<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="90.154.43.58"/>
        </slice>
        <from usec="0" sec="1278479468"/>
        <to usec="0" sec="1278479473"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.211.46" dst_ip="197.91.175.103" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479670"/>
        <to usec="0" sec="1278479673"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.240.21.96" dst_ip="79.176.107.5" src_port="2895" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479666"/>
        <to usec="0" sec="1278479684"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.240.67.114" dst_ip="119.128.253.13" src_port="64781" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479133"/>
        <to usec="0" sec="1278479685"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.81.183.34"/>
        </slice>
        <from usec="0" sec="1278479674"/>
        <to usec="0" sec="1278479681"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.85.46.223" dst_ip="81.197.129.95" src_port="50749" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479674"/>
        <to usec="0" sec="1278479677"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.81.155.18"/>
        </slice>
        <from usec="0" sec="1278479134"/>
        <to usec="0" sec="1278479688"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.240.129.195" dst_ip="203.221.133.53" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278478937"/>
        <to usec="0" sec="1278479681"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.240.85.38"/>
        </slice>
        <from usec="0" sec="1278479675"/>
        <to usec="0" sec="1278479680"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.183.166" dst_ip="205.92.84.178" src_port="2022" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479674"/>
        <to usec="0" sec="1278479676"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.192.2.142" dst_ip="196.200.203.114" src_port="50142" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479133"/>
        <to usec="0" sec="1278479135"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.81.176.35" dst_ip="80.238.172.180" src_port="4959" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479671"/>
        <to usec="0" sec="1278479673"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.208.33"/>
        </slice>
        <from usec="0" sec="1278479469"/>
        <to usec="0" sec="1278479472"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.192.176" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479667"/>
        <to usec="0" sec="1278479681"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="83.67.117.117"/>
        </slice>
        <from usec="0" sec="1278478914"/>
        <to usec="0" sec="1278478916"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.240.90.17" dst_ip="42.104.143.196" src_port="12536" dst_port="1029" proto="udp"/>
        </slice>
        <from usec="0" sec="1278479133"/>
        <to usec="0" sec="1278479669"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.56.142.230"/>
        </slice>
        <from usec="0" sec="1278479483"/>
        <to usec="0" sec="1278479485"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.212.1.6" dst_ip="142.134.101.169" src_port="47928" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479670"/>
        <to usec="0" sec="1278479673"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="65.80.235.156"/>
        </slice>
        <from usec="0" sec="1278479135"/>
        <to usec="0" sec="1278479138"/>
    </anomaly>
    <anomaly type="notice" value="1.073190,1.636620,999,1 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.240.8.0" dst_port="25"/>
            <filter dst_ip="197.101.101.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479658"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.33.37.151"/>
        </slice>
        <from usec="0" sec="1278479131"/>
        <to usec="0" sec="1278479133"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="82.69.60.173" dst_ip="196.200.204.30" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479133"/>
        <to usec="0" sec="1278479684"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="199.17.84.231"/>
        </slice>
        <from usec="0" sec="1278479168"/>
        <to usec="0" sec="1278479182"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.185.12.25" dst_ip="174.81.131.78" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479674"/>
        <to usec="0" sec="1278479680"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.177.173" dst_ip="223.90.114.153" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479682"/>
        <to usec="0" sec="1278479684"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.85.223.88" dst_ip="83.92.241.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479670"/>
        <to usec="0" sec="1278479672"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.104.28" dst_ip="194.168.112.151" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479671"/>
        <to usec="0" sec="1278479677"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.236.52"/>
        </slice>
        <from usec="0" sec="1278479670"/>
        <to usec="0" sec="1278479672"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.91.106.4"/>
        </slice>
        <from usec="0" sec="1278479134"/>
        <to usec="0" sec="1278479136"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.168.112.243"/>
        </slice>
        <from usec="0" sec="1278479670"/>
        <to usec="0" sec="1278479672"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.91.194.219"/>
        </slice>
        <from usec="0" sec="1278478824"/>
        <to usec="0" sec="1278478826"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.29.25.222" src_port="46455" dst_port="5060" proto="udp"/>
        </slice>
        <from usec="0" sec="1278478837"/>
        <to usec="0" sec="1278479326"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="199.41.80.15"/>
        </slice>
        <from usec="0" sec="1278479280"/>
        <to usec="0" sec="1278479293"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="211.85.31.129"/>
        </slice>
        <from usec="0" sec="1278478824"/>
        <to usec="0" sec="1278478832"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="196.8.96.167" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1278479410"/>
        <to usec="0" sec="1278479412"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.163.32"/>
        </slice>
        <from usec="0" sec="1278479679"/>
        <to usec="0" sec="1278479681"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.240.54.65"/>
        </slice>
        <from usec="0" sec="1278479667"/>
        <to usec="0" sec="1278479669"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.136.121"/>
        </slice>
        <from usec="0" sec="1278479349"/>
        <to usec="0" sec="1278479351"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="198.108.105.148"/>
        </slice>
        <from usec="0" sec="1278478973"/>
        <to usec="0" sec="1278478976"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.232.138.32"/>
        </slice>
        <from usec="0" sec="1278478911"/>
        <to usec="0" sec="1278478913"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.238.50"/>
        </slice>
        <from usec="0" sec="1278478852"/>
        <to usec="0" sec="1278478854"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="70.175.80.155"/>
        </slice>
        <from usec="0" sec="1278479629"/>
        <to usec="0" sec="1278479631"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.42.5"/>
        </slice>
        <from usec="0" sec="1278479674"/>
        <to usec="0" sec="1278479676"/>
    </anomaly>
    <anomaly type="notice" value="0.962438,1.667840,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="141.33.165.240"/>
        </slice>
        <from usec="0" sec="1278478944"/>
        <to usec="0" sec="1278478946"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.92.59"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.93.196" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278478909"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.90.169.128"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278478909"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.154.95.20"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278478908"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.14.243.17"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278478909"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="120.250.79.16"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278478907"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.86.72"/>
        </slice>
        <from usec="0" sec="1278478818"/>
        <to usec="0" sec="1278479166"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.5.70.254"/>
        </slice>
        <from usec="0" sec="1278478822"/>
        <to usec="0" sec="1278478868"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.2.243"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278478873"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.8.8.232"/>
        </slice>
        <from usec="0" sec="1278478852"/>
        <to usec="0" sec="1278478856"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.120.25.20"/>
        </slice>
        <from usec="0" sec="1278478858"/>
        <to usec="0" sec="1278478877"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.133.114.31"/>
        </slice>
        <from usec="0" sec="1278478862"/>
        <to usec="0" sec="1278478894"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="76.187.163.110"/>
        </slice>
        <from usec="0" sec="1278478903"/>
        <to usec="0" sec="1278478907"/>
    </anomaly>
    <anomaly type="notice" value="0.824811,1.620580,502,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="222.65.133.71" dst_ip="222.142.147.238"/>
            <filter src_ip="222.65.133.71" dst_port="22"/>
            <filter dst_ip="222.142.147.238" dst_port="22"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479668"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.201.3"/>
        </slice>
        <from usec="0" sec="1278478842"/>
        <to usec="0" sec="1278478999"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter src_ip="136.192.2.151" dst_ip="196.200.201.241"/>
            <filter dst_ip="196.200.201.241" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="97.170.77.225"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.824811,1.620580,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.33.64.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479677"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="200.6.176.79"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.8.133"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="138.153.69.213"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.29.221.177"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479060"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="193.239.31.3"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="194.107.33.127"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.239.170.231"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="92.225.161.151"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.210.149.224"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479067"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="101.216.165.140"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.130.80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.209.100.64"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.65.6.110"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479046"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="46.11.84.88"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="92.225.161.144"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="118.92.130.215"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479088"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.85.208.98"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479084"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="105.192.144.64"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479088"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="220.245.49.168"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278478963"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.56.142.27"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.91.143.1"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479084"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.182.228"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="1.078090,1.651940,503,1 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="197.90.131.31"/>
            <filter dst_ip="9.159.221.11" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479684"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="88.217.146.237"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479088"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.216.107.167"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479068"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.22.71.104"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479087"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="212.150.131.186"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479033"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.217.34" dst_ip="220.209.113.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479084"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="197.139.85.154" dst_ip="10.1.1.186" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479081"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.186.17"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479078"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.91.107"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.20.55"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.59.116.190"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479087"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.117.65"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.153.7"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="9.107.224.151"/>
        </slice>
        <from usec="0" sec="1278479322"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="123.7.12.205"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479267"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.157.219"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479084"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="106.209.8.21"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479086"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="7.223.140.157"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479084"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.125.48.145"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="88.32.150.124"/>
        </slice>
        <from usec="0" sec="1278478811"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.203.139"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479081"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="100.200.10.162"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479078"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="46.3.225.11"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479075"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.141"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479033"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.157.160"/>
        </slice>
        <from usec="0" sec="1278478816"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.56.192.162"/>
        </slice>
        <from usec="0" sec="1278478818"/>
        <to usec="0" sec="1278479059"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="69.97.194.243"/>
        </slice>
        <from usec="0" sec="1278478822"/>
        <to usec="0" sec="1278479085"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.240.49"/>
        </slice>
        <from usec="0" sec="1278478822"/>
        <to usec="0" sec="1278479080"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.233.67.210"/>
        </slice>
        <from usec="0" sec="1278478825"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.200.206.40"/>
        </slice>
        <from usec="0" sec="1278478831"/>
        <to usec="0" sec="1278479087"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="90.37.37.236"/>
        </slice>
        <from usec="0" sec="1278478833"/>
        <to usec="0" sec="1278479080"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="82.163.45.144"/>
        </slice>
        <from usec="0" sec="1278478843"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="44.5.139.115"/>
        </slice>
        <from usec="0" sec="1278478851"/>
        <to usec="0" sec="1278479082"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.2.128.198"/>
        </slice>
        <from usec="0" sec="1278478853"/>
        <to usec="0" sec="1278478931"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.121.11.168"/>
        </slice>
        <from usec="0" sec="1278478853"/>
        <to usec="0" sec="1278479087"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.219.151"/>
        </slice>
        <from usec="0" sec="1278478854"/>
        <to usec="0" sec="1278479083"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.32.142.40"/>
        </slice>
        <from usec="0" sec="1278479182"/>
        <to usec="0" sec="1278479256"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.222.211.142"/>
        </slice>
        <from usec="0" sec="1278478880"/>
        <to usec="0" sec="1278478990"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.142.140.65"/>
        </slice>
        <from usec="0" sec="1278478882"/>
        <to usec="0" sec="1278478914"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.198.196.4"/>
        </slice>
        <from usec="0" sec="1278478889"/>
        <to usec="0" sec="1278479048"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.74.110.93"/>
        </slice>
        <from usec="0" sec="1278478894"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.824811,1.620580,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.33.186.3" dst_ip="132.221.197.1" src_port="2514" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478902"/>
        <to usec="0" sec="1278479684"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.181.70"/>
        </slice>
        <from usec="0" sec="1278478903"/>
        <to usec="0" sec="1278479066"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="144.164.27.58"/>
        </slice>
        <from usec="0" sec="1278478903"/>
        <to usec="0" sec="1278478935"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.31.187.79"/>
        </slice>
        <from usec="0" sec="1278478913"/>
        <to usec="0" sec="1278479010"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.23.130.164"/>
        </slice>
        <from usec="0" sec="1278478914"/>
        <to usec="0" sec="1278479004"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.77.102.95"/>
        </slice>
        <from usec="0" sec="1278478914"/>
        <to usec="0" sec="1278478937"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="134.13.89.135"/>
        </slice>
        <from usec="0" sec="1278478918"/>
        <to usec="0" sec="1278478923"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.122.58"/>
        </slice>
        <from usec="0" sec="1278479530"/>
        <to usec="0" sec="1278479573"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.142.15.161"/>
        </slice>
        <from usec="0" sec="1278478925"/>
        <to usec="0" sec="1278478932"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="116.60.126.185"/>
        </slice>
        <from usec="0" sec="1278478927"/>
        <to usec="0" sec="1278478934"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.7.95.243"/>
        </slice>
        <from usec="0" sec="1278478932"/>
        <to usec="0" sec="1278478998"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.47.82.239"/>
        </slice>
        <from usec="0" sec="1278478933"/>
        <to usec="0" sec="1278478958"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.194.171.99"/>
        </slice>
        <from usec="0" sec="1278478934"/>
        <to usec="0" sec="1278478942"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="152.105.78.199"/>
        </slice>
        <from usec="0" sec="1278478937"/>
        <to usec="0" sec="1278478941"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="99.28.156.71"/>
        </slice>
        <from usec="0" sec="1278478938"/>
        <to usec="0" sec="1278478976"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="84.101.214.20"/>
        </slice>
        <from usec="0" sec="1278478942"/>
        <to usec="0" sec="1278479042"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="152.37.101.251"/>
        </slice>
        <from usec="0" sec="1278478944"/>
        <to usec="0" sec="1278479081"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.180.55.83"/>
        </slice>
        <from usec="0" sec="1278478947"/>
        <to usec="0" sec="1278478952"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="142.60.172.34"/>
        </slice>
        <from usec="0" sec="1278478962"/>
        <to usec="0" sec="1278478984"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.84.195.36"/>
        </slice>
        <from usec="0" sec="1278478969"/>
        <to usec="0" sec="1278478999"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.40.43.66"/>
        </slice>
        <from usec="0" sec="1278478973"/>
        <to usec="0" sec="1278478988"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="105.10.128.4"/>
        </slice>
        <from usec="0" sec="1278478980"/>
        <to usec="0" sec="1278479087"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="109.77.81.24"/>
        </slice>
        <from usec="0" sec="1278478985"/>
        <to usec="0" sec="1278478996"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="105.33.128.96"/>
        </slice>
        <from usec="0" sec="1278479007"/>
        <to usec="0" sec="1278479013"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.244.172.92"/>
        </slice>
        <from usec="0" sec="1278479012"/>
        <to usec="0" sec="1278479019"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.226.235.92"/>
        </slice>
        <from usec="0" sec="1278479012"/>
        <to usec="0" sec="1278479082"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.8.161.34"/>
        </slice>
        <from usec="0" sec="1278479016"/>
        <to usec="0" sec="1278479033"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="78.26.108.133"/>
        </slice>
        <from usec="0" sec="1278479018"/>
        <to usec="0" sec="1278479042"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.183.16.221"/>
        </slice>
        <from usec="0" sec="1278479019"/>
        <to usec="0" sec="1278479024"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.78.74.12"/>
        </slice>
        <from usec="0" sec="1278479024"/>
        <to usec="0" sec="1278479057"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.79.27.20"/>
        </slice>
        <from usec="0" sec="1278479025"/>
        <to usec="0" sec="1278479053"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.66.226.112"/>
        </slice>
        <from usec="0" sec="1278479026"/>
        <to usec="0" sec="1278479037"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="117.82.153.83"/>
        </slice>
        <from usec="0" sec="1278479035"/>
        <to usec="0" sec="1278479051"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.36.47.99"/>
        </slice>
        <from usec="0" sec="1278479037"/>
        <to usec="0" sec="1278479048"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.91.26.169"/>
        </slice>
        <from usec="0" sec="1278479040"/>
        <to usec="0" sec="1278479076"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="75.196.33.215"/>
        </slice>
        <from usec="0" sec="1278479048"/>
        <to usec="0" sec="1278479078"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.122.85.31"/>
        </slice>
        <from usec="0" sec="1278479060"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.135.102.147"/>
        </slice>
        <from usec="0" sec="1278479074"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.5.129.144"/>
        </slice>
        <from usec="0" sec="1278479079"/>
        <to usec="0" sec="1278479082"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.134.163.192"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="210.74.102.252"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.216.92"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479178"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="109.136.189.42"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479177"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="101.149.51.68"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.85.41.125"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.180.209.24"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479154"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.21.27.91"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479172"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="81.12.148.245"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.153.80"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479054"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.92.92.216" dst_port="80"/>
            <filter dst_ip="173.92.92.216" dst_port="443"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479178"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.182.142.141"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479176"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="46.43.143.60"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479177"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.153.227"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479611"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="83.150.72.218"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479078"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.64"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479175"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.69.63.107"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.85.166"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479130"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.0.37"/>
        </slice>
        <from usec="0" sec="1278478814"/>
        <to usec="0" sec="1278479170"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.165.166"/>
        </slice>
        <from usec="0" sec="1278478820"/>
        <to usec="0" sec="1278479127"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="194.168.112.168"/>
        </slice>
        <from usec="0" sec="1278478837"/>
        <to usec="0" sec="1278479164"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="211.129.35.226"/>
        </slice>
        <from usec="0" sec="1278478863"/>
        <to usec="0" sec="1278479062"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="104.3.140.174"/>
        </slice>
        <from usec="0" sec="1278478883"/>
        <to usec="0" sec="1278479018"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.41.168"/>
        </slice>
        <from usec="0" sec="1278478899"/>
        <to usec="0" sec="1278479174"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.144.218"/>
        </slice>
        <from usec="0" sec="1278479256"/>
        <to usec="0" sec="1278479410"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.193.53"/>
        </slice>
        <from usec="0" sec="1278478933"/>
        <to usec="0" sec="1278479016"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="21.168.6.62"/>
        </slice>
        <from usec="0" sec="1278478964"/>
        <to usec="0" sec="1278479147"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="78.212.90.104"/>
        </slice>
        <from usec="0" sec="1278479000"/>
        <to usec="0" sec="1278479006"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.162.10"/>
        </slice>
        <from usec="0" sec="1278479012"/>
        <to usec="0" sec="1278479176"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.56.194.4"/>
        </slice>
        <from usec="0" sec="1278479018"/>
        <to usec="0" sec="1278479139"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.125.48.214"/>
        </slice>
        <from usec="0" sec="1278479046"/>
        <to usec="0" sec="1278479069"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.117.48.81"/>
        </slice>
        <from usec="0" sec="1278479069"/>
        <to usec="0" sec="1278479159"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.22.174.57"/>
        </slice>
        <from usec="0" sec="1278479077"/>
        <to usec="0" sec="1278479178"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="95.184.28.206"/>
        </slice>
        <from usec="0" sec="1278479081"/>
        <to usec="0" sec="1278479173"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.147.127.44"/>
        </slice>
        <from usec="0" sec="1278479094"/>
        <to usec="0" sec="1278479099"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="85.146.227.53"/>
        </slice>
        <from usec="0" sec="1278479098"/>
        <to usec="0" sec="1278479166"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.85.47.129"/>
        </slice>
        <from usec="0" sec="1278479101"/>
        <to usec="0" sec="1278479586"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.128.97.224"/>
        </slice>
        <from usec="0" sec="1278479103"/>
        <to usec="0" sec="1278479150"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="67.137.34.76"/>
        </slice>
        <from usec="0" sec="1278479107"/>
        <to usec="0" sec="1278479150"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.137.181.86"/>
        </slice>
        <from usec="0" sec="1278479158"/>
        <to usec="0" sec="1278479165"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.91.26.142"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479267"/>
    </anomaly>
    <anomaly type="notice" value="1.073190,1.636620,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.81.136.122" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479680"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="90.58.188.82"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.7.8.107"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.81.93.93"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479268"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="192.41.128.64"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479268"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="58.73.216.118"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479538"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.210.149.225"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479251"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.165.197"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479268"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.67.77.15"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479266"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.205.13"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="213.96.197.49"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="174.81.224.221" dst_ip="90.154.229.7" dst_port="25"/>
            <filter src_ip="174.81.177.173" dst_ip="90.154.229.7" dst_port="25"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.9.102.24"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.229.105.100"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="196.200.201.81"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479239"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.240.38.112" dst_ip="80.238.233.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479356"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.212.27"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479266"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.81.144"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479195"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.240.133.1"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479626"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.59.116.130"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479238"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="141.33.80.163"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.53.202"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479264"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.97.134.201"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479258"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.153.244"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479244"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.228.52"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="81.195.20.75"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479265"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.85.43.40"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479250"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.84"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479251"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.59.116.142"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479267"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.82.56"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479259"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="95.182.222.43"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.200.205.150"/>
        </slice>
        <from usec="0" sec="1278478808"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.186.20"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479232"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.190.211"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479265"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="84.17.133.26"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479263"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.166.119.24"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479248"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.56.138.203"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479260"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.109.211"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.130.72"/>
        </slice>
        <from usec="0" sec="1278478814"/>
        <to usec="0" sec="1278479233"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.217.115.211"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479264"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.149.94"/>
        </slice>
        <from usec="0" sec="1278478816"/>
        <to usec="0" sec="1278479268"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="211.216.117.58"/>
        </slice>
        <from usec="0" sec="1278478827"/>
        <to usec="0" sec="1278479262"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.121.11.130"/>
        </slice>
        <from usec="0" sec="1278478828"/>
        <to usec="0" sec="1278479254"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.0.218"/>
        </slice>
        <from usec="0" sec="1278478836"/>
        <to usec="0" sec="1278479599"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.40.27"/>
        </slice>
        <from usec="0" sec="1278479347"/>
        <to usec="0" sec="1278479446"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.200.197.19"/>
        </slice>
        <from usec="0" sec="1278478851"/>
        <to usec="0" sec="1278479241"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.85.201.20"/>
        </slice>
        <from usec="0" sec="1278478852"/>
        <to usec="0" sec="1278479262"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="121.63.70.96"/>
        </slice>
        <from usec="0" sec="1278478856"/>
        <to usec="0" sec="1278479337"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.202.177.43"/>
        </slice>
        <from usec="0" sec="1278478890"/>
        <to usec="0" sec="1278479249"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.73.84.176"/>
        </slice>
        <from usec="0" sec="1278478914"/>
        <to usec="0" sec="1278479180"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.178.184"/>
        </slice>
        <from usec="0" sec="1278478942"/>
        <to usec="0" sec="1278479244"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="91.56.209.78"/>
        </slice>
        <from usec="0" sec="1278478948"/>
        <to usec="0" sec="1278479147"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.54.104"/>
        </slice>
        <from usec="0" sec="1278478951"/>
        <to usec="0" sec="1278479260"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="7.77.159.239"/>
        </slice>
        <from usec="0" sec="1278478961"/>
        <to usec="0" sec="1278479162"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="116.70.159.88"/>
        </slice>
        <from usec="0" sec="1278478971"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="106.67.136.51"/>
        </slice>
        <from usec="0" sec="1278478993"/>
        <to usec="0" sec="1278479120"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="83.41.153.92"/>
        </slice>
        <from usec="0" sec="1278478999"/>
        <to usec="0" sec="1278479213"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.14.146.14"/>
        </slice>
        <from usec="0" sec="1278479043"/>
        <to usec="0" sec="1278479170"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.23.181.116"/>
        </slice>
        <from usec="0" sec="1278479060"/>
        <to usec="0" sec="1278479090"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="107.6.231.8"/>
        </slice>
        <from usec="0" sec="1278479069"/>
        <to usec="0" sec="1278479297"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.207.197.196"/>
        </slice>
        <from usec="0" sec="1278479071"/>
        <to usec="0" sec="1278479104"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.244.176.114"/>
        </slice>
        <from usec="0" sec="1278479087"/>
        <to usec="0" sec="1278479111"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="109.176.230.146"/>
        </slice>
        <from usec="0" sec="1278479092"/>
        <to usec="0" sec="1278479248"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="121.110.233.15"/>
        </slice>
        <from usec="0" sec="1278479100"/>
        <to usec="0" sec="1278479125"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.131.17.216"/>
        </slice>
        <from usec="0" sec="1278479101"/>
        <to usec="0" sec="1278479127"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.64.86.38"/>
        </slice>
        <from usec="0" sec="1278479104"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.69.237.93"/>
        </slice>
        <from usec="0" sec="1278479107"/>
        <to usec="0" sec="1278479120"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.123.13.168"/>
        </slice>
        <from usec="0" sec="1278479109"/>
        <to usec="0" sec="1278479231"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.202.37.9"/>
        </slice>
        <from usec="0" sec="1278479111"/>
        <to usec="0" sec="1278479127"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.56.40.228"/>
        </slice>
        <from usec="0" sec="1278479113"/>
        <to usec="0" sec="1278479127"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.221.162"/>
        </slice>
        <from usec="0" sec="1278479135"/>
        <to usec="0" sec="1278479256"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.108.235.53"/>
        </slice>
        <from usec="0" sec="1278479136"/>
        <to usec="0" sec="1278479161"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="86.94.8.163"/>
        </slice>
        <from usec="0" sec="1278479138"/>
        <to usec="0" sec="1278479153"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.69.63.116"/>
        </slice>
        <from usec="0" sec="1278479145"/>
        <to usec="0" sec="1278479147"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.154.158.20"/>
        </slice>
        <from usec="0" sec="1278479145"/>
        <to usec="0" sec="1278479211"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="79.176.106.71"/>
        </slice>
        <from usec="0" sec="1278479146"/>
        <to usec="0" sec="1278479156"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="95.184.28.195"/>
        </slice>
        <from usec="0" sec="1278479149"/>
        <to usec="0" sec="1278479269"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.177.160.245"/>
        </slice>
        <from usec="0" sec="1278479157"/>
        <to usec="0" sec="1278479236"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="105.248.77.172"/>
        </slice>
        <from usec="0" sec="1278479167"/>
        <to usec="0" sec="1278479264"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.203.154.136"/>
        </slice>
        <from usec="0" sec="1278479180"/>
        <to usec="0" sec="1278479237"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.66.120.35"/>
        </slice>
        <from usec="0" sec="1278479183"/>
        <to usec="0" sec="1278479199"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.11.218.26"/>
        </slice>
        <from usec="0" sec="1278479187"/>
        <to usec="0" sec="1278479201"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.66.116.236"/>
        </slice>
        <from usec="0" sec="1278479191"/>
        <to usec="0" sec="1278479203"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="74.105.103.35"/>
        </slice>
        <from usec="0" sec="1278479195"/>
        <to usec="0" sec="1278479242"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.31.15.60"/>
        </slice>
        <from usec="0" sec="1278479207"/>
        <to usec="0" sec="1278479241"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.198.199.10"/>
        </slice>
        <from usec="0" sec="1278479229"/>
        <to usec="0" sec="1278479261"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="174.81.136.122"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.198.3"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.65.133.71"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.152.158"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="96.79.16.109"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.90.164.61"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="81.12.136.52"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="214.8.169.61"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479323"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="197.201.19.41"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479339"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.8.149.49"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="141.33.68.65" dst_ip="194.73.234.237" dst_port="80"/>
            <filter src_ip="174.81.37.195" dst_ip="194.73.234.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479353"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.92.92.184" dst_ip="174.81.122.14"/>
            <filter src_ip="173.92.92.184" src_port="443"/>
            <filter dst_ip="174.81.122.14" src_port="80"/>
            <filter src_ip="131.250.183.240" dst_ip="174.81.122.14" src_port="443"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479533"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.14.231"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479345"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,004,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.200.194.209"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="196.200.205.195"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.11.97.136"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.9.105"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479526"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.200.198.197"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479357"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.84.67"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479354"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.236.75"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.90.189.107"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479347"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.157.1"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479355"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.20.138"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="220.196.194.139"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479337"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.125.64"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="90.154.229.11"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479355"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.201.112"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479354"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.150.68"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.240.157"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479317"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.2.21"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479278"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.73.83.30"/>
        </slice>
        <from usec="0" sec="1278478815"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.134.101.153"/>
        </slice>
        <from usec="0" sec="1278478822"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.16.33"/>
        </slice>
        <from usec="0" sec="1278478837"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.80.205"/>
        </slice>
        <from usec="0" sec="1278478858"/>
        <to usec="0" sec="1278479453"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.157.172"/>
        </slice>
        <from usec="0" sec="1278478860"/>
        <to usec="0" sec="1278479349"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.162.70"/>
        </slice>
        <from usec="0" sec="1278478915"/>
        <to usec="0" sec="1278479342"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.50.164.185"/>
        </slice>
        <from usec="0" sec="1278478937"/>
        <to usec="0" sec="1278479336"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="184.140.240.216"/>
        </slice>
        <from usec="0" sec="1278478964"/>
        <to usec="0" sec="1278479343"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.81.155.18"/>
        </slice>
        <from usec="0" sec="1278479021"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.74.182.5"/>
        </slice>
        <from usec="0" sec="1278479021"/>
        <to usec="0" sec="1278479342"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="71.50.169.87"/>
        </slice>
        <from usec="0" sec="1278479042"/>
        <to usec="0" sec="1278479353"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="223.141.138.236"/>
        </slice>
        <from usec="0" sec="1278479056"/>
        <to usec="0" sec="1278479267"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="47.62.208.113"/>
        </slice>
        <from usec="0" sec="1278479067"/>
        <to usec="0" sec="1278479235"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.29.193.244"/>
        </slice>
        <from usec="0" sec="1278479154"/>
        <to usec="0" sec="1278479216"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.202.46.15"/>
        </slice>
        <from usec="0" sec="1278479168"/>
        <to usec="0" sec="1278479189"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.228.18.119"/>
        </slice>
        <from usec="0" sec="1278479174"/>
        <to usec="0" sec="1278479356"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.156.141.164"/>
        </slice>
        <from usec="0" sec="1278479185"/>
        <to usec="0" sec="1278479192"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="196.158.7.217"/>
        </slice>
        <from usec="0" sec="1278479199"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="42.110.242.144"/>
        </slice>
        <from usec="0" sec="1278479209"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.221.60"/>
        </slice>
        <from usec="0" sec="1278479216"/>
        <to usec="0" sec="1278479319"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.130.173.122"/>
        </slice>
        <from usec="0" sec="1278479220"/>
        <to usec="0" sec="1278479271"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="84.46.21.38"/>
        </slice>
        <from usec="0" sec="1278479226"/>
        <to usec="0" sec="1278479303"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="81.12.145.154"/>
        </slice>
        <from usec="0" sec="1278479230"/>
        <to usec="0" sec="1278479234"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.102.105.176"/>
        </slice>
        <from usec="0" sec="1278479245"/>
        <to usec="0" sec="1278479339"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.205.167.56"/>
        </slice>
        <from usec="0" sec="1278479247"/>
        <to usec="0" sec="1278479279"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.201.246.239"/>
        </slice>
        <from usec="0" sec="1278479257"/>
        <to usec="0" sec="1278479315"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="213.113.118.25"/>
        </slice>
        <from usec="0" sec="1278479257"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.195.156.62"/>
        </slice>
        <from usec="0" sec="1278479262"/>
        <to usec="0" sec="1278479281"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="44.86.144.253"/>
        </slice>
        <from usec="0" sec="1278479269"/>
        <to usec="0" sec="1278479278"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.162.237.207"/>
        </slice>
        <from usec="0" sec="1278479290"/>
        <to usec="0" sec="1278479300"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.185.74.64"/>
        </slice>
        <from usec="0" sec="1278479297"/>
        <to usec="0" sec="1278479314"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.202.53.44"/>
        </slice>
        <from usec="0" sec="1278479311"/>
        <to usec="0" sec="1278479326"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.97.55.196"/>
        </slice>
        <from usec="0" sec="1278479319"/>
        <to usec="0" sec="1278479356"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.137.132.239"/>
        </slice>
        <from usec="0" sec="1278479335"/>
        <to usec="0" sec="1278479351"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.62.116.205"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.200.206.88"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.79.211.140" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.134.19.168"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.129.195"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479441"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.134.101.144"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479444"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.105.100"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479444"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.166.237"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479448"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.85.32"/>
        </slice>
        <from usec="0" sec="1278478834"/>
        <to usec="0" sec="1278479428"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.81.102.210"/>
        </slice>
        <from usec="0" sec="1278478838"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="81.82.95.226"/>
        </slice>
        <from usec="0" sec="1278478841"/>
        <to usec="0" sec="1278479447"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.87.10"/>
        </slice>
        <from usec="0" sec="1278478847"/>
        <to usec="0" sec="1278479448"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.166.242.38"/>
        </slice>
        <from usec="0" sec="1278478862"/>
        <to usec="0" sec="1278479445"/>
    </anomaly>
    <anomaly type="notice" value="1.073190,1.636620,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.200.193.37" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479669"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="104.142.224.238"/>
        </slice>
        <from usec="0" sec="1278479228"/>
        <to usec="0" sec="1278479318"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.77.126.161"/>
        </slice>
        <from usec="0" sec="1278479278"/>
        <to usec="0" sec="1278479309"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.238.14.26"/>
        </slice>
        <from usec="0" sec="1278479286"/>
        <to usec="0" sec="1278479289"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.8.184.153"/>
        </slice>
        <from usec="0" sec="1278479295"/>
        <to usec="0" sec="1278479312"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.89.104.170"/>
        </slice>
        <from usec="0" sec="1278479307"/>
        <to usec="0" sec="1278479362"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="91.64.0.29"/>
        </slice>
        <from usec="0" sec="1278479310"/>
        <to usec="0" sec="1278479332"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="134.251.168.157"/>
        </slice>
        <from usec="0" sec="1278479383"/>
        <to usec="0" sec="1278479442"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="222.128.218.175"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479375"/>
    </anomaly>
    <anomaly type="notice" value="1.073190,1.636620,503,1 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.53.13" dst_ip="204.101.217.121" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479673"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="131.43.254.149"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479538"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="222.34.126.103"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479538"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.60.170.87"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="99.184.18.116"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.40.33"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.210.129.100"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479462"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="108.234.201.145"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.12.136.132"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479535"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.10.20.218"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.90.26.113"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479530"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.161.40.53"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479530"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.236.56"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.38.149"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.192.7"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479530"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.98.118"/>
        </slice>
        <from usec="0" sec="1278478813"/>
        <to usec="0" sec="1278479496"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="80.239.162.11"/>
        </slice>
        <from usec="0" sec="1278478816"/>
        <to usec="0" sec="1278479537"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.75.201.227"/>
        </slice>
        <from usec="0" sec="1278478819"/>
        <to usec="0" sec="1278479511"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.71"/>
        </slice>
        <from usec="0" sec="1278478823"/>
        <to usec="0" sec="1278479538"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.56.214.134"/>
        </slice>
        <from usec="0" sec="1278478834"/>
        <to usec="0" sec="1278479531"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.225.100"/>
        </slice>
        <from usec="0" sec="1278478843"/>
        <to usec="0" sec="1278479514"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.56.80.86"/>
        </slice>
        <from usec="0" sec="1278478852"/>
        <to usec="0" sec="1278479515"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.85.207.183"/>
        </slice>
        <from usec="0" sec="1278478876"/>
        <to usec="0" sec="1278479463"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="174.81.19.107"/>
        </slice>
        <from usec="0" sec="1278478923"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.104.104"/>
        </slice>
        <from usec="0" sec="1278478977"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="110.244.196.206"/>
        </slice>
        <from usec="0" sec="1278479034"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="95.184.28.219"/>
        </slice>
        <from usec="0" sec="1278479055"/>
        <to usec="0" sec="1278479496"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.153.208.85"/>
        </slice>
        <from usec="0" sec="1278479103"/>
        <to usec="0" sec="1278479505"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="45.60.176.124"/>
        </slice>
        <from usec="0" sec="1278479217"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.210.105"/>
        </slice>
        <from usec="0" sec="1278479243"/>
        <to usec="0" sec="1278479419"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.199.116"/>
        </slice>
        <from usec="0" sec="1278479248"/>
        <to usec="0" sec="1278479515"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="74.170.147.37"/>
        </slice>
        <from usec="0" sec="1278479256"/>
        <to usec="0" sec="1278479374"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.240.81.229"/>
        </slice>
        <from usec="0" sec="1278479279"/>
        <to usec="0" sec="1278479385"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="204.66.146.80"/>
        </slice>
        <from usec="0" sec="1278479294"/>
        <to usec="0" sec="1278479493"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.139.40"/>
        </slice>
        <from usec="0" sec="1278479297"/>
        <to usec="0" sec="1278479447"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.11.204.107"/>
        </slice>
        <from usec="0" sec="1278479323"/>
        <to usec="0" sec="1278479388"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.34.238.81"/>
        </slice>
        <from usec="0" sec="1278479340"/>
        <to usec="0" sec="1278479392"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.87.66.18"/>
        </slice>
        <from usec="0" sec="1278479354"/>
        <to usec="0" sec="1278479360"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="74.100.213.109"/>
        </slice>
        <from usec="0" sec="1278479369"/>
        <to usec="0" sec="1278479379"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.46.172.26"/>
        </slice>
        <from usec="0" sec="1278479371"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.209.2"/>
        </slice>
        <from usec="0" sec="1278479374"/>
        <to usec="0" sec="1278479479"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="83.69.108.128"/>
        </slice>
        <from usec="0" sec="1278479376"/>
        <to usec="0" sec="1278479396"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.179.4.3"/>
        </slice>
        <from usec="0" sec="1278479384"/>
        <to usec="0" sec="1278479393"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.33.2.56"/>
        </slice>
        <from usec="0" sec="1278479397"/>
        <to usec="0" sec="1278479538"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="221.156.141.120"/>
        </slice>
        <from usec="0" sec="1278479400"/>
        <to usec="0" sec="1278479405"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="96.108.50.182"/>
        </slice>
        <from usec="0" sec="1278479414"/>
        <to usec="0" sec="1278479443"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="86.20.104.58"/>
        </slice>
        <from usec="0" sec="1278479439"/>
        <to usec="0" sec="1278479443"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.14.42.208"/>
        </slice>
        <from usec="0" sec="1278479445"/>
        <to usec="0" sec="1278479490"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.43.93.46"/>
        </slice>
        <from usec="0" sec="1278479488"/>
        <to usec="0" sec="1278479491"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.130"/>
        </slice>
        <from usec="0" sec="1278479493"/>
        <to usec="0" sec="1278479521"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="83.41.158.120"/>
        </slice>
        <from usec="0" sec="1278479505"/>
        <to usec="0" sec="1278479515"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.90.131.6"/>
        </slice>
        <from usec="0" sec="1278479510"/>
        <to usec="0" sec="1278479529"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.171.56.147"/>
        </slice>
        <from usec="0" sec="1278479514"/>
        <to usec="0" sec="1278479526"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="71.131.105.10"/>
        </slice>
        <from usec="0" sec="1278479521"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.238.211.129"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.9.230"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.216.2"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="196.27.82.101"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.2.192"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479623"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.174.245.120"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.61.140.160"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479533"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.208.68"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.85.197.249"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.81.237.34"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="197.105.101.76"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.200.194.244"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479583"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="88.149.70.211"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.49.100"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479607"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="196.200.201.229"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479502"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.240.225.100"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479626"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.56.68.15"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479626"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="87.17.23.227"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479611"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.220.110"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479556"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.176.72"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.118.84.212"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479592"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.193.50"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479622"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.18.135.91"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479480"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.90.188.7"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="141.33.42.171"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479617"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.91.26.145"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479625"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.76.70"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479617"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.144.168"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479610"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.168.120.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="183.173.113.9"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479605"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="221.156.180.87"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479595"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.3.9.177"/>
        </slice>
        <from usec="0" sec="1278478809"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="220.194.134.164"/>
        </slice>
        <from usec="0" sec="1278478811"/>
        <to usec="0" sec="1278479621"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.174.233.115"/>
        </slice>
        <from usec="0" sec="1278478811"/>
        <to usec="0" sec="1278479623"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.110.194.68" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479620"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="81.12.177.107"/>
        </slice>
        <from usec="0" sec="1278478818"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.200.194.205" dst_ip="209.21.62.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478820"/>
        <to usec="0" sec="1278479624"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.90.91"/>
        </slice>
        <from usec="0" sec="1278478821"/>
        <to usec="0" sec="1278479561"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.205.188"/>
        </slice>
        <from usec="0" sec="1278478825"/>
        <to usec="0" sec="1278479623"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.235.237.149"/>
        </slice>
        <from usec="0" sec="1278478829"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.61.52"/>
        </slice>
        <from usec="0" sec="1278478831"/>
        <to usec="0" sec="1278479621"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.91.26.220"/>
        </slice>
        <from usec="0" sec="1278478833"/>
        <to usec="0" sec="1278479601"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="74.2.75.165"/>
        </slice>
        <from usec="0" sec="1278478841"/>
        <to usec="0" sec="1278479603"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.85.46.234"/>
        </slice>
        <from usec="0" sec="1278478851"/>
        <to usec="0" sec="1278479584"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.41.153.33"/>
        </slice>
        <from usec="0" sec="1278478858"/>
        <to usec="0" sec="1278479565"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.81.13"/>
        </slice>
        <from usec="0" sec="1278478868"/>
        <to usec="0" sec="1278479613"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="80.206.166.166"/>
        </slice>
        <from usec="0" sec="1278478870"/>
        <to usec="0" sec="1278479625"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="94.159.211.248"/>
        </slice>
        <from usec="0" sec="1278478908"/>
        <to usec="0" sec="1278479462"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="79.176.107.19"/>
        </slice>
        <from usec="0" sec="1278478915"/>
        <to usec="0" sec="1278479488"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="150.64.78.11"/>
        </slice>
        <from usec="0" sec="1278478921"/>
        <to usec="0" sec="1278479619"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="87.96.164.157"/>
        </slice>
        <from usec="0" sec="1278478924"/>
        <to usec="0" sec="1278479515"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.7.81"/>
        </slice>
        <from usec="0" sec="1278479006"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.244.200.0"/>
        </slice>
        <from usec="0" sec="1278479008"/>
        <to usec="0" sec="1278479510"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.32.43.1"/>
        </slice>
        <from usec="0" sec="1278479053"/>
        <to usec="0" sec="1278479525"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.240.132.48"/>
        </slice>
        <from usec="0" sec="1278479076"/>
        <to usec="0" sec="1278479620"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="73.130.225.15"/>
        </slice>
        <from usec="0" sec="1278479195"/>
        <to usec="0" sec="1278479515"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.62.14.95"/>
        </slice>
        <from usec="0" sec="1278479274"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.2.49.9"/>
        </slice>
        <from usec="0" sec="1278479282"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.221.209.23"/>
        </slice>
        <from usec="0" sec="1278479284"/>
        <to usec="0" sec="1278479516"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.130.22.13"/>
        </slice>
        <from usec="0" sec="1278479285"/>
        <to usec="0" sec="1278479617"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="96.112.115.102"/>
        </slice>
        <from usec="0" sec="1278479290"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.106.76"/>
        </slice>
        <from usec="0" sec="1278479304"/>
        <to usec="0" sec="1278479625"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.73.84.237"/>
        </slice>
        <from usec="0" sec="1278479317"/>
        <to usec="0" sec="1278479614"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="85.199.194.102"/>
        </slice>
        <from usec="0" sec="1278479358"/>
        <to usec="0" sec="1278479558"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.56.193.181"/>
        </slice>
        <from usec="0" sec="1278479363"/>
        <to usec="0" sec="1278479583"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="134.233.81.229"/>
        </slice>
        <from usec="0" sec="1278479428"/>
        <to usec="0" sec="1278479617"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.80.125.1"/>
        </slice>
        <from usec="0" sec="1278479437"/>
        <to usec="0" sec="1278479525"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.87.53.210"/>
        </slice>
        <from usec="0" sec="1278479456"/>
        <to usec="0" sec="1278479570"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.68.33.13"/>
        </slice>
        <from usec="0" sec="1278479468"/>
        <to usec="0" sec="1278479504"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.69.60.175"/>
        </slice>
        <from usec="0" sec="1278479491"/>
        <to usec="0" sec="1278479494"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.65.62.5"/>
        </slice>
        <from usec="0" sec="1278479491"/>
        <to usec="0" sec="1278479505"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.202.33.47"/>
        </slice>
        <from usec="0" sec="1278479501"/>
        <to usec="0" sec="1278479512"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.150.200.173"/>
        </slice>
        <from usec="0" sec="1278479507"/>
        <to usec="0" sec="1278479566"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.165.22.79"/>
        </slice>
        <from usec="0" sec="1278479509"/>
        <to usec="0" sec="1278479517"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,901,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.199.96.34"/>
        </slice>
        <from usec="0" sec="1278479510"/>
        <to usec="0" sec="1278479511"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.36.165.86"/>
        </slice>
        <from usec="0" sec="1278479514"/>
        <to usec="0" sec="1278479562"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="134.11.246.221"/>
        </slice>
        <from usec="0" sec="1278479527"/>
        <to usec="0" sec="1278479531"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="4.210.75.34"/>
        </slice>
        <from usec="0" sec="1278479533"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.200.92.80"/>
        </slice>
        <from usec="0" sec="1278479537"/>
        <to usec="0" sec="1278479547"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.136.165.88"/>
        </slice>
        <from usec="0" sec="1278479537"/>
        <to usec="0" sec="1278479552"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.123.16.234"/>
        </slice>
        <from usec="0" sec="1278479538"/>
        <to usec="0" sec="1278479565"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.37.40.131"/>
        </slice>
        <from usec="0" sec="1278479543"/>
        <to usec="0" sec="1278479549"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.161.17.193"/>
        </slice>
        <from usec="0" sec="1278479555"/>
        <to usec="0" sec="1278479576"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.2.49.17"/>
        </slice>
        <from usec="0" sec="1278479569"/>
        <to usec="0" sec="1278479623"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="78.18.160.44"/>
        </slice>
        <from usec="0" sec="1278479573"/>
        <to usec="0" sec="1278479593"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.33.28.163"/>
        </slice>
        <from usec="0" sec="1278479583"/>
        <to usec="0" sec="1278479597"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.51.42.130"/>
        </slice>
        <from usec="0" sec="1278479584"/>
        <to usec="0" sec="1278479594"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="80.238.142.8"/>
        </slice>
        <from usec="0" sec="1278479588"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="73.230.28.91"/>
        </slice>
        <from usec="0" sec="1278479594"/>
        <to usec="0" sec="1278479599"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.227.179.161"/>
        </slice>
        <from usec="0" sec="1278479596"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.132.182.103"/>
        </slice>
        <from usec="0" sec="1278479602"/>
        <to usec="0" sec="1278479610"/>
    </anomaly>
    <anomaly type="notice" value="0.288423,1.611310,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.212.106.85"/>
        </slice>
        <from usec="0" sec="1278479603"/>
        <to usec="0" sec="1278479626"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.176.1.135" dst_ip="141.33.106.122" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479255"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.164.65" dst_port="22778"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278478909"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.240.83.46" dst_port="46190"/>
            <filter src_ip="131.250.186.90" dst_ip="169.240.83.46" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278478908"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="46.3.238.25" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278478997"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="131.250.183.253" dst_port="80"/>
            <filter src_ip="174.81.161.19" dst_ip="131.250.183.253" dst_port="443"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479080"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="184.13.46.243" dst_ip="45.58.156.247" src_port="13872" dst_port="15000"/>
            <filter src_ip="184.13.46.243" dst_ip="45.58.156.247" src_port="13872" dst_port="1647"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479088"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.81.217.34" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.240.90.17" dst_ip="42.74.194.248" src_port="12536" dst_port="13210"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479089"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.165.197" dst_ip="199.37.47.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479088"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="184.13.46.243" dst_ip="45.57.71.50" src_port="13872" dst_port="20116"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479076"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.102.31" dst_ip="90.155.147.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478893"/>
        <to usec="0" sec="1278478987"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="134.5.130.54" src_port="80" dst_port="59145"/>
        </slice>
        <from usec="0" sec="1278479562"/>
        <to usec="0" sec="1278479568"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.56.3" dst_ip="45.178.65.89" dst_port="443"/>
        </slice>
        <from usec="0" sec="1278479004"/>
        <to usec="0" sec="1278479075"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.196" dst_ip="214.245.202.218" src_port="80" dst_port="1606"/>
            <filter src_ip="141.33.93.196" dst_ip="214.245.202.218" src_port="80" dst_port="1605"/>
            <filter src_ip="141.33.93.196" dst_ip="214.245.202.218" src_port="80" dst_port="1604"/>
            <filter src_ip="141.33.93.196" dst_ip="214.245.202.218" src_port="80" dst_port="1603"/>
            <filter src_ip="141.33.93.196" dst_ip="214.245.202.218" src_port="80" dst_port="1602"/>
        </slice>
        <from usec="0" sec="1278479050"/>
        <to usec="0" sec="1278479064"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,504,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.240.130.80" dst_ip="76.129.217.144" src_port="60357" dst_port="443"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.130.137" src_port="80"/>
            <filter dst_ip="141.33.130.137" dst_port="39821"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479179"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.81.237.227" dst_port="17215"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479353"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.194.228" src_port="53" dst_port="54773"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479170"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="174.81.221.139" dst_ip="222.9.244.76" dst_port="80"/>
            <filter src_ip="174.81.221.139" dst_ip="222.9.244.76" dst_port="20480"/>
            <filter src_ip="174.81.92.67" dst_ip="222.9.244.76" dst_port="80"/>
            <filter src_ip="174.81.236.19" dst_ip="222.9.244.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478956"/>
        <to usec="0" sec="1278479169"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.85.41.125" dst_ip="197.229.14.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479072"/>
        <to usec="0" sec="1278479076"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.240.81.0" dst_ip="132.223.214.213" src_port="63562" dst_port="80"/>
            <filter src_ip="169.240.81.0" dst_ip="132.223.214.213" src_port="63561" dst_port="80"/>
            <filter src_ip="169.240.81.0" dst_ip="132.223.214.213" src_port="63560" dst_port="80"/>
            <filter src_ip="169.240.81.0" dst_ip="132.223.214.213" src_port="63559" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479148"/>
        <to usec="0" sec="1278479165"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.148.40" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479449"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="99.61.35.223" dst_ip="197.85.46.233" dst_port="25"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479268"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.81.125.26" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.85.197.200" dst_ip="220.198.197.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478841"/>
        <to usec="0" sec="1278479262"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="173.162.107.201" dst_ip="169.240.84.26" src_port="80"/>
            <filter src_ip="173.92.92.61" dst_ip="169.240.84.26" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478862"/>
        <to usec="0" sec="1278479261"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.33.93.196" dst_ip="44.200.68.47" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478981"/>
        <to usec="0" sec="1278479177"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="196.200.205.39" dst_ip="193.90.74.236"/>
        </slice>
        <from usec="0" sec="1278478999"/>
        <to usec="0" sec="1278479199"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.53.168" dst_ip="220.136.42.4" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479037"/>
        <to usec="0" sec="1278479105"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.32.198" dst_ip="80.238.235.13" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479155"/>
        <to usec="0" sec="1278479250"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.200.196.40" dst_ip="196.202.188.6" src_port="80" dst_port="19364"/>
        </slice>
        <from usec="0" sec="1278479177"/>
        <to usec="0" sec="1278479189"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="86.48.41.220" src_port="80" dst_port="58341"/>
        </slice>
        <from usec="0" sec="1278479258"/>
        <to usec="0" sec="1278479262"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="134.12.226.171" src_port="80" dst_port="60188"/>
        </slice>
        <from usec="0" sec="1278479259"/>
        <to usec="0" sec="1278479264"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="200.119.66.48" dst_ip="131.89.207.192"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.232.149.155" dst_ip="83.41.153.181" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479347"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.161.18"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479355"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="21.58.40.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479355"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="200.7.6.19" dst_ip="210.238.218.196" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478804"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="141.33.148.209" dst_ip="194.73.83.34" src_port="54680" dst_port="1863"/>
            <filter src_ip="174.81.53.119" dst_ip="194.73.83.34" src_port="49175" dst_port="1863"/>
            <filter src_ip="196.200.204.160" dst_ip="194.73.83.34" src_port="1101" dst_port="1863"/>
            <filter src_ip="169.240.216.67" dst_ip="194.73.83.34" src_port="49935" dst_port="1863"/>
            <filter src_ip="169.240.80.227" dst_ip="194.73.83.34" src_port="55597" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.56.142.145" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478814"/>
        <to usec="0" sec="1278479358"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="131.250.186.65" dst_ip="141.33.0.154" src_port="80"/>
            <filter src_ip="173.92.89.96" dst_ip="141.33.0.154" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278479339"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.91.26.169" dst_ip="141.33.201.13" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479040"/>
        <to usec="0" sec="1278479317"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="178.75.17.105" dst_ip="43.82.178.52" src_port="80" dst_port="1618"/>
        </slice>
        <from usec="0" sec="1278479189"/>
        <to usec="0" sec="1278479202"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.200.194.243" dst_ip="80.238.168.70" src_port="2899" dst_port="80"/>
            <filter src_ip="196.200.194.243" dst_ip="80.238.168.70" src_port="2819" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479206"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="105.39.234.16" src_port="80" dst_port="1559"/>
        </slice>
        <from usec="0" sec="1278479213"/>
        <to usec="0" sec="1278479219"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.15.105" dst_ip="92.225.187.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479276"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.115.41" dst_ip="108.75.8.24" src_port="25"/>
        </slice>
        <from usec="0" sec="1278479287"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="43.75.26.15" src_port="80" dst_port="1199"/>
        </slice>
        <from usec="0" sec="1278479331"/>
        <to usec="0" sec="1278479342"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.131.78" dst_ip="199.209.89.189" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479333"/>
        <to usec="0" sec="1278479359"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="141.33.104.104" dst_ip="80.238.104.66" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479097"/>
        <to usec="0" sec="1278479603"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="209.177.4.174" dst_ip="141.33.194.197" src_port="80"/>
            <filter src_ip="209.177.6.113" dst_ip="141.33.194.197" src_port="80"/>
            <filter src_ip="209.177.6.161" dst_ip="141.33.194.197" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479323"/>
        <to usec="0" sec="1278479427"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.147" dst_ip="132.84.22.50" src_port="54510" dst_port="80"/>
            <filter src_ip="141.33.93.147" dst_ip="132.84.22.50" src_port="35298" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479374"/>
        <to usec="0" sec="1278479386"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.33.64.16" dst_ip="192.119.176.29" src_port="4367" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.136.19" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.200.196.40" dst_ip="4.97.41.202" src_port="80" dst_port="4420"/>
            <filter src_ip="196.200.196.40" dst_ip="4.97.41.202" src_port="80" dst_port="3969"/>
            <filter src_ip="196.200.196.40" dst_ip="4.97.41.202" src_port="80" dst_port="3834"/>
            <filter src_ip="196.200.196.40" dst_ip="4.97.41.202" src_port="80" dst_port="3161"/>
            <filter src_ip="196.200.196.40" dst_ip="4.97.41.202" src_port="80" dst_port="2477"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479601"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.33.166.233" dst_ip="75.214.176.127" src_port="8375" dst_port="59109"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="160.13.145.148" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478811"/>
        <to usec="0" sec="1278479539"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.122.194" dst_ip="193.216.204.27" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479123"/>
        <to usec="0" sec="1278479467"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.200.193.39" dst_ip="70.230.224.111" src_port="80" dst_port="1052"/>
        </slice>
        <from usec="0" sec="1278479528"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.129.8.77" dst_ip="169.10.153.163" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="141.33.130.193" dst_ip="81.194.116.8" src_port="45188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.81.92.67" src_port="80"/>
            <filter dst_ip="174.81.92.67" src_port="443"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="194.73.1.23" dst_port="80"/>
            <filter dst_ip="194.73.1.23" dst_port="161"/>
            <filter dst_ip="194.73.1.23"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.62.186.200" dst_ip="141.33.197.156" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.200.205.195" dst_ip="86.26.191.76" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.85.220.210" dst_ip="208.5.1.0" src_port="10843" dst_port="1269"/>
        </slice>
        <from usec="0" sec="1278478802"/>
        <to usec="0" sec="1278479628"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.33.166.233" dst_ip="7.162.35.146" src_port="8375" dst_port="11320"/>
        </slice>
        <from usec="0" sec="1278478805"/>
        <to usec="0" sec="1278479626"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.85.220.210" dst_ip="133.32.168.185" src_port="8871" dst_port="11699"/>
        </slice>
        <from usec="0" sec="1278478806"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="169.240.83.122" dst_ip="194.73.83.66" src_port="49682" dst_port="1863"/>
            <filter src_ip="169.240.133.195" dst_ip="194.73.83.66" src_port="50728" dst_port="1863"/>
            <filter src_ip="169.240.84.230" dst_ip="194.73.83.66" src_port="63202" dst_port="1863"/>
            <filter src_ip="174.81.150.0" dst_ip="194.73.83.66" src_port="4044" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1278478807"/>
        <to usec="0" sec="1278479618"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,010,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="141.33.93.147" dst_ip="220.232.186.167" dst_port="53"/>
            <filter src_ip="141.33.93.147" dst_ip="220.232.186.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478832"/>
        <to usec="0" sec="1278479610"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.2.105" src_port="80"/>
        </slice>
        <from usec="0" sec="1278478841"/>
        <to usec="0" sec="1278479584"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.240.8.176" dst_ip="83.41.153.237" src_port="80"/>
            <filter src_ip="174.81.178.187" dst_ip="83.41.153.237" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479185"/>
        <to usec="0" sec="1278479545"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.173.69" dst_ip="97.73.4.126" src_port="43986" dst_port="35804"/>
        </slice>
        <from usec="0" sec="1278479228"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.173.69" dst_ip="97.73.138.224" src_port="43986" dst_port="5568"/>
        </slice>
        <from usec="0" sec="1278479292"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,020,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="196.200.192.35" dst_ip="201.102.149.109"/>
        </slice>
        <from usec="0" sec="1278479302"/>
        <to usec="0" sec="1278479502"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="196.200.193.38" dst_ip="210.33.154.28" src_port="80" dst_port="24947"/>
            <filter src_ip="196.200.193.43" dst_ip="210.33.154.28" src_port="53" dst_port="1026"/>
            <filter src_ip="196.200.200.28" dst_ip="210.33.154.28" src_port="53" dst_port="1026"/>
        </slice>
        <from usec="0" sec="1278479351"/>
        <to usec="0" sec="1278479552"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.240.87.72" dst_ip="110.86.196.104" src_port="4282" dst_port="56631"/>
            <filter src_ip="169.240.87.72" dst_ip="110.86.196.104" src_port="4282" dst_port="53702"/>
            <filter src_ip="169.240.87.72" dst_ip="110.86.196.104" src_port="4282" dst_port="49488"/>
            <filter src_ip="169.240.87.72" dst_ip="110.86.196.104" src_port="443" dst_port="56635"/>
        </slice>
        <from usec="0" sec="1278479376"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.81.210.37" dst_ip="80.239.181.68" src_port="42475" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1278479382"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="169.240.90.90" dst_ip="160.131.7.139" dst_port="80"/>
            <filter src_ip="169.56.142.145" dst_ip="160.131.7.139" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479436"/>
        <to usec="0" sec="1278479576"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="178.75.17.105" dst_ip="196.202.53.16" src_port="80" dst_port="4056"/>
        </slice>
        <from usec="0" sec="1278479463"/>
        <to usec="0" sec="1278479482"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.200.194.243" dst_ip="143.200.17.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479480"/>
        <to usec="0" sec="1278479496"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="95.214.160.63" src_port="80" dst_port="49158"/>
        </slice>
        <from usec="0" sec="1278479488"/>
        <to usec="0" sec="1278479504"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="97.232.26.68" src_port="80" dst_port="49523"/>
        </slice>
        <from usec="0" sec="1278479503"/>
        <to usec="0" sec="1278479509"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.81.183.162" dst_ip="221.81.151.2" src_port="4915" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479507"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.33.93.200" dst_ip="94.74.3.196" src_port="80" dst_port="53993"/>
        </slice>
        <from usec="0" sec="1278479511"/>
        <to usec="0" sec="1278479516"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.200.193.39" dst_ip="78.78.221.196" src_port="80" dst_port="44607"/>
        </slice>
        <from usec="0" sec="1278479592"/>
        <to usec="0" sec="1278479613"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.240.8.2" dst_ip="221.156.141.104" src_port="995" dst_port="53814"/>
        </slice>
        <from usec="0" sec="1278479616"/>
        <to usec="0" sec="1278479620"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.73.154.214" src_port="1156" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278478892"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2368" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278478892"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="3411" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278478892"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="20129" dst_port="20129"/>
        </slice>
        <from usec="0" sec="1278478846"/>
        <to usec="0" sec="1278478892"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.81.48.47" dst_ip="219.137.81.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478891"/>
        <to usec="0" sec="1278478937"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.56.51.36"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.240.8.67" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.109.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.85.221.38"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.81.160.173" dst_ip="101.84.136.58" src_port="2048"/>
            <filter src_ip="174.81.160.173" dst_ip="101.84.136.58" src_port="443"/>
        </slice>
        <from usec="0" sec="1278479120"/>
        <to usec="0" sec="1278479218"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="101.86.175.105"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.134.90.84"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.81.69.44" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.85.192.255" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="178.38.236.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.200.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.198.196.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.18.132" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.200.193.38" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.85.43.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.240.8.6" src_port="53"/>
            <filter dst_ip="169.240.8.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.129.8.77" dst_ip="196.200.204.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.200.196.41" dst_port="53"/>
            <filter dst_ip="196.200.196.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.162.9.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479207"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.200.112.125"/>
        </slice>
        <from usec="0" sec="1278479206"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.134.101.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479432"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.134.101.137" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.238.211.130"/>
        </slice>
        <from usec="0" sec="1278479206"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.3.238.41"/>
        </slice>
        <from usec="0" sec="1278479206"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="197.91.207.159"/>
        </slice>
        <from usec="0" sec="1278479206"/>
        <to usec="0" sec="1278479252"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.10.153.50" src_port="53"/>
            <filter src_ip="73.129.8.77" dst_ip="169.10.153.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.37.77.201" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="4.101.161.50" dst_ip="196.200.192.42" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.33.4"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.93.196" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.200.6" src_port="53"/>
            <filter dst_ip="196.200.200.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.200.28" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.193.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.198.196.128"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.129.216" dst_port="37857"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="110.41.117.2"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="174.81.169.154"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="1.018130,1.658660,503,0 0 0 1 1 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.200.196.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.206.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.240.8.6" src_port="53"/>
            <filter src_ip="174.81.69.44" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478810"/>
        <to usec="0" sec="1278479591"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.139.85.154" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479629"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.85.192.255" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.134.101.137" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.90.131.31" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.90.131.31" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.109.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="96.108.227.42" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.81.4.162" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.85.41.196" src_port="80"/>
        </slice>
        <from usec="0" sec="1278479341"/>
        <to usec="0" sec="1278479387"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.240.133.1" dst_port="53"/>
            <filter dst_ip="194.209.180.252" dst_port="53"/>
            <filter dst_ip="81.224.246.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479627"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.200.206.29" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479431"/>
        <to usec="0" sec="1278479477"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.81.180.133"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.56.51.37"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="73.129.8.77" src_port="53"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.33.108.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.134.83.90"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="200.229.53.41"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.240.8.64" dst_port="53"/>
            <filter dst_ip="196.212.189.233" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278478803"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="73.129.8.77" dst_ip="169.10.153.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="221.37.125.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="4.101.161.50" dst_ip="196.200.192.42" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.240.8.6" dst_port="53"/>
            <filter src_ip="169.240.8.67" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479702"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="178.38.236.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.33.93.196" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.200.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.0.252.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.240.18.132" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.34.219.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.200.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.200.193.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.202.151.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.200.193.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.85.43.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.240.8.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.200.204.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479611"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.900625,1.689480,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.240.193.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1278479161"/>
        <to usec="0" sec="1278479657"/>
    </anomaly>
    <anomaly type="notice" value="0.751766,1.642840,020,0 0 0 1 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="196.200.200.175"/>
        </slice>
        <from usec="0" sec="1278478801"/>
        <to usec="0" sec="1278479702"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,999,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="174.81.48.137" src_port="25"/>
            <filter src_ip="174.81.48.137" dst_port="25"/>
            <filter src_ip="174.81.48.137" dst_port="113"/>
            <filter dst_ip="100.29.106.117" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.744726,1.627430,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="80.238.224.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1278478812"/>
        <to usec="0" sec="1278479536"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.232.97.199" dst_ip="83.41.157.131" src_port="80"/>
            <filter src_ip="169.232.97.199" dst_ip="221.156.180.169" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.200.193.39" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="196.200.214.245" dst_ip="82.69.60.37" src_port="80"/>
            <filter src_ip="196.200.214.245" dst_ip="203.125.22.37" src_port="443"/>
            <filter src_ip="196.200.200.24" dst_ip="82.69.60.37" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,501,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="197.176.146.74" dst_ip="169.238.204.104" src_port="21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.000620,1.589560,503,0 0 0 1 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="197.91.175.103" dst_ip="141.33.197.61" src_port="80"/>
            <filter src_ip="197.101.31.176" dst_ip="141.33.197.61" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
