<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.216.17.21"/>
        </slice>
        <from usec="0" sec="1260594386"/>
        <to usec="0" sec="1260594589"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.25.153.146"/>
        </slice>
        <from usec="0" sec="1260594845"/>
        <to usec="0" sec="1260594848"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.216.181.34"/>
        </slice>
        <from usec="0" sec="1260594815"/>
        <to usec="0" sec="1260594818"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.108.162.17"/>
        </slice>
        <from usec="0" sec="1260594471"/>
        <to usec="0" sec="1260594475"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.205.25.44" dst_ip="10.175.2.60" src_port="53" dst_port="1067" proto="udp"/>
        </slice>
        <from usec="0" sec="1260594042"/>
        <to usec="0" sec="1260594685"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.108.45.227"/>
        </slice>
        <from usec="0" sec="1260594030"/>
        <to usec="0" sec="1260594854"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.108.41.209" dst_ip="34.39.15.96" src_port="2606" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594030"/>
        <to usec="0" sec="1260594846"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.216.112.80" dst_ip="36.52.48.133" src_port="2534" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594653"/>
        <to usec="0" sec="1260594656"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.216.30.175" dst_ip="207.246.86.146" src_port="55107" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594653"/>
        <to usec="0" sec="1260594657"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.216.89.158" dst_ip="86.2.216.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1260594651"/>
        <to usec="0" sec="1260594854"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.216.10.107" dst_ip="84.36.137.117" src_port="64130" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594025"/>
        <to usec="0" sec="1260594193"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.216.26.142"/>
        </slice>
        <from usec="0" sec="1260594192"/>
        <to usec="0" sec="1260594846"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.216.118.27" dst_ip="43.156.132.164" src_port="3309" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594155"/>
        <to usec="0" sec="1260594710"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="15.179.254.0"/>
        </slice>
        <from usec="0" sec="1260594817"/>
        <to usec="0" sec="1260594821"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="140.157.93.168" dst_ip="194.121.108.168" src_port="443" dst_port="49204" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594472"/>
        <to usec="0" sec="1260594496"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.216.118.64" dst_ip="34.39.15.116" src_port="3928" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594030"/>
        <to usec="0" sec="1260594819"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.108.193.120"/>
        </slice>
        <from usec="0" sec="1260594509"/>
        <to usec="0" sec="1260594513"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.108.88.84" dst_ip="215.200.202.36" src_port="55271" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594186"/>
        <to usec="0" sec="1260594196"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="140.157.93.129"/>
        </slice>
        <from usec="0" sec="1260594673"/>
        <to usec="0" sec="1260594677"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.216.219.146"/>
        </slice>
        <from usec="0" sec="1260594828"/>
        <to usec="0" sec="1260594832"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.121.96.12" dst_ip="148.77.194.102" src_port="80" dst_port="1351" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594847"/>
        <to usec="0" sec="1260594851"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.108.244.137"/>
        </slice>
        <from usec="0" sec="1260594684"/>
        <to usec="0" sec="1260594688"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.216.64.151" dst_ip="6.229.78.123" src_port="17772" dst_port="1024" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594383"/>
        <to usec="0" sec="1260594589"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="80.134.65.201" dst_ip="130.108.40.33" src_port="443" dst_port="2149" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594159"/>
        <to usec="0" sec="1260594163"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="86.144.69.127" dst_ip="194.121.108.71" src_port="34906" dst_port="16315" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594845"/>
        <to usec="0" sec="1260594848"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="172.216.201.133" src_port="51413" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594583"/>
        <to usec="0" sec="1260594705"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="140.157.93.162"/>
        </slice>
        <from usec="0" sec="1260594789"/>
        <to usec="0" sec="1260594792"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.90.43.94"/>
        </slice>
        <from usec="0" sec="1260594454"/>
        <to usec="0" sec="1260594458"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.216.84.26" dst_ip="216.97.184.53" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594190"/>
        <to usec="0" sec="1260594193"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.216.176.59"/>
        </slice>
        <from usec="0" sec="1260594845"/>
        <to usec="0" sec="1260594851"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.140.85.205" dst_ip="20.28.100.176" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594548"/>
        <to usec="0" sec="1260594553"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.216.17.137" dst_ip="208.113.90.88" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594479"/>
        <to usec="0" sec="1260594611"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="172.216.144.67"/>
        </slice>
        <from usec="0" sec="1260594189"/>
        <to usec="0" sec="1260594193"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.108.104.158" dst_ip="85.108.74.138" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594477"/>
        <to usec="0" sec="1260594851"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.108.41.102"/>
        </slice>
        <from usec="0" sec="1260594468"/>
        <to usec="0" sec="1260594472"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.91.109.186"/>
        </slice>
        <from usec="0" sec="1260594465"/>
        <to usec="0" sec="1260594469"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.232.205.44"/>
        </slice>
        <from usec="0" sec="1260594240"/>
        <to usec="0" sec="1260594244"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.87.115.237" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594038"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.80.204.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594455"/>
        <to usec="0" sec="1260594464"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.156.180.98" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594150"/>
        <to usec="0" sec="1260594163"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.213.69.0" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594540"/>
        <to usec="0" sec="1260594549"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.86.247.83" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594768"/>
        <to usec="0" sec="1260594773"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.135.5.14" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594579"/>
        <to usec="0" sec="1260594588"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.78.161.114" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1260594796"/>
        <to usec="0" sec="1260594803"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.39.15.96"/>
        </slice>
        <from usec="0" sec="1260594828"/>
        <to usec="0" sec="1260594832"/>
    </anomaly>
    <anomaly type="notice" value="0.546157,1.097760,503,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.157.93.208"/>
        </slice>
        <from usec="0" sec="1260594208"/>
        <to usec="0" sec="1260594212"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.106.60.73"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594094"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.106.60.73"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.200.203.46"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594013"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="148.193.133.242"/>
        </slice>
        <from usec="0" sec="1260594010"/>
        <to usec="0" sec="1260594045"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.65.16.240"/>
        </slice>
        <from usec="0" sec="1260594020"/>
        <to usec="0" sec="1260594072"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="20.173.168.46"/>
        </slice>
        <from usec="0" sec="1260594030"/>
        <to usec="0" sec="1260594076"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.201.82.60"/>
        </slice>
        <from usec="0" sec="1260594040"/>
        <to usec="0" sec="1260594051"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.233.121.136"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="130.108.41.195"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594098"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.101.69.24"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="223.33.103.42"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594828"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.102.33.242"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594195"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="86.240.19.10"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594197"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.216.230.13"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="200.220.197.240" dst_ip="31.172.92.161" src_port="53"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594193"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="20.173.168.56"/>
        </slice>
        <from usec="0" sec="1260594008"/>
        <to usec="0" sec="1260594173"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.27.69.186"/>
        </slice>
        <from usec="0" sec="1260594026"/>
        <to usec="0" sec="1260594086"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.200.227.180"/>
        </slice>
        <from usec="0" sec="1260594028"/>
        <to usec="0" sec="1260594052"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="216.246.33.3"/>
        </slice>
        <from usec="0" sec="1260594130"/>
        <to usec="0" sec="1260594144"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.39.214.2"/>
        </slice>
        <from usec="0" sec="1260594150"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.567545,1.080060,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.108.40.86" dst_ip="215.200.203.14" src_port="1493" dst_port="80"/>
            <filter src_ip="130.108.40.86" dst_ip="215.200.203.14" src_port="1491" dst_port="80"/>
        </slice>
        <from usec="0" sec="1260594164"/>
        <to usec="0" sec="1260594466"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="208.241.36.48"/>
        </slice>
        <from usec="0" sec="1260594182"/>
        <to usec="0" sec="1260594194"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="194.121.104.208"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594288"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.96.53.108"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594287"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="168.43.173.43"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594288"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="75.4.12.210"/>
        </slice>
        <from usec="0" sec="1260594004"/>
        <to usec="0" sec="1260594273"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.11.119.242"/>
        </slice>
        <from usec="0" sec="1260594005"/>
        <to usec="0" sec="1260594288"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.25.161.120"/>
        </slice>
        <from usec="0" sec="1260594009"/>
        <to usec="0" sec="1260594285"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.173.174.39"/>
        </slice>
        <from usec="0" sec="1260594028"/>
        <to usec="0" sec="1260594288"/>
    </anomaly>
    <anomaly type="notice" value="0.567545,1.080060,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.146.108.243" dst_ip="213.193.147.229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1260594040"/>
        <to usec="0" sec="1260594256"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.145.160.187"/>
        </slice>
        <from usec="0" sec="1260594116"/>
        <to usec="0" sec="1260594215"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="87.81.132.228"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594468"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="6.37.148.137"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594389"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.193.232.54" src_port="25"/>
            <filter src_ip="26.193.161.252" dst_ip="128.193.232.54" dst_port="23555"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594462"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.130.141.57"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594466"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.224.1.100"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594467"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.198.213.72"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594467"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="130.108.41.148"/>
        </slice>
        <from usec="0" sec="1260594005"/>
        <to usec="0" sec="1260594460"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.216.192.160"/>
        </slice>
        <from usec="0" sec="1260594006"/>
        <to usec="0" sec="1260594532"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.132.205.249"/>
        </slice>
        <from usec="0" sec="1260594009"/>
        <to usec="0" sec="1260594449"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="87.195.3.153"/>
        </slice>
        <from usec="0" sec="1260594164"/>
        <to usec="0" sec="1260594415"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="217.152.42.236"/>
        </slice>
        <from usec="0" sec="1260594346"/>
        <to usec="0" sec="1260594361"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.88.162.238"/>
        </slice>
        <from usec="0" sec="1260594373"/>
        <to usec="0" sec="1260594408"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.106.158.155"/>
        </slice>
        <from usec="0" sec="1260594391"/>
        <to usec="0" sec="1260594444"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="148.152.106.192"/>
        </slice>
        <from usec="0" sec="1260594425"/>
        <to usec="0" sec="1260594437"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.20.122.221"/>
        </slice>
        <from usec="0" sec="1260594443"/>
        <to usec="0" sec="1260594447"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.216.181.43"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594558"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="44.71.251.211"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594558"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="26.192.3.192"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594520"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="168.15.113.233"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594556"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.180.138.104"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594554"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.121.107.178" src_port="53"/>
        </slice>
        <from usec="0" sec="1260594005"/>
        <to usec="0" sec="1260594558"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.149.174.140"/>
        </slice>
        <from usec="0" sec="1260594006"/>
        <to usec="0" sec="1260594552"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.133.33.13"/>
        </slice>
        <from usec="0" sec="1260594006"/>
        <to usec="0" sec="1260594552"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="35.7.80.129"/>
        </slice>
        <from usec="0" sec="1260594010"/>
        <to usec="0" sec="1260594551"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.96.15.26"/>
        </slice>
        <from usec="0" sec="1260594014"/>
        <to usec="0" sec="1260594738"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.240.65.100"/>
        </slice>
        <from usec="0" sec="1260594022"/>
        <to usec="0" sec="1260594550"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.173.172.50"/>
        </slice>
        <from usec="0" sec="1260594060"/>
        <to usec="0" sec="1260594550"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="42.144.12.247"/>
        </slice>
        <from usec="0" sec="1260594128"/>
        <to usec="0" sec="1260594477"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.184.22.11"/>
        </slice>
        <from usec="0" sec="1260594178"/>
        <to usec="0" sec="1260594516"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="215.200.203.40"/>
        </slice>
        <from usec="0" sec="1260594299"/>
        <to usec="0" sec="1260594558"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="87.110.104.127"/>
        </slice>
        <from usec="0" sec="1260594338"/>
        <to usec="0" sec="1260594400"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter dst_ip="36.199.132.62"/>
        </slice>
        <from usec="0" sec="1260594389"/>
        <to usec="0" sec="1260594552"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.49.135.165"/>
        </slice>
        <from usec="0" sec="1260594445"/>
        <to usec="0" sec="1260594558"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.173.168.176"/>
        </slice>
        <from usec="0" sec="1260594501"/>
        <to usec="0" sec="1260594515"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.97.39.39"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594648"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.120.47.127"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594820"/>
    </anomaly>
    <anomaly type="notice" value="0.715250,1.141510,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.35.208.155"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594802"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="172.222.161.131"/>
        </slice>
        <from usec="0" sec="1260594002"/>
        <to usec="0" sec="1260594647"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.208.113.100"/>
        </slice>
        <from usec="0" sec="1260594004"/>
        <to usec="0" sec="1260594648"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.192.128.221"/>
        </slice>
        <from usec="0" sec="1260594005"/>
        <to usec="0" sec="1260594738"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="172.216.144.114"/>
        </slice>
        <from usec="0" sec="1260594013"/>
        <to usec="0" sec="1260594634"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.41.242.126"/>
        </slice>
        <from usec="0" sec="1260594266"/>
        <to usec="0" sec="1260594567"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.162.182.122"/>
        </slice>
        <from usec="0" sec="1260594345"/>
        <to usec="0" sec="1260594613"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.140.213.6"/>
        </slice>
        <from usec="0" sec="1260594394"/>
        <to usec="0" sec="1260594488"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="36.184.248.211"/>
        </slice>
        <from usec="0" sec="1260594560"/>
        <to usec="0" sec="1260594593"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.216.6.83"/>
        </slice>
        <from usec="0" sec="1260594574"/>
        <to usec="0" sec="1260594617"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.43.138.96"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594737"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.136.27.119"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594732"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="172.216.77.17"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594733"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.208.33.100"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594727"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="86.230.247.111"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594738"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.216.176.59"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594720"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.108.237.85"/>
        </slice>
        <from usec="0" sec="1260594001"/>
        <to usec="0" sec="1260594690"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="22.226.113.5"/>
        </slice>
        <from usec="0" sec="1260594002"/>
        <to usec="0" sec="1260594734"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.90.42.160"/>
        </slice>
        <from usec="0" sec="1260594002"/>
        <to usec="0" sec="1260594735"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.139.117.243"/>
        </slice>
        <from usec="0" sec="1260594006"/>
        <to usec="0" sec="1260594579"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.104.237.237"/>
        </slice>
        <from usec="0" sec="1260594007"/>
        <to usec="0" sec="1260594736"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.173.174.148"/>
        </slice>
        <from usec="0" sec="1260594009"/>
        <to usec="0" sec="1260594736"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.108.14.45"/>
        </slice>
        <from usec="0" sec="1260594023"/>
        <to usec="0" sec="1260594716"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.38.169.196"/>
        </slice>
        <from usec="0" sec="1260594043"/>
        <to usec="0" sec="1260594697"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.216.92.14" dst_ip="222.102.35.110" src_port="80"/>
            <filter src_ip="172.216.92.14" dst_ip="213.7.74.79" src_port="80"/>
        </slice>
        <from usec="0" sec="1260594049"/>
        <to usec="0" sec="1260594664"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.22.232.145"/>
        </slice>
        <from usec="0" sec="1260594060"/>
        <to usec="0" sec="1260594731"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.140.167.1"/>
        </slice>
        <from usec="0" sec="1260594108"/>
        <to usec="0" sec="1260594738"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="86.254.74.81"/>
        </slice>
        <from usec="0" sec="1260594272"/>
        <to usec="0" sec="1260594709"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="208.32.149.160"/>
        </slice>
        <from usec="0" sec="1260594567"/>
        <to usec="0" sec="1260594581"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.36.191.105"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594828"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.193.144.241" dst_port="16881"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594828"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.216.211.51"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594827"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.213.79.163"/>
        </slice>
        <from usec="0" sec="1260594002"/>
        <to usec="0" sec="1260594827"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.210.169.100"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594828"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.9.16"/>
        </slice>
        <from usec="0" sec="1260594003"/>
        <to usec="0" sec="1260594821"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.13.1"/>
        </slice>
        <from usec="0" sec="1260594005"/>
        <to usec="0" sec="1260594828"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="199.88.113.158"/>
        </slice>
        <from usec="0" sec="1260594007"/>
        <to usec="0" sec="1260594825"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="168.140.85.205" dst_ip="23.87.79.193" dst_port="53"/>
        </slice>
        <from usec="0" sec="1260594039"/>
        <to usec="0" sec="1260594824"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="36.234.172.128"/>
        </slice>
        <from usec="0" sec="1260594143"/>
        <to usec="0" sec="1260594765"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="4.162.252.99"/>
        </slice>
        <from usec="0" sec="1260594601"/>
        <to usec="0" sec="1260594708"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.25.159.161"/>
        </slice>
        <from usec="0" sec="1260594655"/>
        <to usec="0" sec="1260594729"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="150.12.210.145"/>
        </slice>
        <from usec="0" sec="1260594667"/>
        <to usec="0" sec="1260594720"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="84.146.36.214"/>
        </slice>
        <from usec="0" sec="1260594763"/>
        <to usec="0" sec="1260594772"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="130.108.201.210"/>
        </slice>
        <from usec="0" sec="1260594813"/>
        <to usec="0" sec="1260594814"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="194.121.103.113" dst_ip="199.84.34.21"/>
        </slice>
        <from usec="0" sec="1260594182"/>
        <to usec="0" sec="1260594198"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.216.164.241"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.90.189.94"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.166.93.141"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="194.121.104.14" dst_ip="205.163.36.124" dst_port="53"/>
            <filter src_ip="195.106.153.10" dst_ip="205.163.36.124" dst_port="53"/>
            <filter src_ip="195.106.61.21" dst_ip="205.163.36.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="19.216.73.73"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.121.105.92" dst_port="53"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="172.16.0.66"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.121.111.104" src_port="53"/>
            <filter dst_ip="194.121.111.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.97.158.219"/>
        </slice>
        <from usec="0" sec="1260594000"/>
        <to usec="0" sec="1260594046"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="21.203.21.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594271"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="21.203.21.168" src_port="80"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594271"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.142.60.211" src_port="80"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594271"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.142.60.211" src_port="500" dst_port="33"/>
        </slice>
        <from usec="0" sec="1260594405"/>
        <to usec="0" sec="1260594451"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="21.203.21.168" src_port="500"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594676"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.142.60.211" src_port="500"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594856"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="215.142.60.211" src_port="500" dst_port="19969"/>
            <filter src_ip="26.242.22.21" src_port="500" dst_port="19969"/>
        </slice>
        <from usec="0" sec="1260594405"/>
        <to usec="0" sec="1260594451"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="21.203.21.143" src_port="53" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1260594405"/>
        <to usec="0" sec="1260594541"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="59.248.49.109" src_port="80" dst_port="3072"/>
            <filter src_ip="59.248.49.109" src_port="80" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1260594225"/>
        <to usec="0" sec="1260594856"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.140.150.20" src_port="53"/>
        </slice>
        <from usec="0" sec="1260594630"/>
        <to usec="0" sec="1260594676"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="21.203.21.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1260594630"/>
        <to usec="0" sec="1260594676"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="21.203.21.168" src_port="80"/>
        </slice>
        <from usec="0" sec="1260594630"/>
        <to usec="0" sec="1260594676"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.193.92.104"/>
        </slice>
        <from usec="0" sec="1260594720"/>
        <to usec="0" sec="1260594766"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.193.240.247"/>
        </slice>
        <from usec="0" sec="1260594720"/>
        <to usec="0" sec="1260594766"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.193.240.227"/>
        </slice>
        <from usec="0" sec="1260594720"/>
        <to usec="0" sec="1260594766"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="20.28.100.135"/>
        </slice>
        <from usec="0" sec="1260594720"/>
        <to usec="0" sec="1260594766"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.193.229.25"/>
        </slice>
        <from usec="0" sec="1260594720"/>
        <to usec="0" sec="1260594766"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.142.60.211" src_port="80"/>
        </slice>
        <from usec="0" sec="1260594810"/>
        <to usec="0" sec="1260594856"/>
    </anomaly>
    <anomaly type="notice" value="0.698400,1.158260,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="53" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1260594810"/>
        <to usec="0" sec="1260594856"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.146.24.174"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.146.124.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.72.25.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="185.20.194.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="185.20.40.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.108.228.184"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.90.42.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.200.202.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.200.202.224"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.200.203.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="25.76.222.192"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.121.104.172" dst_ip="34.64.51.17" src_port="80" dst_port="50404"/>
            <filter src_ip="194.121.104.172" dst_ip="34.64.51.17" src_port="80" dst_port="50403"/>
        </slice>
        <from usec="0" sec="1260594438"/>
        <to usec="0" sec="1260594441"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.140.151.91" src_port="80"/>
            <filter dst_ip="168.140.151.91" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.456152,1.088770,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.121.104.172" dst_ip="132.44.174.192" src_port="80" dst_port="50735"/>
        </slice>
        <from usec="0" sec="1260594069"/>
        <to usec="0" sec="1260594079"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="201.211.202.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.200.202.236"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="220.149.176.75"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="20.173.172.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.173.168.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.741361,1.112650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="21.168.16.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
