<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.244.242.147"/>
        </slice>
        <from usec="0" sec="1218172473"/>
        <to usec="0" sec="1218172498"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.93.210.40"/>
        </slice>
        <from usec="0" sec="1218172092"/>
        <to usec="0" sec="1218172096"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.92.177" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172281"/>
        <to usec="0" sec="1218172495"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.239.160.51" dst_ip="205.69.199.78" src_port="4835" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172492"/>
        <to usec="0" sec="1218172496"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.203.67"/>
        </slice>
        <from usec="0" sec="1218172488"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="150.239.135.73" dst_ip="21.200.7.48" src_port="38949" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172464"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.93.224.86"/>
        </slice>
        <from usec="0" sec="1218172485"/>
        <to usec="0" sec="1218172489"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.251.57"/>
        </slice>
        <from usec="0" sec="1218172275"/>
        <to usec="0" sec="1218172492"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="150.239.181.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172387"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="150.239.181.77" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172481"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.86.81.218"/>
        </slice>
        <from usec="0" sec="1218172386"/>
        <to usec="0" sec="1218172495"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.106.52.60"/>
        </slice>
        <from usec="0" sec="1218172479"/>
        <to usec="0" sec="1218172484"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.164.206.49"/>
        </slice>
        <from usec="0" sec="1218172172"/>
        <to usec="0" sec="1218172474"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.93.211.21"/>
        </slice>
        <from usec="0" sec="1218172090"/>
        <to usec="0" sec="1218172115"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.3.137.124"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171605"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.239.149.255"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218171607"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.160.23.34"/>
        </slice>
        <from usec="0" sec="1218172467"/>
        <to usec="0" sec="1218172471"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,501,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.19.170.162"/>
        </slice>
        <from usec="0" sec="1218172464"/>
        <to usec="0" sec="1218172492"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,501,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.19.170.133"/>
        </slice>
        <from usec="0" sec="1218172488"/>
        <to usec="0" sec="1218172492"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="95.54.72.19" dst_ip="150.239.149.18" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172275"/>
        <to usec="0" sec="1218172278"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.181.153.44" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172329"/>
        <to usec="0" sec="1218172332"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.84.60.140"/>
        </slice>
        <from usec="0" sec="1218172476"/>
        <to usec="0" sec="1218172480"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.171.136.38"/>
        </slice>
        <from usec="0" sec="1218172470"/>
        <to usec="0" sec="1218172474"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.13.175.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="1218172482"/>
        <to usec="0" sec="1218172486"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.58.207.65"/>
        </slice>
        <from usec="0" sec="1218172485"/>
        <to usec="0" sec="1218172489"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="150.239.217.178" dst_ip="216.3.227.40"/>
            <filter src_ip="150.239.217.178" dst_port="80"/>
            <filter src_ip="192.171.140.222" dst_ip="216.3.227.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218172473"/>
        <to usec="0" sec="1218172480"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.39.56.242" src_port="59317" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1218172203"/>
        <to usec="0" sec="1218172217"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.140.169.81" src_port="1090" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1218172275"/>
        <to usec="0" sec="1218172288"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="89.163.30.194"/>
        </slice>
        <from usec="0" sec="1218172187"/>
        <to usec="0" sec="1218172192"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.224.189" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1218172275"/>
        <to usec="0" sec="1218172282"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="36.149.28.6"/>
        </slice>
        <from usec="0" sec="1218171660"/>
        <to usec="0" sec="1218172260"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.20.72"/>
        </slice>
        <from usec="0" sec="1218172494"/>
        <to usec="0" sec="1218172498"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.3.227.40"/>
        </slice>
        <from usec="0" sec="1218172264"/>
        <to usec="0" sec="1218172268"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.239.167.80"/>
        </slice>
        <from usec="0" sec="1218172386"/>
        <to usec="0" sec="1218172390"/>
    </anomaly>
    <anomaly type="notice" value="0.715612,1.220010,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="150.239.176.221"/>
        </slice>
        <from usec="0" sec="1218172497"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.612028,1.172260,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.239.54.149" dst_ip="106.156.180.149" dst_port="443"/>
            <filter src_ip="150.239.54.149" dst_ip="106.156.180.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172492"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.19.230.237"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171709"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.134.145.120"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172159"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.169.53"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171706"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.109.125.44"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171709"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.151.51.180"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171641"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="210.100.148.236"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171708"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="16.103.187.170"/>
        </slice>
        <from usec="0" sec="1218171642"/>
        <to usec="0" sec="1218171644"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="26.72.84.229"/>
        </slice>
        <from usec="0" sec="1218171646"/>
        <to usec="0" sec="1218171679"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.12.69.48"/>
        </slice>
        <from usec="0" sec="1218171667"/>
        <to usec="0" sec="1218171709"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="93.2.28.15"/>
        </slice>
        <from usec="0" sec="1218171688"/>
        <to usec="0" sec="1218171695"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="172.14.208.228"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171799"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.226.49"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171799"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.35.45.41"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171798"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="10.0.2.37"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171797"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.94.34"/>
        </slice>
        <from usec="0" sec="1218171609"/>
        <to usec="0" sec="1218171790"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="200.112.177.19"/>
        </slice>
        <from usec="0" sec="1218171617"/>
        <to usec="0" sec="1218171739"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.14.17.39"/>
        </slice>
        <from usec="0" sec="1218171657"/>
        <to usec="0" sec="1218171774"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.45.203.156"/>
        </slice>
        <from usec="0" sec="1218171660"/>
        <to usec="0" sec="1218171721"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="94.26.179.101"/>
        </slice>
        <from usec="0" sec="1218171664"/>
        <to usec="0" sec="1218171693"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.237.5.8"/>
        </slice>
        <from usec="0" sec="1218171688"/>
        <to usec="0" sec="1218171763"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.49.133"/>
        </slice>
        <from usec="0" sec="1218171710"/>
        <to usec="0" sec="1218171781"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.93.217.220"/>
        </slice>
        <from usec="0" sec="1218171764"/>
        <to usec="0" sec="1218171799"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="61.45.18.173"/>
        </slice>
        <from usec="0" sec="1218171778"/>
        <to usec="0" sec="1218171799"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.63.74"/>
        </slice>
        <from usec="0" sec="1218171781"/>
        <to usec="0" sec="1218171894"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.63.74"/>
        </slice>
        <from usec="0" sec="1218171781"/>
        <to usec="0" sec="1218171793"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.237.233.50"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171879"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.181.217.168"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171889"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.88.150.111"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171795"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.102.77.3"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171888"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="145.7.82.236"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172428"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.67.129.252"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171849"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.239.11.197"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171889"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.84.38.68"/>
        </slice>
        <from usec="0" sec="1218171605"/>
        <to usec="0" sec="1218171869"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.129.107"/>
        </slice>
        <from usec="0" sec="1218171622"/>
        <to usec="0" sec="1218171879"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.80.9.216"/>
        </slice>
        <from usec="0" sec="1218171642"/>
        <to usec="0" sec="1218171882"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="95.52.211.99"/>
        </slice>
        <from usec="0" sec="1218171760"/>
        <to usec="0" sec="1218171771"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.17.14.209"/>
        </slice>
        <from usec="0" sec="1218171785"/>
        <to usec="0" sec="1218171829"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.191.98.58"/>
        </slice>
        <from usec="0" sec="1218171808"/>
        <to usec="0" sec="1218171816"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.168.38.130"/>
        </slice>
        <from usec="0" sec="1218171878"/>
        <to usec="0" sec="1218171884"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="169.19.160.229"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.3.245.113"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171973"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.78.222.201"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="58.22.44.215"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172067"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.109.26.28"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171978"/>
    </anomaly>
    <anomaly type="notice" value="0.612028,1.172260,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="150.239.149.255" dst_port="80"/>
            <filter src_ip="150.239.149.255" src_port="1513" dst_port="1513"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172501"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="21.84.196.200"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="138.4.226.18"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.109.100.161"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218172069"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="42.35.45.135"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218171974"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="41.21.52.44"/>
        </slice>
        <from usec="0" sec="1218171604"/>
        <to usec="0" sec="1218171967"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="145.164.113.105"/>
        </slice>
        <from usec="0" sec="1218171605"/>
        <to usec="0" sec="1218171976"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.194.231.108"/>
        </slice>
        <from usec="0" sec="1218171607"/>
        <to usec="0" sec="1218171960"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="193.191.98.186" src_port="80"/>
            <filter dst_ip="150.239.170.229" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171973"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.86.80.112"/>
        </slice>
        <from usec="0" sec="1218171612"/>
        <to usec="0" sec="1218171943"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.166.92"/>
        </slice>
        <from usec="0" sec="1218171616"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.42.128.39"/>
        </slice>
        <from usec="0" sec="1218171621"/>
        <to usec="0" sec="1218171976"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="200.180.246.136"/>
        </slice>
        <from usec="0" sec="1218171668"/>
        <to usec="0" sec="1218171864"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.165.21"/>
        </slice>
        <from usec="0" sec="1218171682"/>
        <to usec="0" sec="1218171863"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="21.103.216.36"/>
        </slice>
        <from usec="0" sec="1218171706"/>
        <to usec="0" sec="1218171955"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.172.96"/>
        </slice>
        <from usec="0" sec="1218171708"/>
        <to usec="0" sec="1218171903"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.226.2.81"/>
        </slice>
        <from usec="0" sec="1218171728"/>
        <to usec="0" sec="1218171950"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.48.11.188"/>
        </slice>
        <from usec="0" sec="1218171785"/>
        <to usec="0" sec="1218171977"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.114.76.65"/>
        </slice>
        <from usec="0" sec="1218171871"/>
        <to usec="0" sec="1218171877"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.232.78.196"/>
        </slice>
        <from usec="0" sec="1218171879"/>
        <to usec="0" sec="1218171933"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.212.160.189"/>
        </slice>
        <from usec="0" sec="1218171893"/>
        <to usec="0" sec="1218171912"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.70.106.40"/>
        </slice>
        <from usec="0" sec="1218171918"/>
        <to usec="0" sec="1218171977"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.2.132.240"/>
        </slice>
        <from usec="0" sec="1218171932"/>
        <to usec="0" sec="1218171956"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.86.80.80"/>
        </slice>
        <from usec="0" sec="1218171937"/>
        <to usec="0" sec="1218171940"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.161.26.80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172069"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="150.239.144.55"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172036"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.33.10"/>
        </slice>
        <from usec="0" sec="1218171608"/>
        <to usec="0" sec="1218172066"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="150.239.61.90"/>
        </slice>
        <from usec="0" sec="1218171618"/>
        <to usec="0" sec="1218172068"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.157.111.16"/>
        </slice>
        <from usec="0" sec="1218171664"/>
        <to usec="0" sec="1218172050"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.3.240.129"/>
        </slice>
        <from usec="0" sec="1218171909"/>
        <to usec="0" sec="1218171962"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.147.241"/>
        </slice>
        <from usec="0" sec="1218171973"/>
        <to usec="0" sec="1218172053"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.164.164.167"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172140"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="193.109.123.78"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172159"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="199.20.142.231"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172155"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="123.228.4.143"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172159"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.239.69.82"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172149"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="192.246.16.241"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172155"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="150.239.167.76"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172136"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="216.149.8.0"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172153"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="150.239.83.20"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172158"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="93.235.14.189" dst_ip="192.161.6.57" dst_port="53"/>
            <filter src_ip="93.235.14.189" dst_ip="193.109.126.60" dst_port="53"/>
        </slice>
        <from usec="0" sec="1218171605"/>
        <to usec="0" sec="1218172155"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.149.71.136"/>
        </slice>
        <from usec="0" sec="1218171607"/>
        <to usec="0" sec="1218172159"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.41.32.28"/>
        </slice>
        <from usec="0" sec="1218171614"/>
        <to usec="0" sec="1218172156"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="199.27.192.211" src_port="53"/>
            <filter dst_ip="193.109.98.220" src_port="53"/>
        </slice>
        <from usec="0" sec="1218171604"/>
        <to usec="0" sec="1218172400"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="204.151.9.20" src_port="80"/>
            <filter src_ip="217.86.82.223" dst_ip="150.239.147.149" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171608"/>
        <to usec="0" sec="1218172151"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.60.148"/>
        </slice>
        <from usec="0" sec="1218171628"/>
        <to usec="0" sec="1218172152"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.6.139.220"/>
        </slice>
        <from usec="0" sec="1218171630"/>
        <to usec="0" sec="1218172141"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.197.36"/>
        </slice>
        <from usec="0" sec="1218171711"/>
        <to usec="0" sec="1218172143"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.111.238.206"/>
        </slice>
        <from usec="0" sec="1218171892"/>
        <to usec="0" sec="1218172141"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.69.150.81"/>
        </slice>
        <from usec="0" sec="1218171969"/>
        <to usec="0" sec="1218171983"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.98.237.229"/>
        </slice>
        <from usec="0" sec="1218171996"/>
        <to usec="0" sec="1218172018"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="33.227.52.125"/>
        </slice>
        <from usec="0" sec="1218172009"/>
        <to usec="0" sec="1218172025"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.165.32.155"/>
        </slice>
        <from usec="0" sec="1218172024"/>
        <to usec="0" sec="1218172137"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="196.111.237.137"/>
        </slice>
        <from usec="0" sec="1218172070"/>
        <to usec="0" sec="1218172148"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.56.51.176"/>
        </slice>
        <from usec="0" sec="1218172083"/>
        <to usec="0" sec="1218172122"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.109.125.60"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172249"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.19.135.83"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172249"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.198.200"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172247"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.19.234.232"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172244"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.3.128.50"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172249"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="36.57.168.88"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172213"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.180.141.65"/>
        </slice>
        <from usec="0" sec="1218171605"/>
        <to usec="0" sec="1218172244"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.58.226.193"/>
        </slice>
        <from usec="0" sec="1218171641"/>
        <to usec="0" sec="1218172165"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="89.130.99.23"/>
        </slice>
        <from usec="0" sec="1218171761"/>
        <to usec="0" sec="1218172172"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.93.220.7"/>
        </slice>
        <from usec="0" sec="1218171970"/>
        <to usec="0" sec="1218172249"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.169.66.154"/>
        </slice>
        <from usec="0" sec="1218171991"/>
        <to usec="0" sec="1218172106"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.250.82.188"/>
        </slice>
        <from usec="0" sec="1218172020"/>
        <to usec="0" sec="1218172076"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.106.59.192"/>
        </slice>
        <from usec="0" sec="1218172026"/>
        <to usec="0" sec="1218172111"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.12.70.141"/>
        </slice>
        <from usec="0" sec="1218172068"/>
        <to usec="0" sec="1218172071"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.129.59.98"/>
        </slice>
        <from usec="0" sec="1218172094"/>
        <to usec="0" sec="1218172248"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="150.239.218.2"/>
        </slice>
        <from usec="0" sec="1218172094"/>
        <to usec="0" sec="1218172246"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.42.216"/>
        </slice>
        <from usec="0" sec="1218172164"/>
        <to usec="0" sec="1218172177"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="150.239.164.51" dst_ip="32.84.36.23" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="10.1.1.25"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.84.141.238"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172333"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.137.173.122" dst_ip="150.239.68.147" src_port="80" dst_port="9236"/>
            <filter src_ip="95.137.173.122" dst_ip="150.239.68.147" src_port="80" dst_port="9140"/>
        </slice>
        <from usec="0" sec="1218171995"/>
        <to usec="0" sec="1218172062"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.169.242.94"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172337"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.7.245.150"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.181.83"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172214"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="150.239.117.125"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.239.200.152"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218172330"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="150.239.213.36"/>
        </slice>
        <from usec="0" sec="1218171607"/>
        <to usec="0" sec="1218172323"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.194.153"/>
        </slice>
        <from usec="0" sec="1218171608"/>
        <to usec="0" sec="1218172329"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.3.190"/>
        </slice>
        <from usec="0" sec="1218171611"/>
        <to usec="0" sec="1218172337"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.92.213"/>
        </slice>
        <from usec="0" sec="1218171614"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.35.29.213"/>
        </slice>
        <from usec="0" sec="1218171615"/>
        <to usec="0" sec="1218172338"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.242.134.59"/>
        </slice>
        <from usec="0" sec="1218171619"/>
        <to usec="0" sec="1218172315"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.57.73.33"/>
        </slice>
        <from usec="0" sec="1218171879"/>
        <to usec="0" sec="1218172335"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.140.128.67"/>
        </slice>
        <from usec="0" sec="1218171979"/>
        <to usec="0" sec="1218172327"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.106.52.197"/>
        </slice>
        <from usec="0" sec="1218172169"/>
        <to usec="0" sec="1218172195"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.199.225.75"/>
        </slice>
        <from usec="0" sec="1218172252"/>
        <to usec="0" sec="1218172287"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.225.13.24"/>
        </slice>
        <from usec="0" sec="1218172253"/>
        <to usec="0" sec="1218172276"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.66.6.3"/>
        </slice>
        <from usec="0" sec="1218172314"/>
        <to usec="0" sec="1218172325"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.42.231.50"/>
        </slice>
        <from usec="0" sec="1218172317"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.109.100.130"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.4.160.215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172423"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.58.230.64"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.19.161.51"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.176.96"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.19.183.245"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172388"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.164.250.219"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="145.164.114.108"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="175.58.108.178" dst_port="80"/>
            <filter src_ip="175.58.229.59" dst_ip="192.160.35.50"/>
            <filter src_ip="175.58.229.59" dst_port="80"/>
            <filter dst_ip="192.160.35.12" dst_port="80"/>
            <filter dst_ip="192.160.35.50" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172419"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.239.69.159"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172397"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.37.193.84"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218172419"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.239.22.23"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.22.128.90"/>
        </slice>
        <from usec="0" sec="1218171606"/>
        <to usec="0" sec="1218172428"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.167.13.196"/>
        </slice>
        <from usec="0" sec="1218171614"/>
        <to usec="0" sec="1218172405"/>
    </anomaly>
    <anomaly type="notice" value="0.612028,1.172260,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="150.239.105.152"/>
            <filter dst_ip="148.192.226.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1218171615"/>
        <to usec="0" sec="1218172428"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="106.211.78.59"/>
        </slice>
        <from usec="0" sec="1218171616"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.160.9"/>
        </slice>
        <from usec="0" sec="1218171621"/>
        <to usec="0" sec="1218172422"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.5.144"/>
        </slice>
        <from usec="0" sec="1218171625"/>
        <to usec="0" sec="1218172417"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.176.105.153"/>
        </slice>
        <from usec="0" sec="1218171626"/>
        <to usec="0" sec="1218172425"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="145.88.103.59"/>
        </slice>
        <from usec="0" sec="1218171627"/>
        <to usec="0" sec="1218172427"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="172.14.76.238"/>
        </slice>
        <from usec="0" sec="1218171628"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.109.113.141"/>
        </slice>
        <from usec="0" sec="1218171630"/>
        <to usec="0" sec="1218172406"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.242.134.39"/>
        </slice>
        <from usec="0" sec="1218171634"/>
        <to usec="0" sec="1218172423"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="44.226.34.192"/>
        </slice>
        <from usec="0" sec="1218171652"/>
        <to usec="0" sec="1218172427"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.239.24.184"/>
        </slice>
        <from usec="0" sec="1218171659"/>
        <to usec="0" sec="1218172417"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.43.145.77"/>
        </slice>
        <from usec="0" sec="1218171822"/>
        <to usec="0" sec="1218172425"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.93.208.24"/>
        </slice>
        <from usec="0" sec="1218171901"/>
        <to usec="0" sec="1218172311"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.80.9.227"/>
        </slice>
        <from usec="0" sec="1218171990"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.14.16.129"/>
        </slice>
        <from usec="0" sec="1218172057"/>
        <to usec="0" sec="1218172379"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.3.233.50"/>
        </slice>
        <from usec="0" sec="1218172117"/>
        <to usec="0" sec="1218172323"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.80.9.209"/>
        </slice>
        <from usec="0" sec="1218172188"/>
        <to usec="0" sec="1218172426"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.139.66.220"/>
        </slice>
        <from usec="0" sec="1218172207"/>
        <to usec="0" sec="1218172368"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.153.25.133"/>
        </slice>
        <from usec="0" sec="1218172230"/>
        <to usec="0" sec="1218172252"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="52.141.107.240"/>
        </slice>
        <from usec="0" sec="1218172249"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.170.60.182"/>
        </slice>
        <from usec="0" sec="1218172255"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.88.162.205"/>
        </slice>
        <from usec="0" sec="1218172274"/>
        <to usec="0" sec="1218172280"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.41.160" dst_ip="217.68.215.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218171693"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.164.167.91" dst_ip="32.84.32.97" src_port="80" dst_port="55792"/>
        </slice>
        <from usec="0" sec="1218171622"/>
        <to usec="0" sec="1218171638"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="216.3.227.134" dst_ip="175.58.71.52" src_port="80"/>
            <filter src_ip="216.3.227.189" dst_ip="175.58.71.52" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171695"/>
        <to usec="0" sec="1218171709"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.214.53" dst_ip="200.97.194.66" src_port="3543" dst_port="80"/>
            <filter src_ip="175.58.214.53" dst_ip="200.97.194.66" src_port="3542" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171603"/>
        <to usec="0" sec="1218171798"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.19.224.33" dst_ip="32.84.33.246" src_port="80"/>
            <filter src_ip="145.176.238.244" dst_ip="32.84.33.246" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172249"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="193.76.16.129" dst_ip="150.239.164.106" dst_port="80"/>
            <filter src_ip="94.167.110.147" dst_ip="150.239.164.106" dst_port="80"/>
            <filter src_ip="94.167.110.144" dst_ip="150.239.164.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171624"/>
        <to usec="0" sec="1218171954"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.207.65" dst_ip="61.52.172.24" src_port="80" dst_port="48096"/>
        </slice>
        <from usec="0" sec="1218171862"/>
        <to usec="0" sec="1218171875"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.239.223.117" dst_ip="208.178.82.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171626"/>
        <to usec="0" sec="1218172056"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="192.14.55.92" dst_ip="175.58.71.22" src_port="80"/>
            <filter src_ip="196.166.160.130" dst_ip="175.58.71.22" src_port="443"/>
            <filter src_ip="209.154.224.244" dst_ip="175.58.71.22" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171602"/>
        <to usec="0" sec="1218171975"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.84.38.68" dst_ip="169.19.129.45" src_port="61684" dst_port="80"/>
            <filter src_ip="32.84.38.68" dst_ip="169.19.129.45" src_port="44848" dst_port="80"/>
            <filter src_ip="32.84.38.68" dst_ip="169.19.129.45" src_port="40102" dst_port="80"/>
            <filter src_ip="32.84.38.68" dst_ip="169.19.129.45" src_port="34903" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171605"/>
        <to usec="0" sec="1218172154"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="118.43.190.150" dst_ip="150.239.61.25" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171606"/>
        <to usec="0" sec="1218172155"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="150.239.165.62" dst_ip="193.176.202.163"/>
            <filter src_ip="150.239.165.62" dst_port="80"/>
            <filter dst_ip="193.176.202.163" dst_port="80"/>
            <filter src_ip="150.239.165.62" dst_ip="94.80.131.140" dst_port="554"/>
        </slice>
        <from usec="0" sec="1218171773"/>
        <to usec="0" sec="1218172159"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.55.117.34" dst_ip="145.7.245.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172332"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.109.111.169" dst_ip="192.168.250.10" src_port="56944" dst_port="161"/>
            <filter src_ip="193.109.111.169" dst_ip="192.168.250.10" src_port="56903" dst_port="161"/>
            <filter src_ip="193.109.111.169" dst_ip="192.168.250.10" src_port="50705" dst_port="47545"/>
        </slice>
        <from usec="0" sec="1218171607"/>
        <to usec="0" sec="1218172336"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.164.75.149" src_port="14116"/>
            <filter src_ip="145.164.75.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171981"/>
        <to usec="0" sec="1218172339"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="32.84.46.42" dst_ip="169.19.172.228" dst_port="80"/>
            <filter src_ip="192.81.55.174" dst_ip="169.19.172.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172423"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.109.119.25" src_port="80"/>
            <filter dst_ip="193.109.119.25" dst_port="6892"/>
        </slice>
        <from usec="0" sec="1218171601"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.109.113.145" dst_ip="213.2.25.223" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171607"/>
        <to usec="0" sec="1218172429"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,053,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="192.73.76.81" dst_ip="150.239.128.0" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171610"/>
        <to usec="0" sec="1218172412"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.207.65" dst_ip="194.195.175.102" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171650"/>
        <to usec="0" sec="1218172422"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.58.207.76" dst_ip="208.166.211.60" src_port="80"/>
        </slice>
        <from usec="0" sec="1218171973"/>
        <to usec="0" sec="1218172418"/>
    </anomaly>
    <anomaly type="notice" value="0.784537,1.187620,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.191.98.170" dst_ip="150.239.172.81" src_port="80"/>
        </slice>
        <from usec="0" sec="1218172212"/>
        <to usec="0" sec="1218172328"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.176.179.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.222.95.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.676821,1.141040,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.58.164.216" dst_ip="33.19.70.14" src_port="80"/>
            <filter src_ip="175.58.164.216" dst_ip="42.93.224.91" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.676821,1.141040,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.109.113.238" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.66.97.22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="94.27.124.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="94.27.124.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="94.132.118.112"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.153.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.92.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="175.58.95.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.58.5.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="193.109.121.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="150.239.61.25" dst_ip="193.191.98.54"/>
            <filter src_ip="150.239.61.25" dst_port="80"/>
            <filter src_ip="150.239.202.170" dst_ip="193.191.98.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.183.110.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.176.64.247" dst_ip="32.84.36.70" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,999,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="131.222.147.107" dst_ip="32.84.46.240"/>
            <filter src_ip="131.222.147.107" src_port="80"/>
            <filter src_ip="145.176.48.67" dst_ip="32.84.46.240" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="32.84.46.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.350420,1.123530,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="18.222.164.102" dst_ip="145.164.250.251" dst_port="80"/>
            <filter src_ip="219.11.194.177" dst_ip="145.164.250.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="1218171606"/>
        <to usec="0" sec="1218171979"/>
    </anomaly>
    <anomaly type="notice" value="0.771757,1.190040,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.239.165.85" dst_ip="192.160.23.57" dst_port="80"/>
            <filter src_ip="150.239.165.85" dst_ip="197.44.86.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
