<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.192.51.59"/>
        </slice>
        <from usec="0" sec="1197435818"/>
        <to usec="0" sec="1197435852"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.34.97.2" dst_ip="19.231.11.78" src_port="80" dst_port="58413" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436113"/>
        <to usec="0" sec="1197436119"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.216.154.48"/>
        </slice>
        <from usec="0" sec="1197436437"/>
        <to usec="0" sec="1197436441"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.143.220"/>
        </slice>
        <from usec="0" sec="1197435795"/>
        <to usec="0" sec="1197435799"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.209.21.227"/>
        </slice>
        <from usec="0" sec="1197435627"/>
        <to usec="0" sec="1197435631"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.142.228.92" dst_ip="19.231.10.16" src_port="80" dst_port="56612" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436170"/>
        <to usec="0" sec="1197436172"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.237.41"/>
        </slice>
        <from usec="0" sec="1197435871"/>
        <to usec="0" sec="1197436207"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.236.69"/>
        </slice>
        <from usec="0" sec="1197436464"/>
        <to usec="0" sec="1197436473"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.10.48"/>
        </slice>
        <from usec="0" sec="1197435705"/>
        <to usec="0" sec="1197435709"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.137.1"/>
        </slice>
        <from usec="0" sec="1197435954"/>
        <to usec="0" sec="1197436052"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.156.202"/>
        </slice>
        <from usec="0" sec="1197436128"/>
        <to usec="0" sec="1197436202"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="129.140.191.255"/>
        </slice>
        <from usec="0" sec="1197435823"/>
        <to usec="0" sec="1197436084"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.216.212.6"/>
        </slice>
        <from usec="0" sec="1197436391"/>
        <to usec="0" sec="1197436394"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="170.248.235.38"/>
        </slice>
        <from usec="0" sec="1197435934"/>
        <to usec="0" sec="1197436083"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.192.18.68"/>
        </slice>
        <from usec="0" sec="1197435705"/>
        <to usec="0" sec="1197436084"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.71.134.222" dst_ip="209.140.19.237" src_port="3561" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436456"/>
        <to usec="0" sec="1197436458"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.128.134.195"/>
        </slice>
        <from usec="0" sec="1197435790"/>
        <to usec="0" sec="1197435793"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.241.154"/>
        </slice>
        <from usec="0" sec="1197436449"/>
        <to usec="0" sec="1197436452"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.6.202.148"/>
        </slice>
        <from usec="0" sec="1197436261"/>
        <to usec="0" sec="1197436264"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.21.180"/>
        </slice>
        <from usec="0" sec="1197436158"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.246.139"/>
        </slice>
        <from usec="0" sec="1197436254"/>
        <to usec="0" sec="1197436333"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.246.155"/>
        </slice>
        <from usec="0" sec="1197436168"/>
        <to usec="0" sec="1197436241"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.237.75"/>
        </slice>
        <from usec="0" sec="1197436422"/>
        <to usec="0" sec="1197436453"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.248.219.21"/>
        </slice>
        <from usec="0" sec="1197436097"/>
        <to usec="0" sec="1197436112"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.147.230.122"/>
        </slice>
        <from usec="0" sec="1197436476"/>
        <to usec="0" sec="1197436480"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="26.32.15.12"/>
        </slice>
        <from usec="0" sec="1197436024"/>
        <to usec="0" sec="1197436129"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="26.32.15.9"/>
        </slice>
        <from usec="0" sec="1197435770"/>
        <to usec="0" sec="1197435821"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.142.36.1" dst_ip="197.187.32.56" src_port="4512" dst_port="25574" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436426"/>
        <to usec="0" sec="1197436428"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.6.13.96"/>
        </slice>
        <from usec="0" sec="1197436265"/>
        <to usec="0" sec="1197436303"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.241.160"/>
        </slice>
        <from usec="0" sec="1197436163"/>
        <to usec="0" sec="1197436166"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="41.232.47.112" dst_ip="208.142.36.167" src_port="80" dst_port="2007" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436158"/>
        <to usec="0" sec="1197436431"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.131.181.19"/>
        </slice>
        <from usec="0" sec="1197435718"/>
        <to usec="0" sec="1197435988"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.248.216.228" dst_ip="198.111.223.236" src_port="1657" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436420"/>
        <to usec="0" sec="1197436477"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.232.7"/>
        </slice>
        <from usec="0" sec="1197436279"/>
        <to usec="0" sec="1197436282"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="170.248.220.67" dst_ip="201.7.130.89" src_port="4250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436463"/>
        <to usec="0" sec="1197436472"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.47.38.138" dst_ip="170.248.182.198" src_port="80" dst_port="1059" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436290"/>
        <to usec="0" sec="1197436293"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.6.232.166" dst_ip="220.55.206.112" src_port="1446" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436070"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.238.153" dst_ip="198.119.17.168" src_port="2500" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436450"/>
        <to usec="0" sec="1197436479"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.216.215.193" dst_ip="203.84.2.49" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436473"/>
        <to usec="0" sec="1197436475"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.29.123.102"/>
        </slice>
        <from usec="0" sec="1197436158"/>
        <to usec="0" sec="1197436160"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.246.68"/>
        </slice>
        <from usec="0" sec="1197435640"/>
        <to usec="0" sec="1197435666"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.248.64.2"/>
        </slice>
        <from usec="0" sec="1197435728"/>
        <to usec="0" sec="1197436469"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="209.41.9.18" dst_ip="41.232.46.91" src_port="37280" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436450"/>
        <to usec="0" sec="1197436457"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.73.221"/>
        </slice>
        <from usec="0" sec="1197436350"/>
        <to usec="0" sec="1197436355"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.248.50.161"/>
        </slice>
        <from usec="0" sec="1197435652"/>
        <to usec="0" sec="1197436477"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.32.4.10"/>
        </slice>
        <from usec="0" sec="1197436284"/>
        <to usec="0" sec="1197436294"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.6.156.62" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436439"/>
        <to usec="0" sec="1197436479"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="24.22.196.225"/>
        </slice>
        <from usec="0" sec="1197436464"/>
        <to usec="0" sec="1197436477"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.142.41.196"/>
        </slice>
        <from usec="0" sec="1197436437"/>
        <to usec="0" sec="1197436441"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.137.129.100"/>
        </slice>
        <from usec="0" sec="1197435603"/>
        <to usec="0" sec="1197435606"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.6.205.244"/>
        </slice>
        <from usec="0" sec="1197436345"/>
        <to usec="0" sec="1197436370"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.96.20"/>
        </slice>
        <from usec="0" sec="1197436158"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="30.154.134.147"/>
        </slice>
        <from usec="0" sec="1197435620"/>
        <to usec="0" sec="1197436438"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.71.196.103"/>
        </slice>
        <from usec="0" sec="1197436478"/>
        <to usec="0" sec="1197436482"/>
    </anomaly>
    <anomaly type="notice" value="0.748662,1.305830,503,1 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.41.6.127" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741676,1.348540,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="135.192.76.12" dst_ip="199.150.144.202" dst_port="25"/>
            <filter src_ip="135.192.76.12" dst_ip="199.150.144.150" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="208.32.126.131" dst_ip="208.32.126.131" proto="udp"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436500"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.209.9.93" dst_ip="128.71.236.108" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436469"/>
        <to usec="0" sec="1197436473"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.123.108.239" dst_ip="213.123.108.239" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436163"/>
        <to usec="0" sec="1197436497"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.216.172.144"/>
        </slice>
        <from usec="0" sec="1197436200"/>
        <to usec="0" sec="1197436203"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.71.154.194" dst_ip="197.71.170.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436179"/>
        <to usec="0" sec="1197436202"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.96.160"/>
        </slice>
        <from usec="0" sec="1197436427"/>
        <to usec="0" sec="1197436485"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.116.162"/>
        </slice>
        <from usec="0" sec="1197436412"/>
        <to usec="0" sec="1197436416"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.143.160"/>
        </slice>
        <from usec="0" sec="1197435637"/>
        <to usec="0" sec="1197435641"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.246.170"/>
        </slice>
        <from usec="0" sec="1197436464"/>
        <to usec="0" sec="1197436468"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="178.96.178.96" dst_ip="135.198.163.60" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436187"/>
        <to usec="0" sec="1197436206"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.71.14.196" dst_ip="203.84.2.228" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436448"/>
        <to usec="0" sec="1197436469"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.6.209.155"/>
        </slice>
        <from usec="0" sec="1197435738"/>
        <to usec="0" sec="1197435741"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.143.115"/>
        </slice>
        <from usec="0" sec="1197436044"/>
        <to usec="0" sec="1197436047"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.137.70.9" dst_ip="209.41.4.242" dst_port="3127" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436165"/>
        <to usec="0" sec="1197436167"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.216.175.35" dst_ip="198.66.27.21" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436160"/>
        <to usec="0" sec="1197436163"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.17.210"/>
        </slice>
        <from usec="0" sec="1197435669"/>
        <to usec="0" sec="1197435680"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.196.103" dst_ip="209.35.36.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435626"/>
        <to usec="0" sec="1197436471"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="144.128.9.91" dst_ip="204.137.88.7" dst_port="443"/>
            <filter src_ip="144.128.9.86" dst_ip="204.137.88.7" dst_port="443"/>
        </slice>
        <from usec="0" sec="1197436163"/>
        <to usec="0" sec="1197436460"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="202.30.214.35" src_port="54009" proto="udp"/>
        </slice>
        <from usec="0" sec="1197435808"/>
        <to usec="0" sec="1197435810"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="209.186.16.183" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436158"/>
        <to usec="0" sec="1197436206"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="208.47.170.195" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197435706"/>
        <to usec="0" sec="1197435719"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,501,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="80.168.179.116"/>
        </slice>
        <from usec="0" sec="1197435667"/>
        <to usec="0" sec="1197435670"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.142.61.107"/>
        </slice>
        <from usec="0" sec="1197435671"/>
        <to usec="0" sec="1197435673"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.232.46.74" dst_ip="128.71.197.196" src_port="80" dst_port="2457"/>
            <filter src_ip="41.232.46.74" dst_ip="128.71.197.196" src_port="80" dst_port="2456"/>
        </slice>
        <from usec="0" sec="1197436298"/>
        <to usec="0" sec="1197436301"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.197.44" dst_ip="41.232.46.88" src_port="3427" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436275"/>
        <to usec="0" sec="1197436278"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.216.213.181" dst_ip="196.173.181.64" src_port="2258" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436152"/>
        <to usec="0" sec="1197436164"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.236.78" dst_ip="26.32.12.190" src_port="3536" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436396"/>
        <to usec="0" sec="1197436435"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.71.241.148" dst_ip="199.150.200.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435721"/>
        <to usec="0" sec="1197436468"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.96.179" dst_ip="197.133.147.56" src_port="3438" dst_port="80"/>
            <filter src_ip="128.71.96.179" dst_ip="197.133.147.56" src_port="3434" dst_port="80"/>
            <filter src_ip="128.71.96.179" dst_ip="195.9.118.245" src_port="53452" dst_port="14245"/>
            <filter src_ip="128.71.96.179" dst_ip="16.213.40.8" src_port="3425" dst_port="80"/>
            <filter src_ip="128.71.96.179" dst_ip="41.232.46.127" src_port="3442" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436441"/>
        <to usec="0" sec="1197436444"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="128.71.73.52" dst_ip="81.113.230.11" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435869"/>
        <to usec="0" sec="1197435877"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.241.172" dst_ip="199.150.244.132" src_port="1548" dst_port="80"/>
            <filter src_ip="128.71.241.172" dst_ip="199.150.244.132" src_port="1547" dst_port="80"/>
            <filter src_ip="128.71.241.172" dst_ip="198.66.27.2" src_port="1541" dst_port="80"/>
            <filter src_ip="128.71.241.172" dst_ip="26.32.4.32" src_port="1552" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436151"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.135.93" dst_ip="199.150.240.14" src_port="1735" dst_port="80"/>
            <filter src_ip="128.71.135.93" dst_ip="213.141.209.137" src_port="1359" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436151"/>
        <to usec="0" sec="1197436153"/>
    </anomaly>
    <anomaly type="notice" value="0.867626,1.509580,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.6.232.166" dst_ip="220.55.206.112" src_port="1459" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1197436159"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.216.138.99" dst_ip="26.32.10.42" src_port="1688" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436420"/>
        <to usec="0" sec="1197436422"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,901,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.142.41.226" dst_ip="198.66.27.2" dst_port="80"/>
            <filter src_ip="208.142.41.226" dst_ip="199.150.240.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436436"/>
        <to usec="0" sec="1197436452"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.197.153" dst_ip="198.66.27.5" dst_port="80"/>
            <filter src_ip="128.71.197.153" dst_ip="16.213.40.141" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436152"/>
        <to usec="0" sec="1197436479"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.132.43" dst_ip="26.32.12.162" src_port="3244" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436422"/>
        <to usec="0" sec="1197436466"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="128.71.234.40" dst_ip="209.64.217.134" src_port="1749" dst_port="80"/>
            <filter src_ip="128.71.234.40" dst_ip="209.64.217.134" src_port="1748" dst_port="80"/>
            <filter src_ip="128.71.234.40" dst_ip="209.64.217.134" src_port="1747" dst_port="80"/>
            <filter src_ip="128.71.234.40" dst_ip="209.64.217.134" src_port="1746" dst_port="80"/>
            <filter src_ip="128.71.234.40" dst_ip="209.64.217.134" src_port="1745" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436438"/>
        <to usec="0" sec="1197436440"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.248.232.105" dst_ip="75.84.180.37" src_port="1222" dst_port="110"/>
        </slice>
        <from usec="0" sec="1197436427"/>
        <to usec="0" sec="1197436429"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.84.180" dst_ip="198.66.27.21" src_port="1270" dst_port="80"/>
            <filter src_ip="128.71.84.180" dst_ip="198.66.27.21" src_port="1268" dst_port="80"/>
            <filter src_ip="128.71.84.180" dst_ip="26.32.6.96" src_port="1287" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436427"/>
        <to usec="0" sec="1197436429"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.216.25.183" dst_ip="41.232.46.101" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436422"/>
        <to usec="0" sec="1197436428"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.154.152.132" dst_ip="209.41.4.254" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1197436468"/>
        <to usec="0" sec="1197436477"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.233.154" dst_ip="41.232.46.3" dst_port="80"/>
            <filter src_ip="128.71.233.154" dst_ip="81.97.58.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436436"/>
        <to usec="0" sec="1197436439"/>
    </anomaly>
    <anomaly type="notice" value="0.867626,1.509580,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="208.32.126.131" dst_ip="208.32.126.131" proto="udp"/>
        </slice>
        <from usec="0" sec="1197435637"/>
        <to usec="0" sec="1197436497"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="84.149.106.86" dst_port="445"/>
            <filter src_ip="84.149.106.86" dst_port="139"/>
        </slice>
        <from usec="0" sec="1197436114"/>
        <to usec="0" sec="1197436161"/>
    </anomaly>
    <anomaly type="notice" value="0.891792,1.485000,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="23.17.192.90" src_port="5900"/>
        </slice>
        <from usec="0" sec="1197436293"/>
        <to usec="0" sec="1197436321"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.71.14.223"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435685"/>
    </anomaly>
    <anomaly type="notice" value="0.947010,1.423650,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.125.206.148" src_port="53"/>
            <filter src_ip="135.216.155.237" src_port="53"/>
            <filter src_ip="135.216.155.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436456"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.248.242.101"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435708"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.74.57.136"/>
        </slice>
        <from usec="0" sec="1197435605"/>
        <to usec="0" sec="1197435886"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.71.17.198"/>
        </slice>
        <from usec="0" sec="1197435605"/>
        <to usec="0" sec="1197435705"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.216.214.54"/>
        </slice>
        <from usec="0" sec="1197435611"/>
        <to usec="0" sec="1197435699"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.216.68.13"/>
        </slice>
        <from usec="0" sec="1197435623"/>
        <to usec="0" sec="1197435675"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.216.170.243"/>
        </slice>
        <from usec="0" sec="1197435639"/>
        <to usec="0" sec="1197435708"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="19.131.148.125"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435611"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="26.130.146.114"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435798"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.17.136" dst_ip="203.84.2.49" dst_port="80"/>
            <filter src_ip="128.71.17.136" dst_ip="203.84.2.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435798"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="28.66.2.190"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435789"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="24.22.197.115"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435798"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="135.216.82.86"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197435789"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,002,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.41.11.72"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197435798"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.207.101.117"/>
        </slice>
        <from usec="0" sec="1197435605"/>
        <to usec="0" sec="1197435797"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.209.39"/>
        </slice>
        <from usec="0" sec="1197435608"/>
        <to usec="0" sec="1197435641"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="199.149.102.28"/>
        </slice>
        <from usec="0" sec="1197435612"/>
        <to usec="0" sec="1197435713"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.248.43.115"/>
        </slice>
        <from usec="0" sec="1197435625"/>
        <to usec="0" sec="1197435788"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.26.32.175"/>
        </slice>
        <from usec="0" sec="1197435658"/>
        <to usec="0" sec="1197435711"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.119.17.10"/>
        </slice>
        <from usec="0" sec="1197435721"/>
        <to usec="0" sec="1197435738"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.150.203.124"/>
        </slice>
        <from usec="0" sec="1197435756"/>
        <to usec="0" sec="1197435795"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.248.149.73"/>
        </slice>
        <from usec="0" sec="1197435757"/>
        <to usec="0" sec="1197435765"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="209.132.107.142"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.151.21.12"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.248.79.12"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435880"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.0.34.203"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435887"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="135.216.135.66"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="209.41.18.169"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.71.134.201"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197435872"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.234.115"/>
        </slice>
        <from usec="0" sec="1197435603"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.71.73.224"/>
        </slice>
        <from usec="0" sec="1197435604"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="80.153.240.215"/>
        </slice>
        <from usec="0" sec="1197435608"/>
        <to usec="0" sec="1197435883"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.248.24.179"/>
        </slice>
        <from usec="0" sec="1197435614"/>
        <to usec="0" sec="1197435869"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.16.11"/>
        </slice>
        <from usec="0" sec="1197435620"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="82.133.102.105"/>
        </slice>
        <from usec="0" sec="1197435659"/>
        <to usec="0" sec="1197435886"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.29.99.19"/>
        </slice>
        <from usec="0" sec="1197435703"/>
        <to usec="0" sec="1197435787"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.240.248.158"/>
        </slice>
        <from usec="0" sec="1197435746"/>
        <to usec="0" sec="1197435787"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.83.132.120"/>
        </slice>
        <from usec="0" sec="1197435774"/>
        <to usec="0" sec="1197435877"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="196.106.26.233"/>
        </slice>
        <from usec="0" sec="1197435810"/>
        <to usec="0" sec="1197435884"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="139.23.12.142"/>
        </slice>
        <from usec="0" sec="1197435810"/>
        <to usec="0" sec="1197435885"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.208.34"/>
        </slice>
        <from usec="0" sec="1197435842"/>
        <to usec="0" sec="1197435883"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="212.84.85.208"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435978"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="129.192.207.250"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435975"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.41.6.88"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435978"/>
    </anomaly>
    <anomaly type="notice" value="0.484466,1.394700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.142.51.24" src_port="59912" dst_port="33434"/>
        </slice>
        <from usec="0" sec="1197436135"/>
        <to usec="0" sec="1197436137"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.45.82.45"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197435967"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.71.196.44"/>
        </slice>
        <from usec="0" sec="1197435613"/>
        <to usec="0" sec="1197435977"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.193.13.180"/>
        </slice>
        <from usec="0" sec="1197435627"/>
        <to usec="0" sec="1197435965"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.248.103.176"/>
        </slice>
        <from usec="0" sec="1197435654"/>
        <to usec="0" sec="1197435955"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.216.155.234" src_port="25"/>
            <filter src_ip="135.216.155.234" dst_port="25"/>
        </slice>
        <from usec="0" sec="1197435640"/>
        <to usec="0" sec="1197436490"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.157.94"/>
        </slice>
        <from usec="0" sec="1197435944"/>
        <to usec="0" sec="1197435972"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,502,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.188.129.245" dst_port="22"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436481"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="202.73.28.89"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.34.97.2"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.32.125.181"/>
        </slice>
        <from usec="0" sec="1197435604"/>
        <to usec="0" sec="1197436067"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="26.74.145.223"/>
        </slice>
        <from usec="0" sec="1197435608"/>
        <to usec="0" sec="1197436058"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.41.8.146"/>
        </slice>
        <from usec="0" sec="1197435609"/>
        <to usec="0" sec="1197436067"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.150.240.244"/>
        </slice>
        <from usec="0" sec="1197436101"/>
        <to usec="0" sec="1197436154"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.192.148.24"/>
        </slice>
        <from usec="0" sec="1197435941"/>
        <to usec="0" sec="1197435944"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="83.110.229.201"/>
        </slice>
        <from usec="0" sec="1197436001"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="212.38.38.1"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436158"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.80.26.227"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436158"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.192.76.154"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436154"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.13.38"/>
        </slice>
        <from usec="0" sec="1197435602"/>
        <to usec="0" sec="1197436336"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.6.130.68"/>
        </slice>
        <from usec="0" sec="1197435603"/>
        <to usec="0" sec="1197436144"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.147.107.230"/>
        </slice>
        <from usec="0" sec="1197435611"/>
        <to usec="0" sec="1197436139"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.22.196.1"/>
        </slice>
        <from usec="0" sec="1197435614"/>
        <to usec="0" sec="1197436124"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.248.151.46"/>
        </slice>
        <from usec="0" sec="1197435656"/>
        <to usec="0" sec="1197436153"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.136.209.117"/>
        </slice>
        <from usec="0" sec="1197435874"/>
        <to usec="0" sec="1197436068"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="81.40.170.33"/>
        </slice>
        <from usec="0" sec="1197435921"/>
        <to usec="0" sec="1197436158"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.208.41.104"/>
        </slice>
        <from usec="0" sec="1197435968"/>
        <to usec="0" sec="1197436099"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.168.2.24"/>
        </slice>
        <from usec="0" sec="1197436103"/>
        <to usec="0" sec="1197436158"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.142.225.43" dst_ip="209.83.132.9" src_port="1364" dst_port="80"/>
            <filter src_ip="208.142.225.43" dst_ip="209.83.132.9" src_port="1363" dst_port="80"/>
            <filter src_ip="208.142.225.43" dst_ip="209.83.132.9" src_port="1362" dst_port="80"/>
            <filter src_ip="208.142.225.43" dst_ip="40.146.184.101" src_port="1352" dst_port="10927"/>
            <filter src_ip="208.142.225.43" dst_ip="40.146.184.101" src_port="1351" dst_port="10927"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436248"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.71.16.182"/>
        </slice>
        <from usec="0" sec="1197435608"/>
        <to usec="0" sec="1197436241"/>
    </anomaly>
    <anomaly type="notice" value="0.947010,1.423650,999,1 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.142.36.221"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436427"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.120.230.192"/>
        </slice>
        <from usec="0" sec="1197435644"/>
        <to usec="0" sec="1197436206"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.6.157.148"/>
        </slice>
        <from usec="0" sec="1197436046"/>
        <to usec="0" sec="1197436242"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.120.228.49"/>
        </slice>
        <from usec="0" sec="1197436169"/>
        <to usec="0" sec="1197436240"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.169.157.102"/>
        </slice>
        <from usec="0" sec="1197436207"/>
        <to usec="0" sec="1197436248"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.53.30.187"/>
        </slice>
        <from usec="0" sec="1197436226"/>
        <to usec="0" sec="1197436238"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.98.173.6"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436338"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.71.137.8" dst_ip="24.202.59.231" src_port="1382" dst_port="443"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436338"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.248.38.115"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436336"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.36.65.207"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436333"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="84.130.17.55"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436335"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.171.51.79"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197436337"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.71.6.149"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197436320"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.200.155"/>
        </slice>
        <from usec="0" sec="1197435602"/>
        <to usec="0" sec="1197436331"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.216.155.34" src_port="25"/>
            <filter src_ip="135.216.155.34" dst_port="25"/>
        </slice>
        <from usec="0" sec="1197435603"/>
        <to usec="0" sec="1197436487"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.131.181.100"/>
        </slice>
        <from usec="0" sec="1197435606"/>
        <to usec="0" sec="1197436335"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="26.32.14.129"/>
        </slice>
        <from usec="0" sec="1197435803"/>
        <to usec="0" sec="1197436219"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="203.69.184.210"/>
        </slice>
        <from usec="0" sec="1197436099"/>
        <to usec="0" sec="1197436301"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.71.205.48" dst_ip="117.195.98.206" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436148"/>
        <to usec="0" sec="1197436433"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="135.216.85.58"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436424"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="85.58.136.47"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436409"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="199.113.69.94"/>
        </slice>
        <from usec="0" sec="1197435602"/>
        <to usec="0" sec="1197436426"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.5.56.23"/>
        </slice>
        <from usec="0" sec="1197435603"/>
        <to usec="0" sec="1197436424"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.41.15.216"/>
        </slice>
        <from usec="0" sec="1197435605"/>
        <to usec="0" sec="1197436417"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="29.245.50.183"/>
        </slice>
        <from usec="0" sec="1197435607"/>
        <to usec="0" sec="1197436423"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.71.231.113"/>
        </slice>
        <from usec="0" sec="1197435609"/>
        <to usec="0" sec="1197436423"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="202.15.112.43"/>
        </slice>
        <from usec="0" sec="1197435615"/>
        <to usec="0" sec="1197436425"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.177.192.22"/>
        </slice>
        <from usec="0" sec="1197435631"/>
        <to usec="0" sec="1197436427"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.248.218.64"/>
        </slice>
        <from usec="0" sec="1197435665"/>
        <to usec="0" sec="1197436410"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.108.153.44"/>
        </slice>
        <from usec="0" sec="1197436039"/>
        <to usec="0" sec="1197436269"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.230.107.30"/>
        </slice>
        <from usec="0" sec="1197436287"/>
        <to usec="0" sec="1197436316"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.234.36"/>
        </slice>
        <from usec="0" sec="1197436310"/>
        <to usec="0" sec="1197436428"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="81.6.26.232" dst_ip="170.248.24.136" src_port="44589" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435612"/>
        <to usec="0" sec="1197435650"/>
    </anomaly>
    <anomaly type="notice" value="0.924289,1.449270,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="128.71.157.177" dst_port="80"/>
            <filter dst_ip="41.232.46.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436158"/>
    </anomaly>
    <anomaly type="notice" value="0.924289,1.449270,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="135.216.179.12" dst_port="65013"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435888"/>
    </anomaly>
    <anomaly type="notice" value="0.924289,1.449270,999,0 0 0 1 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="1.65.191.153" dst_ip="170.248.24.217" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436074"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.248.24.215"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.142.36.221"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.941497,1.462920,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="81.80.24.18"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.924289,1.449270,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.125.206.146" src_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435978"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="216.125.206.146" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.45.98.206" dst_port="12144"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="135.216.1.83" dst_ip="81.0.13.35" dst_port="53"/>
            <filter src_ip="135.216.1.104" dst_ip="81.0.13.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="17699" dst_port="137"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.64.50.26" dst_ip="208.32.126.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="81.80.24.18" src_port="1026" dst_port="137"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435646"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.32.126.138" src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436366"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="41.180.166.70"/>
        </slice>
        <from usec="0" sec="1197436050"/>
        <to usec="0" sec="1197436096"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.218.33.96"/>
        </slice>
        <from usec="0" sec="1197436050"/>
        <to usec="0" sec="1197436096"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="135.216.1.83" dst_ip="81.0.13.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197436320"/>
        <to usec="0" sec="1197436366"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="12.136.66.170"/>
        </slice>
        <from usec="0" sec="1197436410"/>
        <to usec="0" sec="1197436456"/>
    </anomaly>
    <anomaly type="notice" value="0.918639,1.487860,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.149.40.250" dst_ip="208.32.126.131" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197436410"/>
        <to usec="0" sec="1197436456"/>
    </anomaly>
    <anomaly type="notice" value="0.941497,1.462920,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.32.126.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436501"/>
    </anomaly>
    <anomaly type="notice" value="0.897610,1.446330,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="201.34.44.162" dst_ip="209.41.4.242"/>
            <filter dst_ip="209.41.4.242"/>
            <filter dst_ip="209.41.4.242"/>
            <filter src_ip="40.89.83.188" dst_ip="209.41.4.242" dst_port="3124"/>
            <filter src_ip="201.34.44.162"/>
        </slice>
        <from usec="0" sec="1197435661"/>
        <to usec="0" sec="1197436447"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.71.206.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741676,1.348540,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="128.71.204.73" dst_ip="203.84.6.81" dst_port="80"/>
            <filter src_ip="128.71.204.73" dst_ip="203.84.6.81" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741676,1.348540,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.128.135.234" dst_ip="209.64.217.134" dst_port="80"/>
            <filter src_ip="144.128.135.234" dst_ip="209.64.217.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.719706,1.333720,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="144.128.165.49" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.147.110.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="202.53.8.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.169.157.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="208.142.229.59" dst_ip="41.232.47.113" src_port="55183" dst_port="80"/>
            <filter src_ip="128.71.236.35" dst_ip="41.232.47.113" src_port="2415" dst_port="80"/>
            <filter src_ip="128.71.197.71" dst_ip="41.232.47.113" src_port="4929" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197436229"/>
        <to usec="0" sec="1197436307"/>
    </anomaly>
    <anomaly type="notice" value="0.495095,1.353450,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.142.228.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197436157"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.71.84.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="117.195.100.2" dst_ip="170.248.220.72" src_port="80" dst_port="1074"/>
            <filter src_ip="117.195.100.2" dst_ip="170.248.202.221" src_port="80" dst_port="4052"/>
            <filter src_ip="117.195.100.2" dst_ip="169.45.48.145" src_port="80" dst_port="63318"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741676,1.348540,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="41.232.47.65" dst_ip="170.248.216.196" src_port="80" dst_port="1260"/>
            <filter src_ip="41.232.47.65" dst_ip="170.248.216.196" src_port="80" dst_port="1234"/>
            <filter src_ip="41.232.46.102" dst_ip="170.248.216.196" src_port="80" dst_port="1215"/>
            <filter src_ip="41.232.46.102" dst_ip="170.248.216.196" src_port="80" dst_port="1214"/>
            <filter src_ip="41.232.47.81" dst_ip="170.248.216.196" src_port="80" dst_port="1273"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="197.209.52.56" dst_ip="208.142.40.53" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.20.145.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741676,1.348540,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="135.216.155.232" src_port="993"/>
            <filter src_ip="135.216.155.232" src_port="143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="213.45.5.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="208.142.41.198" dst_ip="201.64.194.209" dst_port="80"/>
            <filter src_ip="209.41.8.203" dst_ip="201.64.194.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="170.248.24.215" dst_ip="18.21.45.163"/>
            <filter src_ip="170.248.24.215" src_port="3127"/>
            <filter src_ip="170.248.24.215" src_port="3124"/>
            <filter src_ip="209.41.4.255" dst_ip="18.21.45.163"/>
            <filter src_ip="209.41.4.255" src_port="3127"/>
            <filter src_ip="209.41.4.255" src_port="3128"/>
            <filter dst_ip="18.21.45.163" src_port="3127"/>
            <filter dst_ip="18.21.45.163" src_port="3124"/>
            <filter dst_ip="18.21.45.163" src_port="3128"/>
        </slice>
        <from usec="0" sec="1197435600"/>
        <to usec="0" sec="1197435978"/>
    </anomaly>
    <anomaly type="notice" value="0.450112,1.380370,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="41.232.46.82" dst_ip="135.216.172.142" src_port="80"/>
        </slice>
        <from usec="0" sec="1197435601"/>
        <to usec="0" sec="1197435771"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="201.64.194.204" dst_ip="170.248.132.95" src_port="80" dst_port="1167"/>
            <filter src_ip="201.64.194.204" dst_ip="170.248.132.95" src_port="80" dst_port="1166"/>
            <filter src_ip="201.64.194.204" dst_ip="170.248.132.95" src_port="80" dst_port="1165"/>
            <filter src_ip="201.64.194.216" dst_ip="170.248.132.95" src_port="80" dst_port="1157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.712436,1.375560,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="16.213.40.141" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
