<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.193.106.184"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="56.65.220.55"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.193.198.8"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550836"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="53.67.100.206"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="136.193.249.117"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.106.222.132"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="53.64.11.125"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233550884"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="154.221.217.193" dst_ip="4.89.156.35" src_port="80"/>
            <filter src_ip="143.193.49.18" dst_ip="4.89.156.35" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551627"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="12.235.24.34"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="9.203.18.206"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233550820"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="4.89.156.176"/>
        </slice>
        <from usec="0" sec="1233550807"/>
        <to usec="0" sec="1233550908"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.254.236"/>
        </slice>
        <from usec="0" sec="1233550810"/>
        <to usec="0" sec="1233551070"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.144.13"/>
        </slice>
        <from usec="0" sec="1233550835"/>
        <to usec="0" sec="1233550907"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.34.117.87"/>
        </slice>
        <from usec="0" sec="1233550845"/>
        <to usec="0" sec="1233550900"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.184.158"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="200.42.134.8"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="216.175.224.42"/>
        </slice>
        <from usec="0" sec="1233551177"/>
        <to usec="0" sec="1233551358"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.193.109.200" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.106.218.77" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="51.93.33.122"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.85.49"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550992"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="12.82.100.96"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550833"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.90.236.59"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550996"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.200.209"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550950"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="143.208.22.8"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550993"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.230.1"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233550997"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.106.214.32"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.136.2"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233550993"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.193.91.90"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233550992"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="143.193.228.39"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.37.218"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.183.86.32"/>
        </slice>
        <from usec="0" sec="1233550807"/>
        <to usec="0" sec="1233550938"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.136.84.100"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233550845"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.89.152.25"/>
        </slice>
        <from usec="0" sec="1233550817"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.25.83.194"/>
        </slice>
        <from usec="0" sec="1233550818"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="105.46.226.59"/>
        </slice>
        <from usec="0" sec="1233550830"/>
        <to usec="0" sec="1233550926"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.208.8.195"/>
        </slice>
        <from usec="0" sec="1233550840"/>
        <to usec="0" sec="1233550860"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.211.183.226"/>
        </slice>
        <from usec="0" sec="1233550844"/>
        <to usec="0" sec="1233550993"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.73.65.234"/>
        </slice>
        <from usec="0" sec="1233550870"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.184.202.201"/>
        </slice>
        <from usec="0" sec="1233550882"/>
        <to usec="0" sec="1233550962"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.42.182.114"/>
        </slice>
        <from usec="0" sec="1233550890"/>
        <to usec="0" sec="1233550994"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.38.4.77"/>
        </slice>
        <from usec="0" sec="1233550899"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="4.175.168.68"/>
        </slice>
        <from usec="0" sec="1233550944"/>
        <to usec="0" sec="1233550965"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="143.197.20.144"/>
        </slice>
        <from usec="0" sec="1233550967"/>
        <to usec="0" sec="1233550992"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.56.48.151"/>
        </slice>
        <from usec="0" sec="1233550988"/>
        <to usec="0" sec="1233550995"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.95.168.192"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.36.203.13"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551268"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="220.44.152.179" dst_ip="201.106.218.189"/>
            <filter src_ip="220.44.152.179" dst_ip="201.106.222.78"/>
            <filter src_ip="220.44.152.179" dst_ip="201.106.212.218"/>
            <filter src_ip="220.44.152.179" dst_ip="201.106.222.83"/>
            <filter src_ip="220.44.152.179" dst_ip="201.106.212.208"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.106.212.218" src_port="80"/>
            <filter src_ip="201.106.212.218" src_port="41225"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.14.218.74"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551087"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.111.0.199"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551083"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.106.219.126" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.66.185.10" dst_ip="136.193.240.75" src_port="80" dst_port="3758"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="144.205.239.193"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.193.37.217" dst_port="80"/>
            <filter dst_ip="12.171.62.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.161.202.220"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551086"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.108.226.58"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551077"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="201.106.218.165"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551087"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="219.143.17.140"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.55.54.119"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551082"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="143.208.233.108"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551172"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.140.32"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551080"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.19.152.216"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551050"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.170.29.226"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.21.106.200"/>
        </slice>
        <from usec="0" sec="1233550812"/>
        <to usec="0" sec="1233551016"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.153.144.167"/>
        </slice>
        <from usec="0" sec="1233550812"/>
        <to usec="0" sec="1233551086"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.89.152.88"/>
        </slice>
        <from usec="0" sec="1233550824"/>
        <to usec="0" sec="1233551082"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="53.40.196.112"/>
        </slice>
        <from usec="0" sec="1233551130"/>
        <to usec="0" sec="1233551355"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="56.56.236.235"/>
        </slice>
        <from usec="0" sec="1233550841"/>
        <to usec="0" sec="1233550998"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.210.133.115"/>
        </slice>
        <from usec="0" sec="1233550913"/>
        <to usec="0" sec="1233551079"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.209.12.22"/>
        </slice>
        <from usec="0" sec="1233550929"/>
        <to usec="0" sec="1233551046"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.167.217"/>
        </slice>
        <from usec="0" sec="1233550929"/>
        <to usec="0" sec="1233551046"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.193.23.68" dst_port="80"/>
            <filter dst_ip="4.72.250.158" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551076"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.82.121.151"/>
        </slice>
        <from usec="0" sec="1233551024"/>
        <to usec="0" sec="1233551053"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.193.47.41" dst_ip="85.94.113.33" dst_port="443"/>
            <filter src_ip="136.193.47.41" dst_ip="85.94.113.40" dst_port="443"/>
            <filter src_ip="136.193.47.41" dst_ip="85.94.113.28" dst_port="5354"/>
        </slice>
        <from usec="0" sec="1233550972"/>
        <to usec="0" sec="1233551053"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="210.154.101.228"/>
        </slice>
        <from usec="0" sec="1233551048"/>
        <to usec="0" sec="1233551088"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.38.189.167"/>
        </slice>
        <from usec="0" sec="1233551049"/>
        <to usec="0" sec="1233551071"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.171.85.182"/>
        </slice>
        <from usec="0" sec="1233551058"/>
        <to usec="0" sec="1233551081"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.221.220.125"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="201.175.15.214"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.95.57.169"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.86.190.135"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="4.10.231.8"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="122.88.69.4"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551168"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.225.80"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.117.136.55"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551164"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.193.67.4"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.193.190.74" dst_port="80"/>
            <filter src_ip="174.111.103.65" dst_port="80"/>
            <filter dst_ip="206.137.246.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551164"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.76.194.126"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.200.79.141"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551070"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="168.93.179.68"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="3.212.235.129"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551160"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,002,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.196.181.74"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551534"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.212.235.215"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551164"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.34.46.68"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="148.82.50.202"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551176"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="17.0.175.231"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551176"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.190.65"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.168.47.65"/>
        </slice>
        <from usec="0" sec="1233550808"/>
        <to usec="0" sec="1233551156"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.204.150"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233551158"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.145.192.88"/>
        </slice>
        <from usec="0" sec="1233550815"/>
        <to usec="0" sec="1233551174"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="14.141.131.26"/>
        </slice>
        <from usec="0" sec="1233550816"/>
        <to usec="0" sec="1233551176"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.128.2"/>
        </slice>
        <from usec="0" sec="1233550834"/>
        <to usec="0" sec="1233551175"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.175.168.84"/>
        </slice>
        <from usec="0" sec="1233550835"/>
        <to usec="0" sec="1233551050"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.238.165.186"/>
        </slice>
        <from usec="0" sec="1233550838"/>
        <to usec="0" sec="1233551169"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="200.38.16.208"/>
        </slice>
        <from usec="0" sec="1233550848"/>
        <to usec="0" sec="1233551267"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.230.113"/>
        </slice>
        <from usec="0" sec="1233550878"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.86.208"/>
        </slice>
        <from usec="0" sec="1233550917"/>
        <to usec="0" sec="1233551178"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.74.193.200"/>
        </slice>
        <from usec="0" sec="1233550920"/>
        <to usec="0" sec="1233551173"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.219.164"/>
        </slice>
        <from usec="0" sec="1233550957"/>
        <to usec="0" sec="1233551025"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.56.200.237"/>
        </slice>
        <from usec="0" sec="1233550988"/>
        <to usec="0" sec="1233551072"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.197.19.0"/>
        </slice>
        <from usec="0" sec="1233550989"/>
        <to usec="0" sec="1233551023"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.118.57.166"/>
        </slice>
        <from usec="0" sec="1233550994"/>
        <to usec="0" sec="1233551020"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="48.108.28.115"/>
        </slice>
        <from usec="0" sec="1233551006"/>
        <to usec="0" sec="1233551072"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.143.74.85"/>
        </slice>
        <from usec="0" sec="1233551009"/>
        <to usec="0" sec="1233551066"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.28.164.178"/>
        </slice>
        <from usec="0" sec="1233551013"/>
        <to usec="0" sec="1233551091"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="200.196.44.76"/>
        </slice>
        <from usec="0" sec="1233551020"/>
        <to usec="0" sec="1233551174"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.104.156"/>
        </slice>
        <from usec="0" sec="1233551024"/>
        <to usec="0" sec="1233551176"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="206.44.238.101"/>
        </slice>
        <from usec="0" sec="1233551030"/>
        <to usec="0" sec="1233551167"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.34.9.2"/>
        </slice>
        <from usec="0" sec="1233551031"/>
        <to usec="0" sec="1233551120"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.21.72.107"/>
        </slice>
        <from usec="0" sec="1233551033"/>
        <to usec="0" sec="1233551177"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.183.146.122"/>
        </slice>
        <from usec="0" sec="1233551037"/>
        <to usec="0" sec="1233551173"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="3.19.144.123"/>
        </slice>
        <from usec="0" sec="1233551064"/>
        <to usec="0" sec="1233551168"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="29.19.31.37"/>
        </slice>
        <from usec="0" sec="1233551077"/>
        <to usec="0" sec="1233551109"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="6.61.83.25"/>
        </slice>
        <from usec="0" sec="1233551105"/>
        <to usec="0" sec="1233551167"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.150.40"/>
        </slice>
        <from usec="0" sec="1233551109"/>
        <to usec="0" sec="1233551169"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.11.173.4"/>
        </slice>
        <from usec="0" sec="1233551127"/>
        <to usec="0" sec="1233551147"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.8.163.14"/>
        </slice>
        <from usec="0" sec="1233551169"/>
        <to usec="0" sec="1233551175"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.38.10" dst_ip="52.93.212.158" src_port="80" dst_port="1186"/>
            <filter src_ip="174.111.38.10" dst_ip="104.37.43.166" src_port="80" dst_port="1131"/>
            <filter src_ip="174.111.38.10" dst_ip="214.33.218.98" src_port="80" dst_port="44995"/>
            <filter src_ip="174.111.38.10" dst_ip="51.39.17.177" src_port="80" dst_port="60015"/>
            <filter src_ip="174.111.38.10" dst_ip="58.148.112.50" src_port="80" dst_port="1171"/>
        </slice>
        <from usec="0" sec="1233550814"/>
        <to usec="0" sec="1233551162"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="200.42.155.251" dst_ip="218.73.187.56" dst_port="53"/>
            <filter src_ip="136.193.37.229" dst_ip="218.73.187.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551625"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.111.69.94"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551227"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.193.18.206"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551259"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.41.61.221"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551261"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="109.249.73.196"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551231"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="2.6.148.239"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551250"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.98.8"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551141"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.206.106"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551268"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="207.82.22.14"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551141"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.230.122"/>
        </slice>
        <from usec="0" sec="1233550807"/>
        <to usec="0" sec="1233551268"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="136.193.86.199"/>
        </slice>
        <from usec="0" sec="1233550817"/>
        <to usec="0" sec="1233551263"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="14.150.92.51"/>
        </slice>
        <from usec="0" sec="1233550827"/>
        <to usec="0" sec="1233551248"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.90.237.18"/>
        </slice>
        <from usec="0" sec="1233550915"/>
        <to usec="0" sec="1233551268"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.90.163"/>
        </slice>
        <from usec="0" sec="1233550957"/>
        <to usec="0" sec="1233551266"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="9.7.35.210"/>
        </slice>
        <from usec="0" sec="1233551120"/>
        <to usec="0" sec="1233551185"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="6.197.224.98"/>
        </slice>
        <from usec="0" sec="1233551228"/>
        <to usec="0" sec="1233551250"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.114.36.162"/>
        </slice>
        <from usec="0" sec="1233551245"/>
        <to usec="0" sec="1233551248"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.106.211.48" dst_ip="2.242.195.241" src_port="80" dst_port="50901"/>
        </slice>
        <from usec="0" sec="1233551001"/>
        <to usec="0" sec="1233551022"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="200.43.110.106"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551358"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="143.208.17.200"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551342"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="105.165.164.208"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551357"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="77.232.153.199"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551292"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="48.150.48.182"/>
        </slice>
        <from usec="0" sec="1233550811"/>
        <to usec="0" sec="1233551358"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.38.16.208"/>
        </slice>
        <from usec="0" sec="1233550848"/>
        <to usec="0" sec="1233551357"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscICecrqICdurp">
        <slice>
            <filter src_ip="136.193.37.236"/>
        </slice>
        <from usec="0" sec="1233550854"/>
        <to usec="0" sec="1233551358"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.200.124"/>
        </slice>
        <from usec="0" sec="1233550887"/>
        <to usec="0" sec="1233551353"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.102.61.184"/>
        </slice>
        <from usec="0" sec="1233551004"/>
        <to usec="0" sec="1233551338"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.133.82.76"/>
        </slice>
        <from usec="0" sec="1233551010"/>
        <to usec="0" sec="1233551197"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.43.32.71"/>
        </slice>
        <from usec="0" sec="1233551030"/>
        <to usec="0" sec="1233551285"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.169.28.23"/>
        </slice>
        <from usec="0" sec="1233551148"/>
        <to usec="0" sec="1233551376"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="111.102.35.128"/>
        </slice>
        <from usec="0" sec="1233551194"/>
        <to usec="0" sec="1233551284"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.230.185.74"/>
        </slice>
        <from usec="0" sec="1233551207"/>
        <to usec="0" sec="1233551341"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="17.115.108.95"/>
        </slice>
        <from usec="0" sec="1233551211"/>
        <to usec="0" sec="1233551358"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.192.105" dst_ip="12.95.168.192" src_port="61837" dst_port="80"/>
            <filter src_ip="174.111.192.105" dst_ip="18.15.144.211" src_port="64422" dst_port="11113"/>
            <filter src_ip="174.111.192.105" dst_ip="4.10.231.23" src_port="59140" dst_port="5050"/>
            <filter src_ip="174.111.192.105" dst_ip="2.39.35.22" src_port="61420" dst_port="443"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551410"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="200.42.134.8"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.111.5.153"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="192.80.81.49" dst_ip="136.193.193.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.237.141.169"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="88.164.117.248"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.208.22.36" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="143.208.163.193" dst_ip="220.34.223.47" dst_port="53"/>
            <filter src_ip="143.208.22.36" dst_ip="220.34.223.47" dst_port="53"/>
            <filter src_ip="143.208.163.141" dst_ip="220.34.223.47" dst_port="53"/>
            <filter src_ip="143.208.163.194" dst_ip="220.34.223.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550988"/>
        <to usec="0" sec="1233551140"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.111.70.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="2.6.192.44" dst_ip="174.111.2.129" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551444"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="136.193.37.229" dst_ip="213.73.231.188" dst_port="53"/>
            <filter src_ip="136.193.212.132" dst_ip="213.73.231.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551531"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.114.229.167"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551446"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.41.61.173"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551446"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.106.216.152" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="53.176.118.238"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551445"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.193.122.203"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551446"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.19"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.193.54.210"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551443"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.229.169"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551444"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.42.135.65"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551387"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.38.29.102"/>
        </slice>
        <from usec="0" sec="1233550808"/>
        <to usec="0" sec="1233551445"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="168.93.165.34"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233551412"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.137.248.96"/>
        </slice>
        <from usec="0" sec="1233550817"/>
        <to usec="0" sec="1233551383"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.184.81.77" dst_ip="174.111.196.55" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550818"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.212.235.200"/>
        </slice>
        <from usec="0" sec="1233550818"/>
        <to usec="0" sec="1233551439"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="143.197.84.135"/>
        </slice>
        <from usec="0" sec="1233550821"/>
        <to usec="0" sec="1233551425"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="48.151.67.80"/>
        </slice>
        <from usec="0" sec="1233550825"/>
        <to usec="0" sec="1233551442"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="143.208.94.194"/>
        </slice>
        <from usec="0" sec="1233550827"/>
        <to usec="0" sec="1233551339"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.193.93.6" dst_port="80"/>
            <filter src_ip="136.193.230.9" dst_ip="6.69.143.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550810"/>
        <to usec="0" sec="1233551442"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.160.224.218"/>
        </slice>
        <from usec="0" sec="1233551000"/>
        <to usec="0" sec="1233551442"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.186.40.83"/>
        </slice>
        <from usec="0" sec="1233551007"/>
        <to usec="0" sec="1233551446"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.165.195.178"/>
        </slice>
        <from usec="0" sec="1233551090"/>
        <to usec="0" sec="1233551334"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,501,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="143.197.82.21"/>
        </slice>
        <from usec="0" sec="1233551132"/>
        <to usec="0" sec="1233551448"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.149.156.197"/>
        </slice>
        <from usec="0" sec="1233551178"/>
        <to usec="0" sec="1233551435"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.8.176.154"/>
        </slice>
        <from usec="0" sec="1233551180"/>
        <to usec="0" sec="1233551286"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="132.65.58.90"/>
        </slice>
        <from usec="0" sec="1233551270"/>
        <to usec="0" sec="1233551442"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.214.106.75"/>
        </slice>
        <from usec="0" sec="1233551279"/>
        <to usec="0" sec="1233551609"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.54.143.91"/>
        </slice>
        <from usec="0" sec="1233551289"/>
        <to usec="0" sec="1233551305"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.135.10.2"/>
        </slice>
        <from usec="0" sec="1233551290"/>
        <to usec="0" sec="1233551315"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.160.216.39"/>
        </slice>
        <from usec="0" sec="1233551292"/>
        <to usec="0" sec="1233551307"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="48.193.90.176"/>
        </slice>
        <from usec="0" sec="1233551342"/>
        <to usec="0" sec="1233551421"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.193.16.70"/>
        </slice>
        <from usec="0" sec="1233551348"/>
        <to usec="0" sec="1233551429"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="104.2.30.53"/>
        </slice>
        <from usec="0" sec="1233551352"/>
        <to usec="0" sec="1233551356"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.161.216.104"/>
        </slice>
        <from usec="0" sec="1233551399"/>
        <to usec="0" sec="1233551415"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="201.106.212.218" dst_ip="4.240.54.233" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551397"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.193.184.70"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="143.208.134.250"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551537"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="18.38.65.85"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="8.5.144.225" src_port="5050"/>
            <filter dst_ip="168.93.188.25" src_port="5050"/>
            <filter dst_ip="168.93.188.25" src_port="80"/>
            <filter dst_ip="168.93.188.25" src_port="443"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551537"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="200.178.179.11"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.193.84.9"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="4.10.231.18"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551537"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.78.8.120"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.193.232.162"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551537"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="201.106.219.216"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="122.93.79.78"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551625"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.34.195.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.149.156.154"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551536"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="59.27.7.82"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551527"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.198.178.208"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551521"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.193.45.26"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551514"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.193.54.117"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551536"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.35.68.76"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551532"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.193.134.234"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.89.152.139" dst_ip="174.111.254.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550810"/>
        <to usec="0" sec="1233551531"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="57.179.219.123"/>
        </slice>
        <from usec="0" sec="1233550810"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="14.150.49.7"/>
        </slice>
        <from usec="0" sec="1233550812"/>
        <to usec="0" sec="1233551534"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.113.108"/>
        </slice>
        <from usec="0" sec="1233550815"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.193.248.218"/>
        </slice>
        <from usec="0" sec="1233550817"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.38.207.108"/>
        </slice>
        <from usec="0" sec="1233550826"/>
        <to usec="0" sec="1233551579"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="8.5.48.244"/>
        </slice>
        <from usec="0" sec="1233550867"/>
        <to usec="0" sec="1233551599"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.193.104.212"/>
        </slice>
        <from usec="0" sec="1233550898"/>
        <to usec="0" sec="1233551479"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="211.48.221.172"/>
        </slice>
        <from usec="0" sec="1233551066"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="52.36.11.210"/>
        </slice>
        <from usec="0" sec="1233551262"/>
        <to usec="0" sec="1233551453"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.84.151"/>
        </slice>
        <from usec="0" sec="1233551275"/>
        <to usec="0" sec="1233551360"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.9.37.42"/>
        </slice>
        <from usec="0" sec="1233551290"/>
        <to usec="0" sec="1233551410"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.111.178.200"/>
        </slice>
        <from usec="0" sec="1233551353"/>
        <to usec="0" sec="1233551372"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.137.250.69"/>
        </slice>
        <from usec="0" sec="1233551371"/>
        <to usec="0" sec="1233551386"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.111.196.66"/>
        </slice>
        <from usec="0" sec="1233551372"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.245.193.246"/>
        </slice>
        <from usec="0" sec="1233551379"/>
        <to usec="0" sec="1233551409"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.141.216.55"/>
        </slice>
        <from usec="0" sec="1233551404"/>
        <to usec="0" sec="1233551420"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="4.240.54.226"/>
        </slice>
        <from usec="0" sec="1233551416"/>
        <to usec="0" sec="1233551437"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.168.115.1"/>
        </slice>
        <from usec="0" sec="1233551421"/>
        <to usec="0" sec="1233551439"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.194.129.42"/>
        </slice>
        <from usec="0" sec="1233551435"/>
        <to usec="0" sec="1233551442"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.250.217.148"/>
        </slice>
        <from usec="0" sec="1233551514"/>
        <to usec="0" sec="1233551525"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.193.55.156"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.193.26.66" src_port="25"/>
            <filter src_ip="136.193.26.66" dst_port="25"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.106.156.212"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="115.141.192.197"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="143.31.113.46"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.193.185.10" src_port="53"/>
            <filter src_ip="136.193.185.10" src_port="60173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551627"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.194.206.158"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.114.160.41"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.2.104.18"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551481"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="143.208.163.47"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551627"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.183.138"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551622"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.25.228.36"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551598"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="197.210.141.75"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551622"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="109.238.116.41"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="24.10.1.184"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551623"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.193.131.150" src_port="53"/>
            <filter src_ip="136.193.131.150" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="168.93.128.177"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551623"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.93.134.75"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.193.86.187"/>
        </slice>
        <from usec="0" sec="1233550802"/>
        <to usec="0" sec="1233551625"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="201.137.168.33" dst_ip="201.106.208.154" src_port="53"/>
            <filter src_ip="201.137.168.32" dst_ip="201.106.208.154" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550803"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="168.93.129.66"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551626"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="220.40.146.253" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.193.192.1"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551622"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.171.144"/>
        </slice>
        <from usec="0" sec="1233550806"/>
        <to usec="0" sec="1233551608"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.111.209.9"/>
        </slice>
        <from usec="0" sec="1233550808"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="0.89.53.56"/>
        </slice>
        <from usec="0" sec="1233550808"/>
        <to usec="0" sec="1233551602"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.39.214.219"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233551618"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.178.241.26"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.90.236.61"/>
        </slice>
        <from usec="0" sec="1233550809"/>
        <to usec="0" sec="1233551603"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="14.150.49.7"/>
        </slice>
        <from usec="0" sec="1233550812"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="168.93.163.211"/>
        </slice>
        <from usec="0" sec="1233550812"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.106.214.123"/>
        </slice>
        <from usec="0" sec="1233550816"/>
        <to usec="0" sec="1233551620"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.111.192.109"/>
        </slice>
        <from usec="0" sec="1233550816"/>
        <to usec="0" sec="1233551620"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.117.81"/>
        </slice>
        <from usec="0" sec="1233550821"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.23.123"/>
        </slice>
        <from usec="0" sec="1233550826"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.142.1"/>
        </slice>
        <from usec="0" sec="1233550846"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.111.5.138"/>
        </slice>
        <from usec="0" sec="1233550847"/>
        <to usec="0" sec="1233551582"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.34.65.226"/>
        </slice>
        <from usec="0" sec="1233550889"/>
        <to usec="0" sec="1233551578"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.111.236.67"/>
        </slice>
        <from usec="0" sec="1233550890"/>
        <to usec="0" sec="1233551613"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="108.184.4.154"/>
        </slice>
        <from usec="0" sec="1233550913"/>
        <to usec="0" sec="1233551604"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.57.112"/>
        </slice>
        <from usec="0" sec="1233550938"/>
        <to usec="0" sec="1233551602"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.34.127.220" dst_ip="138.106.251.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233551013"/>
        <to usec="0" sec="1233551452"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.42.23"/>
        </slice>
        <from usec="0" sec="1233551029"/>
        <to usec="0" sec="1233551622"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.58.171" dst_ip="85.31.107.23" dst_port="80"/>
            <filter src_ip="136.193.58.171" dst_ip="85.31.69.61" dst_port="80"/>
            <filter src_ip="136.193.58.171" dst_ip="4.72.247.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233551070"/>
        <to usec="0" sec="1233551517"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="6.229.163.53"/>
        </slice>
        <from usec="0" sec="1233551099"/>
        <to usec="0" sec="1233551584"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.93.242.116"/>
        </slice>
        <from usec="0" sec="1233551181"/>
        <to usec="0" sec="1233551497"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="200.43.113.36" dst_port="80"/>
            <filter src_ip="174.111.171.108" dst_ip="200.43.113.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233551190"/>
        <to usec="0" sec="1233551612"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.193.117.104"/>
        </slice>
        <from usec="0" sec="1233551219"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.224.26.52"/>
        </slice>
        <from usec="0" sec="1233551283"/>
        <to usec="0" sec="1233551621"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.48.111.190"/>
        </slice>
        <from usec="0" sec="1233551322"/>
        <to usec="0" sec="1233551505"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.158.129.90"/>
        </slice>
        <from usec="0" sec="1233551344"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.208.169"/>
        </slice>
        <from usec="0" sec="1233551348"/>
        <to usec="0" sec="1233551624"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.165.116.124"/>
        </slice>
        <from usec="0" sec="1233551359"/>
        <to usec="0" sec="1233551455"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="197.40.2.83"/>
        </slice>
        <from usec="0" sec="1233551376"/>
        <to usec="0" sec="1233551611"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.72.182.209"/>
        </slice>
        <from usec="0" sec="1233551407"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="12.218.180.125"/>
        </slice>
        <from usec="0" sec="1233551410"/>
        <to usec="0" sec="1233551529"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="77.243.216.217"/>
        </slice>
        <from usec="0" sec="1233551422"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.99.245.34"/>
        </slice>
        <from usec="0" sec="1233551459"/>
        <to usec="0" sec="1233551561"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="201.106.221.80"/>
        </slice>
        <from usec="0" sec="1233551459"/>
        <to usec="0" sec="1233551524"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.43.13.194"/>
        </slice>
        <from usec="0" sec="1233551464"/>
        <to usec="0" sec="1233551602"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="53.45.213.51"/>
        </slice>
        <from usec="0" sec="1233551465"/>
        <to usec="0" sec="1233551499"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.77.42"/>
        </slice>
        <from usec="0" sec="1233551470"/>
        <to usec="0" sec="1233551606"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.88.234.22"/>
        </slice>
        <from usec="0" sec="1233551471"/>
        <to usec="0" sec="1233551501"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.36.207.177"/>
        </slice>
        <from usec="0" sec="1233551483"/>
        <to usec="0" sec="1233551576"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.93.165.182"/>
        </slice>
        <from usec="0" sec="1233551485"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.106.222.114"/>
        </slice>
        <from usec="0" sec="1233551488"/>
        <to usec="0" sec="1233551508"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.193.252.51"/>
        </slice>
        <from usec="0" sec="1233551492"/>
        <to usec="0" sec="1233551548"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.94.113.33"/>
        </slice>
        <from usec="0" sec="1233551503"/>
        <to usec="0" sec="1233551580"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.221.110.49"/>
        </slice>
        <from usec="0" sec="1233551536"/>
        <to usec="0" sec="1233551602"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="4.8.176.162"/>
        </slice>
        <from usec="0" sec="1233551544"/>
        <to usec="0" sec="1233551622"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.60.116.101"/>
        </slice>
        <from usec="0" sec="1233551566"/>
        <to usec="0" sec="1233551579"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.125.14.85" dst_ip="201.106.223.197" src_port="64510" dst_port="22"/>
        </slice>
        <from usec="0" sec="1233551223"/>
        <to usec="0" sec="1233551253"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="206.44.227.181" dst_ip="174.111.143.18" src_port="80"/>
            <filter src_ip="207.82.28.152" dst_ip="174.111.143.18" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550805"/>
        <to usec="0" sec="1233551439"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="216.106.216.227" dst_ip="143.197.92.212" src_port="80"/>
        </slice>
        <from usec="0" sec="1233551268"/>
        <to usec="0" sec="1233551313"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.111.38.10" dst_ip="14.59.166.123" src_port="80" dst_port="49775"/>
        </slice>
        <from usec="0" sec="1233550992"/>
        <to usec="0" sec="1233551000"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="218.92.40.247" src_port="80"/>
            <filter src_ip="14.133.193.52" dst_ip="174.111.188.114" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550804"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.106.211.48" dst_ip="217.124.140.66" src_port="80" dst_port="47075"/>
            <filter src_ip="201.106.211.48" dst_ip="217.124.140.66" src_port="80" dst_port="45205"/>
            <filter src_ip="201.106.211.48" dst_ip="217.124.140.66" src_port="80" dst_port="45190"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551627"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="143.193.190.252" dst_ip="4.89.145.240" src_port="80" dst_port="38204"/>
        </slice>
        <from usec="0" sec="1233551259"/>
        <to usec="0" sec="1233551272"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="195.148.76.143" dst_ip="221.111.17.177" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550808"/>
        <to usec="0" sec="1233551347"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.66.208.2" dst_ip="201.106.211.48" src_port="1675" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550887"/>
        <to usec="0" sec="1233551476"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="219.119.231.66" dst_ip="174.111.225.107" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550850"/>
        <to usec="0" sec="1233551559"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.221.213.189" dst_ip="4.89.145.66" src_port="80"/>
        </slice>
        <from usec="0" sec="1233550841"/>
        <to usec="0" sec="1233551439"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="136.193.190.166" dst_ip="20.21.63.27"/>
            <filter src_ip="136.193.190.166" dst_ip="215.186.1.249"/>
            <filter src_ip="136.193.190.166" dst_ip="165.72.39.198"/>
        </slice>
        <from usec="0" sec="1233551400"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.176.199.252" dst_ip="201.106.212.219"/>
            <filter src_ip="195.176.199.252" src_port="2128"/>
        </slice>
        <from usec="0" sec="1233550801"/>
        <to usec="0" sec="1233551445"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.106.219.126" src_port="53"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551268"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.83.171.29"/>
        </slice>
        <from usec="0" sec="1233551050"/>
        <to usec="0" sec="1233551328"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="220.34.38.167" dst_port="53"/>
        </slice>
        <from usec="0" sec="1233550833"/>
        <to usec="0" sec="1233551628"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="88.3.52.220"/>
        </slice>
        <from usec="0" sec="1233550834"/>
        <to usec="0" sec="1233551609"/>
    </anomaly>
    <anomaly type="notice" value="0.289727,0.861210,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="14.43.237.217" dst_ip="201.106.212.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="1233550800"/>
        <to usec="0" sec="1233551538"/>
    </anomaly>
</admd:annotation>
