<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.190.216.0" dst_ip="197.58.177.93" dst_port="80"/>
            <filter src_ip="128.190.216.0" src_port="40883" dst_port="53"/>
        </slice>
        <from usec="0" sec="1189314292"/>
        <to usec="0" sec="1189314889"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.99.193.43" dst_ip="217.108.238.240" src_port="58362" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314573"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.25.2.173" dst_ip="216.156.72.207" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314181"/>
        <to usec="0" sec="1189314238"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.6.98"/>
        </slice>
        <from usec="0" sec="1189314198"/>
        <to usec="0" sec="1189314204"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.142.145.13"/>
        </slice>
        <from usec="0" sec="1189314006"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.190.26.74"/>
        </slice>
        <from usec="0" sec="1189314022"/>
        <to usec="0" sec="1189314028"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.190.16.45"/>
        </slice>
        <from usec="0" sec="1189314709"/>
        <to usec="0" sec="1189314889"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.190.159.148"/>
        </slice>
        <from usec="0" sec="1189314851"/>
        <to usec="0" sec="1189314856"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.25.16.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314001"/>
        <to usec="0" sec="1189314310"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.6.66" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314725"/>
        <to usec="0" sec="1189314889"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.43.109"/>
        </slice>
        <from usec="0" sec="1189314438"/>
        <to usec="0" sec="1189314443"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.76.131"/>
        </slice>
        <from usec="0" sec="1189314126"/>
        <to usec="0" sec="1189314404"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.206.6.0" dst_ip="201.59.190.202" src_port="49233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314726"/>
        <to usec="0" sec="1189314898"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.0.162.41" dst_ip="128.190.125.97" src_port="52430" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314871"/>
        <to usec="0" sec="1189314876"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="200.78.164.46"/>
        </slice>
        <from usec="0" sec="1189314468"/>
        <to usec="0" sec="1189314885"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.68.81.184" dst_ip="217.155.108.54" src_port="52668" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314210"/>
        <to usec="0" sec="1189314851"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.206.6.45" dst_ip="201.59.188.154" src_port="1640" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314433"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.206.6.34"/>
        </slice>
        <from usec="0" sec="1189314359"/>
        <to usec="0" sec="1189314365"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.158.58.202" dst_ip="128.190.173.111" src_port="59800" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314824"/>
        <to usec="0" sec="1189314831"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.206.6.238" dst_ip="23.20.216.34" src_port="50287" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314662"/>
        <to usec="0" sec="1189314894"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="25.3.110.134" dst_ip="128.190.82.186" src_port="48294" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314297"/>
        <to usec="0" sec="1189314302"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.206.6.220" dst_ip="23.20.214.15" src_port="4530" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314269"/>
        <to usec="0" sec="1189314564"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="33.117.148.48" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314017"/>
        <to usec="0" sec="1189314834"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="26.0.68.50" dst_ip="134.112.166.196" src_port="48476" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314023"/>
        <to usec="0" sec="1189314616"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.6.141"/>
        </slice>
        <from usec="0" sec="1189314079"/>
        <to usec="0" sec="1189314683"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.102.172.38" dst_ip="128.190.81.98" src_port="33403" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314251"/>
        <to usec="0" sec="1189314257"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.25.105.3" dst_ip="38.111.65.144" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314871"/>
        <to usec="0" sec="1189314876"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.190.29.81" dst_ip="20.233.228.41" src_port="43489" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314786"/>
        <to usec="0" sec="1189314894"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.206.6.145" dst_ip="216.88.184.156" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314309"/>
        <to usec="0" sec="1189314315"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.73.98.80" dst_ip="128.190.69.8" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314867"/>
        <to usec="0" sec="1189314876"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.206.38.9" dst_ip="198.238.75.184" src_port="2623" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314067"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="129.86.144.71"/>
        </slice>
        <from usec="0" sec="1189314662"/>
        <to usec="0" sec="1189314894"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.3.108.82"/>
        </slice>
        <from usec="0" sec="1189314807"/>
        <to usec="0" sec="1189314812"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.190.7.105"/>
        </slice>
        <from usec="0" sec="1189314547"/>
        <to usec="0" sec="1189314553"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.206.7.121"/>
        </slice>
        <from usec="0" sec="1189314301"/>
        <to usec="0" sec="1189314434"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="200.78.217.16" dst_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314453"/>
        <to usec="0" sec="1189314820"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.190.69.8" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314843"/>
        <to usec="0" sec="1189314860"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="216.98.212.160" dst_ip="216.98.212.160" proto="udp"/>
        </slice>
        <from usec="0" sec="1189314001"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="220.81.217.29" dst_ip="128.190.192.81" dst_port="25"/>
        </slice>
        <from usec="0" sec="1189314037"/>
        <to usec="0" sec="1189314889"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,011,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.70.112.136" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314423"/>
        <to usec="0" sec="1189314428"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.112.181.161"/>
        </slice>
        <from usec="0" sec="1189314851"/>
        <to usec="0" sec="1189314856"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.190.69.39" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314398"/>
        <to usec="0" sec="1189314860"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="129.86.144.164" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314838"/>
        <to usec="0" sec="1189314847"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.86.144.161" dst_ip="193.40.80.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314688"/>
        <to usec="0" sec="1189314872"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.112.134.234" dst_ip="222.202.1.232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314820"/>
        <to usec="0" sec="1189314828"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.25.196.49"/>
        </slice>
        <from usec="0" sec="1189314819"/>
        <to usec="0" sec="1189314873"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.51.106"/>
        </slice>
        <from usec="0" sec="1189314562"/>
        <to usec="0" sec="1189314566"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.190.2.199" dst_ip="196.228.201.146" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314268"/>
        <to usec="0" sec="1189314894"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.99.188.108" dst_ip="26.30.16.157" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314014"/>
        <to usec="0" sec="1189314901"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.212.184.92"/>
        </slice>
        <from usec="0" sec="1189314193"/>
        <to usec="0" sec="1189314198"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.78.134.214"/>
        </slice>
        <from usec="0" sec="1189314807"/>
        <to usec="0" sec="1189314812"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.78.173.174"/>
        </slice>
        <from usec="0" sec="1189314871"/>
        <to usec="0" sec="1189314876"/>
    </anomaly>
    <anomaly type="notice" value="0.643143,1.042380,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="134.168.178.100" dst_ip="200.78.169.163" dst_port="80"/>
            <filter src_ip="172.223.195.19" dst_ip="200.78.169.163" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.100.229.104"/>
        </slice>
        <from usec="0" sec="1189314736"/>
        <to usec="0" sec="1189314742"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.74.217.224" src_port="36170" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1189314476"/>
        <to usec="0" sec="1189314479"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="75.146.120.127" src_port="1032" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1189314847"/>
        <to usec="0" sec="1189314858"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.75.159.64" src_port="53964" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1189314780"/>
        <to usec="0" sec="1189314781"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="26.197.18.76" dst_port="135" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314149"/>
        <to usec="0" sec="1189314172"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="20.40.163.107" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314714"/>
        <to usec="0" sec="1189314812"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="219.148.59.126" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314027"/>
        <to usec="0" sec="1189314864"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="75.152.181.140" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314729"/>
        <to usec="0" sec="1189314750"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.23.97.17"/>
        </slice>
        <from usec="0" sec="1189314240"/>
        <to usec="0" sec="1189314246"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="77.162.77.151" src_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1189314861"/>
        <to usec="0" sec="1189314863"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.190.218.154"/>
        </slice>
        <from usec="0" sec="1189314721"/>
        <to usec="0" sec="1189314726"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="217.217.102.89"/>
        </slice>
        <from usec="0" sec="1189314620"/>
        <to usec="0" sec="1189314624"/>
    </anomaly>
    <anomaly type="notice" value="0.467471,1.072470,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="134.112.182.213"/>
        </slice>
        <from usec="0" sec="1189314062"/>
        <to usec="0" sec="1189314068"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="32.235.90.13"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="134.99.193.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.211.146.68"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="25.99.210.235"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="218.157.239.177"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.219.192.26" src_port="65176"/>
            <filter src_ip="216.219.192.26" src_port="64785" dst_port="53"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="25.99.216.23"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="20.17.18.238"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="202.139.132.246"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.112.110.99"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.598229,1.087780,010,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="134.168.243.150"/>
        </slice>
        <from usec="0" sec="1189314388"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.79.87.221" src_port="80"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.79.87.217" src_port="80"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="129.29.179.42" src_port="123"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.598229,1.087780,999,1 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="216.98.208.38" src_port="53"/>
        </slice>
        <from usec="0" sec="1189314109"/>
        <to usec="0" sec="1189314889"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.219.228.86" src_port="57736" dst_port="53"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.224.21.6" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.105.180.97" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="217.155.105.35" src_port="53"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.598229,1.087780,503,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.190.65.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1189314042"/>
        <to usec="0" sec="1189314899"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.159.96.34" dst_ip="216.98.212.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="75.32.105.0" src_port="1084" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.66.219.234" src_port="1106" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.51.188.209" src_port="1086" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.150.62.210" src_port="3100" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.26.132.72" src_port="2435" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.96.66.215" src_port="3254" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="75.37.174.78" src_port="3750" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="76.241.117.116" src_port="4260" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.51.90.37" src_port="4401" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="77.26.46.43" src_port="3687" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.36.62.50" src_port="1087" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1189314541"/>
        <to usec="0" sec="1189314587"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.22.160.211"/>
        </slice>
        <from usec="0" sec="1189314721"/>
        <to usec="0" sec="1189314767"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="53.50.85.2"/>
        </slice>
        <from usec="0" sec="1189314721"/>
        <to usec="0" sec="1189314767"/>
    </anomaly>
    <anomaly type="notice" value="0.591466,1.104230,004,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.208.111.249" src_port="445"/>
        </slice>
        <from usec="0" sec="1189314721"/>
        <to usec="0" sec="1189314767"/>
    </anomaly>
    <anomaly type="notice" value="0.643143,1.042380,503,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="128.190.125.41" dst_port="80"/>
            <filter dst_ip="218.157.239.177"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.206.244.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.20.222.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="23.20.222.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.206.6.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="216.219.247.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.643143,1.042380,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.112.22.206" dst_ip="217.118.87.52" src_port="4347" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="203.43.126.182"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="202.42.142.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="197.49.105.145"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.636857,1.059530,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.244.131.50"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
