<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.113.169.48" dst_ip="215.175.87.63" src_port="4731" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178342061"/>
        <to usec="0" sec="1178342086"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.45.232.234" dst_ip="53.153.221.141" src_port="56459" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178341429"/>
        <to usec="0" sec="1178341433"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.113.175.15" dst_ip="202.209.242.135" src_port="1919" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178341864"/>
        <to usec="0" sec="1178342092"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.206.128.22"/>
        </slice>
        <from usec="0" sec="1178341281"/>
        <to usec="0" sec="1178341288"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="13.227.2.45"/>
        </slice>
        <from usec="0" sec="1178341507"/>
        <to usec="0" sec="1178341555"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.40.94.78"/>
        </slice>
        <from usec="0" sec="1178341771"/>
        <to usec="0" sec="1178341777"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="134.128.117.3"/>
        </slice>
        <from usec="0" sec="1178341255"/>
        <to usec="0" sec="1178342089"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.45.128.228"/>
        </slice>
        <from usec="0" sec="1178341322"/>
        <to usec="0" sec="1178341328"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="58.40.86.205"/>
        </slice>
        <from usec="0" sec="1178341256"/>
        <to usec="0" sec="1178341263"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.122.82.238"/>
        </slice>
        <from usec="0" sec="1178341372"/>
        <to usec="0" sec="1178341380"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="155.255.138.14"/>
        </slice>
        <from usec="0" sec="1178342074"/>
        <to usec="0" sec="1178342081"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="198.15.220.192" dst_ip="198.15.220.192" proto="udp"/>
        </slice>
        <from usec="0" sec="1178341201"/>
        <to usec="0" sec="1178342096"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.55.136.86" src_port="58117" dst_port="1027" proto="udp"/>
        </slice>
        <from usec="0" sec="1178341743"/>
        <to usec="0" sec="1178341745"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,001,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNtSAbado">
        <slice>
            <filter src_ip="106.29.168.10" dst_port="9898" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178341954"/>
        <to usec="0" sec="1178341960"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="93.24.146.58" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178342008"/>
        <to usec="0" sec="1178342086"/>
    </anomaly>
    <anomaly type="notice" value="0.606223,1.097460,003,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="93.158.169.184" src_port="135" proto="tcp"/>
        </slice>
        <from usec="0" sec="1178341324"/>
        <to usec="0" sec="1178341354"/>
    </anomaly>
    <anomaly type="notice" value="0.736071,1.158390,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="198.15.220.192" dst_ip="198.15.220.192" proto="udp"/>
        </slice>
        <from usec="0" sec="1178341201"/>
        <to usec="0" sec="1178342091"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.181.149.124"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341308"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="129.206.96.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341307"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="198.93.196.207"/>
        </slice>
        <from usec="0" sec="1178341201"/>
        <to usec="0" sec="1178341303"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.136.144.54"/>
        </slice>
        <from usec="0" sec="1178341225"/>
        <to usec="0" sec="1178341355"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="53.153.217.221"/>
        </slice>
        <from usec="0" sec="1178341240"/>
        <to usec="0" sec="1178341266"/>
    </anomaly>
    <anomaly type="notice" value="0.689343,1.081920,999,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.128.134.146" dst_ip="215.212.208.219" dst_port="25"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178342021"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="58.40.87.219"/>
        </slice>
        <from usec="0" sec="1178341305"/>
        <to usec="0" sec="1178341311"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.206.20.237"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341575"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="134.128.36.20"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341578"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.227.113.234"/>
        </slice>
        <from usec="0" sec="1178341203"/>
        <to usec="0" sec="1178341578"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.150.26.175"/>
        </slice>
        <from usec="0" sec="1178341204"/>
        <to usec="0" sec="1178341578"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.227.0.4"/>
        </slice>
        <from usec="0" sec="1178341217"/>
        <to usec="0" sec="1178341573"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.194.73.159"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341541"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.227.0.22"/>
        </slice>
        <from usec="0" sec="1178341216"/>
        <to usec="0" sec="1178341502"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="42.59.227.246"/>
        </slice>
        <from usec="0" sec="1178341376"/>
        <to usec="0" sec="1178341668"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.45.187.85"/>
        </slice>
        <from usec="0" sec="1178341224"/>
        <to usec="0" sec="1178341739"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.20.118.151"/>
        </slice>
        <from usec="0" sec="1178341231"/>
        <to usec="0" sec="1178341734"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="129.206.195.4"/>
        </slice>
        <from usec="0" sec="1178341294"/>
        <to usec="0" sec="1178341936"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="50.252.30.89"/>
        </slice>
        <from usec="0" sec="1178341348"/>
        <to usec="0" sec="1178341668"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.128.130.163"/>
        </slice>
        <from usec="0" sec="1178341643"/>
        <to usec="0" sec="1178341658"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="168.45.128.146" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341847"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="134.128.10.220"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341848"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="199.139.9.255"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178342028"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.133.166.136"/>
        </slice>
        <from usec="0" sec="1178341201"/>
        <to usec="0" sec="1178341847"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.117.242.204"/>
        </slice>
        <from usec="0" sec="1178341203"/>
        <to usec="0" sec="1178341842"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.129.67.5"/>
        </slice>
        <from usec="0" sec="1178341210"/>
        <to usec="0" sec="1178341848"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.150.161.78"/>
        </slice>
        <from usec="0" sec="1178341217"/>
        <to usec="0" sec="1178341834"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.66.104.18"/>
        </slice>
        <from usec="0" sec="1178341225"/>
        <to usec="0" sec="1178341848"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="54.128.61.150"/>
        </slice>
        <from usec="0" sec="1178341235"/>
        <to usec="0" sec="1178341808"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="53.216.11.235"/>
        </slice>
        <from usec="0" sec="1178341431"/>
        <to usec="0" sec="1178341841"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.176.24.1"/>
        </slice>
        <from usec="0" sec="1178341815"/>
        <to usec="0" sec="1178341848"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.153.228.78"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341930"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.45.238.178"/>
        </slice>
        <from usec="0" sec="1178341202"/>
        <to usec="0" sec="1178342015"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.20.118.150"/>
        </slice>
        <from usec="0" sec="1178341216"/>
        <to usec="0" sec="1178341907"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="75.158.84.194"/>
        </slice>
        <from usec="0" sec="1178341231"/>
        <to usec="0" sec="1178341905"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="208.190.174.47"/>
        </slice>
        <from usec="0" sec="1178341397"/>
        <to usec="0" sec="1178341932"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.45.46.173"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178342023"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.150.33.194"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178342025"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.247.10.202"/>
        </slice>
        <from usec="0" sec="1178341202"/>
        <to usec="0" sec="1178342027"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.113.219.27"/>
        </slice>
        <from usec="0" sec="1178341202"/>
        <to usec="0" sec="1178342018"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.136.216.197"/>
        </slice>
        <from usec="0" sec="1178341202"/>
        <to usec="0" sec="1178342023"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.117.242.217"/>
        </slice>
        <from usec="0" sec="1178341208"/>
        <to usec="0" sec="1178342028"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.45.3.118"/>
        </slice>
        <from usec="0" sec="1178341227"/>
        <to usec="0" sec="1178342026"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.148.43.201"/>
        </slice>
        <from usec="0" sec="1178341859"/>
        <to usec="0" sec="1178342019"/>
    </anomaly>
    <anomaly type="notice" value="0.552753,1.095030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.136.26.102"/>
        </slice>
        <from usec="0" sec="1178342019"/>
        <to usec="0" sec="1178342025"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.74.218.26"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="9.101.25.68"/>
        </slice>
        <from usec="0" sec="1178341515"/>
        <to usec="0" sec="1178341561"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="199.181.146.74" dst_ip="48.218.6.175"/>
        </slice>
        <from usec="0" sec="1178341650"/>
        <to usec="0" sec="1178341696"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="199.181.146.74" dst_ip="49.115.177.230"/>
        </slice>
        <from usec="0" sec="1178341650"/>
        <to usec="0" sec="1178341696"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="155.255.219.238" dst_ip="89.92.17.71"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="168.45.207.114" dst_ip="196.52.90.205"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="168.45.207.114" dst_ip="196.42.169.190"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="168.45.207.114" dst_ip="196.52.55.33"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="168.45.207.114" dst_ip="196.42.169.58"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="168.45.207.114" dst_ip="196.52.42.245"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.154.220.134" src_port="80"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="134.128.10.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,502,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="59.135.75.215" src_port="22"/>
        </slice>
        <from usec="0" sec="1178341875"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.155.96.73"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="155.255.219.238" dst_ip="89.92.17.71"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.181.158.105"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.155.96.16" dst_port="25"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.155.85.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.101.170.192" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.113.55.254" dst_ip="199.181.146.69" dst_port="3128"/>
            <filter src_ip="192.113.55.254" dst_ip="199.181.146.75" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.179.130.184" dst_port="137"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.557111,1.113080,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="134.128.10.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178342055"/>
        <to usec="0" sec="1178342101"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="134.144.153.35" dst_port="5364"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,020,0 0 0 0 0 0 1 1 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="198.155.85.6"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,020,0 0 0 0 0 0 1 1 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="199.181.153.161"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,020,0 0 0 0 0 0 1 1 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="199.181.155.15"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,020,0 0 0 0 0 0 1 1 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="199.181.155.8"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="209.146.11.251" dst_ip="199.181.146.75" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.181.146.69" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.49.4.156" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="129.206.59.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.181.153.87" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="134.128.134.87" dst_port="53"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.45.2.137" dst_ip="89.214.200.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341246"/>
    </anomaly>
    <anomaly type="notice" value="0.754491,1.140490,020,0 0 0 0 0 0 1 1 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="168.45.207.112" dst_port="12282"/>
            <filter dst_ip="168.45.207.112"/>
        </slice>
        <from usec="0" sec="1178341200"/>
        <to usec="0" sec="1178341921"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.206.22.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.128.69.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.45.111.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="89.225.71.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="53.153.221.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="58.40.86.35"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.206.222.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="134.144.11.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.48.3.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.206.230.184" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="216.162.86.212"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="216.136.148.236"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645484,1.075000,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="54.128.33.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
