<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="2.499750,1.837370,503,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="145.84.192.174" dst_port="80"/>
            <filter dst_ip="1.216.24.245" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.699860,1.436760,503,1 1 1 1 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.7.136.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.571130,1.325300,503,1 0 0 1 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="1.221.253.169" dst_ip="215.184.34.143" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.940370,1.579890,503,1 1 1 1 0 0 1 1 1 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.216.198.108" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.247190,1.647010,503,1 1 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="214.10.224.150" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.108030,1.708450,503,1 1 1 1 1 1 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.184.40.134" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785298"/>
    </anomaly>
    <anomaly type="anomalous" value="1.520890,1.482900,999,1 1 1 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.119.154.138"/>
        </slice>
        <from usec="0" sec="1183784473"/>
        <to usec="0" sec="1183785080"/>
    </anomaly>
    <anomaly type="anomalous" value="1.793600,1.388560,999,1 1 0 1 0 0 1 1 1 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.206.36.119"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.064730,1.577990,503,1 0 0 1 1 1 1 1 1 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.184.40.134" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.956990,1.485850,503,1 1 0 1 1 1 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.197.198.141" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.813000,1.459310,503,0 0 0 1 1 1 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.197.198.141" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.348470,1.317780,503,1 0 0 1 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.115.162" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183785277"/>
    </anomaly>
    <anomaly type="anomalous" value="1.348470,1.317780,999,1 0 0 1 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.72.197.129" src_port="53"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785301"/>
    </anomaly>
    <anomaly type="anomalous" value="1.422440,1.324620,503,0 0 0 1 0 0 1 1 1 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.10.198.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.027210,1.602860,503,1 1 1 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="214.7.140.101" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.254140,1.215600,999,1 0 0 1 0 0 1 0 1 1 0 0,ptmp">
        <slice>
            <filter src_ip="165.206.36.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.788390,1.975600,010,1 1 1 1 1 1 1 1 1 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="214.238.94.192" src_port="6000" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.216740,1.607900,503,1 0 0 1 1 1 1 1 1 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="134.201.39.242" dst_ip="198.80.235.246" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.456300,1.778070,503,0 0 0 1 1 1 1 1 1 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="149.216.119.185" dst_ip="192.164.85.28" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.654320,1.401060,503,1 0 0 1 1 1 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.7.140.101" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.146540,1.600990,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="1.216.24.245" src_port="80"/>
            <filter src_ip="1.216.24.165" src_port="80"/>
            <filter dst_ip="145.84.136.74" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.499750,1.837370,503,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="1.216.26.41" src_port="80"/>
            <filter src_ip="1.216.24.220" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.529420,1.474610,503,0 0 0 0 1 1 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="149.2.160.73" dst_ip="201.81.206.173" src_port="58898" dst_port="80"/>
            <filter src_ip="149.197.226.156" dst_ip="201.81.206.173" src_port="80" dst_port="38333"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183784506"/>
    </anomaly>
    <anomaly type="anomalous" value="1.813000,1.459310,503,0 0 0 1 1 1 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.242.140" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.351630,1.350360,999,1 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.21.142.18" dst_ip="167.82.102.73" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785281"/>
    </anomaly>
    <anomaly type="anomalous" value="1.348470,1.317780,999,1 0 0 1 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.119.128.42"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183785256"/>
    </anomaly>
    <anomaly type="anomalous" value="2.131730,1.653860,999,1 1 1 1 1 0 1 1 1 1 0 0,mptmp">
        <slice>
            <filter dst_ip="214.162.2.148" dst_port="53"/>
            <filter dst_ip="214.162.2.152" dst_port="53"/>
            <filter dst_ip="214.162.0.78" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.635280,1.360110,503,0 0 0 1 0 0 1 1 1 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.102.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.457370,1.297420,503,1 0 0 1 0 0 1 1 1 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.119.216.146" dst_ip="72.65.195.118" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.348470,1.317780,999,1 0 0 1 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.162.6.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785298"/>
    </anomaly>
    <anomaly type="anomalous" value="1.520890,1.482900,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="214.204.88.65" dst_port="139"/>
        </slice>
        <from usec="0" sec="1183784850"/>
        <to usec="0" sec="1183784896"/>
    </anomaly>
    <anomaly type="anomalous" value="1.580190,1.430750,999,0 0 0 1 1 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.7.41.116"/>
            <filter src_ip="145.84.98.38" src_port="52663" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="anomalous" value="1.668320,1.365850,503,1 0 0 0 0 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="214.10.198.181" dst_port="80"/>
            <filter dst_ip="1.216.24.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.122980,1.623100,503,0 0 0 1 1 1 0 0 0 1 1 1,point_to_point">
        <slice>
            <filter src_ip="78.171.238.134" dst_ip="149.221.39.105" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.538780,1.351930,503,0 0 0 1 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="1.216.24.237" dst_ip="215.184.38.122" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.247190,1.647010,503,1 1 0 1 1 1 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.16.192" dst_ip="1.216.24.220" src_port="1072" dst_port="80"/>
            <filter src_ip="145.84.16.192" dst_ip="145.74.68.103" src_port="1073" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.303520,1.219820,999,1 1 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="136.119.63.193" dst_ip="72.193.170.139" src_port="31030" dst_port="33293"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.573840,1.357700,503,1 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="215.184.34.143" dst_ip="1.221.253.169" src_port="80"/>
            <filter src_ip="215.184.34.143" dst_ip="198.106.105.13" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.236030,1.224580,503,0 0 0 0 0 0 1 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.102.146" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.573840,1.357700,999,1 0 0 0 0 0 0 0 0 1 1 1,ptmpla">
        <slice>
            <filter src_ip="136.119.211.107" dst_ip="163.171.255.104" src_port="55713" dst_port="25"/>
            <filter src_ip="136.119.211.107" dst_ip="163.171.255.104" src_port="52584" dst_port="25"/>
            <filter src_ip="136.119.211.107" dst_ip="33.179.151.50" src_port="25" dst_port="4379"/>
            <filter src_ip="136.119.211.107" dst_ip="215.30.210.168" src_port="58334" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.499750,1.837370,011,1 1 1 1 1 1 0 0 0 1 1 1,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="214.238.94.192" src_port="8080" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.374010,1.759610,999,1 1 1 1 0 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter src_ip="215.184.42.152"/>
            <filter src_ip="165.206.36.119"/>
            <filter src_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.573840,1.357700,503,1 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="145.84.128.174" dst_port="80"/>
            <filter dst_ip="72.196.94.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.998700,1.511120,503,1 0 0 1 0 0 1 1 1 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.136.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.541550,1.383710,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="215.48.7.136" dst_ip="214.7.140.101" src_port="80" dst_port="57435"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.146540,1.600990,503,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="36.77.51.203" src_port="80"/>
            <filter dst_ip="214.10.196.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.303520,1.219820,503,1 1 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="38.161.26.23" dst_ip="145.84.242.140" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.122980,1.623100,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="214.10.224.150" src_port="80"/>
            <filter dst_ip="214.7.136.123" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.541550,1.383710,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.81.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.229.243.49" dst_ip="215.184.39.2" src_port="1064" dst_port="3125"/>
        </slice>
        <from usec="0" sec="1183785157"/>
        <to usec="0" sec="1183785161"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.2.131.51" dst_ip="96.196.35.43" src_port="1069" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183785157"/>
        <to usec="0" sec="1183785171"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.216.147.144" dst_ip="39.222.44.170" src_port="995"/>
        </slice>
        <from usec="0" sec="1183784477"/>
        <to usec="0" sec="1183785171"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.206.145.233" dst_ip="205.71.20.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784532"/>
        <to usec="0" sec="1183784547"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.216.132.110" dst_ip="215.48.7.4" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784426"/>
        <to usec="0" sec="1183784478"/>
    </anomaly>
    <anomaly type="suspicious" value="1.059460,1.289640,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.203.230.139" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183785166"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.206.145.91" dst_ip="206.244.145.26" src_port="3928" dst_port="443"/>
            <filter src_ip="165.206.145.91" dst_ip="206.244.145.26" src_port="3927" dst_port="443"/>
        </slice>
        <from usec="0" sec="1183784959"/>
        <to usec="0" sec="1183784966"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="7.169.86.93" dst_port="445"/>
        </slice>
        <from usec="0" sec="1183784871"/>
        <to usec="0" sec="1183784960"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.201.52.62" dst_ip="38.75.197.232" dst_port="12043"/>
        </slice>
        <from usec="0" sec="1183784502"/>
        <to usec="0" sec="1183785191"/>
    </anomaly>
    <anomaly type="suspicious" value="1.019710,1.142680,503,1 1 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="161.203.230.138" dst_ip="215.212.163.250"/>
            <filter src_ip="161.203.230.138" dst_port="80"/>
            <filter src_ip="161.203.231.83" dst_port="80"/>
            <filter dst_ip="215.212.163.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="53.200.206.101" dst_port="445"/>
        </slice>
        <from usec="0" sec="1183785239"/>
        <to usec="0" sec="1183785281"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.160.186.15" src_port="62195" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784440"/>
        <to usec="0" sec="1183784455"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.22.142.238" src_port="1029" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784472"/>
        <to usec="0" sec="1183784508"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.163.248.115" src_port="1025" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183785179"/>
        <to usec="0" sec="1183785192"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.161.174.96" src_port="1025" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183785157"/>
        <to usec="0" sec="1183785169"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.242.16.194" src_port="1030" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784532"/>
        <to usec="0" sec="1183784547"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.31.37.181" src_port="1025" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784503"/>
        <to usec="0" sec="1183784517"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="7.169.16.48" src_port="62441" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183785104"/>
        <to usec="0" sec="1183785119"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.154.224.17" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784584"/>
        <to usec="0" sec="1183784588"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="166.208.28.239" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784584"/>
        <to usec="0" sec="1183784590"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="106.11.40.32" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784623"/>
        <to usec="0" sec="1183784625"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.236.38.167" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784587"/>
        <to usec="0" sec="1183784588"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="52.26.193.3" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784586"/>
        <to usec="0" sec="1183784588"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.148.1.139" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784584"/>
        <to usec="0" sec="1183784588"/>
    </anomaly>
    <anomaly type="suspicious" value="0.861854,1.202460,002,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="78.160.138.113" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784805"/>
        <to usec="0" sec="1183784819"/>
    </anomaly>
    <anomaly type="suspicious" value="0.946508,1.200450,503,1 0 0 1 0 0 0 0 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="161.203.230.139" dst_port="80"/>
            <filter src_ip="215.184.33.56"/>
        </slice>
        <from usec="0" sec="1183784433"/>
        <to usec="0" sec="1183785082"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="74.174.157.174" dst_ip="214.10.196.60"/>
            <filter src_ip="74.174.157.174"/>
            <filter src_ip="74.174.157.174"/>
            <filter src_ip="197.10.18.19" dst_ip="214.10.196.60" src_port="49988"/>
            <filter dst_ip="214.10.196.60"/>
        </slice>
        <from usec="0" sec="1183784470"/>
        <to usec="0" sec="1183784795"/>
    </anomaly>
    <anomaly type="suspicious" value="1.182720,1.425120,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="214.162.2.148" dst_ip="214.162.2.148" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784409"/>
        <to usec="0" sec="1183785246"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.11.133.53" src_port="54166" dst_port="1026"/>
            <filter src_ip="197.11.133.53" src_port="54166" dst_port="1027"/>
            <filter src_ip="197.11.133.53" src_port="54822" dst_port="1026"/>
            <filter src_ip="197.11.133.53" src_port="54822" dst_port="1027"/>
        </slice>
        <from usec="0" sec="1183785090"/>
        <to usec="0" sec="1183785216"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.10.18.21" src_port="35330" dst_port="1027"/>
            <filter src_ip="197.10.18.21" src_port="35330" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183785226"/>
        <to usec="0" sec="1183785233"/>
    </anomaly>
    <anomaly type="suspicious" value="1.393440,1.452300,999,1 1 1 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.8.82.223" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1183784809"/>
        <to usec="0" sec="1183784815"/>
    </anomaly>
    <anomaly type="suspicious" value="1.356860,1.476640,020,0 1 1 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="215.184.33.56"/>
        </slice>
        <from usec="0" sec="1183785074"/>
        <to usec="0" sec="1183785082"/>
    </anomaly>
    <anomaly type="suspicious" value="1.035010,1.203600,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.74.152" src_port="80"/>
        </slice>
        <from usec="0" sec="1183784493"/>
        <to usec="0" sec="1183784688"/>
    </anomaly>
    <anomaly type="suspicious" value="1.059460,1.289640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.84.98.38" src_port="52663" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.035010,1.203600,503,1 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.246.151.21" dst_ip="215.184.39.190" src_port="80"/>
        </slice>
        <from usec="0" sec="1183784710"/>
        <to usec="0" sec="1183784949"/>
    </anomaly>
    <anomaly type="suspicious" value="1.158480,1.268770,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.197.226.197" dst_port="53"/>
            <filter dst_ip="214.10.197.14" dst_port="53"/>
            <filter dst_ip="149.197.226.197" src_port="53" dst_port="39848"/>
            <filter dst_ip="214.10.197.14" src_port="53" dst_port="63455"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784955"/>
    </anomaly>
    <anomaly type="suspicious" value="1.390370,1.422050,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.68.125.11" dst_port="25"/>
        </slice>
        <from usec="0" sec="1183784408"/>
        <to usec="0" sec="1183784952"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="136.119.144.30" dst_ip="206.206.252.58" dst_port="80"/>
            <filter src_ip="145.84.17.15" dst_ip="206.206.252.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784957"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="144.100.139.185" dst_ip="37.170.169.14" dst_port="80"/>
            <filter src_ip="144.100.139.116" dst_ip="37.170.169.14" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784431"/>
        <to usec="0" sec="1183784767"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.7.143.32" dst_ip="193.128.46.228" src_port="80" dst_port="1280"/>
            <filter src_ip="214.7.143.32" dst_ip="193.128.46.228" src_port="80" dst_port="1220"/>
        </slice>
        <from usec="0" sec="1183784663"/>
        <to usec="0" sec="1183784679"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.46.248.19" dst_ip="214.220.80.82" src_port="80" dst_port="1105"/>
            <filter src_ip="144.46.248.19" dst_ip="214.220.80.82" src_port="80" dst_port="1104"/>
            <filter src_ip="144.46.248.19" dst_ip="214.220.80.82" src_port="80" dst_port="1094"/>
            <filter src_ip="144.46.248.19" dst_ip="214.220.80.82" src_port="80" dst_port="1090"/>
            <filter src_ip="144.46.248.19" dst_ip="214.220.80.82" src_port="80" dst_port="1089"/>
        </slice>
        <from usec="0" sec="1183784585"/>
        <to usec="0" sec="1183784735"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.116.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784946"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.7.143.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183785048"/>
    </anomaly>
    <anomaly type="suspicious" value="0.985206,1.232870,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.46.10.54" dst_ip="215.212.172.160" dst_port="80"/>
            <filter src_ip="144.46.10.54" dst_ip="215.212.172.162" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784414"/>
        <to usec="0" sec="1183784882"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.206.36.118"/>
        </slice>
        <from usec="0" sec="1183784580"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,999,0 0 0 1 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.162.6.17" src_port="53"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,503,0 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="145.84.192.235" dst_port="80"/>
            <filter src_ip="145.84.74.193" dst_ip="193.207.173.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784776"/>
    </anomaly>
    <anomaly type="suspicious" value="1.055580,1.239250,002,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.108.158.184" src_port="64243" dst_port="137"/>
        </slice>
        <from usec="0" sec="1183784849"/>
        <to usec="0" sec="1183784896"/>
    </anomaly>
    <anomaly type="suspicious" value="1.055580,1.239250,010,1 1 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.142.105.21" dst_port="135"/>
        </slice>
        <from usec="0" sec="1183785120"/>
        <to usec="0" sec="1183785166"/>
    </anomaly>
    <anomaly type="suspicious" value="1.059460,1.289640,503,0 0 0 0 0 0 1 1 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="145.84.178.12" dst_ip="1.216.24.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="suspicious" value="1.194990,1.268830,999,0 0 0 0 0 0 1 1 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="215.184.39.20" dst_ip="158.130.34.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.059460,1.289640,503,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="145.84.81.130" dst_ip="206.33.64.59" dst_port="80"/>
            <filter src_ip="165.206.217.207" dst_ip="206.33.64.59" dst_port="80"/>
            <filter src_ip="145.84.97.23" dst_ip="206.33.64.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.197.246.163" src_port="10627"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,010,0 0 0 0 0 0 1 1 1 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="215.208.35.141" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,010,0 0 0 0 0 0 1 1 1 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="215.160.101.121" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.197.56.131" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="144.46.34.204" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.173.218.25" src_port="2727" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.169.248.59" src_port="1035" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="215.184.40.217"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784626"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.84.172.6" dst_port="2703"/>
            <filter src_ip="145.84.172.6" src_port="50489" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,503,0 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="214.10.224.150" dst_port="80"/>
            <filter dst_ip="122.24.196.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784410"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,999,0 0 0 1 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.2.160.73"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.72.197.132" src_port="53"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="193.151.68.230" dst_ip="215.184.42.145" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.203.230.138" dst_ip="194.46.0.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.310640,1.344560,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.197.226.197" src_port="53"/>
            <filter src_ip="149.197.226.197" src_port="39848" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="suspicious" value="1.313890,1.376510,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.203.230.148" src_port="64498" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784715"/>
        <to usec="0" sec="1183784761"/>
    </anomaly>
    <anomaly type="suspicious" value="1.071350,1.150140,503,0 0 0 1 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.197.226.156" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.778530,1.114980,999,1 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="134.201.12.29" src_port="18007"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.173370,1.181280,503,1 0 0 1 1 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.183.83.88" dst_ip="165.206.74.36" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.121130,1.156920,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="204.183.83.88" dst_ip="214.7.137.7" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.778530,1.114980,999,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="136.119.248.12" dst_ip="215.40.209.185"/>
            <filter src_ip="136.119.248.12" dst_port="554"/>
            <filter src_ip="136.119.1.92" dst_ip="215.40.209.185" dst_port="554"/>
            <filter src_ip="136.119.1.92" dst_ip="215.40.209.216" dst_port="554"/>
            <filter src_ip="136.119.1.92" dst_ip="215.40.209.189" dst_port="554"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.773030,1.075280,503,1 0 0 1 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.7.136.123" dst_ip="40.240.78.10" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075330,1.187340,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="215.48.7.49" dst_ip="214.7.140.101" src_port="80" dst_port="57308"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075330,1.187340,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="205.90.131.62" dst_ip="145.84.101.182" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075330,1.187340,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.136.63" src_port="80"/>
            <filter dst_ip="145.84.136.63" src_port="53" dst_port="32768"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075330,1.187340,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="204.183.83.88" dst_ip="165.206.145.58" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
