<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.662634,1.031340,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.170.73.136" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499824"/>
        <to usec="0" sec="1241499881"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="134.73.0.109"/>
        </slice>
        <from usec="0" sec="1241499804"/>
        <to usec="0" sec="1241499845"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.170.73.155" dst_ip="216.104.168.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499799"/>
        <to usec="0" sec="1241499881"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.15.187.133" dst_ip="8.19.156.57" src_port="2506" dst_port="8231" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499837"/>
        <to usec="0" sec="1241499902"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.15.186.106" dst_ip="41.64.160.181" src_port="3892" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499799"/>
        <to usec="0" sec="1241499857"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.73.10.5"/>
        </slice>
        <from usec="0" sec="1241499861"/>
        <to usec="0" sec="1241499862"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.15.19.239" dst_ip="38.131.13.86" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499833"/>
        <to usec="0" sec="1241499843"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="68.1.207.255" dst_ip="128.46.105.171" src_port="123" dst_port="123" proto="udp"/>
        </slice>
        <from usec="0" sec="1241499804"/>
        <to usec="0" sec="1241499805"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.73.229.131" dst_ip="196.146.181.72" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499833"/>
        <to usec="0" sec="1241499837"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.15.187.76" dst_ip="40.134.38.59" src_port="2729" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499804"/>
        <to usec="0" sec="1241499831"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.170.110.37" dst_ip="193.203.172.186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499841"/>
        <to usec="0" sec="1241499842"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.5.215.205" dst_ip="170.15.187.238" src_port="80"/>
        </slice>
        <from usec="0" sec="1241499866"/>
        <to usec="0" sec="1241499902"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.76.56.72"/>
        </slice>
        <from usec="0" sec="1241499835"/>
        <to usec="0" sec="1241499837"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.15.19.224" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499861"/>
        <to usec="0" sec="1241499902"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.15.19.152" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1241499852"/>
        <to usec="0" sec="1241499862"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.66.216.81"/>
        </slice>
        <from usec="0" sec="1241499802"/>
        <to usec="0" sec="1241499902"/>
    </anomaly>
    <anomaly type="notice" value="0.662634,1.031340,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="215.66.214.208"/>
        </slice>
        <from usec="0" sec="1241500109"/>
        <to usec="0" sec="1241500111"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.229.129.118"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.66.214.139"/>
        </slice>
        <from usec="0" sec="1241499602"/>
        <to usec="0" sec="1241499709"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.49.41.251"/>
        </slice>
        <from usec="0" sec="1241499602"/>
        <to usec="0" sec="1241499709"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="156.224.149.131"/>
        </slice>
        <from usec="0" sec="1241499604"/>
        <to usec="0" sec="1241500429"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.0.31.48"/>
        </slice>
        <from usec="0" sec="1241499607"/>
        <to usec="0" sec="1241499706"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="156.224.113.146"/>
        </slice>
        <from usec="0" sec="1241499646"/>
        <to usec="0" sec="1241499650"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.225.193.187"/>
        </slice>
        <from usec="0" sec="1241499693"/>
        <to usec="0" sec="1241499701"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="57.65.52.3"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499746"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.94.214.234"/>
        </slice>
        <from usec="0" sec="1241499609"/>
        <to usec="0" sec="1241499878"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.5.194.66"/>
        </slice>
        <from usec="0" sec="1241499669"/>
        <to usec="0" sec="1241499889"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="55.196.234.119"/>
        </slice>
        <from usec="0" sec="1241499737"/>
        <to usec="0" sec="1241499756"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.65.146.40"/>
        </slice>
        <from usec="0" sec="1241500351"/>
        <to usec="0" sec="1241500373"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.64.235.250"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499979"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.66.216.34" src_port="53"/>
            <filter src_ip="215.66.216.34" dst_port="25"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500159"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.133.149.164"/>
        </slice>
        <from usec="0" sec="1241499698"/>
        <to usec="0" sec="1241500155"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="135.118.96.15"/>
        </slice>
        <from usec="0" sec="1241499866"/>
        <to usec="0" sec="1241500151"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="181.44.126.171"/>
        </slice>
        <from usec="0" sec="1241500109"/>
        <to usec="0" sec="1241500123"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.1.198.135" src_port="53"/>
            <filter src_ip="128.1.198.135" src_port="54212" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="215.66.214.209"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500429"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="134.73.198.82"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="151.12.244.110"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500248"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.44.220.198"/>
        </slice>
        <from usec="0" sec="1241499602"/>
        <to usec="0" sec="1241500245"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="66.109.147.69"/>
        </slice>
        <from usec="0" sec="1241499603"/>
        <to usec="0" sec="1241500244"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.53.41.202"/>
        </slice>
        <from usec="0" sec="1241499603"/>
        <to usec="0" sec="1241500205"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.71.178.243"/>
        </slice>
        <from usec="0" sec="1241499604"/>
        <to usec="0" sec="1241500233"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.215.71.94"/>
        </slice>
        <from usec="0" sec="1241499606"/>
        <to usec="0" sec="1241500242"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.195.241.227"/>
        </slice>
        <from usec="0" sec="1241499796"/>
        <to usec="0" sec="1241500195"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.24.105.253"/>
        </slice>
        <from usec="0" sec="1241500057"/>
        <to usec="0" sec="1241500087"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.12.94.193"/>
        </slice>
        <from usec="0" sec="1241500061"/>
        <to usec="0" sec="1241500122"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.73.16.202"/>
        </slice>
        <from usec="0" sec="1241500075"/>
        <to usec="0" sec="1241500198"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="21.205.15.73"/>
        </slice>
        <from usec="0" sec="1241500100"/>
        <to usec="0" sec="1241500248"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="217.21.216.8" dst_ip="215.66.215.49" src_port="53"/>
        </slice>
        <from usec="0" sec="1241500185"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.73.251.170"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500429"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,501,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.153.159.66"/>
        </slice>
        <from usec="0" sec="1241499605"/>
        <to usec="0" sec="1241500419"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.78.192.229"/>
        </slice>
        <from usec="0" sec="1241499624"/>
        <to usec="0" sec="1241500425"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.6.97.138"/>
        </slice>
        <from usec="0" sec="1241499829"/>
        <to usec="0" sec="1241500426"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="61.220.140.45"/>
        </slice>
        <from usec="0" sec="1241500232"/>
        <to usec="0" sec="1241500268"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.195.168.197"/>
        </slice>
        <from usec="0" sec="1241500252"/>
        <to usec="0" sec="1241500284"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.97.45.65"/>
        </slice>
        <from usec="0" sec="1241500276"/>
        <to usec="0" sec="1241500298"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.148.2.72"/>
        </slice>
        <from usec="0" sec="1241500370"/>
        <to usec="0" sec="1241500376"/>
    </anomaly>
    <anomaly type="notice" value="0.452801,0.978654,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.73.209.105"/>
        </slice>
        <from usec="0" sec="1241500400"/>
        <to usec="0" sec="1241500428"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.66.220.167"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.66.215.49"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.163.229.206"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.226.113.143"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.128.84.200"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.496214,0.971314,999,0 0 0 1 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="70.187.1.86" src_port="53"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500244"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,004,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.209.113.168" src_port="445"/>
            <filter src_ip="215.66.210.216" dst_ip="214.209.113.168" dst_port="1402"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="24.41.155.242"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241499647"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="215.66.210.171"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.156.65.145"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="215.66.210.224"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.46.12.187"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="134.73.209.39" src_port="53"/>
            <filter src_ip="134.73.209.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241500367"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="218.196.177.214" src_port="6667"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.66.220.167" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="134.73.3.65" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="170.15.41.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.66.210.160" src_port="16881"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.170.73.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.73.230.56" src_port="29445"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.73.79.65" src_port="25832"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.156.162.180" src_port="3072"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="70.187.1.86" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="134.73.160.117" dst_port="25"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1231" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1359" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241499737"/>
    </anomaly>
    <anomaly type="notice" value="0.496214,0.971314,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.66.218.52"/>
            <filter src_ip="215.66.218.52" src_port="3124"/>
            <filter src_ip="215.66.218.52"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="193.59.153.201" dst_ip="172.204.189.114" src_port="53"/>
            <filter src_ip="193.59.154.241" dst_ip="172.204.189.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500232"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.66.210.184"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241500052"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.156.73.217" src_port="65013"/>
        </slice>
        <from usec="0" sec="1241499691"/>
        <to usec="0" sec="1241500097"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="134.73.209.39" src_port="53"/>
            <filter dst_ip="134.73.209.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.217.16.170"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.200.197.104"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.90.52.173"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.90.52.172"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.24.203.157"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.156.65.145"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.156.73.217"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.33.180.66"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="134.73.230.56"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.163.245.216"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.156.162.180"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.204.189.96" src_port="443"/>
            <filter dst_ip="172.204.189.96" src_port="80"/>
            <filter dst_ip="172.204.189.96"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.204.189.97"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.496214,0.971314,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.15.187.1" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1241499601"/>
        <to usec="0" sec="1241500249"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="215.66.218.53" dst_ip="214.33.169.188"/>
            <filter src_ip="215.66.210.184" dst_ip="214.33.169.188"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.66.214.16"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,004,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.209.113.168" src_port="445"/>
            <filter src_ip="215.66.210.216" dst_ip="214.209.113.168" dst_port="1402"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.1.202.74"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.41.232.138"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="168.46.12.187"/>
        </slice>
        <from usec="0" sec="1241500141"/>
        <to usec="0" sec="1241500187"/>
    </anomaly>
    <anomaly type="notice" value="0.475493,1.025890,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.66.215.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="1241500411"/>
        <to usec="0" sec="1241500457"/>
    </anomaly>
</admd:annotation>
