<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.32.98.158" dst_ip="165.68.195.18" src_port="80" dst_port="38161" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379675"/>
        <to usec="0" sec="1226379747"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.49.167.123"/>
        </slice>
        <from usec="0" sec="1226380392"/>
        <to usec="0" sec="1226380395"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.21.83"/>
        </slice>
        <from usec="0" sec="1226379619"/>
        <to usec="0" sec="1226379690"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.68.8.117" dst_ip="1.88.53.91" src_port="46906" dst_port="2887" proto="udp"/>
        </slice>
        <from usec="0" sec="1226380369"/>
        <to usec="0" sec="1226380372"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.191.129.47"/>
        </slice>
        <from usec="0" sec="1226379609"/>
        <to usec="0" sec="1226379744"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.159.136"/>
        </slice>
        <from usec="0" sec="1226379643"/>
        <to usec="0" sec="1226379647"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.69.236.17" dst_ip="208.23.49.142" src_port="80" dst_port="59489" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226380274"/>
        <to usec="0" sec="1226380278"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.92.1"/>
        </slice>
        <from usec="0" sec="1226379641"/>
        <to usec="0" sec="1226379644"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="68.17.64.130" dst_ip="208.27.91.91" src_port="12954" dst_port="52450" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379705"/>
        <to usec="0" sec="1226379718"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.80.152.18" dst_ip="218.187.136.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379635"/>
        <to usec="0" sec="1226379639"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.46.49.4"/>
        </slice>
        <from usec="0" sec="1226380355"/>
        <to usec="0" sec="1226380359"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.185.134.124" dst_ip="6.231.91.17" src_port="3373" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379670"/>
        <to usec="0" sec="1226379790"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.65.21"/>
        </slice>
        <from usec="0" sec="1226379633"/>
        <to usec="0" sec="1226379850"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.142.18.229" dst_ip="208.23.55.239" src_port="12340" dst_port="1369" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379608"/>
        <to usec="0" sec="1226379666"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.80.155"/>
        </slice>
        <from usec="0" sec="1226379643"/>
        <to usec="0" sec="1226379647"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.2.199.210" dst_ip="157.80.4.60" src_port="554" dst_port="2438" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379684"/>
        <to usec="0" sec="1226380278"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="157.80.217.142" dst_ip="194.169.120.77" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379636"/>
        <to usec="0" sec="1226379644"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.160.152.3"/>
        </slice>
        <from usec="0" sec="1226379717"/>
        <to usec="0" sec="1226379729"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.68.8.197" dst_ip="118.32.196.126" src_port="2004" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379652"/>
        <to usec="0" sec="1226379682"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.80.152.228"/>
        </slice>
        <from usec="0" sec="1226379652"/>
        <to usec="0" sec="1226379671"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="111.72.176.30" dst_ip="208.23.164.64" src_port="55127" dst_port="10552" proto="udp"/>
        </slice>
        <from usec="0" sec="1226379657"/>
        <to usec="0" sec="1226379660"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.68.113.187"/>
        </slice>
        <from usec="0" sec="1226379670"/>
        <to usec="0" sec="1226379751"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.17.206.59" dst_ip="165.68.8.117" src_port="46810" dst_port="46906" proto="udp"/>
        </slice>
        <from usec="0" sec="1226379626"/>
        <to usec="0" sec="1226379766"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.3.153"/>
        </slice>
        <from usec="0" sec="1226379641"/>
        <to usec="0" sec="1226379867"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.23.165.135" dst_ip="202.65.26.87" src_port="50530" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379643"/>
        <to usec="0" sec="1226379655"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.172.152.25" dst_ip="208.23.50.165" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379610"/>
        <to usec="0" sec="1226379629"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="208.155.223.175" dst_ip="208.23.55.239" src_port="12340" dst_port="1381"/>
            <filter src_ip="223.198.26.97" dst_ip="208.23.55.239" src_port="23456" dst_port="1379"/>
        </slice>
        <from usec="0" sec="1226379735"/>
        <to usec="0" sec="1226380267"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.149.190.191"/>
        </slice>
        <from usec="0" sec="1226379776"/>
        <to usec="0" sec="1226379782"/>
    </anomaly>
    <anomaly type="notice" value="0.599633,1.304540,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="101.14.25.25" dst_ip="165.68.113.187" src_port="80"/>
            <filter src_ip="98.35.130.102" dst_ip="165.68.113.187" src_port="80"/>
        </slice>
        <from usec="0" sec="1226379656"/>
        <to usec="0" sec="1226379789"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.191.118.48"/>
        </slice>
        <from usec="0" sec="1226379740"/>
        <to usec="0" sec="1226379744"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.101.9.145"/>
        </slice>
        <from usec="0" sec="1226379856"/>
        <to usec="0" sec="1226379859"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.186.16"/>
        </slice>
        <from usec="0" sec="1226379856"/>
        <to usec="0" sec="1226379862"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.27.100.42" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379683"/>
        <to usec="0" sec="1226380373"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.185.23.97"/>
        </slice>
        <from usec="0" sec="1226379654"/>
        <to usec="0" sec="1226379658"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.138.117.31"/>
        </slice>
        <from usec="0" sec="1226379652"/>
        <to usec="0" sec="1226379655"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.81.6.50"/>
        </slice>
        <from usec="0" sec="1226379624"/>
        <to usec="0" sec="1226379628"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.159.58"/>
        </slice>
        <from usec="0" sec="1226379675"/>
        <to usec="0" sec="1226379681"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,501,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="160.23.211.72"/>
        </slice>
        <from usec="0" sec="1226379654"/>
        <to usec="0" sec="1226379741"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.100.120.205" src_port="1025" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1226379716"/>
        <to usec="0" sec="1226379729"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="65.132.80.31" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1226379853"/>
        <to usec="0" sec="1226379867"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.30.12"/>
        </slice>
        <from usec="0" sec="1226379692"/>
        <to usec="0" sec="1226379695"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="210.156.34.41" proto="icmp"/>
        </slice>
        <from usec="0" sec="1226379993"/>
        <to usec="0" sec="1226379999"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.68.10.136"/>
        </slice>
        <from usec="0" sec="1226379632"/>
        <to usec="0" sec="1226379639"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.166.1"/>
        </slice>
        <from usec="0" sec="1226379856"/>
        <to usec="0" sec="1226379867"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.36.48"/>
        </slice>
        <from usec="0" sec="1226379756"/>
        <to usec="0" sec="1226379759"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.135.23"/>
        </slice>
        <from usec="0" sec="1226379665"/>
        <to usec="0" sec="1226379668"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="77.44.89.35"/>
        </slice>
        <from usec="0" sec="1226380111"/>
        <to usec="0" sec="1226380115"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.25.134.185"/>
        </slice>
        <from usec="0" sec="1226379824"/>
        <to usec="0" sec="1226379828"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="111.75.105.22"/>
        </slice>
        <from usec="0" sec="1226380244"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="206.157.137.65"/>
        </slice>
        <from usec="0" sec="1226379785"/>
        <to usec="0" sec="1226379789"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="208.27.100.32" src_port="80"/>
            <filter dst_ip="208.27.100.32" dst_port="80"/>
            <filter src_port="80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379721"/>
        <to usec="0" sec="1226380423"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="73.31.119.71"/>
        </slice>
        <from usec="0" sec="1226379645"/>
        <to usec="0" sec="1226379650"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.204.39.217"/>
        </slice>
        <from usec="0" sec="1226379706"/>
        <to usec="0" sec="1226380312"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.204.39.210"/>
        </slice>
        <from usec="0" sec="1226379828"/>
        <to usec="0" sec="1226380178"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.204.39.202"/>
        </slice>
        <from usec="0" sec="1226379938"/>
        <to usec="0" sec="1226380019"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.204.39.204"/>
        </slice>
        <from usec="0" sec="1226379727"/>
        <to usec="0" sec="1226380149"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.204.39.197"/>
        </slice>
        <from usec="0" sec="1226380133"/>
        <to usec="0" sec="1226380138"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="98.204.39.194" src_port="5050"/>
            <filter dst_ip="160.23.220.179" src_port="80"/>
        </slice>
        <from usec="0" sec="1226379655"/>
        <to usec="0" sec="1226380075"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.65.66"/>
        </slice>
        <from usec="0" sec="1226379694"/>
        <to usec="0" sec="1226379698"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="115.90.27.7"/>
        </slice>
        <from usec="0" sec="1226379610"/>
        <to usec="0" sec="1226379614"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="72.192.232.85"/>
        </slice>
        <from usec="0" sec="1226379681"/>
        <to usec="0" sec="1226379684"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="6.236.14.160"/>
        </slice>
        <from usec="0" sec="1226379654"/>
        <to usec="0" sec="1226379658"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.21.66"/>
        </slice>
        <from usec="0" sec="1226379779"/>
        <to usec="0" sec="1226379783"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.161.10"/>
        </slice>
        <from usec="0" sec="1226379608"/>
        <to usec="0" sec="1226379611"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.186.29"/>
        </slice>
        <from usec="0" sec="1226379694"/>
        <to usec="0" sec="1226379698"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.146.233"/>
        </slice>
        <from usec="0" sec="1226380269"/>
        <to usec="0" sec="1226380272"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,002,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.149.190.192"/>
        </slice>
        <from usec="0" sec="1226379660"/>
        <to usec="0" sec="1226380436"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.68.132.116"/>
        </slice>
        <from usec="0" sec="1226379764"/>
        <to usec="0" sec="1226379767"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.80.138.37"/>
        </slice>
        <from usec="0" sec="1226379753"/>
        <to usec="0" sec="1226379757"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.24.90.190"/>
        </slice>
        <from usec="0" sec="1226379853"/>
        <to usec="0" sec="1226379857"/>
    </anomaly>
    <anomaly type="notice" value="0.653126,1.342220,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.27.91.15"/>
        </slice>
        <from usec="0" sec="1226379649"/>
        <to usec="0" sec="1226379653"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.68.71.212"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379684"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.137.43.128"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226379655"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.150.170.97"/>
        </slice>
        <from usec="0" sec="1226379612"/>
        <to usec="0" sec="1226379667"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="103.162.93.109"/>
        </slice>
        <from usec="0" sec="1226379657"/>
        <to usec="0" sec="1226379708"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="69.161.225.252"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379798"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="152.69.173.219"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380024"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="0.98.199.176"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379908"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="68.18.142.78"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379683"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.23.53.8"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379798"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.80.226.65"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379798"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.26.106.207"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226379796"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.101.11.96"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226379798"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="97.112.5.58"/>
        </slice>
        <from usec="0" sec="1226380172"/>
        <to usec="0" sec="1226380180"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.68.185.69"/>
        </slice>
        <from usec="0" sec="1226379652"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.150.161.214"/>
        </slice>
        <from usec="0" sec="1226379654"/>
        <to usec="0" sec="1226380209"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.72.78.53"/>
        </slice>
        <from usec="0" sec="1226379666"/>
        <to usec="0" sec="1226379769"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.139.62.19"/>
        </slice>
        <from usec="0" sec="1226379700"/>
        <to usec="0" sec="1226379712"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.80.185.63"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="83.109.60.171"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="160.23.229.40"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.100.246.226"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226379881"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="157.80.157.201"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="192.155.203.64"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226379887"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.176.110.120"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.212.76.130"/>
        </slice>
        <from usec="0" sec="1226379605"/>
        <to usec="0" sec="1226379887"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.150.170.237"/>
        </slice>
        <from usec="0" sec="1226379606"/>
        <to usec="0" sec="1226380067"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.14.54.87"/>
        </slice>
        <from usec="0" sec="1226379607"/>
        <to usec="0" sec="1226379884"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="112.206.93.60"/>
        </slice>
        <from usec="0" sec="1226379611"/>
        <to usec="0" sec="1226379830"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.149.184.136"/>
        </slice>
        <from usec="0" sec="1226379623"/>
        <to usec="0" sec="1226379743"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.150.4.45"/>
        </slice>
        <from usec="0" sec="1226379673"/>
        <to usec="0" sec="1226379829"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="0.60.225.112"/>
        </slice>
        <from usec="0" sec="1226379710"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="126.129.136.22"/>
        </slice>
        <from usec="0" sec="1226379771"/>
        <to usec="0" sec="1226379855"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="83.208.32.172"/>
        </slice>
        <from usec="0" sec="1226379827"/>
        <to usec="0" sec="1226379888"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="160.23.220.168"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.80.55.224" src_port="53"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379978"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.99.44.154"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379969"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.23.205.67"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226379977"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.101.11.96"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226379978"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.150.161.197"/>
        </slice>
        <from usec="0" sec="1226379606"/>
        <to usec="0" sec="1226379926"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.80.166.104" dst_ip="193.64.0.1" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379639"/>
        <to usec="0" sec="1226380141"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="115.23.69.66"/>
        </slice>
        <from usec="0" sec="1226379861"/>
        <to usec="0" sec="1226380052"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.34.177.6"/>
        </slice>
        <from usec="0" sec="1226379892"/>
        <to usec="0" sec="1226379931"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="70.129.38.99"/>
        </slice>
        <from usec="0" sec="1226379896"/>
        <to usec="0" sec="1226379976"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,901,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.249.76.142"/>
        </slice>
        <from usec="0" sec="1226379899"/>
        <to usec="0" sec="1226379900"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.80.166.41"/>
        </slice>
        <from usec="0" sec="1226379972"/>
        <to usec="0" sec="1226379977"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.80.189.135"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380048"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.34.33.217" dst_ip="166.61.198.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380425"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="200.29.40.30"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="138.43.255.78"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.185.3.34"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380066"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.116.156.129"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380066"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="200.17.206.59"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="0.58.181.17"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380066"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.33.232.249"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380067"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.185.53.15"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380067"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.10.213.84"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380420"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.193.170"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380066"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="223.128.51.232" dst_ip="209.149.178.194" dst_port="53"/>
            <filter src_ip="223.128.51.232" dst_ip="208.27.116.226" dst_port="53"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380056"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="215.203.48.146"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380067"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.187.104.5"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380053"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="206.240.187.12"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380039"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="206.240.187.12"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380039"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.238.200.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226379988"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="104.71.165.60"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380145"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="160.23.164.146"/>
        </slice>
        <from usec="0" sec="1226379603"/>
        <to usec="0" sec="1226380065"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="208.23.173.65"/>
        </slice>
        <from usec="0" sec="1226379603"/>
        <to usec="0" sec="1226379957"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="152.69.53.32"/>
        </slice>
        <from usec="0" sec="1226379608"/>
        <to usec="0" sec="1226380063"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.5.150.48"/>
        </slice>
        <from usec="0" sec="1226379613"/>
        <to usec="0" sec="1226380067"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="102.162.201.111"/>
        </slice>
        <from usec="0" sec="1226379619"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.163.64.84"/>
        </slice>
        <from usec="0" sec="1226379623"/>
        <to usec="0" sec="1226380042"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.48.123.74"/>
        </slice>
        <from usec="0" sec="1226379640"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.68.185.69"/>
        </slice>
        <from usec="0" sec="1226379652"/>
        <to usec="0" sec="1226380068"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="117.116.4.18"/>
        </slice>
        <from usec="0" sec="1226379653"/>
        <to usec="0" sec="1226380011"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.69.48.174"/>
        </slice>
        <from usec="0" sec="1226379688"/>
        <to usec="0" sec="1226379958"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="117.54.57.68"/>
        </slice>
        <from usec="0" sec="1226379692"/>
        <to usec="0" sec="1226380014"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.23.164.194"/>
        </slice>
        <from usec="0" sec="1226379706"/>
        <to usec="0" sec="1226380059"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.69.48.228"/>
        </slice>
        <from usec="0" sec="1226379803"/>
        <to usec="0" sec="1226380162"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.186.20"/>
        </slice>
        <from usec="0" sec="1226379903"/>
        <to usec="0" sec="1226379979"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.171.162.197"/>
        </slice>
        <from usec="0" sec="1226379949"/>
        <to usec="0" sec="1226379972"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.179.7.87"/>
        </slice>
        <from usec="0" sec="1226379952"/>
        <to usec="0" sec="1226380028"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="105.203.168.233"/>
        </slice>
        <from usec="0" sec="1226379980"/>
        <to usec="0" sec="1226380039"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.189.44.207"/>
        </slice>
        <from usec="0" sec="1226379988"/>
        <to usec="0" sec="1226379993"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.122.155.178"/>
        </slice>
        <from usec="0" sec="1226380001"/>
        <to usec="0" sec="1226380024"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="101.120.60.162"/>
        </slice>
        <from usec="0" sec="1226380028"/>
        <to usec="0" sec="1226380120"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.198.142.129"/>
        </slice>
        <from usec="0" sec="1226380054"/>
        <to usec="0" sec="1226380057"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="160.23.197.15"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="136.2.239.42"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380156"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="201.226.141.189"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.184.40"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.41.244.54"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380148"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="200.120.60.42"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.160.234.43" dst_ip="209.149.189.33"/>
            <filter src_ip="206.160.234.43" dst_ip="209.149.189.42"/>
            <filter src_ip="206.160.234.43" dst_port="3124"/>
            <filter src_ip="206.160.234.43" dst_port="3128"/>
            <filter src_ip="206.160.234.43" dst_port="3127"/>
            <filter dst_ip="209.149.189.33" dst_port="3124"/>
            <filter dst_ip="209.149.189.33" dst_port="3128"/>
            <filter dst_ip="209.149.189.42" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380101"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.23.168.32"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380156"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="205.103.91.104"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.185.38.192"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380122"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.137.38.245"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380338"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.23.53.68"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.149.190.242" src_port="54773" dst_port="53"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380222"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.149.177.149"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="0.69.93.38"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380139"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.149.182.150"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380152"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.149.178.162"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380128"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="111.45.162.167"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380423"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.149.177.67"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380157"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.1.104.212"/>
        </slice>
        <from usec="0" sec="1226379606"/>
        <to usec="0" sec="1226380150"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.43.15.255" dst_ip="209.149.189.32"/>
            <filter src_ip="206.43.15.255" dst_port="3128"/>
            <filter dst_ip="209.149.189.42" dst_port="3128"/>
            <filter dst_ip="209.149.189.32" dst_port="3128"/>
            <filter src_ip="206.43.15.255" dst_ip="209.149.189.42" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1226379610"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="16.64.197.189"/>
        </slice>
        <from usec="0" sec="1226379610"/>
        <to usec="0" sec="1226380141"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.23.202.227"/>
        </slice>
        <from usec="0" sec="1226379612"/>
        <to usec="0" sec="1226380416"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.150.172.81"/>
        </slice>
        <from usec="0" sec="1226379616"/>
        <to usec="0" sec="1226380136"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="160.23.226.88"/>
        </slice>
        <from usec="0" sec="1226379617"/>
        <to usec="0" sec="1226380153"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.23.54.101"/>
        </slice>
        <from usec="0" sec="1226379626"/>
        <to usec="0" sec="1226380154"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.75.174"/>
        </slice>
        <from usec="0" sec="1226379705"/>
        <to usec="0" sec="1226380009"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="79.90.27.219"/>
        </slice>
        <from usec="0" sec="1226379737"/>
        <to usec="0" sec="1226380152"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="209.77.0.90"/>
        </slice>
        <from usec="0" sec="1226379814"/>
        <to usec="0" sec="1226380003"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.159.139"/>
        </slice>
        <from usec="0" sec="1226379843"/>
        <to usec="0" sec="1226379994"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.18.227"/>
        </slice>
        <from usec="0" sec="1226379864"/>
        <to usec="0" sec="1226380094"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.80.217.17"/>
        </slice>
        <from usec="0" sec="1226379890"/>
        <to usec="0" sec="1226380148"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.121.101"/>
        </slice>
        <from usec="0" sec="1226379919"/>
        <to usec="0" sec="1226380073"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.32.108.58"/>
        </slice>
        <from usec="0" sec="1226380053"/>
        <to usec="0" sec="1226380074"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.65.228.111"/>
        </slice>
        <from usec="0" sec="1226380083"/>
        <to usec="0" sec="1226380085"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.163.104.157"/>
        </slice>
        <from usec="0" sec="1226380091"/>
        <to usec="0" sec="1226380151"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="68.26.238.240"/>
        </slice>
        <from usec="0" sec="1226380135"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="114.134.129.24"/>
        </slice>
        <from usec="0" sec="1226380146"/>
        <to usec="0" sec="1226380158"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="200.104.215.118"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="122.130.54.231"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="4.44.146.32"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380242"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="211.8.128.139"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380336"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="100.73.176.189" dst_ip="208.23.179.228" src_port="80"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380238"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.145.195" src_port="80"/>
            <filter src_ip="157.80.145.195"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380245"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="166.61.171.197" dst_port="36559"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380245"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.150.172.207"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380246"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="125.49.194.179"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380243"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="105.213.184.161"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380247"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.198.35.199"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380243"/>
    </anomaly>
    <anomaly type="notice" value="0.599633,1.304540,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="165.68.80.167" src_port="1935"/>
            <filter src_ip="100.110.88.33" dst_ip="165.68.80.167" src_port="5222"/>
            <filter src_ip="193.85.9.152" dst_ip="165.68.80.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1226379603"/>
        <to usec="0" sec="1226380247"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.128.216.107"/>
        </slice>
        <from usec="0" sec="1226379604"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.80.235.78"/>
        </slice>
        <from usec="0" sec="1226379606"/>
        <to usec="0" sec="1226380225"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.23.55.88"/>
        </slice>
        <from usec="0" sec="1226379608"/>
        <to usec="0" sec="1226380248"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.3.64"/>
        </slice>
        <from usec="0" sec="1226379611"/>
        <to usec="0" sec="1226380338"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="208.27.101.146"/>
        </slice>
        <from usec="0" sec="1226379617"/>
        <to usec="0" sec="1226380243"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="79.40.174.58"/>
        </slice>
        <from usec="0" sec="1226379622"/>
        <to usec="0" sec="1226380230"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.80.201.96"/>
        </slice>
        <from usec="0" sec="1226379630"/>
        <to usec="0" sec="1226380246"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.93.74"/>
        </slice>
        <from usec="0" sec="1226379660"/>
        <to usec="0" sec="1226380230"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.186.5"/>
        </slice>
        <from usec="0" sec="1226380003"/>
        <to usec="0" sec="1226380155"/>
    </anomaly>
    <anomaly type="notice" value="0.599633,1.304540,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.68.195.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379705"/>
        <to usec="0" sec="1226380431"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="137.0.85.244"/>
        </slice>
        <from usec="0" sec="1226380081"/>
        <to usec="0" sec="1226380094"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.58.224.100"/>
        </slice>
        <from usec="0" sec="1226380089"/>
        <to usec="0" sec="1226380173"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.237.147.108"/>
        </slice>
        <from usec="0" sec="1226380101"/>
        <to usec="0" sec="1226380200"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="165.68.86.182"/>
        </slice>
        <from usec="0" sec="1226380120"/>
        <to usec="0" sec="1226380218"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="97.114.3.127"/>
        </slice>
        <from usec="0" sec="1226380134"/>
        <to usec="0" sec="1226380195"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.80.159.11"/>
        </slice>
        <from usec="0" sec="1226380174"/>
        <to usec="0" sec="1226380238"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.185.38.152"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380338"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="125.0.73.46"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380409"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="157.80.52.120"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.80.166.35"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380292"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="165.68.202.80"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380338"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.99.177.242"/>
        </slice>
        <from usec="0" sec="1226379606"/>
        <to usec="0" sec="1226380332"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.69.48.173"/>
        </slice>
        <from usec="0" sec="1226379614"/>
        <to usec="0" sec="1226380334"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="152.185.16.52"/>
        </slice>
        <from usec="0" sec="1226379669"/>
        <to usec="0" sec="1226380330"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="152.69.210.74"/>
        </slice>
        <from usec="0" sec="1226379900"/>
        <to usec="0" sec="1226380338"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.23.49.47"/>
        </slice>
        <from usec="0" sec="1226379998"/>
        <to usec="0" sec="1226380283"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.171.80.77"/>
        </slice>
        <from usec="0" sec="1226380031"/>
        <to usec="0" sec="1226380240"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.185.69.23"/>
        </slice>
        <from usec="0" sec="1226380097"/>
        <to usec="0" sec="1226380262"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.172.214.26"/>
        </slice>
        <from usec="0" sec="1226380179"/>
        <to usec="0" sec="1226380314"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.185.67.180"/>
        </slice>
        <from usec="0" sec="1226380186"/>
        <to usec="0" sec="1226380327"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="76.186.74.99"/>
        </slice>
        <from usec="0" sec="1226380210"/>
        <to usec="0" sec="1226380330"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.113.85.89"/>
        </slice>
        <from usec="0" sec="1226380254"/>
        <to usec="0" sec="1226380300"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="72.192.237.209"/>
        </slice>
        <from usec="0" sec="1226380255"/>
        <to usec="0" sec="1226380325"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.18.0.118"/>
        </slice>
        <from usec="0" sec="1226380324"/>
        <to usec="0" sec="1226380365"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.27.106.103"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="1.189.252.67" dst_ip="209.149.189.42"/>
            <filter src_ip="1.189.252.67" dst_ip="209.149.189.33"/>
            <filter src_ip="1.189.252.67" dst_ip="209.149.189.32"/>
            <filter src_ip="1.189.252.67" dst_port="3128"/>
            <filter src_ip="1.189.252.67" dst_port="3124"/>
            <filter src_ip="1.189.252.67" dst_port="3127"/>
            <filter dst_ip="209.149.189.42" dst_port="3124"/>
            <filter dst_ip="209.149.189.33" dst_port="3128"/>
            <filter dst_ip="209.149.189.33" dst_port="3124"/>
            <filter dst_ip="209.149.189.32" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380420"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="160.23.204.102"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="152.161.194.50"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380427"/>
    </anomaly>
    <anomaly type="notice" value="0.782953,1.304660,503,1 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.205.47" dst_port="80"/>
            <filter src_ip="157.80.205.47" dst_ip="152.25.21.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.80.114.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380425"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="197.94.198.178"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,002,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="209.149.178.58"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="200.104.15.83"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="106.53.144.247"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.144.117"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380426"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.107.16.156"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380424"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.5.192.37"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="98.150.161.139"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380426"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="208.27.101.18" dst_ip="66.49.123.139"/>
            <filter src_ip="208.27.101.18" dst_ip="10.1.2.6"/>
        </slice>
        <from usec="0" sec="1226379601"/>
        <to usec="0" sec="1226380422"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="100.73.145.200"/>
        </slice>
        <from usec="0" sec="1226379602"/>
        <to usec="0" sec="1226380427"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.68.50.182"/>
        </slice>
        <from usec="0" sec="1226379605"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.68.9.68"/>
        </slice>
        <from usec="0" sec="1226379605"/>
        <to usec="0" sec="1226380427"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="215.224.140.90"/>
        </slice>
        <from usec="0" sec="1226379607"/>
        <to usec="0" sec="1226380268"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.68.9.171"/>
        </slice>
        <from usec="0" sec="1226379608"/>
        <to usec="0" sec="1226380401"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="106.5.192.14"/>
        </slice>
        <from usec="0" sec="1226379609"/>
        <to usec="0" sec="1226380427"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,010,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="73.114.23.42" dst_ip="209.149.189.33"/>
            <filter src_ip="73.114.23.42" dst_ip="209.149.189.42"/>
            <filter src_ip="73.114.23.42" dst_port="3128"/>
            <filter src_ip="73.114.23.42" dst_port="3124"/>
            <filter src_ip="73.114.23.42" dst_port="3127"/>
            <filter dst_ip="209.149.189.33" dst_port="3128"/>
            <filter dst_ip="209.149.189.33" dst_port="3124"/>
            <filter dst_ip="209.149.189.42" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1226379611"/>
        <to usec="0" sec="1226380410"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.146.14.205"/>
        </slice>
        <from usec="0" sec="1226379614"/>
        <to usec="0" sec="1226380420"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="100.73.145.202"/>
        </slice>
        <from usec="0" sec="1226379617"/>
        <to usec="0" sec="1226380421"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="97.176.74.250" dst_ip="157.80.133.119" src_port="80"/>
        </slice>
        <from usec="0" sec="1226379623"/>
        <to usec="0" sec="1226380425"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.166.85.26"/>
        </slice>
        <from usec="0" sec="1226379626"/>
        <to usec="0" sec="1226380414"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.156.133.179" src_port="53"/>
            <filter dst_ip="152.69.48.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1226379603"/>
        <to usec="0" sec="1226380423"/>
    </anomaly>
    <anomaly type="notice" value="0.599633,1.304540,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="165.68.79.107" dst_ip="54.198.142.80"/>
            <filter src_ip="165.68.79.107" dst_port="80"/>
            <filter src_ip="165.68.79.107" dst_port="443"/>
            <filter dst_ip="54.198.142.80" dst_port="80"/>
            <filter dst_ip="54.198.142.80" dst_port="443"/>
        </slice>
        <from usec="0" sec="1226379645"/>
        <to usec="0" sec="1226380406"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="152.185.21.17"/>
        </slice>
        <from usec="0" sec="1226379663"/>
        <to usec="0" sec="1226380418"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.149.181.5"/>
        </slice>
        <from usec="0" sec="1226379670"/>
        <to usec="0" sec="1226380387"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="97.20.57.84"/>
        </slice>
        <from usec="0" sec="1226379722"/>
        <to usec="0" sec="1226380426"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.185.245.186"/>
        </slice>
        <from usec="0" sec="1226379867"/>
        <to usec="0" sec="1226380295"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.80.129.184"/>
        </slice>
        <from usec="0" sec="1226379880"/>
        <to usec="0" sec="1226380422"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.16.104.141"/>
        </slice>
        <from usec="0" sec="1226380031"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.16.104.141"/>
        </slice>
        <from usec="0" sec="1226380031"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="73.152.63.156"/>
        </slice>
        <from usec="0" sec="1226380033"/>
        <to usec="0" sec="1226380398"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.23.49.220"/>
        </slice>
        <from usec="0" sec="1226380090"/>
        <to usec="0" sec="1226380399"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.207.76.94"/>
        </slice>
        <from usec="0" sec="1226380142"/>
        <to usec="0" sec="1226380303"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.68.79.206"/>
        </slice>
        <from usec="0" sec="1226380162"/>
        <to usec="0" sec="1226380427"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.60.70.249"/>
        </slice>
        <from usec="0" sec="1226380178"/>
        <to usec="0" sec="1226380260"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.100.150.87"/>
        </slice>
        <from usec="0" sec="1226380237"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="25.144.9.20"/>
        </slice>
        <from usec="0" sec="1226380238"/>
        <to usec="0" sec="1226380270"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.30.1.72"/>
        </slice>
        <from usec="0" sec="1226380270"/>
        <to usec="0" sec="1226380283"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.64.119.142"/>
        </slice>
        <from usec="0" sec="1226380270"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.177.169.73"/>
        </slice>
        <from usec="0" sec="1226380285"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.229.139.181"/>
        </slice>
        <from usec="0" sec="1226380293"/>
        <to usec="0" sec="1226380367"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.203.66.29"/>
        </slice>
        <from usec="0" sec="1226380297"/>
        <to usec="0" sec="1226380332"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.222.80.91"/>
        </slice>
        <from usec="0" sec="1226380331"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="25.146.154.138"/>
        </slice>
        <from usec="0" sec="1226380344"/>
        <to usec="0" sec="1226380428"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.21.130.131"/>
        </slice>
        <from usec="0" sec="1226380348"/>
        <to usec="0" sec="1226380355"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.166.1.46"/>
        </slice>
        <from usec="0" sec="1226380354"/>
        <to usec="0" sec="1226380395"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.158.92.14"/>
        </slice>
        <from usec="0" sec="1226380360"/>
        <to usec="0" sec="1226380399"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="157.80.159.33"/>
        </slice>
        <from usec="0" sec="1226380377"/>
        <to usec="0" sec="1226380395"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="70.212.246.225"/>
        </slice>
        <from usec="0" sec="1226380392"/>
        <to usec="0" sec="1226380410"/>
    </anomaly>
    <anomaly type="notice" value="0.387618,1.305650,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.159.201.33"/>
        </slice>
        <from usec="0" sec="1226380402"/>
        <to usec="0" sec="1226380413"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="73.201.48.122"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379646"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="166.61.4.124"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379646"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.68.10.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379646"/>
    </anomaly>
    <anomaly type="notice" value="0.824639,1.342340,503,1 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.80.186.20" dst_ip="208.26.165.95" dst_port="80"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226379646"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.149.166.18"/>
        </slice>
        <from usec="0" sec="1226380005"/>
        <to usec="0" sec="1226380051"/>
    </anomaly>
    <anomaly type="notice" value="0.824639,1.342340,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="160.23.221.120" src_port="25"/>
            <filter dst_ip="160.23.221.120" dst_port="25"/>
        </slice>
        <from usec="0" sec="1226379771"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.80.90.50"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.2.104.147"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.2.250.210"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,020,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.149.181.80"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="166.61.54.181"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.782953,1.304660,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="160.23.220.178" src_port="80"/>
            <filter dst_ip="160.23.220.178"/>
        </slice>
        <from usec="0" sec="1226379600"/>
        <to usec="0" sec="1226380411"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.2.107.81"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,011,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.101.233.93"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="152.101.3.154"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.824639,1.342340,002,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="115.149.112.130" dst_ip="209.149.177.170"/>
            <filter src_ip="115.149.112.130" dst_port="139"/>
            <filter src_ip="115.149.112.130" dst_port="445"/>
            <filter src_ip="102.208.231.127" dst_ip="209.149.177.170"/>
            <filter src_ip="102.208.231.127" dst_port="139"/>
            <filter src_ip="102.208.231.127" dst_port="445"/>
            <filter src_ip="113.15.228.30" dst_ip="209.149.177.170" dst_port="139"/>
            <filter src_ip="113.15.228.30" dst_ip="209.149.177.170" dst_port="445"/>
        </slice>
        <from usec="0" sec="1226379660"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.80.159.36" dst_ip="208.26.1.234" dst_port="443"/>
            <filter src_ip="157.80.159.27" dst_ip="208.26.1.234" dst_port="443"/>
            <filter src_ip="157.80.159.47" dst_ip="208.26.1.234" dst_port="443"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
    <anomaly type="notice" value="0.686088,1.343430,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="152.185.53.65" dst_port="53"/>
        </slice>
        <from usec="0" sec="1226380320"/>
        <to usec="0" sec="1226380366"/>
    </anomaly>
</admd:annotation>
