<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.815655,1.431420,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="161.116.17.10"/>
        </slice>
        <from usec="0" sec="1257915995"/>
        <to usec="0" sec="1257915997"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.42.142.84"/>
        </slice>
        <from usec="0" sec="1257915985"/>
        <to usec="0" sec="1257916134"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.231.161.67" dst_ip="219.94.134.216" src_port="995" dst_port="35901" proto="tcp"/>
        </slice>
        <from usec="0" sec="1257916171"/>
        <to usec="0" sec="1257916173"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.151.237.214" dst_ip="201.92.5.193" src_port="43873" dst_port="65269" proto="tcp"/>
        </slice>
        <from usec="0" sec="1257915943"/>
        <to usec="0" sec="1257915944"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.231.142.95"/>
        </slice>
        <from usec="0" sec="1257916103"/>
        <to usec="0" sec="1257916194"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="180.5.215.192"/>
        </slice>
        <from usec="0" sec="1257916128"/>
        <to usec="0" sec="1257916130"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="55.44.214.204"/>
        </slice>
        <from usec="0" sec="1257916101"/>
        <to usec="0" sec="1257916118"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.132.20.38" dst_ip="200.22.169.164" src_port="80" dst_port="1094" proto="tcp"/>
        </slice>
        <from usec="0" sec="1257916078"/>
        <to usec="0" sec="1257916105"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.23.74.65" dst_ip="157.75.114.148" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1257915986"/>
        <to usec="0" sec="1257915988"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,020,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="201.92.9.161" dst_ip="42.37.191.4" proto="icmp"/>
        </slice>
        <from usec="0" sec="1257915671"/>
        <to usec="0" sec="1257915674"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.220.107.167" src_port="6000" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1257916428"/>
        <to usec="0" sec="1257916430"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="201.92.9.161"/>
        </slice>
        <from usec="0" sec="1257915943"/>
        <to usec="0" sec="1257916315"/>
    </anomaly>
    <anomaly type="notice" value="0.815655,1.431420,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="56.47.100.200"/>
        </slice>
        <from usec="0" sec="1257915996"/>
        <to usec="0" sec="1257915998"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.86.141.86"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.92.13.91"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="161.116.155.175"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.66.198.218"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="155.183.213.157"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.92.14.203"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.205.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.205.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.54.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.92.5.235" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="1.162.0.36" dst_port="137"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.183.133.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.183.133.230" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.231.129.0" dst_ip="200.26.226.60" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.174.141.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.139.18.31" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.75.139.86" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.7.206" src_port="25"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.92.13.91" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.230.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.172.200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.98.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257916005"/>
        <to usec="0" sec="1257916051"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1032" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257916050"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1509" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257916050"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257916050"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="158.211.42.254"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.231.54.2" src_port="53"/>
            <filter dst_ip="164.231.54.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter src_ip="93.101.228.184" dst_ip="201.92.2.119"/>
            <filter src_ip="93.101.228.184" dst_port="3127"/>
            <filter src_ip="93.101.228.184" dst_port="3124"/>
            <filter dst_ip="201.92.2.119" dst_port="3127"/>
            <filter dst_ip="201.92.2.119" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter src_ip="0.163.5.60" dst_ip="201.92.2.120"/>
            <filter src_ip="0.163.5.60" dst_port="3124"/>
            <filter src_ip="0.163.5.60" dst_port="3128"/>
            <filter dst_ip="201.92.2.120" dst_port="3124"/>
            <filter dst_ip="201.92.2.120" dst_port="3128"/>
            <filter dst_ip="201.92.2.120" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.231.104.103"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="161.116.98.209"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.75.112.32" dst_port="3716"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.231.13.39"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="164.231.64.126"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="58.14.201.77"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="155.183.133.230" src_port="53"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.17.201.143" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="158.211.252.168" src_port="3050"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="61.132.169.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="157.75.174.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="93.166.161.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.6.1.152" dst_ip="161.116.7.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.92.9.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.92.5.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.116.194.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.154.4.160" dst_ip="164.231.145.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916050"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.17.201.142" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257916275"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="93.211.240.179"/>
        </slice>
        <from usec="0" sec="1257916275"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.92.12.78" dst_port="16881"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,502,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="201.92.12.80"/>
            <filter src_ip="149.241.236.146" dst_port="22"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.719879,1.400310,503,1 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="201.92.0.153" dst_ip="95.3.64.32" src_port="80"/>
            <filter src_ip="157.75.174.86" dst_ip="95.3.64.32" src_port="80"/>
        </slice>
        <from usec="0" sec="1257916001"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.27.146.111"/>
        </slice>
        <from usec="0" sec="1257916095"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.92.12.204"/>
        </slice>
        <from usec="0" sec="1257916275"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="89.85.170.255"/>
        </slice>
        <from usec="0" sec="1257916275"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.399938,1.406400,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.212.84.47"/>
        </slice>
        <from usec="0" sec="1257916320"/>
        <to usec="0" sec="1257916366"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="33.75.60.79" dst_ip="158.211.42.254"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,011,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="158.211.252.168" src_port="3050"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="217.128.84.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.27.146.111"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.75.243.31" dst_port="25576"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,501,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.21.134.36" dst_ip="201.92.14.233" dst_port="21"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915646"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,020,0 0 0 0 0 0 1 1 1 0 0 0,ttl_error">
        <slice>
            <filter src_ip="201.92.12.64"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="197.85.27.4"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.242.109.178" src_port="6667"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.38.98"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="213.86.141.86" dst_ip="161.136.10.86"/>
            <filter src_ip="213.86.141.86" dst_ip="161.136.10.238"/>
            <filter src_ip="213.86.141.86" dst_ip="161.136.10.140"/>
            <filter src_ip="213.86.141.86" dst_ip="161.136.10.41"/>
            <filter src_ip="213.86.141.86" dst_port="80"/>
            <filter dst_ip="161.136.10.86" dst_port="80"/>
            <filter dst_ip="161.136.10.238" dst_port="80"/>
            <filter dst_ip="161.136.10.140" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.116.54.140" src_port="46992"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.231.104.103" src_port="37437"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.53.165" src_port="65013"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.75.174.34" dst_ip="93.68.203.240"/>
            <filter src_ip="157.75.174.34" src_port="3128"/>
            <filter src_ip="157.75.174.34" src_port="3124"/>
            <filter src_ip="157.75.174.34" src_port="16881"/>
            <filter dst_ip="93.68.203.240" src_port="3128"/>
            <filter dst_ip="93.68.203.240" src_port="3124"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="157.75.174.42" dst_ip="93.68.203.240"/>
            <filter src_ip="157.75.174.42" src_port="3128"/>
            <filter src_ip="157.75.174.42" src_port="3127"/>
            <filter dst_ip="93.68.203.240" src_port="3128"/>
            <filter dst_ip="93.68.203.240" src_port="3127"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.790728,1.399480,999,1 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="157.75.174.43" src_port="3124"/>
            <filter src_ip="157.75.174.43" src_port="3128"/>
            <filter src_ip="157.75.174.43" src_port="3127"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916421"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,020,0 0 0 0 0 0 1 1 1 0 0 0,ttl_error">
        <slice>
            <filter src_ip="201.92.12.28"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.231.109.115" dst_port="25"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="33.75.60.79" dst_ip="158.211.42.254"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,504,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.231.229.125" dst_port="443"/>
            <filter src_ip="164.231.229.125" dst_ip="56.48.111.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.92.12.165" dst_ip="210.81.202.35"/>
            <filter src_ip="201.92.12.165" dst_ip="9.8.0.245"/>
            <filter src_ip="201.92.12.165" dst_ip="211.153.219.19"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="201.92.13.79" dst_ip="0.214.196.8" src_port="52363"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.27.146.111"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916051"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.46.174" src_port="34693"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.83.181" src_port="51241"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.231.13.39" src_port="33800"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.76.10" src_port="47323"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.54.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.27.138.37" dst_ip="216.114.196.66" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.139.18.32" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.205.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.205.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.22.46.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.139.18.37" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.54.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.197.116" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.130.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.168.55" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.231.39.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.116.7.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.116.7.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,011,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.75.174.90" src_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.180.115.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.231.135.109" dst_ip="217.128.84.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.27.162.163" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.27.162.163" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.75.138.172" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,501,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.21.134.36" dst_ip="201.92.1.103" dst_port="21"/>
            <filter src_ip="211.21.134.36" dst_ip="201.92.12.79" dst_port="21"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.98.209" src_port="9124"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.22.166.154" src_port="16001"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.116.155.175" src_port="3072"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.684485,1.357680,999,0 0 0 0 0 0 1 1 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="157.75.112.32" src_port="3716"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="161.116.181.95" dst_ip="204.68.236.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257916141"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.116.7.200" src_port="53"/>
            <filter src_ip="161.116.7.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.27.135.67" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="5.70.33.18" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.75.243.31" src_port="25576"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,502,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.241.236.146" dst_port="22"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.92.13.28" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.231.28.15" dst_ip="61.132.169.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="58.169.172.49" dst_ip="155.183.132.62"/>
            <filter src_ip="58.169.172.49" src_port="53"/>
            <filter dst_ip="155.183.132.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916321"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="56.4.167.109" src_port="80"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="197.232.139.170" src_port="53"/>
            <filter dst_ip="197.232.139.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1257915600"/>
        <to usec="0" sec="1257916366"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="211.17.142.208" src_port="1032" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="221.225.251.50" src_port="1037" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.232.8.29" src_port="1034" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.844876,1.450580,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="0.162.42.115" src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257915825"/>
        <to usec="0" sec="1257915871"/>
    </anomaly>
    <anomaly type="notice" value="0.516696,1.405580,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.232.8.29" src_port="1034" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1257916050"/>
        <to usec="0" sec="1257916096"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="9.20.221.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="2.65.222.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.216.135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.231.145.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.231.98.55" dst_port="80"/>
            <filter src_ip="164.231.98.55" src_port="1189" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.116.84.197"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="157.75.114.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="149.252.49.58"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.40.78.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.56.229.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.231.68.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.174.64.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.116.86.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="157.75.92.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.848393,1.352230,504,1 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="4.209.217.18" dst_ip="157.75.72.68" src_port="443"/>
            <filter src_ip="4.209.217.18" dst_ip="157.75.72.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.601245,1.358530,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="200.22.183.237" dst_port="28447"/>
            <filter dst_ip="200.22.183.237" dst_port="31983"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.116.79.52" dst_ip="56.181.215.9" dst_port="80"/>
            <filter src_ip="161.116.79.52" dst_ip="205.179.99.253" dst_port="80"/>
            <filter src_ip="161.116.79.52" dst_ip="93.166.161.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.713136,1.390580,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.212.249.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
