<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.468932,0.793820,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="37.82.11.111"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="36.17.191.75"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.36.113.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.36.113.91" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.36.205.78" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.36.144.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.12.30.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.85.241.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.12.31.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="22.179.225.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="139.36.221.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1238821380"/>
        <to usec="0" sec="1238821426"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="202.176.6.203" dst_port="3124"/>
            <filter dst_ip="202.176.6.192" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1238821380"/>
        <to usec="0" sec="1238821426"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.176.27.197"/>
        </slice>
        <from usec="0" sec="1238821425"/>
        <to usec="0" sec="1238821471"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="220.40.136.161" src_port="80"/>
        </slice>
        <from usec="0" sec="1238821425"/>
        <to usec="0" sec="1238821471"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.171.161.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821425"/>
        <to usec="0" sec="1238821471"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="208.2.193.33" src_port="53"/>
        </slice>
        <from usec="0" sec="1238821425"/>
        <to usec="0" sec="1238821471"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="4.153.107.154"/>
        </slice>
        <from usec="0" sec="1238821560"/>
        <to usec="0" sec="1238821606"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="40.180.150.235"/>
        </slice>
        <from usec="0" sec="1238821560"/>
        <to usec="0" sec="1238821606"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="33.0.208.9"/>
        </slice>
        <from usec="0" sec="1238821605"/>
        <to usec="0" sec="1238821651"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.171.69.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821920"/>
        <to usec="0" sec="1238821966"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="139.36.227.237" dst_ip="6.224.23.159"/>
        </slice>
        <from usec="0" sec="1238821920"/>
        <to usec="0" sec="1238821966"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.12.35.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="98.51.164.175" src_port="53"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,504,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="139.36.48.215" dst_port="443"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="80" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="84.33.208.93" src_port="80" dst_port="3072"/>
            <filter src_ip="200.218.126.13" src_port="80" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1033" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1040" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1083" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1231" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1252" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2150" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822011"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="140.85.241.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1238821965"/>
        <to usec="0" sec="1238822056"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="98.51.164.175" src_port="53"/>
        </slice>
        <from usec="0" sec="1238822010"/>
        <to usec="0" sec="1238822056"/>
    </anomaly>
    <anomaly type="notice" value="0.468932,0.793820,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="202.176.6.193" dst_ip="218.1.70.235"/>
            <filter src_ip="202.176.13.92" dst_ip="218.1.70.235"/>
        </slice>
        <from usec="0" sec="1238821200"/>
        <to usec="0" sec="1238821246"/>
    </anomaly>
</admd:annotation>
