<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="176.239.227.76" dst_ip="204.150.149.106" src_port="1188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151317"/>
        <to usec="0" sec="1255151319"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.71.167.81" dst_ip="22.95.248.123" src_port="80" dst_port="1343" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151100"/>
        <to usec="0" sec="1255151184"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.88.84.54"/>
        </slice>
        <from usec="0" sec="1255151345"/>
        <to usec="0" sec="1255151347"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.239.241.242"/>
        </slice>
        <from usec="0" sec="1255150888"/>
        <to usec="0" sec="1255150890"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.71.20.225" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150806"/>
        <to usec="0" sec="1255151670"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.173.5.233" dst_ip="39.208.144.230" src_port="80" dst_port="1645" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150893"/>
        <to usec="0" sec="1255150895"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.71.68.8" src_port="1211" proto="udp"/>
        </slice>
        <from usec="0" sec="1255150893"/>
        <to usec="0" sec="1255151684"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.239.228.57" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150806"/>
        <to usec="0" sec="1255151538"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.71.69.195"/>
        </slice>
        <from usec="0" sec="1255150931"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="183.173.56.64" dst_ip="220.6.15.176" src_port="54612" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150934"/>
        <to usec="0" sec="1255151203"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.91.49.34" dst_ip="132.216.244.2" src_port="49476" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150897"/>
        <to usec="0" sec="1255150900"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.239.216.168" dst_ip="28.83.57.233" src_port="3878" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151249"/>
        <to usec="0" sec="1255151677"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.239.241.229" dst_ip="222.216.114.69" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151602"/>
        <to usec="0" sec="1255151605"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.239.138.128"/>
        </slice>
        <from usec="0" sec="1255151672"/>
        <to usec="0" sec="1255151674"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.43.122.150" dst_ip="210.159.175.90" src_port="2464" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151404"/>
        <to usec="0" sec="1255151407"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.184.231.236" dst_ip="130.71.68.210" src_port="80" dst_port="1451" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151298"/>
        <to usec="0" sec="1255151464"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.104.241.3" dst_ip="176.239.31.220" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151278"/>
        <to usec="0" sec="1255151280"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.235.80.142" dst_ip="130.71.69.233" src_port="80" dst_port="4077" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150814"/>
        <to usec="0" sec="1255150816"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.71.15.25" dst_ip="213.234.133.152" src_port="52880" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150805"/>
        <to usec="0" sec="1255150894"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.71.68.116" dst_ip="136.184.248.232" src_port="2070" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150836"/>
        <to usec="0" sec="1255151520"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.71.70.224" dst_ip="208.235.81.17" src_port="1733" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150892"/>
        <to usec="0" sec="1255150894"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.71.70.235" dst_ip="0.196.90.85" src_port="9039" dst_port="1273" proto="udp"/>
        </slice>
        <from usec="0" sec="1255151052"/>
        <to usec="0" sec="1255151054"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="88.66.64.39" dst_ip="192.8.117.0" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150852"/>
        <to usec="0" sec="1255151004"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.13.147.238"/>
        </slice>
        <from usec="0" sec="1255151622"/>
        <to usec="0" sec="1255151700"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.0.115.61"/>
        </slice>
        <from usec="0" sec="1255151508"/>
        <to usec="0" sec="1255151510"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.239.124.76" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150889"/>
        <to usec="0" sec="1255151387"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.43.121.141"/>
        </slice>
        <from usec="0" sec="1255150803"/>
        <to usec="0" sec="1255151525"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.50.17.60" dst_ip="176.239.198.4" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151026"/>
        <to usec="0" sec="1255151030"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.71.68.237"/>
        </slice>
        <from usec="0" sec="1255151339"/>
        <to usec="0" sec="1255151523"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.184.31.58" dst_ip="132.216.231.16" src_port="20" dst_port="2315" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150804"/>
        <to usec="0" sec="1255150969"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.8.117.157" dst_ip="34.64.85.37" src_port="1970" dst_port="23301" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151113"/>
        <to usec="0" sec="1255151539"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.71.68.210"/>
        </slice>
        <from usec="0" sec="1255150806"/>
        <to usec="0" sec="1255151625"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.71.167.81"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151679"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.239.182.3"/>
        </slice>
        <from usec="0" sec="1255150816"/>
        <to usec="0" sec="1255151388"/>
    </anomaly>
    <anomaly type="notice" value="0.747312,1.145680,503,1 0 0 0 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.35.226.115" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.150.149.106"/>
        </slice>
        <from usec="0" sec="1255151256"/>
        <to usec="0" sec="1255151258"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="5.232.201.153"/>
        </slice>
        <from usec="0" sec="1255151625"/>
        <to usec="0" sec="1255151627"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.239.182.115"/>
        </slice>
        <from usec="0" sec="1255150838"/>
        <to usec="0" sec="1255150840"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.239.253.63" dst_ip="35.98.204.200" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150883"/>
        <to usec="0" sec="1255151540"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="203.214.104.32"/>
        </slice>
        <from usec="0" sec="1255151336"/>
        <to usec="0" sec="1255151338"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.71.69.7" dst_ip="208.206.188.12" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151245"/>
        <to usec="0" sec="1255151247"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.133.69.215"/>
        </slice>
        <from usec="0" sec="1255150919"/>
        <to usec="0" sec="1255150924"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.43.211.109" dst_ip="130.71.167.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150933"/>
        <to usec="0" sec="1255150935"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.121.34.112"/>
        </slice>
        <from usec="0" sec="1255151386"/>
        <to usec="0" sec="1255151388"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.71.68.45"/>
        </slice>
        <from usec="0" sec="1255150919"/>
        <to usec="0" sec="1255151678"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.71.167.2" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150813"/>
        <to usec="0" sec="1255151503"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="213.202.115.198" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150988"/>
        <to usec="0" sec="1255151135"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.22.73.40" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151517"/>
        <to usec="0" sec="1255151525"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.22.138.212" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151455"/>
        <to usec="0" sec="1255151461"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.238.43.141"/>
        </slice>
        <from usec="0" sec="1255151041"/>
        <to usec="0" sec="1255151049"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="148.20.76.55" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151257"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.66.55.1"/>
        </slice>
        <from usec="0" sec="1255151518"/>
        <to usec="0" sec="1255151522"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="9.118.169.77" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150905"/>
        <to usec="0" sec="1255150913"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.151.147.23"/>
        </slice>
        <from usec="0" sec="1255150948"/>
        <to usec="0" sec="1255150955"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.71.68.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150930"/>
        <to usec="0" sec="1255151314"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.36.172.56" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151600"/>
        <to usec="0" sec="1255151605"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.161.130.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151086"/>
        <to usec="0" sec="1255151088"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.227.172.181"/>
        </slice>
        <from usec="0" sec="1255150878"/>
        <to usec="0" sec="1255150887"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.107.125.90" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151618"/>
        <to usec="0" sec="1255151627"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="195.8.102.191" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151339"/>
        <to usec="0" sec="1255151347"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.20.162.79" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151002"/>
        <to usec="0" sec="1255151010"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.20.27.115"/>
        </slice>
        <from usec="0" sec="1255150925"/>
        <to usec="0" sec="1255150931"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.34.115" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151499"/>
        <to usec="0" sec="1255151503"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.224.160.93"/>
        </slice>
        <from usec="0" sec="1255151672"/>
        <to usec="0" sec="1255151679"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.176.69" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150930"/>
        <to usec="0" sec="1255150938"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="151.147.201.228"/>
        </slice>
        <from usec="0" sec="1255151049"/>
        <to usec="0" sec="1255151054"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.42.247.122"/>
        </slice>
        <from usec="0" sec="1255151012"/>
        <to usec="0" sec="1255151021"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="35.235.33.95"/>
        </slice>
        <from usec="0" sec="1255151135"/>
        <to usec="0" sec="1255151165"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.151.50.179"/>
        </slice>
        <from usec="0" sec="1255151403"/>
        <to usec="0" sec="1255151409"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.45.204.56" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151601"/>
        <to usec="0" sec="1255151605"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.42.177.115"/>
        </slice>
        <from usec="0" sec="1255151344"/>
        <to usec="0" sec="1255151350"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.9.26.219" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255150891"/>
        <to usec="0" sec="1255150900"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.63.22.122" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151589"/>
        <to usec="0" sec="1255151594"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.151.108.139" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151637"/>
        <to usec="0" sec="1255151641"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.52.119"/>
        </slice>
        <from usec="0" sec="1255151463"/>
        <to usec="0" sec="1255151470"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.129.114.176" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1255151186"/>
        <to usec="0" sec="1255151190"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="192.8.112.26" proto="icmp"/>
        </slice>
        <from usec="0" sec="1255150986"/>
        <to usec="0" sec="1255151065"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.43.152.219"/>
        </slice>
        <from usec="0" sec="1255150886"/>
        <to usec="0" sec="1255151051"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.239.239.152"/>
        </slice>
        <from usec="0" sec="1255150911"/>
        <to usec="0" sec="1255150913"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.71.68.45" src_port="17788" dst_port="1638"/>
        </slice>
        <from usec="0" sec="1255150816"/>
        <to usec="0" sec="1255151258"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="35.235.33.95" proto="icmp"/>
        </slice>
        <from usec="0" sec="1255151135"/>
        <to usec="0" sec="1255151160"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.239.216.174"/>
        </slice>
        <from usec="0" sec="1255151110"/>
        <to usec="0" sec="1255151112"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.239.69.47"/>
        </slice>
        <from usec="0" sec="1255151524"/>
        <to usec="0" sec="1255151527"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.71.68.232"/>
        </slice>
        <from usec="0" sec="1255150885"/>
        <to usec="0" sec="1255150887"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.99.217.213" dst_ip="130.71.68.178" src_port="80" dst_port="57145"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151308"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.239.216.243" dst_ip="209.81.171.120" src_port="2412" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1255150920"/>
        <to usec="0" sec="1255151408"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.235.82.117" dst_ip="130.71.68.196" src_port="80" dst_port="1146"/>
        </slice>
        <from usec="0" sec="1255150806"/>
        <to usec="0" sec="1255150808"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.239.151.151" dst_ip="5.193.85.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1255150893"/>
        <to usec="0" sec="1255150931"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="183.173.47.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1255150991"/>
        <to usec="0" sec="1255151319"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,020,1 1 0 0 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="183.44.12.52"/>
        </slice>
        <from usec="0" sec="1255151188"/>
        <to usec="0" sec="1255151191"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="35.172.163.64"/>
        </slice>
        <from usec="0" sec="1255151079"/>
        <to usec="0" sec="1255151680"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.20.103.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150887"/>
        <to usec="0" sec="1255150895"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.48.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151188"/>
        <to usec="0" sec="1255151192"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.24.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150806"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.57.162.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151507"/>
        <to usec="0" sec="1255151511"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="24.158.43.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151313"/>
        <to usec="0" sec="1255151321"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.59.37.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150920"/>
        <to usec="0" sec="1255150925"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.59.42.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150979"/>
        <to usec="0" sec="1255150983"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.22.218.40" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151676"/>
        <to usec="0" sec="1255151684"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="195.20.154.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151251"/>
        <to usec="0" sec="1255151255"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.185.119.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151698"/>
        <to usec="0" sec="1255151701"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.203.110.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151514"/>
        <to usec="0" sec="1255151517"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.56.234" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151296"/>
        <to usec="0" sec="1255151305"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.204.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151536"/>
        <to usec="0" sec="1255151540"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="148.21.65.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151110"/>
        <to usec="0" sec="1255151117"/>
    </anomaly>
    <anomaly type="notice" value="0.757063,1.192310,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.9.168.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151383"/>
        <to usec="0" sec="1255151387"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.8.112.77" dst_ip="89.99.94.214" src_port="80"/>
        </slice>
        <from usec="0" sec="1255150804"/>
        <to usec="0" sec="1255151320"/>
    </anomaly>
    <anomaly type="notice" value="0.424942,1.130880,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="200.56.209.223"/>
        </slice>
        <from usec="0" sec="1255150921"/>
        <to usec="0" sec="1255151380"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.216.140.132"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150846"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.239.180.226"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150846"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.8.113.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150846"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.60.94.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150846"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.28.249.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255150846"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.8.123.42" dst_port="3127"/>
            <filter dst_ip="192.8.123.42" dst_port="3124"/>
            <filter dst_ip="192.8.123.42" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151628"/>
    </anomaly>
    <anomaly type="notice" value="0.747312,1.145680,503,1 0 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.8.125.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="192.8.117.10"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.164.18.32"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="219.217.22.190"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="183.173.44.59"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="192.8.117.69"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="25.192.205.122"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.239.21.27"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.239.204.119"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,503,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.71.68.232" src_port="3447"/>
            <filter src_ip="130.71.68.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="1255150805"/>
        <to usec="0" sec="1255151280"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,999,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.43.121.254"/>
        </slice>
        <from usec="0" sec="1255150848"/>
        <to usec="0" sec="1255151537"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.35.208.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.239.65.23" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.164.18.39" src_port="6667"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="39.188.2.189" src_port="10002"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.238.66.26" src_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.239.45.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.239.133.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.239.203.243" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.8.123.35" src_port="17660"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.173.5.207" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="183.173.5.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.8.123.43" dst_port="3124"/>
            <filter dst_ip="192.8.123.43" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151518"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.238.66.34" src_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="95.70.168.4" src_port="80"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.8.120.239" src_port="80"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.747312,1.145680,999,1 0 0 0 0 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="130.71.69.143" src_port="5959"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="25.39.91.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,502,1 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.93.44.105" dst_port="22"/>
        </slice>
        <from usec="0" sec="1255150841"/>
        <to usec="0" sec="1255151679"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.239.180.226" src_port="26461"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="216.203.226.11" src_port="80"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.8.116.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="148.72.181.3" dst_port="445"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="57.174.20.224" src_port="10023"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="94.14.244.77" src_port="80"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="39.189.92.58" src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151251"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.239.45.246" src_port="53"/>
            <filter dst_ip="176.239.45.246" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.216.140.132"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="183.173.44.59"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,503,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="176.239.53.202"/>
            <filter dst_ip="210.219.169.115" dst_port="80"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="132.216.165.162"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.8.123.35" dst_ip="41.146.73.221" src_port="3128"/>
        </slice>
        <from usec="0" sec="1255151205"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,010,1 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="193.43.152.219" dst_port="443"/>
        </slice>
        <from usec="0" sec="1255150818"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="132.216.141.81" src_port="80"/>
            <filter dst_ip="132.216.141.81"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="148.151.18.139"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.151.8.171"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,501,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="132.216.128.2" dst_port="21"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151300"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.151.225.226"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.43.121.254"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="132.216.228.228" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255151250"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.8.123.34" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.8.113.60" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="183.173.250.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151296"/>
    </anomaly>
    <anomaly type="notice" value="0.551012,1.166130,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="5.232.208.49"/>
        </slice>
        <from usec="0" sec="1255151430"/>
        <to usec="0" sec="1255151476"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,011,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="216.176.30.77" src_port="3306" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1255151520"/>
        <to usec="0" sec="1255151566"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.71.8.186" src_port="80"/>
        </slice>
        <from usec="0" sec="1255151565"/>
        <to usec="0" sec="1255151624"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="34.104.246.12"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.186.38.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="183.173.5.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.71.198.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.694766,1.129550,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.8.125.57" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.239.150.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.694766,1.129550,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.239.53.194" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.694766,1.129550,999,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="128.151.88.232" dst_port="16881"/>
            <filter dst_ip="128.151.88.232" dst_port="2580"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="130.71.69.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="130.71.69.143"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="195.122.174.30" dst_ip="130.71.70.227" src_port="80"/>
            <filter src_ip="148.66.192.244" dst_ip="130.71.70.227" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="130.71.70.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="136.184.249.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="193.43.136.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.694766,1.129550,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.43.125.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="6.244.72.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="183.186.94.43" dst_ip="4.69.53.115" src_port="80"/>
            <filter src_ip="183.186.94.43" dst_ip="4.69.48.137" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.727985,1.148990,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.78.128.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.506312,1.146980,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.8.117.18" dst_port="16881"/>
            <filter dst_ip="192.8.117.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1255150800"/>
        <to usec="0" sec="1255151538"/>
    </anomaly>
</admd:annotation>
