<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.961937,1.446730,999,0 0 0 0 0 0 0 0 0 0 0 1,alphfl">
        <slice>
            <filter src_ip="143.196.132.86" dst_ip="0.67.235.16" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.83.54.40"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.196.110.226"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.196.110.224"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="3.20.198.58"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.75.7"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.232.157.104"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,502,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.20.85.57" dst_port="22"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="45.26.45.195"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="205.20.77.55" dst_port="53"/>
            <filter dst_ip="192.37.130.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.1.15.194" src_port="53"/>
            <filter dst_ip="205.20.75.7" src_port="53"/>
            <filter dst_ip="205.20.77.55" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="144.58.255.150"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.184.107.240"/>
        </slice>
        <from usec="0" sec="1270357291"/>
        <to usec="0" sec="1270357337"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="3.20.198.59" dst_port="443"/>
        </slice>
        <from usec="0" sec="1270357291"/>
        <to usec="0" sec="1270357337"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="143.22.44.56"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.69.99" src_port="63312"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.20.78.111"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.208.150.13" src_port="6667"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,502,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.174.183.116" dst_port="22"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.232.199.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.232.96.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.232.36.172" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.68.101" src_port="17660"/>
        </slice>
        <from usec="0" sec="1270357291"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.210.11.208" dst_ip="10.1.3.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.75.7" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter dst_port="53"/>
            <filter src_ip="192.2.232.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.40.43.86" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.75.24" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.40.181.199" src_port="8601"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="143.196.132.108" src_port="53"/>
            <filter src_ip="137.232.199.1" src_port="53"/>
            <filter dst_ip="205.20.75.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.94.241.198" src_port="31983"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.40.67.226" dst_port="25576"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="143.196.105.155"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.232.199.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="3.20.198.59" dst_port="443"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYN">
        <slice>
            <filter src_ip="209.184.107.240" dst_port="80"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="30.241.39.143" src_port="6049"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.83.54.234" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.77.55" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.94.241.198" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.94.241.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1270357831"/>
        <to usec="0" sec="1270357877"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.184.107.240"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.232.150.166"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.232.199.1"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="207.138.12.157" dst_ip="204.83.55.101" dst_port="53"/>
            <filter src_ip="207.138.12.156" dst_ip="204.83.55.101" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.75.7" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.75.26" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.20.68.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,504,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.83.20.207" dst_ip="77.72.177.123" dst_port="443"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,011,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="182.4.114.35" src_port="4899"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,010,0 0 0 0 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="19.129.38.30" dst_ip="205.20.73.129"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,020,0 0 0 0 0 0 1 1 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="143.22.44.58"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="192.101.185.42"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.69.99" src_port="63312"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.94.241.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.78.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.74.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="30.241.39.143" src_port="6049"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="143.196.110.176" src_port="25"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357562"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.77.55" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.40.67.226" src_port="25576"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.26.45.195" dst_port="80"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,010,0 0 0 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.26.45.195" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.20.76.177" dst_ip="204.82.76.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.69.99" dst_port="63312"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,020,0 0 0 0 0 0 1 1 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="205.20.75.87"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,010,0 0 0 0 0 0 1 1 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="137.232.24.140" dst_port="443"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.78.111" src_port="53"/>
            <filter dst_ip="205.20.78.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.20.68.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.20.68.100" src_port="44825"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357562"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,011,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.20.68.100" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.20.68.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.94.241.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.204.178.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.75.7" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.20.75.26" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.40.1.15" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357381"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.525659,1.297250,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="192.1.15.194" dst_ip="205.20.77.55" src_port="53"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357427"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.196.217.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.163.32.234" dst_ip="205.20.68.105" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1270357876"/>
        <to usec="0" sec="1270357922"/>
    </anomaly>
    <anomaly type="notice" value="0.870479,1.362070,504,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.232.24.13" dst_ip="44.12.149.210" src_port="443"/>
        </slice>
        <from usec="0" sec="1270357201"/>
        <to usec="0" sec="1270357247"/>
    </anomaly>
    <anomaly type="notice" value="0.633313,1.259010,503,0 0 0 0 0 0 1 1 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="36.176.13.144" dst_port="80"/>
            <filter dst_ip="205.20.65.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="137.232.68.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.232.127.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.232.248.139"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="143.196.110.178"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.196.110.212" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.542260,1.276000,503,0 0 0 0 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.94.12.227" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.20.72.38" dst_ip="0.146.105.171" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.633313,1.259010,502,0 0 0 0 0 0 1 1 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="205.20.85.57" src_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.633313,1.259010,503,0 0 0 0 0 0 1 1 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.40.1.99" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.40.181.106" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="219.214.153.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="208.2.86.13"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.52.68.134"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.686387,1.327720,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="3.54.123.151"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.232.33.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="143.196.110.208" dst_ip="209.134.18.86" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="143.196.111.52" src_port="80"/>
            <filter src_ip="143.196.111.52" dst_port="80"/>
            <filter src_ip="143.196.111.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.411434,1.313750,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="76.153.242.160" dst_ip="205.20.68.105"/>
            <filter src_ip="76.153.242.160" dst_ip="205.20.68.101"/>
            <filter src_ip="76.153.242.160" dst_port="3128"/>
            <filter src_ip="76.153.242.160" dst_port="3124"/>
            <filter src_ip="76.163.224.110" dst_ip="205.20.68.101"/>
            <filter src_ip="76.163.224.110" dst_port="3124"/>
            <filter dst_ip="205.20.68.101" dst_port="3128"/>
            <filter dst_ip="205.20.68.101" dst_port="3124"/>
            <filter src_ip="76.163.224.110" dst_ip="205.20.68.105" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1270357336"/>
        <to usec="0" sec="1270357382"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.20.65.218" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.790948,1.299110,503,0 0 0 0 0 0 1 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.20.74.246" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="219.2.85.189" dst_ip="173.40.177.113" src_port="80" dst_port="60981"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,point_to_point">
        <slice>
            <filter src_ip="216.114.16.0" dst_ip="173.40.180.167" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.895925,1.349940,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="143.85.137.135" dst_ip="204.94.229.202" src_port="80"/>
            <filter src_ip="143.85.14.102" dst_ip="204.94.229.202" src_port="80"/>
            <filter src_ip="143.85.137.233" dst_ip="204.94.229.202" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
