<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.195.165.113" src_port="59731" dst_port="53"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="152.131.12.148"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.144.221.24"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="152.131.1.153" dst_ip="214.134.156.214"/>
            <filter src_ip="152.131.1.153" dst_ip="214.134.156.135"/>
            <filter src_ip="152.131.1.153" dst_port="25"/>
            <filter dst_ip="214.134.156.214" dst_port="25"/>
            <filter dst_ip="214.134.156.135" dst_port="25"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="158.118.108.199"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="222.152.195.184" dst_ip="195.195.168.38"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.152.195.184" dst_ip="171.27.24.157"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.131.23.31"/>
        </slice>
        <from usec="0" sec="1199163870"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.131.22.55" dst_port="61364"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.131.35.145" dst_port="65013"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.131.20.27"/>
        </slice>
        <from usec="0" sec="1199163870"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.30.77.118"/>
        </slice>
        <from usec="0" sec="1199163870"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.162.53.236"/>
        </slice>
        <from usec="0" sec="1199163870"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="195.195.166.34"/>
        </slice>
        <from usec="0" sec="1199163870"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.131.156.84" src_port="32769" dst_port="53"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199164276"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.168.194.23"/>
        </slice>
        <from usec="0" sec="1199164365"/>
        <to usec="0" sec="1199164411"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.168.194.5"/>
        </slice>
        <from usec="0" sec="1199164365"/>
        <to usec="0" sec="1199164411"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.138.196.78"/>
        </slice>
        <from usec="0" sec="1199164365"/>
        <to usec="0" sec="1199164411"/>
    </anomaly>
    <anomaly type="notice" value="0.533758,0.895579,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="192.230.170.195"/>
        </slice>
        <from usec="0" sec="1199164365"/>
        <to usec="0" sec="1199164411"/>
    </anomaly>
    <anomaly type="notice" value="0.559496,0.862881,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="214.211.143.255"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.559496,0.862881,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="100.131.183.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.559496,0.862881,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.107.240.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163916"/>
    </anomaly>
    <anomaly type="notice" value="0.559496,0.862881,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="220.1.130.63"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
    <anomaly type="notice" value="0.559496,0.862881,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.118.95.1" dst_ip="38.17.169.162" src_port="25"/>
            <filter src_ip="158.118.95.1" dst_ip="38.17.169.162" dst_port="113"/>
        </slice>
        <from usec="0" sec="1199163600"/>
        <to usec="0" sec="1199163646"/>
    </anomaly>
</admd:annotation>
