<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.122.210.232"/>
        </slice>
        <from usec="0" sec="1249708120"/>
        <to usec="0" sec="1249708157"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.176.37.132" dst_ip="142.197.74.6" src_port="80" dst_port="2801" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708142"/>
        <to usec="0" sec="1249708160"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.32.74"/>
        </slice>
        <from usec="0" sec="1249708124"/>
        <to usec="0" sec="1249708162"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.197.101.234" dst_ip="15.97.119.164" src_port="4051" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708139"/>
        <to usec="0" sec="1249708146"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.122.4.33" dst_ip="196.78.158.140" src_port="3042" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708478"/>
        <to usec="0" sec="1249708480"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.197.100.242" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708121"/>
        <to usec="0" sec="1249708482"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.158.155.21" dst_ip="26.104.45.248" src_port="30221" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708120"/>
        <to usec="0" sec="1249708157"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="200.84.195.224"/>
        </slice>
        <from usec="0" sec="1249707665"/>
        <to usec="0" sec="1249707669"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.197.101.43" dst_ip="33.25.229.6"/>
            <filter src_ip="142.197.101.43" dst_port="80"/>
            <filter dst_ip="33.25.229.6" dst_port="80"/>
            <filter src_ip="142.197.101.43" dst_ip="18.22.200.167" dst_port="993"/>
        </slice>
        <from usec="0" sec="1249708122"/>
        <to usec="0" sec="1249708150"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="16.115.218.102" dst_ip="16.115.218.102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708122"/>
        <to usec="0" sec="1249708479"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.6.38"/>
        </slice>
        <from usec="0" sec="1249708480"/>
        <to usec="0" sec="1249708482"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.72.218.18" dst_ip="142.197.167.106" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249708128"/>
        <to usec="0" sec="1249708131"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.197.167.9"/>
        </slice>
        <from usec="0" sec="1249708119"/>
        <to usec="0" sec="1249708121"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="183.188.62.111"/>
        </slice>
        <from usec="0" sec="1249708128"/>
        <to usec="0" sec="1249708157"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="201.64.16.212" dst_ip="201.64.16.212" proto="tcp"/>
        </slice>
        <from usec="0" sec="1249707699"/>
        <to usec="0" sec="1249708500"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.197.100.18"/>
        </slice>
        <from usec="0" sec="1249708141"/>
        <to usec="0" sec="1249708157"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.67.119"/>
        </slice>
        <from usec="0" sec="1249708498"/>
        <to usec="0" sec="1249708500"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,020,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.64.27.218"/>
        </slice>
        <from usec="0" sec="1249707663"/>
        <to usec="0" sec="1249707666"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="183.188.81.81"/>
        </slice>
        <from usec="0" sec="1249708145"/>
        <to usec="0" sec="1249708148"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.20.89"/>
        </slice>
        <from usec="0" sec="1249708138"/>
        <to usec="0" sec="1249708141"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.74.50.176"/>
        </slice>
        <from usec="0" sec="1249708157"/>
        <to usec="0" sec="1249708160"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="178.222.49.197"/>
        </slice>
        <from usec="0" sec="1249708472"/>
        <to usec="0" sec="1249708475"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="28.50.20.80"/>
        </slice>
        <from usec="0" sec="1249707807"/>
        <to usec="0" sec="1249707810"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.122.58.30"/>
        </slice>
        <from usec="0" sec="1249708135"/>
        <to usec="0" sec="1249708137"/>
    </anomaly>
    <anomaly type="notice" value="0.586878,1.232100,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.197.101.82"/>
        </slice>
        <from usec="0" sec="1249708488"/>
        <to usec="0" sec="1249708491"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.138.57.0"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.138.56.208"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.64.16.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="183.69.32.124"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.16.36" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.29.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.138.57.0"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708096"/>
    </anomaly>
    <anomaly type="notice" value="0.683963,1.181300,999,1 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="142.197.101.231" dst_port="5671"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.138.32.40"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708096"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.138.56.208"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708096"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="176.122.32.136"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708096"/>
    </anomaly>
    <anomaly type="notice" value="0.628765,1.225000,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.30.66" src_port="53"/>
            <filter dst_ip="201.64.30.66" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.5.125.253"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.197.102.201"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.29.38"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.188.162.64"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.188.162.109"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.28.30"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.147.17.167" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.628765,1.225000,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.64.30.140" dst_ip="99.144.206.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.122.80.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.122.10.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.122.60.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.628765,1.225000,503,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.147.0.12" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708138"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.158.69.124" src_port="20481"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.184.234.184" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.133.33.207"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.100.80.164"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.26.117.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.197.167.106" src_port="53"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.158.69.124"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.158.69.99" dst_port="7563"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.122.18.15"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.197.193.45"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="201.64.27.171"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.64.16.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.40.113.232" dst_port="2580"/>
            <filter dst_ip="140.40.113.232" dst_port="16881"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="183.188.162.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708050"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.40.130.83"/>
        </slice>
        <from usec="0" sec="1249708410"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.506092,1.245620,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.64.28.30" dst_port="39733"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708456"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.138.32.40" src_port="25"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249707646"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="193.214.138.134"/>
        </slice>
        <from usec="0" sec="1249707600"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.2.51" src_port="59079"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,020,0 0 0 0 0 0 1 1 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="201.64.30.100"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.122.241.26" dst_ip="146.187.35.133" src_port="25"/>
            <filter src_ip="176.122.241.26" dst_ip="40.28.198.82" src_port="25"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.5.125.249" src_port="6667"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.28.218" src_port="16881"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.28.218" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.22.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.158.66.148" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.188.62.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.188.62.44" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.28.198" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.26.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.197.133.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.197.132.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.197.167.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.24.180.59" dst_ip="201.64.22.114" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.197.230.109" dst_ip="183.19.22.12" dst_port="80"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.64.27.218" dst_ip="197.9.64.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.158.66.65" dst_port="53"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,002,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.64.28.181" src_port="137" dst_port="137"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.45.21.235" src_port="1029" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="89.146.217.157" src_port="1222" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.743304,1.266940,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="95.69.162.28" src_port="3016" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1249708140"/>
        <to usec="0" sec="1249708186"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICec">
        <slice>
            <filter src_ip="43.86.8.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645667,1.188660,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="176.122.109.114" src_port="54004"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.173.231.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.173.226.167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.173.236.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.173.72.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="142.197.102.230"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.167.125.252" src_port="443"/>
            <filter src_ip="133.167.125.252" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="200.158.155.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645667,1.188660,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.64.20.43" dst_ip="38.196.18.65" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.128.97.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645667,1.188660,020,1 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="201.64.27.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="30.219.99.42"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="27.223.224.200"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="26.104.45.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="21.88.206.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="142.197.101.231" src_port="5671"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="213.85.231.10" dst_ip="176.122.190.90" src_port="49903" dst_port="80"/>
            <filter src_ip="213.85.231.10" dst_ip="176.122.190.90" src_port="49897" dst_port="80"/>
            <filter src_ip="213.85.231.10" dst_ip="176.122.190.90" src_port="49893" dst_port="80"/>
            <filter src_ip="40.130.165.75" dst_ip="176.122.190.90" src_port="1420" dst_port="445"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.122.64.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.122.58.30"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.645667,1.188660,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.197.167.7" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="13.113.22.88" dst_ip="142.197.100.34" src_port="80"/>
            <filter src_ip="26.215.19.183" dst_ip="142.197.100.34" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.197.102.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="218.130.12.50" dst_ip="136.138.37.120" src_port="80"/>
            <filter src_ip="218.130.13.1" dst_ip="136.138.37.120" src_port="80"/>
            <filter src_ip="8.91.189.136" dst_ip="136.138.37.120" src_port="80"/>
            <filter src_ip="206.137.198.56" dst_ip="136.138.37.120" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="194.176.56.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.683963,1.181300,503,1 0 0 0 0 0 1 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.196.18.65" dst_ip="201.64.20.43" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="218.176.38.166"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.128.97.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.573227,1.202670,999,0 0 0 0 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="176.122.192.113" dst_port="53"/>
            <filter src_ip="200.147.0.23" dst_ip="210.110.104.143"/>
            <filter src_ip="200.147.0.23" dst_port="53"/>
            <filter dst_ip="210.110.104.143" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.122.17.64" dst_ip="35.0.220.213" src_port="80"/>
            <filter src_ip="176.122.17.64" dst_ip="217.170.22.73" src_port="80"/>
            <filter src_ip="176.122.17.64" dst_ip="18.88.151.26" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="89.5.112.55"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,011,0 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="95.101.58.147" src_port="2967" dst_port="6000"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="30.219.100.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="31.12.19.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.526944,1.209900,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="27.223.226.174"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="183.173.189.104" dst_ip="30.219.99.138" src_port="80" dst_port="39642"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="175.101.143.77" dst_ip="30.219.99.90" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="142.197.7.44" dst_ip="200.146.146.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="201.64.29.45" dst_ip="30.219.100.248" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="183.188.9.83" dst_port="49763"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="193.97.70.180" dst_ip="142.197.102.163" src_port="80"/>
            <filter src_ip="193.97.89.85" dst_ip="142.197.102.163" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.197.205.69" dst_port="50877"/>
            <filter src_ip="218.176.16.214" dst_ip="142.197.205.69" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="183.173.186.174" dst_ip="219.171.21.167" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="142.197.235.238" dst_ip="216.106.162.16" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="176.122.0.70" dst_ip="89.161.189.42" src_port="80"/>
            <filter src_ip="176.122.16.54" dst_ip="89.161.189.42" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="142.197.102.163" dst_ip="94.68.64.106" src_port="60138" dst_port="1571"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.737386,1.191390,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="201.64.24.52" dst_ip="16.122.48.74" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
