<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="64.149.99.195"/>
        </slice>
        <from usec="0" sec="1167628017"/>
        <to usec="0" sec="1167628030"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.89.166.17"/>
        </slice>
        <from usec="0" sec="1167628290"/>
        <to usec="0" sec="1167628363"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.207.176.58"/>
        </slice>
        <from usec="0" sec="1167627611"/>
        <to usec="0" sec="1167627659"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.210.23.106"/>
        </slice>
        <from usec="0" sec="1167627992"/>
        <to usec="0" sec="1167628007"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.34.212.26"/>
        </slice>
        <from usec="0" sec="1167627611"/>
        <to usec="0" sec="1167627624"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.166.78.127" dst_ip="105.171.65.206" src_port="3039" dst_port="16480" proto="tcp"/>
        </slice>
        <from usec="0" sec="1167628170"/>
        <to usec="0" sec="1167628182"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.53.2.42"/>
        </slice>
        <from usec="0" sec="1167628085"/>
        <to usec="0" sec="1167628098"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.208.44.70"/>
        </slice>
        <from usec="0" sec="1167628185"/>
        <to usec="0" sec="1167628284"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.207.184.80"/>
        </slice>
        <from usec="0" sec="1167627658"/>
        <to usec="0" sec="1167628434"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="214.2.102.132" dst_ip="214.2.102.132" proto="udp"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628495"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.89.165.50" dst_ip="65.113.65.170" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1167628298"/>
        <to usec="0" sec="1167628304"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.65.64.194" dst_ip="219.41.222.233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1167628085"/>
        <to usec="0" sec="1167628370"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="84.148.33.200"/>
        </slice>
        <from usec="0" sec="1167628029"/>
        <to usec="0" sec="1167628040"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.57.171.108"/>
        </slice>
        <from usec="0" sec="1167628298"/>
        <to usec="0" sec="1167628308"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="70.216.226.81" src_port="64849" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1167628016"/>
        <to usec="0" sec="1167628023"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.170.150.204" src_port="1032" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1167628060"/>
        <to usec="0" sec="1167628091"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="215.93.178.150" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1167627808"/>
        <to usec="0" sec="1167627849"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.164.81.231" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1167627897"/>
        <to usec="0" sec="1167627898"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.82.170.115" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1167627681"/>
        <to usec="0" sec="1167627692"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="64.64.41.12" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1167627897"/>
        <to usec="0" sec="1167627898"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.65.16.223"/>
        </slice>
        <from usec="0" sec="1167628326"/>
        <to usec="0" sec="1167628336"/>
    </anomaly>
    <anomaly type="notice" value="0.531766,1.012020,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="213.140.65.90"/>
        </slice>
        <from usec="0" sec="1167628369"/>
        <to usec="0" sec="1167628374"/>
    </anomaly>
    <anomaly type="notice" value="0.703717,1.083010,002,0 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.216.45.107" src_port="1025" dst_port="137"/>
        </slice>
        <from usec="0" sec="1167627690"/>
        <to usec="0" sec="1167627702"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.200.5.181"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627973"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="84.148.53.91"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627708"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="214.130.98.162"/>
        </slice>
        <from usec="0" sec="1167627605"/>
        <to usec="0" sec="1167627705"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.170.212.145"/>
        </slice>
        <from usec="0" sec="1167627607"/>
        <to usec="0" sec="1167627708"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.65.75.81"/>
        </slice>
        <from usec="0" sec="1167627607"/>
        <to usec="0" sec="1167627705"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.207.129.5"/>
        </slice>
        <from usec="0" sec="1167627624"/>
        <to usec="0" sec="1167627707"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="84.148.33.118"/>
        </slice>
        <from usec="0" sec="1167627817"/>
        <to usec="0" sec="1167628428"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.34.67.186"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627798"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.207.173.216"/>
        </slice>
        <from usec="0" sec="1167627632"/>
        <to usec="0" sec="1167627783"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.186.20.184"/>
        </slice>
        <from usec="0" sec="1167627614"/>
        <to usec="0" sec="1167627883"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.66.64.131"/>
        </slice>
        <from usec="0" sec="1167627619"/>
        <to usec="0" sec="1167627800"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.3.47.18"/>
        </slice>
        <from usec="0" sec="1167627623"/>
        <to usec="0" sec="1167627888"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="84.148.40.16"/>
        </slice>
        <from usec="0" sec="1167627652"/>
        <to usec="0" sec="1167627855"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="59.50.52.184"/>
        </slice>
        <from usec="0" sec="1167627693"/>
        <to usec="0" sec="1167627784"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="144.141.183.101"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627978"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="60.167.164.7"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627978"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.138.176.172"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167627973"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.65.71.2"/>
        </slice>
        <from usec="0" sec="1167627604"/>
        <to usec="0" sec="1167627963"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.89.201.49"/>
        </slice>
        <from usec="0" sec="1167627607"/>
        <to usec="0" sec="1167627971"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="58.86.205.10"/>
        </slice>
        <from usec="0" sec="1167627635"/>
        <to usec="0" sec="1167627975"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="204.92.145.75"/>
        </slice>
        <from usec="0" sec="1167627796"/>
        <to usec="0" sec="1167627978"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.179.199.68"/>
        </slice>
        <from usec="0" sec="1167627875"/>
        <to usec="0" sec="1167627914"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="166.11.179.132"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628064"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="149.34.129.209" dst_ip="81.46.148.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628061"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.207.196.0"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628065"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.65.121.94"/>
        </slice>
        <from usec="0" sec="1167627603"/>
        <to usec="0" sec="1167628054"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.138.176.162"/>
        </slice>
        <from usec="0" sec="1167627604"/>
        <to usec="0" sec="1167628062"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.34.213.18"/>
        </slice>
        <from usec="0" sec="1167627642"/>
        <to usec="0" sec="1167628023"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="89.172.195.2"/>
        </slice>
        <from usec="0" sec="1167627684"/>
        <to usec="0" sec="1167628055"/>
    </anomaly>
    <anomaly type="notice" value="0.570694,0.997174,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.130.122.85" src_port="80"/>
            <filter src_ip="214.130.122.85" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627653"/>
        <to usec="0" sec="1167628317"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="24.191.165.80"/>
        </slice>
        <from usec="0" sec="1167627873"/>
        <to usec="0" sec="1167627954"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.65.166.166"/>
        </slice>
        <from usec="0" sec="1167628034"/>
        <to usec="0" sec="1167628061"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.34.212.26"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628158"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="84.148.53.101"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628145"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="214.130.94.184"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628153"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.131.99.204"/>
        </slice>
        <from usec="0" sec="1167627602"/>
        <to usec="0" sec="1167628153"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.166.40.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628157"/>
    </anomaly>
    <anomaly type="notice" value="0.570694,0.997174,999,1 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="214.2.97.241" dst_ip="192.168.96.4" src_port="53"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628427"/>
    </anomaly>
    <anomaly type="notice" value="0.570694,0.997174,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.166.40.155" dst_port="80"/>
            <filter dst_ip="195.170.194.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628419"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="135.151.21.4"/>
        </slice>
        <from usec="0" sec="1167627615"/>
        <to usec="0" sec="1167628247"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.65.2.52" src_port="25"/>
        </slice>
        <from usec="0" sec="1167627615"/>
        <to usec="0" sec="1167628245"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.200.5.183"/>
        </slice>
        <from usec="0" sec="1167627629"/>
        <to usec="0" sec="1167628248"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.89.102.174"/>
        </slice>
        <from usec="0" sec="1167628391"/>
        <to usec="0" sec="1167628400"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.65.85.209"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628338"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.62.182.158"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628338"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.37.127.175" src_port="50713" dst_port="53"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628338"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="214.130.120.145" dst_port="80"/>
            <filter dst_ip="202.189.59.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628325"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.89.202.147"/>
        </slice>
        <from usec="0" sec="1167627607"/>
        <to usec="0" sec="1167628320"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.131.223.204"/>
        </slice>
        <from usec="0" sec="1167627608"/>
        <to usec="0" sec="1167628336"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.89.213.30"/>
        </slice>
        <from usec="0" sec="1167627920"/>
        <to usec="0" sec="1167628295"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="205.232.96.147"/>
        </slice>
        <from usec="0" sec="1167628293"/>
        <to usec="0" sec="1167628338"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.130.116.2" dst_port="53"/>
            <filter dst_ip="214.130.116.2" src_port="53" dst_port="59810"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628427"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="133.142.231.169"/>
        </slice>
        <from usec="0" sec="1167627601"/>
        <to usec="0" sec="1167628417"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.65.155.217"/>
        </slice>
        <from usec="0" sec="1167627602"/>
        <to usec="0" sec="1167628428"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.208.30.95"/>
        </slice>
        <from usec="0" sec="1167627604"/>
        <to usec="0" sec="1167628421"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="70.232.167.202" dst_ip="216.115.42.12" src_port="1060" dst_port="53"/>
            <filter src_ip="70.232.167.202" dst_ip="216.115.42.12" src_port="1044" dst_port="53"/>
        </slice>
        <from usec="0" sec="1167627606"/>
        <to usec="0" sec="1167628156"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="58.84.182.133"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627646"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="205.24.172.203"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627646"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="204.209.10.71"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627646"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.130.121.47" dst_port="53"/>
            <filter dst_ip="214.130.121.47" src_port="53" dst_port="57222"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627646"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.37.126.150"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167627961"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="214.130.121.40"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167627961"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.37.127.4"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167627961"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="215.37.123.46"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167628141"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.34.93.14" src_port="53"/>
            <filter src_ip="60.216.186.71" dst_ip="149.34.93.14" dst_port="25"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167627961"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="164.89.166.85" src_port="80"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167627961"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.37.113.208" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1167627915"/>
        <to usec="0" sec="1167628141"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="200.147.11.133"/>
        </slice>
        <from usec="0" sec="1167628095"/>
        <to usec="0" sec="1167628141"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.37.127.66"/>
        </slice>
        <from usec="0" sec="1167628095"/>
        <to usec="0" sec="1167628141"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="212.249.193.71"/>
        </slice>
        <from usec="0" sec="1167628230"/>
        <to usec="0" sec="1167628276"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.52.101.221" dst_port="1026"/>
            <filter src_ip="204.52.101.221" dst_port="1027"/>
        </slice>
        <from usec="0" sec="1167628230"/>
        <to usec="0" sec="1167628276"/>
    </anomaly>
    <anomaly type="notice" value="0.680528,1.042760,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.34.93.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1167628230"/>
        <to usec="0" sec="1167628276"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.65.28.200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="215.37.115.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="87.197.228.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.212.92.209" dst_ip="214.130.122.83" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.189.53.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="60.237.5.179"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.131.223.201" dst_ip="84.148.42.82" src_port="80"/>
            <filter src_ip="149.131.223.201" dst_ip="59.170.168.172" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="89.133.237.62"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.669937,1.007290,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="90.16.20.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.498101,0.993493,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.34.212.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1167627600"/>
        <to usec="0" sec="1167627978"/>
    </anomaly>
</admd:annotation>
