<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="3.806030,2.837250,999,1 1 1 1 1 1 1 1 1 1 1 0,ptmp">
        <slice>
            <filter src_ip="204.134.59.232" src_port="58584"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.852650,1.434490,503,1 1 0 1 1 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="133.249.81.88" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.333720,1.986280,010,1 1 1 0 0 0 1 1 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.93.143.141" dst_port="22"/>
        </slice>
        <from usec="0" sec="1273036303"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="anomalous" value="3.301200,2.643470,999,1 1 0 0 0 0 1 1 1 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.54.154" dst_port="53"/>
            <filter dst_ip="176.108.54.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.205810,1.625160,503,1 1 1 1 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.54.152" dst_port="53"/>
            <filter dst_ip="176.108.54.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.964380,2.905010,010,1 1 1 1 1 1 1 1 1 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="203.4.70.126" src_port="12200" dst_port="1080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.594780,1.545230,503,1 1 1 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.54.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.730430,1.549310,503,1 1 1 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="209.205.199.253" dst_port="22"/>
            <filter dst_ip="176.108.54.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036478"/>
    </anomaly>
    <anomaly type="anomalous" value="2.064280,1.745220,011,1 1 1 1 1 1 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="6.93.143.141" src_port="22"/>
        </slice>
        <from usec="0" sec="1273036303"/>
        <to usec="0" sec="1273036428"/>
    </anomaly>
    <anomaly type="anomalous" value="2.568630,1.808620,999,1 1 1 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="128.212.114.18" dst_port="53"/>
            <filter dst_ip="73.150.7.106" dst_port="31414"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.749340,1.432110,503,1 0 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.242.148" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.354000,1.312540,503,1 0 0 1 0 0 1 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.121.106.7"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,999,0 0 0 1 1 1 0 0 0 1 1 1,ptmp">
        <slice>
            <filter src_ip="128.212.108.112" src_port="993"/>
            <filter src_ip="128.212.108.112" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.975150,1.450240,999,1 1 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="204.134.251.241"/>
            <filter src_ip="204.134.251.249"/>
            <filter src_ip="176.108.54.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.273920,1.695930,999,0 0 0 1 1 1 1 0 0 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.250.108" dst_port="32957"/>
            <filter dst_ip="204.134.250.108" dst_port="62735"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.415860,1.710970,999,1 1 1 1 1 1 1 0 0 1 1 0,ipv46tun">
        <slice>
            <filter src_ip="193.22.208.134"/>
            <filter src_ip="193.22.208.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.658340,1.821140,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="190.159.55.94" src_port="6000" dst_port="2967"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.730430,1.549310,999,1 1 1 1 1 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.134.244.146" src_port="39684"/>
        </slice>
        <from usec="0" sec="1273035662"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,503,0 0 0 1 1 1 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="72.98.4.95" dst_ip="128.194.213.131" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.589170,1.534580,999,1 1 1 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="128.212.108.115" dst_port="25"/>
            <filter dst_ip="38.146.196.233" dst_port="25"/>
        </slice>
        <from usec="0" sec="1273035618"/>
        <to usec="0" sec="1273036498"/>
    </anomaly>
    <anomaly type="anomalous" value="1.317750,1.297740,503,1 1 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.250.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.658340,1.821140,010,1 1 1 1 1 1 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="9.145.197.19" src_port="6000" dst_port="135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.200.113" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.722210,1.462820,503,0 0 0 1 1 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="128.212.9.237" dst_ip="45.171.81.174" src_port="80"/>
            <filter src_ip="128.212.9.237" dst_ip="223.120.150.76" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,503,0 0 0 1 1 1 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="176.108.200.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.603750,1.597400,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.244.146" dst_port="39684"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036391"/>
    </anomaly>
    <anomaly type="anomalous" value="2.782050,2.008680,999,1 1 1 1 0 0 1 1 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="176.108.54.154" src_port="53"/>
            <filter dst_ip="193.149.37.44" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.137200,2.644550,999,1 0 0 1 1 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.134.251.241" dst_port="3124"/>
            <filter dst_ip="204.134.251.241" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036385"/>
    </anomaly>
    <anomaly type="anomalous" value="1.863160,1.562570,999,0 0 0 1 1 1 0 0 0 1 1 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.121.108.165" dst_port="54642"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.476220,2.721100,999,1 1 1 1 1 0 1 1 1 1 0 0,mptmp">
        <slice>
            <filter src_ip="46.128.40.166" dst_ip="176.108.54.155"/>
            <filter src_ip="46.128.40.166" dst_port="3128"/>
            <filter dst_ip="176.108.54.155" dst_port="3128"/>
            <filter dst_ip="176.108.54.155" dst_port="3124"/>
            <filter dst_ip="204.134.251.249" dst_port="3128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.215540,1.666430,010,1 1 1 0 0 0 1 0 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="73.150.22.60" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.884190,1.872150,011,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="37.5.135.198" src_port="31"/>
            <filter dst_ip="37.5.135.198" src_port="31000"/>
            <filter dst_ip="37.5.135.198" src_port="6060"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035647"/>
    </anomaly>
    <anomaly type="anomalous" value="3.223140,2.633280,020,0 0 0 1 0 0 1 1 1 1 1 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="190.159.55.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.004110,1.850090,010,1 1 0 0 0 0 1 1 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="220.215.170.4" dst_ip="204.134.248.43" dst_port="22"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273036459"/>
    </anomaly>
    <anomaly type="anomalous" value="1.872740,1.835510,010,0 0 0 1 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.234.177.152" src_port="6106"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="anomalous" value="1.352690,1.289120,503,1 0 0 1 1 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="150.150.155.29" dst_ip="15.146.216.108" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.189980,1.655850,999,1 0 0 1 1 1 0 0 0 1 1 1,ntscACK">
        <slice>
            <filter src_ip="204.134.250.108" src_port="62735"/>
            <filter src_ip="204.134.250.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.189980,1.655850,503,1 0 0 1 1 1 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.250.99" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,503,0 0 0 1 1 1 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="36.222.157.96" dst_ip="176.108.194.8" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.317750,1.297740,503,1 1 0 1 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.252.5" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.594870,1.513660,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="92.174.55.2" dst_ip="133.249.81.88"/>
            <filter src_ip="92.174.55.2" src_port="80"/>
            <filter src_ip="201.249.164.7" dst_ip="133.249.81.88" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.152940,2.170290,010,1 1 1 1 1 1 1 1 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="205.219.8.98" src_port="110" dst_port="110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.594870,1.513660,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="204.134.241.2" dst_ip="45.171.6.48" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.483870,1.291760,503,1 1 0 1 1 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.250.96" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.610840,1.437510,503,1 0 0 1 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter src_ip="204.134.244.140" dst_ip="213.116.72.69"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,503,0 0 0 1 1 1 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="205.118.77.12" dst_ip="176.108.160.129" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.594870,1.513660,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.104.37" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.723230,1.483500,503,0 0 0 1 0 0 1 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.242.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.168360,1.682480,502,0 0 0 1 1 1 0 0 0 1 1 1,mptpla">
        <slice>
            <filter src_ip="133.249.48.87" src_port="22"/>
            <filter dst_ip="72.101.34.237" src_port="22"/>
            <filter src_ip="133.249.48.87" dst_ip="72.101.34.237" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.852650,1.434490,503,1 1 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.250.97" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.046760,1.353680,503,1 1 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.250.98" src_port="80"/>
        </slice>
        <from usec="0" sec="1273036280"/>
        <to usec="0" sec="1273036473"/>
    </anomaly>
    <anomaly type="suspicious" value="1.250850,1.370360,503,1 1 0 1 1 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.252.5" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036472"/>
    </anomaly>
    <anomaly type="suspicious" value="1.055250,1.365750,503,1 1 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.250.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.048440,1.376000,999,1 1 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.119.34.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450200,1.583110,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.145.138.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035868"/>
        <to usec="0" sec="1273035873"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450200,1.583110,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.238.180.238" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035702"/>
        <to usec="0" sec="1273035707"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450200,1.583110,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.133.234.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035828"/>
        <to usec="0" sec="1273035833"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450200,1.583110,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="206.172.229.173" src_port="23"/>
        </slice>
        <from usec="0" sec="1273036341"/>
        <to usec="0" sec="1273036346"/>
    </anomaly>
    <anomaly type="suspicious" value="1.450200,1.583110,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.94.38.133" src_port="6000" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1273035632"/>
        <to usec="0" sec="1273035633"/>
    </anomaly>
    <anomaly type="suspicious" value="1.315670,1.580960,010,1 0 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.172.229.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036341"/>
        <to usec="0" sec="1273036346"/>
    </anomaly>
    <anomaly type="suspicious" value="1.034660,1.315080,503,1 1 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.119.25.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.034230,1.340160,503,0 0 0 1 1 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.18.141" dst_ip="0.119.224.182" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.048010,1.399990,999,0 0 0 1 1 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.108.139.14" src_port="4295"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036368"/>
    </anomaly>
    <anomaly type="suspicious" value="1.537920,1.614130,503,0 0 0 1 1 1 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="133.249.105.181" dst_ip="0.116.18.198" src_port="80"/>
            <filter src_ip="133.249.86.3" dst_ip="0.116.18.198" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035631"/>
        <to usec="0" sec="1273036425"/>
    </anomaly>
    <anomaly type="suspicious" value="1.048010,1.399990,999,0 0 0 1 1 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="193.88.33.112" src_port="53"/>
            <filter dst_ip="205.119.6.18" src_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036249"/>
    </anomaly>
    <anomaly type="suspicious" value="1.034660,1.315080,503,1 1 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.108.54.203" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.333980,1.349060,503,1 1 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="176.108.141.62" dst_ip="44.243.219.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.317410,1.323150,503,0 0 0 1 1 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.134.250.98" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.034230,1.340160,503,0 0 0 1 1 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="204.134.246.151" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.317410,1.323150,999,0 0 0 1 1 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="204.134.253.126" dst_port="46309"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.056500,1.411660,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.108.8.9" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.055250,1.365750,503,1 1 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="176.108.212.149" dst_ip="205.118.109.123"/>
            <filter src_ip="176.108.212.149" dst_port="80"/>
            <filter src_ip="128.212.139.38" dst_ip="205.118.109.123" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="133.249.80.47" dst_ip="213.150.23.9"/>
            <filter src_ip="133.249.80.47" src_port="80"/>
            <filter dst_ip="213.150.23.9" src_port="80"/>
            <filter src_ip="133.249.80.47" src_port="32769" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.127020,1.328990,999,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="133.249.201.103" src_port="5041" dst_port="5041"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.32.35" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.119.25.30" src_port="80"/>
            <filter dst_ip="205.119.25.30" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="44.100.67.46" dst_ip="204.134.244.146" src_port="80" dst_port="37810"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.186340,1.346530,503,1 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.249.166.153" src_port="80"/>
            <filter src_ip="185.12.178.201" dst_ip="133.249.166.153" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter src_ip="45.227.169.88" dst_ip="176.108.141.82"/>
            <filter src_ip="45.227.169.88" src_port="80"/>
            <filter dst_ip="176.108.141.82" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.199.122" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.145950,1.379150,999,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="213.116.72.69" dst_ip="204.134.244.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
