<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.204.97.29" dst_ip="22.72.31.95" src_port="1487" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1267593212"/>
        <to usec="0" sec="1267593215"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.204.199.163"/>
        </slice>
        <from usec="0" sec="1267592749"/>
        <to usec="0" sec="1267593196"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.204.129.103" dst_ip="44.64.43.27" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1267592885"/>
        <to usec="0" sec="1267593214"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.204.37.52"/>
        </slice>
        <from usec="0" sec="1267593220"/>
        <to usec="0" sec="1267593223"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.96.144.42" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1267592748"/>
        <to usec="0" sec="1267592893"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.134.255.128"/>
        </slice>
        <from usec="0" sec="1267592749"/>
        <to usec="0" sec="1267592751"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.145.130.254" src_port="6000" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1267592752"/>
        <to usec="0" sec="1267592754"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.225.217.250"/>
        </slice>
        <from usec="0" sec="1267592888"/>
        <to usec="0" sec="1267592896"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="130.112.43.87"/>
        </slice>
        <from usec="0" sec="1267592613"/>
        <to usec="0" sec="1267592622"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.104.89.36"/>
        </slice>
        <from usec="0" sec="1267592888"/>
        <to usec="0" sec="1267592890"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.134.5.14"/>
        </slice>
        <from usec="0" sec="1267592613"/>
        <to usec="0" sec="1267592616"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,501,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="153.134.255.141"/>
        </slice>
        <from usec="0" sec="1267592888"/>
        <to usec="0" sec="1267592890"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.213.51.201" src_port="53611"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267593302"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.59.82.129" dst_ip="40.181.245.253" src_port="80" dst_port="64738"/>
        </slice>
        <from usec="0" sec="1267592749"/>
        <to usec="0" sec="1267592752"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.117.18.20" src_port="2425" dst_port="2425"/>
        </slice>
        <from usec="0" sec="1267593018"/>
        <to usec="0" sec="1267593020"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.80.69.181" dst_port="4899"/>
        </slice>
        <from usec="0" sec="1267593252"/>
        <to usec="0" sec="1267593264"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.213.232.18"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="104.139.196.111"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.134.255.138"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.213.224.92"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.655715,1.082040,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.213.224.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592616"/>
    </anomaly>
    <anomaly type="notice" value="0.655715,1.082040,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="153.134.255.211" dst_port="3128"/>
            <filter dst_ip="153.134.255.211" dst_port="3124"/>
            <filter dst_ip="153.134.255.211" dst_port="3127"/>
        </slice>
        <from usec="0" sec="1267592416"/>
        <to usec="0" sec="1267593302"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="173.204.217.236"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.231.32"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,503,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="153.134.255.216"/>
            <filter src_ip="153.134.255.216"/>
            <filter src_ip="153.134.255.208"/>
            <filter src_ip="153.134.255.208"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.617932,1.075580,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.213.238.7" dst_port="3128"/>
            <filter dst_ip="193.213.238.7" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1267592457"/>
        <to usec="0" sec="1267593218"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.104.76.182"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.86.148.120"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="221.146.217.64"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="221.146.217.75"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.217.35.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.213.228.224"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="154.115.80.57" dst_port="36141"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.213.231.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267593031"/>
        <to usec="0" sec="1267593077"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.134.62.111"/>
        </slice>
        <from usec="0" sec="1267593166"/>
        <to usec="0" sec="1267593212"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.104.89.250"/>
        </slice>
        <from usec="0" sec="1267593166"/>
        <to usec="0" sec="1267593212"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.82.44.176"/>
        </slice>
        <from usec="0" sec="1267593166"/>
        <to usec="0" sec="1267593212"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.134.255.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267593211"/>
        <to usec="0" sec="1267593257"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="153.134.255.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1267593211"/>
        <to usec="0" sec="1267593257"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.191.35.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267593256"/>
        <to usec="0" sec="1267593302"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.213.238.11" dst_port="44825"/>
        </slice>
        <from usec="0" sec="1267592851"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.217.35.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.578199,0.972910,020,0 0 0 0 0 0 1 0 0 1 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="3.208.231.211"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.134.255.211" dst_port="3128"/>
            <filter dst_ip="153.134.255.211"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="173.204.130.95"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.204.201.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="153.134.62.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,503,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="193.213.228.248"/>
            <filter dst_ip="153.134.255.208"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592897"/>
    </anomaly>
    <anomaly type="notice" value="0.512106,1.014940,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.217.35.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1267592401"/>
        <to usec="0" sec="1267592447"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="94.123.33.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.209.178.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="35.59.2.190"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="0.162.114.234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="173.204.13.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="48.196.154.129" dst_ip="173.204.111.60" src_port="80" dst_port="35777"/>
            <filter src_ip="48.196.154.129" dst_ip="173.204.111.60" src_port="80" dst_port="35776"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="153.134.60.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.134.212.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="173.204.93.201" dst_port="80"/>
            <filter dst_ip="192.97.149.83" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.96.133.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="93.32.50.116" dst_ip="193.213.228.249" src_port="38284" dst_port="21"/>
            <filter src_ip="93.32.50.116" dst_ip="193.213.228.249" src_port="37838" dst_port="57620"/>
            <filter src_ip="93.32.50.116" dst_ip="193.213.232.219" src_port="40596" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="193.213.232.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.213.232.218" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.534969,0.965710,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="209.68.220.203" dst_ip="193.213.225.173" dst_port="80"/>
            <filter src_ip="213.112.96.192" dst_ip="193.213.225.173" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
