<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.28.82.64" src_port="3577" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898001"/>
        <to usec="0" sec="1172898607"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.79.251.142"/>
        </slice>
        <from usec="0" sec="1172898169"/>
        <to usec="0" sec="1172898184"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.125.75.32" dst_ip="214.42.102.32" src_port="41322" dst_port="119" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898348"/>
        <to usec="0" sec="1172898412"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.28.110.173" dst_ip="208.246.140.59" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898093"/>
        <to usec="0" sec="1172898718"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.101.241.64" dst_ip="170.123.85.104" src_port="80" dst_port="42047" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898337"/>
        <to usec="0" sec="1172898402"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="112.98.111.95" dst_ip="172.169.208.253" src_port="80" dst_port="1758" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898312"/>
        <to usec="0" sec="1172898683"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.172.85.17"/>
        </slice>
        <from usec="0" sec="1172898407"/>
        <to usec="0" sec="1172898417"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.21.8.173" dst_ip="24.85.42.192" src_port="4014" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898611"/>
        <to usec="0" sec="1172898615"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.179.233.150" dst_ip="207.90.126.208" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898731"/>
        <to usec="0" sec="1172898737"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.233.185.117" dst_ip="172.169.50.123" src_port="56972" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898188"/>
        <to usec="0" sec="1172898194"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.21.9.205"/>
        </slice>
        <from usec="0" sec="1172898052"/>
        <to usec="0" sec="1172898055"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="26.29.10.162"/>
        </slice>
        <from usec="0" sec="1172898725"/>
        <to usec="0" sec="1172898731"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.169.208.253" dst_ip="112.98.111.95" src_port="1758" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898738"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.123.50.19" dst_ip="65.132.43.254" src_port="46827" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898431"/>
        <to usec="0" sec="1172898437"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="26.10.20.6" dst_ip="153.21.15.69" src_port="57860" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898092"/>
        <to usec="0" sec="1172898094"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.123.79.121" dst_ip="112.113.116.183" src_port="1583" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898401"/>
        <to usec="0" sec="1172898405"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.73.162.64" dst_ip="170.123.85.105" src_port="80" dst_port="53820" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898042"/>
        <to usec="0" sec="1172898045"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.51.84.129" dst_ip="170.123.47.168" src_port="80" dst_port="2711" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898084"/>
        <to usec="0" sec="1172898085"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="157.73.162.85" dst_ip="172.169.41.87" src_port="80" dst_port="61701" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898595"/>
        <to usec="0" sec="1172898597"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="153.21.60.251" dst_ip="153.21.60.251" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898884"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="215.140.32.140" dst_ip="215.140.32.140" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898893"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.169.196.70" dst_ip="28.72.213.33" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898214"/>
        <to usec="0" sec="1172898216"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.21.92.163" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898803"/>
        <to usec="0" sec="1172898810"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.21.10.176"/>
        </slice>
        <from usec="0" sec="1172898419"/>
        <to usec="0" sec="1172898423"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.123.18.68" dst_ip="207.221.68.204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898770"/>
        <to usec="0" sec="1172898774"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.123.47.147"/>
        </slice>
        <from usec="0" sec="1172898027"/>
        <to usec="0" sec="1172898414"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.17.14.41" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1172898214"/>
        <to usec="0" sec="1172898217"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="215.140.32.129" dst_ip="215.140.32.129" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898893"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.98.2.238" src_port="1025" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898095"/>
        <to usec="0" sec="1172898100"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.140.101.121" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898083"/>
        <to usec="0" sec="1172898096"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.5.76.129" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898595"/>
        <to usec="0" sec="1172898598"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="146.123.21.6" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898514"/>
        <to usec="0" sec="1172898517"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="108.48.191.60" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898716"/>
        <to usec="0" sec="1172898717"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="74.54.10.57" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898215"/>
        <to usec="0" sec="1172898217"/>
    </anomaly>
    <anomaly type="notice" value="0.540150,1.103900,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.129.62.185" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898215"/>
        <to usec="0" sec="1172898216"/>
    </anomaly>
    <anomaly type="notice" value="0.756644,1.188430,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="215.140.32.140" dst_ip="215.140.32.140" proto="udp"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898888"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898558"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.104.236.21"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898108"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="215.28.83.2"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898108"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.208.94.221"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898648"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="182.246.7.91"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898107"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.44.129.204"/>
        </slice>
        <from usec="0" sec="1172898005"/>
        <to usec="0" sec="1172898107"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.90.78.3"/>
        </slice>
        <from usec="0" sec="1172898019"/>
        <to usec="0" sec="1172898077"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.123.18.88"/>
        </slice>
        <from usec="0" sec="1172898019"/>
        <to usec="0" sec="1172898077"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898558"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.123.48.254"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898170"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="97.181.157.190"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898081"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.182.128.217"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898468"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.64.76.196"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898154"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.131.53.7"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898195"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="153.79.251.187"/>
        </slice>
        <from usec="0" sec="1172898001"/>
        <to usec="0" sec="1172898198"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="5.2.219.161"/>
        </slice>
        <from usec="0" sec="1172898050"/>
        <to usec="0" sec="1172898198"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.160.51.43"/>
        </slice>
        <from usec="0" sec="1172898054"/>
        <to usec="0" sec="1172898198"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="215.213.200.19"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898288"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="6.66.3.173"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898826"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="101.44.134.254"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898288"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="26.97.129.174"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898286"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="215.230.6.109"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898378"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="96.52.110.200"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898287"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.123.234.27"/>
        </slice>
        <from usec="0" sec="1172898006"/>
        <to usec="0" sec="1172898278"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.123.105.52"/>
        </slice>
        <from usec="0" sec="1172898011"/>
        <to usec="0" sec="1172898276"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.123.47.129"/>
        </slice>
        <from usec="0" sec="1172898063"/>
        <to usec="0" sec="1172898275"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="87.158.49.170"/>
        </slice>
        <from usec="0" sec="1172898164"/>
        <to usec="0" sec="1172898282"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="26.245.115.156"/>
        </slice>
        <from usec="0" sec="1172898206"/>
        <to usec="0" sec="1172898228"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.152.195.68"/>
        </slice>
        <from usec="0" sec="1172898220"/>
        <to usec="0" sec="1172898226"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.38.45.75"/>
        </slice>
        <from usec="0" sec="1172898227"/>
        <to usec="0" sec="1172898277"/>
    </anomaly>
    <anomaly type="notice" value="0.564066,1.074460,010,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.17.163.181" dst_port="12417"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898574"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="154.200.179.202"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898558"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="26.97.129.174"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898376"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.21.38.34"/>
        </slice>
        <from usec="0" sec="1172898017"/>
        <to usec="0" sec="1172898448"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="24.85.42.229"/>
        </slice>
        <from usec="0" sec="1172898184"/>
        <to usec="0" sec="1172898378"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.165.237.73"/>
        </slice>
        <from usec="0" sec="1172898237"/>
        <to usec="0" sec="1172898341"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="170.123.41.199"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898459"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.160.208.230"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898459"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="112.101.130.54"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898468"/>
    </anomaly>
    <anomaly type="notice" value="0.564066,1.074460,010,1 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="204.250.21.110" dst_ip="214.125.79.201" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898468"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="156.139.200.44"/>
        </slice>
        <from usec="0" sec="1172898001"/>
        <to usec="0" sec="1172898468"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.21.164.192"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898465"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.125.74.208"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898468"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="204.252.220.66"/>
        </slice>
        <from usec="0" sec="1172898104"/>
        <to usec="0" sec="1172898290"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.196.139.105"/>
        </slice>
        <from usec="0" sec="1172898368"/>
        <to usec="0" sec="1172898464"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.186.21.163"/>
        </slice>
        <from usec="0" sec="1172898378"/>
        <to usec="0" sec="1172898461"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="26.210.69.119"/>
        </slice>
        <from usec="0" sec="1172898401"/>
        <to usec="0" sec="1172898406"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.17.152.80"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898557"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.32.101.78"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898737"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.202.200.10"/>
        </slice>
        <from usec="0" sec="1172898293"/>
        <to usec="0" sec="1172898518"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="24.85.38.213"/>
        </slice>
        <from usec="0" sec="1172898317"/>
        <to usec="0" sec="1172898394"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.30.144.67"/>
        </slice>
        <from usec="0" sec="1172898321"/>
        <to usec="0" sec="1172898379"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="112.98.1.174"/>
        </slice>
        <from usec="0" sec="1172898354"/>
        <to usec="0" sec="1172898443"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="207.17.151.201"/>
        </slice>
        <from usec="0" sec="1172898424"/>
        <to usec="0" sec="1172898534"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="99.5.56.92"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898648"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.236.27.227"/>
        </slice>
        <from usec="0" sec="1172898049"/>
        <to usec="0" sec="1172898493"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="30.67.131.133"/>
        </slice>
        <from usec="0" sec="1172898199"/>
        <to usec="0" sec="1172898496"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.49.48.81"/>
        </slice>
        <from usec="0" sec="1172898231"/>
        <to usec="0" sec="1172898547"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.169.41.221"/>
        </slice>
        <from usec="0" sec="1172898005"/>
        <to usec="0" sec="1172898738"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.125.75.60"/>
        </slice>
        <from usec="0" sec="1172898052"/>
        <to usec="0" sec="1172898666"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.123.48.254"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898828"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.28.110.222"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898828"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.89.19.186"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898804"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="217.20.231.199" dst_port="53"/>
        </slice>
        <from usec="0" sec="1172898001"/>
        <to usec="0" sec="1172898828"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.90.107.173"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898792"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="26.29.8.13" dst_ip="153.21.229.128" dst_port="80"/>
            <filter src_ip="26.29.8.13" dst_ip="153.21.229.128" dst_port="443"/>
            <filter src_ip="26.29.8.13" dst_ip="170.123.172.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1172898002"/>
        <to usec="0" sec="1172898807"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.125.67.77"/>
        </slice>
        <from usec="0" sec="1172898006"/>
        <to usec="0" sec="1172898828"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.179.203.115"/>
        </slice>
        <from usec="0" sec="1172898049"/>
        <to usec="0" sec="1172898807"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="28.206.252.134"/>
        </slice>
        <from usec="0" sec="1172898228"/>
        <to usec="0" sec="1172898812"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.125.67.115"/>
        </slice>
        <from usec="0" sec="1172898268"/>
        <to usec="0" sec="1172898665"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="211.51.93.172"/>
        </slice>
        <from usec="0" sec="1172898405"/>
        <to usec="0" sec="1172898827"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="24.58.235.169"/>
        </slice>
        <from usec="0" sec="1172898428"/>
        <to usec="0" sec="1172898692"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.81.224.133"/>
        </slice>
        <from usec="0" sec="1172898430"/>
        <to usec="0" sec="1172898825"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.21.83.113"/>
        </slice>
        <from usec="0" sec="1172898502"/>
        <to usec="0" sec="1172898792"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="199.0.207.181"/>
        </slice>
        <from usec="0" sec="1172898505"/>
        <to usec="0" sec="1172898810"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.123.19.23"/>
        </slice>
        <from usec="0" sec="1172898534"/>
        <to usec="0" sec="1172898710"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.132.209.19"/>
        </slice>
        <from usec="0" sec="1172898575"/>
        <to usec="0" sec="1172898827"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="28.206.242.108"/>
        </slice>
        <from usec="0" sec="1172898575"/>
        <to usec="0" sec="1172898720"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.108.19.39"/>
        </slice>
        <from usec="0" sec="1172898579"/>
        <to usec="0" sec="1172898681"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.133.91.249" src_port="53"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898046"/>
    </anomaly>
    <anomaly type="notice" value="0.650493,1.112040,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.28.81.58" src_port="12335"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898198"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.163.29.11" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898046"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="193.127.226.15"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.21.69.187"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.125.79.191"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="172.169.45.95"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="213.139.91.24" dst_port="139"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.123.151.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="217.232.53.134" dst_ip="170.123.237.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.169.41.141" dst_port="80"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.28.81.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898136"/>
    </anomaly>
    <anomaly type="notice" value="0.706803,1.109930,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.94.90.100" dst_port="135"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898181"/>
    </anomaly>
    <anomaly type="notice" value="0.650493,1.112040,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="206.23.229.167"/>
        </slice>
        <from usec="0" sec="1172898225"/>
        <to usec="0" sec="1172898409"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.125.68.55"/>
        </slice>
        <from usec="0" sec="1172898225"/>
        <to usec="0" sec="1172898271"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.179.94.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1172898225"/>
        <to usec="0" sec="1172898271"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.221.70.111"/>
        </slice>
        <from usec="0" sec="1172898495"/>
        <to usec="0" sec="1172898541"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.179.4.134"/>
        </slice>
        <from usec="0" sec="1172898540"/>
        <to usec="0" sec="1172898586"/>
    </anomaly>
    <anomaly type="notice" value="0.706803,1.109930,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="214.6.162.145" dst_port="139"/>
        </slice>
        <from usec="0" sec="1172898540"/>
        <to usec="0" sec="1172898609"/>
    </anomaly>
    <anomaly type="notice" value="0.464040,1.106020,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="154.200.178.51" dst_port="53"/>
            <filter dst_ip="154.200.178.51" src_port="53" dst_port="54660"/>
        </slice>
        <from usec="0" sec="1172898000"/>
        <to usec="0" sec="1172898376"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.169.41.220"/>
        </slice>
        <from usec="0" sec="1172898675"/>
        <to usec="0" sec="1172898721"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.169.196.5" src_port="32769" dst_port="53"/>
        </slice>
        <from usec="0" sec="1172898090"/>
        <to usec="0" sec="1172898721"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="87.160.36.243"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.125.68.54"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="96.231.70.46" src_port="80"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="97.184.134.182" src_port="7100"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="97.184.134.182" src_port="7200"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.21.68.44" dst_ip="207.221.68.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="1172898495"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="217.133.91.253" dst_ip="29.27.178.8" src_port="53"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898856"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.192.149.148" dst_ip="215.140.37.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1172898810"/>
        <to usec="0" sec="1172898901"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.160.49.235"/>
        </slice>
        <from usec="0" sec="1172898855"/>
        <to usec="0" sec="1172898901"/>
    </anomaly>
    <anomaly type="notice" value="0.629867,1.140510,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.123.63.131" src_port="80"/>
        </slice>
        <from usec="0" sec="1172898855"/>
        <to usec="0" sec="1172898901"/>
    </anomaly>
</admd:annotation>
