<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="140.14.67.117" dst_ip="46.50.17.171" src_port="548" dst_port="50311" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322439"/>
        <to usec="0" sec="1262322443"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="36.153.139.236" dst_ip="209.164.108.12" src_port="80" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322325"/>
        <to usec="0" sec="1262322508"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.176.147" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322316"/>
        <to usec="0" sec="1262322845"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,010,1 0 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="92.72.51.132"/>
        </slice>
        <from usec="0" sec="1262322348"/>
        <to usec="0" sec="1262322352"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.32.230"/>
        </slice>
        <from usec="0" sec="1262322319"/>
        <to usec="0" sec="1262322393"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="93.64.166.69"/>
        </slice>
        <from usec="0" sec="1262322438"/>
        <to usec="0" sec="1262322442"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.67.105.133" dst_ip="197.37.140.13" src_port="5170" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322099"/>
        <to usec="0" sec="1262322323"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.25.48.3" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322424"/>
        <to usec="0" sec="1262322435"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="20.37.120.212"/>
        </slice>
        <from usec="0" sec="1262322430"/>
        <to usec="0" sec="1262322500"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.100.32"/>
        </slice>
        <from usec="0" sec="1262322302"/>
        <to usec="0" sec="1262322335"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="140.14.234.65" dst_ip="11.59.88.137" src_port="3642" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322359"/>
        <to usec="0" sec="1262322392"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.100.21"/>
        </slice>
        <from usec="0" sec="1262322102"/>
        <to usec="0" sec="1262322106"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.234.44.190" dst_ip="197.24.146.2" src_port="1256" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322350"/>
        <to usec="0" sec="1262322443"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="196.84.9.175" dst_ip="163.234.103.137" src_port="80" dst_port="52706" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322334"/>
        <to usec="0" sec="1262322337"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.234.98.146" dst_ip="221.0.130.171" src_port="1789" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322346"/>
        <to usec="0" sec="1262322358"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="89.138.17.167" dst_ip="163.234.103.31" src_port="24148" dst_port="3173" proto="udp"/>
        </slice>
        <from usec="0" sec="1262322324"/>
        <to usec="0" sec="1262322446"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.234.103.18" dst_ip="44.245.197.27" src_port="3060" dst_port="7100" proto="udp"/>
        </slice>
        <from usec="0" sec="1262322342"/>
        <to usec="0" sec="1262322450"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.162.166.215" dst_ip="208.108.254.201" src_port="1703" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322377"/>
        <to usec="0" sec="1262322380"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.36.164.177" dst_ip="208.108.254.201" src_port="60539" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322327"/>
        <to usec="0" sec="1262322330"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="21.100.24.101" dst_ip="208.108.240.141" src_port="44002" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322316"/>
        <to usec="0" sec="1262322352"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.103.46"/>
        </slice>
        <from usec="0" sec="1262322712"/>
        <to usec="0" sec="1262322717"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="6.212.21.235" dst_ip="208.108.242.54" src_port="51413" dst_port="38099" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322320"/>
        <to usec="0" sec="1262322323"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="140.14.37.198" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322328"/>
        <to usec="0" sec="1262322513"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.254.202.164" dst_ip="140.14.133.104" src_port="43081" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322368"/>
        <to usec="0" sec="1262322372"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.72.20.78" dst_ip="105.171.111.202" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322416"/>
        <to usec="0" sec="1262322427"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="163.234.103.120" dst_ip="197.24.146.1" src_port="2350" dst_port="1935"/>
            <filter src_ip="163.234.100.8" dst_ip="197.24.146.1" src_port="4618" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1262322319"/>
        <to usec="0" sec="1262322497"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.67.90.81" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322371"/>
        <to usec="0" sec="1262322428"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.141.144.160" dst_ip="209.67.105.239" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322376"/>
        <to usec="0" sec="1262322387"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="140.14.52.56" dst_ip="220.214.86.164" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322345"/>
        <to usec="0" sec="1262322379"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.103.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322319"/>
        <to usec="0" sec="1262322746"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.25.214.236" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322337"/>
        <to usec="0" sec="1262322414"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.166.162.254" dst_ip="208.108.253.83" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322406"/>
        <to usec="0" sec="1262322438"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="208.108.242.167" dst_ip="208.108.242.167" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322377"/>
        <to usec="0" sec="1262322845"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.234.176.152" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322377"/>
        <to usec="0" sec="1262322815"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="89.224.73.204" dst_ip="140.14.228.114" src_port="52020" dst_port="80"/>
            <filter src_ip="205.164.167.217" dst_ip="140.14.228.114"/>
            <filter src_ip="3.88.106.133" dst_ip="140.14.228.114" src_port="35213" dst_port="80"/>
            <filter src_ip="54.80.81.58" dst_ip="140.14.228.114" src_port="4076" dst_port="80"/>
        </slice>
        <from usec="0" sec="1262322337"/>
        <to usec="0" sec="1262322349"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.234.134.68"/>
        </slice>
        <from usec="0" sec="1262322337"/>
        <to usec="0" sec="1262322340"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="89.77.154.188" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322841"/>
        <to usec="0" sec="1262322875"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="180.50.193.81"/>
        </slice>
        <from usec="0" sec="1262322564"/>
        <to usec="0" sec="1262322628"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="180.111.134.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1262322301"/>
        <to usec="0" sec="1262322308"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.25.199.215"/>
        </slice>
        <from usec="0" sec="1262322429"/>
        <to usec="0" sec="1262322433"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="140.14.228.107"/>
        </slice>
        <from usec="0" sec="1262322317"/>
        <to usec="0" sec="1262322335"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="140.14.88.161"/>
        </slice>
        <from usec="0" sec="1262322325"/>
        <to usec="0" sec="1262322406"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="140.14.18.226"/>
        </slice>
        <from usec="0" sec="1262322412"/>
        <to usec="0" sec="1262322416"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.251.9.66"/>
        </slice>
        <from usec="0" sec="1262322325"/>
        <to usec="0" sec="1262322329"/>
    </anomaly>
    <anomaly type="notice" value="0.570159,1.273970,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.172.128.140"/>
        </slice>
        <from usec="0" sec="1262322427"/>
        <to usec="0" sec="1262322430"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="140.14.133.110"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322108"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.37.125.139"/>
        </slice>
        <from usec="0" sec="1262322004"/>
        <to usec="0" sec="1262322104"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.85.160.48"/>
        </slice>
        <from usec="0" sec="1262322059"/>
        <to usec="0" sec="1262322075"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.102.138"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322198"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.12.183.7"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322066"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.72.159.102"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322195"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.6.146.78"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322177"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="140.14.228.114"/>
        </slice>
        <from usec="0" sec="1262322008"/>
        <to usec="0" sec="1262322198"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.166.245.114"/>
        </slice>
        <from usec="0" sec="1262322121"/>
        <to usec="0" sec="1262322153"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="58.55.225.4"/>
        </slice>
        <from usec="0" sec="1262322159"/>
        <to usec="0" sec="1262322180"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.234.130.87" dst_ip="132.127.133.143" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="163.234.238.154"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322287"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.152.207.35"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322275"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.163.117.130"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322288"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,004,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="208.108.246.192"/>
        </slice>
        <from usec="0" sec="1262322003"/>
        <to usec="0" sec="1262322285"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="182.37.96.83"/>
        </slice>
        <from usec="0" sec="1262322120"/>
        <to usec="0" sec="1262322136"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.35.169.152"/>
        </slice>
        <from usec="0" sec="1262322169"/>
        <to usec="0" sec="1262322196"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.37.126.18"/>
        </slice>
        <from usec="0" sec="1262322181"/>
        <to usec="0" sec="1262322190"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="28.35.112.251"/>
        </slice>
        <from usec="0" sec="1262322208"/>
        <to usec="0" sec="1262322263"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.64.139.3"/>
        </slice>
        <from usec="0" sec="1262322251"/>
        <to usec="0" sec="1262322287"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.49.100.207"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322281"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,011,1 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="89.56.8.149" src_port="135" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322378"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="44.72.118.180"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322378"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.227.40.98"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322378"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="208.108.252.126"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322378"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.172.142.214" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322359"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.103.200"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322378"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="217.33.83.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322046"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.1.222"/>
        </slice>
        <from usec="0" sec="1262322005"/>
        <to usec="0" sec="1262322377"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.6.74.43"/>
        </slice>
        <from usec="0" sec="1262322112"/>
        <to usec="0" sec="1262322368"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322648"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322828"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.108.252.114" dst_port="80"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322549"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.227.46.114"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322468"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.24.80.33"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322440"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="13.20.68.243" dst_ip="163.234.103.137" src_port="1935" dst_port="52355"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322468"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.129.100"/>
        </slice>
        <from usec="0" sec="1262322004"/>
        <to usec="0" sec="1262322468"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.241.137.100"/>
        </slice>
        <from usec="0" sec="1262322007"/>
        <to usec="0" sec="1262322466"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="46.48.10.182"/>
        </slice>
        <from usec="0" sec="1262322046"/>
        <to usec="0" sec="1262322467"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="208.108.245.43"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322557"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.234.102.3"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322555"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.108.245.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322558"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.172.128.106" src_port="53"/>
            <filter src_ip="136.172.128.106" src_port="57255" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322647"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.227.32.113"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322558"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.22.87.192"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322737"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.14.152.7"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322554"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,002,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.108.246.192"/>
        </slice>
        <from usec="0" sec="1262322003"/>
        <to usec="0" sec="1262322553"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.145.100"/>
        </slice>
        <from usec="0" sec="1262322003"/>
        <to usec="0" sec="1262322553"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.6.174.220"/>
        </slice>
        <from usec="0" sec="1262322040"/>
        <to usec="0" sec="1262322539"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="105.171.111.89"/>
        </slice>
        <from usec="0" sec="1262322318"/>
        <to usec="0" sec="1262322540"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,999,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.234.204.61" dst_ip="196.85.140.245" dst_port="25"/>
        </slice>
        <from usec="0" sec="1262322323"/>
        <to usec="0" sec="1262322538"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.102.101.16"/>
        </slice>
        <from usec="0" sec="1262322423"/>
        <to usec="0" sec="1262322453"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="37.72.228.177"/>
        </slice>
        <from usec="0" sec="1262322544"/>
        <to usec="0" sec="1262322557"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.241.73.68"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322509"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="32.47.130.14"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322648"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.102.164"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322644"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.108.187.179"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322632"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.37.125.118"/>
        </slice>
        <from usec="0" sec="1262322008"/>
        <to usec="0" sec="1262322642"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.224.145.100"/>
        </slice>
        <from usec="0" sec="1262322131"/>
        <to usec="0" sec="1262322647"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.234.246.19"/>
        </slice>
        <from usec="0" sec="1262322139"/>
        <to usec="0" sec="1262322548"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.228.226.100"/>
        </slice>
        <from usec="0" sec="1262322157"/>
        <to usec="0" sec="1262322646"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.86.40.185"/>
        </slice>
        <from usec="0" sec="1262322490"/>
        <to usec="0" sec="1262322517"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.234.103.31"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.67.81.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322732"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.72.159.216"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.103.45"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322735"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="28.17.6.240"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322736"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="140.14.90.89"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322734"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="199.199.61.132"/>
        </slice>
        <from usec="0" sec="1262322006"/>
        <to usec="0" sec="1262322731"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.1.114.175" dst_ip="208.108.254.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322009"/>
        <to usec="0" sec="1262322737"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.180.53.175"/>
        </slice>
        <from usec="0" sec="1262322010"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.234.70.88"/>
        </slice>
        <from usec="0" sec="1262322027"/>
        <to usec="0" sec="1262322724"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="140.14.234.188"/>
        </slice>
        <from usec="0" sec="1262322051"/>
        <to usec="0" sec="1262322648"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.44.136"/>
        </slice>
        <from usec="0" sec="1262322437"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.37.140.136"/>
        </slice>
        <from usec="0" sec="1262322477"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.225.200.121"/>
        </slice>
        <from usec="0" sec="1262322657"/>
        <to usec="0" sec="1262322813"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="140.14.188.64"/>
        </slice>
        <from usec="0" sec="1262322690"/>
        <to usec="0" sec="1262322738"/>
    </anomaly>
    <anomaly type="notice" value="0.763498,1.185140,503,1 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.67.89.170" dst_ip="11.73.163.30" dst_port="80"/>
            <filter src_ip="209.67.89.170" dst_ip="11.73.219.233" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.176.152" src_port="80"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322828"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.14.225.31"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322820"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="218.112.105.249"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322827"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.117.204.55"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322828"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="44.64.17.180"/>
        </slice>
        <from usec="0" sec="1262322001"/>
        <to usec="0" sec="1262322823"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="36.153.139.246"/>
        </slice>
        <from usec="0" sec="1262322004"/>
        <to usec="0" sec="1262322821"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="32.20.101.197"/>
        </slice>
        <from usec="0" sec="1262322007"/>
        <to usec="0" sec="1262322823"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.144.40.17"/>
        </slice>
        <from usec="0" sec="1262322012"/>
        <to usec="0" sec="1262322807"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.225.149.103"/>
        </slice>
        <from usec="0" sec="1262322017"/>
        <to usec="0" sec="1262322803"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="22.202.161.128"/>
        </slice>
        <from usec="0" sec="1262322018"/>
        <to usec="0" sec="1262322825"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.186.191.96"/>
        </slice>
        <from usec="0" sec="1262322096"/>
        <to usec="0" sec="1262322719"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="140.14.230.146" dst_ip="197.4.80.151" dst_port="80"/>
            <filter src_ip="140.14.230.146" dst_ip="197.4.80.151" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1262322473"/>
        <to usec="0" sec="1262322822"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.206.232.42"/>
        </slice>
        <from usec="0" sec="1262322521"/>
        <to usec="0" sec="1262322782"/>
    </anomaly>
    <anomaly type="notice" value="0.589540,1.233760,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="21.100.3.142" dst_ip="163.234.176.147" dst_port="80"/>
            <filter src_ip="205.181.53.164" dst_ip="163.234.176.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="1262322328"/>
        <to usec="0" sec="1262322845"/>
    </anomaly>
    <anomaly type="notice" value="0.450188,1.258720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.222.138.98"/>
        </slice>
        <from usec="0" sec="1262322670"/>
        <to usec="0" sec="1262322805"/>
    </anomaly>
    <anomaly type="notice" value="0.630445,1.247840,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="217.142.116.81" src_port="53"/>
            <filter dst_ip="208.108.249.178" src_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322648"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.108.242.105"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.108.244.112" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.108.249.178" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="170.241.146.154" src_port="80"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="170.241.32.47" src_port="80"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1043" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3259" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.630445,1.247840,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.30.27.37" src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322558"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="20129" dst_port="20129"/>
        </slice>
        <from usec="0" sec="1262322045"/>
        <to usec="0" sec="1262322091"/>
    </anomaly>
    <anomaly type="notice" value="0.630445,1.247840,020,0 0 0 1 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="208.108.241.26"/>
        </slice>
        <from usec="0" sec="1262322002"/>
        <to usec="0" sec="1262322823"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,020,0 0 0 0 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="136.25.96.62"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="217.55.217.200"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="217.55.217.204"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="140.14.40.141"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.795508,1.199780,999,0 0 0 1 0 0 1 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="208.108.242.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.67.74.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.630445,1.247840,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="217.108.55.5" src_port="53"/>
            <filter src_ip="217.108.55.32" src_port="53"/>
            <filter src_ip="217.108.55.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1262322000"/>
        <to usec="0" sec="1262322827"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.14.104.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.108.246.129" src_port="7282"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.14.225.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.14.153.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="140.14.162.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.67.90.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.210.247.168" src_port="6314"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.25.199.140" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.138.100.181" src_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.234.130.87" dst_ip="132.127.133.143" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="140.14.52.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="2.4.145.195" src_port="6661"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.25.199.215" dst_port="25"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.108.243.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.66.70.39" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="37.30.27.37" src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.6.18.59" src_port="1043" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.612361,1.287610,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.67.240.231" src_port="3259" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1262322765"/>
        <to usec="0" sec="1262322811"/>
    </anomaly>
    <anomaly type="notice" value="0.781254,1.241090,053,0 0 0 0 0 0 1 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="140.14.5.220" dst_ip="206.113.24.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.6.27.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="157.117.205.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.225.149.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.234.82.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661846,1.211090,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.67.91.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="208.108.252.123" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="208.108.254.167" dst_ip="217.173.125.218" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.48.245.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.781254,1.241090,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.219.190.125" src_port="1037" dst_port="1434"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="93.184.92.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="89.194.85.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661846,1.211090,999,0 0 0 1 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="11.210.162.33" dst_ip="208.108.242.54" src_port="51754" dst_port="53812"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.748634,1.226940,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="163.234.103.172" src_port="4305"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.225.252.237" dst_ip="142.109.198.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="140.14.40.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.748634,1.226940,504,1 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="58.137.201.153" dst_ip="136.0.231.8" dst_port="443"/>
            <filter src_ip="42.148.94.129" dst_ip="136.0.231.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="136.133.230.86"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.234.103.121"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.234.103.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.644643,1.252030,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="216.109.203.122"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.748634,1.226940,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.234.102.150" dst_ip="18.26.24.10" src_port="50676" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
