Mining Anomalies in Network Wide Flow Data