<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="146.59.140.86"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="14.241.140.158"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.10.97.150"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="146.59.230.124"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="144.172.166.225"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.227.208.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="146.59.175.220" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.227.222.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.10.64.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.227.208.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.227.214.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="0.2.100.78" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.227.213.61" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,020,0 0 0 0 0 0 1 1 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="161.19.74.196"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,020,0 0 0 0 0 0 1 1 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="161.19.74.198"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.6.241.72" src_port="6667"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.61"/>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.48"/>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.60"/>
            <filter src_ip="80.215.13.42" dst_port="3127"/>
            <filter src_ip="80.215.13.42" dst_port="3128"/>
            <filter src_ip="80.215.13.42" dst_port="3124"/>
            <filter dst_ip="197.227.213.61" dst_port="3127"/>
            <filter dst_ip="197.227.213.61" dst_port="3128"/>
            <filter dst_ip="197.227.213.61" dst_port="3124"/>
            <filter dst_ip="197.227.213.48" dst_port="3127"/>
            <filter dst_ip="197.227.213.48" dst_port="3128"/>
            <filter dst_ip="197.227.213.48" dst_port="3124"/>
            <filter dst_ip="197.227.213.60" dst_port="3127"/>
            <filter dst_ip="197.227.213.60" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="14.241.140.158"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.49.113" src_port="49763"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.124.200.114"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.235.22.142" src_port="25"/>
            <filter src_ip="161.235.22.142" dst_port="25"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.124.102.22"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.19.71.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.124.30.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.22.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="0.2.25.105" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.235.77.249" src_port="19264"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="84.72.254.14" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.124.184.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.178.168" src_port="23054"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.131.164.247" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="213.131.164.247" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="213.131.164.247" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.179.51" src_port="13332"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.227.221.102" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="146.59.48.104" src_port="4302"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.124.49.185" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="217.224.39.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.438273,0.904259,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="3.120.85.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="156.57.224.14" dst_ip="197.227.213.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="146.59.230.124" src_port="25576"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244265212"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.227.208.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.227.220.49" dst_port="39733"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.227.213.48" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.10.84.131" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1244264401"/>
        <to usec="0" sec="1244264447"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="5.240.3.129" dst_ip="197.227.213.60"/>
            <filter src_ip="5.240.3.129" dst_ip="197.227.213.48"/>
            <filter src_ip="5.240.3.129" dst_ip="197.227.213.61"/>
            <filter src_ip="5.240.3.129" dst_port="3124"/>
            <filter src_ip="5.240.3.129" dst_port="3127"/>
            <filter src_ip="5.240.3.129" dst_port="3128"/>
            <filter dst_ip="197.227.213.60" dst_port="3124"/>
            <filter dst_ip="197.227.213.60" dst_port="3127"/>
            <filter dst_ip="197.227.213.60" dst_port="3128"/>
            <filter dst_ip="197.227.213.48" dst_port="3124"/>
            <filter dst_ip="197.227.213.48" dst_port="3127"/>
            <filter dst_ip="197.227.213.48" dst_port="3128"/>
            <filter dst_ip="197.227.213.61" dst_port="3124"/>
            <filter dst_ip="197.227.213.61" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.6.241.72" src_port="6667"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="146.59.48.129" src_port="8122"/>
            <filter src_ip="146.59.48.129" src_port="16881"/>
            <filter src_ip="146.59.48.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.48"/>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.61"/>
            <filter src_ip="80.215.13.42" dst_ip="197.227.213.60"/>
            <filter src_ip="80.215.13.42" dst_port="3128"/>
            <filter src_ip="80.215.13.42" dst_port="3127"/>
            <filter src_ip="80.215.13.42" dst_port="3124"/>
            <filter dst_ip="197.227.213.48" dst_port="3128"/>
            <filter dst_ip="197.227.213.48" dst_port="3127"/>
            <filter dst_ip="197.227.213.61" dst_port="3128"/>
            <filter dst_ip="197.227.213.61" dst_port="3127"/>
            <filter dst_ip="197.227.213.61" dst_port="3124"/>
            <filter dst_ip="197.227.213.60" dst_port="3128"/>
            <filter dst_ip="197.227.213.60" dst_port="3127"/>
            <filter dst_ip="197.227.213.60" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.22.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="14.241.140.158"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="164.124.229.162" dst_port="80"/>
            <filter src_ip="164.124.229.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.235.168.94" dst_port="53"/>
            <filter src_ip="161.235.168.94" dst_port="113"/>
            <filter dst_ip="202.208.195.50" dst_port="113"/>
            <filter src_ip="161.235.168.94" dst_ip="202.208.195.50" src_port="25"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="194.224.78.50" dst_ip="197.227.221.102" src_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.6.241.76" src_port="6667"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="197.227.222.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.124.128.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.124.73.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.124.30.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.235.22.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="0.2.25.105" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.124.10.181" dst_ip="212.181.100.208" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.227.222.41" dst_port="53"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.161.82.184" dst_ip="197.227.213.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="84.72.254.14" dst_ip="197.227.213.48" dst_port="3124"/>
            <filter src_ip="84.72.254.14" dst_ip="197.227.213.61" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.124.22.96" dst_ip="196.11.203.174" dst_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="0.2.24.119" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="217.224.39.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="3.120.85.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264582"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.124.11.75"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="84.112.59.191" dst_ip="164.124.103.64"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.227.213.61" src_port="6881"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.69.92.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.210.173.123" src_port="1231" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1244264761"/>
        <to usec="0" sec="1244264807"/>
    </anomaly>
    <anomaly type="notice" value="0.488989,0.897675,999,0 0 0 0 0 0 1 1 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="200.196.187.55"/>
        </slice>
        <from usec="0" sec="1244264536"/>
        <to usec="0" sec="1244264852"/>
    </anomaly>
</admd:annotation>
