<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.0.42" dst_ip="205.8.148.129" src_port="3287" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285980"/>
        <to usec="0" sec="1207285986"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="191.58.171.1"/>
        </slice>
        <from usec="0" sec="1207285251"/>
        <to usec="0" sec="1207285391"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.41.128.198"/>
        </slice>
        <from usec="0" sec="1207285626"/>
        <to usec="0" sec="1207285629"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.209.148.65"/>
        </slice>
        <from usec="0" sec="1207285305"/>
        <to usec="0" sec="1207285360"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.209.8.76"/>
        </slice>
        <from usec="0" sec="1207285362"/>
        <to usec="0" sec="1207285370"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.58.198.202"/>
        </slice>
        <from usec="0" sec="1207285870"/>
        <to usec="0" sec="1207285874"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.133.78" dst_ip="220.222.234.172" src_port="2841" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285859"/>
        <to usec="0" sec="1207285863"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="75.202.70.225"/>
        </slice>
        <from usec="0" sec="1207285532"/>
        <to usec="0" sec="1207285537"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.196.244.58" dst_ip="167.209.178.137" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285790"/>
        <to usec="0" sec="1207285794"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.77.97" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285983"/>
        <to usec="0" sec="1207286023"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.99.152.203" dst_ip="149.82.1.89" src_port="1712" dst_port="55273" proto="udp"/>
        </slice>
        <from usec="0" sec="1207285358"/>
        <to usec="0" sec="1207285363"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.82.92.84" dst_ip="218.9.239.201" src_port="21416" dst_port="8952" proto="udp"/>
        </slice>
        <from usec="0" sec="1207286050"/>
        <to usec="0" sec="1207286099"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.54.201.83"/>
        </slice>
        <from usec="0" sec="1207285232"/>
        <to usec="0" sec="1207285257"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.201.172.175" dst_ip="167.209.8.25" src_port="19101" dst_port="4462" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285226"/>
        <to usec="0" sec="1207285867"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.75.202.113" dst_ip="167.209.53.141" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285979"/>
        <to usec="0" sec="1207285982"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="25.58.198.230" dst_ip="167.209.188.171" src_port="80" dst_port="1263" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285353"/>
        <to usec="0" sec="1207285356"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.115.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285860"/>
        <to usec="0" sec="1207285871"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.54.196.82" dst_ip="167.209.180.118" src_port="80" dst_port="58659" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285917"/>
        <to usec="0" sec="1207285921"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.54.196.91"/>
        </slice>
        <from usec="0" sec="1207285380"/>
        <to usec="0" sec="1207285484"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.97.208.8" dst_ip="167.209.153.171" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285739"/>
        <to usec="0" sec="1207285801"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="100.214.214.115" dst_ip="212.205.235.55" src_port="8000" dst_port="55028" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285231"/>
        <to usec="0" sec="1207285530"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.84.242"/>
        </slice>
        <from usec="0" sec="1207285383"/>
        <to usec="0" sec="1207285409"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="194.173.180.227" dst_ip="167.209.8.49" src_port="80" dst_port="51323" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285944"/>
        <to usec="0" sec="1207285946"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.128.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285490"/>
        <to usec="0" sec="1207286054"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.209.202.78" dst_ip="102.34.111.99" src_port="3197" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285945"/>
        <to usec="0" sec="1207286099"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.178.112"/>
        </slice>
        <from usec="0" sec="1207285636"/>
        <to usec="0" sec="1207285643"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.96.120.245"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285204"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.101.226.125" dst_ip="200.96.20.4" src_port="8080" dst_port="1056" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285322"/>
        <to usec="0" sec="1207285325"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.133.12" dst_ip="220.222.234.172" src_port="1482" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285611"/>
        <to usec="0" sec="1207285613"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="105.250.137.178" dst_ip="212.205.237.32" src_port="4086" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285473"/>
        <to usec="0" sec="1207285479"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.124.177"/>
        </slice>
        <from usec="0" sec="1207285230"/>
        <to usec="0" sec="1207285245"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="106.157.245.158" dst_ip="167.209.172.56" src_port="80" dst_port="43204" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285490"/>
        <to usec="0" sec="1207285576"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.87.145.160" dst_ip="167.209.172.33" src_port="80" dst_port="3501" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285341"/>
        <to usec="0" sec="1207285422"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="14.24.27.19" dst_ip="160.86.52.137" src_port="80" dst_port="1686" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285249"/>
        <to usec="0" sec="1207286091"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="14.218.93.232"/>
        </slice>
        <from usec="0" sec="1207286012"/>
        <to usec="0" sec="1207286016"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.209.8.49"/>
        </slice>
        <from usec="0" sec="1207285940"/>
        <to usec="0" sec="1207285946"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.133.20"/>
        </slice>
        <from usec="0" sec="1207285656"/>
        <to usec="0" sec="1207285662"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.246.89.81" dst_ip="167.209.77.71" src_port="80" dst_port="48464" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207286091"/>
        <to usec="0" sec="1207286093"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.82.5.76" dst_ip="204.157.249.161" src_port="4010" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285689"/>
        <to usec="0" sec="1207285694"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="101.207.81.7"/>
        </slice>
        <from usec="0" sec="1207285439"/>
        <to usec="0" sec="1207285442"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.87.145.172" dst_ip="160.86.75.151" src_port="80" dst_port="3947" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285720"/>
        <to usec="0" sec="1207285722"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.86.34.67" dst_ip="149.82.21.237" src_port="80" dst_port="1240" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285520"/>
        <to usec="0" sec="1207285525"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.87.145.173" dst_ip="167.209.14.216" src_port="80" dst_port="51565" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285622"/>
        <to usec="0" sec="1207285624"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.157.253.104" dst_ip="167.209.185.92" src_port="1020" dst_port="2276" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285224"/>
        <to usec="0" sec="1207286068"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.94.212.93" dst_ip="167.209.8.25" src_port="19101" dst_port="3825" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285470"/>
        <to usec="0" sec="1207285863"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.93.223"/>
        </slice>
        <from usec="0" sec="1207285517"/>
        <to usec="0" sec="1207285528"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.194.253.88" dst_ip="160.86.16.214" src_port="13107" dst_port="9124" proto="udp"/>
        </slice>
        <from usec="0" sec="1207285232"/>
        <to usec="0" sec="1207285980"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.130.72.175" dst_ip="106.145.170.55" src_port="4424" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285388"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.170.14.251"/>
        </slice>
        <from usec="0" sec="1207285237"/>
        <to usec="0" sec="1207285240"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.26.159"/>
        </slice>
        <from usec="0" sec="1207285211"/>
        <to usec="0" sec="1207285830"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="96.195.37.74" dst_ip="167.209.222.216" src_port="1024" dst_port="17772" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285226"/>
        <to usec="0" sec="1207285411"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.34.111.182" dst_ip="167.209.84.241" src_port="80" dst_port="3968" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285412"/>
        <to usec="0" sec="1207285460"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="160.86.84.138" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285861"/>
        <to usec="0" sec="1207285865"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="100.112.57.240"/>
        </slice>
        <from usec="0" sec="1207286019"/>
        <to usec="0" sec="1207286023"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.34.200.13"/>
        </slice>
        <from usec="0" sec="1207285392"/>
        <to usec="0" sec="1207285396"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.82.92.5" dst_ip="75.202.70.225" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285575"/>
        <to usec="0" sec="1207285605"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="77.45.82.146" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285994"/>
        <to usec="0" sec="1207286045"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.82.91.85" dst_ip="205.54.202.66" src_port="3637" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285345"/>
        <to usec="0" sec="1207285466"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="167.209.149.222"/>
        </slice>
        <from usec="0" sec="1207286072"/>
        <to usec="0" sec="1207286075"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.130.105.190"/>
        </slice>
        <from usec="0" sec="1207285702"/>
        <to usec="0" sec="1207286004"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.82.3.219"/>
        </slice>
        <from usec="0" sec="1207285322"/>
        <to usec="0" sec="1207285325"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.82.100.148" dst_ip="167.209.78.113" src_port="1935" dst_port="2594" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285387"/>
        <to usec="0" sec="1207285819"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.86.122.64" dst_ip="25.58.198.202" src_port="1506" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285877"/>
        <to usec="0" sec="1207285880"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.54.197.157"/>
        </slice>
        <from usec="0" sec="1207285220"/>
        <to usec="0" sec="1207285254"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.87.145.10"/>
        </slice>
        <from usec="0" sec="1207285670"/>
        <to usec="0" sec="1207285725"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.34.99.50"/>
        </slice>
        <from usec="0" sec="1207285483"/>
        <to usec="0" sec="1207285486"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.211.33.128"/>
        </slice>
        <from usec="0" sec="1207285230"/>
        <to usec="0" sec="1207285430"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.93.90"/>
        </slice>
        <from usec="0" sec="1207285348"/>
        <to usec="0" sec="1207286057"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.66.124.15" dst_ip="167.209.179.43" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285844"/>
        <to usec="0" sec="1207285847"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.248.210.127"/>
        </slice>
        <from usec="0" sec="1207285584"/>
        <to usec="0" sec="1207285588"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.205.224.50" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285340"/>
        <to usec="0" sec="1207286060"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="121.62.194.222"/>
        </slice>
        <from usec="0" sec="1207286013"/>
        <to usec="0" sec="1207286016"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.86.153.97" dst_ip="102.34.102.175" src_port="2013" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207286038"/>
        <to usec="0" sec="1207286047"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.111.209.36" dst_ip="167.209.16.80" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285713"/>
        <to usec="0" sec="1207285941"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.85.207.192" dst_ip="167.209.176.75" src_port="80" dst_port="3044" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285327"/>
        <to usec="0" sec="1207285330"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.130.44.9"/>
        </slice>
        <from usec="0" sec="1207286042"/>
        <to usec="0" sec="1207286045"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.67.14.45" dst_ip="101.207.74.64" src_port="80" dst_port="54423" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285465"/>
        <to usec="0" sec="1207285469"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.73.106.212"/>
        </slice>
        <from usec="0" sec="1207285332"/>
        <to usec="0" sec="1207285846"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="101.207.71.138" dst_ip="212.205.226.68" src_port="55246" dst_port="54525" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285949"/>
        <to usec="0" sec="1207285966"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.51.26.208" dst_ip="102.34.104.203" src_port="38315" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285831"/>
        <to usec="0" sec="1207285846"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.185.66" dst_ip="106.145.154.130" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285338"/>
        <to usec="0" sec="1207285341"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.220.52.182"/>
        </slice>
        <from usec="0" sec="1207285758"/>
        <to usec="0" sec="1207285762"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.82.137.20" dst_ip="201.135.85.15" src_port="1082" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207286055"/>
        <to usec="0" sec="1207286096"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="115.148.153.175"/>
        </slice>
        <from usec="0" sec="1207286069"/>
        <to usec="0" sec="1207286091"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.219.86"/>
        </slice>
        <from usec="0" sec="1207285836"/>
        <to usec="0" sec="1207285839"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.84.215"/>
        </slice>
        <from usec="0" sec="1207286038"/>
        <to usec="0" sec="1207286041"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.188.213"/>
        </slice>
        <from usec="0" sec="1207285293"/>
        <to usec="0" sec="1207285296"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.82.211.220"/>
        </slice>
        <from usec="0" sec="1207285476"/>
        <to usec="0" sec="1207285923"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.8.148.208" dst_ip="167.209.46.157" src_port="80" dst_port="1746" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285470"/>
        <to usec="0" sec="1207285473"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.128.140"/>
        </slice>
        <from usec="0" sec="1207285483"/>
        <to usec="0" sec="1207285540"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.24.241.13" dst_ip="192.24.241.13" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285816"/>
        <to usec="0" sec="1207286050"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.14.14" dst_port="80"/>
            <filter src_ip="167.209.14.14" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285936"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="220.222.237.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285230"/>
        <to usec="0" sec="1207285525"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter src_ip="194.152.81.203" dst_ip="212.205.224.36"/>
            <filter src_ip="194.152.81.203" dst_port="1038"/>
            <filter dst_ip="212.205.224.36" dst_port="1038"/>
        </slice>
        <from usec="0" sec="1207285229"/>
        <to usec="0" sec="1207285734"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.128.220"/>
        </slice>
        <from usec="0" sec="1207285974"/>
        <to usec="0" sec="1207285977"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.84.218"/>
        </slice>
        <from usec="0" sec="1207285524"/>
        <to usec="0" sec="1207285528"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.56.24.201"/>
        </slice>
        <from usec="0" sec="1207285807"/>
        <to usec="0" sec="1207285827"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="9.125.217.193"/>
        </slice>
        <from usec="0" sec="1207285754"/>
        <to usec="0" sec="1207285757"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.133.5"/>
        </slice>
        <from usec="0" sec="1207285968"/>
        <to usec="0" sec="1207285971"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.128.187"/>
        </slice>
        <from usec="0" sec="1207285374"/>
        <to usec="0" sec="1207285378"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.147.153.223"/>
        </slice>
        <from usec="0" sec="1207285968"/>
        <to usec="0" sec="1207285971"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.66.120.60"/>
        </slice>
        <from usec="0" sec="1207285476"/>
        <to usec="0" sec="1207285479"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.86.123.231"/>
        </slice>
        <from usec="0" sec="1207285790"/>
        <to usec="0" sec="1207285798"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.82.138.99"/>
        </slice>
        <from usec="0" sec="1207285329"/>
        <to usec="0" sec="1207285333"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.50.19.107"/>
        </slice>
        <from usec="0" sec="1207285293"/>
        <to usec="0" sec="1207285296"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.20.171"/>
        </slice>
        <from usec="0" sec="1207285838"/>
        <to usec="0" sec="1207285841"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.209.53.45"/>
        </slice>
        <from usec="0" sec="1207286004"/>
        <to usec="0" sec="1207286056"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="102.196.244.211"/>
        </slice>
        <from usec="0" sec="1207285724"/>
        <to usec="0" sec="1207285728"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="167.209.168.196" dst_ip="167.209.168.196" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285274"/>
        <to usec="0" sec="1207286075"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="160.86.89.175" dst_ip="160.86.89.175" proto="udp"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207286084"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.32.86.153" src_port="62414" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1207285999"/>
        <to usec="0" sec="1207286011"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="8.190.35.96"/>
        </slice>
        <from usec="0" sec="1207285386"/>
        <to usec="0" sec="1207285399"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="15.45.85.53" src_port="36714" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1207285780"/>
        <to usec="0" sec="1207285793"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="15.140.4.33" src_port="1029" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1207286094"/>
        <to usec="0" sec="1207286098"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.251.112.71"/>
        </slice>
        <from usec="0" sec="1207286053"/>
        <to usec="0" sec="1207286068"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.86.53.19"/>
        </slice>
        <from usec="0" sec="1207286040"/>
        <to usec="0" sec="1207286043"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="208.19.72.171" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285826"/>
        <to usec="0" sec="1207285831"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="213.201.143.227" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285431"/>
        <to usec="0" sec="1207285494"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.93.37"/>
        </slice>
        <from usec="0" sec="1207286072"/>
        <to usec="0" sec="1207286096"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.124.182"/>
        </slice>
        <from usec="0" sec="1207286083"/>
        <to usec="0" sec="1207286087"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.154.128"/>
        </slice>
        <from usec="0" sec="1207286054"/>
        <to usec="0" sec="1207286091"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.130.83.211"/>
        </slice>
        <from usec="0" sec="1207285772"/>
        <to usec="0" sec="1207285775"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.153.137" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1207285859"/>
        <to usec="0" sec="1207285862"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="8.212.232.159" dst_ip="144.106.46.73" dst_port="80"/>
            <filter src_ip="75.108.5.1" dst_ip="144.106.46.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285956"/>
        <to usec="0" sec="1207286075"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.84.216"/>
        </slice>
        <from usec="0" sec="1207285651"/>
        <to usec="0" sec="1207285655"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.209.53.45"/>
        </slice>
        <from usec="0" sec="1207286031"/>
        <to usec="0" sec="1207286034"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.197.163.239"/>
        </slice>
        <from usec="0" sec="1207285769"/>
        <to usec="0" sec="1207285773"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="160.86.68.93"/>
        </slice>
        <from usec="0" sec="1207285470"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,011,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="106.135.85.28"/>
        </slice>
        <from usec="0" sec="1207285225"/>
        <to usec="0" sec="1207285228"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="196.224.43.227"/>
        </slice>
        <from usec="0" sec="1207285999"/>
        <to usec="0" sec="1207286002"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.29.30"/>
        </slice>
        <from usec="0" sec="1207285906"/>
        <to usec="0" sec="1207285909"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.199.15.74"/>
        </slice>
        <from usec="0" sec="1207286053"/>
        <to usec="0" sec="1207286056"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.67.23.40"/>
        </slice>
        <from usec="0" sec="1207285735"/>
        <to usec="0" sec="1207285739"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="197.106.3.40"/>
        </slice>
        <from usec="0" sec="1207285213"/>
        <to usec="0" sec="1207285216"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.150.205"/>
        </slice>
        <from usec="0" sec="1207285896"/>
        <to usec="0" sec="1207285900"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.191.3"/>
        </slice>
        <from usec="0" sec="1207285210"/>
        <to usec="0" sec="1207285214"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.209.236.113"/>
        </slice>
        <from usec="0" sec="1207285354"/>
        <to usec="0" sec="1207285358"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="160.86.84.204"/>
        </slice>
        <from usec="0" sec="1207285290"/>
        <to usec="0" sec="1207285294"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.84.244"/>
        </slice>
        <from usec="0" sec="1207286051"/>
        <to usec="0" sec="1207286054"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.86.96.212"/>
        </slice>
        <from usec="0" sec="1207285395"/>
        <to usec="0" sec="1207285398"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.106.92.137"/>
        </slice>
        <from usec="0" sec="1207285824"/>
        <to usec="0" sec="1207285827"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.172.61"/>
        </slice>
        <from usec="0" sec="1207285210"/>
        <to usec="0" sec="1207285214"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.157.244.211"/>
        </slice>
        <from usec="0" sec="1207285463"/>
        <to usec="0" sec="1207285466"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="167.209.124.232" dst_ip="206.214.166.229" dst_port="80"/>
            <filter src_ip="167.209.124.232" src_port="32810" dst_port="53"/>
        </slice>
        <from usec="0" sec="1207285450"/>
        <to usec="0" sec="1207285736"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.145.168.24"/>
        </slice>
        <from usec="0" sec="1207285589"/>
        <to usec="0" sec="1207285592"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.199.167"/>
        </slice>
        <from usec="0" sec="1207285831"/>
        <to usec="0" sec="1207285885"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.214.166.200"/>
        </slice>
        <from usec="0" sec="1207286088"/>
        <to usec="0" sec="1207286091"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.214.166.229"/>
        </slice>
        <from usec="0" sec="1207285305"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="96.156.21.176"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285307"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.89.81.12"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="160.233.193.38" dst_ip="167.209.169.1" src_port="60219" dst_port="80"/>
            <filter src_ip="121.161.222.85" dst_ip="167.209.169.1" src_port="1974" dst_port="80"/>
            <filter src_ip="179.2.158.138" dst_ip="167.209.169.1" src_port="44070" dst_port="80"/>
            <filter src_ip="101.207.71.86" dst_ip="167.209.169.1" src_port="44883" dst_port="80"/>
            <filter src_ip="75.111.105.102" dst_ip="167.209.169.1" src_port="44113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286066"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="215.137.131.173"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.27.202"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285307"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.129.235.9"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285733"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.124.184"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285268"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.197.26"/>
        </slice>
        <from usec="0" sec="1207285445"/>
        <to usec="0" sec="1207285460"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.20.127.151"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285307"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="55.92.86.105"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285395"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.96.255.103"/>
        </slice>
        <from usec="0" sec="1207285853"/>
        <to usec="0" sec="1207285921"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.130.48.16" dst_ip="96.98.198.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285208"/>
        <to usec="0" sec="1207286045"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="160.86.68.24"/>
        </slice>
        <from usec="0" sec="1207285209"/>
        <to usec="0" sec="1207285299"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.205.238.92"/>
        </slice>
        <from usec="0" sec="1207285211"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.82.7.67"/>
        </slice>
        <from usec="0" sec="1207285211"/>
        <to usec="0" sec="1207285272"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.84.202"/>
        </slice>
        <from usec="0" sec="1207285214"/>
        <to usec="0" sec="1207285307"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.184.22.88"/>
        </slice>
        <from usec="0" sec="1207285216"/>
        <to usec="0" sec="1207285297"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.86.121.245"/>
        </slice>
        <from usec="0" sec="1207285260"/>
        <to usec="0" sec="1207285266"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.111.109.6"/>
        </slice>
        <from usec="0" sec="1207285267"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.108.145.171"/>
        </slice>
        <from usec="0" sec="1207285271"/>
        <to usec="0" sec="1207285280"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.1.82.17"/>
        </slice>
        <from usec="0" sec="1207285273"/>
        <to usec="0" sec="1207285308"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.209.192.168"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285398"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="167.209.48.148" dst_port="53"/>
            <filter dst_ip="167.209.48.148" src_port="53" dst_port="57127"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285374"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.205.227.237"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285398"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.82.71.198"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285398"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.41.18.197" dst_ip="144.106.85.212" src_port="1853" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285493"/>
        <to usec="0" sec="1207285638"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.209.172.73"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285377"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.130.109.143"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285396"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="150.183.128.67"/>
        </slice>
        <from usec="0" sec="1207285205"/>
        <to usec="0" sec="1207285388"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.207.71.88"/>
        </slice>
        <from usec="0" sec="1207285208"/>
        <to usec="0" sec="1207285395"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="9.144.22.70"/>
        </slice>
        <from usec="0" sec="1207285230"/>
        <to usec="0" sec="1207285275"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="101.207.85.6"/>
        </slice>
        <from usec="0" sec="1207285245"/>
        <to usec="0" sec="1207285391"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.110.112.16"/>
        </slice>
        <from usec="0" sec="1207285245"/>
        <to usec="0" sec="1207285335"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.168.87.125"/>
        </slice>
        <from usec="0" sec="1207285264"/>
        <to usec="0" sec="1207285331"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.82.65.161" dst_ip="48.57.164.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285299"/>
        <to usec="0" sec="1207285391"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.207.72.89"/>
        </slice>
        <from usec="0" sec="1207285360"/>
        <to usec="0" sec="1207285382"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.134.3.39"/>
        </slice>
        <from usec="0" sec="1207285371"/>
        <to usec="0" sec="1207285388"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="75.108.134.124"/>
        </slice>
        <from usec="0" sec="1207285371"/>
        <to usec="0" sec="1207285376"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.34.102.223"/>
        </slice>
        <from usec="0" sec="1207285387"/>
        <to usec="0" sec="1207285390"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="167.209.14.141"/>
            <filter dst_ip="212.205.226.37" src_port="53" dst_port="60619"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286006"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="108.246.53.88" dst_ip="212.205.226.33" dst_port="25"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285475"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="150.183.130.95"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.218.75.219"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.75.165.27"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285575"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="216.50.66.47" src_port="53"/>
            <filter dst_ip="213.211.255.112" src_port="53" dst_port="32778"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.207.72.9"/>
        </slice>
        <from usec="0" sec="1207285205"/>
        <to usec="0" sec="1207285487"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.130.45.221"/>
        </slice>
        <from usec="0" sec="1207285207"/>
        <to usec="0" sec="1207285459"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.158.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285213"/>
        <to usec="0" sec="1207285845"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.2.130.212"/>
        </slice>
        <from usec="0" sec="1207285219"/>
        <to usec="0" sec="1207285413"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.229.93.3"/>
        </slice>
        <from usec="0" sec="1207285224"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="167.209.66.250" dst_ip="214.232.175.44"/>
            <filter src_ip="167.209.66.250" src_port="80"/>
            <filter dst_ip="214.232.175.44" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285438"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.75.83"/>
        </slice>
        <from usec="0" sec="1207285230"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.125.112"/>
        </slice>
        <from usec="0" sec="1207285231"/>
        <to usec="0" sec="1207285474"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.86.125.81"/>
        </slice>
        <from usec="0" sec="1207285283"/>
        <to usec="0" sec="1207285347"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.82.15.66"/>
        </slice>
        <from usec="0" sec="1207285284"/>
        <to usec="0" sec="1207285395"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.106.126.234"/>
        </slice>
        <from usec="0" sec="1207285288"/>
        <to usec="0" sec="1207285405"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.86.212.80"/>
        </slice>
        <from usec="0" sec="1207285290"/>
        <to usec="0" sec="1207285488"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.157.156.111"/>
        </slice>
        <from usec="0" sec="1207285652"/>
        <to usec="0" sec="1207285688"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="36.6.68.235"/>
        </slice>
        <from usec="0" sec="1207285460"/>
        <to usec="0" sec="1207285466"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.183.123.109"/>
        </slice>
        <from usec="0" sec="1207285478"/>
        <to usec="0" sec="1207285486"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="77.43.150.74" dst_ip="150.183.15.4" src_port="2401" dst_port="2401"/>
            <filter src_ip="74.118.11.36" dst_ip="150.183.15.4" src_port="15314" dst_port="2401"/>
            <filter src_ip="192.25.2.45" dst_ip="150.183.15.4" src_port="2401" dst_port="2401"/>
            <filter src_ip="197.105.43.79" dst_ip="150.183.15.4" src_port="2401" dst_port="2401"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="96.156.21.176"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.130.29.14"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.209.124.22"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="213.9.119.45" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="205.12.218.177" dst_ip="167.209.133.114" src_port="80"/>
            <filter src_ip="205.12.219.88" dst_ip="167.209.133.114" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285577"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.202.33.28"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285487"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.128.255"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.67.204.127"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285562"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="13.164.153.118" dst_ip="144.106.71.119" src_port="80"/>
            <filter src_ip="13.164.153.118" dst_ip="144.106.71.118" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285932"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.159.177.15" dst_ip="167.209.8.29" src_port="25"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285489"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="167.209.208.4" dst_port="80"/>
            <filter src_ip="167.209.208.4" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285534"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.16.179.240"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285465"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.207.71.107"/>
        </slice>
        <from usec="0" sec="1207285209"/>
        <to usec="0" sec="1207285557"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.209.29.30"/>
        </slice>
        <from usec="0" sec="1207285211"/>
        <to usec="0" sec="1207285574"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="70.193.202.190"/>
        </slice>
        <from usec="0" sec="1207285213"/>
        <to usec="0" sec="1207285531"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.44.146"/>
        </slice>
        <from usec="0" sec="1207285217"/>
        <to usec="0" sec="1207285408"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.30.242.228"/>
        </slice>
        <from usec="0" sec="1207285218"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="101.207.72.167"/>
        </slice>
        <from usec="0" sec="1207285240"/>
        <to usec="0" sec="1207285576"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.0.163.4"/>
        </slice>
        <from usec="0" sec="1207285263"/>
        <to usec="0" sec="1207285525"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="160.86.212.142"/>
        </slice>
        <from usec="0" sec="1207285283"/>
        <to usec="0" sec="1207285577"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter dst_ip="101.222.127.31"/>
        </slice>
        <from usec="0" sec="1207285348"/>
        <to usec="0" sec="1207285537"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.178.104"/>
        </slice>
        <from usec="0" sec="1207285377"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.209.223.0"/>
        </slice>
        <from usec="0" sec="1207285452"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.34.108.149"/>
        </slice>
        <from usec="0" sec="1207285498"/>
        <to usec="0" sec="1207285516"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.133.84"/>
        </slice>
        <from usec="0" sec="1207285565"/>
        <to usec="0" sec="1207285578"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="167.209.65.56" dst_ip="213.45.229.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285853"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="167.209.194.179"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.209.194.179"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.160.179.191"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285667"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="101.187.53.33"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285657"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="160.130.29.47"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285661"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="217.232.107.45"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285667"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.86.152.221"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285642"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.154.90.142" dst_ip="212.205.224.179" src_port="1050" dst_port="443"/>
        </slice>
        <from usec="0" sec="1207285234"/>
        <to usec="0" sec="1207285756"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.209.47.100"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.218.178.178"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285663"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.108.145.143" dst_ip="160.68.128.149" src_port="80" dst_port="50147"/>
        </slice>
        <from usec="0" sec="1207285924"/>
        <to usec="0" sec="1207285926"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.21.164.155"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285656"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="216.56.122.236" src_port="53"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285666"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="76.92.126.145"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.14.171.123"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="160.86.194.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.24.241.13"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.205.226.41"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285637"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.14.108.166"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="98.115.166.65"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.112.34.54" dst_ip="167.209.53.141" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285205"/>
        <to usec="0" sec="1207285969"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.21.164.167"/>
        </slice>
        <from usec="0" sec="1207285206"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.82.1.89" src_port="55273"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.82.92.109"/>
        </slice>
        <from usec="0" sec="1207285207"/>
        <to usec="0" sec="1207286027"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.106.127.164"/>
        </slice>
        <from usec="0" sec="1207285210"/>
        <to usec="0" sec="1207285665"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.157.214.225" dst_ip="167.209.115.51" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285210"/>
        <to usec="0" sec="1207285662"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.209.28.90" src_port="25"/>
        </slice>
        <from usec="0" sec="1207285213"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="96.198.68.160"/>
        </slice>
        <from usec="0" sec="1207285215"/>
        <to usec="0" sec="1207285656"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.129.199.197"/>
        </slice>
        <from usec="0" sec="1207285217"/>
        <to usec="0" sec="1207285664"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.90.68.200"/>
        </slice>
        <from usec="0" sec="1207285220"/>
        <to usec="0" sec="1207285611"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.51.29.114"/>
        </slice>
        <from usec="0" sec="1207285221"/>
        <to usec="0" sec="1207285661"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.157.244.7"/>
        </slice>
        <from usec="0" sec="1207285227"/>
        <to usec="0" sec="1207285664"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.179.111" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285935"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.86.139.21"/>
        </slice>
        <from usec="0" sec="1207285279"/>
        <to usec="0" sec="1207285552"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="167.209.179.68"/>
        </slice>
        <from usec="0" sec="1207285286"/>
        <to usec="0" sec="1207285597"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.196.2.79"/>
        </slice>
        <from usec="0" sec="1207285424"/>
        <to usec="0" sec="1207285562"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.12.213.89" dst_ip="212.205.237.32" src_port="18167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285446"/>
        <to usec="0" sec="1207285502"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="182.178.246.128"/>
        </slice>
        <from usec="0" sec="1207285456"/>
        <to usec="0" sec="1207285563"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.137.20.79"/>
        </slice>
        <from usec="0" sec="1207285458"/>
        <to usec="0" sec="1207285493"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.82.133.45"/>
        </slice>
        <from usec="0" sec="1207285490"/>
        <to usec="0" sec="1207285666"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.111.213.229"/>
        </slice>
        <from usec="0" sec="1207285490"/>
        <to usec="0" sec="1207285649"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.126.137.155"/>
        </slice>
        <from usec="0" sec="1207285490"/>
        <to usec="0" sec="1207285494"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="114.96.32.228"/>
        </slice>
        <from usec="0" sec="1207285494"/>
        <to usec="0" sec="1207285599"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.35.168.109"/>
        </slice>
        <from usec="0" sec="1207285503"/>
        <to usec="0" sec="1207285666"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.164.22.13"/>
        </slice>
        <from usec="0" sec="1207285519"/>
        <to usec="0" sec="1207285541"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.127.98.143"/>
        </slice>
        <from usec="0" sec="1207285532"/>
        <to usec="0" sec="1207285634"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.166.230.87"/>
        </slice>
        <from usec="0" sec="1207285562"/>
        <to usec="0" sec="1207285586"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.222.175.150"/>
        </slice>
        <from usec="0" sec="1207285564"/>
        <to usec="0" sec="1207285577"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.112.62.188" dst_ip="167.209.168.195" src_port="1221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285774"/>
        <to usec="0" sec="1207285777"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="100.112.57.235"/>
        </slice>
        <from usec="0" sec="1207285569"/>
        <to usec="0" sec="1207285588"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.24.84"/>
        </slice>
        <from usec="0" sec="1207285591"/>
        <to usec="0" sec="1207285624"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.136.158.244"/>
        </slice>
        <from usec="0" sec="1207285609"/>
        <to usec="0" sec="1207285617"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="104.33.202.63"/>
        </slice>
        <from usec="0" sec="1207285615"/>
        <to usec="0" sec="1207285661"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.34.102.123"/>
        </slice>
        <from usec="0" sec="1207285616"/>
        <to usec="0" sec="1207285630"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.210.222.48"/>
        </slice>
        <from usec="0" sec="1207285624"/>
        <to usec="0" sec="1207285645"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.135.36.222"/>
        </slice>
        <from usec="0" sec="1207285633"/>
        <to usec="0" sec="1207285668"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.93.232.187"/>
        </slice>
        <from usec="0" sec="1207285634"/>
        <to usec="0" sec="1207285659"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.8.25" dst_ip="74.97.39.0" src_port="1671" dst_port="19101"/>
            <filter src_ip="167.209.8.25" dst_ip="74.97.39.0" src_port="1652" dst_port="19101"/>
            <filter src_ip="167.209.8.25" dst_ip="74.97.39.0" src_port="1628" dst_port="19101"/>
            <filter src_ip="167.209.8.25" dst_ip="74.97.39.0" src_port="1464" dst_port="19101"/>
            <filter src_ip="167.209.8.25" dst_ip="77.201.172.175" src_port="4462" dst_port="19101"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286051"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.82.162.97"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.43.22.124"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="213.51.176.100" src_port="113"/>
            <filter dst_ip="213.51.176.100" dst_port="25"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.180.101.144"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285757"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="167.209.210.250" dst_ip="77.42.84.225" src_port="995" dst_port="4670"/>
            <filter src_ip="167.209.210.250" dst_ip="77.42.84.225" src_port="995" dst_port="4667"/>
            <filter src_ip="167.209.193.9" dst_ip="77.42.84.225" src_port="1493" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286011"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.233.84.248"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285722"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.205.238.75" src_port="25"/>
            <filter dst_ip="212.205.238.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.106.86.201" dst_port="25"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="160.86.69.93"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285683"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.24.87"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285732"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="103.5.86.38" dst_ip="167.209.30.94" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="77.49.76.93"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285739"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.64.188.176"/>
        </slice>
        <from usec="0" sec="1207285205"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.118.186.148"/>
        </slice>
        <from usec="0" sec="1207285207"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="205.196.100.155"/>
        </slice>
        <from usec="0" sec="1207285207"/>
        <to usec="0" sec="1207285611"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.77.38"/>
        </slice>
        <from usec="0" sec="1207285209"/>
        <to usec="0" sec="1207285751"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.229.88.40"/>
        </slice>
        <from usec="0" sec="1207285210"/>
        <to usec="0" sec="1207285737"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.86.122.192" dst_ip="212.192.71.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285215"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.203.207" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285221"/>
        <to usec="0" sec="1207285712"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.91.47.126"/>
        </slice>
        <from usec="0" sec="1207285224"/>
        <to usec="0" sec="1207285675"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.183.85.2"/>
        </slice>
        <from usec="0" sec="1207285271"/>
        <to usec="0" sec="1207285721"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.67.205.77"/>
        </slice>
        <from usec="0" sec="1207285322"/>
        <to usec="0" sec="1207285725"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="102.69.220.166"/>
        </slice>
        <from usec="0" sec="1207285349"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="15.10.235.64"/>
        </slice>
        <from usec="0" sec="1207285357"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="102.88.168.41"/>
        </slice>
        <from usec="0" sec="1207285446"/>
        <to usec="0" sec="1207285751"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="205.12.217.83"/>
        </slice>
        <from usec="0" sec="1207285447"/>
        <to usec="0" sec="1207285720"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.196.247.175"/>
        </slice>
        <from usec="0" sec="1207285511"/>
        <to usec="0" sec="1207285745"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.222.237.188" dst_ip="167.209.178.5" src_port="80" dst_port="3484"/>
            <filter src_ip="220.222.237.188" dst_ip="167.209.178.5" src_port="80" dst_port="3482"/>
        </slice>
        <from usec="0" sec="1207285539"/>
        <to usec="0" sec="1207285630"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="70.192.161.98"/>
        </slice>
        <from usec="0" sec="1207285544"/>
        <to usec="0" sec="1207285757"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.10.10.150"/>
        </slice>
        <from usec="0" sec="1207285594"/>
        <to usec="0" sec="1207285597"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.157.248.201"/>
        </slice>
        <from usec="0" sec="1207285602"/>
        <to usec="0" sec="1207285611"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.75.14.25"/>
        </slice>
        <from usec="0" sec="1207285610"/>
        <to usec="0" sec="1207285695"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.82.91.120"/>
        </slice>
        <from usec="0" sec="1207285611"/>
        <to usec="0" sec="1207285754"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.133.41"/>
        </slice>
        <from usec="0" sec="1207285615"/>
        <to usec="0" sec="1207285707"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.107.65"/>
        </slice>
        <from usec="0" sec="1207285622"/>
        <to usec="0" sec="1207285692"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="15.149.130.149"/>
        </slice>
        <from usec="0" sec="1207285645"/>
        <to usec="0" sec="1207285647"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.89.98.78"/>
        </slice>
        <from usec="0" sec="1207285663"/>
        <to usec="0" sec="1207285675"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="115.16.141.187"/>
        </slice>
        <from usec="0" sec="1207285667"/>
        <to usec="0" sec="1207285676"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.238.80.54"/>
        </slice>
        <from usec="0" sec="1207285691"/>
        <to usec="0" sec="1207285753"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.5.244"/>
        </slice>
        <from usec="0" sec="1207285701"/>
        <to usec="0" sec="1207285746"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.209.133.97"/>
        </slice>
        <from usec="0" sec="1207285735"/>
        <to usec="0" sec="1207285758"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,901,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="160.188.141.82"/>
        </slice>
        <from usec="0" sec="1207285743"/>
        <to usec="0" sec="1207285744"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.205.224.212" dst_ip="192.108.226.11" src_port="4000" dst_port="63098"/>
            <filter src_ip="212.205.224.212" dst_ip="192.108.226.11" src_port="4000" dst_port="63088"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285918"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.70.97.140"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.13.193.223"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.209.168.217"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="106.145.148.151" dst_port="25"/>
            <filter src_ip="160.86.159.83" src_port="32958" dst_port="53"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.130.108.83"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285837"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.253.158.16"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285846"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.106.82.128"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285825"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.106.26.88"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207285843"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="201.246.89.89" src_port="21"/>
            <filter dst_ip="144.106.91.185" src_port="21"/>
            <filter src_ip="201.246.89.89" dst_ip="144.106.91.185" src_port="20"/>
        </slice>
        <from usec="0" sec="1207285204"/>
        <to usec="0" sec="1207285922"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.186.246.123"/>
        </slice>
        <from usec="0" sec="1207285206"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.11.0.212"/>
        </slice>
        <from usec="0" sec="1207285213"/>
        <to usec="0" sec="1207285937"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.124.196"/>
        </slice>
        <from usec="0" sec="1207285222"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.106.125.234"/>
        </slice>
        <from usec="0" sec="1207285222"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.86.136.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285223"/>
        <to usec="0" sec="1207285833"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.223.170"/>
        </slice>
        <from usec="0" sec="1207285244"/>
        <to usec="0" sec="1207285755"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="68.7.13.252"/>
        </slice>
        <from usec="0" sec="1207285247"/>
        <to usec="0" sec="1207285746"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="15.193.192.177"/>
        </slice>
        <from usec="0" sec="1207285360"/>
        <to usec="0" sec="1207285846"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.8.102.189"/>
        </slice>
        <from usec="0" sec="1207285456"/>
        <to usec="0" sec="1207285834"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.157.244.80"/>
        </slice>
        <from usec="0" sec="1207285558"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.82.94.197" dst_ip="198.173.10.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285614"/>
        <to usec="0" sec="1207285748"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.113.42.175"/>
        </slice>
        <from usec="0" sec="1207285638"/>
        <to usec="0" sec="1207285907"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.160.166.183"/>
        </slice>
        <from usec="0" sec="1207285644"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.60.160.131"/>
        </slice>
        <from usec="0" sec="1207285686"/>
        <to usec="0" sec="1207285690"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.88.135.7"/>
        </slice>
        <from usec="0" sec="1207285710"/>
        <to usec="0" sec="1207285713"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="167.209.180.123" dst_ip="99.96.94.83" src_port="30278" dst_port="41478"/>
            <filter src_ip="167.209.180.123" dst_ip="213.45.139.130" src_port="30527" dst_port="110"/>
            <filter src_ip="167.209.180.123" dst_ip="112.193.109.50" src_port="19624" dst_port="19996"/>
            <filter src_ip="167.209.180.123" dst_ip="101.167.108.73" src_port="21314" dst_port="24463"/>
            <filter src_ip="167.209.180.123" dst_ip="13.52.14.194" src_port="2368" dst_port="53"/>
        </slice>
        <from usec="0" sec="1207285745"/>
        <to usec="0" sec="1207285782"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="74.116.246.5"/>
        </slice>
        <from usec="0" sec="1207285755"/>
        <to usec="0" sec="1207285760"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,504,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="167.209.182.161" dst_ip="206.214.166.242" dst_port="443"/>
            <filter src_ip="167.209.182.161" dst_ip="206.214.166.242" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285781"/>
        <to usec="0" sec="1207285839"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,020,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="192.85.162.208"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.218.148" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="144.106.207.156" src_port="53" dst_port="62764"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285928"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.176.0"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285897"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.106.36.104"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207285919"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.110.77.157" dst_ip="167.209.213.68" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285935"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.26.157.167"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285903"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.99.134.240"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207285935"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.149.38.191"/>
        </slice>
        <from usec="0" sec="1207285206"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="144.106.114.59"/>
        </slice>
        <from usec="0" sec="1207285208"/>
        <to usec="0" sec="1207285929"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.86.153.67"/>
        </slice>
        <from usec="0" sec="1207285209"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="74.162.151.147"/>
        </slice>
        <from usec="0" sec="1207285231"/>
        <to usec="0" sec="1207285932"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="166.73.192.79"/>
        </slice>
        <from usec="0" sec="1207285231"/>
        <to usec="0" sec="1207285916"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.207.72.16"/>
        </slice>
        <from usec="0" sec="1207285389"/>
        <to usec="0" sec="1207285935"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.86.126.215"/>
        </slice>
        <from usec="0" sec="1207285612"/>
        <to usec="0" sec="1207285830"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="75.50.23.106"/>
        </slice>
        <from usec="0" sec="1207285660"/>
        <to usec="0" sec="1207285845"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.157.228.58"/>
        </slice>
        <from usec="0" sec="1207285736"/>
        <to usec="0" sec="1207285909"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.41.62.76"/>
        </slice>
        <from usec="0" sec="1207285762"/>
        <to usec="0" sec="1207285822"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.82.123.69"/>
        </slice>
        <from usec="0" sec="1207285775"/>
        <to usec="0" sec="1207285830"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="74.140.82.59"/>
        </slice>
        <from usec="0" sec="1207285786"/>
        <to usec="0" sec="1207285831"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.140.239.158"/>
        </slice>
        <from usec="0" sec="1207285828"/>
        <to usec="0" sec="1207285863"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.75.14.21"/>
        </slice>
        <from usec="0" sec="1207285841"/>
        <to usec="0" sec="1207285876"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.86.141.82"/>
        </slice>
        <from usec="0" sec="1207285853"/>
        <to usec="0" sec="1207285881"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.209.218.148" dst_ip="212.82.102.124" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285858"/>
        <to usec="0" sec="1207286066"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="75.132.0.144"/>
        </slice>
        <from usec="0" sec="1207285886"/>
        <to usec="0" sec="1207285894"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="74.198.21.156"/>
        </slice>
        <from usec="0" sec="1207285924"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.26.20" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="160.86.53.80" dst_ip="198.170.8.210" src_port="80"/>
            <filter src_ip="160.86.53.80" dst_ip="25.58.245.35" src_port="80"/>
            <filter src_ip="160.86.53.80" dst_ip="106.135.85.28" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="176.59.167.89"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.46.217" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286065"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.49.79.249"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="185.1.176.159"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285984"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="204.157.222.226" dst_ip="160.130.72.175" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286021"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="160.199.217.200"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.207.77.109"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286026"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="205.20.127.151" src_port="2703"/>
            <filter dst_ip="212.205.230.128" src_port="2703"/>
            <filter src_ip="205.20.126.42" dst_ip="144.106.85.209" src_port="2703"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286026"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.166.238.29"/>
        </slice>
        <from usec="0" sec="1207285201"/>
        <to usec="0" sec="1207286026"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="160.86.69.93"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207286004"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.183.46.169"/>
        </slice>
        <from usec="0" sec="1207285202"/>
        <to usec="0" sec="1207286011"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="167.209.162.11"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207286023"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="55.92.86.105" src_port="80"/>
            <filter dst_ip="167.209.8.49" src_port="80"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.207.71.132" dst_ip="144.106.82.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207286027"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="200.193.74.205"/>
        </slice>
        <from usec="0" sec="1207285203"/>
        <to usec="0" sec="1207286025"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.221.80.31"/>
        </slice>
        <from usec="0" sec="1207285206"/>
        <to usec="0" sec="1207286027"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.205.242.17"/>
        </slice>
        <from usec="0" sec="1207285206"/>
        <to usec="0" sec="1207285972"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.207.77.173"/>
        </slice>
        <from usec="0" sec="1207285209"/>
        <to usec="0" sec="1207286025"/>
    </anomaly>
    <anomaly type="notice" value="0.465833,0.841469,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="106.145.172.3" dst_port="80"/>
        </slice>
        <from usec="0" sec="1207285205"/>
        <to usec="0" sec="1207286027"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.82.162.98"/>
        </slice>
        <from usec="0" sec="1207285214"/>
        <to usec="0" sec="1207286006"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="102.109.65.87"/>
        </slice>
        <from usec="0" sec="1207285217"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.67.149.128"/>
        </slice>
        <from usec="0" sec="1207285219"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.207.74.100"/>
        </slice>
        <from usec="0" sec="1207285221"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.209.217.113" dst_ip="204.202.87.235" src_port="51646" dst_port="6638"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285848"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="74.114.90.69"/>
        </slice>
        <from usec="0" sec="1207285244"/>
        <to usec="0" sec="1207285980"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.157.176.161"/>
        </slice>
        <from usec="0" sec="1207285260"/>
        <to usec="0" sec="1207286022"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.214.167.2"/>
        </slice>
        <from usec="0" sec="1207285288"/>
        <to usec="0" sec="1207285966"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.106.70.108"/>
        </slice>
        <from usec="0" sec="1207285311"/>
        <to usec="0" sec="1207285956"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.207.72.226"/>
        </slice>
        <from usec="0" sec="1207285404"/>
        <to usec="0" sec="1207286021"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.170.208.70"/>
        </slice>
        <from usec="0" sec="1207285465"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.130.108.92"/>
        </slice>
        <from usec="0" sec="1207285609"/>
        <to usec="0" sec="1207286024"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="75.50.24.65"/>
        </slice>
        <from usec="0" sec="1207285728"/>
        <to usec="0" sec="1207286023"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.106.200.198"/>
        </slice>
        <from usec="0" sec="1207285787"/>
        <to usec="0" sec="1207285903"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.209.127.126"/>
        </slice>
        <from usec="0" sec="1207285826"/>
        <to usec="0" sec="1207286025"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.34.228.13"/>
        </slice>
        <from usec="0" sec="1207285851"/>
        <to usec="0" sec="1207285909"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.152.224.163"/>
        </slice>
        <from usec="0" sec="1207285873"/>
        <to usec="0" sec="1207286009"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="70.205.5.5"/>
        </slice>
        <from usec="0" sec="1207285919"/>
        <to usec="0" sec="1207285985"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.135.182.242"/>
        </slice>
        <from usec="0" sec="1207285957"/>
        <to usec="0" sec="1207285976"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="100.194.17.224"/>
        </slice>
        <from usec="0" sec="1207285957"/>
        <to usec="0" sec="1207285996"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="164.90.178.87"/>
        </slice>
        <from usec="0" sec="1207285988"/>
        <to usec="0" sec="1207286027"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.82.102.116"/>
        </slice>
        <from usec="0" sec="1207285989"/>
        <to usec="0" sec="1207286028"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="99.75.138.156"/>
        </slice>
        <from usec="0" sec="1207285996"/>
        <to usec="0" sec="1207286001"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.33.94.0" dst_ip="212.205.237.32" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1207285844"/>
        <to usec="0" sec="1207285960"/>
    </anomaly>
    <anomaly type="notice" value="0.424024,0.857045,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.45.88.148"/>
        </slice>
        <from usec="0" sec="1207285200"/>
        <to usec="0" sec="1207285938"/>
    </anomaly>
    <anomaly type="notice" value="0.512335,0.887593,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.23.230.236" dst_ip="212.205.237.47" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1207285999"/>
        <to usec="0" sec="1207286008"/>
    </anomaly>
</admd:annotation>
