<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="84.8.43.34" dst_ip="154.101.17.68" src_port="2475" dst_port="17404" proto="udp"/>
        </slice>
        <from usec="0" sec="1230786465"/>
        <to usec="0" sec="1230786470"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.114.42.49" dst_ip="8.68.38.8" src_port="2364" dst_port="44712" proto="udp"/>
        </slice>
        <from usec="0" sec="1230786434"/>
        <to usec="0" sec="1230786470"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.114.25.122" dst_ip="199.215.27.214" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786654"/>
        <to usec="0" sec="1230786794"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.101.17.109" dst_ip="48.210.76.227" src_port="1047" dst_port="1060" proto="udp"/>
        </slice>
        <from usec="0" sec="1230786261"/>
        <to usec="0" sec="1230786481"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.69.169.81" dst_ip="164.114.187.146" src_port="2039" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786275"/>
        <to usec="0" sec="1230786280"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.101.230.157"/>
        </slice>
        <from usec="0" sec="1230786452"/>
        <to usec="0" sec="1230786504"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.101.18.173"/>
        </slice>
        <from usec="0" sec="1230786413"/>
        <to usec="0" sec="1230786766"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.17.156.89" dst_ip="215.57.166.40" src_port="54122" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786393"/>
        <to usec="0" sec="1230786398"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="80.226.66.45" dst_ip="160.48.44.138" src_port="3941" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786684"/>
        <to usec="0" sec="1230786688"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.158.193.225"/>
        </slice>
        <from usec="0" sec="1230786445"/>
        <to usec="0" sec="1230786517"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.133.165.230" dst_ip="154.101.16.2" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786439"/>
        <to usec="0" sec="1230786804"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.77.80.96" dst_ip="178.202.46.106" src_port="48993" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786654"/>
        <to usec="0" sec="1230786660"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="160.131.149.204" dst_ip="118.245.231.182" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786375"/>
        <to usec="0" sec="1230786403"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.54.24.59" dst_ip="192.231.21.219" src_port="2750" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786206"/>
        <to usec="0" sec="1230786218"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.161.22.1" dst_ip="192.231.16.117" src_port="53050" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786742"/>
        <to usec="0" sec="1230786749"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.77.80.44" dst_ip="50.200.12.19" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786398"/>
        <to usec="0" sec="1230786713"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="160.48.182.83" dst_ip="200.30.150.204" src_port="80" dst_port="1936" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786431"/>
        <to usec="0" sec="1230786436"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="160.48.44.138" dst_ip="160.48.44.138" src_port="3941" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786410"/>
        <to usec="0" sec="1230786692"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.231.22.129"/>
        </slice>
        <from usec="0" sec="1230786428"/>
        <to usec="0" sec="1230786517"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="154.101.16.2" proto="udp"/>
        </slice>
        <from usec="0" sec="1230786385"/>
        <to usec="0" sec="1230786794"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.36.41.199"/>
        </slice>
        <from usec="0" sec="1230786397"/>
        <to usec="0" sec="1230786500"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.231.29.168" dst_ip="192.231.29.168" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786465"/>
        <to usec="0" sec="1230786893"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.101.17.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786435"/>
        <to usec="0" sec="1230786736"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.114.76.172"/>
        </slice>
        <from usec="0" sec="1230786748"/>
        <to usec="0" sec="1230786756"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="154.101.18.254" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786344"/>
        <to usec="0" sec="1230786350"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.100.10.97"/>
        </slice>
        <from usec="0" sec="1230786751"/>
        <to usec="0" sec="1230786768"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.101.105.102" dst_ip="201.236.195.89" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1230786409"/>
        <to usec="0" sec="1230786473"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.108.32.175"/>
        </slice>
        <from usec="0" sec="1230786680"/>
        <to usec="0" sec="1230786685"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.88.118.76" dst_ip="160.48.73.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1230786206"/>
        <to usec="0" sec="1230786780"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="84.176.89.238"/>
        </slice>
        <from usec="0" sec="1230786437"/>
        <to usec="0" sec="1230786457"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="80.59.146.248"/>
        </slice>
        <from usec="0" sec="1230786469"/>
        <to usec="0" sec="1230786474"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.100.16.193"/>
        </slice>
        <from usec="0" sec="1230786397"/>
        <to usec="0" sec="1230786403"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.101.17.70"/>
        </slice>
        <from usec="0" sec="1230786344"/>
        <to usec="0" sec="1230786350"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.101.18.243"/>
        </slice>
        <from usec="0" sec="1230786415"/>
        <to usec="0" sec="1230786420"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="192.58.141.161"/>
        </slice>
        <from usec="0" sec="1230786129"/>
        <to usec="0" sec="1230786134"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="192.231.29.222" proto="icmp"/>
        </slice>
        <from usec="0" sec="1230786203"/>
        <to usec="0" sec="1230786209"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,501,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.231.24.67"/>
        </slice>
        <from usec="0" sec="1230786708"/>
        <to usec="0" sec="1230786713"/>
    </anomaly>
    <anomaly type="notice" value="0.508610,0.774826,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.36.41.231"/>
        </slice>
        <from usec="0" sec="1230786659"/>
        <to usec="0" sec="1230786664"/>
    </anomaly>
</admd:annotation>
