\"edge204\" class=\"edge\"><title>203->204</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5730,-579.907C5725.42,-568.983 5720.46,-557.137 5715.84,-546.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5718.98,-544.539 5711.89,-536.667 5712.53,-547.243 5718.98,-544.539\"/>\n</g>\n<!-- 205 -->\n<g id=\"node206\" class=\"node\"><title>205</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M5877,-536.5C5877,-536.5 5791,-536.5 5791,-536.5 5785,-536.5 5779,-530.5 5779,-524.5 5779,-524.5 5779,-480.5 5779,-480.5 5779,-474.5 5785,-468.5 5791,-468.5 5791,-468.5 5877,-468.5 5877,-468.5 5883,-468.5 5889,-474.5 5889,-480.5 5889,-480.5 5889,-524.5 5889,-524.5 5889,-530.5 5883,-536.5 5877,-536.5\"/>\n<text text-anchor=\"start\" x=\"5792\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5794.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"5793.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"5787\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 203->205 -->\n<g id=\"edge205\" class=\"edge\"><title>203->205</title>\n<path fill=\"none\" stroke=\"black\" d=\"M5777.18,-579.907C5785.64,-568.542 5794.83,-556.178 5803.31,-544.774\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"5806.18,-546.78 5809.34,-536.667 5800.56,-542.603 5806.18,-546.78\"/>\n</g>\n<!-- 207 -->\n<g id=\"node208\" class=\"node\"><title>207</title>\n<path fill=\"#e78946\" stroke=\"black\" d=\"M6311.5,-782C6311.5,-782 6152.5,-782 6152.5,-782 6146.5,-782 6140.5,-776 6140.5,-770 6140.5,-770 6140.5,-711 6140.5,-711 6140.5,-705 6146.5,-699 6152.5,-699 6152.5,-699 6311.5,-699 6311.5,-699 6317.5,-699 6323.5,-705 6323.5,-711 6323.5,-711 6323.5,-770 6323.5,-770 6323.5,-776 6317.5,-782 6311.5,-782\"/>\n<text text-anchor=\"start\" x=\"6148.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">srv_diff_host_rate ≤ 0.835</text>\n<text text-anchor=\"start\" x=\"6182\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.327</text>\n<text text-anchor=\"start\" x=\"6188.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 35</text>\n<text text-anchor=\"start\" x=\"6187.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [47, 3]</text>\n<text text-anchor=\"start\" x=\"6185\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 206->207 -->\n<g id=\"edge207\" class=\"edge\"><title>206->207</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6274.45,-817.907C6269.61,-809.195 6264.44,-799.897 6259.44,-790.893\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6262.43,-789.063 6254.51,-782.021 6256.31,-792.462 6262.43,-789.063\"/>\n</g>\n<!-- 214 -->\n<g id=\"node215\" class=\"node\"><title>214</title>\n<path fill=\"#43a2e6\" stroke=\"black\" d=\"M6476.5,-782C6476.5,-782 6353.5,-782 6353.5,-782 6347.5,-782 6341.5,-776 6341.5,-770 6341.5,-770 6341.5,-711 6341.5,-711 6341.5,-705 6347.5,-699 6353.5,-699 6353.5,-699 6476.5,-699 6476.5,-699 6482.5,-699 6488.5,-705 6488.5,-711 6488.5,-711 6488.5,-770 6488.5,-770 6488.5,-776 6482.5,-782 6476.5,-782\"/>\n<text text-anchor=\"start\" x=\"6349.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 36458.5</text>\n<text text-anchor=\"start\" x=\"6365\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.276</text>\n<text text-anchor=\"start\" x=\"6371.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 13</text>\n<text text-anchor=\"start\" x=\"6370.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 20]</text>\n<text text-anchor=\"start\" x=\"6360\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 206->214 -->\n<g id=\"edge214\" class=\"edge\"><title>206->214</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6337.94,-817.907C6347.28,-808.651 6357.28,-798.732 6366.88,-789.209\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6369.5,-791.547 6374.13,-782.021 6364.57,-786.576 6369.5,-791.547\"/>\n</g>\n<!-- 208 -->\n<g id=\"node209\" class=\"node\"><title>208</title>\n<path fill=\"#e6843d\" stroke=\"black\" d=\"M6149,-663C6149,-663 6029,-663 6029,-663 6023,-663 6017,-657 6017,-651 6017,-651 6017,-592 6017,-592 6017,-586 6023,-580 6029,-580 6029,-580 6149,-580 6149,-580 6155,-580 6161,-586 6161,-592 6161,-592 6161,-651 6161,-651 6161,-657 6155,-663 6149,-663\"/>\n<text text-anchor=\"start\" x=\"6025\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">is_guest_login ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"6039\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.149</text>\n<text text-anchor=\"start\" x=\"6045.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 33</text>\n<text text-anchor=\"start\" x=\"6044.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [46, 1]</text>\n<text text-anchor=\"start\" x=\"6042\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 207->208 -->\n<g id=\"edge208\" class=\"edge\"><title>207->208</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6182.39,-698.907C6170.74,-689.379 6158.24,-679.148 6146.29,-669.37\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6148.48,-666.644 6138.53,-663.021 6144.05,-672.062 6148.48,-666.644\"/>\n</g>\n<!-- 211 -->\n<g id=\"node212\" class=\"node\"><title>211</title>\n<path fill=\"#9ccef2\" stroke=\"black\" d=\"M6293,-663C6293,-663 6191,-663 6191,-663 6185,-663 6179,-657 6179,-651 6179,-651 6179,-592 6179,-592 6179,-586 6185,-580 6191,-580 6191,-580 6293,-580 6293,-580 6299,-580 6305,-586 6305,-592 6305,-592 6305,-651 6305,-651 6305,-657 6299,-663 6293,-663\"/>\n<text text-anchor=\"start\" x=\"6214.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 3.0</text>\n<text text-anchor=\"start\" x=\"6192\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"6202.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"6201.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 2]</text>\n<text text-anchor=\"start\" x=\"6187\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 207->211 -->\n<g id=\"edge211\" class=\"edge\"><title>207->211</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6235.47,-698.907C6236.18,-690.558 6236.94,-681.671 6237.68,-673.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6241.17,-673.283 6238.54,-663.021 6234.2,-672.686 6241.17,-673.283\"/>\n</g>\n<!-- 209 -->\n<g id=\"node210\" class=\"node\"><title>209</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6005,-536.5C6005,-536.5 5919,-536.5 5919,-536.5 5913,-536.5 5907,-530.5 5907,-524.5 5907,-524.5 5907,-480.5 5907,-480.5 5907,-474.5 5913,-468.5 5919,-468.5 5919,-468.5 6005,-468.5 6005,-468.5 6011,-468.5 6017,-474.5 6017,-480.5 6017,-480.5 6017,-524.5 6017,-524.5 6017,-530.5 6011,-536.5 6005,-536.5\"/>\n<text text-anchor=\"start\" x=\"5920\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"5918.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 32</text>\n<text text-anchor=\"start\" x=\"5917.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [46, 0]</text>\n<text text-anchor=\"start\" x=\"5915\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 208->209 -->\n<g id=\"edge209\" class=\"edge\"><title>208->209</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6044.94,-579.907C6032.12,-568.101 6018.14,-555.217 6005.36,-543.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6007.73,-540.868 5998,-536.667 6002.98,-546.017 6007.73,-540.868\"/>\n</g>\n<!-- 210 -->\n<g id=\"node211\" class=\"node\"><title>210</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6149,-536.5C6149,-536.5 6047,-536.5 6047,-536.5 6041,-536.5 6035,-530.5 6035,-524.5 6035,-524.5 6035,-480.5 6035,-480.5 6035,-474.5 6041,-468.5 6047,-468.5 6047,-468.5 6149,-468.5 6149,-468.5 6155,-468.5 6161,-474.5 6161,-480.5 6161,-480.5 6161,-524.5 6161,-524.5 6161,-530.5 6155,-536.5 6149,-536.5\"/>\n<text text-anchor=\"start\" x=\"6056\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6058.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6057.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"6043\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 208->210 -->\n<g id=\"edge210\" class=\"edge\"><title>208->210</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6092.12,-579.907C6092.95,-569.204 6093.84,-557.615 6094.67,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6098.17,-546.906 6095.45,-536.667 6091.19,-546.369 6098.17,-546.906\"/>\n</g>\n<!-- 212 -->\n<g id=\"node213\" class=\"node\"><title>212</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6277,-536.5C6277,-536.5 6191,-536.5 6191,-536.5 6185,-536.5 6179,-530.5 6179,-524.5 6179,-524.5 6179,-480.5 6179,-480.5 6179,-474.5 6185,-468.5 6191,-468.5 6191,-468.5 6277,-468.5 6277,-468.5 6283,-468.5 6289,-474.5 6289,-480.5 6289,-480.5 6289,-524.5 6289,-524.5 6289,-530.5 6283,-536.5 6277,-536.5\"/>\n<text text-anchor=\"start\" x=\"6192\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6194.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6193.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6187\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 211->212 -->\n<g id=\"edge212\" class=\"edge\"><title>211->212</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6239.22,-579.907C6238.49,-569.204 6237.7,-557.615 6236.96,-546.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6240.44,-546.405 6236.27,-536.667 6233.46,-546.882 6240.44,-546.405\"/>\n</g>\n<!-- 213 -->\n<g id=\"node214\" class=\"node\"><title>213</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6421,-536.5C6421,-536.5 6319,-536.5 6319,-536.5 6313,-536.5 6307,-530.5 6307,-524.5 6307,-524.5 6307,-480.5 6307,-480.5 6307,-474.5 6313,-468.5 6319,-468.5 6319,-468.5 6421,-468.5 6421,-468.5 6427,-468.5 6433,-474.5 6433,-480.5 6433,-480.5 6433,-524.5 6433,-524.5 6433,-530.5 6427,-536.5 6421,-536.5\"/>\n<text text-anchor=\"start\" x=\"6328\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6330.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6329.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"6315\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 211->213 -->\n<g id=\"edge213\" class=\"edge\"><title>211->213</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6286.41,-579.907C6299.33,-568.101 6313.42,-555.217 6326.29,-543.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6328.7,-545.997 6333.71,-536.667 6323.97,-540.83 6328.7,-545.997\"/>\n</g>\n<!-- 215 -->\n<g id=\"node216\" class=\"node\"><title>215</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6447,-655.5C6447,-655.5 6345,-655.5 6345,-655.5 6339,-655.5 6333,-649.5 6333,-643.5 6333,-643.5 6333,-599.5 6333,-599.5 6333,-593.5 6339,-587.5 6345,-587.5 6345,-587.5 6447,-587.5 6447,-587.5 6453,-587.5 6459,-593.5 6459,-599.5 6459,-599.5 6459,-643.5 6459,-643.5 6459,-649.5 6453,-655.5 6447,-655.5\"/>\n<text text-anchor=\"start\" x=\"6354\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6352.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 12</text>\n<text text-anchor=\"start\" x=\"6351.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 20]</text>\n<text text-anchor=\"start\" x=\"6341\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 214->215 -->\n<g id=\"edge215\" class=\"edge\"><title>214->215</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6408.41,-698.907C6406.67,-688.204 6404.79,-676.615 6403.03,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6406.44,-664.977 6401.39,-655.667 6399.53,-666.099 6406.44,-664.977\"/>\n</g>\n<!-- 216 -->\n<g id=\"node217\" class=\"node\"><title>216</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6575,-655.5C6575,-655.5 6489,-655.5 6489,-655.5 6483,-655.5 6477,-649.5 6477,-643.5 6477,-643.5 6477,-599.5 6477,-599.5 6477,-593.5 6483,-587.5 6489,-587.5 6489,-587.5 6575,-587.5 6575,-587.5 6581,-587.5 6587,-593.5 6587,-599.5 6587,-599.5 6587,-643.5 6587,-643.5 6587,-649.5 6581,-655.5 6575,-655.5\"/>\n<text text-anchor=\"start\" x=\"6490\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6492.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6491.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"6485\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 214->216 -->\n<g id=\"edge216\" class=\"edge\"><title>214->216</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6455.59,-698.907C6467.29,-687.211 6480.04,-674.457 6491.72,-662.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6494.24,-665.213 6498.83,-655.667 6489.29,-660.263 6494.24,-665.213\"/>\n</g>\n<!-- 218 -->\n<g id=\"node219\" class=\"node\"><title>218</title>\n<path fill=\"#ebf5fc\" stroke=\"black\" d=\"M6823.5,-901C6823.5,-901 6700.5,-901 6700.5,-901 6694.5,-901 6688.5,-895 6688.5,-889 6688.5,-889 6688.5,-830 6688.5,-830 6688.5,-824 6694.5,-818 6700.5,-818 6700.5,-818 6823.5,-818 6823.5,-818 6829.5,-818 6835.5,-824 6835.5,-830 6835.5,-830 6835.5,-889 6835.5,-889 6835.5,-895 6829.5,-901 6823.5,-901\"/>\n<text text-anchor=\"start\" x=\"6696.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">src_bytes ≤ 39213.5</text>\n<text text-anchor=\"start\" x=\"6712\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.998</text>\n<text text-anchor=\"start\" x=\"6714.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 183</text>\n<text text-anchor=\"start\" x=\"6705\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [137, 152]</text>\n<text text-anchor=\"start\" x=\"6707\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 217->218 -->\n<g id=\"edge218\" class=\"edge\"><title>217->218</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6680.37,-936.907C6690.35,-927.56 6701.06,-917.538 6711.33,-907.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6713.8,-910.41 6718.71,-901.021 6709.02,-905.299 6713.8,-910.41\"/>\n</g>\n<!-- 233 -->\n<g id=\"node234\" class=\"node\"><title>233</title>\n<path fill=\"#e6833d\" stroke=\"black\" d=\"M7273.5,-901C7273.5,-901 7094.5,-901 7094.5,-901 7088.5,-901 7082.5,-895 7082.5,-889 7082.5,-889 7082.5,-830 7082.5,-830 7082.5,-824 7088.5,-818 7094.5,-818 7094.5,-818 7273.5,-818 7273.5,-818 7279.5,-818 7285.5,-824 7285.5,-830 7285.5,-830 7285.5,-889 7285.5,-889 7285.5,-895 7279.5,-901 7273.5,-901\"/>\n<text text-anchor=\"start\" x=\"7090.5\" y=\"-885.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.36</text>\n<text text-anchor=\"start\" x=\"7134\" y=\"-870.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.137</text>\n<text text-anchor=\"start\" x=\"7140.5\" y=\"-855.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 65</text>\n<text text-anchor=\"start\" x=\"7135.5\" y=\"-840.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [102, 2]</text>\n<text text-anchor=\"start\" x=\"7137\" y=\"-825.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 217->233 -->\n<g id=\"edge233\" class=\"edge\"><title>217->233</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6760.19,-939.213C6763.15,-938.451 6766.09,-937.712 6769,-937 6870.72,-912.108 6988.23,-891.163 7072.18,-877.518\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7072.94,-880.942 7082.25,-875.891 7071.82,-874.032 7072.94,-880.942\"/>\n</g>\n<!-- 219 -->\n<g id=\"node220\" class=\"node\"><title>219</title>\n<path fill=\"#e89050\" stroke=\"black\" d=\"M6819.5,-782C6819.5,-782 6704.5,-782 6704.5,-782 6698.5,-782 6692.5,-776 6692.5,-770 6692.5,-770 6692.5,-711 6692.5,-711 6692.5,-705 6698.5,-699 6704.5,-699 6704.5,-699 6819.5,-699 6819.5,-699 6825.5,-699 6831.5,-705 6831.5,-711 6831.5,-711 6831.5,-770 6831.5,-770 6831.5,-776 6825.5,-782 6819.5,-782\"/>\n<text text-anchor=\"start\" x=\"6700.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_bytes ≤ 2431.0</text>\n<text text-anchor=\"start\" x=\"6712\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.485</text>\n<text text-anchor=\"start\" x=\"6714.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 102</text>\n<text text-anchor=\"start\" x=\"6709\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [136, 16]</text>\n<text text-anchor=\"start\" x=\"6715\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 218->219 -->\n<g id=\"edge219\" class=\"edge\"><title>218->219</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6762,-817.907C6762,-809.649 6762,-800.864 6762,-792.302\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6765.5,-792.021 6762,-782.021 6758.5,-792.021 6765.5,-792.021\"/>\n</g>\n<!-- 230 -->\n<g id=\"node231\" class=\"node\"><title>230</title>\n<path fill=\"#3a9ee5\" stroke=\"black\" d=\"M7098.5,-782C7098.5,-782 6911.5,-782 6911.5,-782 6905.5,-782 6899.5,-776 6899.5,-770 6899.5,-770 6899.5,-711 6899.5,-711 6899.5,-705 6905.5,-699 6911.5,-699 6911.5,-699 7098.5,-699 7098.5,-699 7104.5,-699 7110.5,-705 7110.5,-711 7110.5,-711 7110.5,-770 7110.5,-770 7110.5,-776 7104.5,-782 7098.5,-782\"/>\n<text text-anchor=\"start\" x=\"6907.5\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_diff_srv_rate ≤ 0.035</text>\n<text text-anchor=\"start\" x=\"6955\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.062</text>\n<text text-anchor=\"start\" x=\"6961.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 81</text>\n<text text-anchor=\"start\" x=\"6956.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 136]</text>\n<text text-anchor=\"start\" x=\"6950\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 218->230 -->\n<g id=\"edge230\" class=\"edge\"><title>218->230</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6835.57,-823.079C6859.45,-811.578 6886.29,-798.659 6911.43,-786.553\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6913.12,-789.625 6920.61,-782.134 6910.08,-783.318 6913.12,-789.625\"/>\n</g>\n<!-- 220 -->\n<g id=\"node221\" class=\"node\"><title>220</title>\n<path fill=\"#e6853f\" stroke=\"black\" d=\"M6802.5,-663C6802.5,-663 6671.5,-663 6671.5,-663 6665.5,-663 6659.5,-657 6659.5,-651 6659.5,-651 6659.5,-592 6659.5,-592 6659.5,-586 6665.5,-580 6671.5,-580 6671.5,-580 6802.5,-580 6802.5,-580 6808.5,-580 6814.5,-586 6814.5,-592 6814.5,-592 6814.5,-651 6814.5,-651 6814.5,-657 6808.5,-663 6802.5,-663\"/>\n<text text-anchor=\"start\" x=\"6667.5\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">wrong_fragment ≤ 0.5</text>\n<text text-anchor=\"start\" x=\"6687\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.184</text>\n<text text-anchor=\"start\" x=\"6693.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 70</text>\n<text text-anchor=\"start\" x=\"6688.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [104, 3]</text>\n<text text-anchor=\"start\" x=\"6690\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 219->220 -->\n<g id=\"edge220\" class=\"edge\"><title>219->220</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6753.33,-698.907C6751.54,-690.558 6749.64,-681.671 6747.79,-673.02\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6751.17,-672.069 6745.66,-663.021 6744.33,-673.531 6751.17,-672.069\"/>\n</g>\n<!-- 225 -->\n<g id=\"node226\" class=\"node\"><title>225</title>\n<path fill=\"#f0b489\" stroke=\"black\" d=\"M6937,-663C6937,-663 6845,-663 6845,-663 6839,-663 6833,-657 6833,-651 6833,-651 6833,-592 6833,-592 6833,-586 6839,-580 6845,-580 6845,-580 6937,-580 6937,-580 6943,-580 6949,-586 6949,-592 6949,-592 6949,-651 6949,-651 6949,-657 6943,-663 6937,-663\"/>\n<text text-anchor=\"start\" x=\"6859\" y=\"-647.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">hot ≤ 26.0</text>\n<text text-anchor=\"start\" x=\"6841\" y=\"-632.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.867</text>\n<text text-anchor=\"start\" x=\"6847.5\" y=\"-617.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 32</text>\n<text text-anchor=\"start\" x=\"6842.5\" y=\"-602.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [32, 13]</text>\n<text text-anchor=\"start\" x=\"6844\" y=\"-587.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 219->225 -->\n<g id=\"edge225\" class=\"edge\"><title>219->225</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6806.76,-698.907C6817.06,-689.56 6828.11,-679.538 6838.71,-669.929\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6841.27,-672.332 6846.32,-663.021 6836.56,-667.146 6841.27,-672.332\"/>\n</g>\n<!-- 221 -->\n<g id=\"node222\" class=\"node\"><title>221</title>\n<path fill=\"#e5823b\" stroke=\"black\" d=\"M6690.5,-544C6690.5,-544 6463.5,-544 6463.5,-544 6457.5,-544 6451.5,-538 6451.5,-532 6451.5,-532 6451.5,-473 6451.5,-473 6451.5,-467 6457.5,-461 6463.5,-461 6463.5,-461 6690.5,-461 6690.5,-461 6696.5,-461 6702.5,-467 6702.5,-473 6702.5,-473 6702.5,-532 6702.5,-532 6702.5,-538 6696.5,-544 6690.5,-544\"/>\n<text text-anchor=\"start\" x=\"6459.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_same_src_port_rate ≤ 0.52</text>\n<text text-anchor=\"start\" x=\"6527\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.078</text>\n<text text-anchor=\"start\" x=\"6533.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 69</text>\n<text text-anchor=\"start\" x=\"6528.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [104, 1]</text>\n<text text-anchor=\"start\" x=\"6530\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 220->221 -->\n<g id=\"edge221\" class=\"edge\"><title>220->221</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6681.49,-579.907C6668.33,-570.288 6654.2,-559.953 6640.71,-550.09\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6642.55,-547.098 6632.41,-544.021 6638.42,-552.749 6642.55,-547.098\"/>\n</g>\n<!-- 224 -->\n<g id=\"node225\" class=\"node\"><title>224</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6835,-536.5C6835,-536.5 6733,-536.5 6733,-536.5 6727,-536.5 6721,-530.5 6721,-524.5 6721,-524.5 6721,-480.5 6721,-480.5 6721,-474.5 6727,-468.5 6733,-468.5 6733,-468.5 6835,-468.5 6835,-468.5 6841,-468.5 6847,-474.5 6847,-480.5 6847,-480.5 6847,-524.5 6847,-524.5 6847,-530.5 6841,-536.5 6835,-536.5\"/>\n<text text-anchor=\"start\" x=\"6742\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6744.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6743.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"6729\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 220->224 -->\n<g id=\"edge224\" class=\"edge\"><title>220->224</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6753.31,-579.907C6757.69,-568.983 6762.45,-557.137 6766.88,-546.107\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6770.2,-547.251 6770.68,-536.667 6763.7,-544.642 6770.2,-547.251\"/>\n</g>\n<!-- 222 -->\n<g id=\"node223\" class=\"node\"><title>222</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M6552.5,-417.5C6552.5,-417.5 6463.5,-417.5 6463.5,-417.5 6457.5,-417.5 6451.5,-411.5 6451.5,-405.5 6451.5,-405.5 6451.5,-361.5 6451.5,-361.5 6451.5,-355.5 6457.5,-349.5 6463.5,-349.5 6463.5,-349.5 6552.5,-349.5 6552.5,-349.5 6558.5,-349.5 6564.5,-355.5 6564.5,-361.5 6564.5,-361.5 6564.5,-405.5 6564.5,-405.5 6564.5,-411.5 6558.5,-417.5 6552.5,-417.5\"/>\n<text text-anchor=\"start\" x=\"6466\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6464.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 68</text>\n<text text-anchor=\"start\" x=\"6459.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [104, 0]</text>\n<text text-anchor=\"start\" x=\"6461\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 221->222 -->\n<g id=\"edge222\" class=\"edge\"><title>221->222</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6553.06,-460.907C6546.49,-449.763 6539.35,-437.658 6532.73,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6535.65,-424.503 6527.56,-417.667 6529.63,-428.059 6535.65,-424.503\"/>\n</g>\n<!-- 223 -->\n<g id=\"node224\" class=\"node\"><title>223</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6697,-417.5C6697,-417.5 6595,-417.5 6595,-417.5 6589,-417.5 6583,-411.5 6583,-405.5 6583,-405.5 6583,-361.5 6583,-361.5 6583,-355.5 6589,-349.5 6595,-349.5 6595,-349.5 6697,-349.5 6697,-349.5 6703,-349.5 6709,-355.5 6709,-361.5 6709,-361.5 6709,-405.5 6709,-405.5 6709,-411.5 6703,-417.5 6697,-417.5\"/>\n<text text-anchor=\"start\" x=\"6604\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6606.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6605.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 1]</text>\n<text text-anchor=\"start\" x=\"6591\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 221->223 -->\n<g id=\"edge223\" class=\"edge\"><title>221->223</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6600.94,-460.907C6607.51,-449.763 6614.65,-437.658 6621.27,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6624.37,-428.059 6626.44,-417.667 6618.35,-424.503 6624.37,-428.059\"/>\n</g>\n<!-- 226 -->\n<g id=\"node227\" class=\"node\"><title>226</title>\n<path fill=\"#e78945\" stroke=\"black\" d=\"M7070.5,-544C7070.5,-544 6877.5,-544 6877.5,-544 6871.5,-544 6865.5,-538 6865.5,-532 6865.5,-532 6865.5,-473 6865.5,-473 6865.5,-467 6871.5,-461 6877.5,-461 6877.5,-461 7070.5,-461 7070.5,-461 7076.5,-461 7082.5,-467 7082.5,-473 7082.5,-473 7082.5,-532 7082.5,-532 7082.5,-538 7076.5,-544 7070.5,-544\"/>\n<text text-anchor=\"start\" x=\"6873.5\" y=\"-528.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_rerror_rate ≤ 0.01</text>\n<text text-anchor=\"start\" x=\"6924\" y=\"-513.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.323</text>\n<text text-anchor=\"start\" x=\"6930.5\" y=\"-498.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 25</text>\n<text text-anchor=\"start\" x=\"6929.5\" y=\"-483.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [32, 2]</text>\n<text text-anchor=\"start\" x=\"6927\" y=\"-468.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 225->226 -->\n<g id=\"edge226\" class=\"edge\"><title>225->226</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6919.8,-579.907C6926.11,-571.014 6932.85,-561.509 6939.36,-552.331\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6942.32,-554.202 6945.25,-544.021 6936.61,-550.152 6942.32,-554.202\"/>\n</g>\n<!-- 229 -->\n<g id=\"node230\" class=\"node\"><title>229</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7215,-536.5C7215,-536.5 7113,-536.5 7113,-536.5 7107,-536.5 7101,-530.5 7101,-524.5 7101,-524.5 7101,-480.5 7101,-480.5 7101,-474.5 7107,-468.5 7113,-468.5 7113,-468.5 7215,-468.5 7215,-468.5 7221,-468.5 7227,-474.5 7227,-480.5 7227,-480.5 7227,-524.5 7227,-524.5 7227,-530.5 7221,-536.5 7215,-536.5\"/>\n<text text-anchor=\"start\" x=\"7122\" y=\"-521.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"7124.5\" y=\"-506.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 7</text>\n<text text-anchor=\"start\" x=\"7119.5\" y=\"-491.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 11]</text>\n<text text-anchor=\"start\" x=\"7109\" y=\"-476.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 225->229 -->\n<g id=\"edge229\" class=\"edge\"><title>225->229</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6949.33,-583.976C6952.23,-582.564 6955.13,-581.229 6958,-580 7014.31,-555.926 7034.25,-567.023 7091,-544 7093.35,-543.046 7095.72,-542.034 7098.1,-540.975\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7099.69,-544.095 7107.26,-536.688 7096.72,-537.754 7099.69,-544.095\"/>\n</g>\n<!-- 227 -->\n<g id=\"node228\" class=\"node\"><title>227</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6957,-417.5C6957,-417.5 6855,-417.5 6855,-417.5 6849,-417.5 6843,-411.5 6843,-405.5 6843,-405.5 6843,-361.5 6843,-361.5 6843,-355.5 6849,-349.5 6855,-349.5 6855,-349.5 6957,-349.5 6957,-349.5 6963,-349.5 6969,-355.5 6969,-361.5 6969,-361.5 6969,-405.5 6969,-405.5 6969,-411.5 6963,-417.5 6957,-417.5\"/>\n<text text-anchor=\"start\" x=\"6864\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6866.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"6865.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"6851\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 226->227 -->\n<g id=\"edge227\" class=\"edge\"><title>226->227</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6950.41,-460.907C6943.93,-449.763 6936.9,-437.658 6930.37,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6933.33,-424.554 6925.28,-417.667 6927.28,-428.072 6933.33,-424.554\"/>\n</g>\n<!-- 228 -->\n<g id=\"node229\" class=\"node\"><title>228</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7085,-417.5C7085,-417.5 6999,-417.5 6999,-417.5 6993,-417.5 6987,-411.5 6987,-405.5 6987,-405.5 6987,-361.5 6987,-361.5 6987,-355.5 6993,-349.5 6999,-349.5 6999,-349.5 7085,-349.5 7085,-349.5 7091,-349.5 7097,-355.5 7097,-361.5 7097,-361.5 7097,-405.5 7097,-405.5 7097,-411.5 7091,-417.5 7085,-417.5\"/>\n<text text-anchor=\"start\" x=\"7000\" y=\"-402.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6998.5\" y=\"-387.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 24</text>\n<text text-anchor=\"start\" x=\"6997.5\" y=\"-372.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [32, 0]</text>\n<text text-anchor=\"start\" x=\"6995\" y=\"-357.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 226->228 -->\n<g id=\"edge228\" class=\"edge\"><title>226->228</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6997.59,-460.907C7004.07,-449.763 7011.1,-437.658 7017.63,-426.439\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7020.72,-428.072 7022.72,-417.667 7014.67,-424.554 7020.72,-428.072\"/>\n</g>\n<!-- 231 -->\n<g id=\"node232\" class=\"node\"><title>231</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7081,-655.5C7081,-655.5 6979,-655.5 6979,-655.5 6973,-655.5 6967,-649.5 6967,-643.5 6967,-643.5 6967,-599.5 6967,-599.5 6967,-593.5 6973,-587.5 6979,-587.5 6979,-587.5 7081,-587.5 7081,-587.5 7087,-587.5 7093,-593.5 7093,-599.5 7093,-599.5 7093,-643.5 7093,-643.5 7093,-649.5 7087,-655.5 7081,-655.5\"/>\n<text text-anchor=\"start\" x=\"6988\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6986.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 80</text>\n<text text-anchor=\"start\" x=\"6981.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 136]</text>\n<text text-anchor=\"start\" x=\"6975\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 230->231 -->\n<g id=\"edge231\" class=\"edge\"><title>230->231</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7013.67,-698.907C7015.96,-688.204 7018.44,-676.615 7020.75,-665.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7024.25,-666.178 7022.91,-655.667 7017.4,-664.715 7024.25,-666.178\"/>\n</g>\n<!-- 232 -->\n<g id=\"node233\" class=\"node\"><title>232</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7209,-655.5C7209,-655.5 7123,-655.5 7123,-655.5 7117,-655.5 7111,-649.5 7111,-643.5 7111,-643.5 7111,-599.5 7111,-599.5 7111,-593.5 7117,-587.5 7123,-587.5 7123,-587.5 7209,-587.5 7209,-587.5 7215,-587.5 7221,-593.5 7221,-599.5 7221,-599.5 7221,-643.5 7221,-643.5 7221,-649.5 7215,-655.5 7209,-655.5\"/>\n<text text-anchor=\"start\" x=\"7124\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"7126.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 1</text>\n<text text-anchor=\"start\" x=\"7125.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [1, 0]</text>\n<text text-anchor=\"start\" x=\"7119\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 230->232 -->\n<g id=\"edge232\" class=\"edge\"><title>230->232</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7060.86,-698.907C7077.41,-686.88 7095.5,-673.735 7111.93,-661.791\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7114.33,-664.377 7120.36,-655.667 7110.21,-658.714 7114.33,-664.377\"/>\n</g>\n<!-- 234 -->\n<g id=\"node235\" class=\"node\"><title>234</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7227,-774.5C7227,-774.5 7141,-774.5 7141,-774.5 7135,-774.5 7129,-768.5 7129,-762.5 7129,-762.5 7129,-718.5 7129,-718.5 7129,-712.5 7135,-706.5 7141,-706.5 7141,-706.5 7227,-706.5 7227,-706.5 7233,-706.5 7239,-712.5 7239,-718.5 7239,-718.5 7239,-762.5 7239,-762.5 7239,-768.5 7233,-774.5 7227,-774.5\"/>\n<text text-anchor=\"start\" x=\"7142\" y=\"-759.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"7140.5\" y=\"-744.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 60</text>\n<text text-anchor=\"start\" x=\"7139.5\" y=\"-729.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [98, 0]</text>\n<text text-anchor=\"start\" x=\"7137\" y=\"-714.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 233->234 -->\n<g id=\"edge234\" class=\"edge\"><title>233->234</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7184,-817.907C7184,-807.204 7184,-795.615 7184,-784.776\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7187.5,-784.667 7184,-774.667 7180.5,-784.667 7187.5,-784.667\"/>\n</g>\n<!-- 235 -->\n<g id=\"node236\" class=\"node\"><title>235</title>\n<path fill=\"#f2c09c\" stroke=\"black\" d=\"M7491,-782C7491,-782 7269,-782 7269,-782 7263,-782 7257,-776 7257,-770 7257,-770 7257,-711 7257,-711 7257,-705 7263,-699 7269,-699 7269,-699 7491,-699 7491,-699 7497,-699 7503,-705 7503,-711 7503,-711 7503,-770 7503,-770 7503,-776 7497,-782 7491,-782\"/>\n<text text-anchor=\"start\" x=\"7265\" y=\"-766.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">dst_host_srv_diff_host_rate ≤ 0.025</text>\n<text text-anchor=\"start\" x=\"7330\" y=\"-751.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.918</text>\n<text text-anchor=\"start\" x=\"7340.5\" y=\"-736.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 5</text>\n<text text-anchor=\"start\" x=\"7339.5\" y=\"-721.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 2]</text>\n<text text-anchor=\"start\" x=\"7333\" y=\"-706.8\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 233->235 -->\n<g id=\"edge235\" class=\"edge\"><title>233->235</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7252,-817.907C7268.57,-808.016 7286.41,-797.368 7303.35,-787.254\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7305.33,-790.152 7312.12,-782.021 7301.74,-784.141 7305.33,-790.152\"/>\n</g>\n<!-- 236 -->\n<g id=\"node237\" class=\"node\"><title>236</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M7392,-655.5C7392,-655.5 7290,-655.5 7290,-655.5 7284,-655.5 7278,-649.5 7278,-643.5 7278,-643.5 7278,-599.5 7278,-599.5 7278,-593.5 7284,-587.5 7290,-587.5 7290,-587.5 7392,-587.5 7392,-587.5 7398,-587.5 7404,-593.5 7404,-599.5 7404,-599.5 7404,-643.5 7404,-643.5 7404,-649.5 7398,-655.5 7392,-655.5\"/>\n<text text-anchor=\"start\" x=\"7299\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"7301.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 2</text>\n<text text-anchor=\"start\" x=\"7300.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 2]</text>\n<text text-anchor=\"start\" x=\"7286\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 235->236 -->\n<g id=\"edge236\" class=\"edge\"><title>235->236</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7366.47,-698.907C7362.86,-688.094 7358.96,-676.376 7355.31,-665.441\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7358.54,-664.047 7352.06,-655.667 7351.9,-666.261 7358.54,-664.047\"/>\n</g>\n<!-- 237 -->\n<g id=\"node238\" class=\"node\"><title>237</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7520,-655.5C7520,-655.5 7434,-655.5 7434,-655.5 7428,-655.5 7422,-649.5 7422,-643.5 7422,-643.5 7422,-599.5 7422,-599.5 7422,-593.5 7428,-587.5 7434,-587.5 7434,-587.5 7520,-587.5 7520,-587.5 7526,-587.5 7532,-593.5 7532,-599.5 7532,-599.5 7532,-643.5 7532,-643.5 7532,-649.5 7526,-655.5 7520,-655.5\"/>\n<text text-anchor=\"start\" x=\"7435\" y=\"-640.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"7437.5\" y=\"-625.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 3</text>\n<text text-anchor=\"start\" x=\"7436.5\" y=\"-610.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [4, 0]</text>\n<text text-anchor=\"start\" x=\"7430\" y=\"-595.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 235->237 -->\n<g id=\"edge237\" class=\"edge\"><title>235->237</title>\n<path fill=\"none\" stroke=\"black\" d=\"M7413.65,-698.907C7423.17,-687.432 7433.53,-674.938 7443.06,-663.442\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"7445.81,-665.599 7449.5,-655.667 7440.43,-661.131 7445.81,-665.599\"/>\n</g>\n<!-- 239 -->\n<g id=\"node240\" class=\"node\"><title>239</title>\n<path fill=\"#399de5\" stroke=\"black\" d=\"M6892,-1012.5C6892,-1012.5 6790,-1012.5 6790,-1012.5 6784,-1012.5 6778,-1006.5 6778,-1000.5 6778,-1000.5 6778,-956.5 6778,-956.5 6778,-950.5 6784,-944.5 6790,-944.5 6790,-944.5 6892,-944.5 6892,-944.5 6898,-944.5 6904,-950.5 6904,-956.5 6904,-956.5 6904,-1000.5 6904,-1000.5 6904,-1006.5 6898,-1012.5 6892,-1012.5\"/>\n<text text-anchor=\"start\" x=\"6799\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6793.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 234</text>\n<text text-anchor=\"start\" x=\"6792.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [0, 354]</text>\n<text text-anchor=\"start\" x=\"6786\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Abnormal</text>\n</g>\n<!-- 238->239 -->\n<g id=\"edge239\" class=\"edge\"><title>238->239</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6841,-1055.91C6841,-1045.2 6841,-1033.62 6841,-1022.78\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6844.5,-1022.67 6841,-1012.67 6837.5,-1022.67 6844.5,-1022.67\"/>\n</g>\n<!-- 240 -->\n<g id=\"node241\" class=\"node\"><title>240</title>\n<path fill=\"#e58139\" stroke=\"black\" d=\"M7020,-1012.5C7020,-1012.5 6934,-1012.5 6934,-1012.5 6928,-1012.5 6922,-1006.5 6922,-1000.5 6922,-1000.5 6922,-956.5 6922,-956.5 6922,-950.5 6928,-944.5 6934,-944.5 6934,-944.5 7020,-944.5 7020,-944.5 7026,-944.5 7032,-950.5 7032,-956.5 7032,-956.5 7032,-1000.5 7032,-1000.5 7032,-1006.5 7026,-1012.5 7020,-1012.5\"/>\n<text text-anchor=\"start\" x=\"6935\" y=\"-997.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">entropy = 0.0</text>\n<text text-anchor=\"start\" x=\"6933.5\" y=\"-982.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">samples = 35</text>\n<text text-anchor=\"start\" x=\"6932.5\" y=\"-967.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">value = [57, 0]</text>\n<text text-anchor=\"start\" x=\"6930\" y=\"-952.3\" font-family=\"Helvetica,sans-Serif\" font-size=\"14.00\">class = Normal</text>\n</g>\n<!-- 238->240 -->\n<g id=\"edge240\" class=\"edge\"><title>238->240</title>\n<path fill=\"none\" stroke=\"black\" d=\"M6888.18,-1055.91C6901.91,-1044.1 6916.89,-1031.22 6930.56,-1019.45\"/>\n<polygon fill=\"black\" stroke=\"black\" points=\"6933.15,-1021.84 6938.45,-1012.67 6928.58,-1016.54 6933.15,-1021.84\"/>\n</g>\n</g>\n</svg>\n",
"text/plain": [
- "<graphviz.files.Source at 0x1c904853188>"
+ "<graphviz.sources.Source at 0x1d3a90b2430>"
]
},
- "execution_count": 9,
+ "execution_count": 6,
"metadata": {},
"output_type": "execute_result"
}
@@ -319,22 +386,22 @@
},
{
"cell_type": "code",
- "execution_count": 10,
+ "execution_count": 7,
"metadata": {},
"outputs": [
{
"data": {
"text/plain": [
- "<sklearn.metrics._plot.roc_curve.RocCurveDisplay at 0x1c9043427c8>"
+ "<sklearn.metrics._plot.roc_curve.RocCurveDisplay at 0x1d3a21a6bb0>"
]
},
- "execution_count": 10,
+ "execution_count": 7,
"metadata": {},
"output_type": "execute_result"
},
{
"data": {
- "image/png": "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",
+ "image/png": "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",
"text/plain": [
"<Figure size 432x288 with 1 Axes>"
]
@@ -377,7 +444,7 @@
"name": "python",
"nbconvert_exporter": "python",
"pygments_lexer": "ipython3",
- "version": "3.7.6"
+ "version": "3.8.5"
},
"orig_nbformat": 4
},
diff --git a/experiment/random forest/output/random forest b/experiment/random forest/output/random forest
index 41eefe4393f9fd500c7dd642230d8be2aff48258..b42bbf0b92fbb6ceda18c433df7a34bc4defcab0 100644
--- a/experiment/random forest/output/random forest
+++ b/experiment/random forest/output/random forest
@@ -66,500 +66,420 @@ edge [fontname=helvetica] ;
30 -> 31 ;
32 [label=<dst_host_srv_diff_host_rate ≤ 0.5<br/>entropy = 1.0<br/>samples = 6<br/>value = [5, 5]<br/>class = Normal>, fillcolor="#ffffff"] ;
30 -> 32 ;
-33 [label=<srv_count ≤ 3.5<br/>entropy = 0.954<br/>samples = 5<br/>value = [5, 3]<br/>class = Normal>, fillcolor="#f5cdb0"] ;
+33 [label=<entropy = 0.954<br/>samples = 5<br/>value = [5, 3]<br/>class = Normal>, fillcolor="#f5cdb0"] ;
32 -> 33 ;
-34 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-33 -> 34 ;
-35 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-33 -> 35 ;
-36 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-32 -> 36 ;
-37 [label=<dst_host_srv_count ≤ 109.5<br/>entropy = 0.918<br/>samples = 4<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
-25 -> 37 ;
-38 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-37 -> 38 ;
-39 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-37 -> 39 ;
-40 [label=<entropy = 0.0<br/>samples = 178<br/>value = [0, 277]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-4 -> 40 ;
-41 [label=<dst_host_srv_diff_host_rate ≤ 0.005<br/>entropy = 0.325<br/>samples = 281<br/>value = [412, 26]<br/>class = Normal>, fillcolor="#e78945"] ;
-3 -> 41 ;
-42 [label=<dst_host_count ≤ 22.5<br/>entropy = 0.918<br/>samples = 38<br/>value = [40, 20]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+34 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+32 -> 34 ;
+35 [label=<srv_count ≤ 1.5<br/>entropy = 0.918<br/>samples = 4<br/>value = [2, 4]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+25 -> 35 ;
+36 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+35 -> 36 ;
+37 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+35 -> 37 ;
+38 [label=<entropy = 0.0<br/>samples = 178<br/>value = [0, 277]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+4 -> 38 ;
+39 [label=<dst_host_srv_count ≤ 13.0<br/>entropy = 0.325<br/>samples = 281<br/>value = [412, 26]<br/>class = Normal>, fillcolor="#e78945"] ;
+3 -> 39 ;
+40 [label=<dst_host_diff_srv_rate ≤ 0.24<br/>entropy = 0.722<br/>samples = 17<br/>value = [4, 16]<br/>class = Abnormal>, fillcolor="#6ab6ec"] ;
+39 -> 40 ;
+41 [label=<dst_host_count ≤ 1.5<br/>entropy = 0.503<br/>samples = 15<br/>value = [2, 16]<br/>class = Abnormal>, fillcolor="#52a9e8"] ;
+40 -> 41 ;
+42 [label=<dst_host_srv_serror_rate ≤ 0.06<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
41 -> 42 ;
-43 [label=<protocol_type ≤ 0.5<br/>entropy = 0.938<br/>samples = 21<br/>value = [11, 20]<br/>class = Abnormal>, fillcolor="#a6d3f3"] ;
+43 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
42 -> 43 ;
-44 [label=<srv_count ≤ 2.5<br/>entropy = 0.929<br/>samples = 19<br/>value = [10, 19]<br/>class = Abnormal>, fillcolor="#a1d1f3"] ;
-43 -> 44 ;
-45 [label=<service ≤ 50.5<br/>entropy = 0.991<br/>samples = 12<br/>value = [10, 8]<br/>class = Normal>, fillcolor="#fae6d7"] ;
-44 -> 45 ;
-46 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-45 -> 46 ;
-47 [label=<dst_host_same_src_port_rate ≤ 0.32<br/>entropy = 0.439<br/>samples = 6<br/>value = [10, 1]<br/>class = Normal>, fillcolor="#e88e4d"] ;
-45 -> 47 ;
-48 [label=<entropy = 0.0<br/>samples = 4<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+44 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+42 -> 44 ;
+45 [label=<entropy = 0.0<br/>samples = 12<br/>value = [0, 15]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+41 -> 45 ;
+46 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+40 -> 46 ;
+47 [label=<dst_host_srv_serror_rate ≤ 0.525<br/>entropy = 0.163<br/>samples = 264<br/>value = [408, 10]<br/>class = Normal>, fillcolor="#e6843e"] ;
+39 -> 47 ;
+48 [label=<service ≤ 6.0<br/>entropy = 0.109<br/>samples = 262<br/>value = [408, 6]<br/>class = Normal>, fillcolor="#e5833c"] ;
47 -> 48 ;
-49 [label=<srv_serror_rate ≤ 0.5<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
-47 -> 49 ;
-50 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+49 [label=<dst_host_same_src_port_rate ≤ 0.93<br/>entropy = 0.845<br/>samples = 12<br/>value = [16, 6]<br/>class = Normal>, fillcolor="#efb083"] ;
+48 -> 49 ;
+50 [label=<entropy = 0.0<br/>samples = 8<br/>value = [16, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
49 -> 50 ;
-51 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+51 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
49 -> 51 ;
-52 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-44 -> 52 ;
-53 [label=<dst_host_same_src_port_rate ≤ 0.375<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
-43 -> 53 ;
-54 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-53 -> 54 ;
-55 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-53 -> 55 ;
-56 [label=<entropy = 0.0<br/>samples = 17<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-42 -> 56 ;
-57 [label=<service ≤ 9.0<br/>entropy = 0.118<br/>samples = 243<br/>value = [372, 6]<br/>class = Normal>, fillcolor="#e5833c"] ;
-41 -> 57 ;
-58 [label=<dst_host_diff_srv_rate ≤ 0.015<br/>entropy = 0.792<br/>samples = 11<br/>value = [16, 5]<br/>class = Normal>, fillcolor="#eda877"] ;
+52 [label=<entropy = 0.0<br/>samples = 250<br/>value = [392, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+48 -> 52 ;
+53 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+47 -> 53 ;
+54 [label=<entropy = 0.0<br/>samples = 369<br/>value = [0, 561]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+2 -> 54 ;
+55 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.093<br/>samples = 4089<br/>value = [75, 6255]<br/>class = Abnormal>, fillcolor="#3b9ee5"] ;
+1 -> 55 ;
+56 [label=<dst_host_srv_serror_rate ≤ 0.955<br/>entropy = 0.74<br/>samples = 194<br/>value = [63, 238]<br/>class = Abnormal>, fillcolor="#6db7ec"] ;
+55 -> 56 ;
+57 [label=<dst_host_same_src_port_rate ≤ 0.215<br/>entropy = 0.997<br/>samples = 85<br/>value = [63, 72]<br/>class = Abnormal>, fillcolor="#e6f3fc"] ;
+56 -> 57 ;
+58 [label=<count ≤ 4.5<br/>entropy = 0.786<br/>samples = 53<br/>value = [62, 19]<br/>class = Normal>, fillcolor="#eda876"] ;
57 -> 58 ;
-59 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+59 [label=<logged_in ≤ 0.5<br/>entropy = 0.28<br/>samples = 36<br/>value = [59, 3]<br/>class = Normal>, fillcolor="#e68743"] ;
58 -> 59 ;
-60 [label=<entropy = 0.0<br/>samples = 8<br/>value = [16, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-58 -> 60 ;
-61 [label=<rerror_rate ≤ 0.165<br/>entropy = 0.028<br/>samples = 232<br/>value = [356, 1]<br/>class = Normal>, fillcolor="#e5813a"] ;
-57 -> 61 ;
-62 [label=<land ≤ 0.5<br/>entropy = 0.169<br/>samples = 28<br/>value = [39, 1]<br/>class = Normal>, fillcolor="#e6843e"] ;
+60 [label=<dst_host_same_src_port_rate ≤ 0.025<br/>entropy = 0.323<br/>samples = 29<br/>value = [48, 3]<br/>class = Normal>, fillcolor="#e78945"] ;
+59 -> 60 ;
+61 [label=<srv_count ≤ 1.5<br/>entropy = 0.459<br/>samples = 21<br/>value = [28, 3]<br/>class = Normal>, fillcolor="#e88e4e"] ;
+60 -> 61 ;
+62 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.258<br/>samples = 15<br/>value = [22, 1]<br/>class = Normal>, fillcolor="#e68742"] ;
61 -> 62 ;
-63 [label=<entropy = 0.0<br/>samples = 27<br/>value = [39, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+63 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
62 -> 63 ;
-64 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+64 [label=<entropy = 0.0<br/>samples = 14<br/>value = [22, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
62 -> 64 ;
-65 [label=<entropy = 0.0<br/>samples = 204<br/>value = [317, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+65 [label=<dst_host_srv_count ≤ 128.5<br/>entropy = 0.811<br/>samples = 6<br/>value = [6, 2]<br/>class = Normal>, fillcolor="#eeab7b"] ;
61 -> 65 ;
-66 [label=<entropy = 0.0<br/>samples = 369<br/>value = [0, 561]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-2 -> 66 ;
-67 [label=<dst_host_srv_serror_rate ≤ 0.955<br/>entropy = 0.093<br/>samples = 4089<br/>value = [75, 6255]<br/>class = Abnormal>, fillcolor="#3b9ee5"] ;
-1 -> 67 ;
-68 [label=<diff_srv_rate ≤ 0.005<br/>entropy = 0.244<br/>samples = 1189<br/>value = [75, 1787]<br/>class = Abnormal>, fillcolor="#41a1e6"] ;
-67 -> 68 ;
-69 [label=<dst_host_same_srv_rate ≤ 0.015<br/>entropy = 0.648<br/>samples = 255<br/>value = [66, 332]<br/>class = Abnormal>, fillcolor="#60b0ea"] ;
-68 -> 69 ;
-70 [label=<dst_host_srv_rerror_rate ≤ 0.665<br/>entropy = 0.069<br/>samples = 155<br/>value = [2, 239]<br/>class = Abnormal>, fillcolor="#3b9ee5"] ;
-69 -> 70 ;
-71 [label=<src_bytes ≤ 5.5<br/>entropy = 0.764<br/>samples = 7<br/>value = [2, 7]<br/>class = Abnormal>, fillcolor="#72b9ec"] ;
+66 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+65 -> 66 ;
+67 [label=<entropy = 0.0<br/>samples = 4<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+65 -> 67 ;
+68 [label=<entropy = 0.0<br/>samples = 8<br/>value = [20, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+60 -> 68 ;
+69 [label=<entropy = 0.0<br/>samples = 7<br/>value = [11, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+59 -> 69 ;
+70 [label=<dst_host_srv_count ≤ 140.5<br/>entropy = 0.629<br/>samples = 17<br/>value = [3, 16]<br/>class = Abnormal>, fillcolor="#5eafea"] ;
+58 -> 70 ;
+71 [label=<entropy = 0.0<br/>samples = 14<br/>value = [0, 16]<br/>class = Abnormal>, fillcolor="#399de5"] ;
70 -> 71 ;
-72 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-71 -> 72 ;
-73 [label=<protocol_type ≤ 0.5<br/>entropy = 0.918<br/>samples = 3<br/>value = [2, 1]<br/>class = Normal>, fillcolor="#f2c09c"] ;
-71 -> 73 ;
-74 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+72 [label=<entropy = 0.0<br/>samples = 3<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+70 -> 72 ;
+73 [label=<protocol_type ≤ 0.5<br/>entropy = 0.133<br/>samples = 32<br/>value = [1, 53]<br/>class = Abnormal>, fillcolor="#3d9fe5"] ;
+57 -> 73 ;
+74 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
73 -> 74 ;
-75 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+75 [label=<entropy = 0.0<br/>samples = 31<br/>value = [0, 53]<br/>class = Abnormal>, fillcolor="#399de5"] ;
73 -> 75 ;
-76 [label=<entropy = 0.0<br/>samples = 148<br/>value = [0, 232]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-70 -> 76 ;
-77 [label=<src_bytes ≤ 26.0<br/>entropy = 0.975<br/>samples = 100<br/>value = [64, 93]<br/>class = Abnormal>, fillcolor="#c1e0f7"] ;
-69 -> 77 ;
-78 [label=<protocol_type ≤ 0.5<br/>entropy = 0.82<br/>samples = 51<br/>value = [64, 22]<br/>class = Normal>, fillcolor="#eeac7d"] ;
+76 [label=<entropy = 0.0<br/>samples = 109<br/>value = [0, 166]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+56 -> 76 ;
+77 [label=<dst_host_serror_rate ≤ 0.97<br/>entropy = 0.021<br/>samples = 3895<br/>value = [12, 6017]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+55 -> 77 ;
+78 [label=<dst_bytes ≤ 9.5<br/>entropy = 0.06<br/>samples = 1110<br/>value = [12, 1723]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
77 -> 78 ;
-79 [label=<dst_host_diff_srv_rate ≤ 0.045<br/>entropy = 0.235<br/>samples = 32<br/>value = [50, 2]<br/>class = Normal>, fillcolor="#e68641"] ;
+79 [label=<dst_host_rerror_rate ≤ 0.055<br/>entropy = 0.038<br/>samples = 1102<br/>value = [7, 1719]<br/>class = Abnormal>, fillcolor="#3a9de5"] ;
78 -> 79 ;
-80 [label=<entropy = 0.0<br/>samples = 23<br/>value = [40, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+80 [label=<protocol_type ≤ 0.5<br/>entropy = 0.397<br/>samples = 59<br/>value = [7, 82]<br/>class = Abnormal>, fillcolor="#4aa5e7"] ;
79 -> 80 ;
-81 [label=<service ≤ 50.5<br/>entropy = 0.65<br/>samples = 9<br/>value = [10, 2]<br/>class = Normal>, fillcolor="#ea9a61"] ;
-79 -> 81 ;
-82 [label=<dst_host_serror_rate ≤ 0.365<br/>entropy = 0.918<br/>samples = 3<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+81 [label=<dst_host_srv_rerror_rate ≤ 0.7<br/>entropy = 0.881<br/>samples = 8<br/>value = [7, 3]<br/>class = Normal>, fillcolor="#f0b78e"] ;
+80 -> 81 ;
+82 [label=<entropy = 0.0<br/>samples = 4<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
81 -> 82 ;
-83 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-82 -> 83 ;
-84 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-82 -> 84 ;
-85 [label=<entropy = 0.0<br/>samples = 6<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-81 -> 85 ;
-86 [label=<srv_count ≤ 6.0<br/>entropy = 0.977<br/>samples = 19<br/>value = [14, 20]<br/>class = Abnormal>, fillcolor="#c4e2f7"] ;
-78 -> 86 ;
-87 [label=<dst_host_same_src_port_rate ≤ 0.39<br/>entropy = 0.696<br/>samples = 8<br/>value = [13, 3]<br/>class = Normal>, fillcolor="#eb9e67"] ;
-86 -> 87 ;
-88 [label=<entropy = 0.0<br/>samples = 6<br/>value = [13, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-87 -> 88 ;
-89 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-87 -> 89 ;
-90 [label=<dst_host_serror_rate ≤ 0.065<br/>entropy = 0.31<br/>samples = 11<br/>value = [1, 17]<br/>class = Abnormal>, fillcolor="#45a3e7"] ;
-86 -> 90 ;
-91 [label=<dst_host_rerror_rate ≤ 0.025<br/>entropy = 0.323<br/>samples = 10<br/>value = [1, 16]<br/>class = Abnormal>, fillcolor="#45a3e7"] ;
-90 -> 91 ;
-92 [label=<dst_host_same_src_port_rate ≤ 0.5<br/>entropy = 0.469<br/>samples = 6<br/>value = [1, 9]<br/>class = Abnormal>, fillcolor="#4fa8e8"] ;
-91 -> 92 ;
-93 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-92 -> 93 ;
-94 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-92 -> 94 ;
-95 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 7]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-91 -> 95 ;
-96 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-90 -> 96 ;
-97 [label=<entropy = 0.0<br/>samples = 49<br/>value = [0, 71]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-77 -> 97 ;
-98 [label=<dst_host_rerror_rate ≤ 0.005<br/>entropy = 0.054<br/>samples = 934<br/>value = [9, 1455]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
-68 -> 98 ;
-99 [label=<protocol_type ≤ 0.5<br/>entropy = 0.495<br/>samples = 54<br/>value = [9, 74]<br/>class = Abnormal>, fillcolor="#51a9e8"] ;
+83 [label=<dst_host_serror_rate ≤ 0.265<br/>entropy = 0.811<br/>samples = 4<br/>value = [1, 3]<br/>class = Abnormal>, fillcolor="#7bbeee"] ;
+81 -> 83 ;
+84 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+83 -> 84 ;
+85 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+83 -> 85 ;
+86 [label=<entropy = 0.0<br/>samples = 51<br/>value = [0, 79]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+80 -> 86 ;
+87 [label=<entropy = 0.0<br/>samples = 1043<br/>value = [0, 1637]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+79 -> 87 ;
+88 [label=<src_bytes ≤ 6.5<br/>entropy = 0.991<br/>samples = 8<br/>value = [5, 4]<br/>class = Normal>, fillcolor="#fae6d7"] ;
+78 -> 88 ;
+89 [label=<dst_host_serror_rate ≤ 0.065<br/>entropy = 0.722<br/>samples = 5<br/>value = [1, 4]<br/>class = Abnormal>, fillcolor="#6ab6ec"] ;
+88 -> 89 ;
+90 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+89 -> 90 ;
+91 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+89 -> 91 ;
+92 [label=<entropy = 0.0<br/>samples = 3<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+88 -> 92 ;
+93 [label=<entropy = 0.0<br/>samples = 2785<br/>value = [0, 4294]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+77 -> 93 ;
+94 [label=<src_bytes ≤ 333.5<br/>entropy = 0.385<br/>samples = 6106<br/>value = [8970, 728]<br/>class = Normal>, fillcolor="#e78b49"] ;
+0 -> 94 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
+95 [label=<count ≤ 3.5<br/>entropy = 0.087<br/>samples = 4325<br/>value = [6818, 75]<br/>class = Normal>, fillcolor="#e5823b"] ;
+94 -> 95 ;
+96 [label=<dst_host_same_src_port_rate ≤ 0.825<br/>entropy = 0.197<br/>samples = 1552<br/>value = [2343, 74]<br/>class = Normal>, fillcolor="#e6853f"] ;
+95 -> 96 ;
+97 [label=<src_bytes ≤ 126.5<br/>entropy = 0.106<br/>samples = 1299<br/>value = [1969, 28]<br/>class = Normal>, fillcolor="#e5833c"] ;
+96 -> 97 ;
+98 [label=<dst_host_serror_rate ≤ 0.03<br/>entropy = 0.337<br/>samples = 304<br/>value = [420, 28]<br/>class = Normal>, fillcolor="#e78946"] ;
+97 -> 98 ;
+99 [label=<num_access_files ≤ 0.5<br/>entropy = 0.26<br/>samples = 274<br/>value = [391, 18]<br/>class = Normal>, fillcolor="#e68742"] ;
98 -> 99 ;
-100 [label=<diff_srv_rate ≤ 0.3<br/>entropy = 0.684<br/>samples = 9<br/>value = [9, 2]<br/>class = Normal>, fillcolor="#eb9d65"] ;
+100 [label=<dst_host_same_srv_rate ≤ 0.505<br/>entropy = 0.239<br/>samples = 273<br/>value = [391, 16]<br/>class = Normal>, fillcolor="#e68641"] ;
99 -> 100 ;
-101 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+101 [label=<srv_diff_host_rate ≤ 0.125<br/>entropy = 0.411<br/>samples = 131<br/>value = [178, 16]<br/>class = Normal>, fillcolor="#e78c4b"] ;
100 -> 101 ;
-102 [label=<same_srv_rate ≤ 0.415<br/>entropy = 0.469<br/>samples = 8<br/>value = [9, 1]<br/>class = Normal>, fillcolor="#e88f4f"] ;
-100 -> 102 ;
-103 [label=<duration ≤ 3.5<br/>entropy = 0.811<br/>samples = 3<br/>value = [3, 1]<br/>class = Normal>, fillcolor="#eeab7b"] ;
+102 [label=<service ≤ 6.5<br/>entropy = 0.525<br/>samples = 94<br/>value = [119, 16]<br/>class = Normal>, fillcolor="#e89254"] ;
+101 -> 102 ;
+103 [label=<dst_host_count ≤ 216.5<br/>entropy = 0.976<br/>samples = 13<br/>value = [9, 13]<br/>class = Abnormal>, fillcolor="#c2e1f7"] ;
102 -> 103 ;
-104 [label=<entropy = 0.0<br/>samples = 2<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+104 [label=<dst_host_count ≤ 22.0<br/>entropy = 0.852<br/>samples = 10<br/>value = [5, 13]<br/>class = Abnormal>, fillcolor="#85c3ef"] ;
103 -> 104 ;
-105 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-103 -> 105 ;
-106 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-102 -> 106 ;
-107 [label=<entropy = 0.0<br/>samples = 45<br/>value = [0, 72]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-99 -> 107 ;
-108 [label=<entropy = 0.0<br/>samples = 880<br/>value = [0, 1381]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-98 -> 108 ;
-109 [label=<entropy = 0.0<br/>samples = 2900<br/>value = [0, 4468]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-67 -> 109 ;
-110 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.385<br/>samples = 6106<br/>value = [8970, 728]<br/>class = Normal>, fillcolor="#e78b49"] ;
-0 -> 110 [labeldistance=2.5, labelangle=-45, headlabel="False"] ;
-111 [label=<service ≤ 58.0<br/>entropy = 0.927<br/>samples = 987<br/>value = [1011, 526]<br/>class = Normal>, fillcolor="#f3c3a0"] ;
-110 -> 111 ;
-112 [label=<dst_host_diff_srv_rate ≤ 0.015<br/>entropy = 0.594<br/>samples = 567<br/>value = [768, 129]<br/>class = Normal>, fillcolor="#e9965a"] ;
-111 -> 112 ;
-113 [label=<count ≤ 3.5<br/>entropy = 0.985<br/>samples = 142<br/>value = [129, 97]<br/>class = Normal>, fillcolor="#f9e0ce"] ;
-112 -> 113 ;
-114 [label=<protocol_type ≤ 1.5<br/>entropy = 1.0<br/>samples = 124<br/>value = [98, 97]<br/>class = Normal>, fillcolor="#fffefd"] ;
-113 -> 114 ;
-115 [label=<service ≤ 9.5<br/>entropy = 0.916<br/>samples = 91<br/>value = [48, 97]<br/>class = Abnormal>, fillcolor="#9bcdf2"] ;
-114 -> 115 ;
-116 [label=<dst_host_srv_count ≤ 51.0<br/>entropy = 0.871<br/>samples = 86<br/>value = [40, 97]<br/>class = Abnormal>, fillcolor="#8bc5f0"] ;
-115 -> 116 ;
-117 [label=<dst_host_same_srv_rate ≤ 0.15<br/>entropy = 0.544<br/>samples = 58<br/>value = [11, 77]<br/>class = Abnormal>, fillcolor="#55abe9"] ;
+105 [label=<entropy = 0.0<br/>samples = 1<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+104 -> 105 ;
+106 [label=<entropy = 0.567<br/>samples = 9<br/>value = [2, 13]<br/>class = Abnormal>, fillcolor="#57ace9"] ;
+104 -> 106 ;
+107 [label=<entropy = 0.0<br/>samples = 3<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+103 -> 107 ;
+108 [label=<srv_count ≤ 2.5<br/>entropy = 0.177<br/>samples = 81<br/>value = [110, 3]<br/>class = Normal>, fillcolor="#e6843e"] ;
+102 -> 108 ;
+109 [label=<hot ≤ 0.5<br/>entropy = 0.074<br/>samples = 80<br/>value = [110, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
+108 -> 109 ;
+110 [label=<entropy = 0.0<br/>samples = 79<br/>value = [110, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+109 -> 110 ;
+111 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+109 -> 111 ;
+112 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+108 -> 112 ;
+113 [label=<entropy = 0.0<br/>samples = 37<br/>value = [59, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+101 -> 113 ;
+114 [label=<entropy = 0.0<br/>samples = 142<br/>value = [213, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+100 -> 114 ;
+115 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+99 -> 115 ;
+116 [label=<dst_host_srv_rerror_rate ≤ 0.475<br/>entropy = 0.821<br/>samples = 30<br/>value = [29, 10]<br/>class = Normal>, fillcolor="#eeac7d"] ;
+98 -> 116 ;
+117 [label=<dst_host_srv_count ≤ 1.5<br/>entropy = 0.345<br/>samples = 25<br/>value = [29, 2]<br/>class = Normal>, fillcolor="#e78a47"] ;
116 -> 117 ;
-118 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+118 [label=<service ≤ 50.0<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
117 -> 118 ;
-119 [label=<dst_host_srv_count ≤ 8.5<br/>entropy = 0.331<br/>samples = 53<br/>value = [5, 77]<br/>class = Abnormal>, fillcolor="#46a3e7"] ;
-117 -> 119 ;
-120 [label=<srv_count ≤ 1.5<br/>entropy = 1.0<br/>samples = 5<br/>value = [4, 4]<br/>class = Normal>, fillcolor="#ffffff"] ;
-119 -> 120 ;
-121 [label=<src_bytes ≤ 2568776.0<br/>entropy = 0.985<br/>samples = 4<br/>value = [4, 3]<br/>class = Normal>, fillcolor="#f8e0ce"] ;
-120 -> 121 ;
-122 [label=<protocol_type ≤ 0.5<br/>entropy = 0.722<br/>samples = 3<br/>value = [4, 1]<br/>class = Normal>, fillcolor="#eca06a"] ;
-121 -> 122 ;
-123 [label=<entropy = 0.0<br/>samples = 2<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-122 -> 123 ;
-124 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-122 -> 124 ;
-125 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-121 -> 125 ;
-126 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-120 -> 126 ;
-127 [label=<hot ≤ 0.5<br/>entropy = 0.103<br/>samples = 48<br/>value = [1, 73]<br/>class = Abnormal>, fillcolor="#3c9ee5"] ;
-119 -> 127 ;
-128 [label=<srv_count ≤ 1.5<br/>entropy = 0.113<br/>samples = 43<br/>value = [1, 65]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
+119 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+118 -> 119 ;
+120 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+118 -> 120 ;
+121 [label=<entropy = 0.0<br/>samples = 23<br/>value = [28, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+117 -> 121 ;
+122 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+116 -> 122 ;
+123 [label=<entropy = 0.0<br/>samples = 995<br/>value = [1549, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+97 -> 123 ;
+124 [label=<dst_host_same_src_port_rate ≤ 0.875<br/>entropy = 0.498<br/>samples = 253<br/>value = [374, 46]<br/>class = Normal>, fillcolor="#e89051"] ;
+96 -> 124 ;
+125 [label=<src_bytes ≤ 199.5<br/>entropy = 0.988<br/>samples = 29<br/>value = [24, 31]<br/>class = Abnormal>, fillcolor="#d2e9f9"] ;
+124 -> 125 ;
+126 [label=<entropy = 0.0<br/>samples = 14<br/>value = [19, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+125 -> 126 ;
+127 [label=<count ≤ 1.5<br/>entropy = 0.581<br/>samples = 15<br/>value = [5, 31]<br/>class = Abnormal>, fillcolor="#59ade9"] ;
+125 -> 127 ;
+128 [label=<entropy = 0.0<br/>samples = 10<br/>value = [0, 24]<br/>class = Abnormal>, fillcolor="#399de5"] ;
127 -> 128 ;
-129 [label=<dst_host_srv_diff_host_rate ≤ 0.105<br/>entropy = 0.172<br/>samples = 26<br/>value = [1, 38]<br/>class = Abnormal>, fillcolor="#3ea0e6"] ;
-128 -> 129 ;
-130 [label=<src_bytes ≤ 414.5<br/>entropy = 0.391<br/>samples = 7<br/>value = [1, 12]<br/>class = Abnormal>, fillcolor="#49a5e7"] ;
+129 [label=<dst_host_srv_count ≤ 79.0<br/>entropy = 0.98<br/>samples = 5<br/>value = [5, 7]<br/>class = Abnormal>, fillcolor="#c6e3f8"] ;
+127 -> 129 ;
+130 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
129 -> 130 ;
-131 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 12]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-130 -> 131 ;
-132 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-130 -> 132 ;
-133 [label=<entropy = 0.0<br/>samples = 19<br/>value = [0, 26]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-129 -> 133 ;
-134 [label=<entropy = 0.0<br/>samples = 17<br/>value = [0, 27]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-128 -> 134 ;
-135 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 8]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-127 -> 135 ;
-136 [label=<service ≤ 1.5<br/>entropy = 0.976<br/>samples = 28<br/>value = [29, 20]<br/>class = Normal>, fillcolor="#f7d8c2"] ;
-116 -> 136 ;
-137 [label=<entropy = 0.0<br/>samples = 13<br/>value = [23, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+131 [label=<dst_host_diff_srv_rate ≤ 0.04<br/>entropy = 0.65<br/>samples = 3<br/>value = [5, 1]<br/>class = Normal>, fillcolor="#ea9a61"] ;
+129 -> 131 ;
+132 [label=<dst_host_same_src_port_rate ≤ 0.835<br/>entropy = 0.811<br/>samples = 2<br/>value = [3, 1]<br/>class = Normal>, fillcolor="#eeab7b"] ;
+131 -> 132 ;
+133 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+132 -> 133 ;
+134 [label=<entropy = 0.0<br/>samples = 1<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+132 -> 134 ;
+135 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+131 -> 135 ;
+136 [label=<diff_srv_rate ≤ 0.335<br/>entropy = 0.247<br/>samples = 224<br/>value = [350, 15]<br/>class = Normal>, fillcolor="#e68641"] ;
+124 -> 136 ;
+137 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.263<br/>samples = 205<br/>value = [321, 15]<br/>class = Normal>, fillcolor="#e68742"] ;
136 -> 137 ;
-138 [label=<srv_count ≤ 1.5<br/>entropy = 0.779<br/>samples = 15<br/>value = [6, 20]<br/>class = Abnormal>, fillcolor="#74baed"] ;
-136 -> 138 ;
-139 [label=<dst_host_srv_count ≤ 210.5<br/>entropy = 0.286<br/>samples = 10<br/>value = [1, 19]<br/>class = Abnormal>, fillcolor="#43a2e6"] ;
+138 [label=<src_bytes ≤ 205.5<br/>entropy = 0.382<br/>samples = 122<br/>value = [187, 15]<br/>class = Normal>, fillcolor="#e78b49"] ;
+137 -> 138 ;
+139 [label=<dst_host_srv_diff_host_rate ≤ 0.11<br/>entropy = 0.072<br/>samples = 74<br/>value = [115, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
138 -> 139 ;
-140 [label=<entropy = 0.0<br/>samples = 9<br/>value = [0, 19]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+140 [label=<entropy = 0.0<br/>samples = 50<br/>value = [82, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
139 -> 140 ;
-141 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+141 [label=<logged_in ≤ 0.5<br/>entropy = 0.191<br/>samples = 24<br/>value = [33, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
139 -> 141 ;
-142 [label=<dst_host_same_src_port_rate ≤ 0.42<br/>entropy = 0.65<br/>samples = 5<br/>value = [5, 1]<br/>class = Normal>, fillcolor="#ea9a61"] ;
-138 -> 142 ;
-143 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-142 -> 143 ;
+142 [label=<entropy = 0.0<br/>samples = 16<br/>value = [25, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+141 -> 142 ;
+143 [label=<service ≤ 50.0<br/>entropy = 0.503<br/>samples = 8<br/>value = [8, 1]<br/>class = Normal>, fillcolor="#e89152"] ;
+141 -> 143 ;
144 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-142 -> 144 ;
-145 [label=<entropy = 0.0<br/>samples = 5<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-115 -> 145 ;
-146 [label=<entropy = 0.0<br/>samples = 33<br/>value = [50, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-114 -> 146 ;
-147 [label=<entropy = 0.0<br/>samples = 18<br/>value = [31, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-113 -> 147 ;
-148 [label=<dst_host_same_srv_rate ≤ 0.85<br/>entropy = 0.277<br/>samples = 425<br/>value = [639, 32]<br/>class = Normal>, fillcolor="#e68743"] ;
-112 -> 148 ;
-149 [label=<duration ≤ 8.0<br/>entropy = 0.164<br/>samples = 401<br/>value = [608, 15]<br/>class = Normal>, fillcolor="#e6843e"] ;
+143 -> 144 ;
+145 [label=<entropy = 0.0<br/>samples = 7<br/>value = [8, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+143 -> 145 ;
+146 [label=<dst_host_same_src_port_rate ≤ 0.95<br/>entropy = 0.641<br/>samples = 48<br/>value = [72, 14]<br/>class = Normal>, fillcolor="#ea9a5f"] ;
+138 -> 146 ;
+147 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+146 -> 147 ;
+148 [label=<dst_host_srv_count ≤ 45.5<br/>entropy = 0.617<br/>samples = 47<br/>value = [72, 13]<br/>class = Normal>, fillcolor="#ea985d"] ;
+146 -> 148 ;
+149 [label=<service ≤ 50.5<br/>entropy = 0.976<br/>samples = 10<br/>value = [9, 13]<br/>class = Abnormal>, fillcolor="#c2e1f7"] ;
148 -> 149 ;
-150 [label=<service ≤ 1.5<br/>entropy = 0.147<br/>samples = 399<br/>value = [608, 13]<br/>class = Normal>, fillcolor="#e6843d"] ;
+150 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 13]<br/>class = Abnormal>, fillcolor="#399de5"] ;
149 -> 150 ;
-151 [label=<dst_host_srv_diff_host_rate ≤ 0.155<br/>entropy = 0.035<br/>samples = 351<br/>value = [546, 2]<br/>class = Normal>, fillcolor="#e5813a"] ;
-150 -> 151 ;
-152 [label=<dst_host_diff_srv_rate ≤ 0.065<br/>entropy = 0.019<br/>samples = 349<br/>value = [545, 1]<br/>class = Normal>, fillcolor="#e58139"] ;
-151 -> 152 ;
-153 [label=<entropy = 0.0<br/>samples = 244<br/>value = [382, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-152 -> 153 ;
-154 [label=<dst_host_serror_rate ≤ 0.005<br/>entropy = 0.054<br/>samples = 105<br/>value = [163, 1]<br/>class = Normal>, fillcolor="#e5823a"] ;
-152 -> 154 ;
-155 [label=<entropy = 0.0<br/>samples = 83<br/>value = [132, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-154 -> 155 ;
-156 [label=<dst_host_diff_srv_rate ≤ 0.075<br/>entropy = 0.201<br/>samples = 22<br/>value = [31, 1]<br/>class = Normal>, fillcolor="#e6853f"] ;
-154 -> 156 ;
-157 [label=<flag ≤ 6.0<br/>entropy = 0.503<br/>samples = 7<br/>value = [8, 1]<br/>class = Normal>, fillcolor="#e89152"] ;
-156 -> 157 ;
-158 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+151 [label=<entropy = 0.0<br/>samples = 4<br/>value = [9, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+149 -> 151 ;
+152 [label=<entropy = 0.0<br/>samples = 37<br/>value = [63, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+148 -> 152 ;
+153 [label=<entropy = 0.0<br/>samples = 83<br/>value = [134, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+137 -> 153 ;
+154 [label=<entropy = 0.0<br/>samples = 19<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+136 -> 154 ;
+155 [label=<dst_host_rerror_rate ≤ 0.025<br/>entropy = 0.003<br/>samples = 2773<br/>value = [4475, 1]<br/>class = Normal>, fillcolor="#e58139"] ;
+95 -> 155 ;
+156 [label=<entropy = 0.0<br/>samples = 2699<br/>value = [4362, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+155 -> 156 ;
+157 [label=<rerror_rate ≤ 0.155<br/>entropy = 0.073<br/>samples = 74<br/>value = [113, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
+155 -> 157 ;
+158 [label=<entropy = 0.0<br/>samples = 70<br/>value = [108, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
157 -> 158 ;
-159 [label=<dst_host_srv_count ≤ 52.5<br/>entropy = 0.592<br/>samples = 6<br/>value = [6, 1]<br/>class = Normal>, fillcolor="#e9965a"] ;
+159 [label=<logged_in ≤ 0.5<br/>entropy = 0.65<br/>samples = 4<br/>value = [5, 1]<br/>class = Normal>, fillcolor="#ea9a61"] ;
157 -> 159 ;
-160 [label=<entropy = 0.0<br/>samples = 5<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+160 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
159 -> 160 ;
-161 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+161 [label=<entropy = 0.0<br/>samples = 3<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
159 -> 161 ;
-162 [label=<entropy = 0.0<br/>samples = 15<br/>value = [23, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-156 -> 162 ;
-163 [label=<dst_host_same_src_port_rate ≤ 0.43<br/>entropy = 1.0<br/>samples = 2<br/>value = [1, 1]<br/>class = Normal>, fillcolor="#ffffff"] ;
-151 -> 163 ;
-164 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+162 [label=<srv_count ≤ 52.5<br/>entropy = 0.783<br/>samples = 1781<br/>value = [2152, 653]<br/>class = Normal>, fillcolor="#eda775"] ;
+94 -> 162 ;
+163 [label=<dst_host_rerror_rate ≤ 0.005<br/>entropy = 0.543<br/>samples = 1512<br/>value = [2095, 299]<br/>class = Normal>, fillcolor="#e99355"] ;
+162 -> 163 ;
+164 [label=<duration ≤ 40.0<br/>entropy = 0.375<br/>samples = 1264<br/>value = [1856, 145]<br/>class = Normal>, fillcolor="#e78b48"] ;
163 -> 164 ;
-165 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-163 -> 165 ;
-166 [label=<dst_host_count ≤ 135.0<br/>entropy = 0.612<br/>samples = 48<br/>value = [62, 11]<br/>class = Normal>, fillcolor="#ea975c"] ;
-150 -> 166 ;
-167 [label=<srv_count ≤ 1.5<br/>entropy = 0.768<br/>samples = 30<br/>value = [38, 11]<br/>class = Normal>, fillcolor="#eda572"] ;
+165 [label=<hot ≤ 26.0<br/>entropy = 0.34<br/>samples = 1216<br/>value = [1808, 122]<br/>class = Normal>, fillcolor="#e78a46"] ;
+164 -> 165 ;
+166 [label=<dst_host_srv_count ≤ 50.5<br/>entropy = 0.303<br/>samples = 1186<br/>value = [1785, 102]<br/>class = Normal>, fillcolor="#e68844"] ;
+165 -> 166 ;
+167 [label=<protocol_type ≤ 1.5<br/>entropy = 0.778<br/>samples = 243<br/>value = [285, 85]<br/>class = Normal>, fillcolor="#eda774"] ;
166 -> 167 ;
-168 [label=<service ≤ 9.5<br/>entropy = 0.863<br/>samples = 4<br/>value = [2, 5]<br/>class = Abnormal>, fillcolor="#88c4ef"] ;
+168 [label=<src_bytes ≤ 337.5<br/>entropy = 0.692<br/>samples = 226<br/>value = [285, 65]<br/>class = Normal>, fillcolor="#eb9e66"] ;
167 -> 168 ;
-169 [label=<dst_host_srv_count ≤ 11.5<br/>entropy = 0.65<br/>samples = 3<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+169 [label=<dst_host_same_src_port_rate ≤ 0.335<br/>entropy = 0.126<br/>samples = 40<br/>value = [1, 57]<br/>class = Abnormal>, fillcolor="#3c9fe5"] ;
168 -> 169 ;
-170 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+170 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
169 -> 170 ;
-171 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+171 [label=<entropy = 0.0<br/>samples = 39<br/>value = [0, 57]<br/>class = Abnormal>, fillcolor="#399de5"] ;
169 -> 171 ;
-172 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+172 [label=<flag ≤ 6.0<br/>entropy = 0.181<br/>samples = 186<br/>value = [284, 8]<br/>class = Normal>, fillcolor="#e6853f"] ;
168 -> 172 ;
-173 [label=<count ≤ 1.5<br/>entropy = 0.592<br/>samples = 26<br/>value = [36, 6]<br/>class = Normal>, fillcolor="#e9965a"] ;
-167 -> 173 ;
-174 [label=<entropy = 0.0<br/>samples = 17<br/>value = [31, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+173 [label=<src_bytes ≤ 4908.5<br/>entropy = 0.722<br/>samples = 6<br/>value = [8, 2]<br/>class = Normal>, fillcolor="#eca06a"] ;
+172 -> 173 ;
+174 [label=<dst_host_srv_serror_rate ≤ 0.37<br/>entropy = 1.0<br/>samples = 3<br/>value = [2, 2]<br/>class = Normal>, fillcolor="#ffffff"] ;
173 -> 174 ;
-175 [label=<src_bytes ≤ 95.5<br/>entropy = 0.994<br/>samples = 9<br/>value = [5, 6]<br/>class = Abnormal>, fillcolor="#deeffb"] ;
-173 -> 175 ;
-176 [label=<entropy = 0.0<br/>samples = 4<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-175 -> 176 ;
-177 [label=<entropy = 0.0<br/>samples = 5<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-175 -> 177 ;
-178 [label=<entropy = 0.0<br/>samples = 18<br/>value = [24, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-166 -> 178 ;
-179 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-149 -> 179 ;
-180 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.938<br/>samples = 24<br/>value = [31, 17]<br/>class = Normal>, fillcolor="#f3c6a6"] ;
-148 -> 180 ;
-181 [label=<protocol_type ≤ 1.5<br/>entropy = 0.619<br/>samples = 5<br/>value = [2, 11]<br/>class = Abnormal>, fillcolor="#5dafea"] ;
-180 -> 181 ;
-182 [label=<dst_host_diff_srv_rate ≤ 0.025<br/>entropy = 0.414<br/>samples = 4<br/>value = [1, 11]<br/>class = Abnormal>, fillcolor="#4ba6e7"] ;
-181 -> 182 ;
-183 [label=<dst_host_same_src_port_rate ≤ 0.44<br/>entropy = 0.65<br/>samples = 2<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
+175 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+174 -> 175 ;
+176 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+174 -> 176 ;
+177 [label=<entropy = 0.0<br/>samples = 3<br/>value = [6, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+173 -> 177 ;
+178 [label=<duration ≤ 11.0<br/>entropy = 0.149<br/>samples = 180<br/>value = [276, 6]<br/>class = Normal>, fillcolor="#e6843d"] ;
+172 -> 178 ;
+179 [label=<num_compromised ≤ 0.5<br/>entropy = 0.113<br/>samples = 168<br/>value = [262, 4]<br/>class = Normal>, fillcolor="#e5833c"] ;
+178 -> 179 ;
+180 [label=<entropy = 0.0<br/>samples = 164<br/>value = [262, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+179 -> 180 ;
+181 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+179 -> 181 ;
+182 [label=<duration ≤ 12.5<br/>entropy = 0.544<br/>samples = 12<br/>value = [14, 2]<br/>class = Normal>, fillcolor="#e99355"] ;
+178 -> 182 ;
+183 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
182 -> 183 ;
-184 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-183 -> 184 ;
-185 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-183 -> 185 ;
-186 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-182 -> 186 ;
-187 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-181 -> 187 ;
-188 [label=<dst_host_same_src_port_rate ≤ 0.99<br/>entropy = 0.661<br/>samples = 19<br/>value = [29, 6]<br/>class = Normal>, fillcolor="#ea9b62"] ;
-180 -> 188 ;
-189 [label=<entropy = 0.0<br/>samples = 15<br/>value = [29, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-188 -> 189 ;
-190 [label=<entropy = 0.0<br/>samples = 4<br/>value = [0, 6]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-188 -> 190 ;
-191 [label=<count ≤ 37.5<br/>entropy = 0.958<br/>samples = 420<br/>value = [243, 397]<br/>class = Abnormal>, fillcolor="#b2d9f5"] ;
-111 -> 191 ;
-192 [label=<src_bytes ≤ 258.5<br/>entropy = 0.566<br/>samples = 179<br/>value = [241, 37]<br/>class = Normal>, fillcolor="#e99457"] ;
+184 [label=<entropy = 0.0<br/>samples = 10<br/>value = [14, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+182 -> 184 ;
+185 [label=<entropy = 0.0<br/>samples = 17<br/>value = [0, 20]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+167 -> 185 ;
+186 [label=<logged_in ≤ 0.5<br/>entropy = 0.089<br/>samples = 943<br/>value = [1500, 17]<br/>class = Normal>, fillcolor="#e5823b"] ;
+166 -> 186 ;
+187 [label=<protocol_type ≤ 1.0<br/>entropy = 0.663<br/>samples = 58<br/>value = [72, 15]<br/>class = Normal>, fillcolor="#ea9b62"] ;
+186 -> 187 ;
+188 [label=<entropy = 0.0<br/>samples = 46<br/>value = [72, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+187 -> 188 ;
+189 [label=<entropy = 0.0<br/>samples = 12<br/>value = [0, 15]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+187 -> 189 ;
+190 [label=<serror_rate ≤ 0.02<br/>entropy = 0.015<br/>samples = 885<br/>value = [1428, 2]<br/>class = Normal>, fillcolor="#e58139"] ;
+186 -> 190 ;
+191 [label=<dst_host_count ≤ 254.5<br/>entropy = 0.016<br/>samples = 867<br/>value = [1396, 2]<br/>class = Normal>, fillcolor="#e58139"] ;
+190 -> 191 ;
+192 [label=<entropy = 0.0<br/>samples = 675<br/>value = [1082, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
191 -> 192 ;
-193 [label=<srv_count ≤ 2.5<br/>entropy = 0.079<br/>samples = 128<br/>value = [203, 2]<br/>class = Normal>, fillcolor="#e5823b"] ;
-192 -> 193 ;
-194 [label=<entropy = 0.0<br/>samples = 98<br/>value = [155, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+193 [label=<duration ≤ 11.0<br/>entropy = 0.055<br/>samples = 192<br/>value = [314, 2]<br/>class = Normal>, fillcolor="#e5823a"] ;
+191 -> 193 ;
+194 [label=<duration ≤ 0.5<br/>entropy = 0.031<br/>samples = 189<br/>value = [309, 1]<br/>class = Normal>, fillcolor="#e5813a"] ;
193 -> 194 ;
-195 [label=<dst_host_same_src_port_rate ≤ 0.66<br/>entropy = 0.242<br/>samples = 30<br/>value = [48, 2]<br/>class = Normal>, fillcolor="#e68641"] ;
-193 -> 195 ;
-196 [label=<entropy = 0.0<br/>samples = 29<br/>value = [48, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-195 -> 196 ;
-197 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-195 -> 197 ;
-198 [label=<dst_host_same_srv_rate ≤ 0.03<br/>entropy = 0.999<br/>samples = 51<br/>value = [38, 35]<br/>class = Normal>, fillcolor="#fdf5ef"] ;
-192 -> 198 ;
-199 [label=<src_bytes ≤ 1623.0<br/>entropy = 0.292<br/>samples = 24<br/>value = [37, 2]<br/>class = Normal>, fillcolor="#e68844"] ;
-198 -> 199 ;
-200 [label=<same_srv_rate ≤ 0.625<br/>entropy = 1.0<br/>samples = 3<br/>value = [2, 2]<br/>class = Normal>, fillcolor="#ffffff"] ;
-199 -> 200 ;
-201 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-200 -> 201 ;
-202 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-200 -> 202 ;
-203 [label=<entropy = 0.0<br/>samples = 21<br/>value = [35, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-199 -> 203 ;
-204 [label=<srv_serror_rate ≤ 0.2<br/>entropy = 0.191<br/>samples = 27<br/>value = [1, 33]<br/>class = Abnormal>, fillcolor="#3fa0e6"] ;
-198 -> 204 ;
-205 [label=<entropy = 0.0<br/>samples = 26<br/>value = [0, 33]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-204 -> 205 ;
-206 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-204 -> 206 ;
-207 [label=<src_bytes ≤ 299.0<br/>entropy = 0.049<br/>samples = 241<br/>value = [2, 360]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
-191 -> 207 ;
-208 [label=<entropy = 0.0<br/>samples = 2<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+195 [label=<entropy = 0.035<br/>samples = 169<br/>value = [267, 1]<br/>class = Normal>, fillcolor="#e5813a"] ;
+194 -> 195 ;
+196 [label=<entropy = 0.0<br/>samples = 20<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+194 -> 196 ;
+197 [label=<dst_host_srv_serror_rate ≤ 0.01<br/>entropy = 0.65<br/>samples = 3<br/>value = [5, 1]<br/>class = Normal>, fillcolor="#ea9a61"] ;
+193 -> 197 ;
+198 [label=<entropy = 0.0<br/>samples = 2<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+197 -> 198 ;
+199 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+197 -> 199 ;
+200 [label=<entropy = 0.0<br/>samples = 18<br/>value = [32, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+190 -> 200 ;
+201 [label=<dst_host_count ≤ 247.5<br/>entropy = 0.996<br/>samples = 30<br/>value = [23, 20]<br/>class = Normal>, fillcolor="#fcefe5"] ;
+165 -> 201 ;
+202 [label=<entropy = 0.0<br/>samples = 17<br/>value = [22, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+201 -> 202 ;
+203 [label=<dst_bytes ≤ 3302.5<br/>entropy = 0.276<br/>samples = 13<br/>value = [1, 20]<br/>class = Abnormal>, fillcolor="#43a2e6"] ;
+201 -> 203 ;
+204 [label=<entropy = 0.0<br/>samples = 12<br/>value = [0, 20]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+203 -> 204 ;
+205 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+203 -> 205 ;
+206 [label=<dst_host_same_src_port_rate ≤ 0.16<br/>entropy = 0.909<br/>samples = 48<br/>value = [48, 23]<br/>class = Normal>, fillcolor="#f1bd98"] ;
+164 -> 206 ;
+207 [label=<srv_diff_host_rate ≤ 0.835<br/>entropy = 0.327<br/>samples = 35<br/>value = [47, 3]<br/>class = Normal>, fillcolor="#e78946"] ;
+206 -> 207 ;
+208 [label=<is_guest_login ≤ 0.5<br/>entropy = 0.149<br/>samples = 33<br/>value = [46, 1]<br/>class = Normal>, fillcolor="#e6843d"] ;
207 -> 208 ;
-209 [label=<entropy = 0.0<br/>samples = 239<br/>value = [0, 360]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-207 -> 209 ;
-210 [label=<dst_host_srv_count ≤ 181.5<br/>entropy = 0.167<br/>samples = 5119<br/>value = [7959, 202]<br/>class = Normal>, fillcolor="#e6843e"] ;
-110 -> 210 ;
-211 [label=<src_bytes ≤ 49282.0<br/>entropy = 0.399<br/>samples = 1212<br/>value = [1767, 152]<br/>class = Normal>, fillcolor="#e78c4a"] ;
-210 -> 211 ;
-212 [label=<hot ≤ 0.5<br/>entropy = 0.21<br/>samples = 1149<br/>value = [1751, 60]<br/>class = Normal>, fillcolor="#e68540"] ;
+209 [label=<entropy = 0.0<br/>samples = 32<br/>value = [46, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+208 -> 209 ;
+210 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+208 -> 210 ;
+211 [label=<hot ≤ 3.0<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
+207 -> 211 ;
+212 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
211 -> 212 ;
-213 [label=<dst_bytes ≤ 603675.0<br/>entropy = 0.053<br/>samples = 1054<br/>value = [1652, 10]<br/>class = Normal>, fillcolor="#e5823a"] ;
-212 -> 213 ;
-214 [label=<dst_host_rerror_rate ≤ 0.025<br/>entropy = 0.044<br/>samples = 1052<br/>value = [1651, 8]<br/>class = Normal>, fillcolor="#e5823a"] ;
-213 -> 214 ;
-215 [label=<dst_host_serror_rate ≤ 0.385<br/>entropy = 0.02<br/>samples = 974<br/>value = [1539, 3]<br/>class = Normal>, fillcolor="#e58139"] ;
+213 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+211 -> 213 ;
+214 [label=<dst_bytes ≤ 36458.5<br/>entropy = 0.276<br/>samples = 13<br/>value = [1, 20]<br/>class = Abnormal>, fillcolor="#43a2e6"] ;
+206 -> 214 ;
+215 [label=<entropy = 0.0<br/>samples = 12<br/>value = [0, 20]<br/>class = Abnormal>, fillcolor="#399de5"] ;
214 -> 215 ;
-216 [label=<entropy = 0.0<br/>samples = 923<br/>value = [1461, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-215 -> 216 ;
-217 [label=<src_bytes ≤ 1316.5<br/>entropy = 0.229<br/>samples = 51<br/>value = [78, 3]<br/>class = Normal>, fillcolor="#e68641"] ;
-215 -> 217 ;
-218 [label=<entropy = 0.0<br/>samples = 28<br/>value = [42, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+216 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+214 -> 216 ;
+217 [label=<dst_host_srv_diff_host_rate ≤ 0.005<br/>entropy = 0.966<br/>samples = 248<br/>value = [239, 154]<br/>class = Normal>, fillcolor="#f6d2b9"] ;
+163 -> 217 ;
+218 [label=<src_bytes ≤ 39213.5<br/>entropy = 0.998<br/>samples = 183<br/>value = [137, 152]<br/>class = Abnormal>, fillcolor="#ebf5fc"] ;
217 -> 218 ;
-219 [label=<dst_host_count ≤ 130.0<br/>entropy = 0.391<br/>samples = 23<br/>value = [36, 3]<br/>class = Normal>, fillcolor="#e78c49"] ;
-217 -> 219 ;
-220 [label=<dst_bytes ≤ 24132.5<br/>entropy = 0.971<br/>samples = 2<br/>value = [2, 3]<br/>class = Abnormal>, fillcolor="#bddef6"] ;
+219 [label=<dst_bytes ≤ 2431.0<br/>entropy = 0.485<br/>samples = 102<br/>value = [136, 16]<br/>class = Normal>, fillcolor="#e89050"] ;
+218 -> 219 ;
+220 [label=<wrong_fragment ≤ 0.5<br/>entropy = 0.184<br/>samples = 70<br/>value = [104, 3]<br/>class = Normal>, fillcolor="#e6853f"] ;
219 -> 220 ;
-221 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+221 [label=<dst_host_same_src_port_rate ≤ 0.52<br/>entropy = 0.078<br/>samples = 69<br/>value = [104, 1]<br/>class = Normal>, fillcolor="#e5823b"] ;
220 -> 221 ;
-222 [label=<entropy = 0.0<br/>samples = 1<br/>value = [2, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-220 -> 222 ;
-223 [label=<entropy = 0.0<br/>samples = 21<br/>value = [34, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-219 -> 223 ;
-224 [label=<dst_host_srv_rerror_rate ≤ 0.01<br/>entropy = 0.255<br/>samples = 78<br/>value = [112, 5]<br/>class = Normal>, fillcolor="#e68742"] ;
-214 -> 224 ;
-225 [label=<src_bytes ≤ 79.5<br/>entropy = 0.469<br/>samples = 31<br/>value = [45, 5]<br/>class = Normal>, fillcolor="#e88f4f"] ;
-224 -> 225 ;
-226 [label=<srv_count ≤ 1.5<br/>entropy = 0.954<br/>samples = 4<br/>value = [5, 3]<br/>class = Normal>, fillcolor="#f5cdb0"] ;
+222 [label=<entropy = 0.0<br/>samples = 68<br/>value = [104, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+221 -> 222 ;
+223 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+221 -> 223 ;
+224 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+220 -> 224 ;
+225 [label=<hot ≤ 26.0<br/>entropy = 0.867<br/>samples = 32<br/>value = [32, 13]<br/>class = Normal>, fillcolor="#f0b489"] ;
+219 -> 225 ;
+226 [label=<dst_host_srv_rerror_rate ≤ 0.01<br/>entropy = 0.323<br/>samples = 25<br/>value = [32, 2]<br/>class = Normal>, fillcolor="#e78945"] ;
225 -> 226 ;
-227 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 3]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+227 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
226 -> 227 ;
-228 [label=<entropy = 0.0<br/>samples = 2<br/>value = [5, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+228 [label=<entropy = 0.0<br/>samples = 24<br/>value = [32, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
226 -> 228 ;
-229 [label=<dst_host_same_srv_rate ≤ 0.315<br/>entropy = 0.276<br/>samples = 27<br/>value = [40, 2]<br/>class = Normal>, fillcolor="#e68743"] ;
+229 [label=<entropy = 0.0<br/>samples = 7<br/>value = [0, 11]<br/>class = Abnormal>, fillcolor="#399de5"] ;
225 -> 229 ;
-230 [label=<entropy = 0.0<br/>samples = 23<br/>value = [37, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-229 -> 230 ;
-231 [label=<dst_host_same_srv_rate ≤ 0.44<br/>entropy = 0.971<br/>samples = 4<br/>value = [3, 2]<br/>class = Normal>, fillcolor="#f6d5bd"] ;
-229 -> 231 ;
-232 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-231 -> 232 ;
-233 [label=<entropy = 0.0<br/>samples = 2<br/>value = [3, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-231 -> 233 ;
-234 [label=<entropy = 0.0<br/>samples = 47<br/>value = [67, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-224 -> 234 ;
-235 [label=<flag ≤ 6.0<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
-213 -> 235 ;
-236 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+230 [label=<dst_host_diff_srv_rate ≤ 0.035<br/>entropy = 0.062<br/>samples = 81<br/>value = [1, 136]<br/>class = Abnormal>, fillcolor="#3a9ee5"] ;
+218 -> 230 ;
+231 [label=<entropy = 0.0<br/>samples = 80<br/>value = [0, 136]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+230 -> 231 ;
+232 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+230 -> 232 ;
+233 [label=<dst_host_diff_srv_rate ≤ 0.36<br/>entropy = 0.137<br/>samples = 65<br/>value = [102, 2]<br/>class = Normal>, fillcolor="#e6833d"] ;
+217 -> 233 ;
+234 [label=<entropy = 0.0<br/>samples = 60<br/>value = [98, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+233 -> 234 ;
+235 [label=<dst_host_srv_diff_host_rate ≤ 0.025<br/>entropy = 0.918<br/>samples = 5<br/>value = [4, 2]<br/>class = Normal>, fillcolor="#f2c09c"] ;
+233 -> 235 ;
+236 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
235 -> 236 ;
-237 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
+237 [label=<entropy = 0.0<br/>samples = 3<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
235 -> 237 ;
-238 [label=<logged_in ≤ 0.5<br/>entropy = 0.921<br/>samples = 95<br/>value = [99, 50]<br/>class = Normal>, fillcolor="#f2c19d"] ;
-212 -> 238 ;
-239 [label=<entropy = 0.0<br/>samples = 6<br/>value = [0, 9]<br/>class = Abnormal>, fillcolor="#399de5"] ;
+238 [label=<dst_bytes ≤ 2.0<br/>entropy = 0.581<br/>samples = 269<br/>value = [57, 354]<br/>class = Abnormal>, fillcolor="#59ade9"] ;
+162 -> 238 ;
+239 [label=<entropy = 0.0<br/>samples = 234<br/>value = [0, 354]<br/>class = Abnormal>, fillcolor="#399de5"] ;
238 -> 239 ;
-240 [label=<src_bytes ≤ 948.0<br/>entropy = 0.872<br/>samples = 89<br/>value = [99, 41]<br/>class = Normal>, fillcolor="#f0b58b"] ;
+240 [label=<entropy = 0.0<br/>samples = 35<br/>value = [57, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
238 -> 240 ;
-241 [label=<dst_host_same_srv_rate ≤ 0.53<br/>entropy = 0.276<br/>samples = 38<br/>value = [60, 3]<br/>class = Normal>, fillcolor="#e68743"] ;
-240 -> 241 ;
-242 [label=<src_bytes ≤ 357.5<br/>entropy = 0.122<br/>samples = 36<br/>value = [59, 1]<br/>class = Normal>, fillcolor="#e5833c"] ;
-241 -> 242 ;
-243 [label=<entropy = 0.0<br/>samples = 24<br/>value = [40, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-242 -> 243 ;
-244 [label=<src_bytes ≤ 428.5<br/>entropy = 0.286<br/>samples = 12<br/>value = [19, 1]<br/>class = Normal>, fillcolor="#e68843"] ;
-242 -> 244 ;
-245 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 1]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-244 -> 245 ;
-246 [label=<entropy = 0.0<br/>samples = 11<br/>value = [19, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-244 -> 246 ;
-247 [label=<srv_diff_host_rate ≤ 0.5<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
-241 -> 247 ;
-248 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-247 -> 248 ;
-249 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-247 -> 249 ;
-250 [label=<dst_host_diff_srv_rate ≤ 0.025<br/>entropy = 1.0<br/>samples = 51<br/>value = [39, 38]<br/>class = Normal>, fillcolor="#fefcfa"] ;
-240 -> 250 ;
-251 [label=<dst_bytes ≤ 2968.0<br/>entropy = 0.801<br/>samples = 24<br/>value = [10, 31]<br/>class = Abnormal>, fillcolor="#79bded"] ;
-250 -> 251 ;
-252 [label=<entropy = 0.0<br/>samples = 17<br/>value = [0, 27]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-251 -> 252 ;
-253 [label=<duration ≤ 75.5<br/>entropy = 0.863<br/>samples = 7<br/>value = [10, 4]<br/>class = Normal>, fillcolor="#efb388"] ;
-251 -> 253 ;
-254 [label=<entropy = 0.0<br/>samples = 5<br/>value = [10, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-253 -> 254 ;
-255 [label=<entropy = 0.0<br/>samples = 2<br/>value = [0, 4]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-253 -> 255 ;
-256 [label=<duration ≤ 13.0<br/>entropy = 0.711<br/>samples = 27<br/>value = [29, 7]<br/>class = Normal>, fillcolor="#eb9f69"] ;
-250 -> 256 ;
-257 [label=<dst_host_diff_srv_rate ≤ 0.325<br/>entropy = 0.65<br/>samples = 4<br/>value = [1, 5]<br/>class = Abnormal>, fillcolor="#61b1ea"] ;
-256 -> 257 ;
-258 [label=<entropy = 0.0<br/>samples = 3<br/>value = [0, 5]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-257 -> 258 ;
-259 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-257 -> 259 ;
-260 [label=<dst_host_count ≤ 216.0<br/>entropy = 0.353<br/>samples = 23<br/>value = [28, 2]<br/>class = Normal>, fillcolor="#e78a47"] ;
-256 -> 260 ;
-261 [label=<entropy = 0.0<br/>samples = 18<br/>value = [21, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-260 -> 261 ;
-262 [label=<num_file_creations ≤ 10.5<br/>entropy = 0.764<br/>samples = 5<br/>value = [7, 2]<br/>class = Normal>, fillcolor="#eca572"] ;
-260 -> 262 ;
-263 [label=<entropy = 0.0<br/>samples = 4<br/>value = [7, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-262 -> 263 ;
-264 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-262 -> 264 ;
-265 [label=<dst_host_diff_srv_rate ≤ 0.01<br/>entropy = 0.605<br/>samples = 63<br/>value = [16, 92]<br/>class = Abnormal>, fillcolor="#5baeea"] ;
-211 -> 265 ;
-266 [label=<entropy = 0.0<br/>samples = 55<br/>value = [0, 92]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-265 -> 266 ;
-267 [label=<entropy = 0.0<br/>samples = 8<br/>value = [16, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-265 -> 267 ;
-268 [label=<dst_host_count ≤ 212.5<br/>entropy = 0.067<br/>samples = 3907<br/>value = [6192, 50]<br/>class = Normal>, fillcolor="#e5823b"] ;
-210 -> 268 ;
-269 [label=<entropy = 0.0<br/>samples = 1936<br/>value = [3046, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-268 -> 269 ;
-270 [label=<dst_bytes ≤ 7254.0<br/>entropy = 0.116<br/>samples = 1971<br/>value = [3146, 50]<br/>class = Normal>, fillcolor="#e5833c"] ;
-268 -> 270 ;
-271 [label=<entropy = 0.0<br/>samples = 1790<br/>value = [2907, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-270 -> 271 ;
-272 [label=<src_bytes ≤ 21866.0<br/>entropy = 0.665<br/>samples = 181<br/>value = [239, 50]<br/>class = Normal>, fillcolor="#ea9b62"] ;
-270 -> 272 ;
-273 [label=<hot ≤ 1.5<br/>entropy = 0.069<br/>samples = 152<br/>value = [239, 2]<br/>class = Normal>, fillcolor="#e5823b"] ;
-272 -> 273 ;
-274 [label=<entropy = 0.0<br/>samples = 147<br/>value = [234, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-273 -> 274 ;
-275 [label=<srv_count ≤ 2.5<br/>entropy = 0.863<br/>samples = 5<br/>value = [5, 2]<br/>class = Normal>, fillcolor="#efb388"] ;
-273 -> 275 ;
-276 [label=<srv_rerror_rate ≤ 0.25<br/>entropy = 0.918<br/>samples = 2<br/>value = [1, 2]<br/>class = Abnormal>, fillcolor="#9ccef2"] ;
-275 -> 276 ;
-277 [label=<entropy = 0.0<br/>samples = 1<br/>value = [1, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-276 -> 277 ;
-278 [label=<entropy = 0.0<br/>samples = 1<br/>value = [0, 2]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-276 -> 278 ;
-279 [label=<entropy = 0.0<br/>samples = 3<br/>value = [4, 0]<br/>class = Normal>, fillcolor="#e58139"] ;
-275 -> 279 ;
-280 [label=<entropy = 0.0<br/>samples = 29<br/>value = [0, 48]<br/>class = Abnormal>, fillcolor="#399de5"] ;
-272 -> 280 ;
}
diff --git a/experiment/random forest/output/random forest max depth.png b/experiment/random forest/output/random forest max depth.png
index 4ffba793894cd3f94113dccb295fd93e804e38e9..d54c9621f56241836b87922f129cd69eaec19513 100644
Binary files a/experiment/random forest/output/random forest max depth.png and b/experiment/random forest/output/random forest max depth.png differ
diff --git a/experiment/random forest/output/random forest.jpg b/experiment/random forest/output/random forest.jpg
index cc36d6c1f052dc317d6f60401c2c7034b5ee7598..daf3c6f900ac1a907e5570c0e0258192612dcbba 100644
Binary files a/experiment/random forest/output/random forest.jpg and b/experiment/random forest/output/random forest.jpg differ