<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.169" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521282"/>
        <to usec="0" sec="1204521293"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.78.144" dst_ip="46.50.167.148" src_port="56843" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520996"/>
        <to usec="0" sec="1204521001"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.161" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520483"/>
        <to usec="0" sec="1204521073"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.86.76" dst_ip="38.228.111.170" src_port="57744" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520667"/>
        <to usec="0" sec="1204520672"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.191" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520647"/>
        <to usec="0" sec="1204520651"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.190" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520964"/>
        <to usec="0" sec="1204520969"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.189" dst_ip="156.161.167.3" src_port="80" dst_port="2992" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520575"/>
        <to usec="0" sec="1204520876"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="83.191.139.251" dst_ip="164.232.169.233" src_port="80" dst_port="2005" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520575"/>
        <to usec="0" sec="1204520580"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.232.195.115"/>
        </slice>
        <from usec="0" sec="1204520752"/>
        <to usec="0" sec="1204520757"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="155.150.66.189" dst_ip="156.161.130.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520565"/>
        <to usec="0" sec="1204520621"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.184" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520806"/>
        <to usec="0" sec="1204520810"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.183.4.49" dst_ip="153.253.202.53" src_port="80" dst_port="50286" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520416"/>
        <to usec="0" sec="1204520549"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.103.101.86" dst_ip="36.110.88.89" src_port="80" dst_port="1368" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520709"/>
        <to usec="0" sec="1204520713"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="45.31.120.96" dst_ip="153.253.30.210" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520705"/>
        <to usec="0" sec="1204520708"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.49.157.121" dst_ip="156.161.181.58" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520522"/>
        <to usec="0" sec="1204520606"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.232.209.217" dst_ip="205.71.110.147" src_port="62620" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520405"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.130" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521202"/>
        <to usec="0" sec="1204521206"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.183.4.20" dst_ip="156.103.128.56" src_port="80" dst_port="37110" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521059"/>
        <to usec="0" sec="1204521284"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.54.229.220"/>
        </slice>
        <from usec="0" sec="1204520904"/>
        <to usec="0" sec="1204521196"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="84.247.69.65"/>
        </slice>
        <from usec="0" sec="1204521178"/>
        <to usec="0" sec="1204521183"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.8.99.36" dst_ip="153.253.218.68" src_port="80" dst_port="51147" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520953"/>
        <to usec="0" sec="1204521005"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.82.236" dst_ip="37.64.90.223" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520868"/>
        <to usec="0" sec="1204520878"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="71.52.213.129"/>
        </slice>
        <from usec="0" sec="1204520412"/>
        <to usec="0" sec="1204521299"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.20.81.111"/>
        </slice>
        <from usec="0" sec="1204520922"/>
        <to usec="0" sec="1204520926"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="33.26.244.21" dst_ip="153.253.77.15" src_port="4039" dst_port="17772" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520532"/>
        <to usec="0" sec="1204521217"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.16.238.56"/>
        </slice>
        <from usec="0" sec="1204520670"/>
        <to usec="0" sec="1204520673"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.82.224" dst_ip="208.136.3.40" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521211"/>
        <to usec="0" sec="1204521219"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.103.45.231"/>
        </slice>
        <from usec="0" sec="1204520968"/>
        <to usec="0" sec="1204520973"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.56.4.86" dst_ip="197.33.221.1" src_port="61836" dst_port="64833" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521013"/>
        <to usec="0" sec="1204521033"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.33.208.153" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204521273"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.66.146.202" dst_ip="36.56.9.115" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520421"/>
        <to usec="0" sec="1204521254"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.5.194" dst_ip="121.209.89.24" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521037"/>
        <to usec="0" sec="1204521142"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.89.4" dst_ip="46.89.105.119" src_port="80" dst_port="58690" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520895"/>
        <to usec="0" sec="1204520898"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.124.173.164" dst_ip="153.253.106.82" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520634"/>
        <to usec="0" sec="1204520638"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.116.185" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204521262"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="59.225.175.124" dst_ip="197.33.220.85" src_port="2472" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521094"/>
        <to usec="0" sec="1204521097"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.9.18.82" dst_ip="197.33.211.44" src_port="53745" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520714"/>
        <to usec="0" sec="1204520717"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.147.0.32" dst_ip="197.33.222.11" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520501"/>
        <to usec="0" sec="1204520504"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.76.228.48"/>
        </slice>
        <from usec="0" sec="1204520929"/>
        <to usec="0" sec="1204520938"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.253.88.4"/>
        </slice>
        <from usec="0" sec="1204521208"/>
        <to usec="0" sec="1204521296"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="153.253.99.49" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520572"/>
        <to usec="0" sec="1204521252"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.4.58" dst_ip="200.171.35.89" src_port="1057" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521215"/>
        <to usec="0" sec="1204521296"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="84.3.152.18" dst_ip="197.33.196.225" src_port="80" dst_port="34168" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521197"/>
        <to usec="0" sec="1204521282"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="33.194.180.137"/>
        </slice>
        <from usec="0" sec="1204520579"/>
        <to usec="0" sec="1204520583"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.232.173.133" dst_ip="36.142.101.37" src_port="54665" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521192"/>
        <to usec="0" sec="1204521292"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="153.253.149.76"/>
        </slice>
        <from usec="0" sec="1204520586"/>
        <to usec="0" sec="1204520598"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.89.122.193"/>
        </slice>
        <from usec="0" sec="1204520938"/>
        <to usec="0" sec="1204520946"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.48.212.152" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521175"/>
        <to usec="0" sec="1204521179"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.48.212.156" dst_ip="153.253.86.14" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520887"/>
        <to usec="0" sec="1204520938"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.161.233.193" dst_ip="50.138.80.242" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520594"/>
        <to usec="0" sec="1204521283"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.237.144" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521269"/>
        <to usec="0" sec="1204521273"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.149.117" dst_ip="215.1.37.157" src_port="1443" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520444"/>
        <to usec="0" sec="1204521153"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.56.4.0" dst_ip="153.253.252.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520564"/>
        <to usec="0" sec="1204521110"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.29.32.50" dst_ip="164.232.35.133" src_port="995" dst_port="51211" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520498"/>
        <to usec="0" sec="1204520557"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.71.122.17" dst_ip="153.253.237.120" src_port="80" dst_port="1087" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520941"/>
        <to usec="0" sec="1204520969"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.161.181.81"/>
        </slice>
        <from usec="0" sec="1204521215"/>
        <to usec="0" sec="1204521219"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.232.169.141" dst_ip="223.187.211.249" src_port="3678" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520479"/>
        <to usec="0" sec="1204520595"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.108.112.180"/>
        </slice>
        <from usec="0" sec="1204520872"/>
        <to usec="0" sec="1204520876"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.20.211.190"/>
        </slice>
        <from usec="0" sec="1204521013"/>
        <to usec="0" sec="1204521017"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.33.212.100" dst_ip="42.140.216.19" src_port="6970" dst_port="1671" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520575"/>
        <to usec="0" sec="1204521286"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.237.32" dst_ip="214.29.4.127" src_port="1747" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521155"/>
        <to usec="0" sec="1204521158"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.253.248.96"/>
        </slice>
        <from usec="0" sec="1204521080"/>
        <to usec="0" sec="1204521084"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.103.160.41" dst_ip="215.1.42.17" src_port="56531" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204521296"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.29.33.96"/>
        </slice>
        <from usec="0" sec="1204521229"/>
        <to usec="0" sec="1204521233"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.192.174.40" dst_ip="196.25.117.180" src_port="4915" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520963"/>
        <to usec="0" sec="1204521143"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.154.155.171" dst_ip="153.253.66.54" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520647"/>
        <to usec="0" sec="1204520658"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.218.68" dst_ip="200.8.99.36" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520939"/>
        <to usec="0" sec="1204521001"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.232.101.16"/>
        </slice>
        <from usec="0" sec="1204520473"/>
        <to usec="0" sec="1204520481"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.71.13.9"/>
        </slice>
        <from usec="0" sec="1204520806"/>
        <to usec="0" sec="1204520810"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.88.216" dst_ip="12.136.24.1" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520448"/>
        <to usec="0" sec="1204520852"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.232.101.61" dst_ip="205.71.110.148" src_port="1063" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520661"/>
        <to usec="0" sec="1204520801"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.25.148.10"/>
        </slice>
        <from usec="0" sec="1204521225"/>
        <to usec="0" sec="1204521230"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.237.120" dst_ip="205.71.122.17" src_port="1087" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520941"/>
        <to usec="0" sec="1204520983"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.69.123.140" dst_ip="156.103.74.95" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520550"/>
        <to usec="0" sec="1204520882"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.253.90.66"/>
        </slice>
        <from usec="0" sec="1204521232"/>
        <to usec="0" sec="1204521237"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.232.195.115"/>
        </slice>
        <from usec="0" sec="1204521013"/>
        <to usec="0" sec="1204521017"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,501,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.80.205.3" dst_ip="166.218.56.115" src_port="21"/>
        </slice>
        <from usec="0" sec="1204520586"/>
        <to usec="0" sec="1204520703"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="164.232.94.121" dst_ip="164.232.94.121" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520894"/>
        <to usec="0" sec="1204521201"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.253.212.252"/>
        </slice>
        <from usec="0" sec="1204521145"/>
        <to usec="0" sec="1204521149"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="153.253.86.14" dst_ip="153.253.86.14" proto="udp"/>
        </slice>
        <from usec="0" sec="1204520433"/>
        <to usec="0" sec="1204521299"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="38.42.72.218"/>
        </slice>
        <from usec="0" sec="1204521192"/>
        <to usec="0" sec="1204521196"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.233.148.9" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521142"/>
        <to usec="0" sec="1204521206"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.113.163.192" dst_ip="153.253.69.192" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520580"/>
        <to usec="0" sec="1204520598"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.44.193"/>
        </slice>
        <from usec="0" sec="1204521141"/>
        <to usec="0" sec="1204521146"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.99.166" dst_ip="215.38.247.47" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520776"/>
        <to usec="0" sec="1204520780"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.101.134.112" dst_ip="153.253.233.233" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521271"/>
        <to usec="0" sec="1204521273"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.81.163.190" dst_ip="153.253.20.10" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521135"/>
        <to usec="0" sec="1204521264"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="153.253.137.229"/>
        </slice>
        <from usec="0" sec="1204520887"/>
        <to usec="0" sec="1204521129"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="156.161.209.92"/>
        </slice>
        <from usec="0" sec="1204520497"/>
        <to usec="0" sec="1204520784"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.154.251.125" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520872"/>
        <to usec="0" sec="1204520875"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.23.80" dst_ip="195.106.14.208" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521032"/>
        <to usec="0" sec="1204521043"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.20.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521102"/>
        <to usec="0" sec="1204521260"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.116.169"/>
        </slice>
        <from usec="0" sec="1204520861"/>
        <to usec="0" sec="1204520902"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.120.164.68" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520429"/>
        <to usec="0" sec="1204520656"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.232.169.49" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520932"/>
        <to usec="0" sec="1204520936"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.4.60"/>
        </slice>
        <from usec="0" sec="1204520657"/>
        <to usec="0" sec="1204521284"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.5.176" dst_ip="71.48.239.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520528"/>
        <to usec="0" sec="1204520541"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.20.10" dst_ip="167.81.163.190" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521134"/>
        <to usec="0" sec="1204521139"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.25.98.253"/>
        </slice>
        <from usec="0" sec="1204520934"/>
        <to usec="0" sec="1204521135"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.51.220.157"/>
        </slice>
        <from usec="0" sec="1204521205"/>
        <to usec="0" sec="1204521209"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.33.215.124"/>
        </slice>
        <from usec="0" sec="1204520590"/>
        <to usec="0" sec="1204520600"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.132.207" dst_ip="223.187.211.1" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520579"/>
        <to usec="0" sec="1204520732"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.65.82" dst_ip="214.238.75.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520511"/>
        <to usec="0" sec="1204520515"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.70.225"/>
        </slice>
        <from usec="0" sec="1204520561"/>
        <to usec="0" sec="1204520606"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.95.194"/>
        </slice>
        <from usec="0" sec="1204520748"/>
        <to usec="0" sec="1204520753"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.101.3.246"/>
        </slice>
        <from usec="0" sec="1204520787"/>
        <to usec="0" sec="1204520792"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.232.168.15"/>
        </slice>
        <from usec="0" sec="1204521242"/>
        <to usec="0" sec="1204521247"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="156.103.129.72" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204520906"/>
        <to usec="0" sec="1204521179"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.16.238.94" src_port="25"/>
            <filter dst_ip="196.16.238.94" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521280"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.192.175"/>
        </slice>
        <from usec="0" sec="1204520508"/>
        <to usec="0" sec="1204520512"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.33.201.88"/>
        </slice>
        <from usec="0" sec="1204521185"/>
        <to usec="0" sec="1204521273"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="85.232.13.117" src_port="1027" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1204520597"/>
        <to usec="0" sec="1204520602"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.95.193.23" src_port="54750" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1204520806"/>
        <to usec="0" sec="1204520808"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.136.245.181" src_port="1027" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1204520496"/>
        <to usec="0" sec="1204520510"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.16.198.22" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520451"/>
        <to usec="0" sec="1204520465"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="4.112.105.182" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1204521159"/>
        <to usec="0" sec="1204521242"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="83.232.148.27" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1204520926"/>
        <to usec="0" sec="1204520929"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.144.34.137"/>
        </slice>
        <from usec="0" sec="1204520876"/>
        <to usec="0" sec="1204520880"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.4.108"/>
        </slice>
        <from usec="0" sec="1204521134"/>
        <to usec="0" sec="1204521139"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.128.196.22"/>
        </slice>
        <from usec="0" sec="1204521026"/>
        <to usec="0" sec="1204521031"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.66.52"/>
        </slice>
        <from usec="0" sec="1204520553"/>
        <to usec="0" sec="1204520557"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.115.80"/>
        </slice>
        <from usec="0" sec="1204520705"/>
        <to usec="0" sec="1204520710"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.18.69.36"/>
        </slice>
        <from usec="0" sec="1204521155"/>
        <to usec="0" sec="1204521159"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.33.220.38"/>
        </slice>
        <from usec="0" sec="1204520996"/>
        <to usec="0" sec="1204521001"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.140.216"/>
        </slice>
        <from usec="0" sec="1204520568"/>
        <to usec="0" sec="1204520572"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.232.199.43"/>
        </slice>
        <from usec="0" sec="1204520996"/>
        <to usec="0" sec="1204521001"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="156.161.160.213"/>
        </slice>
        <from usec="0" sec="1204520688"/>
        <to usec="0" sec="1204520693"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.107.106.57"/>
        </slice>
        <from usec="0" sec="1204521282"/>
        <to usec="0" sec="1204521286"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.124.56.23"/>
        </slice>
        <from usec="0" sec="1204520494"/>
        <to usec="0" sec="1204520498"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.38.244.210"/>
        </slice>
        <from usec="0" sec="1204520833"/>
        <to usec="0" sec="1204520837"/>
    </anomaly>
    <anomaly type="notice" value="0.475446,0.879696,002,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="39.97.150.39"/>
        </slice>
        <from usec="0" sec="1204520522"/>
        <to usec="0" sec="1204520526"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="156.103.144.97"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.3.159.115"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.73.190.98"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520667"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.36.17.187"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.253.132.58"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="5.41.165.211"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.18.36.160"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.56.8.68"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520507"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="213.84.6.163" dst_ip="156.124.113.125" dst_port="80"/>
            <filter src_ip="213.84.6.160" dst_ip="156.124.113.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204520670"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.145.33.66"/>
        </slice>
        <from usec="0" sec="1204520452"/>
        <to usec="0" sec="1204520484"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.25.146.164"/>
        </slice>
        <from usec="0" sec="1204520473"/>
        <to usec="0" sec="1204520508"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.129.49.232"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.253.68.47"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520598"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.244.117.193"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520598"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.54.216.123"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520598"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.86.16"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204520559"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.120.145.76"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204520597"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.253.249.6" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520405"/>
        <to usec="0" sec="1204521156"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.253.30.201"/>
        </slice>
        <from usec="0" sec="1204520405"/>
        <to usec="0" sec="1204520594"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.81.132.8"/>
        </slice>
        <from usec="0" sec="1204520406"/>
        <to usec="0" sec="1204520482"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.98.144.249"/>
        </slice>
        <from usec="0" sec="1204520407"/>
        <to usec="0" sec="1204520596"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.31.120.96"/>
        </slice>
        <from usec="0" sec="1204520410"/>
        <to usec="0" sec="1204520566"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.253.70.224"/>
        </slice>
        <from usec="0" sec="1204520420"/>
        <to usec="0" sec="1204520597"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.20.81.111"/>
        </slice>
        <from usec="0" sec="1204520432"/>
        <to usec="0" sec="1204520454"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.114.193.63"/>
        </slice>
        <from usec="0" sec="1204520512"/>
        <to usec="0" sec="1204520543"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.85.144.167"/>
        </slice>
        <from usec="0" sec="1204520512"/>
        <to usec="0" sec="1204520580"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.64.171"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520636"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.234.30.227"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="48.143.220.99"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="222.76.180.252"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.137.162"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="61.193.181.108"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="5.36.9.208"/>
            <filter dst_ip="5.36.9.208" src_port="61234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520667"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.210.77.174"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.23.210.104"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.120.69.156"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.16.198.109"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="153.253.138.94"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204521047"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="4.215.21.187"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520674"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.25.145.110"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520685"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="139.77.83.241"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.56.2.59"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204520666"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.232.176.90"/>
        </slice>
        <from usec="0" sec="1204520422"/>
        <to usec="0" sec="1204520657"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.66.206.24"/>
        </slice>
        <from usec="0" sec="1204520422"/>
        <to usec="0" sec="1204520681"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.125.134.61"/>
        </slice>
        <from usec="0" sec="1204520424"/>
        <to usec="0" sec="1204520686"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.56.3.177"/>
        </slice>
        <from usec="0" sec="1204520426"/>
        <to usec="0" sec="1204520687"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.142.147.71"/>
        </slice>
        <from usec="0" sec="1204520445"/>
        <to usec="0" sec="1204520547"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="48.11.45.37"/>
        </slice>
        <from usec="0" sec="1204520454"/>
        <to usec="0" sec="1204520613"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.74.150.215"/>
        </slice>
        <from usec="0" sec="1204520761"/>
        <to usec="0" sec="1204520766"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="156.120.186.187"/>
        </slice>
        <from usec="0" sec="1204520489"/>
        <to usec="0" sec="1204520576"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.5.79.210"/>
        </slice>
        <from usec="0" sec="1204520502"/>
        <to usec="0" sec="1204520568"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.253.116.197"/>
        </slice>
        <from usec="0" sec="1204520503"/>
        <to usec="0" sec="1204520578"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="15.72.113.8"/>
        </slice>
        <from usec="0" sec="1204520512"/>
        <to usec="0" sec="1204520522"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.56.4.211" dst_ip="166.218.215.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520522"/>
        <to usec="0" sec="1204521075"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="63.18.83.170"/>
        </slice>
        <from usec="0" sec="1204520535"/>
        <to usec="0" sec="1204520586"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.109.203.205"/>
        </slice>
        <from usec="0" sec="1204520553"/>
        <to usec="0" sec="1204520560"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.145.108.251"/>
        </slice>
        <from usec="0" sec="1204520574"/>
        <to usec="0" sec="1204520614"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="57.162.200.51"/>
        </slice>
        <from usec="0" sec="1204520579"/>
        <to usec="0" sec="1204520710"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="57.135.90.218"/>
        </slice>
        <from usec="0" sec="1204520602"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="35.179.96.17"/>
        </slice>
        <from usec="0" sec="1204520635"/>
        <to usec="0" sec="1204520683"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.56.4.184"/>
        </slice>
        <from usec="0" sec="1204520643"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.84.39.3" dst_ip="197.33.208.224" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="197.33.220.197"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.43.39.204"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.88.6.196"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204520776"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.33.221.125" dst_ip="36.56.8.208" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.232.35.121"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520758"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.253.116.192"/>
        </slice>
        <from usec="0" sec="1204520411"/>
        <to usec="0" sec="1204520700"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.3.198.229"/>
        </slice>
        <from usec="0" sec="1204520414"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.120.84.239" dst_ip="222.238.113.228" dst_port="80"/>
            <filter src_ip="156.120.84.239" dst_ip="222.238.113.225" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520613"/>
        <to usec="0" sec="1204520727"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="51.199.205.68"/>
        </slice>
        <from usec="0" sec="1204520643"/>
        <to usec="0" sec="1204520688"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.84.16.17"/>
        </slice>
        <from usec="0" sec="1204520701"/>
        <to usec="0" sec="1204520760"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.87.83.19"/>
        </slice>
        <from usec="0" sec="1204520702"/>
        <to usec="0" sec="1204520777"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.120.155.234"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520820"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="4.4.28.250"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520854"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.115.242.143"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520865"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="197.33.219.65"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204520857"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.103.129.28"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520866"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.253.90.80"/>
        </slice>
        <from usec="0" sec="1204520406"/>
        <to usec="0" sec="1204520863"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.25.122.104" dst_ip="197.87.111.225" dst_port="80"/>
            <filter src_ip="196.25.122.104" dst_ip="197.87.111.249" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520412"/>
        <to usec="0" sec="1204520990"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.56.4.240"/>
        </slice>
        <from usec="0" sec="1204520895"/>
        <to usec="0" sec="1204520943"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.246.213.202"/>
        </slice>
        <from usec="0" sec="1204520419"/>
        <to usec="0" sec="1204520858"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="164.232.199.216" dst_ip="215.38.244.170" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520456"/>
        <to usec="0" sec="1204521247"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="82.148.55.55"/>
        </slice>
        <from usec="0" sec="1204520456"/>
        <to usec="0" sec="1204520867"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.192.132.53"/>
        </slice>
        <from usec="0" sec="1204520757"/>
        <to usec="0" sec="1204520769"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.120.52.192"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.200.196"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520887"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYNACKrp">
        <slice>
            <filter src_ip="197.33.216.37"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="197.33.219.194"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.97.79.201"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520956"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="156.103.147.100"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.196.164.221" dst_ip="197.33.222.199" dst_port="53"/>
            <filter src_ip="202.196.164.221" dst_ip="196.16.213.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520956"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.253.65.155"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204520957"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.0.228.45"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="166.224.2.21"/>
        </slice>
        <from usec="0" sec="1204520407"/>
        <to usec="0" sec="1204520948"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.154.176.80"/>
        </slice>
        <from usec="0" sec="1204520408"/>
        <to usec="0" sec="1204520820"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.80.205.74"/>
        </slice>
        <from usec="0" sec="1204520440"/>
        <to usec="0" sec="1204520947"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.136.106.177"/>
        </slice>
        <from usec="0" sec="1204520471"/>
        <to usec="0" sec="1204520906"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.103.103.132"/>
        </slice>
        <from usec="0" sec="1204520560"/>
        <to usec="0" sec="1204520896"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.35.67"/>
        </slice>
        <from usec="0" sec="1204520622"/>
        <to usec="0" sec="1204520955"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.158.165.184"/>
        </slice>
        <from usec="0" sec="1204520646"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.48.131.180" dst_ip="153.253.86.14" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520751"/>
        <to usec="0" sec="1204520858"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.213.78.156"/>
        </slice>
        <from usec="0" sec="1204520826"/>
        <to usec="0" sec="1204520873"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.113.59.150"/>
        </slice>
        <from usec="0" sec="1204520830"/>
        <to usec="0" sec="1204520871"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.216.252.59"/>
        </slice>
        <from usec="0" sec="1204520919"/>
        <to usec="0" sec="1204520958"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="153.253.137.224" dst_ip="51.190.200.105" src_port="61033" dst_port="1030"/>
            <filter src_ip="153.253.137.224" dst_ip="51.190.200.105"/>
        </slice>
        <from usec="0" sec="1204520929"/>
        <to usec="0" sec="1204521267"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.253.132.58" dst_ip="136.206.16.208" src_port="4152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521253"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="156.161.167.70" dst_ip="205.98.144.248" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.202.205.154"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521047"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.66.11.64"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521048"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.103.72.193"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204521048"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="84.128.75.206"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204521046"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="36.122.76.85"/>
        </slice>
        <from usec="0" sec="1204520415"/>
        <to usec="0" sec="1204521027"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.29.108.70"/>
        </slice>
        <from usec="0" sec="1204520500"/>
        <to usec="0" sec="1204520950"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="84.137.10.41"/>
        </slice>
        <from usec="0" sec="1204520793"/>
        <to usec="0" sec="1204520997"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.7.201.73"/>
        </slice>
        <from usec="0" sec="1204520889"/>
        <to usec="0" sec="1204520925"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.145.34.107"/>
        </slice>
        <from usec="0" sec="1204520957"/>
        <to usec="0" sec="1204521043"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.145.35.84"/>
        </slice>
        <from usec="0" sec="1204520997"/>
        <to usec="0" sec="1204521025"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.253.5.100"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521136"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="56.234.30.227"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.253.42.161" src_port="25"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="194.141.30.55"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.3.136.124"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521128"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.253.137.149"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.33.212.77" src_port="61062" dst_port="53"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="84.8.138.152" dst_ip="153.253.91.137" src_port="123" dst_port="123"/>
            <filter src_ip="84.82.86.173" dst_ip="153.253.91.137" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.253.144.22"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204521129"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.56.3.57"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204521080"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="33.69.237.45"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.33.208.41" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520406"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.213.36"/>
        </slice>
        <from usec="0" sec="1204520406"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.232.213.36" dst_ip="38.168.17.82" dst_port="80"/>
            <filter src_ip="164.232.213.36" dst_ip="37.65.160.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1204520406"/>
        <to usec="0" sec="1204521283"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="37.87.225.35" src_port="25"/>
            <filter dst_ip="196.16.198.22" src_port="25"/>
            <filter dst_ip="196.16.198.22" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.80.46.213"/>
        </slice>
        <from usec="0" sec="1204520409"/>
        <to usec="0" sec="1204521136"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.29.51.86" dst_ip="164.232.160.228" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204521136"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.25.116.1"/>
        </slice>
        <from usec="0" sec="1204520410"/>
        <to usec="0" sec="1204521137"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,999,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="153.253.250.161"/>
            <filter dst_ip="153.253.164.50" src_port="25"/>
            <filter dst_ip="153.253.164.50" dst_port="25"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521065"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="153.253.82.28"/>
        </slice>
        <from usec="0" sec="1204520413"/>
        <to usec="0" sec="1204521138"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.33.147.90"/>
        </slice>
        <from usec="0" sec="1204520560"/>
        <to usec="0" sec="1204521034"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="43.48.212.160"/>
        </slice>
        <from usec="0" sec="1204520593"/>
        <to usec="0" sec="1204521094"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.246.235.29"/>
        </slice>
        <from usec="0" sec="1204520723"/>
        <to usec="0" sec="1204521120"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.5.118.235"/>
        </slice>
        <from usec="0" sec="1204520875"/>
        <to usec="0" sec="1204521131"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="35.179.96.97"/>
        </slice>
        <from usec="0" sec="1204520925"/>
        <to usec="0" sec="1204521132"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="59.82.43.17"/>
        </slice>
        <from usec="0" sec="1204520931"/>
        <to usec="0" sec="1204521135"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.253.99.53" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520538"/>
        <to usec="0" sec="1204521238"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="60.18.152.75"/>
        </slice>
        <from usec="0" sec="1204521010"/>
        <to usec="0" sec="1204521042"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.16.243.20"/>
        </slice>
        <from usec="0" sec="1204521033"/>
        <to usec="0" sec="1204521037"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="37.73.69.55"/>
        </slice>
        <from usec="0" sec="1204521056"/>
        <to usec="0" sec="1204521125"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.209.68.142"/>
        </slice>
        <from usec="0" sec="1204521058"/>
        <to usec="0" sec="1204521078"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.109.168.9"/>
        </slice>
        <from usec="0" sec="1204521061"/>
        <to usec="0" sec="1204521076"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.238.74.81"/>
        </slice>
        <from usec="0" sec="1204521070"/>
        <to usec="0" sec="1204521227"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.212.28.117"/>
        </slice>
        <from usec="0" sec="1204521098"/>
        <to usec="0" sec="1204521137"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.25.114.103"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.253.77.15"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.25.107.153"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.97.50.211"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.17.140.86"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521211"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="153.253.232.69"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521220"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.25.123.55"/>
        </slice>
        <from usec="0" sec="1204520400"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.130.226.115"/>
        </slice>
        <from usec="0" sec="1204520402"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.36.18.179"/>
        </slice>
        <from usec="0" sec="1204520403"/>
        <to usec="0" sec="1204521224"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.232.169.50"/>
        </slice>
        <from usec="0" sec="1204520404"/>
        <to usec="0" sec="1204521204"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.253.89.8"/>
        </slice>
        <from usec="0" sec="1204520412"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450382,0.837734,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="156.103.74.95"/>
        </slice>
        <from usec="0" sec="1204520414"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="156.161.233.49"/>
        </slice>
        <from usec="0" sec="1204520424"/>
        <to usec="0" sec="1204521215"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="217.31.15.156"/>
        </slice>
        <from usec="0" sec="1204520424"/>
        <to usec="0" sec="1204521210"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.25.145.105"/>
        </slice>
        <from usec="0" sec="1204520424"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.18.69.133"/>
        </slice>
        <from usec="0" sec="1204520431"/>
        <to usec="0" sec="1204521214"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.120.118.8"/>
        </slice>
        <from usec="0" sec="1204520524"/>
        <to usec="0" sec="1204521224"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.236.164"/>
        </slice>
        <from usec="0" sec="1204520717"/>
        <to usec="0" sec="1204521067"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.232.186.225"/>
        </slice>
        <from usec="0" sec="1204520767"/>
        <to usec="0" sec="1204521226"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.25.99.179"/>
        </slice>
        <from usec="0" sec="1204520833"/>
        <to usec="0" sec="1204521081"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.253.213.77"/>
        </slice>
        <from usec="0" sec="1204520848"/>
        <to usec="0" sec="1204521210"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.88.208"/>
        </slice>
        <from usec="0" sec="1204520890"/>
        <to usec="0" sec="1204521054"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.25.99.77"/>
        </slice>
        <from usec="0" sec="1204520902"/>
        <to usec="0" sec="1204521223"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.232.168.200"/>
        </slice>
        <from usec="0" sec="1204520927"/>
        <to usec="0" sec="1204521227"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.253.139.78"/>
        </slice>
        <from usec="0" sec="1204520931"/>
        <to usec="0" sec="1204521167"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.154.251.124"/>
        </slice>
        <from usec="0" sec="1204520981"/>
        <to usec="0" sec="1204521078"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.214.97.119"/>
        </slice>
        <from usec="0" sec="1204520986"/>
        <to usec="0" sec="1204521169"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.253.226.50"/>
        </slice>
        <from usec="0" sec="1204520997"/>
        <to usec="0" sec="1204521214"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="84.151.123.161"/>
        </slice>
        <from usec="0" sec="1204521017"/>
        <to usec="0" sec="1204521220"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.93.26.204"/>
        </slice>
        <from usec="0" sec="1204521098"/>
        <to usec="0" sec="1204521110"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.69.14.98"/>
        </slice>
        <from usec="0" sec="1204521139"/>
        <to usec="0" sec="1204521166"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.74.119.157"/>
        </slice>
        <from usec="0" sec="1204521157"/>
        <to usec="0" sec="1204521196"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.144.172.234"/>
        </slice>
        <from usec="0" sec="1204521170"/>
        <to usec="0" sec="1204521212"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.165.34.160"/>
        </slice>
        <from usec="0" sec="1204521172"/>
        <to usec="0" sec="1204521199"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.14.67.104"/>
        </slice>
        <from usec="0" sec="1204521179"/>
        <to usec="0" sec="1204521187"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.8.210.155"/>
        </slice>
        <from usec="0" sec="1204521186"/>
        <to usec="0" sec="1204521222"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.116.198.116"/>
        </slice>
        <from usec="0" sec="1204521187"/>
        <to usec="0" sec="1204521200"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="87.6.44.48"/>
        </slice>
        <from usec="0" sec="1204521210"/>
        <to usec="0" sec="1204521223"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.63.100.203" dst_ip="153.253.237.168" src_port="80"/>
        </slice>
        <from usec="0" sec="1204520422"/>
        <to usec="0" sec="1204520778"/>
    </anomaly>
    <anomaly type="notice" value="0.450958,0.866200,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="153.253.130.51" dst_port="2703"/>
            <filter dst_ip="215.52.112.206" dst_port="2703"/>
            <filter src_ip="153.253.130.51" src_port="59752" dst_port="53"/>
        </slice>
        <from usec="0" sec="1204520401"/>
        <to usec="0" sec="1204521228"/>
    </anomaly>
</admd:annotation>
