<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.145.25.188" dst_ip="204.134.238.203" src_port="51957" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036345"/>
        <to usec="0" sec="1273036348"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.192.8" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036124"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.212.102" dst_ip="61.130.79.18" src_port="4834" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036373"/>
        <to usec="0" sec="1273036375"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="128.212.143.46" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036437"/>
        <to usec="0" sec="1273036497"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.81.69" dst_ip="190.73.224.67" src_port="58093" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036268"/>
        <to usec="0" sec="1273036498"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.249.62.186" dst_ip="196.247.170.74" src_port="4311" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036100"/>
        <to usec="0" sec="1273036475"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.203.8" dst_ip="46.54.226.204" src_port="61035" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036338"/>
        <to usec="0" sec="1273036456"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.141.82" dst_ip="45.227.169.88" src_port="51442" dst_port="82" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036311"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.108.6" dst_ip="57.90.186.20" src_port="52532" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036310"/>
        <to usec="0" sec="1273036471"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.108.198.222" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036336"/>
        <to usec="0" sec="1273036396"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.212.109.166" dst_ip="201.178.67.68" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036484"/>
        <to usec="0" sec="1273036486"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.199.197" dst_ip="222.87.67.67" src_port="49751" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036305"/>
        <to usec="0" sec="1273036499"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.136.180" dst_ip="54.20.197.37" src_port="60719" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273035694"/>
        <to usec="0" sec="1273036498"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.108.138.51" dst_ip="219.164.246.15" src_port="1026" dst_port="1025" proto="udp"/>
        </slice>
        <from usec="0" sec="1273035825"/>
        <to usec="0" sec="1273035827"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.207.16" dst_ip="196.249.36.72" src_port="1438" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036362"/>
        <to usec="0" sec="1273036364"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.43.128" dst_ip="57.90.176.199" src_port="34391" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036321"/>
        <to usec="0" sec="1273036499"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="176.108.104.34" dst_ip="185.12.176.149" src_port="63686" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036322"/>
        <to usec="0" sec="1273036325"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.108.139.117" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036310"/>
        <to usec="0" sec="1273036474"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.199.122" dst_ip="213.2.220.193" src_port="55506" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036335"/>
        <to usec="0" sec="1273036479"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.139.61" dst_ip="21.200.89.147" src_port="58440" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036306"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.134.233.236" dst_ip="221.233.185.213" src_port="1061" dst_port="1049" proto="udp"/>
        </slice>
        <from usec="0" sec="1273036314"/>
        <to usec="0" sec="1273036472"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.212.122.51" dst_ip="5.176.100.129" src_port="49758" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036311"/>
        <to usec="0" sec="1273036313"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.218.166" dst_ip="47.52.218.11" src_port="51495" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036307"/>
        <to usec="0" sec="1273036333"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.14.162" dst_ip="134.179.10.130" src_port="62803" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036350"/>
        <to usec="0" sec="1273036352"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.212.220.207" dst_ip="190.247.159.19" src_port="3551" dst_port="443"/>
            <filter src_ip="128.212.220.207" dst_ip="190.247.159.19" src_port="3549" dst_port="443"/>
            <filter src_ip="128.212.220.207" dst_ip="190.247.159.19" src_port="3547" dst_port="443"/>
            <filter src_ip="128.212.220.207" dst_ip="190.247.159.19" src_port="3546" dst_port="443"/>
        </slice>
        <from usec="0" sec="1273036276"/>
        <to usec="0" sec="1273036404"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.134.250.99" dst_ip="204.134.250.99" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273035848"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.23.184.242" dst_ip="36.222.16.64" src_port="59007" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036446"/>
        <to usec="0" sec="1273036448"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.170.25.18" dst_ip="205.119.24.103" src_port="80" dst_port="38982" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036344"/>
        <to usec="0" sec="1273036348"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.82.173"/>
        </slice>
        <from usec="0" sec="1273036371"/>
        <to usec="0" sec="1273036373"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.134.242.148" dst_ip="204.134.242.148" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036344"/>
        <to usec="0" sec="1273036472"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.121.106.7" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036350"/>
        <to usec="0" sec="1273036375"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.249.231.23" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036477"/>
        <to usec="0" sec="1273036497"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.52.100" dst_ip="75.190.73.17" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036434"/>
        <to usec="0" sec="1273036436"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.234.20" dst_ip="162.169.220.137" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036338"/>
        <to usec="0" sec="1273036440"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="185.12.176.192"/>
        </slice>
        <from usec="0" sec="1273036382"/>
        <to usec="0" sec="1273036384"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.38.59.1" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273035791"/>
        <to usec="0" sec="1273035793"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.186.148.131" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036441"/>
        <to usec="0" sec="1273036443"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.236.40.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036245"/>
        <to usec="0" sec="1273036255"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.201.181.244"/>
        </slice>
        <from usec="0" sec="1273036335"/>
        <to usec="0" sec="1273036340"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.239.142.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036121"/>
        <to usec="0" sec="1273036131"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.169.104.47" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036268"/>
        <to usec="0" sec="1273036278"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.76.81.51" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036174"/>
        <to usec="0" sec="1273036184"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.238.98.6" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036250"/>
        <to usec="0" sec="1273036260"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.238.107.7" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036255"/>
        <to usec="0" sec="1273036265"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.237.87.193" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036341"/>
        <to usec="0" sec="1273036349"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.99.12.237" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036440"/>
        <to usec="0" sec="1273036450"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.234.27.194" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036264"/>
        <to usec="0" sec="1273036274"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.204.232.142" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036469"/>
        <to usec="0" sec="1273036476"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.184.46.160" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036322"/>
        <to usec="0" sec="1273036331"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.224.66.168" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036383"/>
        <to usec="0" sec="1273036391"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="56.36.232.111" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036261"/>
        <to usec="0" sec="1273036263"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.246.149.89" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036330"/>
        <to usec="0" sec="1273036332"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="56.206.34.29"/>
        </slice>
        <from usec="0" sec="1273035773"/>
        <to usec="0" sec="1273035776"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.96.22" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036054"/>
        <to usec="0" sec="1273036063"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.137.135" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036063"/>
        <to usec="0" sec="1273036065"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="185.12.176.129"/>
        </slice>
        <from usec="0" sec="1273036463"/>
        <to usec="0" sec="1273036465"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.146.6.27"/>
        </slice>
        <from usec="0" sec="1273036063"/>
        <to usec="0" sec="1273036065"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.108.139.200"/>
        </slice>
        <from usec="0" sec="1273036305"/>
        <to usec="0" sec="1273036307"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.152.154"/>
        </slice>
        <from usec="0" sec="1273036233"/>
        <to usec="0" sec="1273036236"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.156.42"/>
        </slice>
        <from usec="0" sec="1273036165"/>
        <to usec="0" sec="1273036176"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="44.235.198.13"/>
        </slice>
        <from usec="0" sec="1273036441"/>
        <to usec="0" sec="1273036443"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.134.244.214"/>
        </slice>
        <from usec="0" sec="1273036262"/>
        <to usec="0" sec="1273036265"/>
    </anomaly>
    <anomaly type="notice" value="0.548839,1.406050,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.125.0.49"/>
        </slice>
        <from usec="0" sec="1273036340"/>
        <to usec="0" sec="1273036342"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.249.146.32" dst_ip="36.210.86.181" src_port="55054" dst_port="2158"/>
        </slice>
        <from usec="0" sec="1273036306"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.192.14" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036174"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.212.116.58" dst_ip="205.118.77.21" dst_port="80"/>
            <filter src_ip="128.212.116.58" dst_ip="205.118.77.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1273036332"/>
        <to usec="0" sec="1273036444"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.138.8" dst_ip="72.48.186.25" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036097"/>
        <to usec="0" sec="1273036330"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.166.153" dst_ip="202.160.152.8" src_port="51626" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036306"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.212.143.95" dst_ip="190.68.166.175" src_port="4655" dst_port="443"/>
            <filter src_ip="128.212.143.95" dst_ip="44.151.24.59" src_port="1125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036061"/>
        <to usec="0" sec="1273036486"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.69.235.165" dst_ip="176.108.216.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036334"/>
        <to usec="0" sec="1273036450"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.121.108.165" dst_ip="12.150.134.60" src_port="54642" dst_port="45063"/>
            <filter src_ip="205.121.108.165" dst_ip="5.40.31.76" src_port="57037" dst_port="80"/>
            <filter src_ip="205.121.108.165" dst_ip="13.238.232.64" src_port="54642" dst_port="52226"/>
            <filter src_ip="205.121.108.165" dst_ip="0.145.186.122" src_port="57035" dst_port="80"/>
            <filter src_ip="205.121.108.165" dst_ip="193.105.140.21" src_port="54642" dst_port="1000"/>
        </slice>
        <from usec="0" sec="1273036103"/>
        <to usec="0" sec="1273036114"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.134.240.185" dst_ip="196.247.168.209" src_port="52135" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1273035659"/>
        <to usec="0" sec="1273036496"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.192.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036328"/>
        <to usec="0" sec="1273036453"/>
    </anomaly>
    <anomaly type="notice" value="0.760999,1.439680,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="204.134.250.98" dst_ip="204.134.250.98" proto="tcp"/>
        </slice>
        <from usec="0" sec="1273036306"/>
        <to usec="0" sec="1273036498"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.212.209.74" src_port="53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273036149"/>
        <to usec="0" sec="1273036404"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.119.12.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036496"/>
        <to usec="0" sec="1273036500"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="63.42.147.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036103"/>
        <to usec="0" sec="1273036113"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.165.116.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035848"/>
        <to usec="0" sec="1273035853"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.248.81.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036090"/>
        <to usec="0" sec="1273036096"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.241.177.209" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036350"/>
        <to usec="0" sec="1273036356"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="53.218.83.240" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036097"/>
        <to usec="0" sec="1273036279"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.244.192.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036335"/>
        <to usec="0" sec="1273036345"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.117.72.214" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036021"/>
        <to usec="0" sec="1273036026"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.242.97.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036328"/>
        <to usec="0" sec="1273036330"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.116.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036227"/>
        <to usec="0" sec="1273036237"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.23.120.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035659"/>
        <to usec="0" sec="1273035665"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.86.109.215" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036249"/>
        <to usec="0" sec="1273036256"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.225.69.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036469"/>
        <to usec="0" sec="1273036475"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.26.49.22" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036335"/>
        <to usec="0" sec="1273036344"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.179.33.80" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035626"/>
        <to usec="0" sec="1273035635"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.39.99.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036456"/>
        <to usec="0" sec="1273036464"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="9.181.189.239" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036447"/>
        <to usec="0" sec="1273036457"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.95.161.252" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036035"/>
        <to usec="0" sec="1273036043"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="164.168.233.23" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035921"/>
        <to usec="0" sec="1273035930"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.119.176.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036144"/>
        <to usec="0" sec="1273036153"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.51.41.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273035687"/>
        <to usec="0" sec="1273035697"/>
    </anomaly>
    <anomaly type="notice" value="0.760999,1.439680,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.172.229.173" dst_port="23"/>
        </slice>
        <from usec="0" sec="1273036341"/>
        <to usec="0" sec="1273036346"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.249.108.32"/>
        </slice>
        <from usec="0" sec="1273035867"/>
        <to usec="0" sec="1273035872"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="33.117.72.214"/>
        </slice>
        <from usec="0" sec="1273036021"/>
        <to usec="0" sec="1273036026"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="167.238.180.238"/>
        </slice>
        <from usec="0" sec="1273035702"/>
        <to usec="0" sec="1273035707"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="207.133.234.147"/>
        </slice>
        <from usec="0" sec="1273035828"/>
        <to usec="0" sec="1273035830"/>
    </anomaly>
    <anomaly type="notice" value="0.820560,1.408470,502,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.205.199.253" src_port="22"/>
        </slice>
        <from usec="0" sec="1273036344"/>
        <to usec="0" sec="1273036348"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.212.143.45"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.194.84.15"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035702"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.134.241.122"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="215.104.135.146"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="205.121.107.53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="164.81.96.103"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.139.19"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.84.89.120"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035701"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.130.41.31"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035682"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="15.162.88.149"/>
        </slice>
        <from usec="0" sec="1273035604"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="9.71.107.203"/>
        </slice>
        <from usec="0" sec="1273035605"/>
        <to usec="0" sec="1273035641"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.134.243.27"/>
        </slice>
        <from usec="0" sec="1273035605"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.161.31.77"/>
        </slice>
        <from usec="0" sec="1273035606"/>
        <to usec="0" sec="1273035706"/>
    </anomaly>
    <anomaly type="notice" value="0.852719,1.373520,999,1 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="205.121.106.0"/>
            <filter dst_ip="204.134.244.141" src_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036413"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.121.151.70"/>
        </slice>
        <from usec="0" sec="1273035623"/>
        <to usec="0" sec="1273035701"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="195.240.21.244"/>
        </slice>
        <from usec="0" sec="1273035632"/>
        <to usec="0" sec="1273035663"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="194.104.120.188"/>
        </slice>
        <from usec="0" sec="1273035651"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.12.54.16"/>
        </slice>
        <from usec="0" sec="1273035654"/>
        <to usec="0" sec="1273035660"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.249.166.153" src_port="80"/>
            <filter src_ip="185.12.178.201" dst_ip="133.249.166.153" src_port="443"/>
            <filter src_ip="134.179.10.130" dst_ip="133.249.166.153" src_port="443"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.134.158.226"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035670"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="219.103.166.180"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035797"/>
    </anomaly>
    <anomaly type="notice" value="0.793912,1.359390,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.249.199.138" dst_port="80"/>
            <filter src_ip="176.108.139.125" dst_ip="205.118.77.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036260"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.141.179"/>
        </slice>
        <from usec="0" sec="1273035606"/>
        <to usec="0" sec="1273035796"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="134.179.89.152"/>
        </slice>
        <from usec="0" sec="1273035611"/>
        <to usec="0" sec="1273035775"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.176.184"/>
        </slice>
        <from usec="0" sec="1273035613"/>
        <to usec="0" sec="1273036420"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.171.78.66"/>
        </slice>
        <from usec="0" sec="1273035621"/>
        <to usec="0" sec="1273035762"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.77.126.145"/>
        </slice>
        <from usec="0" sec="1273035702"/>
        <to usec="0" sec="1273035756"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.74.3.199"/>
        </slice>
        <from usec="0" sec="1273035703"/>
        <to usec="0" sec="1273035725"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="15.151.141.95"/>
        </slice>
        <from usec="0" sec="1273035717"/>
        <to usec="0" sec="1273035721"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.169.220.137"/>
        </slice>
        <from usec="0" sec="1273035782"/>
        <to usec="0" sec="1273035797"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.134.158.204"/>
        </slice>
        <from usec="0" sec="1273036236"/>
        <to usec="0" sec="1273036252"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.84.15.110"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035848"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.50.190"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035759"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.211.168.120"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035889"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="205.121.146.134"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035978"/>
    </anomaly>
    <anomaly type="notice" value="0.850648,1.351170,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.119.24.103" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273036499"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.184.71.114"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273035836"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.134.241.10"/>
        </slice>
        <from usec="0" sec="1273035621"/>
        <to usec="0" sec="1273035889"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="73.132.204.18"/>
        </slice>
        <from usec="0" sec="1273035637"/>
        <to usec="0" sec="1273035888"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.142.144.62"/>
        </slice>
        <from usec="0" sec="1273035653"/>
        <to usec="0" sec="1273035853"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.171.76.220"/>
        </slice>
        <from usec="0" sec="1273035698"/>
        <to usec="0" sec="1273035885"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.225.129.3"/>
        </slice>
        <from usec="0" sec="1273035711"/>
        <to usec="0" sec="1273035712"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.202.131.227"/>
        </slice>
        <from usec="0" sec="1273035712"/>
        <to usec="0" sec="1273035839"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.218.208.46"/>
        </slice>
        <from usec="0" sec="1273035767"/>
        <to usec="0" sec="1273035788"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.249.32.253"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.23.217.110"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035961"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.23.9.91"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035977"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="61.0.75.11"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035979"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="190.247.159.25" dst_port="443"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035979"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.162.101.252" src_port="53"/>
            <filter dst_ip="205.162.101.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035979"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.148.40"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273035974"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.11.1"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036338"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.119.58.130"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273035929"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.108.139.149"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273035978"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.243.218.69"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273035948"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.203.24.124"/>
        </slice>
        <from usec="0" sec="1273035611"/>
        <to usec="0" sec="1273035912"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.103.66.160"/>
        </slice>
        <from usec="0" sec="1273035617"/>
        <to usec="0" sec="1273035978"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.33.26.34"/>
        </slice>
        <from usec="0" sec="1273035622"/>
        <to usec="0" sec="1273036427"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="44.235.198.13"/>
        </slice>
        <from usec="0" sec="1273035690"/>
        <to usec="0" sec="1273035955"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.201.43.192"/>
        </slice>
        <from usec="0" sec="1273035704"/>
        <to usec="0" sec="1273035944"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.112.162.87"/>
        </slice>
        <from usec="0" sec="1273035800"/>
        <to usec="0" sec="1273035861"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.215.147.115"/>
        </slice>
        <from usec="0" sec="1273035800"/>
        <to usec="0" sec="1273035971"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="190.247.166.240"/>
        </slice>
        <from usec="0" sec="1273035835"/>
        <to usec="0" sec="1273035979"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="38.131.5.194"/>
        </slice>
        <from usec="0" sec="1273035970"/>
        <to usec="0" sec="1273035975"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="212.204.0.94"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.32.5"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="179.114.235.156"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036045"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.154.50.131"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="72.170.250.75"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036058"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.72.36.80"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="20.228.39.117"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.212.44"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273036046"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.74.39.172"/>
        </slice>
        <from usec="0" sec="1273035609"/>
        <to usec="0" sec="1273036060"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.58.2"/>
        </slice>
        <from usec="0" sec="1273035614"/>
        <to usec="0" sec="1273036068"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.136.185"/>
        </slice>
        <from usec="0" sec="1273035623"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.150.37.41"/>
        </slice>
        <from usec="0" sec="1273035663"/>
        <to usec="0" sec="1273035935"/>
    </anomaly>
    <anomaly type="notice" value="0.852719,1.373520,503,1 0 0 1 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="176.108.54.199" dst_ip="75.190.72.11" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035693"/>
        <to usec="0" sec="1273036461"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.84.12.187"/>
        </slice>
        <from usec="0" sec="1273035741"/>
        <to usec="0" sec="1273035915"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.100.241.193"/>
        </slice>
        <from usec="0" sec="1273035910"/>
        <to usec="0" sec="1273036068"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.95.12.242"/>
        </slice>
        <from usec="0" sec="1273035935"/>
        <to usec="0" sec="1273035969"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.67.149.41"/>
        </slice>
        <from usec="0" sec="1273035952"/>
        <to usec="0" sec="1273035953"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.134.158.193"/>
        </slice>
        <from usec="0" sec="1273035980"/>
        <to usec="0" sec="1273036054"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.17.140.154"/>
        </slice>
        <from usec="0" sec="1273036001"/>
        <to usec="0" sec="1273036009"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.233.242.255"/>
        </slice>
        <from usec="0" sec="1273036035"/>
        <to usec="0" sec="1273036068"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="5.40.77.147"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036158"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.108.198.118"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.237.246.216"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036158"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.212.108.136"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.164.5"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273036144"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.55.133"/>
        </slice>
        <from usec="0" sec="1273035604"/>
        <to usec="0" sec="1273036154"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.56.43.176"/>
        </slice>
        <from usec="0" sec="1273035610"/>
        <to usec="0" sec="1273036150"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.141.209.28"/>
        </slice>
        <from usec="0" sec="1273035610"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.198.131"/>
        </slice>
        <from usec="0" sec="1273035616"/>
        <to usec="0" sec="1273036149"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.243.220.129"/>
        </slice>
        <from usec="0" sec="1273035617"/>
        <to usec="0" sec="1273036054"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.199.197"/>
        </slice>
        <from usec="0" sec="1273035617"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="190.247.159.20"/>
        </slice>
        <from usec="0" sec="1273035644"/>
        <to usec="0" sec="1273036156"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.139.208"/>
        </slice>
        <from usec="0" sec="1273035713"/>
        <to usec="0" sec="1273036102"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.52.248.212"/>
        </slice>
        <from usec="0" sec="1273035891"/>
        <to usec="0" sec="1273036021"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.171.79.25"/>
        </slice>
        <from usec="0" sec="1273035922"/>
        <to usec="0" sec="1273036019"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.144.36.196"/>
        </slice>
        <from usec="0" sec="1273035957"/>
        <to usec="0" sec="1273035994"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.64.208.105"/>
        </slice>
        <from usec="0" sec="1273036040"/>
        <to usec="0" sec="1273036055"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.112.213.238"/>
        </slice>
        <from usec="0" sec="1273036079"/>
        <to usec="0" sec="1273036087"/>
    </anomaly>
    <anomaly type="notice" value="0.835722,1.312490,503,1 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.250.98" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.212.25.29"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036203"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.23.18.32"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036221"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.150.40.250"/>
        </slice>
        <from usec="0" sec="1273035947"/>
        <to usec="0" sec="1273036144"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.179.18.60"/>
        </slice>
        <from usec="0" sec="1273035986"/>
        <to usec="0" sec="1273036129"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.70.144.211"/>
        </slice>
        <from usec="0" sec="1273036024"/>
        <to usec="0" sec="1273036212"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="164.78.92.108"/>
        </slice>
        <from usec="0" sec="1273036163"/>
        <to usec="0" sec="1273036232"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.249.117.109"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.211.163.175"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.164.15.18"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036331"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="128.23.200.7"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036331"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.232.164"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036334"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.212.108.190"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="185.12.176.203" dst_ip="204.134.254.38" src_port="80"/>
            <filter src_ip="134.30.241.35" dst_ip="204.134.254.38" src_port="80"/>
            <filter src_ip="134.30.241.157" dst_ip="204.134.254.38" src_port="80"/>
            <filter src_ip="51.166.101.52" dst_ip="204.134.254.38" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036334"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="176.108.138.112" dst_ip="34.66.46.194" dst_port="80"/>
            <filter src_ip="128.212.198.183" dst_ip="34.66.46.194" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036324"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.212.232"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036416"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.137.154.62"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036408"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="128.33.99.99"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036326"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="44.235.139.29"/>
        </slice>
        <from usec="0" sec="1273035603"/>
        <to usec="0" sec="1273036323"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.212.21.74"/>
        </slice>
        <from usec="0" sec="1273035604"/>
        <to usec="0" sec="1273036427"/>
    </anomaly>
    <anomaly type="notice" value="0.850648,1.351170,503,1 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.179.16.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035606"/>
        <to usec="0" sec="1273036476"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.218.102"/>
        </slice>
        <from usec="0" sec="1273035607"/>
        <to usec="0" sec="1273036334"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.147.2"/>
        </slice>
        <from usec="0" sec="1273035607"/>
        <to usec="0" sec="1273036334"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.243.211.99"/>
        </slice>
        <from usec="0" sec="1273035614"/>
        <to usec="0" sec="1273036337"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="128.212.70.238"/>
        </slice>
        <from usec="0" sec="1273035614"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.150.38.155"/>
        </slice>
        <from usec="0" sec="1273035622"/>
        <to usec="0" sec="1273036225"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.108.191.7"/>
        </slice>
        <from usec="0" sec="1273035633"/>
        <to usec="0" sec="1273036319"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.105.177"/>
        </slice>
        <from usec="0" sec="1273035648"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter dst_ip="61.245.175.212"/>
        </slice>
        <from usec="0" sec="1273035662"/>
        <to usec="0" sec="1273036313"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="201.103.66.106"/>
        </slice>
        <from usec="0" sec="1273035690"/>
        <to usec="0" sec="1273036292"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.208.8"/>
        </slice>
        <from usec="0" sec="1273035968"/>
        <to usec="0" sec="1273036312"/>
    </anomaly>
    <anomaly type="notice" value="0.508135,1.356880,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.249.90.16" dst_ip="37.27.43.104" src_port="2622" dst_port="80"/>
            <filter src_ip="133.249.90.16" dst_ip="37.27.43.104" src_port="2621" dst_port="80"/>
            <filter src_ip="133.249.90.16" dst_ip="37.27.43.104" src_port="2618" dst_port="80"/>
            <filter src_ip="133.249.90.16" dst_ip="37.27.43.104" src_port="2617" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035993"/>
        <to usec="0" sec="1273036501"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="7.202.106.214"/>
        </slice>
        <from usec="0" sec="1273036075"/>
        <to usec="0" sec="1273036264"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="15.240.42.48"/>
        </slice>
        <from usec="0" sec="1273036091"/>
        <to usec="0" sec="1273036310"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.156.195"/>
        </slice>
        <from usec="0" sec="1273036127"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.100.228.237"/>
        </slice>
        <from usec="0" sec="1273036140"/>
        <to usec="0" sec="1273036334"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.25.40.10"/>
        </slice>
        <from usec="0" sec="1273036143"/>
        <to usec="0" sec="1273036257"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.103.72.40"/>
        </slice>
        <from usec="0" sec="1273036143"/>
        <to usec="0" sec="1273036202"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.219.20"/>
        </slice>
        <from usec="0" sec="1273036217"/>
        <to usec="0" sec="1273036421"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="205.118.77.1"/>
        </slice>
        <from usec="0" sec="1273036253"/>
        <to usec="0" sec="1273036300"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="9.145.24.232"/>
        </slice>
        <from usec="0" sec="1273036273"/>
        <to usec="0" sec="1273036337"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="167.9.33.30"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="176.108.139.79"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036413"/>
    </anomaly>
    <anomaly type="notice" value="0.852719,1.373520,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.134.251.248" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036477"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.221.43.23"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036424"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="133.249.18.7"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.508135,1.356880,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.30.98.66" dst_ip="133.249.174.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035604"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="44.235.139.24"/>
        </slice>
        <from usec="0" sec="1273035608"/>
        <to usec="0" sec="1273036426"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.243.221.99"/>
        </slice>
        <from usec="0" sec="1273036004"/>
        <to usec="0" sec="1273036378"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="8.14.192.41"/>
        </slice>
        <from usec="0" sec="1273036039"/>
        <to usec="0" sec="1273036276"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="218.64.213.152"/>
        </slice>
        <from usec="0" sec="1273036042"/>
        <to usec="0" sec="1273036389"/>
    </anomaly>
    <anomaly type="notice" value="0.508135,1.356880,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.108.136.185" dst_ip="195.240.21.229" src_port="1780" dst_port="80"/>
            <filter src_ip="176.108.136.185" dst_ip="195.240.21.229" src_port="1779" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273036077"/>
        <to usec="0" sec="1273036491"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="41.211.163.124"/>
        </slice>
        <from usec="0" sec="1273036087"/>
        <to usec="0" sec="1273036348"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.159.67.142"/>
        </slice>
        <from usec="0" sec="1273036144"/>
        <to usec="0" sec="1273036257"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.108.214.88"/>
        </slice>
        <from usec="0" sec="1273036151"/>
        <to usec="0" sec="1273036422"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.203.109.235"/>
        </slice>
        <from usec="0" sec="1273036167"/>
        <to usec="0" sec="1273036298"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.30.204.6"/>
        </slice>
        <from usec="0" sec="1273036180"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.53.19.181"/>
        </slice>
        <from usec="0" sec="1273036244"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.222.90.166"/>
        </slice>
        <from usec="0" sec="1273036346"/>
        <to usec="0" sec="1273036412"/>
    </anomaly>
    <anomaly type="notice" value="0.404971,1.389260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="44.25.116.214"/>
        </slice>
        <from usec="0" sec="1273036384"/>
        <to usec="0" sec="1273036388"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="13.227.3.208" dst_ip="176.108.139.98" src_port="19666" dst_port="47448"/>
            <filter src_ip="205.118.77.112" dst_ip="176.108.139.98" src_port="2532" dst_port="56789"/>
            <filter src_ip="206.38.209.225" dst_ip="176.108.139.98" src_port="56890" dst_port="47448"/>
            <filter src_ip="97.24.159.235" dst_ip="176.108.139.98" src_port="11286" dst_port="47448"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.212.29.255" dst_ip="73.139.93.210" src_port="4570" dst_port="23281"/>
        </slice>
        <from usec="0" sec="1273035620"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.146.32" dst_ip="8.134.158.242" src_port="53403" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035621"/>
        <to usec="0" sec="1273035631"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.134.250.96" dst_ip="217.169.20.8" src_port="80" dst_port="3787"/>
        </slice>
        <from usec="0" sec="1273035633"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.119.34.24" dst_ip="201.249.165.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1273035687"/>
        <to usec="0" sec="1273035709"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.46.97.125" dst_ip="133.249.108.138" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035606"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.212.199.46" dst_ip="63.179.3.248" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035608"/>
        <to usec="0" sec="1273035792"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.18.168" dst_ip="45.171.81.162" src_port="80" dst_port="44645"/>
        </slice>
        <from usec="0" sec="1273035634"/>
        <to usec="0" sec="1273035637"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.134.230.168" dst_ip="41.103.177.0" src_port="49135" dst_port="5474"/>
        </slice>
        <from usec="0" sec="1273035643"/>
        <to usec="0" sec="1273035700"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.222.65.49" dst_ip="176.108.141.68" src_port="80" dst_port="64421"/>
            <filter src_ip="36.222.65.49" dst_ip="176.108.141.68" src_port="80" dst_port="64420"/>
        </slice>
        <from usec="0" sec="1273035723"/>
        <to usec="0" sec="1273035754"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="128.212.114.18" dst_ip="223.164.237.124" dst_port="53"/>
            <filter src_ip="128.212.198.183" dst_ip="223.164.237.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035620"/>
        <to usec="0" sec="1273035967"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="179.114.61.195" dst_port="7523"/>
            <filter dst_ip="179.114.61.195" dst_port="7522"/>
        </slice>
        <from usec="0" sec="1273035624"/>
        <to usec="0" sec="1273035978"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.212.108.20" dst_ip="208.12.61.240" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035640"/>
        <to usec="0" sec="1273036069"/>
    </anomaly>
    <anomaly type="notice" value="0.820016,1.431910,999,0 0 0 0 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.54.155" dst_ip="51.65.23.164" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.121.106.185" dst_port="47185"/>
            <filter dst_ip="205.121.106.185" dst_port="47178"/>
            <filter dst_ip="205.121.106.185" dst_port="47172"/>
        </slice>
        <from usec="0" sec="1273035605"/>
        <to usec="0" sec="1273036158"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="43.64.71.6" dst_ip="128.212.109.172" src_port="2231" dst_port="445"/>
            <filter src_ip="44.243.210.217" dst_ip="128.212.109.172" src_port="80" dst_port="50239"/>
            <filter src_ip="5.231.109.208" dst_ip="128.212.109.172" src_port="1854" dst_port="445"/>
            <filter src_ip="21.176.88.130" dst_ip="128.212.109.172" src_port="80" dst_port="39208"/>
        </slice>
        <from usec="0" sec="1273035611"/>
        <to usec="0" sec="1273036168"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.134.246.57" dst_ip="212.162.19.198" dst_port="2703"/>
            <filter src_ip="204.134.245.43" dst_ip="212.162.19.198" dst_port="2703"/>
        </slice>
        <from usec="0" sec="1273035621"/>
        <to usec="0" sec="1273036220"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="134.30.241.155" dst_ip="133.249.57.29" src_port="80"/>
            <filter src_ip="134.30.241.16" dst_ip="133.249.57.29" src_port="80"/>
            <filter src_ip="134.30.241.77" dst_ip="133.249.57.29" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035639"/>
        <to usec="0" sec="1273036191"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="133.249.146.183" dst_ip="47.53.141.29" src_port="40683" dst_port="1863"/>
            <filter src_ip="133.249.43.235" dst_ip="47.53.141.29" src_port="1225" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036401"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="20.230.176.49" dst_ip="133.249.57.178" dst_port="57258"/>
        </slice>
        <from usec="0" sec="1273035607"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="179.114.168.161" dst_port="53202"/>
        </slice>
        <from usec="0" sec="1273035615"/>
        <to usec="0" sec="1273036337"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.117.109" dst_ip="195.225.133.133" dst_port="25"/>
        </slice>
        <from usec="0" sec="1273035638"/>
        <to usec="0" sec="1273036294"/>
    </anomaly>
    <anomaly type="notice" value="0.850648,1.351170,999,1 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.134.253.126" src_port="46309"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.108.136.175" dst_ip="15.0.204.94" src_port="8183"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036378"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.249.45.81" dst_ip="221.0.220.236" src_port="123"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036429"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.252.183"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273035647"/>
    </anomaly>
    <anomaly type="notice" value="0.793349,1.383670,020,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="154.174.212.3"/>
        </slice>
        <from usec="0" sec="1273035625"/>
        <to usec="0" sec="1273035976"/>
    </anomaly>
    <anomaly type="notice" value="0.852719,1.373520,503,1 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.82.158" src_port="80"/>
            <filter src_ip="133.249.82.158" src_port="2958" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035666"/>
        <to usec="0" sec="1273036497"/>
    </anomaly>
    <anomaly type="notice" value="0.795569,1.405510,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.249.22.202" src_port="53"/>
        </slice>
        <from usec="0" sec="1273035617"/>
        <to usec="0" sec="1273036457"/>
    </anomaly>
    <anomaly type="notice" value="0.795569,1.405510,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.249.22.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036339"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.128.129.112" src_port="6667"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="6.212.73.197" src_port="80"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.108.9.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.134.252.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.795569,1.405510,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.108.54.155" dst_ip="51.65.23.164" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035602"/>
        <to usec="0" sec="1273036159"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.134.244.141" src_port="53"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="1035" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1273035691"/>
        <to usec="0" sec="1273035737"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.108.90.99" src_port="25576"/>
        </slice>
        <from usec="0" sec="1273035736"/>
        <to usec="0" sec="1273035782"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.134.245.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035961"/>
        <to usec="0" sec="1273036007"/>
    </anomaly>
    <anomaly type="notice" value="0.877584,1.422110,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.163.163.14" dst_port="5900"/>
        </slice>
        <from usec="0" sec="1273036006"/>
        <to usec="0" sec="1273036052"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.249.22.202"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.33.107.232" dst_port="53"/>
            <filter dst_ip="128.33.107.232" src_port="53" dst_port="64480"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.121.106.135" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035736"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.795569,1.405510,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.119.24.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036428"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.108.9.90"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.250.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273035601"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.54.147"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.255.11"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.212.108.117"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.249.212.11"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="133.249.220.165"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.134.245.43" src_port="53"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="128.212.144.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.108.90.99" dst_port="25576"/>
        </slice>
        <from usec="0" sec="1273035736"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.108.139.14"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036097"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.134.251.249" dst_ip="201.103.18.33"/>
            <filter src_ip="204.134.251.241" dst_ip="201.103.18.33"/>
            <filter src_ip="205.121.106.0" dst_ip="201.103.18.33"/>
        </slice>
        <from usec="0" sec="1273036051"/>
        <to usec="0" sec="1273036187"/>
    </anomaly>
    <anomaly type="notice" value="0.822164,1.453030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.134.244.146" dst_port="53"/>
        </slice>
        <from usec="0" sec="1273036411"/>
        <to usec="0" sec="1273036457"/>
    </anomaly>
    <anomaly type="notice" value="0.777323,1.345930,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="133.249.174.109" dst_ip="219.114.162.19" src_port="443"/>
            <filter src_ip="133.249.174.109" dst_ip="72.135.6.43" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.249.234.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.777323,1.345930,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.249.232.137" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.108.104.37"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="192.207.88.112"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.49.182.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.777323,1.345930,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="49.77.68.188" dst_ip="176.108.136.180" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="6.177.105.253"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="133.249.201.103"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.861077,1.363250,011,1 0 0 0 0 0 0 0 0 1 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="205.219.8.98" src_port="110" dst_port="110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.804521,1.395470,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.171.79.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
