<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.447331,0.823383,020,1 0 0 0 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="136.90.206.178" dst_ip="50.69.246.50" proto="icmp"/>
        </slice>
        <from usec="0" sec="1246942870"/>
        <to usec="0" sec="1246943235"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="136.90.112.95" dst_ip="203.72.35.58" src_port="2266" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943661"/>
        <to usec="0" sec="1246943663"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.30.60"/>
        </slice>
        <from usec="0" sec="1246943547"/>
        <to usec="0" sec="1246943550"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.3.119.185"/>
        </slice>
        <from usec="0" sec="1246943564"/>
        <to usec="0" sec="1246943566"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.138.248.164"/>
        </slice>
        <from usec="0" sec="1246943167"/>
        <to usec="0" sec="1246943354"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.91.174.236"/>
        </slice>
        <from usec="0" sec="1246943555"/>
        <to usec="0" sec="1246943650"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.85.55" dst_ip="42.229.147.211" src_port="30500" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943552"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.206.187" dst_ip="24.48.28.210" src_port="9018" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246942813"/>
        <to usec="0" sec="1246942816"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="136.90.226.105" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943561"/>
        <to usec="0" sec="1246943655"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.71.28"/>
        </slice>
        <from usec="0" sec="1246943657"/>
        <to usec="0" sec="1246943659"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.18.120.234" dst_ip="204.91.4.1" src_port="80" dst_port="50426" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943681"/>
        <to usec="0" sec="1246943683"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.179.226.200" dst_ip="219.18.120.47" src_port="3758" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943580"/>
        <to usec="0" sec="1246943607"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="91.42.40.144" dst_ip="136.90.240.247" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943689"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="136.90.67.246" dst_ip="203.72.35.58" src_port="2955" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943657"/>
        <to usec="0" sec="1246943659"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.185.136.23" dst_ip="193.163.206.52" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943669"/>
        <to usec="0" sec="1246943675"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.53.60.57" dst_ip="136.90.91.165" src_port="63188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943577"/>
        <to usec="0" sec="1246943586"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.194.33"/>
        </slice>
        <from usec="0" sec="1246943552"/>
        <to usec="0" sec="1246943567"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.90.115" dst_ip="21.201.130.140" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943614"/>
        <to usec="0" sec="1246943627"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.100.254.46" dst_ip="136.90.133.33" src_port="1763" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943673"/>
        <to usec="0" sec="1246943675"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="219.18.121.11"/>
        </slice>
        <from usec="0" sec="1246943661"/>
        <to usec="0" sec="1246943663"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.249.10" dst_ip="48.72.100.18" src_port="62936" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943681"/>
        <to usec="0" sec="1246943683"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.117.232"/>
        </slice>
        <from usec="0" sec="1246943653"/>
        <to usec="0" sec="1246943655"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.161.37.168"/>
        </slice>
        <from usec="0" sec="1246943685"/>
        <to usec="0" sec="1246943687"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.18.121.44"/>
        </slice>
        <from usec="0" sec="1246943592"/>
        <to usec="0" sec="1246943598"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.148.7"/>
        </slice>
        <from usec="0" sec="1246943255"/>
        <to usec="0" sec="1246943258"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="71.37.106.77" dst_ip="136.90.167.38" src_port="80" dst_port="1032" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943669"/>
        <to usec="0" sec="1246943686"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.74.118"/>
        </slice>
        <from usec="0" sec="1246943696"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.179.243.125" dst_ip="218.170.84.133" src_port="48956" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943330"/>
        <to usec="0" sec="1246943663"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.67.170" dst_ip="196.235.1.176" src_port="1967" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943346"/>
        <to usec="0" sec="1246943348"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.161.28" dst_ip="204.81.6.218" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943689"/>
        <to usec="0" sec="1246943691"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.240.247" dst_ip="91.42.40.144" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943689"/>
        <to usec="0" sec="1246943691"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.5.42.168"/>
        </slice>
        <from usec="0" sec="1246943581"/>
        <to usec="0" sec="1246943584"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.100.244.22" dst_ip="218.170.84.134" src_port="38309" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943648"/>
        <to usec="0" sec="1246943655"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.179.131.168"/>
        </slice>
        <from usec="0" sec="1246943625"/>
        <to usec="0" sec="1246943627"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.25.128" dst_ip="38.163.189.159" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943514"/>
        <to usec="0" sec="1246943699"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.18.120.5" dst_ip="169.185.228.227" src_port="80" dst_port="3013" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943257"/>
        <to usec="0" sec="1246943259"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.186.230.37" dst_ip="169.185.201.37" src_port="1935" dst_port="1179" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943266"/>
        <to usec="0" sec="1246943268"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.185.244.3" dst_ip="210.201.186.169" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943636"/>
        <to usec="0" sec="1246943638"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.100.253.31" dst_ip="75.200.206.161" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943167"/>
        <to usec="0" sec="1246943699"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.100.253.30" dst_ip="29.40.208.141" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943560"/>
        <to usec="0" sec="1246943683"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.110.156"/>
        </slice>
        <from usec="0" sec="1246943257"/>
        <to usec="0" sec="1246943259"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="169.185.200.206"/>
        </slice>
        <from usec="0" sec="1246943616"/>
        <to usec="0" sec="1246943618"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.240.143"/>
        </slice>
        <from usec="0" sec="1246943387"/>
        <to usec="0" sec="1246943389"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.65.157" dst_ip="210.21.253.62" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943572"/>
        <to usec="0" sec="1246943583"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.30.217.246" dst_ip="169.185.232.6" src_port="48833" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943692"/>
        <to usec="0" sec="1246943694"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.65.131" dst_ip="208.178.180.176" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943573"/>
        <to usec="0" sec="1246943582"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.170.84.13" dst_ip="169.185.37.162" src_port="54216" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943561"/>
        <to usec="0" sec="1246943579"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="204.91.0.65"/>
        </slice>
        <from usec="0" sec="1246943684"/>
        <to usec="0" sec="1246943686"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.100.245.157" dst_ip="24.48.28.229" src_port="49436" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943537"/>
        <to usec="0" sec="1246943646"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.185.182.43" dst_ip="42.212.104.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943255"/>
        <to usec="0" sec="1246943553"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="141.179.128.226"/>
        </slice>
        <from usec="0" sec="1246943652"/>
        <to usec="0" sec="1246943654"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.133.156" dst_ip="60.193.221.228" src_port="15983" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943626"/>
        <to usec="0" sec="1246943699"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.121.61.177" dst_ip="136.90.74.64" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943612"/>
        <to usec="0" sec="1246943615"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="37.81.6.33" dst_ip="169.185.232.164" src_port="35923" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943574"/>
        <to usec="0" sec="1246943594"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="27.148.40.32" dst_ip="136.90.168.195" src_port="38002" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943167"/>
        <to usec="0" sec="1246943169"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.185.74.82"/>
        </slice>
        <from usec="0" sec="1246943661"/>
        <to usec="0" sec="1246943693"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.90.90.115"/>
        </slice>
        <from usec="0" sec="1246943681"/>
        <to usec="0" sec="1246943683"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.90.154.131"/>
        </slice>
        <from usec="0" sec="1246943569"/>
        <to usec="0" sec="1246943595"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.221.141" dst_ip="47.164.22.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246943576"/>
        <to usec="0" sec="1246943584"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.72.35.58" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246942809"/>
        <to usec="0" sec="1246942811"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.91.177.151"/>
        </slice>
        <from usec="0" sec="1246943565"/>
        <to usec="0" sec="1246943643"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.185.201.61" dst_port="1224" proto="udp"/>
        </slice>
        <from usec="0" sec="1246943564"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.18.120.32"/>
        </slice>
        <from usec="0" sec="1246943677"/>
        <to usec="0" sec="1246943686"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="46.17.56.98"/>
        </slice>
        <from usec="0" sec="1246943601"/>
        <to usec="0" sec="1246943603"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.185.135.29" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943257"/>
        <to usec="0" sec="1246943259"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="136.90.67.24" dst_ip="196.235.5.15" src_port="4972" dst_port="80"/>
            <filter src_ip="136.90.67.184" dst_ip="196.235.5.15" src_port="2708" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246943564"/>
        <to usec="0" sec="1246943654"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.113.228.200" dst_ip="205.100.225.133" src_port="60485" dst_port="1062" proto="udp"/>
        </slice>
        <from usec="0" sec="1246943393"/>
        <to usec="0" sec="1246943395"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.107.148" dst_ip="200.108.211.210" src_port="33494" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246943552"/>
        <to usec="0" sec="1246943582"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="141.179.243.125" dst_ip="47.164.27.165" src_port="18845" dst_port="25"/>
            <filter src_ip="136.90.90.100" dst_ip="47.164.27.165" src_port="64754" dst_port="25"/>
        </slice>
        <from usec="0" sec="1246943664"/>
        <to usec="0" sec="1246943666"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="89.11.163.236"/>
        </slice>
        <from usec="0" sec="1246943167"/>
        <to usec="0" sec="1246943169"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.185.147.250"/>
        </slice>
        <from usec="0" sec="1246943167"/>
        <to usec="0" sec="1246943169"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.185.136.25"/>
        </slice>
        <from usec="0" sec="1246943544"/>
        <to usec="0" sec="1246943547"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.80.28.181" dst_ip="164.89.162.169" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943609"/>
        <to usec="0" sec="1246943613"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.129.5" dst_ip="216.115.128.152" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943331"/>
        <to usec="0" sec="1246943675"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="169.185.154.41"/>
        </slice>
        <from usec="0" sec="1246943689"/>
        <to usec="0" sec="1246943691"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.22.68.46"/>
        </slice>
        <from usec="0" sec="1246943561"/>
        <to usec="0" sec="1246943563"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="169.185.212.41" dst_ip="205.179.58.109" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943593"/>
        <to usec="0" sec="1246943595"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.179.53.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943629"/>
        <to usec="0" sec="1246943682"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="22.42.27.97"/>
        </slice>
        <from usec="0" sec="1246943697"/>
        <to usec="0" sec="1246943699"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.179.53.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943555"/>
        <to usec="0" sec="1246943561"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.185.0.176"/>
        </slice>
        <from usec="0" sec="1246943265"/>
        <to usec="0" sec="1246943268"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.185.9.9" dst_ip="192.48.18.147" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943561"/>
        <to usec="0" sec="1246943663"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="89.38.196.152"/>
        </slice>
        <from usec="0" sec="1246943601"/>
        <to usec="0" sec="1246943603"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.80.42.67" dst_ip="200.173.135.165" dst_port="443"/>
        </slice>
        <from usec="0" sec="1246943257"/>
        <to usec="0" sec="1246943566"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="51.106.170.53" src_port="1029" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1246942877"/>
        <to usec="0" sec="1246942879"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.91.174.91"/>
        </slice>
        <from usec="0" sec="1246943257"/>
        <to usec="0" sec="1246943259"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="55.42.111.76" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943508"/>
        <to usec="0" sec="1246943542"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="169.185.201.61" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1246943657"/>
        <to usec="0" sec="1246943691"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="56.234.5.89" dst_port="445"/>
        </slice>
        <from usec="0" sec="1246943259"/>
        <to usec="0" sec="1246943276"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.213.91"/>
        </slice>
        <from usec="0" sec="1246943508"/>
        <to usec="0" sec="1246943510"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="136.90.83.71"/>
        </slice>
        <from usec="0" sec="1246943347"/>
        <to usec="0" sec="1246943350"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.139.143.48"/>
        </slice>
        <from usec="0" sec="1246943269"/>
        <to usec="0" sec="1246943694"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.90.105.74"/>
        </slice>
        <from usec="0" sec="1246943689"/>
        <to usec="0" sec="1246943691"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.90.144.235"/>
        </slice>
        <from usec="0" sec="1246943384"/>
        <to usec="0" sec="1246943386"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.90.84.19" dst_ip="203.76.66.79" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246942812"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,503,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="205.100.248.190" dst_ip="23.162.229.138" src_port="80"/>
        </slice>
        <from usec="0" sec="1246943266"/>
        <to usec="0" sec="1246943651"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="169.185.74.27" dst_port="3127"/>
            <filter dst_ip="205.100.251.49" dst_port="3128"/>
            <filter src_ip="91.84.233.199" dst_ip="169.185.74.27" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.183.249.21" dst_ip="192.168.0.203" src_port="53"/>
        </slice>
        <from usec="0" sec="1246942801"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.90.179.184" src_port="53"/>
            <filter dst_ip="136.90.179.184" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.179.243.11"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.185.96.122"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.91.186.97" dst_port="26816"/>
        </slice>
        <from usec="0" sec="1246942801"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.81.68.199"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.100.251.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.90.179.184" dst_ip="210.19.80.118" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.179.243.122" dst_ip="210.19.80.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="141.21.12.77" dst_port="443"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.173.135.165" dst_port="443"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.80.1.45" dst_ip="91.75.165.189" dst_port="53"/>
            <filter src_ip="205.100.241.37" dst_ip="91.75.165.189" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.529348,0.805761,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="93.135.40.96" dst_ip="205.100.240.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246942880"/>
        <to usec="0" sec="1246943698"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="141.42.50.42"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="193.95.168.208"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.150.201.33"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.185.202.66"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.91.177.151"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="60.19.49.220"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="205.100.240.215"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.80.1.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.90.109.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.100.251.57" src_port="3124"/>
            <filter src_ip="205.100.251.57" dst_ip="26.146.185.56" src_port="3128"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.90.166.53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="141.179.243.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.100.241.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.529348,0.805761,503,1 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.185.156.146" dst_ip="26.149.33.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943667"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.185.0.24" src_port="80"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.179.243.125" src_port="25"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.100.244.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="27.9.179.183" dst_ip="141.42.246.74" dst_port="62997"/>
        </slice>
        <from usec="0" sec="1246942801"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.80.31.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246942937"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.81.104.28" dst_port="13580"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.112.46.64" dst_ip="205.100.246.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.80.7.255" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246942891"/>
        <to usec="0" sec="1246943342"/>
    </anomaly>
    <anomaly type="notice" value="0.447331,0.823383,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="205.100.245.67" dst_port="2128"/>
        </slice>
        <from usec="0" sec="1246943399"/>
        <to usec="0" sec="1246943645"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.90.68.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1246943566"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.80.30.230"/>
        </slice>
        <from usec="0" sec="1246943566"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="141.179.243.8"/>
        </slice>
        <from usec="0" sec="1246943566"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.529348,0.805761,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="208.219.138.136" dst_port="139"/>
            <filter src_ip="208.219.138.136" dst_port="445"/>
        </slice>
        <from usec="0" sec="1246943566"/>
        <to usec="0" sec="1246943630"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.179.129.13" src_port="39692"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.529348,0.805761,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="54.150.12.39" dst_port="445"/>
        </slice>
        <from usec="0" sec="1246943560"/>
        <to usec="0" sec="1246943637"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="169.185.103.248"/>
        </slice>
        <from usec="0" sec="1246943566"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
    <anomaly type="notice" value="0.550593,0.828610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.100.245.132" src_port="39733"/>
        </slice>
        <from usec="0" sec="1246943296"/>
        <to usec="0" sec="1246943612"/>
    </anomaly>
</admd:annotation>
