<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.12.173.114" dst_ip="37.129.253.191" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1265087402"/>
        <to usec="0" sec="1265087554"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.107.70.193"/>
        </slice>
        <from usec="0" sec="1265087191"/>
        <to usec="0" sec="1265087210"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.12.1.195" dst_ip="106.102.18.17" src_port="80" dst_port="1178" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087283"/>
        <to usec="0" sec="1265087348"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.182.244" dst_ip="214.74.12.136" src_port="1830" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087187"/>
        <to usec="0" sec="1265087393"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.5.73" dst_ip="47.224.215.77" src_port="2834" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087014"/>
        <to usec="0" sec="1265087019"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.233.55"/>
        </slice>
        <from usec="0" sec="1265087642"/>
        <to usec="0" sec="1265087666"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.45.17"/>
        </slice>
        <from usec="0" sec="1265087355"/>
        <to usec="0" sec="1265087415"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="175.12.1.226" dst_ip="21.232.220.163" src_port="3210" dst_port="38555" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087396"/>
        <to usec="0" sec="1265087662"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.193.132.18" dst_ip="28.36.145.128" src_port="58605" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086867"/>
        <to usec="0" sec="1265086949"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.12.114.163" dst_ip="209.207.210.81" src_port="1315" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087043"/>
        <to usec="0" sec="1265087333"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="44.29.139.169"/>
        </slice>
        <from usec="0" sec="1265087345"/>
        <to usec="0" sec="1265087348"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.56.79" dst_ip="29.18.219.51" src_port="80" dst_port="54695" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086933"/>
        <to usec="0" sec="1265086936"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.12.158.64"/>
        </slice>
        <from usec="0" sec="1265087077"/>
        <to usec="0" sec="1265087664"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.193.167.165" dst_ip="0.58.175.148" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087167"/>
        <to usec="0" sec="1265087219"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="175.12.1.133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086877"/>
        <to usec="0" sec="1265087605"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.94.214.99" dst_ip="214.168.188.236" src_port="80" dst_port="52174" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087019"/>
        <to usec="0" sec="1265087021"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.142.6" dst_ip="1.131.91.166" src_port="80" dst_port="15867" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087021"/>
        <to usec="0" sec="1265087023"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.132.210.238" dst_ip="175.12.83.213" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087290"/>
        <to usec="0" sec="1265087664"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.195.235" dst_ip="29.130.175.77" src_port="1757" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087646"/>
        <to usec="0" sec="1265087649"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.41.153"/>
        </slice>
        <from usec="0" sec="1265087287"/>
        <to usec="0" sec="1265087290"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.88.200.219" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087117"/>
        <to usec="0" sec="1265087421"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.88.5.14" dst_ip="37.132.84.105" src_port="4561" dst_port="554" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087218"/>
        <to usec="0" sec="1265087294"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.238.8" dst_ip="17.172.163.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087537"/>
        <to usec="0" sec="1265087540"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.198.112.252" dst_ip="172.129.229.45" src_port="80" dst_port="1080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087123"/>
        <to usec="0" sec="1265087126"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.12.238.21" dst_ip="211.9.215.163" src_port="33092" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087127"/>
        <to usec="0" sec="1265087394"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.160.175.112" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087249"/>
        <to usec="0" sec="1265087312"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.246.158.87" dst_ip="215.83.211.86" src_port="3676" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265086816"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.11.157"/>
        </slice>
        <from usec="0" sec="1265087555"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.12.120.32" dst_ip="7.114.75.83" src_port="60777" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087341"/>
        <to usec="0" sec="1265087398"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.120.36" dst_ip="4.172.8.52" src_port="51136" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087551"/>
        <to usec="0" sec="1265087553"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="155.67.107.145"/>
        </slice>
        <from usec="0" sec="1265087113"/>
        <to usec="0" sec="1265087408"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.68.19" dst_ip="205.4.137.122" src_port="48059" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087072"/>
        <to usec="0" sec="1265087075"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,501,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.2.121.122" dst_ip="145.208.209.192" src_port="21" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087525"/>
        <to usec="0" sec="1265087528"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="32.71.105.154" dst_ip="149.88.196.31" src_port="23134" dst_port="15000" proto="udp"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265086819"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.88.2.152" dst_ip="219.210.114.169" src_port="1273" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086865"/>
        <to usec="0" sec="1265086868"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.205.213" dst_ip="96.243.222.7" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086973"/>
        <to usec="0" sec="1265086975"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="20.57.177.243"/>
        </slice>
        <from usec="0" sec="1265087249"/>
        <to usec="0" sec="1265087251"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.83.196.4"/>
        </slice>
        <from usec="0" sec="1265087162"/>
        <to usec="0" sec="1265087203"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.103.217" dst_ip="27.27.168.161" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087548"/>
        <to usec="0" sec="1265087551"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.52.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265087164"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.193.16.226" dst_ip="1.19.95.227" src_port="3982" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087022"/>
        <to usec="0" sec="1265087552"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.32.88.146" dst_ip="59.14.165.26" src_port="52037" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087166"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.83.200.44" dst_ip="106.203.26.159" src_port="1067" dst_port="52144" proto="udp"/>
        </slice>
        <from usec="0" sec="1265087349"/>
        <to usec="0" sec="1265087425"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="90.10.73.214" dst_ip="175.12.237.40" src_port="6601" dst_port="16921" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087107"/>
        <to usec="0" sec="1265087426"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.88.14.189" dst_ip="209.74.210.147" src_port="1271" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087331"/>
        <to usec="0" sec="1265087333"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.14.187" dst_ip="214.161.64.242" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087197"/>
        <to usec="0" sec="1265087217"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.3.235" dst_ip="91.224.230.119" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087245"/>
        <to usec="0" sec="1265087341"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="91.24.75.75" dst_ip="175.12.241.155" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087250"/>
        <to usec="0" sec="1265087252"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.12.237.175" dst_ip="221.113.6.113" src_port="59889" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087215"/>
        <to usec="0" sec="1265087365"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="21.101.133.230"/>
        </slice>
        <from usec="0" sec="1265087557"/>
        <to usec="0" sec="1265087560"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="175.12.252.236"/>
        </slice>
        <from usec="0" sec="1265087548"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.240.165.171" dst_ip="175.12.114.137" src_port="80" dst_port="2643" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087208"/>
        <to usec="0" sec="1265087210"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.106.105.104" dst_ip="215.83.213.194" src_port="43876" dst_port="13314" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087190"/>
        <to usec="0" sec="1265087318"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.12.1.195" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087664"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.207.210.81" dst_ip="175.12.114.163" src_port="443" dst_port="1315"/>
        </slice>
        <from usec="0" sec="1265086818"/>
        <to usec="0" sec="1265087318"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.55.134" dst_ip="196.70.65.120" src_port="3951" dst_port="80"/>
            <filter src_ip="149.88.55.134" dst_ip="196.70.65.120" src_port="3949" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087324"/>
        <to usec="0" sec="1265087327"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="221.113.6.56" dst_ip="221.113.6.56" src_port="52146" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087304"/>
        <to usec="0" sec="1265087375"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="199.87.202.217" dst_ip="199.87.202.217" src_port="33883" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087288"/>
        <to usec="0" sec="1265087293"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="178.136.40.104" dst_port="22451" proto="icmp"/>
        </slice>
        <from usec="0" sec="1265087288"/>
        <to usec="0" sec="1265087293"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.193.162.241" dst_ip="28.33.99.13" src_port="49281" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087424"/>
        <to usec="0" sec="1265087426"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.118.77.13" dst_ip="215.83.212.100" src_port="44591" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087550"/>
        <to usec="0" sec="1265087552"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.30.151.16" dst_ip="149.88.219.192" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087661"/>
        <to usec="0" sec="1265087664"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.130.32.53"/>
        </slice>
        <from usec="0" sec="1265087315"/>
        <to usec="0" sec="1265087320"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.103.104" dst_ip="32.21.11.135" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087541"/>
        <to usec="0" sec="1265087544"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.166.65.69" dst_ip="149.88.24.25" dst_port="80"/>
            <filter src_ip="201.166.65.69" dst_ip="149.88.24.29" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087167"/>
        <to usec="0" sec="1265087425"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="175.12.202.176"/>
        </slice>
        <from usec="0" sec="1265087216"/>
        <to usec="0" sec="1265087219"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.73.190" dst_ip="91.224.242.183" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086948"/>
        <to usec="0" sec="1265087365"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.73.186" dst_ip="156.4.207.246" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087240"/>
        <to usec="0" sec="1265087322"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.0.27"/>
        </slice>
        <from usec="0" sec="1265087555"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.32.87.55"/>
        </slice>
        <from usec="0" sec="1265087405"/>
        <to usec="0" sec="1265087408"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.52.253" dst_ip="214.161.96.84" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086932"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.32.88.204"/>
        </slice>
        <from usec="0" sec="1265087362"/>
        <to usec="0" sec="1265087365"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.11.170" dst_ip="153.192.232.70" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087514"/>
        <to usec="0" sec="1265087546"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.219.146"/>
        </slice>
        <from usec="0" sec="1265087541"/>
        <to usec="0" sec="1265087544"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.153.246.180"/>
        </slice>
        <from usec="0" sec="1265086939"/>
        <to usec="0" sec="1265086969"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="47.116.117.215" src_port="20927" dst_port="2425" proto="udp"/>
        </slice>
        <from usec="0" sec="1265087130"/>
        <to usec="0" sec="1265087131"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.137.46.134" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086938"/>
        <to usec="0" sec="1265086948"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.170.81.15" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265086967"/>
        <to usec="0" sec="1265086976"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.53.226.130" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087135"/>
        <to usec="0" sec="1265087143"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="212.39.128.213" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087321"/>
        <to usec="0" sec="1265087323"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.168.165.47"/>
        </slice>
        <from usec="0" sec="1265087178"/>
        <to usec="0" sec="1265087183"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.137.221.199" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087066"/>
        <to usec="0" sec="1265087077"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.154.115.45" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087579"/>
        <to usec="0" sec="1265087586"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.83.196.26"/>
        </slice>
        <from usec="0" sec="1265087304"/>
        <to usec="0" sec="1265087307"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="212.21.144.73" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087047"/>
        <to usec="0" sec="1265087050"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.97.192.195" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087140"/>
        <to usec="0" sec="1265087148"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.191.146"/>
        </slice>
        <from usec="0" sec="1265087400"/>
        <to usec="0" sec="1265087403"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="17.49.130.47" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1265087636"/>
        <to usec="0" sec="1265087639"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="106.203.26.159"/>
        </slice>
        <from usec="0" sec="1265086879"/>
        <to usec="0" sec="1265087255"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.132.210.225"/>
        </slice>
        <from usec="0" sec="1265087559"/>
        <to usec="0" sec="1265087562"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="178.109.65.223" proto="icmp"/>
        </slice>
        <from usec="0" sec="1265087035"/>
        <to usec="0" sec="1265087039"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.193.16.39"/>
        </slice>
        <from usec="0" sec="1265087343"/>
        <to usec="0" sec="1265087346"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.193.165.85"/>
        </slice>
        <from usec="0" sec="1265087337"/>
        <to usec="0" sec="1265087340"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="36.28.240.209"/>
        </slice>
        <from usec="0" sec="1265086966"/>
        <to usec="0" sec="1265086969"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.32.251.243"/>
        </slice>
        <from usec="0" sec="1265087636"/>
        <to usec="0" sec="1265087639"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.132.218.13"/>
        </slice>
        <from usec="0" sec="1265087178"/>
        <to usec="0" sec="1265087181"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.11.160"/>
        </slice>
        <from usec="0" sec="1265087292"/>
        <to usec="0" sec="1265087295"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.168.41.170"/>
        </slice>
        <from usec="0" sec="1265086869"/>
        <to usec="0" sec="1265086872"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="223.5.175.158"/>
        </slice>
        <from usec="0" sec="1265087224"/>
        <to usec="0" sec="1265087227"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.24.29"/>
        </slice>
        <from usec="0" sec="1265087548"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="218.173.39.168"/>
        </slice>
        <from usec="0" sec="1265086865"/>
        <to usec="0" sec="1265086868"/>
    </anomaly>
    <anomaly type="notice" value="0.501214,1.465140,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.168.190.85"/>
        </slice>
        <from usec="0" sec="1265087313"/>
        <to usec="0" sec="1265087316"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.88.219.98" dst_ip="161.81.119.120" src_port="1105" dst_port="443"/>
            <filter src_ip="149.88.219.98" dst_ip="209.207.210.82" src_port="1103" dst_port="443"/>
            <filter src_ip="149.88.219.98" dst_ip="161.81.119.20" src_port="1034" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087180"/>
        <to usec="0" sec="1265087556"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.155.131" dst_ip="30.167.99.208" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087510"/>
        <to usec="0" sec="1265087515"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.184.134" dst_ip="45.75.48.254" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087169"/>
        <to usec="0" sec="1265087455"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.55.52.155" dst_ip="215.83.216.123" src_port="50393" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087306"/>
        <to usec="0" sec="1265087353"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.193.64.6" dst_ip="206.165.48.41" src_port="80" dst_port="62944"/>
        </slice>
        <from usec="0" sec="1265086933"/>
        <to usec="0" sec="1265086977"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.193.132.2" dst_ip="209.207.210.105" src_port="1761" dst_port="443"/>
        </slice>
        <from usec="0" sec="1265087240"/>
        <to usec="0" sec="1265087264"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.193.88.115" dst_port="25"/>
        </slice>
        <from usec="0" sec="1265087640"/>
        <to usec="0" sec="1265087668"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.83.218.96" dst_ip="209.79.211.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087289"/>
        <to usec="0" sec="1265087643"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.212.13.39" dst_ip="21.232.220.141" src_port="80" dst_port="55577"/>
        </slice>
        <from usec="0" sec="1265087101"/>
        <to usec="0" sec="1265087103"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.132.218.38" dst_ip="149.88.128.92" src_port="443" dst_port="3433"/>
        </slice>
        <from usec="0" sec="1265087096"/>
        <to usec="0" sec="1265087109"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.3.15" dst_ip="28.36.145.188" src_port="3958" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087554"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.193.101.244" dst_ip="209.207.210.34" src_port="2732" dst_port="443"/>
        </slice>
        <from usec="0" sec="1265087245"/>
        <to usec="0" sec="1265087265"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.88.41.176" dst_ip="37.132.84.105" src_port="2693" dst_port="554"/>
        </slice>
        <from usec="0" sec="1265087039"/>
        <to usec="0" sec="1265087228"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.11.0" dst_ip="214.161.64.210" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087085"/>
        <to usec="0" sec="1265087210"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.144.236" dst_ip="151.121.70.189" src_port="3503" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087032"/>
        <to usec="0" sec="1265087035"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.83.196.42" dst_ip="214.49.180.248" src_port="55962" dst_port="80"/>
            <filter src_ip="215.83.196.42" dst_ip="214.49.180.248" src_port="51002" dst_port="80"/>
            <filter src_ip="215.83.196.42" dst_ip="214.49.180.248" src_port="46071" dst_port="80"/>
            <filter src_ip="215.83.196.42" dst_ip="214.49.180.248" src_port="41701" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086820"/>
        <to usec="0" sec="1265087517"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,503,1 1 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="25.62.172.61" dst_ip="215.83.214.31" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087266"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.239.29.237" dst_ip="149.88.142.6" src_port="2579" dst_port="80"/>
            <filter src_ip="46.239.29.237" dst_ip="149.88.142.6" src_port="2578" dst_port="80"/>
            <filter src_ip="46.239.29.237" dst_ip="149.88.142.6" src_port="2577" dst_port="80"/>
            <filter src_ip="46.239.29.237" dst_ip="149.88.142.6" src_port="2576" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087297"/>
        <to usec="0" sec="1265087299"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.12.83.216" dst_ip="88.41.54.44" src_port="2491" dst_port="1935"/>
            <filter src_ip="175.12.83.216" dst_ip="88.41.54.44" src_port="2451" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1265086957"/>
        <to usec="0" sec="1265087554"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="145.193.16.169" dst_port="443"/>
            <filter dst_ip="165.132.218.13" dst_port="443"/>
            <filter dst_ip="165.132.218.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087629"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.131.56" dst_ip="207.84.34.79" src_port="1306" dst_port="80"/>
            <filter src_ip="149.88.131.56" dst_ip="207.84.34.79" src_port="1304" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087693"/>
        <to usec="0" sec="1265087696"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,901,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.88.102.38" src_port="39652"/>
        </slice>
        <from usec="0" sec="1265087052"/>
        <to usec="0" sec="1265087062"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.111.20.83" dst_ip="215.83.220.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087043"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.12.1.202" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086876"/>
        <to usec="0" sec="1265087700"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,999,1 1 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="175.12.91.58" dst_ip="197.118.77.35" dst_port="25"/>
            <filter src_ip="215.83.210.136" dst_ip="197.118.77.35" dst_port="25"/>
        </slice>
        <from usec="0" sec="1265086827"/>
        <to usec="0" sec="1265086996"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="214.198.231.142" dst_ip="215.83.205.95" src_port="56820" dst_port="443"/>
            <filter src_ip="214.198.231.143" dst_ip="215.83.205.95" src_port="49026" dst_port="443"/>
            <filter src_ip="91.55.52.155" dst_ip="215.83.205.95" src_port="35212" dst_port="443"/>
        </slice>
        <from usec="0" sec="1265087042"/>
        <to usec="0" sec="1265087045"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.89.5" dst_ip="207.148.15.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087308"/>
        <to usec="0" sec="1265087330"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.236.188" dst_ip="198.172.179.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087340"/>
        <to usec="0" sec="1265087342"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.193.17.227" dst_ip="161.42.66.183" src_port="3402" dst_port="80"/>
            <filter src_ip="145.193.17.227" dst_ip="161.42.66.183" src_port="3401" dst_port="80"/>
            <filter src_ip="145.193.17.227" dst_ip="161.42.66.183" src_port="3400" dst_port="80"/>
            <filter src_ip="145.193.17.227" dst_ip="161.42.66.183" src_port="3399" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087341"/>
        <to usec="0" sec="1265087344"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.236.210" dst_ip="196.74.134.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087359"/>
        <to usec="0" sec="1265087384"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,503,1 1 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="149.88.172.150" dst_ip="209.65.44.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087233"/>
        <to usec="0" sec="1265087388"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.137.101.159" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086870"/>
        <to usec="0" sec="1265086880"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.178.136.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086873"/>
        <to usec="0" sec="1265086884"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.52.194.55" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087189"/>
        <to usec="0" sec="1265087199"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.55.201.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087695"/>
        <to usec="0" sec="1265087700"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.22.168.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087469"/>
        <to usec="0" sec="1265087476"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="198.222.36.81" dst_port="445"/>
            <filter src_ip="198.222.36.81" dst_port="139"/>
        </slice>
        <from usec="0" sec="1265087096"/>
        <to usec="0" sec="1265087136"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.46.39.74" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087067"/>
        <to usec="0" sec="1265087078"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="26.126.25.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086924"/>
        <to usec="0" sec="1265086934"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.52.2.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087378"/>
        <to usec="0" sec="1265087388"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="177.15.130.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087632"/>
        <to usec="0" sec="1265087640"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.33.209.198" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087637"/>
        <to usec="0" sec="1265087648"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.110.2.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087539"/>
        <to usec="0" sec="1265087545"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="2.5.54.83" dst_port="139"/>
            <filter src_ip="2.5.54.83" dst_port="445"/>
        </slice>
        <from usec="0" sec="1265087014"/>
        <to usec="0" sec="1265087054"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.53.233.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087510"/>
        <to usec="0" sec="1265087520"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.136.82.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086815"/>
        <to usec="0" sec="1265087088"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.109.65.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087034"/>
        <to usec="0" sec="1265087039"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.137.117.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087339"/>
        <to usec="0" sec="1265087349"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="213.22.165.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265087208"/>
        <to usec="0" sec="1265087219"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="176.4.32.120"/>
        </slice>
        <from usec="0" sec="1265087023"/>
        <to usec="0" sec="1265087058"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="178.53.82.42"/>
        </slice>
        <from usec="0" sec="1265087019"/>
        <to usec="0" sec="1265087024"/>
    </anomaly>
    <anomaly type="notice" value="0.765679,1.467350,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="2.5.54.83"/>
        </slice>
        <from usec="0" sec="1265087014"/>
        <to usec="0" sec="1265087054"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.32.86.229" dst_ip="196.111.39.192" src_port="4955" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086936"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="33.5.34.219"/>
        </slice>
        <from usec="0" sec="1265086818"/>
        <to usec="0" sec="1265086902"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.52.170.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086859"/>
        <to usec="0" sec="1265086870"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.202.166.24"/>
        </slice>
        <from usec="0" sec="1265086896"/>
        <to usec="0" sec="1265086905"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.168.41.50"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086997"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.12.1.194"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086875"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.24.113.42"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265086908"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="92.213.131.168"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265086999"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.0.19.60"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265086997"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.112.134.145"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265086997"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="149.88.56.178"/>
        </slice>
        <from usec="0" sec="1265086807"/>
        <to usec="0" sec="1265086988"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="197.118.73.57"/>
        </slice>
        <from usec="0" sec="1265086809"/>
        <to usec="0" sec="1265086978"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="137.221.155.148"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="25.62.172.61"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087083"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="129.11.166.59"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086913"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="30.84.144.133"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.88.219.74" dst_ip="17.1.241.252" src_port="49182" dst_port="443"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087668"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.12.238.38"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087269"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.160.137.34"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087081"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="215.17.129.145"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="192.43.34.37"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.83.4.78"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087077"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.90.32.11"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter dst_ip="221.139.37.124"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087088"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="175.12.237.174" src_port="13656" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087666"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.193.68.217"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087085"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.12.92.79" src_port="36662"/>
            <filter src_ip="175.12.92.79" dst_ip="207.148.101.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087558"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.65.9"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087072"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.88.182.196"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087084"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.241.100"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.22"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087078"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.89.56.111"/>
        </slice>
        <from usec="0" sec="1265086807"/>
        <to usec="0" sec="1265087081"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.135.43.31"/>
        </slice>
        <from usec="0" sec="1265086809"/>
        <to usec="0" sec="1265087071"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,501,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="214.160.174.7"/>
        </slice>
        <from usec="0" sec="1265086810"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.193.69.23"/>
        </slice>
        <from usec="0" sec="1265086811"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.83.213.208"/>
        </slice>
        <from usec="0" sec="1265086812"/>
        <to usec="0" sec="1265086930"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.53"/>
        </slice>
        <from usec="0" sec="1265086813"/>
        <to usec="0" sec="1265087087"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.221.133"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265087066"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.9.29.162"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265086990"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.12.120.220"/>
        </slice>
        <from usec="0" sec="1265086821"/>
        <to usec="0" sec="1265087017"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.160.150.8"/>
        </slice>
        <from usec="0" sec="1265086823"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.117.240.127"/>
        </slice>
        <from usec="0" sec="1265086824"/>
        <to usec="0" sec="1265087020"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="214.168.44.198"/>
        </slice>
        <from usec="0" sec="1265086832"/>
        <to usec="0" sec="1265087085"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.12.114.44"/>
        </slice>
        <from usec="0" sec="1265086837"/>
        <to usec="0" sec="1265087008"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.120.6.121"/>
        </slice>
        <from usec="0" sec="1265086837"/>
        <to usec="0" sec="1265086945"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.45.144.220"/>
        </slice>
        <from usec="0" sec="1265086838"/>
        <to usec="0" sec="1265087052"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.12.238.17"/>
        </slice>
        <from usec="0" sec="1265086844"/>
        <to usec="0" sec="1265087086"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="211.229.183.138"/>
        </slice>
        <from usec="0" sec="1265086851"/>
        <to usec="0" sec="1265087088"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="24.70.85.28"/>
        </slice>
        <from usec="0" sec="1265086854"/>
        <to usec="0" sec="1265087033"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.193.206.162"/>
        </slice>
        <from usec="0" sec="1265086859"/>
        <to usec="0" sec="1265087043"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.40.235.217"/>
        </slice>
        <from usec="0" sec="1265086862"/>
        <to usec="0" sec="1265087075"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.245"/>
        </slice>
        <from usec="0" sec="1265086865"/>
        <to usec="0" sec="1265087064"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.83.209.43"/>
        </slice>
        <from usec="0" sec="1265086865"/>
        <to usec="0" sec="1265087038"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="90.194.48.103"/>
        </slice>
        <from usec="0" sec="1265086878"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.88.27.180"/>
        </slice>
        <from usec="0" sec="1265086883"/>
        <to usec="0" sec="1265087066"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.231.210.29"/>
        </slice>
        <from usec="0" sec="1265086888"/>
        <to usec="0" sec="1265086933"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.86.157.233"/>
        </slice>
        <from usec="0" sec="1265086899"/>
        <to usec="0" sec="1265086918"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.12.59.209"/>
        </slice>
        <from usec="0" sec="1265086901"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="20.38.13.87"/>
        </slice>
        <from usec="0" sec="1265086912"/>
        <to usec="0" sec="1265086976"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.36.81.191"/>
        </slice>
        <from usec="0" sec="1265086921"/>
        <to usec="0" sec="1265086931"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="207.4.160.47"/>
        </slice>
        <from usec="0" sec="1265086924"/>
        <to usec="0" sec="1265087173"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.168.44.236"/>
        </slice>
        <from usec="0" sec="1265086938"/>
        <to usec="0" sec="1265087069"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.213.219"/>
        </slice>
        <from usec="0" sec="1265086948"/>
        <to usec="0" sec="1265087048"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="172.167.7.6"/>
        </slice>
        <from usec="0" sec="1265086955"/>
        <to usec="0" sec="1265087018"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.232.146.176"/>
        </slice>
        <from usec="0" sec="1265086974"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="93.186.42.21"/>
        </slice>
        <from usec="0" sec="1265087002"/>
        <to usec="0" sec="1265087007"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.193.196.189"/>
        </slice>
        <from usec="0" sec="1265087005"/>
        <to usec="0" sec="1265087042"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.0.130"/>
        </slice>
        <from usec="0" sec="1265087010"/>
        <to usec="0" sec="1265087066"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="2.76.48.227"/>
        </slice>
        <from usec="0" sec="1265087017"/>
        <to usec="0" sec="1265087076"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.108.8.173"/>
        </slice>
        <from usec="0" sec="1265087022"/>
        <to usec="0" sec="1265087034"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.161.64.149"/>
        </slice>
        <from usec="0" sec="1265087030"/>
        <to usec="0" sec="1265087060"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.55.168"/>
        </slice>
        <from usec="0" sec="1265087041"/>
        <to usec="0" sec="1265087068"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.58.100.65"/>
        </slice>
        <from usec="0" sec="1265087054"/>
        <to usec="0" sec="1265087078"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.151.78.244"/>
        </slice>
        <from usec="0" sec="1265087060"/>
        <to usec="0" sec="1265087065"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.88.119"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087113"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="35.2.137.110"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="90.17.88.236"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087176"/>
    </anomaly>
    <anomaly type="notice" value="0.911965,1.478030,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.88.240.103" src_port="53"/>
            <filter src_ip="149.88.240.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087539"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.53.153.115"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="199.139.196.21"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087059"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="37.88.49.48"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.12.46.181"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.12.134.75"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087170"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.0.219.199"/>
        </slice>
        <from usec="0" sec="1265086807"/>
        <to usec="0" sec="1265087442"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,503,1 0 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="214.168.166.46" dst_ip="214.161.64.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086814"/>
        <to usec="0" sec="1265087082"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.12.238.56"/>
        </slice>
        <from usec="0" sec="1265086821"/>
        <to usec="0" sec="1265087177"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="175.12.238.17"/>
        </slice>
        <from usec="0" sec="1265086844"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.237.99.231"/>
        </slice>
        <from usec="0" sec="1265086880"/>
        <to usec="0" sec="1265087004"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.11.134"/>
        </slice>
        <from usec="0" sec="1265086925"/>
        <to usec="0" sec="1265087177"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.11.134"/>
        </slice>
        <from usec="0" sec="1265086925"/>
        <to usec="0" sec="1265087177"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.101.81.80"/>
        </slice>
        <from usec="0" sec="1265086983"/>
        <to usec="0" sec="1265087026"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.83.216.101"/>
        </slice>
        <from usec="0" sec="1265086990"/>
        <to usec="0" sec="1265087080"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="4.170.91.52"/>
        </slice>
        <from usec="0" sec="1265087012"/>
        <to usec="0" sec="1265087029"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.46.34.7"/>
        </slice>
        <from usec="0" sec="1265087051"/>
        <to usec="0" sec="1265087056"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.219.100" dst_ip="200.226.209.210" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087056"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="28.33.28.34"/>
        </slice>
        <from usec="0" sec="1265087083"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.207.210.48"/>
        </slice>
        <from usec="0" sec="1265087083"/>
        <to usec="0" sec="1265087149"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.242.200.16"/>
        </slice>
        <from usec="0" sec="1265087109"/>
        <to usec="0" sec="1265087153"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.170.119.62"/>
        </slice>
        <from usec="0" sec="1265087128"/>
        <to usec="0" sec="1265087147"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="59.165.42.91"/>
        </slice>
        <from usec="0" sec="1265087135"/>
        <to usec="0" sec="1265087147"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="20.76.245.184"/>
        </slice>
        <from usec="0" sec="1265087136"/>
        <to usec="0" sec="1265087141"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.90.102.52"/>
        </slice>
        <from usec="0" sec="1265087145"/>
        <to usec="0" sec="1265087164"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.154"/>
        </slice>
        <from usec="0" sec="1265087146"/>
        <to usec="0" sec="1265087162"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.193.205.80"/>
        </slice>
        <from usec="0" sec="1265087152"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.151.229.69"/>
        </slice>
        <from usec="0" sec="1265087167"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.168.186.177"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087269"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="210.221.66.114"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087267"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.18.219.233" dst_ip="145.32.88.204" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087262"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="43.17.185.223"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087268"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.207.210.41"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087269"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.88.150.236" src_port="62916"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,501,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.88.246.184"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087264"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.32.251.242"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087212"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.88.169.64"/>
        </slice>
        <from usec="0" sec="1265086808"/>
        <to usec="0" sec="1265087167"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.83.212.98"/>
        </slice>
        <from usec="0" sec="1265086813"/>
        <to usec="0" sec="1265087266"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.168.187.169"/>
        </slice>
        <from usec="0" sec="1265086815"/>
        <to usec="0" sec="1265087207"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.83.57.185"/>
        </slice>
        <from usec="0" sec="1265086819"/>
        <to usec="0" sec="1265087268"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.43.82.138"/>
        </slice>
        <from usec="0" sec="1265086856"/>
        <to usec="0" sec="1265087101"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.88.92.68"/>
        </slice>
        <from usec="0" sec="1265086947"/>
        <to usec="0" sec="1265087206"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.58.60.113"/>
        </slice>
        <from usec="0" sec="1265087105"/>
        <to usec="0" sec="1265087236"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="17.196.11.42"/>
        </slice>
        <from usec="0" sec="1265087138"/>
        <to usec="0" sec="1265087149"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="28.33.64.102"/>
        </slice>
        <from usec="0" sec="1265087198"/>
        <to usec="0" sec="1265087269"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.172.144.228"/>
        </slice>
        <from usec="0" sec="1265087252"/>
        <to usec="0" sec="1265087267"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.209.100"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087355"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="221.139.37.124"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087358"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.232.220.33"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087326"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="207.18.32.158"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087359"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.12.114.66"/>
        </slice>
        <from usec="0" sec="1265086840"/>
        <to usec="0" sec="1265087352"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.224.121.100"/>
        </slice>
        <from usec="0" sec="1265086872"/>
        <to usec="0" sec="1265087350"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.106.112.129"/>
        </slice>
        <from usec="0" sec="1265086874"/>
        <to usec="0" sec="1265087354"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.12.222.0"/>
        </slice>
        <from usec="0" sec="1265086986"/>
        <to usec="0" sec="1265087232"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.30.146.113"/>
        </slice>
        <from usec="0" sec="1265087052"/>
        <to usec="0" sec="1265087283"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.19.153.9"/>
        </slice>
        <from usec="0" sec="1265087150"/>
        <to usec="0" sec="1265087359"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.79.178.107"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087434"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.88.237.3"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="90.159.23.68"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="22.1.25.92"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="93.71.148.15"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.16.106"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087441"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="215.83.213.27"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.157.20"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087436"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.12.83.238"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087441"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="172.16.0.2"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087448"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="209.66.211.226"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087442"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.40.161.247"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087445"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.24.204.210"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087448"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.212.97.96"/>
        </slice>
        <from usec="0" sec="1265086812"/>
        <to usec="0" sec="1265087446"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.83.213.56"/>
        </slice>
        <from usec="0" sec="1265086819"/>
        <to usec="0" sec="1265087413"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.126.65.50"/>
        </slice>
        <from usec="0" sec="1265086838"/>
        <to usec="0" sec="1265087442"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="175.12.186.13"/>
        </slice>
        <from usec="0" sec="1265086846"/>
        <to usec="0" sec="1265087448"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.73.214.127"/>
        </slice>
        <from usec="0" sec="1265086878"/>
        <to usec="0" sec="1265087443"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.12.222.84"/>
        </slice>
        <from usec="0" sec="1265086973"/>
        <to usec="0" sec="1265087305"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter dst_ip="204.225.64.55"/>
        </slice>
        <from usec="0" sec="1265087123"/>
        <to usec="0" sec="1265087294"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.130.150.195"/>
        </slice>
        <from usec="0" sec="1265087126"/>
        <to usec="0" sec="1265087343"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="218.173.85.182" dst_port="80"/>
            <filter src_ip="149.88.131.43" dst_ip="20.135.206.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087049"/>
        <to usec="0" sec="1265087545"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.109.198.40"/>
        </slice>
        <from usec="0" sec="1265087225"/>
        <to usec="0" sec="1265087342"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="190.37.196.205"/>
        </slice>
        <from usec="0" sec="1265087274"/>
        <to usec="0" sec="1265087289"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.30.184.20"/>
        </slice>
        <from usec="0" sec="1265087274"/>
        <to usec="0" sec="1265087317"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="177.40.73.87"/>
        </slice>
        <from usec="0" sec="1265087277"/>
        <to usec="0" sec="1265087287"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.129.12.84"/>
        </slice>
        <from usec="0" sec="1265087280"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.93"/>
        </slice>
        <from usec="0" sec="1265087283"/>
        <to usec="0" sec="1265087397"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="20.50.180.180"/>
        </slice>
        <from usec="0" sec="1265087303"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.240.181.28"/>
        </slice>
        <from usec="0" sec="1265087339"/>
        <to usec="0" sec="1265087353"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.71.220"/>
        </slice>
        <from usec="0" sec="1265087384"/>
        <to usec="0" sec="1265087396"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.208.65.100"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087538"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="196.115.65.245"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087539"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="10.0.2.1"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087537"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="20.32.154.48"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087538"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.161.97.98" dst_ip="172.129.182.128" src_port="4500" dst_port="4500"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087634"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.49.134.239"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087535"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="207.145.34.99"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087510"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.29.2.171"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087524"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.83.213.196"/>
        </slice>
        <from usec="0" sec="1265086809"/>
        <to usec="0" sec="1265087530"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.168.167.70"/>
        </slice>
        <from usec="0" sec="1265086815"/>
        <to usec="0" sec="1265087538"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.100.138"/>
        </slice>
        <from usec="0" sec="1265086824"/>
        <to usec="0" sec="1265087490"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.192.161.150"/>
        </slice>
        <from usec="0" sec="1265086830"/>
        <to usec="0" sec="1265087501"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.244"/>
        </slice>
        <from usec="0" sec="1265087104"/>
        <to usec="0" sec="1265087427"/>
    </anomaly>
    <anomaly type="notice" value="0.479281,1.431730,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.11.172" dst_ip="214.161.36.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087121"/>
        <to usec="0" sec="1265087499"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.96.125.153"/>
        </slice>
        <from usec="0" sec="1265087193"/>
        <to usec="0" sec="1265087539"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.232.220.194"/>
        </slice>
        <from usec="0" sec="1265087278"/>
        <to usec="0" sec="1265087436"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.193.147.62"/>
        </slice>
        <from usec="0" sec="1265087286"/>
        <to usec="0" sec="1265087505"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.112.205.115"/>
        </slice>
        <from usec="0" sec="1265087391"/>
        <to usec="0" sec="1265087538"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="59.25.112.206"/>
        </slice>
        <from usec="0" sec="1265087418"/>
        <to usec="0" sec="1265087424"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.88.137.229"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087629"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.174.154" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087629"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.53.157.125"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087629"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.184.70.162"/>
        </slice>
        <from usec="0" sec="1265086803"/>
        <to usec="0" sec="1265087624"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="175.12.240.133"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087614"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="90.2.34.197"/>
        </slice>
        <from usec="0" sec="1265086811"/>
        <to usec="0" sec="1265087625"/>
    </anomaly>
    <anomaly type="notice" value="0.751505,1.433990,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.88.137.229" dst_port="53"/>
            <filter src_ip="149.88.137.229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086812"/>
        <to usec="0" sec="1265087617"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.212.215.152"/>
        </slice>
        <from usec="0" sec="1265087140"/>
        <to usec="0" sec="1265087623"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="30.87.113.240"/>
        </slice>
        <from usec="0" sec="1265087290"/>
        <to usec="0" sec="1265087525"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.161.227.142"/>
        </slice>
        <from usec="0" sec="1265087496"/>
        <to usec="0" sec="1265087545"/>
    </anomaly>
    <anomaly type="notice" value="0.427022,1.460430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.112.120.0"/>
        </slice>
        <from usec="0" sec="1265087569"/>
        <to usec="0" sec="1265087583"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.221.72.162" dst_ip="175.12.158.84" src_port="80" dst_port="1552"/>
            <filter src_ip="210.221.72.162" dst_ip="175.12.158.84" src_port="80" dst_port="1551"/>
            <filter src_ip="210.221.72.162" dst_ip="175.12.158.84" src_port="80" dst_port="1550"/>
            <filter src_ip="210.221.72.162" dst_ip="175.12.158.84" src_port="80" dst_port="1546"/>
            <filter src_ip="210.221.72.162" dst_ip="175.12.158.84" src_port="80" dst_port="1544"/>
        </slice>
        <from usec="0" sec="1265086852"/>
        <to usec="0" sec="1265086961"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.161.64.194" dst_ip="215.83.208.91" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087268"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.168.165.47" dst_ip="92.10.158.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087087"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="165.132.210.238" dst_ip="145.193.174.135" src_port="80"/>
            <filter src_ip="197.40.22.13" dst_ip="145.193.174.135" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087027"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.193.17.211" src_port="80"/>
            <filter dst_ip="145.193.17.211" dst_port="3227"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087142"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="33.249.64.81" dst_ip="215.83.196.20" src_port="443" dst_port="4744"/>
        </slice>
        <from usec="0" sec="1265086819"/>
        <to usec="0" sec="1265087089"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.168.171.136" dst_ip="161.43.36.34" src_port="49738" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086832"/>
        <to usec="0" sec="1265087079"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="196.115.65.245" dst_ip="149.88.2.4" src_port="8034" dst_port="1345"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="21.246.76.82" dst_ip="175.12.159.195" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086806"/>
        <to usec="0" sec="1265087178"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.32.6.163" dst_ip="28.33.99.13" src_port="49912" dst_port="993"/>
            <filter src_ip="145.32.6.163" dst_ip="196.53.236.147" src_port="61099" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086812"/>
        <to usec="0" sec="1265087539"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.221.155.148" dst_ip="215.83.220.45" src_port="53" dst_port="48934"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087359"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="43.17.185.223" src_port="25511"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087359"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.88.164.28" dst_ip="192.168.11.11" dst_port="19540"/>
        </slice>
        <from usec="0" sec="1265086802"/>
        <to usec="0" sec="1265087355"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.10.158.226" dst_ip="214.168.165.47" src_port="80"/>
        </slice>
        <from usec="0" sec="1265086805"/>
        <to usec="0" sec="1265087357"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="150.240.165.36" dst_ip="149.88.182.164" src_port="443"/>
            <filter src_ip="165.132.210.238" dst_ip="149.88.182.164" src_port="443"/>
        </slice>
        <from usec="0" sec="1265086809"/>
        <to usec="0" sec="1265087315"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="214.168.47.111" dst_ip="22.196.19.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087539"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.240.165.45" dst_ip="215.83.213.232" src_port="443"/>
        </slice>
        <from usec="0" sec="1265086804"/>
        <to usec="0" sec="1265087420"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.12.237.40" dst_ip="33.14.212.210" src_port="5671" dst_port="41924"/>
        </slice>
        <from usec="0" sec="1265086845"/>
        <to usec="0" sec="1265087449"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="165.132.218.42" dst_ip="172.129.226.91" src_port="443"/>
            <filter src_ip="165.132.218.13" dst_ip="172.129.226.91" src_port="443"/>
            <filter src_ip="150.240.165.45" dst_ip="172.129.226.91" src_port="443"/>
            <filter src_ip="165.132.210.225" dst_ip="172.129.226.91" src_port="443"/>
        </slice>
        <from usec="0" sec="1265086889"/>
        <to usec="0" sec="1265087432"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.1.195" dst_ip="90.32.17.74" src_port="80" dst_port="4784"/>
        </slice>
        <from usec="0" sec="1265087390"/>
        <to usec="0" sec="1265087435"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="175.12.1.195" dst_ip="29.249.43.30" src_port="80" dst_port="1701"/>
        </slice>
        <from usec="0" sec="1265087400"/>
        <to usec="0" sec="1265087407"/>
    </anomaly>
    <anomaly type="notice" value="0.940651,1.480720,004,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.83.213.107" dst_ip="91.12.31.216" src_port="445"/>
            <filter src_ip="215.83.213.107" dst_ip="91.12.31.216" src_port="139"/>
        </slice>
        <from usec="0" sec="1265086821"/>
        <to usec="0" sec="1265087504"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.84.2.101"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.923680,1.510420,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="178.109.74.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.24.113.40"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="2.9.24.238"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.161.212.88"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.911965,1.478030,999,1 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.129.2.118" dst_port="36141"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.83.220.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.885617,1.505850,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.193.147.61" src_port="53"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087179"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.83.211.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.12.83.216" dst_port="25576"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="215.83.196.74" src_port="445"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.193.147.68" dst_ip="210.87.52.184" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265086847"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.168.177.149" src_port="53"/>
            <filter dst_ip="214.168.177.149" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="132.32.236.148"/>
        </slice>
        <from usec="0" sec="1265086891"/>
        <to usec="0" sec="1265086937"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="92.41.14.233"/>
        </slice>
        <from usec="0" sec="1265086891"/>
        <to usec="0" sec="1265086937"/>
    </anomaly>
    <anomaly type="notice" value="0.885617,1.505850,011,0 0 0 1 0 0 1 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="215.83.196.74" src_port="445"/>
            <filter src_ip="186.231.228.215" dst_ip="215.83.196.74" src_port="5056"/>
        </slice>
        <from usec="0" sec="1265086801"/>
        <to usec="0" sec="1265087267"/>
    </anomaly>
    <anomaly type="notice" value="0.923680,1.510420,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.88.150.170" dst_ip="91.224.242.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265086818"/>
        <to usec="0" sec="1265087552"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="93.177.248.17"/>
        </slice>
        <from usec="0" sec="1265087341"/>
        <to usec="0" sec="1265087387"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.88.8.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265087341"/>
        <to usec="0" sec="1265087387"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="21.122.90.155" dst_ip="172.129.214.240" src_port="53"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.129.214.241"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.88.162.3"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.168.182.124"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="92.41.14.233"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="91.153.246.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.83.212.100" src_port="53"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.923680,1.510420,999,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.88.100.147" dst_ip="96.129.37.153" dst_port="5354"/>
        </slice>
        <from usec="0" sec="1265087270"/>
        <to usec="0" sec="1265087477"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.83.211.65"/>
        </slice>
        <from usec="0" sec="1265087566"/>
        <to usec="0" sec="1265087612"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.83.211.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1265087431"/>
        <to usec="0" sec="1265087612"/>
    </anomaly>
    <anomaly type="notice" value="0.897676,1.537650,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.58.216"/>
        </slice>
        <from usec="0" sec="1265087566"/>
        <to usec="0" sec="1265087612"/>
    </anomaly>
    <anomaly type="notice" value="0.858156,1.429860,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.193.69.8" src_port="17743"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858156,1.429860,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.168.167.116" src_port="44015"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.161.64.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858156,1.429860,501,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="215.83.213.194" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="26.134.18.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="41.164.197.220"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.88.103.104"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="149.88.5.73"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858156,1.429860,999,0 0 0 1 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="175.12.237.174" src_port="17788" dst_port="13656"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="165.132.210.238" dst_ip="175.12.46.139" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="165.132.218.19" dst_ip="215.83.221.7" src_port="80"/>
            <filter src_ip="165.132.218.77" dst_ip="215.83.221.7" src_port="80"/>
            <filter src_ip="150.240.165.36" dst_ip="215.83.221.7" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.885322,1.400530,999,1 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="215.83.216.119" dst_port="63581"/>
            <filter dst_ip="215.83.216.119" dst_port="32957"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.83.218.4" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.858156,1.429860,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="215.83.212.122" dst_ip="21.232.220.52" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="21.232.216.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.870596,1.463320,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="21.232.216.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
