<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.130.35.149"/>
        </slice>
        <from usec="0" sec="1191992634"/>
        <to usec="0" sec="1191992637"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.6.100.251"/>
        </slice>
        <from usec="0" sec="1191993273"/>
        <to usec="0" sec="1191993277"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="5.165.124.8" dst_ip="169.6.224.12" src_port="80" dst_port="1735" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992496"/>
        <to usec="0" sec="1191992701"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.4.66.238" dst_ip="200.173.77.168" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992841"/>
        <to usec="0" sec="1191992846"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.173.67.183" dst_ip="60.165.240.227" src_port="5001" dst_port="1265" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992843"/>
        <to usec="0" sec="1191992847"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.115.106" dst_ip="80.2.41.126" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992660"/>
        <to usec="0" sec="1191992671"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.71.183.76" dst_ip="218.177.172.25" src_port="3672" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993266"/>
        <to usec="0" sec="1191993269"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.152.178" dst_ip="134.71.67.238" src_port="80" dst_port="2623" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992895"/>
        <to usec="0" sec="1191992897"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="0.242.109.153" dst_ip="201.75.51.1" dst_port="6346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993098"/>
        <to usec="0" sec="1191993223"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="132.188.26.168"/>
        </slice>
        <from usec="0" sec="1191993062"/>
        <to usec="0" sec="1191993073"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.65.166" dst_ip="204.32.252.178" src_port="13149" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992723"/>
        <to usec="0" sec="1191993232"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.178.132.139" dst_ip="169.6.70.14" src_port="80" dst_port="2946" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992790"/>
        <to usec="0" sec="1191993097"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.15.102" dst_ip="0.213.82.75" src_port="45857" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992464"/>
        <to usec="0" sec="1191993167"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.66.111.157" dst_ip="169.6.67.108" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993169"/>
        <to usec="0" sec="1191993171"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.128.81.108"/>
        </slice>
        <from usec="0" sec="1191992567"/>
        <to usec="0" sec="1191992570"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.152.59" dst_ip="63.148.189.38" src_port="3537" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992440"/>
        <to usec="0" sec="1191992458"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.70.60"/>
        </slice>
        <from usec="0" sec="1191993081"/>
        <to usec="0" sec="1191993084"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.130.91.68"/>
        </slice>
        <from usec="0" sec="1191992925"/>
        <to usec="0" sec="1191992931"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.211.86"/>
        </slice>
        <from usec="0" sec="1191993096"/>
        <to usec="0" sec="1191993098"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.237.32.58" dst_ip="172.64.80.177" src_port="80" dst_port="49209" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993109"/>
        <to usec="0" sec="1191993111"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.117.158"/>
        </slice>
        <from usec="0" sec="1191992744"/>
        <to usec="0" sec="1191992830"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.82.20" dst_ip="54.100.121.33" src_port="80" dst_port="32999" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993255"/>
        <to usec="0" sec="1191993259"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.115.93" dst_ip="62.144.157.173" src_port="3797" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992644"/>
        <to usec="0" sec="1191992659"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.115.17" dst_ip="216.28.9.200" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993174"/>
        <to usec="0" sec="1191993254"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.178.132.200" dst_ip="169.6.156.1" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992874"/>
        <to usec="0" sec="1191992876"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.67.35.153" dst_ip="62.208.115.246" src_port="64401" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992449"/>
        <to usec="0" sec="1191992607"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.75.160.29" dst_ip="200.116.138.199" src_port="3137" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992418"/>
        <to usec="0" sec="1191992420"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.226.166"/>
        </slice>
        <from usec="0" sec="1191993242"/>
        <to usec="0" sec="1191993245"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.159.82.241" dst_ip="116.164.33.37" src_port="3751" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992657"/>
        <to usec="0" sec="1191992659"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.155.140" dst_ip="134.71.20.71" src_port="80" dst_port="47298" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993115"/>
        <to usec="0" sec="1191993116"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.240.16" dst_ip="62.144.154.138" src_port="58587" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992988"/>
        <to usec="0" sec="1191993065"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.159.124.115" dst_ip="52.58.130.73" src_port="4400" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992548"/>
        <to usec="0" sec="1191992731"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.115.9" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992625"/>
        <to usec="0" sec="1191992627"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.215.131" dst_ip="210.128.90.29" src_port="3600" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992548"/>
        <to usec="0" sec="1191992555"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.178.159.12" dst_ip="134.71.4.20" src_port="80" dst_port="1824" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992940"/>
        <to usec="0" sec="1191992941"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.153.47.38" dst_ip="206.35.146.75" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992649"/>
        <to usec="0" sec="1191993114"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.107.188.157" dst_ip="169.6.2.243" src_port="10837" dst_port="3347" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992450"/>
        <to usec="0" sec="1191992454"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.58.130.73" dst_ip="172.159.124.115" src_port="995" dst_port="4400" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992554"/>
        <to usec="0" sec="1191993112"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.115.58" dst_ip="208.24.45.73" src_port="3364" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993033"/>
        <to usec="0" sec="1191993174"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.154.138" dst_ip="169.6.115.104" src_port="80" dst_port="4327" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992444"/>
        <to usec="0" sec="1191992634"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.66.146.162" dst_ip="134.71.59.12" src_port="51341" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993266"/>
        <to usec="0" sec="1191993268"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.33.80.86" dst_ip="201.67.35.223" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992864"/>
        <to usec="0" sec="1191992899"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.104.171.174" dst_ip="1.178.133.21" src_port="1600" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992805"/>
        <to usec="0" sec="1191993215"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.71.185.80" dst_ip="1.178.159.65" src_port="2910" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992548"/>
        <to usec="0" sec="1191992676"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.75.183.178"/>
        </slice>
        <from usec="0" sec="1191992817"/>
        <to usec="0" sec="1191992821"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.163.74.145" dst_port="3127" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993273"/>
        <to usec="0" sec="1191993275"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.51.18" dst_ip="81.55.88.196" src_port="36186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992429"/>
        <to usec="0" sec="1191992431"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="134.71.103.89"/>
        </slice>
        <from usec="0" sec="1191992579"/>
        <to usec="0" sec="1191992629"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.130.147.196" dst_ip="1.178.133.61" src_port="62548" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992428"/>
        <to usec="0" sec="1191992538"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.53.170.16" dst_ip="219.4.163.18" src_port="1457" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992624"/>
        <to usec="0" sec="1191992625"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.174.144"/>
        </slice>
        <from usec="0" sec="1191992638"/>
        <to usec="0" sec="1191992640"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.155.1" dst_ip="172.159.124.97" src_port="80" dst_port="3044" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992591"/>
        <to usec="0" sec="1191992600"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.173.71.98" dst_ip="209.50.120.194" src_port="50009" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992581"/>
        <to usec="0" sec="1191992583"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="169.6.114.189" dst_ip="81.50.23.16" src_port="80" dst_port="1133" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992631"/>
        <to usec="0" sec="1191992635"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.6.7.89"/>
        </slice>
        <from usec="0" sec="1191992638"/>
        <to usec="0" sec="1191992640"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.75.51.1" src_port="6346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993028"/>
        <to usec="0" sec="1191993300"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.5.126" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993289"/>
        <to usec="0" sec="1191993292"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.157.214.13" dst_ip="172.159.120.218" src_port="143" dst_port="51521" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992603"/>
        <to usec="0" sec="1191992604"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.6.70.172" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992832"/>
        <to usec="0" sec="1191992834"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.7.28.110"/>
        </slice>
        <from usec="0" sec="1191992442"/>
        <to usec="0" sec="1191992570"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.104.80.3" dst_ip="211.208.3.85" src_port="4627" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992586"/>
        <to usec="0" sec="1191992588"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.86.226"/>
        </slice>
        <from usec="0" sec="1191993139"/>
        <to usec="0" sec="1191993143"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.75.51.61" dst_ip="200.99.80.52" src_port="1903" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992404"/>
        <to usec="0" sec="1191993242"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.173.64.95" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992842"/>
        <to usec="0" sec="1191993183"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.78.195"/>
        </slice>
        <from usec="0" sec="1191993126"/>
        <to usec="0" sec="1191993129"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.130.72.43" dst_ip="220.74.227.233" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992754"/>
        <to usec="0" sec="1191993103"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.113.132"/>
        </slice>
        <from usec="0" sec="1191993088"/>
        <to usec="0" sec="1191993091"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.71.66.66" dst_ip="1.178.159.65" src_port="3167" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992656"/>
        <to usec="0" sec="1191992658"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.130.132.202" dst_ip="85.203.177.203" src_port="24890" dst_port="1225" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993138"/>
        <to usec="0" sec="1191993144"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.72.91" dst_ip="201.214.154.4" src_port="64053" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992649"/>
        <to usec="0" sec="1191992652"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.130.180.47" dst_ip="200.99.80.156" src_port="3850" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992534"/>
        <to usec="0" sec="1191993177"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.70.231" dst_ip="216.6.104.155" src_port="2204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992686"/>
        <to usec="0" sec="1191992688"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.104.31.90" dst_ip="217.153.73.133" src_port="57952" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993083"/>
        <to usec="0" sec="1191993085"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.6.246.76"/>
        </slice>
        <from usec="0" sec="1191992414"/>
        <to usec="0" sec="1191992419"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="134.71.20.71" dst_ip="134.71.20.71" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992569"/>
        <to usec="0" sec="1191993195"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="201.136.121.209" dst_ip="201.136.121.209" proto="udp"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993301"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.178.159.17" dst_ip="134.71.225.130" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993270"/>
        <to usec="0" sec="1191993275"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="200.173.78.144" dst_ip="200.173.78.144" proto="icmp"/>
        </slice>
        <from usec="0" sec="1191992540"/>
        <to usec="0" sec="1191993292"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.104.34.29" dst_ip="211.173.129.240" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992591"/>
        <to usec="0" sec="1191992593"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.173.77.168" dst_ip="210.176.195.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992408"/>
        <to usec="0" sec="1191993215"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.159.122.74" dst_ip="1.178.132.130" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992625"/>
        <to usec="0" sec="1191992626"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.71.109.146"/>
        </slice>
        <from usec="0" sec="1191992743"/>
        <to usec="0" sec="1191993051"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.71.32.90" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992662"/>
        <to usec="0" sec="1191992664"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="188.104.170.4" dst_ip="52.58.165.116" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992631"/>
        <to usec="0" sec="1191992633"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.27.227" dst_ip="170.36.26.161" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993298"/>
        <to usec="0" sec="1191993300"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="200.173.64.148"/>
        </slice>
        <from usec="0" sec="1191992597"/>
        <to usec="0" sec="1191993107"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="62.132.80.17" dst_port="41524" proto="udp"/>
        </slice>
        <from usec="0" sec="1191992967"/>
        <to usec="0" sec="1191992974"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="201.165.34.192" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992787"/>
        <to usec="0" sec="1191992795"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="188.104.193.177" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191993297"/>
        <to usec="0" sec="1191993299"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.233.220"/>
        </slice>
        <from usec="0" sec="1191992987"/>
        <to usec="0" sec="1191992990"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.70.96"/>
        </slice>
        <from usec="0" sec="1191993190"/>
        <to usec="0" sec="1191993192"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="188.104.92.98"/>
        </slice>
        <from usec="0" sec="1191993283"/>
        <to usec="0" sec="1191993288"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.130.32.0"/>
        </slice>
        <from usec="0" sec="1191992700"/>
        <to usec="0" sec="1191992702"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="52.2.16.49" dst_ip="169.6.84.37" src_port="80" dst_port="39845" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992438"/>
        <to usec="0" sec="1191992440"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.6.115.9"/>
        </slice>
        <from usec="0" sec="1191993059"/>
        <to usec="0" sec="1191993062"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.96.25.197"/>
        </slice>
        <from usec="0" sec="1191992412"/>
        <to usec="0" sec="1191992414"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.162.232.122"/>
        </slice>
        <from usec="0" sec="1191993112"/>
        <to usec="0" sec="1191993115"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,901,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.67.1.74" src_port="50502" dst_port="53"/>
        </slice>
        <from usec="0" sec="1191992511"/>
        <to usec="0" sec="1191992514"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="172.130.114.206"/>
        </slice>
        <from usec="0" sec="1191993238"/>
        <to usec="0" sec="1191993240"/>
    </anomaly>
    <anomaly type="notice" value="0.458318,1.315200,020,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.6.182.64"/>
        </slice>
        <from usec="0" sec="1191992597"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.173.87.8" dst_ip="116.164.94.164" src_port="40230" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992429"/>
        <to usec="0" sec="1191992434"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.159.73.97" dst_ip="1.178.133.61" src_port="59696" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992712"/>
        <to usec="0" sec="1191992737"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.224.12" dst_ip="5.165.124.8" src_port="1735" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992582"/>
        <to usec="0" sec="1191993177"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.213.50" dst_ip="201.214.154.4" src_port="2960" dst_port="80"/>
            <filter src_ip="172.130.213.50" dst_ip="201.214.154.4" src_port="2958" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992648"/>
        <to usec="0" sec="1191992650"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="169.6.70.5" dst_ip="201.10.213.246" src_port="4065" dst_port="80"/>
            <filter src_ip="169.6.70.5" dst_ip="201.10.213.246" src_port="4064" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992644"/>
        <to usec="0" sec="1191992646"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.67.161" dst_ip="1.178.132.192" src_port="2550" dst_port="80"/>
            <filter src_ip="169.6.67.161" dst_ip="1.178.132.192" src_port="2540" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992621"/>
        <to usec="0" sec="1191992623"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.155.175.48" dst_ip="206.35.146.54" src_port="44032" dst_port="80"/>
            <filter src_ip="201.155.175.48" dst_ip="206.35.146.54" src_port="43283" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992551"/>
        <to usec="0" sec="1191992554"/>
    </anomaly>
    <anomaly type="notice" value="0.711985,1.362870,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.15.102" dst_ip="210.128.97.182" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992518"/>
        <to usec="0" sec="1191992520"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.159.193.169" dst_ip="208.34.75.106" src_port="4545" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992546"/>
        <to usec="0" sec="1191993213"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.96.245" dst_ip="210.128.84.11" src_port="1747" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993054"/>
        <to usec="0" sec="1191993057"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.77.149" dst_ip="62.144.153.0" src_port="1503" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992549"/>
        <to usec="0" sec="1191992943"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.71.89.40" dst_ip="206.68.10.190" src_port="2894" dst_port="443"/>
            <filter src_ip="134.71.89.40" dst_ip="206.68.10.190" src_port="2893" dst_port="443"/>
        </slice>
        <from usec="0" sec="1191992655"/>
        <to usec="0" sec="1191992657"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.155.139" dst_ip="134.71.20.71" src_port="80" dst_port="47240"/>
        </slice>
        <from usec="0" sec="1191992871"/>
        <to usec="0" sec="1191992887"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.144.154.173" dst_ip="134.71.20.71" src_port="80" dst_port="47286"/>
        </slice>
        <from usec="0" sec="1191993018"/>
        <to usec="0" sec="1191993030"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.71.200.114" dst_ip="52.53.1.26" dst_port="80"/>
            <filter src_ip="134.71.200.114" dst_ip="1.178.159.32" dst_port="80"/>
            <filter src_ip="134.71.200.114" dst_ip="219.200.13.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992789"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.12.171.251" dst_ip="134.71.121.129" src_port="2621" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993050"/>
        <to usec="0" sec="1191993143"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.71.36.215" dst_ip="200.99.80.6" src_port="1209" dst_port="554"/>
        </slice>
        <from usec="0" sec="1191992600"/>
        <to usec="0" sec="1191993073"/>
    </anomaly>
    <anomaly type="notice" value="0.711985,1.362870,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.71.185.80" dst_ip="1.178.159.65" src_port="2915" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992552"/>
        <to usec="0" sec="1191992676"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.6.224.217" dst_ip="52.40.188.113" src_port="4781" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993086"/>
        <to usec="0" sec="1191993088"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.195.148" dst_ip="201.179.126.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992674"/>
        <to usec="0" sec="1191992683"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.71.66.47" dst_ip="75.7.28.110" src_port="1373" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992446"/>
        <to usec="0" sec="1191992785"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.104.213.107" dst_ip="211.195.151.17" src_port="3292" dst_port="80"/>
            <filter src_ip="188.104.213.107" dst_ip="211.195.151.17" src_port="3286" dst_port="80"/>
            <filter src_ip="188.104.213.107" dst_ip="211.195.151.17" src_port="3283" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993288"/>
        <to usec="0" sec="1191993292"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.104.171.65" dst_ip="201.214.154.4" src_port="2471" dst_port="80"/>
            <filter src_ip="188.104.171.65" dst_ip="201.214.154.4" src_port="2469" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992570"/>
        <to usec="0" sec="1191993224"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.186.92" dst_ip="62.144.154.96" src_port="1548" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992568"/>
        <to usec="0" sec="1191992583"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.178.131" dst_ip="62.144.155.90" src_port="61917" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992759"/>
        <to usec="0" sec="1191992792"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.159.124.135" dst_ip="1.178.132.181" src_port="4372" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992832"/>
        <to usec="0" sec="1191992834"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.104.193.102" dst_ip="217.81.177.148" src_port="21476" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993091"/>
        <to usec="0" sec="1191993095"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.173.71.6" dst_ip="61.86.169.176" src_port="60751" dst_port="43566"/>
        </slice>
        <from usec="0" sec="1191992739"/>
        <to usec="0" sec="1191992744"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.71.219.209" dst_ip="207.117.161.18" src_port="62852" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992773"/>
        <to usec="0" sec="1191992778"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.130.93.20" dst_ip="216.29.38.36" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992639"/>
        <to usec="0" sec="1191992641"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.173.70.148" dst_ip="204.32.252.174" src_port="3028" dst_port="443"/>
        </slice>
        <from usec="0" sec="1191992815"/>
        <to usec="0" sec="1191992832"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.67.81" dst_ip="210.86.150.229" src_port="3573" dst_port="80"/>
            <filter src_ip="169.6.67.81" dst_ip="210.86.150.229" src_port="3572" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992717"/>
        <to usec="0" sec="1191992735"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.6.78.180" dst_ip="1.178.132.160" src_port="2900" dst_port="80"/>
            <filter src_ip="169.6.78.180" dst_ip="1.178.132.160" src_port="2899" dst_port="80"/>
            <filter src_ip="169.6.78.180" dst_ip="52.58.128.14" src_port="2909" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992662"/>
        <to usec="0" sec="1191992664"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.246.84" dst_ip="62.208.115.200" src_port="1681" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992577"/>
        <to usec="0" sec="1191992657"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.41.172.2" dst_ip="172.133.218.180" src_port="60384" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992733"/>
        <to usec="0" sec="1191992737"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="188.104.46.104" dst_ip="200.99.80.35" src_port="1380" dst_port="554"/>
        </slice>
        <from usec="0" sec="1191992549"/>
        <to usec="0" sec="1191992634"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.178.161.143" dst_ip="134.71.54.94" src_port="80" dst_port="2924"/>
            <filter src_ip="1.178.161.143" dst_ip="134.71.54.94" src_port="80" dst_port="2923"/>
        </slice>
        <from usec="0" sec="1191992424"/>
        <to usec="0" sec="1191992427"/>
    </anomaly>
    <anomaly type="notice" value="0.711985,1.362870,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="136.132.145.103" dst_ip="136.132.145.103" proto="icmp"/>
        </slice>
        <from usec="0" sec="1191992402"/>
        <to usec="0" sec="1191993300"/>
    </anomaly>
    <anomaly type="notice" value="0.711985,1.362870,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="134.71.20.71" dst_ip="134.71.20.71" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1191992569"/>
        <to usec="0" sec="1191993116"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="1.178.159.149" dst_ip="134.71.109.146" src_port="80"/>
        </slice>
        <from usec="0" sec="1191992431"/>
        <to usec="0" sec="1191992607"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="134.71.82.4" dst_ip="209.50.43.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992549"/>
        <to usec="0" sec="1191992557"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.77.246" dst_ip="210.133.180.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993271"/>
        <to usec="0" sec="1191993275"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.75.161.100" dst_ip="210.176.205.50" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992687"/>
        <to usec="0" sec="1191992689"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="169.6.117.109" dst_ip="81.166.190.186" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992685"/>
        <to usec="0" sec="1191992687"/>
    </anomaly>
    <anomaly type="notice" value="0.797316,1.286020,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.71.66.179" src_port="8319"/>
        </slice>
        <from usec="0" sec="1191992403"/>
        <to usec="0" sec="1191993049"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.64.85.160" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992578"/>
        <to usec="0" sec="1191992581"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="56.76.223.230"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992499"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="85.51.66.150"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992509"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.106.240.166"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992509"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.130.16.118"/>
        </slice>
        <from usec="0" sec="1191992404"/>
        <to usec="0" sec="1191992508"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,004,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.39.224.185"/>
        </slice>
        <from usec="0" sec="1191992405"/>
        <to usec="0" sec="1191992507"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.169.80.169"/>
        </slice>
        <from usec="0" sec="1191992465"/>
        <to usec="0" sec="1191992509"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="132.188.126.216"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.24.44.61"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.33.36.108"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.71.200.107"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.67.35.211" dst_port="53"/>
            <filter dst_ip="201.67.35.211" src_port="53" dst_port="32800"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.6.84.32"/>
        </slice>
        <from usec="0" sec="1191992402"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.164.234.251"/>
        </slice>
        <from usec="0" sec="1191992403"/>
        <to usec="0" sec="1191992418"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="75.2.190.144"/>
        </slice>
        <from usec="0" sec="1191992403"/>
        <to usec="0" sec="1191992571"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.1.32.210"/>
        </slice>
        <from usec="0" sec="1191992404"/>
        <to usec="0" sec="1191992589"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.98.22.97"/>
        </slice>
        <from usec="0" sec="1191992405"/>
        <to usec="0" sec="1191992476"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="207.178.241.121"/>
        </slice>
        <from usec="0" sec="1191992405"/>
        <to usec="0" sec="1191992480"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="134.71.183.76"/>
        </slice>
        <from usec="0" sec="1191992420"/>
        <to usec="0" sec="1191992597"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.12.110.210"/>
        </slice>
        <from usec="0" sec="1191992420"/>
        <to usec="0" sec="1191992451"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="6.149.66.166"/>
        </slice>
        <from usec="0" sec="1191992443"/>
        <to usec="0" sec="1191992587"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="134.71.17.98"/>
        </slice>
        <from usec="0" sec="1191992446"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.176.205.50"/>
        </slice>
        <from usec="0" sec="1191992580"/>
        <to usec="0" sec="1191992599"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.173.68.97"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992682"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.6.186.101"/>
        </slice>
        <from usec="0" sec="1191992407"/>
        <to usec="0" sec="1191992638"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.128.126.130"/>
        </slice>
        <from usec="0" sec="1191992409"/>
        <to usec="0" sec="1191992670"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="52.13.119.168"/>
        </slice>
        <from usec="0" sec="1191992413"/>
        <to usec="0" sec="1191992681"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="57.202.21.166"/>
        </slice>
        <from usec="0" sec="1191992414"/>
        <to usec="0" sec="1191992676"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,004,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.193.30.185"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992779"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="6.149.66.54"/>
        </slice>
        <from usec="0" sec="1191992402"/>
        <to usec="0" sec="1191992687"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="4.23.12.18"/>
        </slice>
        <from usec="0" sec="1191992404"/>
        <to usec="0" sec="1191992729"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="1.178.159.170"/>
        </slice>
        <from usec="0" sec="1191992406"/>
        <to usec="0" sec="1191992779"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.71.176.52"/>
        </slice>
        <from usec="0" sec="1191992419"/>
        <to usec="0" sec="1191992686"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.128.84.162"/>
        </slice>
        <from usec="0" sec="1191992428"/>
        <to usec="0" sec="1191992768"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.168.7.53"/>
        </slice>
        <from usec="0" sec="1191992439"/>
        <to usec="0" sec="1191992741"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="57.170.248.105"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993109"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.35.146.188"/>
        </slice>
        <from usec="0" sec="1191992407"/>
        <to usec="0" sec="1191992858"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.6.230.81"/>
        </slice>
        <from usec="0" sec="1191992408"/>
        <to usec="0" sec="1191992866"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.35.147.124"/>
        </slice>
        <from usec="0" sec="1191992411"/>
        <to usec="0" sec="1191992862"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.6.96.144"/>
        </slice>
        <from usec="0" sec="1191992419"/>
        <to usec="0" sec="1191992695"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.178.159.41"/>
        </slice>
        <from usec="0" sec="1191992420"/>
        <to usec="0" sec="1191992737"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.243.101.218"/>
        </slice>
        <from usec="0" sec="1191992426"/>
        <to usec="0" sec="1191992858"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.117.57.26"/>
        </slice>
        <from usec="0" sec="1191992694"/>
        <to usec="0" sec="1191992801"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="42.194.36.75"/>
        </slice>
        <from usec="0" sec="1191992713"/>
        <to usec="0" sec="1191992869"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.188.129.52"/>
        </slice>
        <from usec="0" sec="1191992720"/>
        <to usec="0" sec="1191992859"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.172.124.244"/>
        </slice>
        <from usec="0" sec="1191992813"/>
        <to usec="0" sec="1191992863"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.130.202.43"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992959"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.2.55.245"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992958"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.16.75.200"/>
        </slice>
        <from usec="0" sec="1191992403"/>
        <to usec="0" sec="1191992959"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.49.183.88"/>
        </slice>
        <from usec="0" sec="1191992403"/>
        <to usec="0" sec="1191992946"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.211.19.55"/>
        </slice>
        <from usec="0" sec="1191992404"/>
        <to usec="0" sec="1191992959"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.154.255.184"/>
        </slice>
        <from usec="0" sec="1191992405"/>
        <to usec="0" sec="1191992942"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.136.122.148"/>
        </slice>
        <from usec="0" sec="1191992407"/>
        <to usec="0" sec="1191992956"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="52.58.131.84" src_port="53"/>
        </slice>
        <from usec="0" sec="1191992414"/>
        <to usec="0" sec="1191992957"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.114.243.193"/>
        </slice>
        <from usec="0" sec="1191992426"/>
        <to usec="0" sec="1191992959"/>
    </anomaly>
    <anomaly type="notice" value="0.549406,1.279410,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.170.151.30" dst_ip="169.6.226.232" src_port="443"/>
        </slice>
        <from usec="0" sec="1191992427"/>
        <to usec="0" sec="1191992916"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.50.122.182"/>
        </slice>
        <from usec="0" sec="1191992458"/>
        <to usec="0" sec="1191992922"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="188.104.139.191"/>
        </slice>
        <from usec="0" sec="1191992647"/>
        <to usec="0" sec="1191992897"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.126.93.104"/>
        </slice>
        <from usec="0" sec="1191992666"/>
        <to usec="0" sec="1191992823"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.197.58.40"/>
        </slice>
        <from usec="0" sec="1191992726"/>
        <to usec="0" sec="1191992904"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.181.22.112"/>
        </slice>
        <from usec="0" sec="1191992768"/>
        <to usec="0" sec="1191992882"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.71.52.25"/>
        </slice>
        <from usec="0" sec="1191992771"/>
        <to usec="0" sec="1191992796"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.206.144.122"/>
        </slice>
        <from usec="0" sec="1191992784"/>
        <to usec="0" sec="1191992868"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.106.136.231"/>
        </slice>
        <from usec="0" sec="1191992800"/>
        <to usec="0" sec="1191992835"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="201.179.126.99"/>
        </slice>
        <from usec="0" sec="1191992804"/>
        <to usec="0" sec="1191992809"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.20.212.160"/>
        </slice>
        <from usec="0" sec="1191992825"/>
        <to usec="0" sec="1191992875"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.139.158.148"/>
        </slice>
        <from usec="0" sec="1191992862"/>
        <to usec="0" sec="1191992867"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="209.125.19.35"/>
        </slice>
        <from usec="0" sec="1191992870"/>
        <to usec="0" sec="1191992872"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993229"/>
    </anomaly>
    <anomaly type="notice" value="0.549406,1.279410,020,1 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="172.159.76.201"/>
        </slice>
        <from usec="0" sec="1191992406"/>
        <to usec="0" sec="1191992989"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="85.109.45.198"/>
        </slice>
        <from usec="0" sec="1191992408"/>
        <to usec="0" sec="1191993044"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.159.88.108"/>
        </slice>
        <from usec="0" sec="1191992409"/>
        <to usec="0" sec="1191993044"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.136.122.74"/>
        </slice>
        <from usec="0" sec="1191992410"/>
        <to usec="0" sec="1191993047"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.176.64.4"/>
        </slice>
        <from usec="0" sec="1191992411"/>
        <to usec="0" sec="1191993049"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.71.36.46"/>
        </slice>
        <from usec="0" sec="1191992412"/>
        <to usec="0" sec="1191993042"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.68.241.68"/>
        </slice>
        <from usec="0" sec="1191992424"/>
        <to usec="0" sec="1191992895"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.36.215.61"/>
        </slice>
        <from usec="0" sec="1191992600"/>
        <to usec="0" sec="1191992877"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.36.50.74"/>
        </slice>
        <from usec="0" sec="1191992650"/>
        <to usec="0" sec="1191993048"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.38.144.232"/>
        </slice>
        <from usec="0" sec="1191992781"/>
        <to usec="0" sec="1191992973"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.159.120.151"/>
        </slice>
        <from usec="0" sec="1191992817"/>
        <to usec="0" sec="1191993045"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="81.155.106.231"/>
        </slice>
        <from usec="0" sec="1191992899"/>
        <to usec="0" sec="1191992983"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.165.103.64"/>
        </slice>
        <from usec="0" sec="1191992969"/>
        <to usec="0" sec="1191993049"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.202.182.245"/>
        </slice>
        <from usec="0" sec="1191992986"/>
        <to usec="0" sec="1191993049"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.75.168.149"/>
        </slice>
        <from usec="0" sec="1191992991"/>
        <to usec="0" sec="1191993049"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.172.212.88"/>
        </slice>
        <from usec="0" sec="1191993015"/>
        <to usec="0" sec="1191993048"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="84.176.62.118"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993135"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="61.86.172.231"/>
        </slice>
        <from usec="0" sec="1191992408"/>
        <to usec="0" sec="1191993138"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="211.173.135.142"/>
        </slice>
        <from usec="0" sec="1191992420"/>
        <to usec="0" sec="1191993129"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.130.108.156"/>
        </slice>
        <from usec="0" sec="1191992423"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.130.145.24"/>
        </slice>
        <from usec="0" sec="1191992426"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.128.97.225"/>
        </slice>
        <from usec="0" sec="1191992438"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.10.208.99"/>
        </slice>
        <from usec="0" sec="1191992504"/>
        <to usec="0" sec="1191993126"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.128.97.197"/>
        </slice>
        <from usec="0" sec="1191992624"/>
        <to usec="0" sec="1191993021"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="220.79.90.52"/>
        </slice>
        <from usec="0" sec="1191992982"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.6.72.123"/>
        </slice>
        <from usec="0" sec="1191992984"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.49.65.205" dst_ip="201.202.183.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992990"/>
        <to usec="0" sec="1191993139"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="210.172.212.84"/>
        </slice>
        <from usec="0" sec="1191993014"/>
        <to usec="0" sec="1191993067"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.172.212.85"/>
        </slice>
        <from usec="0" sec="1191993014"/>
        <to usec="0" sec="1191993069"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993229"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.6.67.175" dst_ip="61.86.186.134" dst_port="443"/>
            <filter src_ip="169.6.67.175" dst_ip="209.50.4.145" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993228"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="55.22.140.153"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993229"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.128.115.89"/>
        </slice>
        <from usec="0" sec="1191992406"/>
        <to usec="0" sec="1191993187"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.91.239.82"/>
        </slice>
        <from usec="0" sec="1191992494"/>
        <to usec="0" sec="1191993228"/>
    </anomaly>
    <anomaly type="notice" value="0.514633,1.321960,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.71.59.161"/>
        </slice>
        <from usec="0" sec="1191992980"/>
        <to usec="0" sec="1191993225"/>
    </anomaly>
    <anomaly type="notice" value="0.737510,1.321640,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.71.20.71" dst_ip="209.50.2.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992402"/>
        <to usec="0" sec="1191993220"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.154.96.69"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.67.2.96"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.233.58.77"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="85.79.189.26"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="169.6.69.153" src_port="25"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.191.50.95" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="217.191.50.95" dst_port="1027"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.79.189.26" dst_port="137"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.104.193.102" dst_ip="217.36.147.101" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.240.214" dst_ip="210.87.115.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992447"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.154.96.69"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.0.200.233"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.691394,1.312400,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.130.75.3" dst_ip="217.36.147.101" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992670"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="188.104.30.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.6.217.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.173.71.123" dst_port="25"/>
        </slice>
        <from usec="0" sec="1191992536"/>
        <to usec="0" sec="1191992582"/>
    </anomaly>
    <anomaly type="notice" value="0.691394,1.312400,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="37.154.96.69"/>
        </slice>
        <from usec="0" sec="1191992597"/>
        <to usec="0" sec="1191992783"/>
    </anomaly>
    <anomaly type="notice" value="0.729943,1.319180,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="188.104.130.108" src_port="61726"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191992954"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="220.0.200.233"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.691394,1.312400,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="1.57.0.50" dst_port="139"/>
            <filter src_ip="1.57.0.50" dst_port="445"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992774"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.53.82.127" src_port="123"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="188.104.149.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="188.104.193.102" dst_ip="217.36.147.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1028" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="1035" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1054" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1086" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1089" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1141" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1314" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3140" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3285" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3306" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3664" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4364" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4625" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4798" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.231.170.87" src_port="1028" dst_port="137"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.146.124.38" src_port="1027" dst_port="137"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992762"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.128.75.164" dst_port="53"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.6.71.129" dst_ip="1.178.132.130" dst_port="80"/>
            <filter src_ip="169.6.226.186" dst_ip="1.178.132.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.691394,1.312400,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="134.71.66.179" dst_port="8319"/>
        </slice>
        <from usec="0" sec="1191992445"/>
        <to usec="0" sec="1191993137"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.96.25.244"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.159.81.239"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.159.81.233"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="1.178.132.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.159.81.158"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.67.1.115"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.691394,1.312400,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="136.132.145.103"/>
        </slice>
        <from usec="0" sec="1191992401"/>
        <to usec="0" sec="1191993299"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.75.182.182"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.67.0.159"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="188.104.30.129" dst_ip="52.58.160.104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992716"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.159.168.251"/>
        </slice>
        <from usec="0" sec="1191992761"/>
        <to usec="0" sec="1191992807"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.116.189.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191992986"/>
        <to usec="0" sec="1191993032"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="1.178.132.172" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993166"/>
        <to usec="0" sec="1191993212"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.200.204.61"/>
        </slice>
        <from usec="0" sec="1191993166"/>
        <to usec="0" sec="1191993212"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.6.221.166" dst_ip="200.162.237.153" dst_port="80"/>
            <filter src_ip="169.6.70.34" dst_ip="200.162.237.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993166"/>
        <to usec="0" sec="1191993212"/>
    </anomaly>
    <anomaly type="notice" value="0.664098,1.353920,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.6.97.233" dst_ip="201.66.166.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1191993166"/>
        <to usec="0" sec="1191993212"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.186.254.33"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.751533,1.276140,501,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="200.173.70.17" dst_ip="209.193.21.80"/>
            <filter src_ip="200.173.70.17" dst_ip="222.174.249.186" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.7.129.184"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="84.206.222.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="61.226.9.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="200.173.70.17"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.106.73.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="210.128.85.173"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="221.51.194.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.787143,1.283110,020,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="85.60.176.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="81.20.122.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="81.20.122.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="81.20.122.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="81.20.122.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="81.20.122.147"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="61.64.197.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.787143,1.283110,999,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="172.130.196.101" dst_ip="61.86.172.183" src_port="80"/>
            <filter src_ip="172.130.196.101" dst_ip="61.86.172.183" src_port="8080"/>
            <filter src_ip="169.6.168.175" dst_ip="61.86.172.183" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,004,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="55.131.129.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.726501,1.318800,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="49.211.40.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.729943,1.319180,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="203.245.109.100"/>
        </slice>
        <from usec="0" sec="1191992406"/>
        <to usec="0" sec="1191992772"/>
    </anomaly>
</admd:annotation>
