<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="1.776630,1.551280,001,1 1 1 0 0 0 1 1 1 0 0 0,ntscSYNtSAbado">
        <slice>
            <filter src_ip="35.150.100.211" dst_port="1023"/>
        </slice>
        <from usec="0" sec="1249708119"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="anomalous" value="1.594920,1.424810,999,1 1 1 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.197.102.243" dst_port="1055"/>
        </slice>
        <from usec="0" sec="1249708069"/>
        <to usec="0" sec="1249708499"/>
    </anomaly>
    <anomaly type="anomalous" value="1.680190,1.418910,020,1 1 1 0 0 0 0 0 0 1 1 1,ttl_error">
        <slice>
            <filter dst_ip="5.141.180.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.776630,1.551280,010,1 1 1 0 0 0 1 1 1 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.139.49.175" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="anomalous" value="2.718380,1.801650,010,1 1 1 1 1 1 1 1 1 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="95.101.58.147" src_port="6000" dst_port="2967"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.861520,1.547140,503,0 0 0 1 1 1 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.122.98.98" dst_ip="39.136.57.7" src_port="80"/>
        </slice>
        <from usec="0" sec="1249707605"/>
        <to usec="0" sec="1249708244"/>
    </anomaly>
    <anomaly type="anomalous" value="2.106740,1.551930,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="142.197.102.176" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.466390,1.684620,020,1 1 1 1 1 1 0 0 0 1 1 1,ttl_error">
        <slice>
            <filter src_ip="176.122.143.46"/>
            <filter src_ip="176.122.143.46"/>
            <filter src_ip="176.122.143.46" dst_port="80"/>
            <filter dst_ip="105.248.99.241"/>
            <filter dst_ip="22.213.168.122"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.106740,1.551930,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="95.42.101.233" dst_ip="176.122.238.194" src_port="80" dst_port="2200"/>
            <filter src_ip="95.42.101.233" dst_ip="176.122.238.194" src_port="80" dst_port="1981"/>
            <filter src_ip="95.42.101.233" dst_ip="176.122.238.194" src_port="80" dst_port="1980"/>
            <filter src_ip="45.65.217.94" dst_ip="176.122.238.194" src_port="53" dst_port="1025"/>
            <filter src_ip="95.42.101.229" dst_ip="176.122.238.194" src_port="80" dst_port="2458"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.456690,1.674050,999,1 1 1 1 1 0 1 1 1 1 1 1,mptmp">
        <slice>
            <filter dst_ip="201.64.22.124"/>
            <filter dst_ip="201.64.22.115"/>
            <filter dst_port="3124"/>
            <filter dst_port="3128"/>
            <filter dst_ip="201.64.22.125" dst_port="3127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.718380,1.801650,020,1 1 1 1 1 1 1 1 1 1 1 1,ntscICec">
        <slice>
            <filter src_ip="43.86.11.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.404740,1.369630,503,1 1 1 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.64.16.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.467880,1.423400,011,0 0 0 1 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.84.195.224" src_port="5915"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708338"/>
    </anomaly>
    <anomaly type="anomalous" value="2.599040,1.755430,999,1 1 1 1 1 1 1 1 1 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.23.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.071300,1.493070,999,1 0 0 1 1 1 1 1 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.64.23.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.232360,1.626520,999,1 0 0 1 1 1 1 1 1 1 0 0,mptmp">
        <slice>
            <filter src_ip="193.26.117.85" src_port="53"/>
            <filter dst_ip="193.26.117.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.506540,1.389050,020,1 1 1 0 0 0 1 1 0 1 0 0,ttl_error">
        <slice>
            <filter src_ip="201.64.28.179"/>
            <filter src_ip="183.34.156.242"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.425710,1.663000,999,1 0 0 1 1 1 1 1 1 1 1 1,ptmp">
        <slice>
            <filter src_ip="201.64.22.124" src_port="3124"/>
            <filter src_ip="201.64.22.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.800040,1.409040,999,1 1 0 1 0 0 1 1 1 1 1 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.22.125" dst_port="53"/>
            <filter src_ip="201.64.22.115" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.410490,1.332840,999,1 0 0 0 0 0 1 1 1 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.23.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.106740,1.551930,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="206.93.181.235" dst_ip="183.168.168.0" src_port="80"/>
            <filter src_ip="45.65.201.176" dst_ip="183.168.168.0" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.466390,1.684620,503,1 1 1 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="142.197.100.33" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.349550,1.277850,503,0 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="175.101.140.93" src_port="80"/>
            <filter src_ip="142.197.119.37" dst_ip="219.171.21.113" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.106740,1.551930,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.16.212" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.768560,1.428600,020,0 0 0 1 0 0 1 1 1 1 1 1,ttl_error">
        <slice>
            <filter src_ip="201.64.28.212"/>
            <filter src_ip="201.64.30.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.012230,1.254100,999,1 1 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="176.122.32.40" dst_ip="44.6.45.248" dst_port="554"/>
            <filter src_ip="176.122.4.210" dst_ip="44.6.45.248" dst_port="554"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.122.172.195" dst_ip="219.171.50.98" src_port="49193" dst_port="995"/>
        </slice>
        <from usec="0" sec="1249708120"/>
        <to usec="0" sec="1249708134"/>
    </anomaly>
    <anomaly type="suspicious" value="0.975783,1.295340,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.122.12.52" dst_ip="27.223.224.22" src_port="1973" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708139"/>
        <to usec="0" sec="1249708157"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="183.188.186.238" dst_ip="16.109.40.12" src_port="61227" dst_port="993"/>
        </slice>
        <from usec="0" sec="1249708129"/>
        <to usec="0" sec="1249708152"/>
    </anomaly>
    <anomaly type="suspicious" value="1.012230,1.254100,999,1 1 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="183.188.32.149" dst_ip="44.6.45.255" dst_port="554"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.975783,1.295340,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.122.171.119" dst_ip="70.149.180.18" src_port="3895" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708139"/>
        <to usec="0" sec="1249708141"/>
    </anomaly>
    <anomaly type="suspicious" value="1.136080,1.236250,503,1 1 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.122.9.162" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.975783,1.295340,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.122.178.4" dst_ip="194.176.56.128" src_port="2838" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708129"/>
        <to usec="0" sec="1249708160"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="43.86.8.166"/>
        </slice>
        <from usec="0" sec="1249708062"/>
        <to usec="0" sec="1249708064"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,020,1 1 1 0 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="201.64.27.108" dst_ip="4.155.2.65"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708482"/>
    </anomaly>
    <anomaly type="suspicious" value="1.378710,1.407490,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.106.147.202" src_port="12200" dst_port="8080"/>
            <filter src_ip="207.106.147.202" src_port="12200" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708096"/>
    </anomaly>
    <anomaly type="suspicious" value="0.975783,1.295340,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="9.17.32.193" dst_port="139"/>
        </slice>
        <from usec="0" sec="1249708477"/>
        <to usec="0" sec="1249708500"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="145.12.201.178" dst_port="139"/>
            <filter src_ip="145.12.201.178" dst_port="445"/>
        </slice>
        <from usec="0" sec="1249708467"/>
        <to usec="0" sec="1249708501"/>
    </anomaly>
    <anomaly type="suspicious" value="1.360110,1.413670,001,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="35.150.100.211" src_port="1023"/>
        </slice>
        <from usec="0" sec="1249708142"/>
        <to usec="0" sec="1249708145"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.110.118"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707766"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.197.72.10"/>
        </slice>
        <from usec="0" sec="1249707609"/>
        <to usec="0" sec="1249707853"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.30.31"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707976"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.122.211.0"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707977"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186220,1.223970,999,1 0 0 1 0 0 1 1 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.64.23.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.122.189.118"/>
        </slice>
        <from usec="0" sec="1249707608"/>
        <to usec="0" sec="1249707978"/>
    </anomaly>
    <anomaly type="suspicious" value="0.920955,1.272030,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.122.210.224"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708245"/>
    </anomaly>
    <anomaly type="suspicious" value="1.015010,1.185160,503,1 0 0 0 0 0 1 1 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="216.25.150.31" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.284890,1.387830,999,1 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="200.30.225.24" dst_ip="129.92.69.150" src_port="53"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708498"/>
    </anomaly>
    <anomaly type="suspicious" value="1.229520,1.406060,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.188.9.83" src_port="49763"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.229520,1.406060,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.122.241.26" src_port="42152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943944,1.206460,999,0 0 0 0 0 0 1 1 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="183.188.62.111" src_port="25"/>
            <filter src_ip="183.188.62.111" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.229520,1.406060,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.29.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.229520,1.406060,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="9.64.208.150" src_port="1074" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="suspicious" value="1.229520,1.406060,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.197.193.45" src_port="25576"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708231"/>
    </anomaly>
    <anomaly type="suspicious" value="0.826410,1.169810,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="183.173.216.40" dst_ip="30.219.99.22" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.826410,1.169810,503,1 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="142.197.167.7" dst_ip="92.58.150.12" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.826410,1.169810,503,1 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.197.167.9" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.826410,1.169810,999,1 0 0 0 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="142.197.102.243" src_port="1055"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.140.42" src_port="53"/>
            <filter src_ip="176.122.140.42" dst_ip="49.125.27.126" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="176.122.171.119" src_port="53"/>
            <filter src_ip="70.149.181.170" dst_ip="176.122.171.119" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.856664,1.162330,999,1 0 0 0 0 0 1 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.197.167.102" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="200.158.158.195" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="142.197.100.34" dst_ip="200.146.146.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.6.51" dst_ip="39.137.110.46" src_port="80"/>
            <filter src_ip="176.122.6.51" dst_ip="89.160.35.80" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="200.147.0.12" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="176.122.190.90" src_port="80"/>
            <filter src_ip="183.173.195.99" dst_ip="30.219.99.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,999,0 0 0 0 0 0 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="176.122.16.33" dst_ip="219.171.40.144" dst_port="25"/>
            <filter src_ip="176.122.0.71" dst_ip="219.171.40.144" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="183.188.62.3" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.16.213" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,999,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="175.101.253.228" dst_ip="30.219.99.10"/>
            <filter src_ip="175.101.253.228" dst_ip="30.219.99.243" src_port="80"/>
            <filter src_ip="183.173.16.25" dst_ip="30.219.99.243" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="142.197.100.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.085510,1.258510,020,0 0 0 0 0 0 0 0 0 1 1 1,ttl_error">
        <slice>
            <filter dst_ip="8.45.35.217"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
