<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.40.224.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058460"/>
        <to usec="0" sec="1229058499"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.232.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058692"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.2.220" dst_ip="192.22.73.65" src_port="46975" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058590"/>
        <to usec="0" sec="1229058594"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.64.240.241" dst_ip="44.77.169.53" src_port="49183" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058430"/>
        <to usec="0" sec="1229058433"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.135.64" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058489"/>
        <to usec="0" sec="1229058567"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.243.140"/>
        </slice>
        <from usec="0" sec="1229058014"/>
        <to usec="0" sec="1229058018"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.64.247.137" dst_ip="208.14.146.51" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058166"/>
        <to usec="0" sec="1229058394"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.203.168.225"/>
        </slice>
        <from usec="0" sec="1229058352"/>
        <to usec="0" sec="1229058664"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.8.120.12"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058003"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.196.63" dst_ip="100.174.219.51" src_port="2314" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058541"/>
        <to usec="0" sec="1229058545"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.194.172.237" dst_ip="194.115.146.159" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058687"/>
        <to usec="0" sec="1229058691"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.194.19.12" dst_ip="1.214.64.126" src_port="12014" dst_port="1115" proto="udp"/>
        </slice>
        <from usec="0" sec="1229058146"/>
        <to usec="0" sec="1229058898"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.240.64.104" dst_ip="174.194.172.193" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058033"/>
        <to usec="0" sec="1229058734"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.174.39"/>
        </slice>
        <from usec="0" sec="1229058187"/>
        <to usec="0" sec="1229058190"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.88.34" dst_ip="45.142.236.211" src_port="9570" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058520"/>
        <to usec="0" sec="1229058527"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.152.33"/>
        </slice>
        <from usec="0" sec="1229058666"/>
        <to usec="0" sec="1229058756"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.177.59" dst_ip="195.191.11.221" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058696"/>
        <to usec="0" sec="1229058702"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.110.163.74" dst_ip="214.49.18.110" src_port="80" dst_port="1539" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058095"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.190.65.18" dst_ip="174.194.146.42" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058675"/>
        <to usec="0" sec="1229058678"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.208.178.172"/>
        </slice>
        <from usec="0" sec="1229058060"/>
        <to usec="0" sec="1229058064"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.245.119" dst_ip="206.22.20.237" src_port="8080" dst_port="57808" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058033"/>
        <to usec="0" sec="1229058776"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.24.32" dst_ip="192.22.70.207" src_port="38898" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058019"/>
        <to usec="0" sec="1229058539"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.244.235" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058649"/>
        <to usec="0" sec="1229058775"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.72.197.17" src_port="1027" proto="udp"/>
        </slice>
        <from usec="0" sec="1229058013"/>
        <to usec="0" sec="1229058889"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.30.241.33" dst_ip="128.87.90.181" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058864"/>
        <to usec="0" sec="1229058897"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.37.36" dst_ip="202.174.245.244" src_port="52484" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058051"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="52.105.217.253"/>
        </slice>
        <from usec="0" sec="1229058072"/>
        <to usec="0" sec="1229058731"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.64.5.165" dst_ip="133.72.37.55" src_port="4427" dst_port="7556" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058164"/>
        <to usec="0" sec="1229058614"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.72.177.73" dst_ip="1.145.126.97" src_port="4066" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058092"/>
        <to usec="0" sec="1229058096"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.169.162.173" dst_ip="128.87.90.180" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058661"/>
        <to usec="0" sec="1229058711"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.208.192.83" dst_ip="41.207.125.112" src_port="80" dst_port="36605" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058893"/>
        <to usec="0" sec="1229058896"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.184.79.169" dst_ip="172.45.39.117" src_port="80" dst_port="3090" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058751"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.57.103.54" dst_ip="214.56.200.226" src_port="80" dst_port="3191" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058613"/>
        <to usec="0" sec="1229058712"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.110.180.77" dst_ip="133.72.177.40" src_port="554" dst_port="3244" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058777"/>
        <to usec="0" sec="1229058869"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.166.6"/>
        </slice>
        <from usec="0" sec="1229058230"/>
        <to usec="0" sec="1229058760"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.81.72.73" dst_ip="215.173.19.118" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058748"/>
        <to usec="0" sec="1229058751"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.148.238"/>
        </slice>
        <from usec="0" sec="1229058413"/>
        <to usec="0" sec="1229058420"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.22.44.164" dst_ip="128.208.134.142" src_port="80" dst_port="1151" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058189"/>
        <to usec="0" sec="1229058192"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.22.41.5" dst_ip="174.194.129.4" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058568"/>
        <to usec="0" sec="1229058571"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.144.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058039"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.116.52" dst_ip="192.22.2.164" src_port="49315" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058664"/>
        <to usec="0" sec="1229058667"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="128.208.233.2" dst_ip="192.22.44.52" src_port="58589" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058306"/>
        <to usec="0" sec="1229058309"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.236.32.171" dst_ip="133.72.166.84" src_port="80" dst_port="1705" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058840"/>
        <to usec="0" sec="1229058843"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.50.144"/>
        </slice>
        <from usec="0" sec="1229058461"/>
        <to usec="0" sec="1229058716"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.35.18"/>
        </slice>
        <from usec="0" sec="1229058303"/>
        <to usec="0" sec="1229058649"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.194.233.134" dst_ip="214.57.90.184" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058777"/>
        <to usec="0" sec="1229058780"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.244.166" dst_ip="101.157.207.163" src_port="6453" dst_port="49549" proto="udp"/>
        </slice>
        <from usec="0" sec="1229058814"/>
        <to usec="0" sec="1229058837"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.105.32"/>
        </slice>
        <from usec="0" sec="1229058013"/>
        <to usec="0" sec="1229058061"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.70.169.67" dst_ip="214.56.220.81" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058390"/>
        <to usec="0" sec="1229058393"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.56.200.226" dst_ip="214.57.103.54" src_port="3191" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058080"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.160.216" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058629"/>
        <to usec="0" sec="1229058772"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.82.85" dst_ip="103.75.13.169" src_port="4987" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058039"/>
        <to usec="0" sec="1229058664"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.97.13" dst_ip="85.215.16.215" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058755"/>
        <to usec="0" sec="1229058759"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.210.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058523"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.104.170"/>
        </slice>
        <from usec="0" sec="1229058068"/>
        <to usec="0" sec="1229058075"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.64.244.120" dst_ip="45.142.236.238" src_port="49847" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058605"/>
        <to usec="0" sec="1229058609"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.145.65" dst_ip="44.77.169.32" src_port="1059" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058033"/>
        <to usec="0" sec="1229058037"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="58.134.34.86"/>
        </slice>
        <from usec="0" sec="1229058033"/>
        <to usec="0" sec="1229058892"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.1.67.54"/>
        </slice>
        <from usec="0" sec="1229058013"/>
        <to usec="0" sec="1229058116"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="101.208.82.73"/>
        </slice>
        <from usec="0" sec="1229058404"/>
        <to usec="0" sec="1229058408"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.126.213"/>
        </slice>
        <from usec="0" sec="1229058051"/>
        <to usec="0" sec="1229058646"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.208.132.29" dst_ip="102.204.48.74" src_port="3513" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058387"/>
        <to usec="0" sec="1229058769"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.145.111"/>
        </slice>
        <from usec="0" sec="1229058077"/>
        <to usec="0" sec="1229058081"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.82.219"/>
        </slice>
        <from usec="0" sec="1229058684"/>
        <to usec="0" sec="1229058688"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.163.190"/>
        </slice>
        <from usec="0" sec="1229058223"/>
        <to usec="0" sec="1229058227"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.1.67.28"/>
        </slice>
        <from usec="0" sec="1229058457"/>
        <to usec="0" sec="1229058502"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="46.65.130.94"/>
        </slice>
        <from usec="0" sec="1229058191"/>
        <to usec="0" sec="1229058195"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.190.237.218"/>
        </slice>
        <from usec="0" sec="1229058134"/>
        <to usec="0" sec="1229058138"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.14.148.232"/>
        </slice>
        <from usec="0" sec="1229058427"/>
        <to usec="0" sec="1229058431"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.125.93" dst_ip="34.227.42.127" src_port="1134" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058280"/>
        <to usec="0" sec="1229058285"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.72.158.129" dst_ip="4.250.162.24" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058566"/>
        <to usec="0" sec="1229058570"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.72.158.139"/>
        </slice>
        <from usec="0" sec="1229058440"/>
        <to usec="0" sec="1229058750"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.133.102"/>
        </slice>
        <from usec="0" sec="1229058045"/>
        <to usec="0" sec="1229058743"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.240.92"/>
        </slice>
        <from usec="0" sec="1229058514"/>
        <to usec="0" sec="1229058643"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.74.181.227"/>
        </slice>
        <from usec="0" sec="1229058404"/>
        <to usec="0" sec="1229058408"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.64.4.78" dst_ip="45.142.236.239" src_port="2588" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058582"/>
        <to usec="0" sec="1229058655"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.236.32.44"/>
        </slice>
        <from usec="0" sec="1229058331"/>
        <to usec="0" sec="1229058335"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.49.4.203" dst_ip="200.43.106.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058098"/>
        <to usec="0" sec="1229058646"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.194.232.69" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058675"/>
        <to usec="0" sec="1229058781"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.22.37.186"/>
        </slice>
        <from usec="0" sec="1229058104"/>
        <to usec="0" sec="1229058676"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.72.94.133" dst_ip="222.155.53.37" src_port="1067" dst_port="80"/>
            <filter src_ip="133.72.94.133" dst_ip="222.155.53.37" src_port="1060" dst_port="80"/>
            <filter src_ip="133.72.126.110" dst_ip="222.155.53.37" src_port="51420" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058566"/>
        <to usec="0" sec="1229058658"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="174.194.194.209" dst_ip="208.165.30.132" src_port="49418" dst_port="80"/>
            <filter src_ip="214.49.22.206" dst_ip="208.165.30.132" src_port="2891" dst_port="80"/>
            <filter src_ip="174.194.21.150" dst_ip="208.165.30.132" src_port="3407" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058027"/>
        <to usec="0" sec="1229058075"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.165.28.178"/>
        </slice>
        <from usec="0" sec="1229058523"/>
        <to usec="0" sec="1229058536"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.36.204.21"/>
        </slice>
        <from usec="0" sec="1229058239"/>
        <to usec="0" sec="1229058243"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.113.3" dst_ip="32.131.28.156" dst_port="80"/>
            <filter src_ip="133.72.113.3" dst_ip="192.22.41.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058260"/>
        <to usec="0" sec="1229058740"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.227.58.8"/>
        </slice>
        <from usec="0" sec="1229058390"/>
        <to usec="0" sec="1229058740"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="222.231.0.254"/>
        </slice>
        <from usec="0" sec="1229058705"/>
        <to usec="0" sec="1229058709"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="222.231.94.116"/>
        </slice>
        <from usec="0" sec="1229058427"/>
        <to usec="0" sec="1229058431"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.40.235.49"/>
        </slice>
        <from usec="0" sec="1229058156"/>
        <to usec="0" sec="1229058159"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.168.132" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058304"/>
        <to usec="0" sec="1229058430"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.64.82"/>
        </slice>
        <from usec="0" sec="1229058118"/>
        <to usec="0" sec="1229058122"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.29.186"/>
        </slice>
        <from usec="0" sec="1229058717"/>
        <to usec="0" sec="1229058721"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.49.26.4"/>
        </slice>
        <from usec="0" sec="1229058714"/>
        <to usec="0" sec="1229058728"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.202.90" dst_ip="192.22.1.24" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058122"/>
        <to usec="0" sec="1229058430"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.169.64"/>
        </slice>
        <from usec="0" sec="1229058623"/>
        <to usec="0" sec="1229058627"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.117.116"/>
        </slice>
        <from usec="0" sec="1229058547"/>
        <to usec="0" sec="1229058555"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="5.238.106.239"/>
        </slice>
        <from usec="0" sec="1229058060"/>
        <to usec="0" sec="1229058064"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.194.32.1"/>
        </slice>
        <from usec="0" sec="1229058387"/>
        <to usec="0" sec="1229058391"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.228.150.73"/>
        </slice>
        <from usec="0" sec="1229058164"/>
        <to usec="0" sec="1229058483"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.177.119"/>
        </slice>
        <from usec="0" sec="1229058457"/>
        <to usec="0" sec="1229058461"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="0.69.166.22"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058769"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.75.135"/>
        </slice>
        <from usec="0" sec="1229058672"/>
        <to usec="0" sec="1229058685"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.194.146.207"/>
        </slice>
        <from usec="0" sec="1229058030"/>
        <to usec="0" sec="1229058034"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.72.133.44"/>
        </slice>
        <from usec="0" sec="1229058280"/>
        <to usec="0" sec="1229058345"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.194.29.85" dst_ip="47.150.106.64" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058690"/>
        <to usec="0" sec="1229058700"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.72.33.138" dst_ip="193.197.167.50" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058260"/>
        <to usec="0" sec="1229058266"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.72.158.140"/>
        </slice>
        <from usec="0" sec="1229058346"/>
        <to usec="0" sec="1229058350"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.14.148.222"/>
        </slice>
        <from usec="0" sec="1229058520"/>
        <to usec="0" sec="1229058524"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.194.172.237"/>
        </slice>
        <from usec="0" sec="1229058364"/>
        <to usec="0" sec="1229058475"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.2.145.132" dst_ip="215.40.234.160" dst_port="25"/>
        </slice>
        <from usec="0" sec="1229058295"/>
        <to usec="0" sec="1229058643"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.74.25.237"/>
        </slice>
        <from usec="0" sec="1229058768"/>
        <to usec="0" sec="1229058772"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="42.46.14.158"/>
        </slice>
        <from usec="0" sec="1229058199"/>
        <to usec="0" sec="1229058503"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.173.19.118"/>
        </slice>
        <from usec="0" sec="1229058633"/>
        <to usec="0" sec="1229058637"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.73.50.157"/>
        </slice>
        <from usec="0" sec="1229058514"/>
        <to usec="0" sec="1229058518"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.152.32" dst_ip="193.38.167.246" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058304"/>
        <to usec="0" sec="1229058308"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.40.237.177" src_port="38503" dst_port="33000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058124"/>
        <to usec="0" sec="1229058128"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.131.140.178" src_port="1026" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1229058688"/>
        <to usec="0" sec="1229058702"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.64.244.124" proto="udp"/>
        </slice>
        <from usec="0" sec="1229058730"/>
        <to usec="0" sec="1229058739"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="202.38.167.236" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1229058584"/>
        <to usec="0" sec="1229058630"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.194.125.173"/>
        </slice>
        <from usec="0" sec="1229058708"/>
        <to usec="0" sec="1229058712"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.125.130"/>
        </slice>
        <from usec="0" sec="1229058349"/>
        <to usec="0" sec="1229058353"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.145.139.245"/>
        </slice>
        <from usec="0" sec="1229058737"/>
        <to usec="0" sec="1229058740"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.91.19"/>
        </slice>
        <from usec="0" sec="1229058584"/>
        <to usec="0" sec="1229058588"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,999,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.72.236.176" dst_ip="34.227.29.49"/>
            <filter src_ip="133.72.237.213" dst_ip="34.227.29.49"/>
            <filter src_ip="133.72.237.213" dst_port="993"/>
            <filter dst_ip="34.227.29.49" dst_port="993"/>
        </slice>
        <from usec="0" sec="1229058058"/>
        <to usec="0" sec="1229058627"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.194.204.40"/>
        </slice>
        <from usec="0" sec="1229058498"/>
        <to usec="0" sec="1229058502"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.22.41.44"/>
        </slice>
        <from usec="0" sec="1229058100"/>
        <to usec="0" sec="1229058105"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="215.40.233.81"/>
        </slice>
        <from usec="0" sec="1229058038"/>
        <to usec="0" sec="1229058043"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.208.96.6"/>
        </slice>
        <from usec="0" sec="1229058302"/>
        <to usec="0" sec="1229058305"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.187.152.12"/>
        </slice>
        <from usec="0" sec="1229058749"/>
        <to usec="0" sec="1229058753"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.148.108"/>
        </slice>
        <from usec="0" sec="1229058054"/>
        <to usec="0" sec="1229058101"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.40.229.19"/>
        </slice>
        <from usec="0" sec="1229058642"/>
        <to usec="0" sec="1229058740"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.49.22.211"/>
        </slice>
        <from usec="0" sec="1229058413"/>
        <to usec="0" sec="1229058417"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.4.127"/>
        </slice>
        <from usec="0" sec="1229058681"/>
        <to usec="0" sec="1229058685"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.62.83"/>
        </slice>
        <from usec="0" sec="1229058633"/>
        <to usec="0" sec="1229058637"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.168.1"/>
        </slice>
        <from usec="0" sec="1229058098"/>
        <to usec="0" sec="1229058101"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.138.67"/>
        </slice>
        <from usec="0" sec="1229058054"/>
        <to usec="0" sec="1229058144"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.194.170"/>
        </slice>
        <from usec="0" sec="1229058027"/>
        <to usec="0" sec="1229058031"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.19.129"/>
        </slice>
        <from usec="0" sec="1229058553"/>
        <to usec="0" sec="1229058557"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.72.49.201"/>
        </slice>
        <from usec="0" sec="1229058068"/>
        <to usec="0" sec="1229058072"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.150.87"/>
        </slice>
        <from usec="0" sec="1229058432"/>
        <to usec="0" sec="1229058436"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.158.170"/>
        </slice>
        <from usec="0" sec="1229058629"/>
        <to usec="0" sec="1229058634"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.208.196.175"/>
        </slice>
        <from usec="0" sec="1229058477"/>
        <to usec="0" sec="1229058481"/>
    </anomaly>
    <anomaly type="notice" value="0.522539,1.512850,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.56.229.93"/>
        </slice>
        <from usec="0" sec="1229058771"/>
        <to usec="0" sec="1229058775"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="44.77.153.156"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058047"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="135.74.25.236" dst_ip="133.72.88.17" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058518"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="214.49.186.45"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058108"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.72.18.225"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058106"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="41.207.125.104"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058106"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.208.87"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058064"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.9.69.25"/>
        </slice>
        <from usec="0" sec="1229058007"/>
        <to usec="0" sec="1229058099"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.18.200.10"/>
        </slice>
        <from usec="0" sec="1229058041"/>
        <to usec="0" sec="1229058089"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="96.29.225.132"/>
        </slice>
        <from usec="0" sec="1229058050"/>
        <to usec="0" sec="1229058068"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.243.193.159"/>
        </slice>
        <from usec="0" sec="1229058080"/>
        <to usec="0" sec="1229058082"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="172.45.93.217"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058197"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.208.192.101"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058195"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.49.6.137"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058198"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.118.242.209"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058198"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.194.172.152"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058198"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.235.30"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058182"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="96.221.169.65"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058164"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.169.147.7"/>
        </slice>
        <from usec="0" sec="1229058008"/>
        <to usec="0" sec="1229058056"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.131.31.14"/>
        </slice>
        <from usec="0" sec="1229058075"/>
        <to usec="0" sec="1229058091"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="128.64.209.39"/>
        </slice>
        <from usec="0" sec="1229058076"/>
        <to usec="0" sec="1229058174"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.194.19.213"/>
        </slice>
        <from usec="0" sec="1229058103"/>
        <to usec="0" sec="1229058198"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.5.254.82"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.45.41.130"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058287"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.208.196.7" dst_ip="91.3.167.174"/>
            <filter src_ip="128.208.196.7" dst_ip="52.208.14.237" src_port="443"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058287"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.49.21.186"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058464"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.37.88"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.208.192.79"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058255"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.166.49.217"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058369"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="49.20.162.182"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058557"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.64.117.67"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.157.119.150"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058286"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="7.100.31.27"/>
        </slice>
        <from usec="0" sec="1229058006"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.64.247.137"/>
        </slice>
        <from usec="0" sec="1229058013"/>
        <to usec="0" sec="1229058368"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.208.180.174"/>
        </slice>
        <from usec="0" sec="1229058026"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="55.111.150.235"/>
        </slice>
        <from usec="0" sec="1229058562"/>
        <to usec="0" sec="1229058633"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.162.208"/>
        </slice>
        <from usec="0" sec="1229058065"/>
        <to usec="0" sec="1229058250"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="96.221.169.68"/>
        </slice>
        <from usec="0" sec="1229058090"/>
        <to usec="0" sec="1229058286"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.99.63.118"/>
        </slice>
        <from usec="0" sec="1229058096"/>
        <to usec="0" sec="1229058279"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.183.104.248"/>
        </slice>
        <from usec="0" sec="1229058103"/>
        <to usec="0" sec="1229058284"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.245.212.193"/>
        </slice>
        <from usec="0" sec="1229058160"/>
        <to usec="0" sec="1229058282"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.194.2.72"/>
        </slice>
        <from usec="0" sec="1229058163"/>
        <to usec="0" sec="1229058189"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="211.222.169.237"/>
        </slice>
        <from usec="0" sec="1229058182"/>
        <to usec="0" sec="1229058188"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.117.7"/>
        </slice>
        <from usec="0" sec="1229058194"/>
        <to usec="0" sec="1229058263"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.207.122.168"/>
        </slice>
        <from usec="0" sec="1229058202"/>
        <to usec="0" sec="1229058210"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="6.0.68.76"/>
        </slice>
        <from usec="0" sec="1229058232"/>
        <to usec="0" sec="1229058239"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.64.213.197"/>
        </slice>
        <from usec="0" sec="1229058280"/>
        <to usec="0" sec="1229058284"/>
    </anomaly>
    <anomaly type="notice" value="0.941717,1.441580,999,1 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.72.37.55" src_port="7556"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.128.83" dst_ip="56.80.86.137" src_port="41525" dst_port="80"/>
            <filter src_ip="133.72.128.83" dst_ip="56.80.86.137" src_port="40801" dst_port="80"/>
            <filter src_ip="133.72.128.83" dst_ip="56.80.86.137" src_port="40036" dst_port="80"/>
            <filter src_ip="133.72.128.83" dst_ip="56.80.86.137" src_port="39540" dst_port="80"/>
            <filter src_ip="133.72.128.83" dst_ip="56.80.86.137" src_port="38723" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058763"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.137.63.122" src_port="7000"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058378"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.211.99" dst_ip="85.166.214.232" src_port="123" dst_port="123"/>
            <filter src_ip="133.72.211.99" dst_ip="210.201.130.136" src_port="6320" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058648"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.208.192.28" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058378"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.40.227.117" src_port="80"/>
            <filter src_ip="215.40.227.117" dst_port="25"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058378"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.49.21.186"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058647"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="195.53.139.168"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058366"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.152.43"/>
        </slice>
        <from usec="0" sec="1229058005"/>
        <to usec="0" sec="1229058377"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.207.125.137"/>
        </slice>
        <from usec="0" sec="1229058010"/>
        <to usec="0" sec="1229058374"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="33.161.54.208"/>
        </slice>
        <from usec="0" sec="1229058016"/>
        <to usec="0" sec="1229058364"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="144.203.65.55"/>
        </slice>
        <from usec="0" sec="1229058019"/>
        <to usec="0" sec="1229058457"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.218.69"/>
        </slice>
        <from usec="0" sec="1229058022"/>
        <to usec="0" sec="1229058330"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.81.87.82" dst_ip="41.207.116.30" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058066"/>
        <to usec="0" sec="1229058785"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.201.22.228"/>
        </slice>
        <from usec="0" sec="1229058066"/>
        <to usec="0" sec="1229058340"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="101.227.143.174"/>
        </slice>
        <from usec="0" sec="1229058201"/>
        <to usec="0" sec="1229058259"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.92.38"/>
        </slice>
        <from usec="0" sec="1229058229"/>
        <to usec="0" sec="1229058678"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.135.115.121"/>
        </slice>
        <from usec="0" sec="1229058234"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.139.12.86"/>
        </slice>
        <from usec="0" sec="1229058246"/>
        <to usec="0" sec="1229058446"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="91.115.36.58"/>
        </slice>
        <from usec="0" sec="1229058248"/>
        <to usec="0" sec="1229058354"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.54.186.226"/>
        </slice>
        <from usec="0" sec="1229058304"/>
        <to usec="0" sec="1229058333"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.18.64.143"/>
        </slice>
        <from usec="0" sec="1229058312"/>
        <to usec="0" sec="1229058374"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.88.56.10"/>
        </slice>
        <from usec="0" sec="1229058339"/>
        <to usec="0" sec="1229058342"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.173.80.79"/>
        </slice>
        <from usec="0" sec="1229058355"/>
        <to usec="0" sec="1229058374"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.203.217.93"/>
        </slice>
        <from usec="0" sec="1229058359"/>
        <to usec="0" sec="1229058367"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="7.38.121.58"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.5.254.82"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058402"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.40.226.2" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058819"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="7.64.0.149"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058463"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.208.178.49"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.72.57.35" dst_port="80"/>
            <filter src_ip="133.72.2.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058875"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.194.231.174"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.183.104.236"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058460"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="215.40.237.227"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="100.136.209.84" dst_ip="133.72.148.109" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.194.2.86"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058459"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="206.50.106.97"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="133.72.22.204"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.194.105.156"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.72.37.1"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="223.70.56.148"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058340"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="96.14.96.211"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058467"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="60.179.5.86"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058635"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.69.160.152"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.64.5.81" src_port="48003" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058645"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.70.76.2"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058343"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.221.2.202"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.72.34.53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058466"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.18.169.100"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="49.20.162.177"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058465"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.18.157.66"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="49.20.162.178"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058465"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.204.246.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058467"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.217.162.10"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058467"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.219.39"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058440"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.14.65.77"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058466"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.144.34.147"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058463"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.106.60.96"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.129.18.102"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058445"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.72.201"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058447"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="44.77.153.158"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058466"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.64.240.7"/>
        </slice>
        <from usec="0" sec="1229058008"/>
        <to usec="0" sec="1229058458"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.208.174.47"/>
        </slice>
        <from usec="0" sec="1229058010"/>
        <to usec="0" sec="1229058466"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.64.148.193"/>
        </slice>
        <from usec="0" sec="1229058010"/>
        <to usec="0" sec="1229058464"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.203.87.165"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058438"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.45.137.124"/>
        </slice>
        <from usec="0" sec="1229058014"/>
        <to usec="0" sec="1229058460"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.64.82.195"/>
        </slice>
        <from usec="0" sec="1229058016"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="130.85.167.17"/>
        </slice>
        <from usec="0" sec="1229058019"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="101.184.79.152"/>
        </slice>
        <from usec="0" sec="1229058022"/>
        <to usec="0" sec="1229058307"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.208.180.174"/>
        </slice>
        <from usec="0" sec="1229058026"/>
        <to usec="0" sec="1229058383"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="65.54.12.76"/>
        </slice>
        <from usec="0" sec="1229058031"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.40.227.9"/>
        </slice>
        <from usec="0" sec="1229058044"/>
        <to usec="0" sec="1229058433"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.166.81.88"/>
        </slice>
        <from usec="0" sec="1229058045"/>
        <to usec="0" sec="1229058430"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.224.22.233"/>
        </slice>
        <from usec="0" sec="1229058045"/>
        <to usec="0" sec="1229058454"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.248.218.157" dst_ip="169.18.228.84" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058010"/>
        <to usec="0" sec="1229058337"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.44.70.184"/>
        </slice>
        <from usec="0" sec="1229058063"/>
        <to usec="0" sec="1229058408"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="34.227.16.71"/>
        </slice>
        <from usec="0" sec="1229058069"/>
        <to usec="0" sec="1229058460"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.194.194.234"/>
        </slice>
        <from usec="0" sec="1229058084"/>
        <to usec="0" sec="1229058376"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.64.149.228"/>
        </slice>
        <from usec="0" sec="1229058108"/>
        <to usec="0" sec="1229058451"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.17.176.13"/>
        </slice>
        <from usec="0" sec="1229058118"/>
        <to usec="0" sec="1229058291"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.208.180.51"/>
        </slice>
        <from usec="0" sec="1229058151"/>
        <to usec="0" sec="1229058295"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.208.132.26"/>
        </slice>
        <from usec="0" sec="1229058171"/>
        <to usec="0" sec="1229058444"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.194.146.62"/>
        </slice>
        <from usec="0" sec="1229058196"/>
        <to usec="0" sec="1229058419"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.177.177.99"/>
        </slice>
        <from usec="0" sec="1229058231"/>
        <to usec="0" sec="1229058449"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.112.65"/>
        </slice>
        <from usec="0" sec="1229058233"/>
        <to usec="0" sec="1229058464"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="44.55.216.48"/>
        </slice>
        <from usec="0" sec="1229058237"/>
        <to usec="0" sec="1229058332"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.138.192.91"/>
        </slice>
        <from usec="0" sec="1229058290"/>
        <to usec="0" sec="1229058344"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.240.149"/>
        </slice>
        <from usec="0" sec="1229058323"/>
        <to usec="0" sec="1229058428"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.233.153.55"/>
        </slice>
        <from usec="0" sec="1229058329"/>
        <to usec="0" sec="1229058392"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.45.222.156"/>
        </slice>
        <from usec="0" sec="1229058347"/>
        <to usec="0" sec="1229058362"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="128.81.14.148" dst_ip="41.207.126.33"/>
            <filter dst_ip="41.207.126.33" src_port="80"/>
            <filter src_ip="128.81.14.148" dst_ip="205.187.223.81" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058124"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="6.163.40.26"/>
        </slice>
        <from usec="0" sec="1229058391"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.90.40.74"/>
        </slice>
        <from usec="0" sec="1229058393"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="133.72.224.65"/>
        </slice>
        <from usec="0" sec="1229058422"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.116.122"/>
        </slice>
        <from usec="0" sec="1229058432"/>
        <to usec="0" sec="1229058555"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.254.144.145"/>
        </slice>
        <from usec="0" sec="1229058440"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.203.246.153"/>
        </slice>
        <from usec="0" sec="1229058444"/>
        <to usec="0" sec="1229058452"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.141.136.62"/>
        </slice>
        <from usec="0" sec="1229058461"/>
        <to usec="0" sec="1229058473"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.239.199.223"/>
        </slice>
        <from usec="0" sec="1229058464"/>
        <to usec="0" sec="1229058469"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.9.69.214"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="58.134.204.193"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.142.25.121"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058557"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="102.4.202.181"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="194.149.58.153"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058556"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.18.185.117"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.232.90.79"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.214.131.169"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="100.131.104.189"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058555"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="102.245.179.164"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058536"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.64.240.181"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058548"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="1.98.26.113"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058555"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="44.111.244.75"/>
        </slice>
        <from usec="0" sec="1229058005"/>
        <to usec="0" sec="1229058549"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="49.20.162.16"/>
        </slice>
        <from usec="0" sec="1229058008"/>
        <to usec="0" sec="1229058556"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.0.134.77" dst_ip="133.72.218.74" src_port="443"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.81.194.2"/>
        </slice>
        <from usec="0" sec="1229058014"/>
        <to usec="0" sec="1229058553"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.64.242.237"/>
        </slice>
        <from usec="0" sec="1229058108"/>
        <to usec="0" sec="1229058465"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.72.105.52" dst_ip="216.93.12.78"/>
            <filter src_ip="128.64.87.83" dst_ip="216.93.12.78" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058118"/>
        <to usec="0" sec="1229058449"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.188.42"/>
        </slice>
        <from usec="0" sec="1229058230"/>
        <to usec="0" sec="1229058505"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.244.180.228"/>
        </slice>
        <from usec="0" sec="1229058288"/>
        <to usec="0" sec="1229058549"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.168.146.246"/>
        </slice>
        <from usec="0" sec="1229058297"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.219.185"/>
        </slice>
        <from usec="0" sec="1229058318"/>
        <to usec="0" sec="1229058548"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.7.37.197"/>
        </slice>
        <from usec="0" sec="1229058340"/>
        <to usec="0" sec="1229058548"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="40.37.216.154"/>
        </slice>
        <from usec="0" sec="1229058373"/>
        <to usec="0" sec="1229058406"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.208.53.74" dst_ip="133.72.57.36" src_port="80" dst_port="1627"/>
        </slice>
        <from usec="0" sec="1229058379"/>
        <to usec="0" sec="1229058405"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.197.220.4"/>
        </slice>
        <from usec="0" sec="1229058398"/>
        <to usec="0" sec="1229058475"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.194.122.0"/>
        </slice>
        <from usec="0" sec="1229058419"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.138.114.132"/>
        </slice>
        <from usec="0" sec="1229058424"/>
        <to usec="0" sec="1229058495"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.72.34.129"/>
        </slice>
        <from usec="0" sec="1229058435"/>
        <to usec="0" sec="1229058458"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.227.84.145"/>
        </slice>
        <from usec="0" sec="1229058482"/>
        <to usec="0" sec="1229058488"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.194.194.208"/>
        </slice>
        <from usec="0" sec="1229058506"/>
        <to usec="0" sec="1229058543"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="0.137.122.93"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058648"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.131.6"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058647"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.64.213.176" dst_ip="212.16.33.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058647"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.49.11.51"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058646"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.56.229.50"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058648"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.194.18.17"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058646"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.41.152.63"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058641"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="174.194.2.93"/>
        </slice>
        <from usec="0" sec="1229058006"/>
        <to usec="0" sec="1229058608"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="97.58.19.216"/>
        </slice>
        <from usec="0" sec="1229058006"/>
        <to usec="0" sec="1229058638"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.18.235.163"/>
        </slice>
        <from usec="0" sec="1229058007"/>
        <to usec="0" sec="1229058634"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.5.71" dst_ip="40.37.23.131" dst_port="443"/>
        </slice>
        <from usec="0" sec="1229058045"/>
        <to usec="0" sec="1229058603"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.81.165.183"/>
        </slice>
        <from usec="0" sec="1229058064"/>
        <to usec="0" sec="1229058647"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="48.220.89.85"/>
        </slice>
        <from usec="0" sec="1229058182"/>
        <to usec="0" sec="1229058568"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="101.238.45.55"/>
        </slice>
        <from usec="0" sec="1229058293"/>
        <to usec="0" sec="1229058648"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.29.7.128"/>
        </slice>
        <from usec="0" sec="1229058403"/>
        <to usec="0" sec="1229058619"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.196.104.230"/>
        </slice>
        <from usec="0" sec="1229058411"/>
        <to usec="0" sec="1229058611"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.147.136.236"/>
        </slice>
        <from usec="0" sec="1229058420"/>
        <to usec="0" sec="1229058494"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.72.158.171"/>
        </slice>
        <from usec="0" sec="1229058429"/>
        <to usec="0" sec="1229058568"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.72.209.221"/>
        </slice>
        <from usec="0" sec="1229058431"/>
        <to usec="0" sec="1229058623"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.177.128.141"/>
        </slice>
        <from usec="0" sec="1229058438"/>
        <to usec="0" sec="1229058535"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="103.120.13.2"/>
        </slice>
        <from usec="0" sec="1229058479"/>
        <to usec="0" sec="1229058632"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.54.22.32"/>
        </slice>
        <from usec="0" sec="1229058491"/>
        <to usec="0" sec="1229058593"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.236.42.1"/>
        </slice>
        <from usec="0" sec="1229058535"/>
        <to usec="0" sec="1229058556"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.49.6.252"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="32.46.65.7"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="49.139.171.250"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058722"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.224.20.131"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058737"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.75.181" dst_ip="100.175.96.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058601"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="128.64.114.31"/>
        </slice>
        <from usec="0" sec="1229058006"/>
        <to usec="0" sec="1229058728"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="37.137.54.212"/>
        </slice>
        <from usec="0" sec="1229058019"/>
        <to usec="0" sec="1229058735"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="166.17.88.192"/>
        </slice>
        <from usec="0" sec="1229058038"/>
        <to usec="0" sec="1229058709"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="4.95.13.76"/>
        </slice>
        <from usec="0" sec="1229058079"/>
        <to usec="0" sec="1229058647"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.72.164.160" dst_port="80"/>
            <filter src_ip="133.72.162.138" dst_ip="135.74.181.135" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058084"/>
        <to usec="0" sec="1229058601"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.194.126.218"/>
        </slice>
        <from usec="0" sec="1229058157"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,011,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.49.28.122"/>
        </slice>
        <from usec="0" sec="1229058196"/>
        <to usec="0" sec="1229058720"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="200.85.232.27" src_port="80"/>
            <filter src_ip="200.85.198.173" dst_ip="133.72.2.43" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058208"/>
        <to usec="0" sec="1229058672"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.128.91"/>
        </slice>
        <from usec="0" sec="1229058242"/>
        <to usec="0" sec="1229058579"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.146.224"/>
        </slice>
        <from usec="0" sec="1229058402"/>
        <to usec="0" sec="1229058599"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.49.4.226"/>
        </slice>
        <from usec="0" sec="1229058420"/>
        <to usec="0" sec="1229058696"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="180.71.128.161"/>
        </slice>
        <from usec="0" sec="1229058486"/>
        <to usec="0" sec="1229058732"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.218.13.111"/>
        </slice>
        <from usec="0" sec="1229058489"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.162.134.32"/>
        </slice>
        <from usec="0" sec="1229058531"/>
        <to usec="0" sec="1229058665"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.97.137"/>
        </slice>
        <from usec="0" sec="1229058545"/>
        <to usec="0" sec="1229058657"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.6.88.169"/>
        </slice>
        <from usec="0" sec="1229058548"/>
        <to usec="0" sec="1229058642"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.65.113.152"/>
        </slice>
        <from usec="0" sec="1229058655"/>
        <to usec="0" sec="1229058729"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="53.160.36.21"/>
        </slice>
        <from usec="0" sec="1229058665"/>
        <to usec="0" sec="1229058687"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.64.151.18" src_port="50352"/>
            <filter src_ip="128.64.151.18" dst_ip="42.238.68.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058762"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="42.133.166.185"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="205.232.22.150"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="1.134.85.218"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.208.192.28" src_port="53"/>
            <filter dst_ip="128.208.192.28" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058827"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.194.130.96"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.250.10"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058825"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.72.162.12"/>
        </slice>
        <from usec="0" sec="1229058008"/>
        <to usec="0" sec="1229058826"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.207.126.224"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058802"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.64.150.158"/>
        </slice>
        <from usec="0" sec="1229058015"/>
        <to usec="0" sec="1229058809"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.40.236.32" dst_port="25"/>
        </slice>
        <from usec="0" sec="1229058028"/>
        <to usec="0" sec="1229058823"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,010,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.18.168.249"/>
        </slice>
        <from usec="0" sec="1229058031"/>
        <to usec="0" sec="1229058824"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.49.28.36" dst_ip="42.105.124.20" dst_port="80"/>
            <filter src_ip="214.49.28.36" dst_ip="41.212.202.100" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058080"/>
        <to usec="0" sec="1229058798"/>
    </anomaly>
    <anomaly type="notice" value="0.872857,1.473900,503,1 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.56.229.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058772"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.194.32.91"/>
        </slice>
        <from usec="0" sec="1229058298"/>
        <to usec="0" sec="1229058826"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.72.158.150"/>
        </slice>
        <from usec="0" sec="1229058612"/>
        <to usec="0" sec="1229058778"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.42.221.1"/>
        </slice>
        <from usec="0" sec="1229058644"/>
        <to usec="0" sec="1229058720"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.146.148.35"/>
        </slice>
        <from usec="0" sec="1229058648"/>
        <to usec="0" sec="1229058670"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.77.24.141"/>
        </slice>
        <from usec="0" sec="1229058651"/>
        <to usec="0" sec="1229058808"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.72.137.78" dst_ip="96.82.199.182" src_port="17772" dst_port="33598"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058108"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.64.244.78" dst_ip="6.68.32.71" src_port="5901" dst_port="2640"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058106"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.56.221.81" src_port="25"/>
            <filter dst_ip="214.56.221.81" dst_port="25"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058198"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.40.227.36" dst_ip="55.41.11.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058030"/>
        <to usec="0" sec="1229058136"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.128.65" dst_ip="41.141.6.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.237.35.245" dst_ip="128.64.161.185" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058378"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.40.230.68" dst_ip="192.168.10.31" src_port="4097" dst_port="123"/>
        </slice>
        <from usec="0" sec="1229058002"/>
        <to usec="0" sec="1229058735"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.64.2.197" dst_ip="41.207.116.37" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058367"/>
    </anomaly>
    <anomaly type="notice" value="0.941717,1.441580,504,1 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.194.231.150" dst_ip="40.37.23.130" dst_port="443"/>
            <filter src_ip="174.194.231.150" dst_ip="40.37.23.132" dst_port="443"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058340"/>
    </anomaly>
    <anomaly type="notice" value="0.941717,1.441580,503,1 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="214.7.36.89" src_port="80"/>
            <filter src_ip="214.7.36.90" dst_ip="174.194.18.34" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058048"/>
        <to usec="0" sec="1229058601"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.45.137.115" src_port="53" dst_port="58000"/>
        </slice>
        <from usec="0" sec="1229058049"/>
        <to usec="0" sec="1229058288"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.194.231.174" dst_ip="102.193.176.246" src_port="42824" dst_port="8020"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058468"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.56.229.93" src_port="25"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058467"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,010,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="128.64.215.24" dst_ip="219.20.213.235" dst_port="6667"/>
            <filter src_ip="128.64.215.24" dst_ip="219.20.213.235" dst_port="6668"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058463"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.72.163.129" dst_ip="41.212.193.24" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058047"/>
        <to usec="0" sec="1229058459"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.169.138.138" dst_ip="133.72.194.112" src_port="80" dst_port="8717"/>
            <filter src_ip="0.169.138.138" dst_ip="133.72.194.112" src_port="80" dst_port="7504"/>
        </slice>
        <from usec="0" sec="1229058401"/>
        <to usec="0" sec="1229058454"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="132.50.17.203" dst_ip="174.194.2.91" src_port="443" dst_port="3668"/>
            <filter src_ip="212.229.157.64" dst_ip="174.194.2.91" src_port="9584" dst_port="46092"/>
        </slice>
        <from usec="0" sec="1229058003"/>
        <to usec="0" sec="1229058556"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.72.88.230" dst_ip="200.169.220.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.941717,1.441580,503,1 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.72.168.216" dst_port="80"/>
            <filter src_ip="214.49.189.11" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058774"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.100.229.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058012"/>
        <to usec="0" sec="1229058557"/>
    </anomaly>
    <anomaly type="notice" value="0.466114,1.458780,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="128.64.246.55" dst_port="80"/>
            <filter src_ip="133.72.181.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058898"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.81.22.5" dst_ip="41.207.126.151" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058601"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.137.194.104" src_port="5050"/>
            <filter src_ip="37.137.194.104" src_port="23"/>
        </slice>
        <from usec="0" sec="1229058004"/>
        <to usec="0" sec="1229058639"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.67.139.4" dst_ip="133.72.37.55" src_port="25879" dst_port="7566"/>
            <filter src_ip="205.67.139.4" dst_ip="133.72.37.55" src_port="25861" dst_port="7556"/>
        </slice>
        <from usec="0" sec="1229058081"/>
        <to usec="0" sec="1229058648"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,004,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="40.25.27.104" src_port="445"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058738"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.194.32.28" dst_ip="41.207.126.99" src_port="80"/>
            <filter src_ip="174.194.32.28" dst_ip="202.25.65.241" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058001"/>
        <to usec="0" sec="1229058737"/>
    </anomaly>
    <anomaly type="notice" value="0.902947,1.467000,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="180.213.75.81" dst_ip="169.18.185.112" dst_port="80"/>
            <filter src_ip="219.234.216.32" dst_ip="169.18.185.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058147"/>
        <to usec="0" sec="1229058631"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="44.129.147.238"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058046"/>
    </anomaly>
    <anomaly type="notice" value="0.830880,1.498770,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.64.235.244" dst_port="49763"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.72.2.12"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058046"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.40.244.24" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058046"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.64.65.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058046"/>
    </anomaly>
    <anomaly type="notice" value="0.830880,1.498770,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="216.55.169.192" src_port="6667"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058558"/>
    </anomaly>
    <anomaly type="notice" value="0.830880,1.498770,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="214.56.220.165"/>
        </slice>
        <from usec="0" sec="1229058018"/>
        <to usec="0" sec="1229058667"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.56.197.156" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058135"/>
        <to usec="0" sec="1229058181"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.64.82.171" src_port="4000"/>
        </slice>
        <from usec="0" sec="1229058135"/>
        <to usec="0" sec="1229058181"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="193.238.191.4" dst_ip="214.56.221.11" dst_port="53"/>
            <filter src_ip="193.238.191.6" dst_ip="214.56.221.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="128.64.203.135" dst_port="25"/>
        </slice>
        <from usec="0" sec="1229058225"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.87.200.138" dst_port="25187"/>
        </slice>
        <from usec="0" sec="1229058225"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.40.183.251" dst_port="21112"/>
        </slice>
        <from usec="0" sec="1229058225"/>
        <to usec="0" sec="1229058271"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.49.0.241" src_port="22047"/>
        </slice>
        <from usec="0" sec="1229058405"/>
        <to usec="0" sec="1229058451"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="215.40.232.214"/>
        </slice>
        <from usec="0" sec="1229058540"/>
        <to usec="0" sec="1229058586"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="183.131.140.178"/>
        </slice>
        <from usec="0" sec="1229058675"/>
        <to usec="0" sec="1229058721"/>
    </anomaly>
    <anomaly type="notice" value="0.904248,1.527440,504,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.72.141.99" dst_ip="214.57.43.184" dst_port="443"/>
            <filter src_ip="133.72.158.136" dst_ip="214.57.43.184" dst_port="443"/>
        </slice>
        <from usec="0" sec="1229058026"/>
        <to usec="0" sec="1229058796"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.238.191.4" dst_ip="169.18.168.226" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="206.50.106.97"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.64.203.74"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.56.197.156" dst_port="53"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.72.158.87" dst_port="80"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.863797,1.551450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.137.41.239" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1229058765"/>
        <to usec="0" sec="1229058811"/>
    </anomaly>
    <anomaly type="notice" value="0.381764,1.483900,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="133.72.67.69" dst_port="60244"/>
            <filter dst_ip="174.194.231.172" src_port="80"/>
        </slice>
        <from usec="0" sec="1229058000"/>
        <to usec="0" sec="1229058828"/>
    </anomaly>
</admd:annotation>
