<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="33.105.245.57"/>
        </slice>
        <from usec="0" sec="1281244428"/>
        <to usec="0" sec="1281244430"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="25.136.54.245" dst_ip="156.101.199.136" src_port="50663" dst_port="10991" proto="udp"/>
        </slice>
        <from usec="0" sec="1281243684"/>
        <to usec="0" sec="1281243690"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.101.17.209" dst_ip="8.214.244.246" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281243690"/>
        <to usec="0" sec="1281243693"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.132.85.21" dst_ip="156.101.254.229" src_port="57337" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281243897"/>
        <to usec="0" sec="1281243899"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.101.196.168" dst_ip="204.2.235.56" src_port="61913" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281244438"/>
        <to usec="0" sec="1281244440"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.25.100.120" dst_ip="5.110.74.1" src_port="80" dst_port="6443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281244115"/>
        <to usec="0" sec="1281244117"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.139.82.120"/>
        </slice>
        <from usec="0" sec="1281244432"/>
        <to usec="0" sec="1281244434"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.101.199.131"/>
        </slice>
        <from usec="0" sec="1281243678"/>
        <to usec="0" sec="1281244435"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="156.101.198.83"/>
        </slice>
        <from usec="0" sec="1281244428"/>
        <to usec="0" sec="1281244430"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="177.249.133.230" dst_ip="177.249.133.230" src_port="25573" proto="udp"/>
        </slice>
        <from usec="0" sec="1281243644"/>
        <to usec="0" sec="1281244444"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="44.56.133.236" dst_port="443"/>
            <filter src_ip="156.101.64.7" dst_ip="145.78.22.199" dst_port="443"/>
        </slice>
        <from usec="0" sec="1281243620"/>
        <to usec="0" sec="1281244412"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.25.109.6" dst_ip="192.25.109.6" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281243921"/>
        <to usec="0" sec="1281244441"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="16.16.200.15"/>
        </slice>
        <from usec="0" sec="1281243915"/>
        <to usec="0" sec="1281243918"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="156.101.17.147" dst_ip="156.101.17.147" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281243654"/>
        <to usec="0" sec="1281244433"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.139.46.129" dst_ip="46.44.162.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1281243678"/>
        <to usec="0" sec="1281244435"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="35.34.34.209"/>
        </slice>
        <from usec="0" sec="1281243956"/>
        <to usec="0" sec="1281243958"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="216.113.102.219" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281243641"/>
        <to usec="0" sec="1281243650"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="72.192.196.251" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281244127"/>
        <to usec="0" sec="1281244136"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="216.177.170.63" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281244337"/>
        <to usec="0" sec="1281244347"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,502,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="212.89.207.240" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1281244020"/>
        <to usec="0" sec="1281244028"/>
    </anomaly>
    <anomaly type="notice" value="0.690483,1.098720,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.139.12.182"/>
        </slice>
        <from usec="0" sec="1281244344"/>
        <to usec="0" sec="1281244346"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="72.179.151.47"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243702"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="60.36.75.107"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243709"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="156.101.193.148"/>
        </slice>
        <from usec="0" sec="1281243613"/>
        <to usec="0" sec="1281243709"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.164.110.207"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244429"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.207.220.130"/>
        </slice>
        <from usec="0" sec="1281243631"/>
        <to usec="0" sec="1281243772"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.55.249.231"/>
        </slice>
        <from usec="0" sec="1281243744"/>
        <to usec="0" sec="1281243794"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.139.198.87"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243884"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="169.139.33.121"/>
        </slice>
        <from usec="0" sec="1281243602"/>
        <to usec="0" sec="1281243889"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="217.19.120.57"/>
        </slice>
        <from usec="0" sec="1281243610"/>
        <to usec="0" sec="1281243880"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.136.26.244"/>
        </slice>
        <from usec="0" sec="1281243658"/>
        <to usec="0" sec="1281243837"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="146.204.162.77"/>
        </slice>
        <from usec="0" sec="1281243666"/>
        <to usec="0" sec="1281243856"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.147.7.223"/>
        </slice>
        <from usec="0" sec="1281243704"/>
        <to usec="0" sec="1281243847"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="221.157.29.232"/>
        </slice>
        <from usec="0" sec="1281243711"/>
        <to usec="0" sec="1281244228"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.135.1.23"/>
        </slice>
        <from usec="0" sec="1281243799"/>
        <to usec="0" sec="1281243850"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,502,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.118.68.154"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,501,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.25.110.233"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243979"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.25.184.180"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243979"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.101.88.135"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281243978"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.164.203.129"/>
        </slice>
        <from usec="0" sec="1281243602"/>
        <to usec="0" sec="1281243978"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter dst_ip="192.25.109.192"/>
        </slice>
        <from usec="0" sec="1281243602"/>
        <to usec="0" sec="1281243978"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.209.3.95"/>
        </slice>
        <from usec="0" sec="1281243602"/>
        <to usec="0" sec="1281243948"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.3.2"/>
        </slice>
        <from usec="0" sec="1281243606"/>
        <to usec="0" sec="1281243979"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.207.220.171"/>
        </slice>
        <from usec="0" sec="1281243607"/>
        <to usec="0" sec="1281243922"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="60.40.243.146"/>
        </slice>
        <from usec="0" sec="1281243609"/>
        <to usec="0" sec="1281243969"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.5.152.153"/>
        </slice>
        <from usec="0" sec="1281243642"/>
        <to usec="0" sec="1281243968"/>
    </anomaly>
    <anomaly type="notice" value="0.706276,1.076580,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="156.101.199.136" src_port="10991" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1281243664"/>
        <to usec="0" sec="1281244338"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="51.69.111.112"/>
        </slice>
        <from usec="0" sec="1281243757"/>
        <to usec="0" sec="1281243979"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.124.22.200"/>
        </slice>
        <from usec="0" sec="1281243852"/>
        <to usec="0" sec="1281243889"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="49.250.70.155"/>
        </slice>
        <from usec="0" sec="1281243850"/>
        <to usec="0" sec="1281244049"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="15.78.79.125"/>
        </slice>
        <from usec="0" sec="1281243973"/>
        <to usec="0" sec="1281243986"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="169.139.125.140"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.153.81.209"/>
        </slice>
        <from usec="0" sec="1281243602"/>
        <to usec="0" sec="1281244151"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="44.132.230.84"/>
        </slice>
        <from usec="0" sec="1281243607"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,010,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.210.149.202"/>
        </slice>
        <from usec="0" sec="1281243618"/>
        <to usec="0" sec="1281244156"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.11.178.136"/>
        </slice>
        <from usec="0" sec="1281243643"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.95.60.42"/>
        </slice>
        <from usec="0" sec="1281243865"/>
        <to usec="0" sec="1281244155"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.173.112.134"/>
        </slice>
        <from usec="0" sec="1281243900"/>
        <to usec="0" sec="1281244055"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="156.101.146.205"/>
        </slice>
        <from usec="0" sec="1281244087"/>
        <to usec="0" sec="1281244158"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="14.20.37.65"/>
        </slice>
        <from usec="0" sec="1281244122"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="142.105.32.239"/>
        </slice>
        <from usec="0" sec="1281244125"/>
        <to usec="0" sec="1281244159"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="49.60.124.229"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244105"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.5.170.192"/>
        </slice>
        <from usec="0" sec="1281243605"/>
        <to usec="0" sec="1281244103"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.145.156.0"/>
        </slice>
        <from usec="0" sec="1281243605"/>
        <to usec="0" sec="1281244248"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="44.49.20.80"/>
        </slice>
        <from usec="0" sec="1281243610"/>
        <to usec="0" sec="1281244244"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.102.32.218"/>
        </slice>
        <from usec="0" sec="1281243939"/>
        <to usec="0" sec="1281244245"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.169.117.205"/>
        </slice>
        <from usec="0" sec="1281244147"/>
        <to usec="0" sec="1281244248"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="63.183.77.111"/>
        </slice>
        <from usec="0" sec="1281244149"/>
        <to usec="0" sec="1281244183"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.29.247.131"/>
        </slice>
        <from usec="0" sec="1281244205"/>
        <to usec="0" sec="1281244239"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.210.149.147"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244429"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.172.131.209"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244331"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="15.150.4.55"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244429"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.139.97.214"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244427"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="156.101.170.80"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244429"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.101.193.134"/>
        </slice>
        <from usec="0" sec="1281243601"/>
        <to usec="0" sec="1281244407"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.101.196.232"/>
        </slice>
        <from usec="0" sec="1281243603"/>
        <to usec="0" sec="1281244428"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.153.81.73"/>
        </slice>
        <from usec="0" sec="1281243605"/>
        <to usec="0" sec="1281244410"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.238.30.90"/>
        </slice>
        <from usec="0" sec="1281243606"/>
        <to usec="0" sec="1281244427"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.109.58.57"/>
        </slice>
        <from usec="0" sec="1281243608"/>
        <to usec="0" sec="1281244429"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="192.25.108.6" dst_ip="2.108.40.43" dst_port="53"/>
            <filter src_ip="192.25.106.76" dst_ip="2.108.40.43" dst_port="53"/>
            <filter src_ip="193.25.27.33" dst_ip="2.108.40.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1281243611"/>
        <to usec="0" sec="1281244428"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.194.161.42"/>
        </slice>
        <from usec="0" sec="1281243613"/>
        <to usec="0" sec="1281244417"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.153.81.83"/>
        </slice>
        <from usec="0" sec="1281243613"/>
        <to usec="0" sec="1281244418"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="61.41.206.93"/>
        </slice>
        <from usec="0" sec="1281243615"/>
        <to usec="0" sec="1281244406"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.122.180.235"/>
        </slice>
        <from usec="0" sec="1281243615"/>
        <to usec="0" sec="1281244421"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.210.149.133"/>
        </slice>
        <from usec="0" sec="1281243616"/>
        <to usec="0" sec="1281244388"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.137.153.95"/>
        </slice>
        <from usec="0" sec="1281244099"/>
        <to usec="0" sec="1281244315"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="61.13.36.80"/>
        </slice>
        <from usec="0" sec="1281244125"/>
        <to usec="0" sec="1281244324"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.134.68.14"/>
        </slice>
        <from usec="0" sec="1281244159"/>
        <to usec="0" sec="1281244375"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="7.50.65.35"/>
        </slice>
        <from usec="0" sec="1281244300"/>
        <to usec="0" sec="1281244369"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.213.199.151"/>
        </slice>
        <from usec="0" sec="1281244316"/>
        <to usec="0" sec="1281244340"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="24.87.89.42"/>
        </slice>
        <from usec="0" sec="1281244327"/>
        <to usec="0" sec="1281244361"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.176.173.16"/>
        </slice>
        <from usec="0" sec="1281244374"/>
        <to usec="0" sec="1281244396"/>
    </anomaly>
    <anomaly type="notice" value="0.462537,1.025000,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.208.213.134"/>
        </slice>
        <from usec="0" sec="1281244408"/>
        <to usec="0" sec="1281244418"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="156.101.179.80" dst_ip="200.177.234.42"/>
        </slice>
        <from usec="0" sec="1281243736"/>
        <to usec="0" sec="1281243782"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.149.195.215" src_port="53"/>
        </slice>
        <from usec="0" sec="1281243736"/>
        <to usec="0" sec="1281243782"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="158.149.195.214" src_port="53"/>
        </slice>
        <from usec="0" sec="1281243736"/>
        <to usec="0" sec="1281243782"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.178.27.72"/>
        </slice>
        <from usec="0" sec="1281243826"/>
        <to usec="0" sec="1281243872"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.164.110.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1281244006"/>
        <to usec="0" sec="1281244052"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="45.157.16.46" src_port="80"/>
        </slice>
        <from usec="0" sec="1281244006"/>
        <to usec="0" sec="1281244052"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.164.146.119" src_port="53"/>
        </slice>
        <from usec="0" sec="1281244006"/>
        <to usec="0" sec="1281244052"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.11.224.165" src_port="53"/>
        </slice>
        <from usec="0" sec="1281244006"/>
        <to usec="0" sec="1281244052"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="7.205.69.225"/>
        </slice>
        <from usec="0" sec="1281244006"/>
        <to usec="0" sec="1281244097"/>
    </anomaly>
    <anomaly type="notice" value="0.596109,1.058930,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="156.101.35.147" dst_ip="193.4.11.197" dst_port="53"/>
        </slice>
        <from usec="0" sec="1281243736"/>
        <to usec="0" sec="1281244052"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.139.12.177"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.139.105.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.181.142.32"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.153.200.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.2.235.56"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.102.32.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.102.32.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="24.46.207.203" dst_ip="156.101.198.33" src_port="80"/>
            <filter src_ip="212.9.82.69" dst_ip="156.101.198.33" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="156.101.196.163"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="156.101.196.195"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.25.97.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="213.102.32.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="218.241.194.90"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="33.105.245.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="33.153.84.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.153.140.79" dst_ip="33.153.84.160" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.210.148.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.672511,1.043890,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter dst_ip="45.157.16.46"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
