<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.216.147.60" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183785091"/>
        <to usec="0" sec="1183785094"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.117.149.176"/>
        </slice>
        <from usec="0" sec="1183784560"/>
        <to usec="0" sec="1183784590"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.216.246.245" dst_ip="1.216.24.45" src_port="1122" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784473"/>
        <to usec="0" sec="1183784544"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.131.19.119"/>
        </slice>
        <from usec="0" sec="1183784535"/>
        <to usec="0" sec="1183784541"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.24.247"/>
        </slice>
        <from usec="0" sec="1183784515"/>
        <to usec="0" sec="1183784522"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.216.120.212"/>
        </slice>
        <from usec="0" sec="1183784509"/>
        <to usec="0" sec="1183784515"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.7.140.29"/>
        </slice>
        <from usec="0" sec="1183785271"/>
        <to usec="0" sec="1183785277"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.12.64.137"/>
        </slice>
        <from usec="0" sec="1183785287"/>
        <to usec="0" sec="1183785293"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.119.4.250"/>
        </slice>
        <from usec="0" sec="1183784514"/>
        <to usec="0" sec="1183784521"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.216.24.226" dst_ip="145.84.5.105" src_port="80" dst_port="1814" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784871"/>
        <to usec="0" sec="1183784874"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.34.166.135"/>
        </slice>
        <from usec="0" sec="1183784551"/>
        <to usec="0" sec="1183784583"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.206.74.36"/>
        </slice>
        <from usec="0" sec="1183785213"/>
        <to usec="0" sec="1183785230"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="40.232.16.9"/>
        </slice>
        <from usec="0" sec="1183784440"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.201.195.53" dst_ip="215.48.7.9" src_port="3017" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183785165"/>
        <to usec="0" sec="1183785187"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.216.157.79" dst_ip="162.55.178.97" src_port="2297" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784624"/>
        <to usec="0" sec="1183784630"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.131.80.109"/>
        </slice>
        <from usec="0" sec="1183784561"/>
        <to usec="0" sec="1183784567"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.201.14.213"/>
        </slice>
        <from usec="0" sec="1183784515"/>
        <to usec="0" sec="1183784522"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.46.250.206" dst_ip="192.187.190.78" src_port="80" dst_port="1197" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784850"/>
        <to usec="0" sec="1183784863"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.109.148"/>
        </slice>
        <from usec="0" sec="1183784734"/>
        <to usec="0" sec="1183784740"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.119.220.48" dst_ip="72.249.90.171" src_port="2044" dst_port="19101" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183785094"/>
        <to usec="0" sec="1183785106"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.178.204.134"/>
        </slice>
        <from usec="0" sec="1183784831"/>
        <to usec="0" sec="1183784891"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.104.7"/>
        </slice>
        <from usec="0" sec="1183784875"/>
        <to usec="0" sec="1183785143"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="145.84.88.172" dst_ip="206.45.230.59" src_port="3992" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784517"/>
        <to usec="0" sec="1183784520"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.84.55.232"/>
        </slice>
        <from usec="0" sec="1183784729"/>
        <to usec="0" sec="1183784735"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="214.162.2.148" dst_ip="214.162.2.148" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784405"/>
        <to usec="0" sec="1183785298"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.184.37.68"/>
        </slice>
        <from usec="0" sec="1183784526"/>
        <to usec="0" sec="1183784533"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,504,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="149.216.25.28" dst_ip="208.70.6.108" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784874"/>
        <to usec="0" sec="1183785280"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.84.192.0" dst_ip="210.158.23.62" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784928"/>
        <to usec="0" sec="1183785257"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.206.145.186"/>
        </slice>
        <from usec="0" sec="1183785144"/>
        <to usec="0" sec="1183785184"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.186.60"/>
        </slice>
        <from usec="0" sec="1183785153"/>
        <to usec="0" sec="1183785160"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.84.81.130" dst_ip="206.33.64.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784867"/>
        <to usec="0" sec="1183784880"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="7.171.81.12" src_port="1025" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1183785210"/>
        <to usec="0" sec="1183785223"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.1.114.218" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784564"/>
        <to usec="0" sec="1183784565"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.119.216.147"/>
        </slice>
        <from usec="0" sec="1183784561"/>
        <to usec="0" sec="1183785085"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="135.113.38.236" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784564"/>
        <to usec="0" sec="1183784567"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="213.143.40.60" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183785094"/>
        <to usec="0" sec="1183785106"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="55.101.162.11" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784811"/>
        <to usec="0" sec="1183784813"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="214.174.132.176" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784977"/>
        <to usec="0" sec="1183785005"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="212.157.174.163" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183785035"/>
        <to usec="0" sec="1183785097"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.7.49.137"/>
        </slice>
        <from usec="0" sec="1183784511"/>
        <to usec="0" sec="1183784515"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="209.213.87.123" proto="icmp"/>
        </slice>
        <from usec="0" sec="1183784790"/>
        <to usec="0" sec="1183784793"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.197.246.163" dst_port="10627" proto="tcp"/>
        </slice>
        <from usec="0" sec="1183784454"/>
        <to usec="0" sec="1183785070"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.203.242.201"/>
        </slice>
        <from usec="0" sec="1183784521"/>
        <to usec="0" sec="1183784527"/>
    </anomaly>
    <anomaly type="notice" value="0.801364,1.231750,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="214.162.2.148" dst_ip="214.162.2.148" proto="udp"/>
        </slice>
        <from usec="0" sec="1183784409"/>
        <to usec="0" sec="1183785293"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="165.206.144.153"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784688"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="18.0.198.200"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784508"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.101.2"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784505"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="39.144.23.80"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784508"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.84.204.170"/>
        </slice>
        <from usec="0" sec="1183784403"/>
        <to usec="0" sec="1183784508"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.82.215.155"/>
        </slice>
        <from usec="0" sec="1183784420"/>
        <to usec="0" sec="1183784504"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.207.40.36"/>
        </slice>
        <from usec="0" sec="1183784424"/>
        <to usec="0" sec="1183784499"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="39.144.101.19"/>
        </slice>
        <from usec="0" sec="1183784445"/>
        <to usec="0" sec="1183784497"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.196.0.142"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784688"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.7.142.156"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="117.174.253.43"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.84.120.184"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784688"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.184.45.227"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784684"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.185.7.16"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784683"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,002,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.162.144.195"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183784955"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.50.180.1"/>
        </slice>
        <from usec="0" sec="1183784404"/>
        <to usec="0" sec="1183784685"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.10.224.130"/>
        </slice>
        <from usec="0" sec="1183784405"/>
        <to usec="0" sec="1183784840"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.206.208.61"/>
        </slice>
        <from usec="0" sec="1183784416"/>
        <to usec="0" sec="1183784599"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.81.240"/>
        </slice>
        <from usec="0" sec="1183784427"/>
        <to usec="0" sec="1183784670"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.77.150"/>
        </slice>
        <from usec="0" sec="1183784446"/>
        <to usec="0" sec="1183784629"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.131.88.128"/>
        </slice>
        <from usec="0" sec="1183784464"/>
        <to usec="0" sec="1183784621"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.206.208.42"/>
        </slice>
        <from usec="0" sec="1183784482"/>
        <to usec="0" sec="1183784604"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.197.133.97"/>
        </slice>
        <from usec="0" sec="1183784523"/>
        <to usec="0" sec="1183784530"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.187.252.89"/>
        </slice>
        <from usec="0" sec="1183784549"/>
        <to usec="0" sec="1183784601"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="72.1.90.7"/>
        </slice>
        <from usec="0" sec="1183784660"/>
        <to usec="0" sec="1183784686"/>
    </anomaly>
    <anomaly type="notice" value="0.704959,1.107940,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="34.2.169.103" dst_ip="145.84.253.18" src_port="80"/>
            <filter src_ip="1.216.26.67" dst_ip="165.206.141.162" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.7.41.116"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.161.62.153"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.69.67.137"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784767"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.197.90.60"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="38.97.132.244"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784774"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.28.157.105"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.216.119.147"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.206.146.251"/>
        </slice>
        <from usec="0" sec="1183784404"/>
        <to usec="0" sec="1183784777"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.186.138"/>
        </slice>
        <from usec="0" sec="1183784406"/>
        <to usec="0" sec="1183784862"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="36.77.59.225"/>
        </slice>
        <from usec="0" sec="1183784409"/>
        <to usec="0" sec="1183784776"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="165.206.77.154"/>
        </slice>
        <from usec="0" sec="1183784411"/>
        <to usec="0" sec="1183784772"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.206.77.154"/>
        </slice>
        <from usec="0" sec="1183784411"/>
        <to usec="0" sec="1183784772"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.84.110.81"/>
        </slice>
        <from usec="0" sec="1183784413"/>
        <to usec="0" sec="1183784776"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="72.12.78.192" dst_ip="165.206.145.209" src_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784777"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="90.115.17.139"/>
        </slice>
        <from usec="0" sec="1183784453"/>
        <to usec="0" sec="1183784627"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="39.145.136.86"/>
        </slice>
        <from usec="0" sec="1183784462"/>
        <to usec="0" sec="1183784738"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.9.9"/>
        </slice>
        <from usec="0" sec="1183784470"/>
        <to usec="0" sec="1183784949"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.83.153.118"/>
        </slice>
        <from usec="0" sec="1183784596"/>
        <to usec="0" sec="1183784632"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="196.77.12.57"/>
        </slice>
        <from usec="0" sec="1183784613"/>
        <to usec="0" sec="1183784666"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="7.224.141.50"/>
        </slice>
        <from usec="0" sec="1183784636"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.208.60.218"/>
        </slice>
        <from usec="0" sec="1183784665"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.46.250.201"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784867"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.110.67"/>
        </slice>
        <from usec="0" sec="1183784410"/>
        <to usec="0" sec="1183784867"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.38.32.156"/>
        </slice>
        <from usec="0" sec="1183784526"/>
        <to usec="0" sec="1183784868"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.157.156.179"/>
        </slice>
        <from usec="0" sec="1183784635"/>
        <to usec="0" sec="1183784787"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.6.196.176"/>
        </slice>
        <from usec="0" sec="1183784689"/>
        <to usec="0" sec="1183784728"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.131.88.132"/>
        </slice>
        <from usec="0" sec="1183784737"/>
        <to usec="0" sec="1183784779"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.107.209.170"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784955"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.206.148.140"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.131.88.15"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784862"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.82.103.107"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.206.200.225"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784946"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.221.216.7"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785048"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.7.138.98"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.196.152.250"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.99.52"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.197.139.2"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784945"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.201.179.40"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="72.12.78.146" src_port="80"/>
            <filter dst_ip="149.221.39.110" src_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784957"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="72.80.19.179"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784869"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.77.74"/>
        </slice>
        <from usec="0" sec="1183784401"/>
        <to usec="0" sec="1183784955"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.164.117.169"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183784928"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.28.122.147"/>
        </slice>
        <from usec="0" sec="1183784403"/>
        <to usec="0" sec="1183784956"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.184.38.122"/>
        </slice>
        <from usec="0" sec="1183784405"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.197.71.111"/>
        </slice>
        <from usec="0" sec="1183784406"/>
        <to usec="0" sec="1183784954"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.197.130.72"/>
        </slice>
        <from usec="0" sec="1183784408"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.7.139.149"/>
        </slice>
        <from usec="0" sec="1183784410"/>
        <to usec="0" sec="1183784954"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.206.208.77"/>
        </slice>
        <from usec="0" sec="1183784411"/>
        <to usec="0" sec="1183784782"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.81.184"/>
        </slice>
        <from usec="0" sec="1183784414"/>
        <to usec="0" sec="1183784814"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.81.240"/>
        </slice>
        <from usec="0" sec="1183784427"/>
        <to usec="0" sec="1183784943"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="79.145.145.196"/>
        </slice>
        <from usec="0" sec="1183784429"/>
        <to usec="0" sec="1183784955"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,020,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.184.34.208" src_port="53"/>
            <filter dst_ip="215.184.34.208"/>
        </slice>
        <from usec="0" sec="1183784432"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.197.209.18"/>
        </slice>
        <from usec="0" sec="1183784433"/>
        <to usec="0" sec="1183784947"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.215.36.36"/>
        </slice>
        <from usec="0" sec="1183784460"/>
        <to usec="0" sec="1183784929"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.7.58.71"/>
        </slice>
        <from usec="0" sec="1183784460"/>
        <to usec="0" sec="1183784941"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="72.52.220.183"/>
        </slice>
        <from usec="0" sec="1183784470"/>
        <to usec="0" sec="1183784818"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.9.9"/>
        </slice>
        <from usec="0" sec="1183784470"/>
        <to usec="0" sec="1183784949"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.232.184"/>
        </slice>
        <from usec="0" sec="1183784478"/>
        <to usec="0" sec="1183784934"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.84.231.44"/>
        </slice>
        <from usec="0" sec="1183784518"/>
        <to usec="0" sec="1183784943"/>
    </anomaly>
    <anomaly type="notice" value="0.540392,1.099760,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.206.117.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784451"/>
        <to usec="0" sec="1183784949"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.54.223.7"/>
        </slice>
        <from usec="0" sec="1183784522"/>
        <to usec="0" sec="1183784926"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.183.16.146"/>
        </slice>
        <from usec="0" sec="1183784550"/>
        <to usec="0" sec="1183784956"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.216.236.79"/>
        </slice>
        <from usec="0" sec="1183784621"/>
        <to usec="0" sec="1183784945"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.119.171.22"/>
        </slice>
        <from usec="0" sec="1183784641"/>
        <to usec="0" sec="1183784930"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="145.84.163.28" dst_port="80"/>
            <filter src_ip="165.206.144.104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784649"/>
        <to usec="0" sec="1183784935"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.12.96.21"/>
        </slice>
        <from usec="0" sec="1183784660"/>
        <to usec="0" sec="1183784951"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.182.186.210"/>
        </slice>
        <from usec="0" sec="1183784736"/>
        <to usec="0" sec="1183784925"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="44.192.223.157"/>
        </slice>
        <from usec="0" sec="1183784763"/>
        <to usec="0" sec="1183784830"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.7.143.2"/>
        </slice>
        <from usec="0" sec="1183784790"/>
        <to usec="0" sec="1183784849"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="6.89.16.139"/>
        </slice>
        <from usec="0" sec="1183784802"/>
        <to usec="0" sec="1183784822"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.58.9.78"/>
        </slice>
        <from usec="0" sec="1183784809"/>
        <to usec="0" sec="1183784813"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.240.77.30"/>
        </slice>
        <from usec="0" sec="1183784833"/>
        <to usec="0" sec="1183784855"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.13.117.243"/>
        </slice>
        <from usec="0" sec="1183784835"/>
        <to usec="0" sec="1183784956"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="210.109.166.185"/>
        </slice>
        <from usec="0" sec="1183784877"/>
        <to usec="0" sec="1183784912"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.40.26.121"/>
        </slice>
        <from usec="0" sec="1183784878"/>
        <to usec="0" sec="1183784916"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.222.130.60"/>
        </slice>
        <from usec="0" sec="1183784899"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="43.173.150.255"/>
        </slice>
        <from usec="0" sec="1183784913"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="38.178.192.18"/>
        </slice>
        <from usec="0" sec="1183784953"/>
        <to usec="0" sec="1183784958"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="217.169.54.4" dst_port="53"/>
        </slice>
        <from usec="0" sec="1183784402"/>
        <to usec="0" sec="1183785047"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.163.44.164"/>
        </slice>
        <from usec="0" sec="1183784431"/>
        <to usec="0" sec="1183785032"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="36.237.0.4"/>
        </slice>
        <from usec="0" sec="1183784801"/>
        <to usec="0" sec="1183785047"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.197.93.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183785228"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,502,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.85.141.111"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.197.251.108"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.183.83.88"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="214.10.197.181"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784446"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="72.12.78.192"/>
        </slice>
        <from usec="0" sec="1183784580"/>
        <to usec="0" sec="1183784626"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.206.36.118"/>
        </slice>
        <from usec="0" sec="1183784490"/>
        <to usec="0" sec="1183784536"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.114.160.61"/>
        </slice>
        <from usec="0" sec="1183784985"/>
        <to usec="0" sec="1183785031"/>
    </anomaly>
    <anomaly type="notice" value="0.755908,1.207290,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="215.184.40.217"/>
        </slice>
        <from usec="0" sec="1183785255"/>
        <to usec="0" sec="1183785301"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.184.42.145" dst_ip="195.228.23.84" src_port="3127"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.21.142.18" dst_ip="167.82.102.68" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784777"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.84.96.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.704959,1.107940,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.84.178.70" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="165.206.145.66"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="161.203.198.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.7.139.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.437510,1.131710,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.197.226.197" dst_port="53"/>
            <filter dst_ip="149.197.226.197" src_port="53" dst_port="39848"/>
        </slice>
        <from usec="0" sec="1183784400"/>
        <to usec="0" sec="1183784778"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.202.132.66"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.16.190.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="1.216.26.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.84.5.178"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.2.209.78"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.7.58.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="1.216.24.180" dst_ip="214.7.140.29" src_port="80"/>
            <filter src_ip="1.216.24.133" dst_ip="214.7.140.29" src_port="80"/>
            <filter src_ip="215.201.35.58" dst_ip="214.7.140.29" src_port="10000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.119.211.154" dst_ip="214.165.38.41" src_port="4152" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,020,0 0 0 0 0 0 0 0 0 1 0 0,DDoSIC">
        <slice>
            <filter dst_ip="215.184.33.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="104.255.123.142" dst_ip="215.184.39.161" dst_port="9000"/>
            <filter src_ip="104.255.123.141" dst_ip="215.184.39.161" dst_port="9000"/>
            <filter src_ip="104.255.123.137" dst_ip="215.184.39.161" dst_port="9000"/>
            <filter src_ip="104.255.123.145" dst_ip="215.184.39.161" dst_port="9000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.202.132.66"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="194.114.223.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.710986,1.146510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="109.161.104.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.548231,1.138600,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="145.84.218.53" dst_ip="1.216.24.237" dst_port="80"/>
            <filter src_ip="145.84.26.162" dst_ip="1.216.24.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1183784454"/>
        <to usec="0" sec="1183784460"/>
    </anomaly>
</admd:annotation>
