<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.209.140"/>
        </slice>
        <from usec="0" sec="1223614911"/>
        <to usec="0" sec="1223614915"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,502,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.102.195.153" dst_ip="212.21.132.0" src_port="62353" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615002"/>
        <to usec="0" sec="1223615603"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.16.138.38" dst_ip="217.129.12.125" src_port="4161" dst_port="1352" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614842"/>
        <to usec="0" sec="1223615547"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.75.87.225"/>
        </slice>
        <from usec="0" sec="1223614931"/>
        <to usec="0" sec="1223615086"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.243.241.70" dst_ip="206.4.96.13" src_port="42921" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615010"/>
        <to usec="0" sec="1223615013"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.11.176.250" dst_ip="162.73.164.124" src_port="80" dst_port="1087" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614844"/>
        <to usec="0" sec="1223614885"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.104.182"/>
        </slice>
        <from usec="0" sec="1223615395"/>
        <to usec="0" sec="1223615399"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.118.160"/>
        </slice>
        <from usec="0" sec="1223615350"/>
        <to usec="0" sec="1223615354"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.213.133" dst_ip="212.138.109.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615168"/>
        <to usec="0" sec="1223615174"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.36.231"/>
        </slice>
        <from usec="0" sec="1223614956"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.33.128.69"/>
        </slice>
        <from usec="0" sec="1223614812"/>
        <to usec="0" sec="1223614815"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.243.151.62"/>
        </slice>
        <from usec="0" sec="1223615371"/>
        <to usec="0" sec="1223615374"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.118.158" dst_ip="192.90.232.200" src_port="1785" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615353"/>
        <to usec="0" sec="1223615357"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.166.69.40"/>
        </slice>
        <from usec="0" sec="1223615316"/>
        <to usec="0" sec="1223615319"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.211.169.168" dst_ip="136.228.81.6" src_port="554" dst_port="4031" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615204"/>
        <to usec="0" sec="1223615208"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.118.142" dst_ip="104.243.254.175" src_port="2460" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614829"/>
        <to usec="0" sec="1223615168"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="21.48.23.177" dst_ip="136.228.80.8" src_port="33613" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615067"/>
        <to usec="0" sec="1223615073"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.65.70" dst_ip="204.72.218.123" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615127"/>
        <to usec="0" sec="1223615183"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.243.13.162" dst_ip="213.43.44.75" src_port="4223" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615056"/>
        <to usec="0" sec="1223615059"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.184.199"/>
        </slice>
        <from usec="0" sec="1223614870"/>
        <to usec="0" sec="1223614874"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.33.142.128" dst_ip="210.192.150.137" src_port="1087" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615168"/>
        <to usec="0" sec="1223615180"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.122.25"/>
        </slice>
        <from usec="0" sec="1223614922"/>
        <to usec="0" sec="1223614926"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.43.44.114"/>
        </slice>
        <from usec="0" sec="1223615037"/>
        <to usec="0" sec="1223615040"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.73.185.138" dst_ip="192.105.70.160" src_port="3536" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614962"/>
        <to usec="0" sec="1223615182"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.154.180"/>
        </slice>
        <from usec="0" sec="1223614903"/>
        <to usec="0" sec="1223614907"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.201.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614844"/>
        <to usec="0" sec="1223615386"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.13.7" dst_ip="148.40.80.46" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614857"/>
        <to usec="0" sec="1223615603"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.219.45" dst_ip="18.117.207.36" src_port="4259" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615148"/>
        <to usec="0" sec="1223615151"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.16.209.78" dst_ip="200.81.45.8" src_port="4608" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614966"/>
        <to usec="0" sec="1223614969"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.104.193" dst_ip="72.211.169.168" src_port="4762" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614855"/>
        <to usec="0" sec="1223615631"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.136.81.242"/>
        </slice>
        <from usec="0" sec="1223615114"/>
        <to usec="0" sec="1223615118"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.23.56"/>
        </slice>
        <from usec="0" sec="1223615674"/>
        <to usec="0" sec="1223615678"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="102.151.7.45" dst_ip="164.25.79.55" src_port="80" dst_port="57410" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614810"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.226.97.64"/>
        </slice>
        <from usec="0" sec="1223615602"/>
        <to usec="0" sec="1223615608"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.65.27" dst_ip="21.4.78.45" src_port="80" dst_port="1770" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614810"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.138.104" dst_ip="193.52.232.192" src_port="3404" dst_port="465" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615074"/>
        <to usec="0" sec="1223615078"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.170.33.234" dst_ip="162.73.189.40" src_port="80" dst_port="64343" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615128"/>
        <to usec="0" sec="1223615131"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.193.143.26"/>
        </slice>
        <from usec="0" sec="1223615453"/>
        <to usec="0" sec="1223615457"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.22.194"/>
        </slice>
        <from usec="0" sec="1223614983"/>
        <to usec="0" sec="1223614987"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.243.51.134" src_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615620"/>
        <to usec="0" sec="1223615623"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.33.137.196" dst_ip="210.192.150.165" src_port="1035" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615272"/>
        <to usec="0" sec="1223615281"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.154.100"/>
        </slice>
        <from usec="0" sec="1223615278"/>
        <to usec="0" sec="1223615540"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.64.25" dst_ip="193.52.143.42" src_port="28061" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614988"/>
        <to usec="0" sec="1223614992"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.117.71" dst_ip="204.185.183.151" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615256"/>
        <to usec="0" sec="1223615330"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.117.70"/>
        </slice>
        <from usec="0" sec="1223615487"/>
        <to usec="0" sec="1223615491"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.4.85.239" dst_ip="164.25.69.63" src_port="39224" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223615588"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="210.192.150.158"/>
        </slice>
        <from usec="0" sec="1223615182"/>
        <to usec="0" sec="1223615186"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="126.150.31.164" dst_ip="164.25.5.13" src_port="35040" dst_port="20" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615520"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.114.70"/>
        </slice>
        <from usec="0" sec="1223615368"/>
        <to usec="0" sec="1223615557"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.122.135"/>
        </slice>
        <from usec="0" sec="1223615121"/>
        <to usec="0" sec="1223615128"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.88.156.18" dst_ip="136.228.201.9" src_port="3804" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615081"/>
        <to usec="0" sec="1223615085"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.86.48" dst_ip="193.217.98.216" src_port="2866" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615348"/>
        <to usec="0" sec="1223615351"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.4.84.32" dst_ip="164.25.106.82" src_port="46806" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615144"/>
        <to usec="0" sec="1223615147"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.192.150.165" dst_ip="213.33.137.196" src_port="80" dst_port="1035" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615275"/>
        <to usec="0" sec="1223615281"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.33.33.187" dst_ip="136.228.201.9" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614881"/>
        <to usec="0" sec="1223615084"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.142.24.142"/>
        </slice>
        <from usec="0" sec="1223615334"/>
        <to usec="0" sec="1223615338"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.71.178" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615652"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.105.76.199" dst_ip="142.243.9.53" src_port="80" dst_port="2021" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614864"/>
        <to usec="0" sec="1223614929"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.243.253.104"/>
        </slice>
        <from usec="0" sec="1223614920"/>
        <to usec="0" sec="1223614923"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="171.11.89.97" dst_ip="136.228.5.75" src_port="80" dst_port="1537" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615038"/>
        <to usec="0" sec="1223615040"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.48.17.134" dst_ip="136.228.172.54" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614873"/>
        <to usec="0" sec="1223615123"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.243.251.18" dst_ip="136.228.104.224" src_port="80" dst_port="2959" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614964"/>
        <to usec="0" sec="1223615009"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.170.38.99" dst_ip="136.228.65.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615208"/>
        <to usec="0" sec="1223615283"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.243.251.20" dst_ip="136.228.119.124" src_port="80" dst_port="2131" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615178"/>
        <to usec="0" sec="1223615226"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.73.237.231" dst_ip="20.208.92.3" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615399"/>
        <to usec="0" sec="1223615638"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.146.130.198" dst_ip="136.228.5.210" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615005"/>
        <to usec="0" sec="1223615007"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="136.228.5.143" dst_ip="213.43.238.98" src_port="50074" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615032"/>
        <to usec="0" sec="1223615035"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.243.74.88" dst_ip="104.243.254.41" src_port="4171" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614840"/>
        <to usec="0" sec="1223614901"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.75.100" dst_ip="104.243.255.67" src_port="55782" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223614997"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.74.89" dst_ip="104.243.249.151" src_port="1389" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614883"/>
        <to usec="0" sec="1223614966"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.220.153.6" dst_ip="136.228.81.52" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615087"/>
        <to usec="0" sec="1223615224"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.33.155.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614969"/>
        <to usec="0" sec="1223615110"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.16.159.212"/>
        </slice>
        <from usec="0" sec="1223615137"/>
        <to usec="0" sec="1223615144"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.187.67.104" dst_ip="142.243.11.170" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615106"/>
        <to usec="0" sec="1223615109"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.75.33"/>
        </slice>
        <from usec="0" sec="1223615328"/>
        <to usec="0" sec="1223615643"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="108.200.184.96"/>
        </slice>
        <from usec="0" sec="1223614863"/>
        <to usec="0" sec="1223614921"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.221.124"/>
        </slice>
        <from usec="0" sec="1223615398"/>
        <to usec="0" sec="1223615402"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.45.73" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615031"/>
        <to usec="0" sec="1223615035"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.20.232"/>
        </slice>
        <from usec="0" sec="1223615277"/>
        <to usec="0" sec="1223615281"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.117.4"/>
        </slice>
        <from usec="0" sec="1223614852"/>
        <to usec="0" sec="1223614870"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.224.3"/>
        </slice>
        <from usec="0" sec="1223615237"/>
        <to usec="0" sec="1223615241"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.174.171" dst_ip="109.163.75.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614889"/>
        <to usec="0" sec="1223615624"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.21.136.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223615643"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.81.35" dst_ip="72.211.169.172"/>
            <filter src_ip="136.228.81.35" dst_port="554"/>
            <filter src_ip="136.228.81.90" dst_ip="72.211.169.172" dst_port="554"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615620"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.81.6" dst_ip="72.211.169.168" src_port="4031" dst_port="554"/>
        </slice>
        <from usec="0" sec="1223614805"/>
        <to usec="0" sec="1223615281"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="21.220.25.194" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="96.16.247.186"/>
        </slice>
        <from usec="0" sec="1223615104"/>
        <to usec="0" sec="1223615107"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.13.58" dst_ip="206.27.96.194" dst_port="80"/>
            <filter src_ip="142.243.13.58" dst_ip="206.27.96.244" dst_port="80"/>
            <filter src_ip="142.243.13.58" dst_ip="212.24.87.108" dst_port="80"/>
            <filter src_ip="142.243.13.58" dst_ip="104.31.129.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615193"/>
        <to usec="0" sec="1223615197"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.114.70"/>
        </slice>
        <from usec="0" sec="1223614975"/>
        <to usec="0" sec="1223614978"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.228.120.104"/>
        </slice>
        <from usec="0" sec="1223615058"/>
        <to usec="0" sec="1223615062"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.114.122"/>
        </slice>
        <from usec="0" sec="1223615313"/>
        <to usec="0" sec="1223615317"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.154.96" dst_ip="192.105.65.104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614852"/>
        <to usec="0" sec="1223615667"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="221.18.80.131"/>
        </slice>
        <from usec="0" sec="1223615042"/>
        <to usec="0" sec="1223615045"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.155.17"/>
        </slice>
        <from usec="0" sec="1223615031"/>
        <to usec="0" sec="1223615035"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.71.181" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614811"/>
        <to usec="0" sec="1223615652"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.90.234.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614808"/>
        <to usec="0" sec="1223615666"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.16.152.152"/>
        </slice>
        <from usec="0" sec="1223615093"/>
        <to usec="0" sec="1223615097"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.166.175" dst_ip="216.184.244.41" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614887"/>
        <to usec="0" sec="1223615609"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.16.226.27"/>
        </slice>
        <from usec="0" sec="1223615368"/>
        <to usec="0" sec="1223615372"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="21.48.23.162"/>
        </slice>
        <from usec="0" sec="1223615117"/>
        <to usec="0" sec="1223615120"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.150.132" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614837"/>
        <to usec="0" sec="1223614840"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.33.54.33"/>
        </slice>
        <from usec="0" sec="1223614900"/>
        <to usec="0" sec="1223615308"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.189.40" dst_ip="213.3.104.218" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615039"/>
        <to usec="0" sec="1223615043"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.12.18"/>
        </slice>
        <from usec="0" sec="1223615207"/>
        <to usec="0" sec="1223615213"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.115.101" dst_ip="212.138.109.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614939"/>
        <to usec="0" sec="1223615657"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.104.238" dst_ip="192.95.51.104" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614892"/>
        <to usec="0" sec="1223614898"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.214.244"/>
        </slice>
        <from usec="0" sec="1223615289"/>
        <to usec="0" sec="1223615293"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.33.142.192"/>
        </slice>
        <from usec="0" sec="1223614868"/>
        <to usec="0" sec="1223614871"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.243.46.111"/>
        </slice>
        <from usec="0" sec="1223615072"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.115.221" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615231"/>
        <to usec="0" sec="1223615330"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.18.115.178" dst_ip="136.228.77.0" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615450"/>
        <to usec="0" sec="1223615454"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.94.217" dst_ip="213.3.16.141" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615169"/>
        <to usec="0" sec="1223615173"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.81.55" dst_ip="213.3.40.249" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614948"/>
        <to usec="0" sec="1223614981"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.81.42"/>
        </slice>
        <from usec="0" sec="1223615235"/>
        <to usec="0" sec="1223615238"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.94.129"/>
        </slice>
        <from usec="0" sec="1223615085"/>
        <to usec="0" sec="1223615141"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.86.116" dst_ip="194.235.61.127" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223615012"/>
        <to usec="0" sec="1223615078"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="213.33.138.77" dst_ip="115.82.219.98"/>
            <filter src_ip="213.33.138.77" dst_port="80"/>
            <filter dst_ip="115.82.219.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614847"/>
        <to usec="0" sec="1223615593"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.81.2" dst_ip="213.43.77.69" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614913"/>
        <to usec="0" sec="1223614916"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,010,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="192.113.17.66" dst_ip="164.25.102.74" proto="tcp"/>
        </slice>
        <from usec="0" sec="1223614974"/>
        <to usec="0" sec="1223614978"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="76.139.64.9" src_port="1031" dst_port="137"/>
        </slice>
        <from usec="0" sec="1223615344"/>
        <to usec="0" sec="1223615355"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="121.107.167.193" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1223614922"/>
        <to usec="0" sec="1223614927"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.21.136.57"/>
        </slice>
        <from usec="0" sec="1223615416"/>
        <to usec="0" sec="1223615419"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="213.42.135.123" dst_port="40000"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615699"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.90.9"/>
        </slice>
        <from usec="0" sec="1223615645"/>
        <to usec="0" sec="1223615649"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="136.228.104.154"/>
        </slice>
        <from usec="0" sec="1223615137"/>
        <to usec="0" sec="1223615141"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="162.73.22.201"/>
        </slice>
        <from usec="0" sec="1223615664"/>
        <to usec="0" sec="1223615667"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.228.65.90"/>
        </slice>
        <from usec="0" sec="1223615401"/>
        <to usec="0" sec="1223615405"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.25.87.130" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223615073"/>
        <to usec="0" sec="1223615471"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="108.200.189.96"/>
        </slice>
        <from usec="0" sec="1223615558"/>
        <to usec="0" sec="1223615562"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.26.135.234"/>
        </slice>
        <from usec="0" sec="1223614871"/>
        <to usec="0" sec="1223614874"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.243.188.43"/>
        </slice>
        <from usec="0" sec="1223615348"/>
        <to usec="0" sec="1223615351"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="107.100.229.188"/>
        </slice>
        <from usec="0" sec="1223615257"/>
        <to usec="0" sec="1223615261"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.6.122.43"/>
        </slice>
        <from usec="0" sec="1223615682"/>
        <to usec="0" sec="1223615685"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="213.43.29.47"/>
        </slice>
        <from usec="0" sec="1223614860"/>
        <to usec="0" sec="1223614864"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.94.154"/>
        </slice>
        <from usec="0" sec="1223615082"/>
        <to usec="0" sec="1223615086"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.75.87.226" dst_ip="162.73.188.65" src_port="80" dst_port="1148"/>
            <filter src_ip="192.75.87.226" dst_ip="162.73.188.65" src_port="80" dst_port="1135"/>
            <filter src_ip="192.75.87.226" dst_ip="162.73.188.65" src_port="80" dst_port="1116"/>
            <filter src_ip="192.75.87.226" dst_ip="162.73.188.65" src_port="80" dst_port="1111"/>
        </slice>
        <from usec="0" sec="1223615114"/>
        <to usec="0" sec="1223615305"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.11.170" dst_ip="8.187.67.104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614871"/>
        <to usec="0" sec="1223615287"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.64.135" dst_ip="212.20.10.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614887"/>
        <to usec="0" sec="1223614893"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.118.165" dst_ip="104.243.253.16" src_port="3967" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615195"/>
        <to usec="0" sec="1223615199"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.117.39" dst_port="80"/>
            <filter dst_ip="216.110.143.87" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615683"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.15.26" dst_ip="212.138.109.130" src_port="49512" dst_port="80"/>
            <filter src_ip="142.243.15.26" dst_ip="212.138.109.130" src_port="49509" dst_port="80"/>
            <filter src_ip="142.243.15.26" dst_ip="212.138.109.130" src_port="49506" dst_port="80"/>
            <filter src_ip="142.243.15.26" dst_ip="96.30.18.23" src_port="49494" dst_port="80"/>
            <filter src_ip="142.243.15.26" dst_ip="96.30.18.23" src_port="49470" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615679"/>
        <to usec="0" sec="1223615693"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,999,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.219.21"/>
            <filter src_ip="136.228.128.43" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615358"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.82.142" dst_ip="108.200.184.110" src_port="3752" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615175"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.26.9" dst_ip="211.54.115.141" src_port="48635" dst_port="25"/>
            <filter src_ip="136.228.26.9" dst_ip="193.52.168.30" src_port="48634" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223615391"/>
        <to usec="0" sec="1223615405"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="21.48.23.176" dst_ip="212.21.129.87" src_port="46086" dst_port="80"/>
            <filter src_ip="21.48.23.176" dst_ip="136.228.102.192" src_port="44969" dst_port="80"/>
            <filter src_ip="21.48.23.176" dst_ip="136.228.80.8" src_port="44442" dst_port="80"/>
            <filter src_ip="21.48.23.176" dst_ip="136.228.80.31" src_port="45050" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1223615096"/>
        <to usec="0" sec="1223615099"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,999,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.243.75.224" dst_ip="23.37.130.191" dst_port="80"/>
            <filter src_ip="142.243.75.224" dst_ip="21.220.25.226" dst_port="80"/>
            <filter src_ip="136.228.21.150" dst_ip="213.43.161.231" dst_port="110"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223615618"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.104.208" dst_ip="18.78.169.72" src_port="3676" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615278"/>
        <to usec="0" sec="1223615498"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.46.169" dst_ip="213.55.226.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614895"/>
        <to usec="0" sec="1223614899"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.104.207" dst_ip="192.90.234.209" src_port="2354" dst_port="80"/>
            <filter src_ip="136.228.104.207" dst_ip="104.243.242.179" src_port="2356" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615128"/>
        <to usec="0" sec="1223615457"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.104.206" dst_ip="192.65.121.34" src_port="3886" dst_port="80"/>
            <filter src_ip="136.228.104.206" dst_ip="192.65.121.34" src_port="3885" dst_port="80"/>
            <filter src_ip="136.228.104.206" dst_ip="192.65.121.34" src_port="3883" dst_port="80"/>
            <filter src_ip="136.228.104.206" dst_ip="192.65.121.34" src_port="3881" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614889"/>
        <to usec="0" sec="1223615024"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.16.172.161" dst_ip="210.192.150.138" src_port="1291" dst_port="80"/>
            <filter src_ip="142.16.172.161" dst_ip="210.192.150.138" src_port="1261" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615286"/>
        <to usec="0" sec="1223615638"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.88.203" dst_ip="210.67.21.194" src_port="3981" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615534"/>
        <to usec="0" sec="1223615540"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.155.32.66" dst_ip="136.228.172.90" src_port="80"/>
        </slice>
        <from usec="0" sec="1223615292"/>
        <to usec="0" sec="1223615360"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.72.134" dst_ip="20.168.18.103" dst_port="80"/>
            <filter src_ip="142.243.72.134" dst_ip="195.136.224.163" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614988"/>
        <to usec="0" sec="1223614992"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.243.232.157" dst_port="80"/>
            <filter dst_ip="193.52.168.116" dst_port="995"/>
            <filter dst_ip="193.52.168.116" dst_port="993"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615019"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.122.66" dst_port="80"/>
            <filter src_ip="136.228.148.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614844"/>
        <to usec="0" sec="1223615557"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="136.228.154.155" dst_ip="194.8.20.118" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615372"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.104.224" dst_ip="192.105.65.99" src_port="2965" dst_port="80"/>
            <filter src_ip="136.228.104.224" dst_ip="192.105.65.99" src_port="2933" dst_port="80"/>
            <filter src_ip="136.228.104.224" dst_ip="104.243.251.18" src_port="2959" dst_port="80"/>
            <filter src_ip="136.228.104.224" dst_ip="104.243.250.6" src_port="2977" dst_port="80"/>
            <filter src_ip="136.228.104.224" dst_ip="104.243.253.160" src_port="3007" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614960"/>
        <to usec="0" sec="1223615130"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.74.38" dst_ip="212.138.109.98" src_port="50114" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615402"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.138.109" dst_ip="192.90.234.194" src_port="1027" dst_port="80"/>
            <filter src_ip="136.228.138.109" dst_ip="104.243.241.2" src_port="1040" dst_port="80"/>
            <filter src_ip="136.228.138.109" dst_ip="107.51.139.91" src_port="49180" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614874"/>
        <to usec="0" sec="1223615035"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.33.145.22" dst_ip="68.160.75.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614897"/>
        <to usec="0" sec="1223615667"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.42.155.202" dst_ip="210.192.150.130" src_port="3702" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614812"/>
        <to usec="0" sec="1223615638"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.94.217.147" dst_ip="212.21.136.148" src_port="50556" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615439"/>
        <to usec="0" sec="1223615530"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.243.75.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614824"/>
        <to usec="0" sec="1223615110"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.81.76" dst_ip="192.105.65.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614895"/>
        <to usec="0" sec="1223615609"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="19.124.83.11" dst_ip="142.243.151.3" src_port="2152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615350"/>
        <to usec="0" sec="1223615357"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.16.131.151" dst_ip="219.168.208.20" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223615016"/>
        <to usec="0" sec="1223615498"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.164.124" dst_ip="193.124.101.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614844"/>
        <to usec="0" sec="1223615289"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.73.66.35" dst_ip="210.192.150.156" src_port="49190" dst_port="80"/>
            <filter src_ip="162.73.66.35" dst_ip="210.192.150.156" src_port="49189" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615037"/>
        <to usec="0" sec="1223615094"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.192.150.137" dst_ip="213.33.142.128" src_port="80" dst_port="1087"/>
        </slice>
        <from usec="0" sec="1223615170"/>
        <to usec="0" sec="1223615178"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.114.93" dst_ip="212.138.109.68" src_port="4172" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614839"/>
        <to usec="0" sec="1223615399"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.81.90" dst_ip="72.211.169.172" src_port="2806" dst_port="554"/>
        </slice>
        <from usec="0" sec="1223615165"/>
        <to usec="0" sec="1223615401"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.188.65" dst_ip="192.75.87.224" dst_port="80"/>
            <filter src_ip="162.73.188.65" dst_ip="192.75.87.226" dst_port="80"/>
            <filter src_ip="162.73.188.65" dst_ip="192.75.87.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614847"/>
        <to usec="0" sec="1223615609"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.169.52.235" dst_ip="136.228.81.195" src_port="80" dst_port="1156"/>
        </slice>
        <from usec="0" sec="1223615226"/>
        <to usec="0" sec="1223615230"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.138.109.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614803"/>
        <to usec="0" sec="1223614997"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.243.47.213" src_port="62170"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615332"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.81.37" dst_ip="204.212.129.27" dst_port="80"/>
            <filter src_ip="136.228.81.37" dst_ip="21.81.67.29" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615020"/>
        <to usec="0" sec="1223615282"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="139.40.25.87" dst_ip="162.73.237.147" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614956"/>
        <to usec="0" sec="1223615284"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="142.243.9.53" dst_ip="192.105.65.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614826"/>
        <to usec="0" sec="1223614973"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.243.239.202" dst_ip="206.136.62.47" src_port="4385" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614871"/>
        <to usec="0" sec="1223615241"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.75.15" dst_ip="86.248.124.91" src_port="19961" dst_port="6337"/>
            <filter src_ip="142.243.75.15" dst_ip="192.105.65.100" src_port="3645" dst_port="80"/>
            <filter src_ip="142.243.75.15" dst_ip="104.243.252.83" src_port="3727" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614869"/>
        <to usec="0" sec="1223615284"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="213.43.161.230" dst_port="25"/>
            <filter dst_ip="212.138.109.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615240"/>
        <to usec="0" sec="1223615267"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="142.243.174.171" dst_ip="109.163.75.178" dst_port="80"/>
            <filter src_ip="142.243.72.169" dst_ip="109.163.75.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614857"/>
        <to usec="0" sec="1223615619"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.85.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615428"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="107.100.224.227" dst_port="995"/>
            <filter dst_ip="107.100.224.227" dst_port="993"/>
        </slice>
        <from usec="0" sec="1223614884"/>
        <to usec="0" sec="1223615369"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="210.74.3.211" dst_ip="142.243.73.85" src_port="1935"/>
        </slice>
        <from usec="0" sec="1223614839"/>
        <to usec="0" sec="1223615156"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.160.216.170" dst_ip="136.228.164.169" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614884"/>
        <to usec="0" sec="1223614888"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.21.131.164" dst_ip="113.139.128.32" dst_port="80"/>
            <filter src_ip="212.21.131.164" dst_ip="139.40.98.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615235"/>
        <to usec="0" sec="1223615485"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,999,1 1 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.241.117" dst_ip="98.177.64.83" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615673"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.88.131" dst_port="80"/>
            <filter src_ip="136.228.88.131" dst_ip="71.171.48.0" src_port="3128"/>
        </slice>
        <from usec="0" sec="1223614884"/>
        <to usec="0" sec="1223614899"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.213.173" dst_ip="212.138.109.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615103"/>
        <to usec="0" sec="1223615106"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.16.147.213" dst_ip="213.43.160.118" dst_port="80"/>
            <filter src_ip="142.16.147.213" dst_ip="213.34.202.126" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615113"/>
        <to usec="0" sec="1223615142"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.188.152" dst_ip="205.20.124.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223614986"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.74.70" dst_ip="192.95.50.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614903"/>
        <to usec="0" sec="1223614910"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.119.81" dst_ip="21.220.19.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614985"/>
        <to usec="0" sec="1223614998"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.99.65.173" dst_ip="213.236.29.145" dst_port="22"/>
        </slice>
        <from usec="0" sec="1223615042"/>
        <to usec="0" sec="1223615469"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.104.244" dst_ip="221.18.80.131" src_port="3201" dst_port="80"/>
            <filter src_ip="136.228.104.244" dst_ip="221.18.80.131" src_port="3155" dst_port="80"/>
            <filter src_ip="136.228.104.244" dst_ip="221.18.80.131" src_port="3153" dst_port="80"/>
            <filter src_ip="136.228.104.244" dst_ip="96.24.28.196" src_port="3223" dst_port="80"/>
            <filter src_ip="136.228.104.244" dst_ip="96.24.28.196" src_port="3221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615101"/>
        <to usec="0" sec="1223615105"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.87.75.138" dst_ip="52.72.9.150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615090"/>
        <to usec="0" sec="1223615249"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="108.85.22.213" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223615277"/>
        <to usec="0" sec="1223615481"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.4.85.225" dst_ip="164.25.18.143" src_port="33061" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223614895"/>
        <to usec="0" sec="1223614920"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.188.82" dst_ip="208.226.54.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615005"/>
        <to usec="0" sec="1223615107"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.240.129" dst_ip="192.95.51.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614985"/>
        <to usec="0" sec="1223614991"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.228.81.8" dst_ip="21.220.19.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614906"/>
        <to usec="0" sec="1223615233"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.81.26" dst_ip="213.43.77.69" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223615018"/>
        <to usec="0" sec="1223615178"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.76.52" dst_ip="23.9.24.149" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223615322"/>
        <to usec="0" sec="1223615326"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.73.95.13" dst_ip="192.217.214.155" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615055"/>
        <to usec="0" sec="1223615130"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="69.102.108.24" dst_port="445"/>
            <filter src_ip="69.102.108.24" dst_port="139"/>
        </slice>
        <from usec="0" sec="1223615558"/>
        <to usec="0" sec="1223615586"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="204.9.108.203" dst_port="139"/>
        </slice>
        <from usec="0" sec="1223615468"/>
        <to usec="0" sec="1223615506"/>
    </anomaly>
    <anomaly type="notice" value="0.768212,1.256030,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="99.105.145.76" dst_ip="164.25.72.121" src_port="43597" dst_port="25"/>
            <filter src_ip="99.105.147.224" dst_ip="164.25.72.121" src_port="3706" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223615074"/>
        <to usec="0" sec="1223615078"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="21.71.185.126" dst_ip="160.49.183.71" src_port="17167" dst_port="31274"/>
            <filter src_ip="21.71.185.126" dst_ip="160.49.183.71" src_port="5480" dst_port="1352"/>
            <filter src_ip="21.71.185.126" dst_ip="212.21.128.84" src_port="38676" dst_port="16881"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615305"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.1.111.195"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.228.138.83"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="72.224.210.110" dst_ip="136.228.44.214" src_port="4067" dst_port="62191"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615544"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="19.186.105.213"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.77.26.186"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.33.130.131"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="70.104.167.152"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.141.230.179" dst_ip="160.49.201.3" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615699"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.74.168"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614908"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.91.78.71"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.723351,1.228980,503,0 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="21.48.23.186" dst_port="80"/>
            <filter dst_ip="142.243.51.208" dst_port="80"/>
            <filter dst_ip="136.228.65.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.16.237.176" dst_ip="212.138.109.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614906"/>
        <to usec="0" sec="1223614910"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="102.10.207.181"/>
        </slice>
        <from usec="0" sec="1223614810"/>
        <to usec="0" sec="1223614844"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.228.65.66"/>
        </slice>
        <from usec="0" sec="1223614811"/>
        <to usec="0" sec="1223614892"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="71.231.152.22"/>
        </slice>
        <from usec="0" sec="1223614824"/>
        <to usec="0" sec="1223614891"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="136.228.77.0"/>
        </slice>
        <from usec="0" sec="1223614833"/>
        <to usec="0" sec="1223614843"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.58.201.253"/>
        </slice>
        <from usec="0" sec="1223614866"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="73.120.177.202"/>
        </slice>
        <from usec="0" sec="1223614866"/>
        <to usec="0" sec="1223614891"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.80.0.144" dst_ip="164.25.96.49" src_port="20143" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223614867"/>
        <to usec="0" sec="1223614902"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.98.139.163"/>
        </slice>
        <from usec="0" sec="1223614871"/>
        <to usec="0" sec="1223614892"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.75.87.227"/>
        </slice>
        <from usec="0" sec="1223614902"/>
        <to usec="0" sec="1223614909"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.52.116.254" dst_ip="142.243.189.146" src_port="1935" dst_port="1680"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615568"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.136.108" dst_port="80"/>
            <filter src_ip="213.33.147.44" dst_ip="193.52.162.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615354"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.122.50.187"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614881"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.16.131.2"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="23.37.130.37"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.238.76.253"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614820"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="98.149.208.6" src_port="80"/>
            <filter src_ip="107.116.140.88" src_port="80"/>
            <filter dst_ip="162.73.216.51" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615625"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.119.207.108"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615536"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.73.161.90"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.100.242.21"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="213.42.135.123" src_port="40000"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615537"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.20.249.142" dst_ip="136.228.65.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614986"/>
        <to usec="0" sec="1223614989"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="73.120.146.34"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223614817"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.188.161"/>
        </slice>
        <from usec="0" sec="1223614813"/>
        <to usec="0" sec="1223614932"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.12.233" dst_ip="194.242.138.146" dst_port="80"/>
            <filter src_ip="142.243.12.233" dst_ip="204.185.213.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614821"/>
        <to usec="0" sec="1223614984"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.25.25.215"/>
        </slice>
        <from usec="0" sec="1223614823"/>
        <to usec="0" sec="1223614999"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.133.110.102"/>
        </slice>
        <from usec="0" sec="1223614825"/>
        <to usec="0" sec="1223614992"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.25.73.96"/>
        </slice>
        <from usec="0" sec="1223614854"/>
        <to usec="0" sec="1223614967"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.33.60.128"/>
        </slice>
        <from usec="0" sec="1223614884"/>
        <to usec="0" sec="1223614905"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.8.93.87"/>
        </slice>
        <from usec="0" sec="1223614891"/>
        <to usec="0" sec="1223614997"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="107.4.85.226" dst_ip="164.25.95.11" dst_port="25"/>
            <filter src_ip="122.2.197.187" dst_ip="164.25.95.11" dst_port="25"/>
            <filter src_ip="111.230.250.147" dst_ip="164.25.95.11" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223614897"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="76.210.105.111"/>
        </slice>
        <from usec="0" sec="1223614950"/>
        <to usec="0" sec="1223614960"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.86.22"/>
        </slice>
        <from usec="0" sec="1223614971"/>
        <to usec="0" sec="1223614994"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.172.110" dst_ip="193.52.137.144" dst_port="80"/>
            <filter src_ip="136.228.172.110" dst_ip="193.52.143.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614977"/>
        <to usec="0" sec="1223615585"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="72.8.128.211" dst_ip="136.228.193.32" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.228.115.80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615084"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.45.13.112"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223614991"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.123.96.191" dst_ip="136.228.65.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615374"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.85.93" dst_ip="212.138.109.224" src_port="2099" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615045"/>
        <to usec="0" sec="1223615048"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.73.189.236" src_port="1889"/>
            <filter src_ip="162.73.189.236" src_port="8512"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615290"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="200.122.155.91" dst_ip="136.228.117.4" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="21.221.107.228"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.65.75"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615087"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="70.73.104.113"/>
        </slice>
        <from usec="0" sec="1223614803"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.216.138"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615081"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.22.134"/>
        </slice>
        <from usec="0" sec="1223614807"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="136.228.242.11"/>
        </slice>
        <from usec="0" sec="1223614807"/>
        <to usec="0" sec="1223615077"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.206.152.91" dst_ip="164.25.78.127" dst_port="53"/>
            <filter src_ip="197.206.152.91" dst_ip="164.25.79.32" dst_port="53"/>
            <filter src_ip="197.206.152.91" dst_ip="213.42.134.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1223614815"/>
        <to usec="0" sec="1223615079"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.211.200"/>
        </slice>
        <from usec="0" sec="1223614815"/>
        <to usec="0" sec="1223615070"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.100.250.202"/>
        </slice>
        <from usec="0" sec="1223614817"/>
        <to usec="0" sec="1223615087"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="107.100.253.152" dst_ip="164.25.33.160" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614820"/>
        <to usec="0" sec="1223615565"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.93.200"/>
        </slice>
        <from usec="0" sec="1223614826"/>
        <to usec="0" sec="1223615074"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.243.11.235"/>
        </slice>
        <from usec="0" sec="1223614869"/>
        <to usec="0" sec="1223615039"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.184.199"/>
        </slice>
        <from usec="0" sec="1223615279"/>
        <to usec="0" sec="1223615319"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.8.93.87"/>
        </slice>
        <from usec="0" sec="1223614891"/>
        <to usec="0" sec="1223615320"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.102.186.32"/>
        </slice>
        <from usec="0" sec="1223614891"/>
        <to usec="0" sec="1223615075"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.241.228.181"/>
        </slice>
        <from usec="0" sec="1223614895"/>
        <to usec="0" sec="1223614926"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.168.18.103"/>
        </slice>
        <from usec="0" sec="1223614989"/>
        <to usec="0" sec="1223615013"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="150.128.47.41"/>
        </slice>
        <from usec="0" sec="1223615002"/>
        <to usec="0" sec="1223615005"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.128.47.41"/>
        </slice>
        <from usec="0" sec="1223615002"/>
        <to usec="0" sec="1223615005"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.48.1.155"/>
        </slice>
        <from usec="0" sec="1223615040"/>
        <to usec="0" sec="1223615061"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="104.243.251.21" dst_ip="136.228.119.124" src_port="80" dst_port="2102"/>
        </slice>
        <from usec="0" sec="1223615040"/>
        <to usec="0" sec="1223615089"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.64.150"/>
        </slice>
        <from usec="0" sec="1223615047"/>
        <to usec="0" sec="1223615079"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.112.171.4"/>
        </slice>
        <from usec="0" sec="1223615057"/>
        <to usec="0" sec="1223615062"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="193.132.223.17"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="96.206.249.231"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.170.33.234"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.33.232"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615177"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter dst_ip="71.167.187.114"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.21.128.84" dst_port="16881"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615215"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.73.190.239" dst_ip="107.4.66.131" src_port="3025" dst_port="5050"/>
            <filter src_ip="162.73.190.239" dst_ip="109.163.104.10" src_port="3052" dst_port="443"/>
            <filter src_ip="162.73.190.239" dst_ip="193.171.133.54" src_port="4796" dst_port="80"/>
            <filter src_ip="162.73.190.239" dst_ip="23.4.134.82" src_port="4223" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.165.65.211"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615031"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="148.40.83.200"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="59.212.48.166"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.73.106.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.227.49.226"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615178"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.228.29.47" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="59.212.49.66"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.228.199.10"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="164.25.70.205"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="142.228.95.180"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615179"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.243.33.136" dst_ip="197.1.111.203" src_port="3508" dst_port="443"/>
            <filter src_ip="142.243.33.136" dst_ip="197.1.111.203" src_port="3494" dst_port="443"/>
            <filter src_ip="142.243.33.136" dst_ip="197.1.111.195" src_port="2098" dst_port="443"/>
            <filter src_ip="142.243.33.136" dst_ip="197.1.111.233" src_port="1589" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615175"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="160.49.241.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="1223614803"/>
        <to usec="0" sec="1223615172"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.165.31.192"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615173"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.136.224.63" dst_ip="162.73.99.60" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615163"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.73.217.174"/>
        </slice>
        <from usec="0" sec="1223614810"/>
        <to usec="0" sec="1223615177"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.146.67.109"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615354"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="21.1.156.8" dst_ip="136.228.81.243" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615234"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.104.237"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615160"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.228.216.133" dst_port="80"/>
            <filter dst_ip="193.52.232.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614815"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.128.236.211"/>
        </slice>
        <from usec="0" sec="1223614816"/>
        <to usec="0" sec="1223615157"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.115.98"/>
        </slice>
        <from usec="0" sec="1223614823"/>
        <to usec="0" sec="1223615168"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.154.13"/>
        </slice>
        <from usec="0" sec="1223614833"/>
        <to usec="0" sec="1223615104"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.16.133.67"/>
        </slice>
        <from usec="0" sec="1223614865"/>
        <to usec="0" sec="1223615120"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.160.129.245" dst_port="53"/>
            <filter src_ip="195.160.129.245" dst_ip="136.228.7.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614876"/>
        <to usec="0" sec="1223615177"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.138.166.151"/>
        </slice>
        <from usec="0" sec="1223614887"/>
        <to usec="0" sec="1223615166"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.172.77"/>
        </slice>
        <from usec="0" sec="1223614912"/>
        <to usec="0" sec="1223615139"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="136.228.9.58"/>
        </slice>
        <from usec="0" sec="1223614949"/>
        <to usec="0" sec="1223615044"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.25.84.77"/>
        </slice>
        <from usec="0" sec="1223614974"/>
        <to usec="0" sec="1223615178"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.94.172.35"/>
        </slice>
        <from usec="0" sec="1223614997"/>
        <to usec="0" sec="1223615033"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.207.65.78"/>
        </slice>
        <from usec="0" sec="1223615043"/>
        <to usec="0" sec="1223615152"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="136.228.104.244"/>
        </slice>
        <from usec="0" sec="1223615052"/>
        <to usec="0" sec="1223615143"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.116.67.255"/>
        </slice>
        <from usec="0" sec="1223615061"/>
        <to usec="0" sec="1223615063"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="18.148.216.251" dst_ip="142.243.13.177" src_port="80" dst_port="1325"/>
            <filter src_ip="18.148.216.251" dst_ip="142.243.13.177" src_port="80" dst_port="1322"/>
        </slice>
        <from usec="0" sec="1223615081"/>
        <to usec="0" sec="1223615199"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.14.30.15"/>
        </slice>
        <from usec="0" sec="1223615098"/>
        <to usec="0" sec="1223615103"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.36.170"/>
        </slice>
        <from usec="0" sec="1223615128"/>
        <to usec="0" sec="1223615200"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.209.83.110"/>
        </slice>
        <from usec="0" sec="1223615151"/>
        <to usec="0" sec="1223615157"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="59.212.50.13"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615269"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.241.177"/>
        </slice>
        <from usec="0" sec="1223614803"/>
        <to usec="0" sec="1223615269"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.73.196.128"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615260"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.110.68.44"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615269"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.169.52.235" dst_ip="136.228.81.201" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614807"/>
        <to usec="0" sec="1223615269"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.243.9.222"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615269"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="96.16.247.7"/>
        </slice>
        <from usec="0" sec="1223614820"/>
        <to usec="0" sec="1223615266"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.133.110.102"/>
        </slice>
        <from usec="0" sec="1223614825"/>
        <to usec="0" sec="1223615238"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="203.41.3.235" dst_ip="142.243.151.3" src_port="62219" dst_port="80"/>
            <filter src_ip="205.140.98.145" dst_ip="142.243.151.3" src_port="1868" dst_port="80"/>
            <filter src_ip="21.64.104.54" dst_ip="142.243.151.3" src_port="34522" dst_port="80"/>
            <filter src_ip="202.80.237.135" dst_ip="142.243.151.3" src_port="57599" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614846"/>
        <to usec="0" sec="1223615260"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.21.128.85"/>
        </slice>
        <from usec="0" sec="1223614858"/>
        <to usec="0" sec="1223615231"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.136.62.47"/>
        </slice>
        <from usec="0" sec="1223614868"/>
        <to usec="0" sec="1223615249"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="72.211.44.34"/>
        </slice>
        <from usec="0" sec="1223614876"/>
        <to usec="0" sec="1223615198"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.226.54.82" dst_ip="162.73.188.82" src_port="80"/>
        </slice>
        <from usec="0" sec="1223615005"/>
        <to usec="0" sec="1223615214"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.202.160" dst_ip="104.243.254.28" src_port="59282" dst_port="80"/>
            <filter src_ip="162.73.202.160" dst_ip="192.105.65.106" src_port="59275" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615079"/>
        <to usec="0" sec="1223615657"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.16.147.213" dst_port="80"/>
            <filter src_ip="142.16.147.213" dst_ip="213.43.44.101" dst_port="443"/>
            <filter src_ip="142.16.147.213" dst_ip="195.136.224.194" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223615089"/>
        <to usec="0" sec="1223615233"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.109.154.6"/>
        </slice>
        <from usec="0" sec="1223615197"/>
        <to usec="0" sec="1223615228"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.189.132.42"/>
        </slice>
        <from usec="0" sec="1223615239"/>
        <to usec="0" sec="1223615249"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="196.10.150.70" src_port="80"/>
            <filter src_ip="73.120.188.16" dst_ip="142.243.60.3" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614803"/>
        <to usec="0" sec="1223615383"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="104.99.191.36"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615359"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="19.216.236.229"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615359"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.4.134.91"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615359"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="213.181.25.9"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615532"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="71.236.59.129"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615293"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.13.72"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615353"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.73.76.58"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615355"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.208.156.75"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615628"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.14.20"/>
        </slice>
        <from usec="0" sec="1223614812"/>
        <to usec="0" sec="1223615342"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.138.109.133"/>
        </slice>
        <from usec="0" sec="1223614813"/>
        <to usec="0" sec="1223615346"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.138.109.133"/>
        </slice>
        <from usec="0" sec="1223614813"/>
        <to usec="0" sec="1223615346"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.52.177.36"/>
        </slice>
        <from usec="0" sec="1223614813"/>
        <to usec="0" sec="1223615316"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.67.87.73"/>
        </slice>
        <from usec="0" sec="1223614820"/>
        <to usec="0" sec="1223615355"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.228.116.48"/>
        </slice>
        <from usec="0" sec="1223614838"/>
        <to usec="0" sec="1223615319"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="107.100.252.100"/>
        </slice>
        <from usec="0" sec="1223614848"/>
        <to usec="0" sec="1223615330"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.66.41"/>
        </slice>
        <from usec="0" sec="1223614878"/>
        <to usec="0" sec="1223615359"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.25.25.173"/>
        </slice>
        <from usec="0" sec="1223614906"/>
        <to usec="0" sec="1223615259"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="162.73.232.176"/>
        </slice>
        <from usec="0" sec="1223614917"/>
        <to usec="0" sec="1223615282"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.136.111.22"/>
        </slice>
        <from usec="0" sec="1223614922"/>
        <to usec="0" sec="1223615280"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="76.96.137.170"/>
        </slice>
        <from usec="0" sec="1223614991"/>
        <to usec="0" sec="1223615359"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.25.100"/>
        </slice>
        <from usec="0" sec="1223615037"/>
        <to usec="0" sec="1223615347"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.148.144.7"/>
        </slice>
        <from usec="0" sec="1223615089"/>
        <to usec="0" sec="1223615288"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="73.42.156.86" src_port="80"/>
            <filter src_ip="195.160.216.177" dst_ip="142.243.77.22" src_port="80"/>
        </slice>
        <from usec="0" sec="1223615097"/>
        <to usec="0" sec="1223615324"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.245.139"/>
        </slice>
        <from usec="0" sec="1223615132"/>
        <to usec="0" sec="1223615241"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.42.27.67"/>
        </slice>
        <from usec="0" sec="1223615139"/>
        <to usec="0" sec="1223615356"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.157.68.48"/>
        </slice>
        <from usec="0" sec="1223615146"/>
        <to usec="0" sec="1223615333"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.138.109.240"/>
        </slice>
        <from usec="0" sec="1223615178"/>
        <to usec="0" sec="1223615184"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.174.215.145"/>
        </slice>
        <from usec="0" sec="1223615213"/>
        <to usec="0" sec="1223615215"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.217.187.111"/>
        </slice>
        <from usec="0" sec="1223615223"/>
        <to usec="0" sec="1223615322"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.216.5"/>
        </slice>
        <from usec="0" sec="1223615224"/>
        <to usec="0" sec="1223615352"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.16.209.228"/>
        </slice>
        <from usec="0" sec="1223615233"/>
        <to usec="0" sec="1223615279"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.154.130.162"/>
        </slice>
        <from usec="0" sec="1223615234"/>
        <to usec="0" sec="1223615242"/>
    </anomaly>
    <anomaly type="notice" value="0.740628,1.208420,999,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.25.70.80" dst_port="20"/>
            <filter dst_ip="164.25.70.80" dst_port="21"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615571"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.106.185.173"/>
        </slice>
        <from usec="0" sec="1223615308"/>
        <to usec="0" sec="1223615332"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.32.86.212"/>
        </slice>
        <from usec="0" sec="1223615342"/>
        <to usec="0" sec="1223615349"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="153.109.26.98"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615449"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,504,0 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="136.228.89.121" dst_ip="208.31.10.157" dst_port="443"/>
            <filter src_ip="136.228.122.66" dst_ip="208.31.10.157" dst_port="443"/>
            <filter src_ip="142.243.50.29" dst_ip="208.31.10.157" dst_port="443"/>
        </slice>
        <from usec="0" sec="1223614876"/>
        <to usec="0" sec="1223614880"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.95.66.21"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615446"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.73.188.222"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615449"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.170.141.4"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615449"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.49.183.21"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615448"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="136.228.68.180"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615436"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="150.133.3.40"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615625"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.86.25.172"/>
        </slice>
        <from usec="0" sec="1223614814"/>
        <to usec="0" sec="1223615419"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.87.109"/>
        </slice>
        <from usec="0" sec="1223614832"/>
        <to usec="0" sec="1223615331"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,002,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.21.128.207"/>
        </slice>
        <from usec="0" sec="1223614875"/>
        <to usec="0" sec="1223615449"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.10.28.101"/>
        </slice>
        <from usec="0" sec="1223614918"/>
        <to usec="0" sec="1223615283"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="192.48.103.218" dst_ip="136.228.154.135" src_port="80"/>
            <filter src_ip="8.178.203.150" dst_ip="136.228.154.135" src_port="80"/>
            <filter src_ip="193.93.157.139" dst_ip="136.228.154.135" src_port="80"/>
            <filter src_ip="192.48.103.216" dst_ip="136.228.154.135" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614924"/>
        <to usec="0" sec="1223615331"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.33.146.21"/>
        </slice>
        <from usec="0" sec="1223614952"/>
        <to usec="0" sec="1223615447"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.74.136" dst_ip="192.105.65.100" src_port="49809" dst_port="80"/>
            <filter src_ip="142.243.74.136" dst_ip="192.105.65.100" src_port="49760" dst_port="80"/>
            <filter src_ip="142.243.74.136" dst_ip="192.105.74.101" src_port="49841" dst_port="80"/>
            <filter src_ip="142.243.74.136" dst_ip="193.52.137.139" src_port="49797" dst_port="80"/>
            <filter src_ip="142.243.74.136" dst_ip="193.52.143.34" src_port="49789" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223615055"/>
        <to usec="0" sec="1223615603"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.239.140.36"/>
        </slice>
        <from usec="0" sec="1223615240"/>
        <to usec="0" sec="1223615392"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.125.206"/>
        </slice>
        <from usec="0" sec="1223615276"/>
        <to usec="0" sec="1223615350"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.241.235.29"/>
        </slice>
        <from usec="0" sec="1223615315"/>
        <to usec="0" sec="1223615333"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.228.241.117" src_port="25"/>
            <filter dst_ip="136.228.241.117" dst_port="25"/>
        </slice>
        <from usec="0" sec="1223615336"/>
        <to usec="0" sec="1223615419"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.73.218.99"/>
        </slice>
        <from usec="0" sec="1223615370"/>
        <to usec="0" sec="1223615399"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.226.184.62"/>
        </slice>
        <from usec="0" sec="1223615411"/>
        <to usec="0" sec="1223615448"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.218.108"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="107.4.84.7"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615537"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.21.128.71" dst_ip="203.70.44.29"/>
            <filter src_ip="212.21.128.71" dst_ip="107.100.250.249"/>
            <filter dst_ip="107.100.250.249" src_port="21"/>
            <filter src_ip="212.21.128.71" dst_ip="77.243.131.37" src_port="21"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.42.148.40"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="108.200.178.50"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615532"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.52.232.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615585"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.226.182.125"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615537"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="212.21.129.41"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.465104,1.153940,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.226.8.170" dst_ip="107.100.242.223" src_port="80"/>
            <filter src_ip="142.226.8.170" dst_ip="193.52.217.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615534"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.226.108.141"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615513"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.87.97.89"/>
        </slice>
        <from usec="0" sec="1223614806"/>
        <to usec="0" sec="1223615536"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.185.183.80"/>
        </slice>
        <from usec="0" sec="1223614809"/>
        <to usec="0" sec="1223615367"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="119.2.224.249"/>
        </slice>
        <from usec="0" sec="1223614809"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.140.42.65"/>
        </slice>
        <from usec="0" sec="1223614811"/>
        <to usec="0" sec="1223615509"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.171.189.37"/>
        </slice>
        <from usec="0" sec="1223614812"/>
        <to usec="0" sec="1223615536"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.130.175.150"/>
        </slice>
        <from usec="0" sec="1223614853"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="73.42.157.143"/>
        </slice>
        <from usec="0" sec="1223615003"/>
        <to usec="0" sec="1223615522"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.67.38.207"/>
        </slice>
        <from usec="0" sec="1223615053"/>
        <to usec="0" sec="1223615511"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="18.176.142.154"/>
        </slice>
        <from usec="0" sec="1223615072"/>
        <to usec="0" sec="1223615539"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.104.229"/>
        </slice>
        <from usec="0" sec="1223615170"/>
        <to usec="0" sec="1223615463"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="78.74.183.219"/>
        </slice>
        <from usec="0" sec="1223615184"/>
        <to usec="0" sec="1223615487"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.49.154.67"/>
        </slice>
        <from usec="0" sec="1223615190"/>
        <to usec="0" sec="1223615538"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.116.1"/>
        </slice>
        <from usec="0" sec="1223615257"/>
        <to usec="0" sec="1223615480"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.16.215.96"/>
        </slice>
        <from usec="0" sec="1223615286"/>
        <to usec="0" sec="1223615534"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.154.4"/>
        </slice>
        <from usec="0" sec="1223615292"/>
        <to usec="0" sec="1223615528"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.196.135.48"/>
        </slice>
        <from usec="0" sec="1223615326"/>
        <to usec="0" sec="1223615373"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="136.228.81.86"/>
        </slice>
        <from usec="0" sec="1223615329"/>
        <to usec="0" sec="1223615402"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="99.37.210.149"/>
        </slice>
        <from usec="0" sec="1223615378"/>
        <to usec="0" sec="1223615422"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.243.246.164"/>
        </slice>
        <from usec="0" sec="1223615439"/>
        <to usec="0" sec="1223615530"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.33.140.154"/>
        </slice>
        <from usec="0" sec="1223615445"/>
        <to usec="0" sec="1223615524"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.183.28.232"/>
        </slice>
        <from usec="0" sec="1223615505"/>
        <to usec="0" sec="1223615533"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.228.9.54"/>
        </slice>
        <from usec="0" sec="1223615505"/>
        <to usec="0" sec="1223615533"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="202.16.45.182"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.33.58.56"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.243.247.13"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.16.156.152"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615628"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.228.34.162"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.16.201.20"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.150.118.9"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615618"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.55.215.46"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.243.51.134"/>
        </slice>
        <from usec="0" sec="1223614802"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.216.86"/>
        </slice>
        <from usec="0" sec="1223614804"/>
        <to usec="0" sec="1223615615"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.228.170.131"/>
        </slice>
        <from usec="0" sec="1223614805"/>
        <to usec="0" sec="1223615621"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.21.154.3"/>
        </slice>
        <from usec="0" sec="1223614805"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.228.26.8"/>
        </slice>
        <from usec="0" sec="1223614810"/>
        <to usec="0" sec="1223615629"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.217.174"/>
        </slice>
        <from usec="0" sec="1223614810"/>
        <to usec="0" sec="1223615602"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.100.253.107"/>
        </slice>
        <from usec="0" sec="1223614811"/>
        <to usec="0" sec="1223615594"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.40.145.113"/>
        </slice>
        <from usec="0" sec="1223614811"/>
        <to usec="0" sec="1223615626"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.100.253.224"/>
        </slice>
        <from usec="0" sec="1223614816"/>
        <to usec="0" sec="1223615626"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.49.200.144"/>
        </slice>
        <from usec="0" sec="1223614817"/>
        <to usec="0" sec="1223615600"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.228.21.93"/>
        </slice>
        <from usec="0" sec="1223614837"/>
        <to usec="0" sec="1223615592"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.100.253.121"/>
        </slice>
        <from usec="0" sec="1223614853"/>
        <to usec="0" sec="1223615598"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.86.216"/>
        </slice>
        <from usec="0" sec="1223615124"/>
        <to usec="0" sec="1223615555"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="99.29.50.24"/>
        </slice>
        <from usec="0" sec="1223615158"/>
        <to usec="0" sec="1223615596"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.138.227.80"/>
        </slice>
        <from usec="0" sec="1223615160"/>
        <to usec="0" sec="1223615626"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.33.148.75"/>
        </slice>
        <from usec="0" sec="1223615190"/>
        <to usec="0" sec="1223615459"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.73.66.88"/>
        </slice>
        <from usec="0" sec="1223615290"/>
        <to usec="0" sec="1223615551"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.73.69.226"/>
        </slice>
        <from usec="0" sec="1223615318"/>
        <to usec="0" sec="1223615523"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.21.136.243"/>
        </slice>
        <from usec="0" sec="1223615411"/>
        <to usec="0" sec="1223615600"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.225.224.157"/>
        </slice>
        <from usec="0" sec="1223615414"/>
        <to usec="0" sec="1223615494"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.118.138"/>
        </slice>
        <from usec="0" sec="1223615446"/>
        <to usec="0" sec="1223615627"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="72.82.176.212"/>
        </slice>
        <from usec="0" sec="1223615456"/>
        <to usec="0" sec="1223615514"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="149.99.36.11"/>
        </slice>
        <from usec="0" sec="1223615467"/>
        <to usec="0" sec="1223615543"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.105.70.168"/>
        </slice>
        <from usec="0" sec="1223615564"/>
        <to usec="0" sec="1223615574"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.43.29.72"/>
        </slice>
        <from usec="0" sec="1223615611"/>
        <to usec="0" sec="1223615618"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.73.17.67" dst_ip="213.43.70.194" dst_port="53"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615178"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="210.66.9.195" dst_ip="212.21.138.195"/>
            <filter src_ip="134.83.112.174" dst_ip="212.21.128.84"/>
            <filter src_ip="134.83.112.174" src_port="23345"/>
            <filter src_ip="210.66.9.195" dst_ip="212.21.128.84" src_port="23345"/>
        </slice>
        <from usec="0" sec="1223614801"/>
        <to usec="0" sec="1223615611"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.76.79"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.228.148.136" dst_ip="193.52.143.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614824"/>
        <to usec="0" sec="1223615422"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.58.131.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.138.109.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.776062,1.165550,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.138.109.57" dst_ip="136.228.214.244" src_port="80"/>
            <filter src_ip="212.138.109.57" dst_ip="142.243.15.26" src_port="80"/>
            <filter src_ip="212.138.109.57" dst_ip="142.243.10.13" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.138.109.27"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.138.109.18" dst_ip="136.228.164.60" src_port="80" dst_port="37339"/>
            <filter src_ip="212.138.109.18" dst_ip="136.228.164.60" src_port="80" dst_port="37332"/>
        </slice>
        <from usec="0" sec="1223614819"/>
        <to usec="0" sec="1223614830"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="136.228.81.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.776062,1.165550,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="210.74.3.191" src_port="80"/>
            <filter dst_ip="136.228.89.121" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="136.228.104.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="221.18.85.52" src_port="80"/>
        </slice>
        <from usec="0" sec="1223615112"/>
        <to usec="0" sec="1223615115"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="213.43.44.90"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.507879,1.203700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.243.10.64" dst_ip="212.138.109.0" src_port="49437" dst_port="80"/>
            <filter src_ip="142.243.10.64" dst_ip="104.93.70.242" src_port="49163" dst_port="993"/>
            <filter src_ip="142.243.10.64" dst_ip="40.94.172.202" src_port="49393" dst_port="80"/>
            <filter src_ip="142.243.10.64" dst_ip="40.94.172.200" src_port="49436" dst_port="80"/>
            <filter src_ip="142.243.10.64" dst_ip="40.173.128.75" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1223615474"/>
        <to usec="0" sec="1223615491"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="209.40.209.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="104.243.253.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.751569,1.275820,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.228.193.229" dst_ip="212.138.109.55" src_port="2131" dst_port="80"/>
            <filter src_ip="136.228.193.229" dst_ip="212.138.109.55" src_port="2123" dst_port="80"/>
            <filter src_ip="136.228.193.229" dst_ip="104.230.237.175" src_port="4649" dst_port="80"/>
            <filter src_ip="136.228.193.229" dst_ip="106.244.179.177"/>
        </slice>
        <from usec="0" sec="1223614850"/>
        <to usec="0" sec="1223615281"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="18.119.116.193" dst_ip="213.33.130.212" src_port="38697" dst_port="51494"/>
        </slice>
        <from usec="0" sec="1223614826"/>
        <to usec="0" sec="1223615171"/>
    </anomaly>
    <anomaly type="notice" value="0.802429,1.214840,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="96.30.18.85" dst_ip="136.228.164.60" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.437068,1.175450,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.73.130.150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1223614825"/>
        <to usec="0" sec="1223615516"/>
    </anomaly>
</admd:annotation>
