<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.40.104.20" dst_ip="215.68.135.195" src_port="53956" dst_port="873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392405"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.76.19.218" dst_ip="206.241.132.193" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393281"/>
        <to usec="0" sec="1170393283"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="144.176.180.101"/>
        </slice>
        <from usec="0" sec="1170393265"/>
        <to usec="0" sec="1170393270"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.56.181.42"/>
        </slice>
        <from usec="0" sec="1170393044"/>
        <to usec="0" sec="1170393048"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="220.140.96.54" dst_ip="207.93.138.107" src_port="62832" dst_port="6881" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393179"/>
        <to usec="0" sec="1170393205"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.93.138.25" dst_ip="200.130.210.184" src_port="2750" dst_port="57659" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392835"/>
        <to usec="0" sec="1170392841"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.165.142.42"/>
        </slice>
        <from usec="0" sec="1170392614"/>
        <to usec="0" sec="1170392619"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.190.71.8"/>
        </slice>
        <from usec="0" sec="1170392677"/>
        <to usec="0" sec="1170392682"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.40.184.170"/>
        </slice>
        <from usec="0" sec="1170393058"/>
        <to usec="0" sec="1170393117"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.178.198.110" dst_ip="216.82.229.251" src_port="4063" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393187"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.22.42.144" dst_ip="150.111.101.225" src_port="80" dst_port="41321" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393156"/>
        <to usec="0" sec="1170393296"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.56.177.153" dst_ip="144.176.190.154" src_port="80" dst_port="2826" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393099"/>
        <to usec="0" sec="1170393102"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.178.128.210" dst_ip="146.139.112.22" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393198"/>
        <to usec="0" sec="1170393201"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.193.64.195"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393007"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.176.33.148" dst_ip="148.56.179.101" src_port="32848" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393111"/>
        <to usec="0" sec="1170393256"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.40.193.172"/>
        </slice>
        <from usec="0" sec="1170393213"/>
        <to usec="0" sec="1170393218"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.36.128.234" dst_ip="149.178.16.28" src_port="80" dst_port="33985" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393253"/>
        <to usec="0" sec="1170393256"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="161.40.196.211" dst_ip="207.129.105.210" src_port="2631" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392405"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.57.197.145" dst_ip="218.48.210.18" src_port="2670" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393185"/>
        <to usec="0" sec="1170393248"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.86.81.78" dst_ip="206.57.232.207" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393166"/>
        <to usec="0" sec="1170393169"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.176.54.1" dst_ip="200.80.243.15" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393110"/>
        <to usec="0" sec="1170393182"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.219.12.207" dst_ip="206.57.211.81" src_port="80" dst_port="50327" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393095"/>
        <to usec="0" sec="1170393256"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.25.126.119" dst_ip="216.89.202.251" src_port="49283" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393222"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.76.98.169" dst_ip="200.44.9.10" src_port="1103" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392792"/>
        <to usec="0" sec="1170392795"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.97.121.94" dst_ip="206.48.92.81" src_port="80" dst_port="50087" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393130"/>
        <to usec="0" sec="1170393133"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="161.40.66.196" dst_ip="154.9.229.146" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393212"/>
        <to usec="0" sec="1170393215"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.13.85.31" dst_ip="207.93.130.27" src_port="61379" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393293"/>
        <to usec="0" sec="1170393296"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.40.66.215" dst_ip="148.56.181.154" src_port="1880" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392761"/>
        <to usec="0" sec="1170392788"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.165.150.145" dst_ip="219.210.101.96" src_port="2185" dst_port="6255" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392766"/>
        <to usec="0" sec="1170392793"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.241.132.70"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393298"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.97.120.55"/>
        </slice>
        <from usec="0" sec="1170392402"/>
        <to usec="0" sec="1170392409"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.165.68.105"/>
        </slice>
        <from usec="0" sec="1170392486"/>
        <to usec="0" sec="1170392490"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.76.100.85" dst_ip="215.68.135.195" src_port="2440" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392405"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.40.184.27" dst_ip="148.56.181.73" src_port="4414" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392818"/>
        <to usec="0" sec="1170392826"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.178.0.107"/>
        </slice>
        <from usec="0" sec="1170393215"/>
        <to usec="0" sec="1170393220"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.193.154.86"/>
        </slice>
        <from usec="0" sec="1170393170"/>
        <to usec="0" sec="1170393175"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.56.179.152"/>
        </slice>
        <from usec="0" sec="1170393226"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="206.206.125.237" dst_ip="206.206.125.237" proto="udp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393298"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.241.135.6" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392405"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="140.128.12.210" dst_ip="144.176.190.106" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393160"/>
        <to usec="0" sec="1170393163"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.40.217.86" dst_ip="214.106.14.212" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393255"/>
        <to usec="0" sec="1170393258"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.40.89.232"/>
        </slice>
        <from usec="0" sec="1170393183"/>
        <to usec="0" sec="1170393187"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="193.238.10.87" dst_ip="193.238.10.87" proto="udp"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393246"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="207.22.42.147" dst_ip="206.57.208.7"/>
        </slice>
        <from usec="0" sec="1170393160"/>
        <to usec="0" sec="1170393300"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.215.118.161" src_port="10002" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1170392482"/>
        <to usec="0" sec="1170392494"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="206.184.147.219" src_port="55547" proto="udp"/>
        </slice>
        <from usec="0" sec="1170392626"/>
        <to usec="0" sec="1170392631"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.214.177.188" src_port="1103" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1170393139"/>
        <to usec="0" sec="1170393142"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.91.37.172"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392403"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="143.26.136.219" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1170393163"/>
        <to usec="0" sec="1170393164"/>
    </anomaly>
    <anomaly type="notice" value="0.587753,1.174160,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.40.201.2"/>
        </slice>
        <from usec="0" sec="1170393236"/>
        <to usec="0" sec="1170393241"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.176.145.8"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392507"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="137.145.33.233"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392506"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.178.148.122"/>
        </slice>
        <from usec="0" sec="1170392489"/>
        <to usec="0" sec="1170392506"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="207.93.132.81"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392599"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="207.84.147.156"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392599"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.184.240.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="1170392402"/>
        <to usec="0" sec="1170392599"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="207.93.129.48"/>
        </slice>
        <from usec="0" sec="1170392403"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.145.27"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392654"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.180.120"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170392681"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="138.90.109.123"/>
        </slice>
        <from usec="0" sec="1170392414"/>
        <to usec="0" sec="1170392673"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="206.48.175.122"/>
        </slice>
        <from usec="0" sec="1170392417"/>
        <to usec="0" sec="1170392689"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.208.6"/>
        </slice>
        <from usec="0" sec="1170392471"/>
        <to usec="0" sec="1170392683"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="144.176.190.234"/>
        </slice>
        <from usec="0" sec="1170392511"/>
        <to usec="0" sec="1170392513"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="144.176.134.108"/>
        </slice>
        <from usec="0" sec="1170392540"/>
        <to usec="0" sec="1170392623"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.178.149.88"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392773"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="195.80.141.156"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392610"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.40.167.26"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.50.37.169"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="145.147.80.60"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392656"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.160.185.16"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392778"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.65.31.67"/>
        </slice>
        <from usec="0" sec="1170392404"/>
        <to usec="0" sec="1170392777"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.137.191.166"/>
        </slice>
        <from usec="0" sec="1170392405"/>
        <to usec="0" sec="1170392702"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.168.17"/>
        </slice>
        <from usec="0" sec="1170392408"/>
        <to usec="0" sec="1170392771"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.176.105.184"/>
        </slice>
        <from usec="0" sec="1170392409"/>
        <to usec="0" sec="1170392777"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.73.173.128"/>
        </slice>
        <from usec="0" sec="1170392412"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.106.14.219"/>
        </slice>
        <from usec="0" sec="1170392412"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.178.16.46"/>
        </slice>
        <from usec="0" sec="1170392413"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.564353,1.158740,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="207.93.158.193" dst_ip="219.44.228.117" dst_port="80"/>
            <filter src_ip="149.165.142.99" dst_ip="219.44.228.122" dst_port="80"/>
        </slice>
        <from usec="0" sec="1170392415"/>
        <to usec="0" sec="1170392695"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.44.216.166"/>
        </slice>
        <from usec="0" sec="1170392424"/>
        <to usec="0" sec="1170392777"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.145.109"/>
        </slice>
        <from usec="0" sec="1170392428"/>
        <to usec="0" sec="1170392776"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.85.0.68"/>
        </slice>
        <from usec="0" sec="1170392435"/>
        <to usec="0" sec="1170392758"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="144.176.110.21"/>
        </slice>
        <from usec="0" sec="1170392445"/>
        <to usec="0" sec="1170392769"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.96.134.131"/>
        </slice>
        <from usec="0" sec="1170392540"/>
        <to usec="0" sec="1170392761"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.219.168"/>
        </slice>
        <from usec="0" sec="1170392600"/>
        <to usec="0" sec="1170392860"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="148.75.72.103"/>
        </slice>
        <from usec="0" sec="1170392626"/>
        <to usec="0" sec="1170392779"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.161.125.14"/>
        </slice>
        <from usec="0" sec="1170392664"/>
        <to usec="0" sec="1170392742"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.5.228.184"/>
        </slice>
        <from usec="0" sec="1170392720"/>
        <to usec="0" sec="1170392777"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="216.99.189.50"/>
        </slice>
        <from usec="0" sec="1170392757"/>
        <to usec="0" sec="1170392776"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.241.135.86"/>
        </slice>
        <from usec="0" sec="1170392768"/>
        <to usec="0" sec="1170392770"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392869"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.1.64.18"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392864"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.1.59.37"/>
        </slice>
        <from usec="0" sec="1170392402"/>
        <to usec="0" sec="1170392869"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.241.134.42"/>
        </slice>
        <from usec="0" sec="1170393068"/>
        <to usec="0" sec="1170393117"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.46.82.250"/>
        </slice>
        <from usec="0" sec="1170392403"/>
        <to usec="0" sec="1170392798"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.124.131.131"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170392852"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.44.214.109"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170392852"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.44.104.8"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170393048"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.213.69.82"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170392847"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.212.60.177"/>
        </slice>
        <from usec="0" sec="1170392412"/>
        <to usec="0" sec="1170392857"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.232.45.108"/>
        </slice>
        <from usec="0" sec="1170392591"/>
        <to usec="0" sec="1170392865"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.178.52.112"/>
        </slice>
        <from usec="0" sec="1170392619"/>
        <to usec="0" sec="1170392869"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="147.7.250.19"/>
        </slice>
        <from usec="0" sec="1170392665"/>
        <to usec="0" sec="1170392734"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="151.0.87.215"/>
        </slice>
        <from usec="0" sec="1170392672"/>
        <to usec="0" sec="1170392708"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.176.196.0"/>
        </slice>
        <from usec="0" sec="1170392740"/>
        <to usec="0" sec="1170392757"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="147.113.110.71"/>
        </slice>
        <from usec="0" sec="1170392752"/>
        <to usec="0" sec="1170392857"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="149.227.13.96"/>
        </slice>
        <from usec="0" sec="1170392816"/>
        <to usec="0" sec="1170392846"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.176.68.140"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392959"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.141.86"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392958"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="196.45.161.118"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393049"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.178.2.252"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392959"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="144.176.173.29"/>
        </slice>
        <from usec="0" sec="1170392403"/>
        <to usec="0" sec="1170393048"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.221.27"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170392940"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.93.138.104"/>
        </slice>
        <from usec="0" sec="1170392415"/>
        <to usec="0" sec="1170392952"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.176.69.8"/>
        </slice>
        <from usec="0" sec="1170392416"/>
        <to usec="0" sec="1170392951"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.44.246.219"/>
        </slice>
        <from usec="0" sec="1170392417"/>
        <to usec="0" sec="1170392941"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.178.17.18"/>
        </slice>
        <from usec="0" sec="1170392630"/>
        <to usec="0" sec="1170392915"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.37.91.52"/>
        </slice>
        <from usec="0" sec="1170392838"/>
        <to usec="0" sec="1170392853"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="146.189.32.198"/>
        </slice>
        <from usec="0" sec="1170392956"/>
        <to usec="0" sec="1170392959"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.44.170.80"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393032"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="210.69.168.187"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393046"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.76.72.221"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393045"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.101.99"/>
        </slice>
        <from usec="0" sec="1170392402"/>
        <to usec="0" sec="1170393049"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.78.191.153" src_port="53" dst_port="32789"/>
        </slice>
        <from usec="0" sec="1170392404"/>
        <to usec="0" sec="1170393045"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.176.56.16"/>
        </slice>
        <from usec="0" sec="1170392406"/>
        <to usec="0" sec="1170393047"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.44.170.17"/>
        </slice>
        <from usec="0" sec="1170392407"/>
        <to usec="0" sec="1170393042"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.76.8.199"/>
        </slice>
        <from usec="0" sec="1170392412"/>
        <to usec="0" sec="1170393013"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.168.98"/>
        </slice>
        <from usec="0" sec="1170392413"/>
        <to usec="0" sec="1170393016"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.85.32.175"/>
        </slice>
        <from usec="0" sec="1170392415"/>
        <to usec="0" sec="1170393032"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.180.17.55"/>
        </slice>
        <from usec="0" sec="1170392416"/>
        <to usec="0" sec="1170393021"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.44.168.201"/>
        </slice>
        <from usec="0" sec="1170392420"/>
        <to usec="0" sec="1170393027"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.4.164.126"/>
        </slice>
        <from usec="0" sec="1170392774"/>
        <to usec="0" sec="1170393041"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.44.241.8"/>
        </slice>
        <from usec="0" sec="1170392808"/>
        <to usec="0" sec="1170393014"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="148.56.178.125"/>
        </slice>
        <from usec="0" sec="1170393003"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.145.0"/>
        </slice>
        <from usec="0" sec="1170393008"/>
        <to usec="0" sec="1170393036"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.241.134.147"/>
        </slice>
        <from usec="0" sec="1170393013"/>
        <to usec="0" sec="1170393038"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.81.165.87"/>
        </slice>
        <from usec="0" sec="1170393042"/>
        <to usec="0" sec="1170393047"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.76.72.216"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="207.93.133.224" src_port="25"/>
            <filter src_ip="207.93.133.224" dst_port="113"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393138"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="195.100.250.179"/>
        </slice>
        <from usec="0" sec="1170392402"/>
        <to usec="0" sec="1170393138"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="143.178.50.231"/>
        </slice>
        <from usec="0" sec="1170392403"/>
        <to usec="0" sec="1170393139"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="144.176.101.82"/>
        </slice>
        <from usec="0" sec="1170392404"/>
        <to usec="0" sec="1170393129"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.44.170.117"/>
        </slice>
        <from usec="0" sec="1170392405"/>
        <to usec="0" sec="1170393133"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.93.158.193"/>
        </slice>
        <from usec="0" sec="1170392405"/>
        <to usec="0" sec="1170393108"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.44.168.194"/>
        </slice>
        <from usec="0" sec="1170392405"/>
        <to usec="0" sec="1170393135"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.111.106.115"/>
        </slice>
        <from usec="0" sec="1170392408"/>
        <to usec="0" sec="1170393110"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.176.65.237"/>
        </slice>
        <from usec="0" sec="1170392408"/>
        <to usec="0" sec="1170393040"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.178.53.65"/>
        </slice>
        <from usec="0" sec="1170392413"/>
        <to usec="0" sec="1170393134"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.176.27.249"/>
        </slice>
        <from usec="0" sec="1170392415"/>
        <to usec="0" sec="1170393114"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.21.133"/>
        </slice>
        <from usec="0" sec="1170392451"/>
        <to usec="0" sec="1170393103"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.129.129.39"/>
        </slice>
        <from usec="0" sec="1170392457"/>
        <to usec="0" sec="1170393137"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.1.218.209"/>
        </slice>
        <from usec="0" sec="1170392584"/>
        <to usec="0" sec="1170393030"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.15.194.2"/>
        </slice>
        <from usec="0" sec="1170392788"/>
        <to usec="0" sec="1170393120"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.60.128.203"/>
        </slice>
        <from usec="0" sec="1170392901"/>
        <to usec="0" sec="1170393136"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="151.32.89.164"/>
        </slice>
        <from usec="0" sec="1170392909"/>
        <to usec="0" sec="1170393108"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="135.64.209.119"/>
        </slice>
        <from usec="0" sec="1170393017"/>
        <to usec="0" sec="1170393139"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.190.94.12"/>
        </slice>
        <from usec="0" sec="1170393090"/>
        <to usec="0" sec="1170393101"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.176.225.84"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.25.254"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393228"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.176.13.11"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.176.162.235"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170393222"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.76.100.189"/>
        </slice>
        <from usec="0" sec="1170392403"/>
        <to usec="0" sec="1170393228"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.124.149.101"/>
        </slice>
        <from usec="0" sec="1170392404"/>
        <to usec="0" sec="1170393215"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="207.93.131.70"/>
        </slice>
        <from usec="0" sec="1170392411"/>
        <to usec="0" sec="1170393204"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.25.99.233"/>
        </slice>
        <from usec="0" sec="1170392411"/>
        <to usec="0" sec="1170393228"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.176.92.251"/>
        </slice>
        <from usec="0" sec="1170392416"/>
        <to usec="0" sec="1170393218"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.108.38.187"/>
        </slice>
        <from usec="0" sec="1170392416"/>
        <to usec="0" sec="1170393226"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="207.93.138.175"/>
        </slice>
        <from usec="0" sec="1170392434"/>
        <to usec="0" sec="1170393224"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.76.8.224"/>
        </slice>
        <from usec="0" sec="1170392732"/>
        <to usec="0" sec="1170393077"/>
    </anomaly>
    <anomaly type="notice" value="0.564353,1.158740,999,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="149.178.16.46" dst_ip="149.1.37.11"/>
            <filter dst_ip="149.1.37.11" dst_port="25"/>
            <filter src_ip="149.178.16.46" dst_ip="148.213.69.92" dst_port="25"/>
        </slice>
        <from usec="0" sec="1170392804"/>
        <to usec="0" sec="1170393199"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.76.40.1"/>
        </slice>
        <from usec="0" sec="1170392856"/>
        <to usec="0" sec="1170393143"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.176.171.37"/>
        </slice>
        <from usec="0" sec="1170392910"/>
        <to usec="0" sec="1170393224"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.59.176.242"/>
        </slice>
        <from usec="0" sec="1170393029"/>
        <to usec="0" sec="1170393166"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.40.168.82"/>
        </slice>
        <from usec="0" sec="1170393055"/>
        <to usec="0" sec="1170393193"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.210.1.32"/>
        </slice>
        <from usec="0" sec="1170393057"/>
        <to usec="0" sec="1170393229"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="154.46.52.24"/>
        </slice>
        <from usec="0" sec="1170393084"/>
        <to usec="0" sec="1170393087"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.35.168.222"/>
        </slice>
        <from usec="0" sec="1170393099"/>
        <to usec="0" sec="1170393117"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.44.228.77"/>
        </slice>
        <from usec="0" sec="1170393125"/>
        <to usec="0" sec="1170393218"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.1.68.102"/>
        </slice>
        <from usec="0" sec="1170393148"/>
        <to usec="0" sec="1170393164"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.38.198.202"/>
        </slice>
        <from usec="0" sec="1170393161"/>
        <to usec="0" sec="1170393221"/>
    </anomaly>
    <anomaly type="notice" value="0.407850,1.169090,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.113.60.194"/>
        </slice>
        <from usec="0" sec="1170393198"/>
        <to usec="0" sec="1170393220"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="219.183.7.99"/>
        </slice>
        <from usec="0" sec="1170392401"/>
        <to usec="0" sec="1170392447"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.178.17.81"/>
        </slice>
        <from usec="0" sec="1170392671"/>
        <to usec="0" sec="1170392717"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.160.91.210"/>
        </slice>
        <from usec="0" sec="1170392671"/>
        <to usec="0" sec="1170392717"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="151.97.71.120"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.178.214.172" dst_ip="148.75.251.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1170392761"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.2.194.178" dst_port="2703"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.57.209.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="161.40.104.82" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.160.91.210" src_port="80"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.178.214.172" dst_port="25"/>
        </slice>
        <from usec="0" sec="1170392941"/>
        <to usec="0" sec="1170392987"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="212.148.208.250"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="219.172.61.189"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="196.192.174.135"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="194.88.50.192" dst_port="139"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1046" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.764807,1.206170,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1193" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1170393211"/>
        <to usec="0" sec="1170393257"/>
    </anomaly>
    <anomaly type="notice" value="0.691226,1.151680,011,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="194.88.50.192" src_port="139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.82.229.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.82.229.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.44.246.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.44.254.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.38.211.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.691226,1.151680,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="144.176.160.54" src_port="80"/>
            <filter dst_ip="161.40.66.215" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.176.92.235" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.176.173.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="144.176.162.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="144.176.145.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="144.176.48.28" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.48.93.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.241.133.157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,504,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="206.241.141.143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.149.149.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="216.82.232.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="149.1.37.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710460,1.167200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="147.90.79.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
