<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.130.30.149" dst_ip="206.179.83.95" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663046"/>
        <to usec="0" sec="1175663050"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.24.205.22" dst_ip="152.162.145.209" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663046"/>
        <to usec="0" sec="1175663050"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.50.85.133" dst_ip="42.7.39.166" src_port="4020" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663694"/>
        <to usec="0" sec="1175663697"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.162.148.53" dst_ip="12.24.205.57" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663595"/>
        <to usec="0" sec="1175663599"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="74.89.98.1" dst_ip="169.22.134.83" src_port="80" dst_port="1896" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663046"/>
        <to usec="0" sec="1175663050"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.186.70"/>
        </slice>
        <from usec="0" sec="1175663236"/>
        <to usec="0" sec="1175663240"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.162.148.28" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662955"/>
        <to usec="0" sec="1175662960"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.131.210.14" dst_ip="158.150.115.218" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662863"/>
        <to usec="0" sec="1175662866"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.135.23.73" dst_ip="84.184.238.78" src_port="6346" dst_port="18734" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663136"/>
        <to usec="0" sec="1175663139"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="152.162.129.231" dst_ip="218.107.113.20" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662926"/>
        <to usec="0" sec="1175662928"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.50.23.175" dst_ip="42.7.38.214" src_port="4682" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662926"/>
        <to usec="0" sec="1175662929"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.7.37.100" dst_ip="200.130.24.99" src_port="80" dst_port="1065" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663002"/>
        <to usec="0" sec="1175663005"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.22.223.72" dst_ip="42.7.38.149" src_port="3511" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662930"/>
        <to usec="0" sec="1175662933"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.162.25.243" dst_ip="37.158.45.142" src_port="62619" dst_port="1723" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662874"/>
        <to usec="0" sec="1175663608"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.162.24.202" dst_ip="37.128.191.231" src_port="3075" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662926"/>
        <to usec="0" sec="1175662937"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="216.217.137.231" dst_ip="200.142.218.168" src_port="443" dst_port="49840" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662942"/>
        <to usec="0" sec="1175663041"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.158.145.54" dst_ip="158.150.153.137" src_port="4271" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662964"/>
        <to usec="0" sec="1175662969"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.162.0.84" dst_ip="219.90.170.65" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663491"/>
        <to usec="0" sec="1175663494"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,901,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.135.234.122" dst_ip="80.144.245.102" src_port="1629" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663289"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.205"/>
        </slice>
        <from usec="0" sec="1175662994"/>
        <to usec="0" sec="1175662998"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.220.28"/>
        </slice>
        <from usec="0" sec="1175663079"/>
        <to usec="0" sec="1175663082"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.150.212.0" dst_ip="206.179.73.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662854"/>
        <to usec="0" sec="1175662858"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.162.219.108" dst_ip="219.41.22.192" src_port="1882" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663123"/>
        <to usec="0" sec="1175663126"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.130.25.170"/>
        </slice>
        <from usec="0" sec="1175663557"/>
        <to usec="0" sec="1175663560"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.145.209"/>
        </slice>
        <from usec="0" sec="1175662960"/>
        <to usec="0" sec="1175663446"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.135.177.197" dst_ip="201.10.41.159" src_port="3633" dst_port="65000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662941"/>
        <to usec="0" sec="1175663592"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.162.148.134" dst_ip="200.48.200.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662864"/>
        <to usec="0" sec="1175662918"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.163.247.11"/>
        </slice>
        <from usec="0" sec="1175663211"/>
        <to usec="0" sec="1175663649"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.22.191.71" dst_ip="215.4.142.238" src_port="2022" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663575"/>
        <to usec="0" sec="1175663578"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.76.22.80"/>
        </slice>
        <from usec="0" sec="1175663281"/>
        <to usec="0" sec="1175663287"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="32.215.155.92"/>
        </slice>
        <from usec="0" sec="1175663046"/>
        <to usec="0" sec="1175663050"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.162.145.104"/>
        </slice>
        <from usec="0" sec="1175663654"/>
        <to usec="0" sec="1175663657"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.22.132.64"/>
        </slice>
        <from usec="0" sec="1175663097"/>
        <to usec="0" sec="1175663100"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.105.93.177" dst_ip="201.107.72.183" dst_port="3128" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662962"/>
        <to usec="0" sec="1175663041"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="152.162.122.206" dst_ip="37.128.191.199" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663387"/>
        <to usec="0" sec="1175663391"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.211" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663588"/>
        <to usec="0" sec="1175663592"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.162.159.108" dst_ip="217.234.102.115" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662970"/>
        <to usec="0" sec="1175663005"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.150.199.43"/>
        </slice>
        <from usec="0" sec="1175663603"/>
        <to usec="0" sec="1175663639"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.107.68.50"/>
        </slice>
        <from usec="0" sec="1175663555"/>
        <to usec="0" sec="1175663560"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.184.124.163" src_port="1028" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663289"/>
        <to usec="0" sec="1175663298"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="52.96.142.107" src_port="1039" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1175662975"/>
        <to usec="0" sec="1175662987"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.192.99.138" src_port="1028" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663478"/>
        <to usec="0" sec="1175663492"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="80.249.172.153" src_port="33679" proto="udp"/>
        </slice>
        <from usec="0" sec="1175662997"/>
        <to usec="0" sec="1175663000"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.0.208.177" src_port="10026" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663363"/>
        <to usec="0" sec="1175663381"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="158.150.153.137" src_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663682"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="65.45.109.253" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663536"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.82.87.50" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1175662836"/>
        <to usec="0" sec="1175662838"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="43.233.15.21" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663555"/>
        <to usec="0" sec="1175663558"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.108.50.91" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663559"/>
        <to usec="0" sec="1175663560"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="219.247.144.110" proto="icmp"/>
        </slice>
        <from usec="0" sec="1175663536"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="33.51.210.221" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1175663535"/>
        <to usec="0" sec="1175663536"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.139.108.7"/>
        </slice>
        <from usec="0" sec="1175663557"/>
        <to usec="0" sec="1175663560"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.245.154.154" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1175663003"/>
        <to usec="0" sec="1175663005"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="158.50.222.216"/>
        </slice>
        <from usec="0" sec="1175662996"/>
        <to usec="0" sec="1175662999"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.150.224.48"/>
        </slice>
        <from usec="0" sec="1175663294"/>
        <to usec="0" sec="1175663298"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="59.225.219.57"/>
        </slice>
        <from usec="0" sec="1175662867"/>
        <to usec="0" sec="1175662908"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.40"/>
        </slice>
        <from usec="0" sec="1175662806"/>
        <to usec="0" sec="1175662997"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.98.191.179"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663088"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="200.142.217.162"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663088"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.169.55.123"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663053"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.22.181.2"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663081"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.107.65.70"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663088"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.165.186.122"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663087"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="32.21.113.68"/>
        </slice>
        <from usec="0" sec="1175662810"/>
        <to usec="0" sec="1175663087"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.72.13.7"/>
        </slice>
        <from usec="0" sec="1175662818"/>
        <to usec="0" sec="1175663000"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.145.206"/>
        </slice>
        <from usec="0" sec="1175662890"/>
        <to usec="0" sec="1175663021"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.18.10.212"/>
        </slice>
        <from usec="0" sec="1175662803"/>
        <to usec="0" sec="1175663177"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="201.144.89.252"/>
        </slice>
        <from usec="0" sec="1175662804"/>
        <to usec="0" sec="1175663173"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.24.206.205"/>
        </slice>
        <from usec="0" sec="1175662808"/>
        <to usec="0" sec="1175663357"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.162.15.144"/>
        </slice>
        <from usec="0" sec="1175662811"/>
        <to usec="0" sec="1175663172"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="201.107.70.168"/>
        </slice>
        <from usec="0" sec="1175662813"/>
        <to usec="0" sec="1175663125"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.22.214.198"/>
        </slice>
        <from usec="0" sec="1175662886"/>
        <to usec="0" sec="1175663158"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.188.109"/>
        </slice>
        <from usec="0" sec="1175662945"/>
        <to usec="0" sec="1175663156"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.142.224.133"/>
        </slice>
        <from usec="0" sec="1175663474"/>
        <to usec="0" sec="1175663487"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.219.229.123"/>
        </slice>
        <from usec="0" sec="1175663029"/>
        <to usec="0" sec="1175663178"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.41.251.4"/>
        </slice>
        <from usec="0" sec="1175663044"/>
        <to usec="0" sec="1175663086"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="55.61.19.57"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663267"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.155.33.170"/>
        </slice>
        <from usec="0" sec="1175662801"/>
        <to usec="0" sec="1175663268"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.53.157.177"/>
        </slice>
        <from usec="0" sec="1175662803"/>
        <to usec="0" sec="1175663264"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.162.104.41"/>
        </slice>
        <from usec="0" sec="1175662804"/>
        <to usec="0" sec="1175663268"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.70.61.186"/>
        </slice>
        <from usec="0" sec="1175662819"/>
        <to usec="0" sec="1175663526"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.50.81.192"/>
        </slice>
        <from usec="0" sec="1175662825"/>
        <to usec="0" sec="1175663215"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.154.219.92"/>
        </slice>
        <from usec="0" sec="1175662837"/>
        <to usec="0" sec="1175663256"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.162.127.71"/>
        </slice>
        <from usec="0" sec="1175662887"/>
        <to usec="0" sec="1175663108"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="34.14.221.25"/>
        </slice>
        <from usec="0" sec="1175662979"/>
        <to usec="0" sec="1175663268"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="37.214.18.87" dst_ip="152.162.194.217" dst_port="53"/>
            <filter src_ip="37.214.18.68" dst_ip="152.162.194.217" dst_port="53"/>
        </slice>
        <from usec="0" sec="1175663069"/>
        <to usec="0" sec="1175663266"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.206.41.214"/>
        </slice>
        <from usec="0" sec="1175663107"/>
        <to usec="0" sec="1175663268"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.130.27.102"/>
        </slice>
        <from usec="0" sec="1175663135"/>
        <to usec="0" sec="1175663268"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.158.76.217"/>
        </slice>
        <from usec="0" sec="1175662801"/>
        <to usec="0" sec="1175663358"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="37.188.152.121"/>
        </slice>
        <from usec="0" sec="1175662806"/>
        <to usec="0" sec="1175663355"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.162.97.240"/>
        </slice>
        <from usec="0" sec="1175662821"/>
        <to usec="0" sec="1175663513"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.4.230.88"/>
        </slice>
        <from usec="0" sec="1175662827"/>
        <to usec="0" sec="1175663324"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.154.219.92"/>
        </slice>
        <from usec="0" sec="1175662837"/>
        <to usec="0" sec="1175663289"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="41.65.202.84"/>
        </slice>
        <from usec="0" sec="1175663256"/>
        <to usec="0" sec="1175663259"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.22.222.10"/>
        </slice>
        <from usec="0" sec="1175663345"/>
        <to usec="0" sec="1175663353"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.162.73.10" dst_ip="206.179.21.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1175662804"/>
        <to usec="0" sec="1175663448"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="214.213.86.41" src_port="53"/>
            <filter dst_ip="200.142.211.232" dst_port="53"/>
            <filter dst_ip="200.142.211.232" src_port="53" dst_port="41370"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663448"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.179.21.7"/>
        </slice>
        <from usec="0" sec="1175662815"/>
        <to usec="0" sec="1175663442"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.141.1.135"/>
        </slice>
        <from usec="0" sec="1175662865"/>
        <to usec="0" sec="1175663375"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="53.141.194.35"/>
        </slice>
        <from usec="0" sec="1175663377"/>
        <to usec="0" sec="1175663448"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="200.142.216.89"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.18.51.248"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.101.64.234"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="37.10.151.160"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.48.200.198"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663531"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.18.152.40"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter dst_ip="201.107.65.210"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.22.135.16"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="10.200.254.77"/>
        </slice>
        <from usec="0" sec="1175662800"/>
        <to usec="0" sec="1175663536"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.121.100.150"/>
        </slice>
        <from usec="0" sec="1175662801"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.142.234.10"/>
        </slice>
        <from usec="0" sec="1175662802"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.179.23.219"/>
        </slice>
        <from usec="0" sec="1175662802"/>
        <to usec="0" sec="1175663523"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.104.150.0"/>
        </slice>
        <from usec="0" sec="1175662803"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.22.220.20"/>
        </slice>
        <from usec="0" sec="1175662803"/>
        <to usec="0" sec="1175663435"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.5.165.226"/>
        </slice>
        <from usec="0" sec="1175662803"/>
        <to usec="0" sec="1175663526"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.179.21.105"/>
        </slice>
        <from usec="0" sec="1175662805"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.28.150.109"/>
        </slice>
        <from usec="0" sec="1175662806"/>
        <to usec="0" sec="1175663535"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.7.38.17"/>
        </slice>
        <from usec="0" sec="1175662807"/>
        <to usec="0" sec="1175663359"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="80.18.224.105"/>
        </slice>
        <from usec="0" sec="1175662809"/>
        <to usec="0" sec="1175663534"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="32.197.21.128"/>
        </slice>
        <from usec="0" sec="1175662811"/>
        <to usec="0" sec="1175663529"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.130.136.12"/>
        </slice>
        <from usec="0" sec="1175662817"/>
        <to usec="0" sec="1175663529"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.107.67.84"/>
        </slice>
        <from usec="0" sec="1175662820"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="152.162.142.69"/>
        </slice>
        <from usec="0" sec="1175662822"/>
        <to usec="0" sec="1175663517"/>
    </anomaly>
    <anomaly type="notice" value="0.511520,0.927283,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="1175662822"/>
        <to usec="0" sec="1175663438"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="221.184.133.151"/>
        </slice>
        <from usec="0" sec="1175662823"/>
        <to usec="0" sec="1175663525"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="102.194.168.30"/>
        </slice>
        <from usec="0" sec="1175662826"/>
        <to usec="0" sec="1175663496"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.162.25.242"/>
        </slice>
        <from usec="0" sec="1175662832"/>
        <to usec="0" sec="1175663531"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.22.181.39"/>
        </slice>
        <from usec="0" sec="1175662839"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.106.135.1"/>
        </slice>
        <from usec="0" sec="1175662867"/>
        <to usec="0" sec="1175663517"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="176.172.90.38"/>
        </slice>
        <from usec="0" sec="1175662877"/>
        <to usec="0" sec="1175663524"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.107.67.17"/>
        </slice>
        <from usec="0" sec="1175662958"/>
        <to usec="0" sec="1175663494"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.31.68.26"/>
        </slice>
        <from usec="0" sec="1175663015"/>
        <to usec="0" sec="1175663448"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.198"/>
        </slice>
        <from usec="0" sec="1175663084"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.18.152.209"/>
        </slice>
        <from usec="0" sec="1175663090"/>
        <to usec="0" sec="1175663528"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.107.69.93"/>
        </slice>
        <from usec="0" sec="1175663130"/>
        <to usec="0" sec="1175663455"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="32.21.97.22"/>
        </slice>
        <from usec="0" sec="1175663144"/>
        <to usec="0" sec="1175663529"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.7.104.140"/>
        </slice>
        <from usec="0" sec="1175663157"/>
        <to usec="0" sec="1175663400"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.26.161.248"/>
        </slice>
        <from usec="0" sec="1175663174"/>
        <to usec="0" sec="1175663537"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.162.148.44"/>
        </slice>
        <from usec="0" sec="1175663181"/>
        <to usec="0" sec="1175663484"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="172.2.126.117"/>
        </slice>
        <from usec="0" sec="1175663192"/>
        <to usec="0" sec="1175663479"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.155.113.28"/>
        </slice>
        <from usec="0" sec="1175663215"/>
        <to usec="0" sec="1175663510"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.115.85.97"/>
        </slice>
        <from usec="0" sec="1175663220"/>
        <to usec="0" sec="1175663494"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.17.36.220"/>
        </slice>
        <from usec="0" sec="1175663264"/>
        <to usec="0" sec="1175663533"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="51.24.21.191"/>
        </slice>
        <from usec="0" sec="1175663269"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.236.19.158"/>
        </slice>
        <from usec="0" sec="1175663319"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.144.11.230"/>
        </slice>
        <from usec="0" sec="1175663335"/>
        <to usec="0" sec="1175663518"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.142.56.162"/>
        </slice>
        <from usec="0" sec="1175663337"/>
        <to usec="0" sec="1175663538"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.65.203.224"/>
        </slice>
        <from usec="0" sec="1175663363"/>
        <to usec="0" sec="1175663392"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.22.204.218"/>
        </slice>
        <from usec="0" sec="1175663390"/>
        <to usec="0" sec="1175663497"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.129.186.32"/>
        </slice>
        <from usec="0" sec="1175663392"/>
        <to usec="0" sec="1175663497"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.84.220.197"/>
        </slice>
        <from usec="0" sec="1175663399"/>
        <to usec="0" sec="1175663518"/>
    </anomaly>
    <anomaly type="notice" value="0.511520,0.927283,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.22.126.99" dst_ip="42.7.38.201" dst_port="80"/>
            <filter src_ip="169.22.126.99" dst_ip="42.7.39.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1175663405"/>
        <to usec="0" sec="1175663484"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.162.145.120"/>
        </slice>
        <from usec="0" sec="1175663415"/>
        <to usec="0" sec="1175663510"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.186.132.211"/>
        </slice>
        <from usec="0" sec="1175663455"/>
        <to usec="0" sec="1175663485"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.196.97.21"/>
        </slice>
        <from usec="0" sec="1175663487"/>
        <to usec="0" sec="1175663530"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.65.212.10"/>
        </slice>
        <from usec="0" sec="1175663500"/>
        <to usec="0" sec="1175663509"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.130.156.167" src_port="29912" dst_port="33434"/>
        </slice>
        <from usec="0" sec="1175663363"/>
        <to usec="0" sec="1175663381"/>
    </anomaly>
    <anomaly type="notice" value="0.511520,0.927283,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="53.18.163.188" dst_ip="201.107.72.186" dst_port="3128"/>
            <filter src_ip="53.18.163.188" dst_ip="201.107.72.183" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1175662843"/>
        <to usec="0" sec="1175663442"/>
    </anomaly>
    <anomaly type="notice" value="0.490876,0.953138,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.7.39.154" dst_ip="152.162.86.161" src_port="80" dst_port="1058"/>
        </slice>
        <from usec="0" sec="1175663490"/>
        <to usec="0" sec="1175663495"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="33.38.4.150" dst_ip="158.150.216.192" src_port="25"/>
        </slice>
        <from usec="0" sec="1175662801"/>
        <to usec="0" sec="1175663209"/>
    </anomaly>
    <anomaly type="notice" value="0.473418,0.971498,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.2.206.41" src_port="80"/>
            <filter dst_ip="158.2.206.41" dst_port="27976"/>
        </slice>
        <from usec="0" sec="1175662801"/>
        <to usec="0" sec="1175662985"/>
    </anomaly>
</admd:annotation>
