<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="131.203.252.228"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963708"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="28.20.227.57"/>
        </slice>
        <from usec="0" sec="1209963674"/>
        <to usec="0" sec="1209963700"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="68.70.154.65"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963798"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter dst_ip="198.56.241.200"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963798"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.230.221.233"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963798"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="219.86.217.37"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963797"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,901,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="223.94.28.240"/>
        </slice>
        <from usec="0" sec="1209963609"/>
        <to usec="0" sec="1209963610"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.240.169.7"/>
        </slice>
        <from usec="0" sec="1209963611"/>
        <to usec="0" sec="1209963786"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="132.168.207.53"/>
        </slice>
        <from usec="0" sec="1209963617"/>
        <to usec="0" sec="1209963745"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.179.43.86"/>
        </slice>
        <from usec="0" sec="1209963665"/>
        <to usec="0" sec="1209963795"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.184.38.57"/>
        </slice>
        <from usec="0" sec="1209963679"/>
        <to usec="0" sec="1209963797"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.16.156.147"/>
        </slice>
        <from usec="0" sec="1209963796"/>
        <to usec="0" sec="1209963798"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="199.104.128.210"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963888"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,002,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="68.42.11.136"/>
        </slice>
        <from usec="0" sec="1209963677"/>
        <to usec="0" sec="1209963716"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.145.68.67"/>
        </slice>
        <from usec="0" sec="1209963750"/>
        <to usec="0" sec="1209963888"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="173.184.33.33"/>
        </slice>
        <from usec="0" sec="1209963845"/>
        <to usec="0" sec="1209963857"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="132.168.207.52"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209963978"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.114.186.237"/>
        </slice>
        <from usec="0" sec="1209963603"/>
        <to usec="0" sec="1209964337"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="22.56.133.117"/>
        </slice>
        <from usec="0" sec="1209963604"/>
        <to usec="0" sec="1209963945"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.115.228.130"/>
        </slice>
        <from usec="0" sec="1209963641"/>
        <to usec="0" sec="1209963951"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.121.247.198"/>
        </slice>
        <from usec="0" sec="1209963795"/>
        <to usec="0" sec="1209963966"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.212.53.107"/>
        </slice>
        <from usec="0" sec="1209963830"/>
        <to usec="0" sec="1209963856"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.45.113.16"/>
        </slice>
        <from usec="0" sec="1209963964"/>
        <to usec="0" sec="1209963971"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.208.59.104"/>
        </slice>
        <from usec="0" sec="1209963601"/>
        <to usec="0" sec="1209964057"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,012,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.240.219.97"/>
        </slice>
        <from usec="0" sec="1209963603"/>
        <to usec="0" sec="1209964067"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="195.237.74.220"/>
        </slice>
        <from usec="0" sec="1209963605"/>
        <to usec="0" sec="1209964058"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.168.84.193"/>
        </slice>
        <from usec="0" sec="1209963609"/>
        <to usec="0" sec="1209963925"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="132.168.242.180"/>
        </slice>
        <from usec="0" sec="1209963636"/>
        <to usec="0" sec="1209964066"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.232.20"/>
        </slice>
        <from usec="0" sec="1209963638"/>
        <to usec="0" sec="1209964065"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="132.168.227.122"/>
        </slice>
        <from usec="0" sec="1209963640"/>
        <to usec="0" sec="1209964051"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.128.74.230"/>
        </slice>
        <from usec="0" sec="1209963652"/>
        <to usec="0" sec="1209964047"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.100.0.89"/>
        </slice>
        <from usec="0" sec="1209963808"/>
        <to usec="0" sec="1209963929"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.164.169.144"/>
        </slice>
        <from usec="0" sec="1209963822"/>
        <to usec="0" sec="1209964068"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,011,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="219.71.194.26" src_port="2967" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1209963864"/>
        <to usec="0" sec="1209963987"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.231.163.163"/>
        </slice>
        <from usec="0" sec="1209963957"/>
        <to usec="0" sec="1209964066"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="24.163.1.74"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964158"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.81.99.101"/>
        </slice>
        <from usec="0" sec="1209963612"/>
        <to usec="0" sec="1209964152"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.184.36.238"/>
        </slice>
        <from usec="0" sec="1209963822"/>
        <to usec="0" sec="1209964157"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="12.0.212.117"/>
        </slice>
        <from usec="0" sec="1209964055"/>
        <to usec="0" sec="1209964098"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.112.249.152"/>
        </slice>
        <from usec="0" sec="1209963601"/>
        <to usec="0" sec="1209964245"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.168.11.138"/>
        </slice>
        <from usec="0" sec="1209963602"/>
        <to usec="0" sec="1209964239"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="67.156.233.61"/>
        </slice>
        <from usec="0" sec="1209963603"/>
        <to usec="0" sec="1209964239"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.88.173.136"/>
        </slice>
        <from usec="0" sec="1209963604"/>
        <to usec="0" sec="1209964247"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.126.198.89"/>
        </slice>
        <from usec="0" sec="1209963618"/>
        <to usec="0" sec="1209964244"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.44.197.241"/>
        </slice>
        <from usec="0" sec="1209964097"/>
        <to usec="0" sec="1209964128"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="26.233.1.33"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964332"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.176.60.196"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964334"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="194.215.187.177"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964338"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.172.160"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964335"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.185.1"/>
        </slice>
        <from usec="0" sec="1209963601"/>
        <to usec="0" sec="1209964334"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.40.107.73"/>
        </slice>
        <from usec="0" sec="1209963603"/>
        <to usec="0" sec="1209964336"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.0.8.48"/>
        </slice>
        <from usec="0" sec="1209963606"/>
        <to usec="0" sec="1209964326"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.184.38.141"/>
        </slice>
        <from usec="0" sec="1209963629"/>
        <to usec="0" sec="1209964321"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="26.233.1.69"/>
        </slice>
        <from usec="0" sec="1209963668"/>
        <to usec="0" sec="1209964309"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.184.38.57"/>
        </slice>
        <from usec="0" sec="1209963679"/>
        <to usec="0" sec="1209964338"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.66.177.190"/>
        </slice>
        <from usec="0" sec="1209963804"/>
        <to usec="0" sec="1209964199"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="22.56.133.117"/>
        </slice>
        <from usec="0" sec="1209964068"/>
        <to usec="0" sec="1209964338"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="66.161.37.185"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964418"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="29.184.211.24"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964424"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="18.251.62.35"/>
        </slice>
        <from usec="0" sec="1209963604"/>
        <to usec="0" sec="1209964424"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.240.176.128"/>
        </slice>
        <from usec="0" sec="1209963604"/>
        <to usec="0" sec="1209964425"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="121.62.188.172"/>
        </slice>
        <from usec="0" sec="1209963608"/>
        <to usec="0" sec="1209964427"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.55.112.243"/>
        </slice>
        <from usec="0" sec="1209964080"/>
        <to usec="0" sec="1209964390"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.128.212.114"/>
        </slice>
        <from usec="0" sec="1209964299"/>
        <to usec="0" sec="1209964400"/>
    </anomaly>
    <anomaly type="notice" value="0.402749,0.808379,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.20.8.209"/>
        </slice>
        <from usec="0" sec="1209964367"/>
        <to usec="0" sec="1209964426"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="132.168.117.50" dst_ip="215.245.136.180" dst_port="80"/>
            <filter src_ip="132.168.117.50" dst_ip="215.245.136.180" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1209963780"/>
        <to usec="0" sec="1209963826"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="223.77.141.28"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="221.134.90.4"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="19.69.126.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.519021,0.826355,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.104.131.10" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1209963601"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.104.131.11" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1034" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1068" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1104" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1273" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1341" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1507" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2074" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2090" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2275" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2594" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2885" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3128" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3391" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4557" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4780" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964006"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="199.104.128.156"/>
        </slice>
        <from usec="0" sec="1209964005"/>
        <to usec="0" sec="1209964051"/>
    </anomaly>
    <anomaly type="notice" value="0.519021,0.826355,501,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="178.151.2.200" dst_ip="199.104.140.180" dst_port="21"/>
            <filter src_ip="223.86.136.106" dst_ip="199.104.140.180" dst_port="21"/>
        </slice>
        <from usec="0" sec="1209963755"/>
        <to usec="0" sec="1209964428"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="132.168.51.172"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964231"/>
    </anomaly>
    <anomaly type="notice" value="0.519021,0.826355,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="132.168.67.102" dst_port="64361"/>
        </slice>
        <from usec="0" sec="1209963600"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.178.138"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964231"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="131.73.70.128" src_port="25"/>
            <filter dst_ip="131.73.70.128" dst_port="25"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964231"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.168.171.126" dst_ip="203.55.112.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964231"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="132.168.44.148"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="199.106.82.116"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="132.168.48.54"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.168.67.31"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="34.160.96.44"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.51.65.130" dst_port="16756"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="131.73.66.104"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="216.22.70.16" dst_ip="198.56.241.137" src_port="80"/>
            <filter src_ip="81.0.185.103" dst_ip="198.56.241.137" src_port="80"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="212.56.41.124" dst_ip="173.184.237.233" dst_port="3124"/>
            <filter src_ip="192.135.142.148" dst_ip="173.184.237.233" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="221.40.39.250" dst_ip="173.184.237.232" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.171.36" src_port="80"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.148.33.84" dst_ip="131.73.70.128" dst_port="25"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="131.73.70.64" dst_port="25"/>
        </slice>
        <from usec="0" sec="1209964185"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3128" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1209964365"/>
        <to usec="0" sec="1209964411"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.104.131.10" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964501"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.104.131.11" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964501"/>
    </anomaly>
    <anomaly type="notice" value="0.554273,0.911382,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="219.56.50.29" dst_ip="199.104.131.11" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1209963960"/>
        <to usec="0" sec="1209964231"/>
    </anomaly>
</admd:annotation>
