<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.137.117.170" dst_ip="63.38.161.248" src_port="80" dst_port="52390" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757481"/>
        <to usec="0" sec="1194757484"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.224.40.69"/>
        </slice>
        <from usec="0" sec="1194758016"/>
        <to usec="0" sec="1194758021"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.144.11.72"/>
        </slice>
        <from usec="0" sec="1194757728"/>
        <to usec="0" sec="1194757733"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.30.83.253"/>
        </slice>
        <from usec="0" sec="1194757871"/>
        <to usec="0" sec="1194757874"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="144.45.22.23" dst_ip="51.179.91.218" src_port="51985" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194758091"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.174.135.232"/>
        </slice>
        <from usec="0" sec="1194757500"/>
        <to usec="0" sec="1194757505"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.144.71.8"/>
        </slice>
        <from usec="0" sec="1194757900"/>
        <to usec="0" sec="1194757974"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.224.211.118" dst_ip="192.85.11.21" src_port="1292" dst_port="20" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757976"/>
        <to usec="0" sec="1194757980"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.224.12.34"/>
        </slice>
        <from usec="0" sec="1194757828"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.33.58.53" dst_ip="209.192.47.128" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757742"/>
        <to usec="0" sec="1194757744"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.224.80.140" dst_ip="5.80.193.213" src_port="4515" dst_port="18486" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757555"/>
        <to usec="0" sec="1194757559"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="210.177.139.84" dst_ip="173.144.71.143" src_port="995" dst_port="52972" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757234"/>
        <to usec="0" sec="1194757238"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="152.174.187.89" dst_ip="218.36.109.33" src_port="49630" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194758067"/>
        <to usec="0" sec="1194758070"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.45.67.50" dst_ip="221.200.152.64" src_port="4128" dst_port="444" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757340"/>
        <to usec="0" sec="1194757874"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.144.201.29"/>
        </slice>
        <from usec="0" sec="1194757468"/>
        <to usec="0" sec="1194757472"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.33.60.2"/>
        </slice>
        <from usec="0" sec="1194757415"/>
        <to usec="0" sec="1194757420"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.45.8.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757271"/>
        <to usec="0" sec="1194757417"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.180.61.21" dst_ip="68.27.43.9" src_port="1978" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757680"/>
        <to usec="0" sec="1194757684"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.224.142.197" dst_ip="2.122.209.16" src_port="4661" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757561"/>
        <to usec="0" sec="1194757564"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.224.160.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757856"/>
        <to usec="0" sec="1194758064"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.60.55.10"/>
        </slice>
        <from usec="0" sec="1194757393"/>
        <to usec="0" sec="1194757398"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="57.8.167.23"/>
        </slice>
        <from usec="0" sec="1194758076"/>
        <to usec="0" sec="1194758081"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="217.80.96.26"/>
        </slice>
        <from usec="0" sec="1194757252"/>
        <to usec="0" sec="1194758064"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.33.76.105"/>
        </slice>
        <from usec="0" sec="1194757603"/>
        <to usec="0" sec="1194757608"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="133.224.43.218" dst_ip="2.122.208.246" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757761"/>
        <to usec="0" sec="1194757765"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="129.33.87.170"/>
        </slice>
        <from usec="0" sec="1194757857"/>
        <to usec="0" sec="1194758038"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="217.80.96.26" dst_port="135" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757205"/>
        <to usec="0" sec="1194758064"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.28.16.182" src_port="35935" dst_port="1026" proto="udp"/>
        </slice>
        <from usec="0" sec="1194757747"/>
        <to usec="0" sec="1194757750"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="88.108.98.102" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757915"/>
        <to usec="0" sec="1194757924"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.149.33.129" proto="tcp"/>
        </slice>
        <from usec="0" sec="1194757375"/>
        <to usec="0" sec="1194757377"/>
    </anomaly>
    <anomaly type="notice" value="0.586661,1.053120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="193.32.80.87" proto="icmp"/>
        </slice>
        <from usec="0" sec="1194757795"/>
        <to usec="0" sec="1194757796"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.19.162.121" dst_ip="89.15.138.174" src_port="1983" dst_port="46167"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758040"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="218.162.69.180"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757309"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.1.194.84"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="129.60.208.215" src_port="48662"/>
            <filter src_ip="129.60.208.215" src_port="10364"/>
        </slice>
        <from usec="0" sec="1194757216"/>
        <to usec="0" sec="1194757766"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="222.102.42.242"/>
        </slice>
        <from usec="0" sec="1194757224"/>
        <to usec="0" sec="1194757308"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.64.66.26"/>
        </slice>
        <from usec="0" sec="1194757301"/>
        <to usec="0" sec="1194757304"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.180.61.21"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="38.135.241.32"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="89.25.248.185"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="192.128.90.186"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757579"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="201.141.66.225" dst_ip="211.36.49.36" src_port="53"/>
            <filter src_ip="201.141.66.230" dst_ip="211.36.49.36" src_port="53"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="89.164.255.115"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757398"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="92.13.68.0"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757398"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="218.91.98.152"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757399"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.224.152.66"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757392"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.174.22.170"/>
        </slice>
        <from usec="0" sec="1194757204"/>
        <to usec="0" sec="1194757398"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.57.82.98"/>
        </slice>
        <from usec="0" sec="1194757208"/>
        <to usec="0" sec="1194757669"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="93.181.54.140"/>
        </slice>
        <from usec="0" sec="1194757220"/>
        <to usec="0" sec="1194757341"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.170.137.155"/>
        </slice>
        <from usec="0" sec="1194757221"/>
        <to usec="0" sec="1194757243"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.10.160.214"/>
        </slice>
        <from usec="0" sec="1194757222"/>
        <to usec="0" sec="1194757228"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="51.85.1.19"/>
        </slice>
        <from usec="0" sec="1194757232"/>
        <to usec="0" sec="1194757398"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="93.1.81.71" dst_ip="129.60.207.133" src_port="53"/>
            <filter src_ip="93.1.81.71" dst_ip="129.60.207.169" src_port="53"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757489"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="42.105.232.98"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757467"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="132.19.117.58"/>
        </slice>
        <from usec="0" sec="1194757204"/>
        <to usec="0" sec="1194757462"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.82.177.96"/>
        </slice>
        <from usec="0" sec="1194757207"/>
        <to usec="0" sec="1194757489"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="93.181.53.248"/>
        </slice>
        <from usec="0" sec="1194757221"/>
        <to usec="0" sec="1194757486"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="63.50.108.178"/>
        </slice>
        <from usec="0" sec="1194757374"/>
        <to usec="0" sec="1194757428"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="222.55.8.170"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757495"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.106.100.187"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758009"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.57.137.148"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757576"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="95.94.6.241"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757576"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.10.142.53"/>
        </slice>
        <from usec="0" sec="1194757203"/>
        <to usec="0" sec="1194757579"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,051,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.205.35.37"/>
        </slice>
        <from usec="0" sec="1194757205"/>
        <to usec="0" sec="1194757578"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="48.164.142.26"/>
        </slice>
        <from usec="0" sec="1194757213"/>
        <to usec="0" sec="1194757571"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="59.36.46.214"/>
        </slice>
        <from usec="0" sec="1194757216"/>
        <to usec="0" sec="1194757578"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.67.48.36"/>
        </slice>
        <from usec="0" sec="1194757276"/>
        <to usec="0" sec="1194757465"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.202.222.171"/>
        </slice>
        <from usec="0" sec="1194757323"/>
        <to usec="0" sec="1194757578"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.224.199.81"/>
        </slice>
        <from usec="0" sec="1194757338"/>
        <to usec="0" sec="1194757571"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.138.241.127"/>
        </slice>
        <from usec="0" sec="1194757399"/>
        <to usec="0" sec="1194757407"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.174.152.71"/>
        </slice>
        <from usec="0" sec="1194757533"/>
        <to usec="0" sec="1194757579"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.148.60.203"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757669"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="93.111.48.135"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757640"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.200.117.119"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757669"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="129.180.93.37"/>
        </slice>
        <from usec="0" sec="1194757291"/>
        <to usec="0" sec="1194757669"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,011,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="222.66.99.153"/>
        </slice>
        <from usec="0" sec="1194757365"/>
        <to usec="0" sec="1194757668"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.83.93.12"/>
        </slice>
        <from usec="0" sec="1194757441"/>
        <to usec="0" sec="1194757667"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.250.184.206"/>
        </slice>
        <from usec="0" sec="1194757503"/>
        <to usec="0" sec="1194757508"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="74.147.26.157"/>
        </slice>
        <from usec="0" sec="1194757521"/>
        <to usec="0" sec="1194757660"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.35.186.26"/>
        </slice>
        <from usec="0" sec="1194757608"/>
        <to usec="0" sec="1194757645"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.144.70.11" src_port="2069"/>
        </slice>
        <from usec="0" sec="1194757612"/>
        <to usec="0" sec="1194758060"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="48.166.112.18"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757759"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.92.174.244" src_port="1433"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758065"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.228.7.78"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757759"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.164.106.9"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757755"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.128.90.45"/>
        </slice>
        <from usec="0" sec="1194757206"/>
        <to usec="0" sec="1194757749"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="133.224.40.229"/>
        </slice>
        <from usec="0" sec="1194757207"/>
        <to usec="0" sec="1194757757"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.144.230.6"/>
        </slice>
        <from usec="0" sec="1194757209"/>
        <to usec="0" sec="1194757753"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.34.56.218"/>
        </slice>
        <from usec="0" sec="1194757409"/>
        <to usec="0" sec="1194757618"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="101.239.2.209"/>
        </slice>
        <from usec="0" sec="1194757422"/>
        <to usec="0" sec="1194757758"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.134.143.34"/>
        </slice>
        <from usec="0" sec="1194757654"/>
        <to usec="0" sec="1194757748"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.210.161.238"/>
        </slice>
        <from usec="0" sec="1194757753"/>
        <to usec="0" sec="1194757758"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="129.60.208.215"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757849"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.82.63.28"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757840"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="129.33.142.108" src_port="3127"/>
            <filter src_ip="129.33.142.108" src_port="3128"/>
        </slice>
        <from usec="0" sec="1194757202"/>
        <to usec="0" sec="1194757849"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.2.100.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1194757204"/>
        <to usec="0" sec="1194757843"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="54.164.23.105" src_port="25"/>
            <filter dst_ip="174.57.83.10" dst_port="53"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757849"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.137.196.10"/>
        </slice>
        <from usec="0" sec="1194757206"/>
        <to usec="0" sec="1194757825"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.44.201.23"/>
        </slice>
        <from usec="0" sec="1194757229"/>
        <to usec="0" sec="1194757847"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.45.151.66"/>
        </slice>
        <from usec="0" sec="1194757243"/>
        <to usec="0" sec="1194757997"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.149.64.34"/>
        </slice>
        <from usec="0" sec="1194757252"/>
        <to usec="0" sec="1194757801"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.40.103.155"/>
        </slice>
        <from usec="0" sec="1194757332"/>
        <to usec="0" sec="1194757838"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.1.194.7" dst_port="80"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758066"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.154.83.7"/>
        </slice>
        <from usec="0" sec="1194757805"/>
        <to usec="0" sec="1194757923"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.10.31"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757937"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="2.237.229.156"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757939"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.168.44.13"/>
        </slice>
        <from usec="0" sec="1194757205"/>
        <to usec="0" sec="1194757923"/>
    </anomaly>
    <anomaly type="notice" value="0.568416,1.020870,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.19.165.79" dst_port="80"/>
            <filter dst_ip="2.122.208.210" dst_port="80"/>
        </slice>
        <from usec="0" sec="1194757205"/>
        <to usec="0" sec="1194757968"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.144.59.84"/>
        </slice>
        <from usec="0" sec="1194757216"/>
        <to usec="0" sec="1194757936"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.188.34.137"/>
        </slice>
        <from usec="0" sec="1194757580"/>
        <to usec="0" sec="1194757924"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="48.94.104.218"/>
        </slice>
        <from usec="0" sec="1194757711"/>
        <to usec="0" sec="1194757767"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.123.23.74"/>
        </slice>
        <from usec="0" sec="1194757830"/>
        <to usec="0" sec="1194757933"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.19.161.65" src_port="80"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758029"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.224.212.240" dst_port="53"/>
            <filter dst_ip="133.224.212.240" src_port="53" dst_port="51273"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758029"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.224.141.86" dst_port="25"/>
            <filter src_ip="133.224.117.233" dst_ip="57.143.185.116" dst_port="25"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194758029"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="52.130.220.202"/>
        </slice>
        <from usec="0" sec="1194757205"/>
        <to usec="0" sec="1194758029"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.211.188.223"/>
        </slice>
        <from usec="0" sec="1194757219"/>
        <to usec="0" sec="1194758004"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="48.208.227.148"/>
        </slice>
        <from usec="0" sec="1194757258"/>
        <to usec="0" sec="1194758026"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.152.101.180"/>
        </slice>
        <from usec="0" sec="1194757879"/>
        <to usec="0" sec="1194757950"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.168.32.15"/>
        </slice>
        <from usec="0" sec="1194757889"/>
        <to usec="0" sec="1194757909"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.27.54.4"/>
        </slice>
        <from usec="0" sec="1194757953"/>
        <to usec="0" sec="1194758019"/>
    </anomaly>
    <anomaly type="notice" value="0.422146,1.019320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.138.29.51"/>
        </slice>
        <from usec="0" sec="1194758000"/>
        <to usec="0" sec="1194758005"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.1.202.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757247"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.30.82.12"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757247"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="217.80.96.26"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757247"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="129.60.207.169" dst_ip="93.1.81.71" dst_port="53"/>
            <filter src_ip="129.60.207.133" dst_ip="93.1.81.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.716056,1.106050,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="129.60.48.78" src_port="61364"/>
        </slice>
        <from usec="0" sec="1194757228"/>
        <to usec="0" sec="1194757936"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="129.60.49.11" dst_port="22801"/>
        </slice>
        <from usec="0" sec="1194757201"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.144.137.90" dst_port="3124"/>
            <filter dst_ip="173.144.137.90" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="193.1.203.148"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="129.60.41.213"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="129.60.41.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.149.34.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="1194757786"/>
        <to usec="0" sec="1194757832"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.62.223.180" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1194757876"/>
        <to usec="0" sec="1194757922"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3664" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1194757876"/>
        <to usec="0" sec="1194757922"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.19.174.192" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1194757876"/>
        <to usec="0" sec="1194758057"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3664" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1194758011"/>
        <to usec="0" sec="1194758057"/>
    </anomaly>
    <anomaly type="notice" value="0.730623,1.135890,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="220.157.129.10" dst_port="445"/>
        </slice>
        <from usec="0" sec="1194758056"/>
        <to usec="0" sec="1194758102"/>
    </anomaly>
</admd:annotation>
