<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.173.185.71"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.33.205.225"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.190.65.175"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008506"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.105.176.190"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008508"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.134.244.158"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.56.57.80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.82.141"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="69.164.148.211"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="64.82.151.176"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="55.104.77.139"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.105.36.5"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="38.153.65.186"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="164.12.148.31"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.173.6.195"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008605"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.46.210.46"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.0.145.127"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.54.47.9" dst_ip="221.211.171.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.17.165.226"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.32.86.72"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.32.68.65"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008765"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="223.250.11.170"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008430"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.36.171.10"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008506"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.201.83.0"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="9.196.55.85"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.61.45.204"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.171.168.35"/>
        </slice>
        <from usec="0" sec="1284008408"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="19.151.139.27"/>
        </slice>
        <from usec="0" sec="1284008409"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.56.42.4"/>
        </slice>
        <from usec="0" sec="1284008410"/>
        <to usec="0" sec="1284008502"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.230.210.174"/>
        </slice>
        <from usec="0" sec="1284008416"/>
        <to usec="0" sec="1284008507"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.171.170.138"/>
        </slice>
        <from usec="0" sec="1284008423"/>
        <to usec="0" sec="1284008481"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.47.35.250"/>
        </slice>
        <from usec="0" sec="1284008424"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.35.108.30"/>
        </slice>
        <from usec="0" sec="1284008432"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.148.144.211"/>
        </slice>
        <from usec="0" sec="1284008435"/>
        <to usec="0" sec="1284008507"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.18.199.151"/>
        </slice>
        <from usec="0" sec="1284008458"/>
        <to usec="0" sec="1284008506"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.160.209.146"/>
        </slice>
        <from usec="0" sec="1284008459"/>
        <to usec="0" sec="1284008491"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="59.124.131.98"/>
        </slice>
        <from usec="0" sec="1284008463"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.157.122.93"/>
        </slice>
        <from usec="0" sec="1284008482"/>
        <to usec="0" sec="1284008694"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="27.179.10.189"/>
        </slice>
        <from usec="0" sec="1284008487"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="17.74.195.12"/>
        </slice>
        <from usec="0" sec="1284008501"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="145.105.151.66"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="21.228.20.37"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.17.199.86"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,002,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.56.42.29"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.17.146.170"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.190.180.107"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="29.118.87.11"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008597"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.162.153.139"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.105.116.146"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008597"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.196.0.97"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.48.129.151"/>
        </slice>
        <from usec="0" sec="1284008409"/>
        <to usec="0" sec="1284008590"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.181.243"/>
        </slice>
        <from usec="0" sec="1284008410"/>
        <to usec="0" sec="1284008592"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.142.162.240"/>
        </slice>
        <from usec="0" sec="1284008419"/>
        <to usec="0" sec="1284008467"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.71.66.217"/>
        </slice>
        <from usec="0" sec="1284008452"/>
        <to usec="0" sec="1284008465"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.88.11.70"/>
        </slice>
        <from usec="0" sec="1284008460"/>
        <to usec="0" sec="1284008559"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="28.76.158.69"/>
        </slice>
        <from usec="0" sec="1284008480"/>
        <to usec="0" sec="1284008513"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.217.146.144"/>
        </slice>
        <from usec="0" sec="1284008489"/>
        <to usec="0" sec="1284008590"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="19.65.214.45"/>
        </slice>
        <from usec="0" sec="1284008508"/>
        <to usec="0" sec="1284008546"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.107.210.121"/>
        </slice>
        <from usec="0" sec="1284008544"/>
        <to usec="0" sec="1284008559"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="18.86.213.252"/>
        </slice>
        <from usec="0" sec="1284008565"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="88.233.222.177"/>
        </slice>
        <from usec="0" sec="1284008566"/>
        <to usec="0" sec="1284008571"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.173.107.172"/>
        </slice>
        <from usec="0" sec="1284008579"/>
        <to usec="0" sec="1284008587"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.65.72.158"/>
        </slice>
        <from usec="0" sec="1284008583"/>
        <to usec="0" sec="1284008592"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="29.89.4.39"/>
        </slice>
        <from usec="0" sec="1284008585"/>
        <to usec="0" sec="1284008599"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="25.181.239.166"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="68.110.55.106"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="146.127.169.78"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008675"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.105.65.95"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.105.189.49"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="21.217.112.58"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="199.56.60.142"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="29.239.2.56"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.13.119.142"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008625"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.143.172.46"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008683"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="203.54.47.9" dst_ip="209.210.114.155" src_port="53"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008688"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.2.228.73"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008679"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="22.128.20.161"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.160.67.184"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008654"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.151.76.95"/>
        </slice>
        <from usec="0" sec="1284008406"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="211.108.186.120"/>
        </slice>
        <from usec="0" sec="1284008408"/>
        <to usec="0" sec="1284008686"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="136.25.160.243"/>
        </slice>
        <from usec="0" sec="1284008413"/>
        <to usec="0" sec="1284008612"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.13.119.92"/>
        </slice>
        <from usec="0" sec="1284008418"/>
        <to usec="0" sec="1284008687"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.229.170.85"/>
        </slice>
        <from usec="0" sec="1284008419"/>
        <to usec="0" sec="1284008554"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="41.206.241.122"/>
        </slice>
        <from usec="0" sec="1284008419"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.222.97.9"/>
        </slice>
        <from usec="0" sec="1284008426"/>
        <to usec="0" sec="1284008579"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="217.192.71.234"/>
        </slice>
        <from usec="0" sec="1284008439"/>
        <to usec="0" sec="1284008638"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.13.119.192"/>
        </slice>
        <from usec="0" sec="1284008442"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.176.146.189"/>
        </slice>
        <from usec="0" sec="1284008458"/>
        <to usec="0" sec="1284008594"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="21.168.24.225"/>
        </slice>
        <from usec="0" sec="1284008460"/>
        <to usec="0" sec="1284008559"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.35.108.92"/>
        </slice>
        <from usec="0" sec="1284008480"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="183.103.96.127"/>
        </slice>
        <from usec="0" sec="1284008484"/>
        <to usec="0" sec="1284008675"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.236.113.94"/>
        </slice>
        <from usec="0" sec="1284008486"/>
        <to usec="0" sec="1284008600"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.56.42.20"/>
        </slice>
        <from usec="0" sec="1284008496"/>
        <to usec="0" sec="1284008680"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="203.180.100.48"/>
        </slice>
        <from usec="0" sec="1284008498"/>
        <to usec="0" sec="1284008600"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.154.231.224"/>
        </slice>
        <from usec="0" sec="1284008502"/>
        <to usec="0" sec="1284008517"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.118.134.201"/>
        </slice>
        <from usec="0" sec="1284008504"/>
        <to usec="0" sec="1284008539"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="223.169.225.130"/>
        </slice>
        <from usec="0" sec="1284008509"/>
        <to usec="0" sec="1284008678"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="146.124.210.98"/>
        </slice>
        <from usec="0" sec="1284008512"/>
        <to usec="0" sec="1284008547"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="216.17.234.145"/>
        </slice>
        <from usec="0" sec="1284008523"/>
        <to usec="0" sec="1284008685"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.13.117.188"/>
        </slice>
        <from usec="0" sec="1284008543"/>
        <to usec="0" sec="1284008684"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.82.148.65"/>
        </slice>
        <from usec="0" sec="1284008543"/>
        <to usec="0" sec="1284008632"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.3.239.110"/>
        </slice>
        <from usec="0" sec="1284008543"/>
        <to usec="0" sec="1284008558"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.7.180.166"/>
        </slice>
        <from usec="0" sec="1284008554"/>
        <to usec="0" sec="1284008589"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="27.196.26.190"/>
        </slice>
        <from usec="0" sec="1284008566"/>
        <to usec="0" sec="1284008642"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.33.24.106"/>
        </slice>
        <from usec="0" sec="1284008567"/>
        <to usec="0" sec="1284008629"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="22.35.189.99"/>
        </slice>
        <from usec="0" sec="1284008582"/>
        <to usec="0" sec="1284008594"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="176.244.64.131"/>
        </slice>
        <from usec="0" sec="1284008590"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.206.225.73"/>
        </slice>
        <from usec="0" sec="1284008599"/>
        <to usec="0" sec="1284008652"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="29.83.242.182"/>
        </slice>
        <from usec="0" sec="1284008606"/>
        <to usec="0" sec="1284008634"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="17.2.35.245"/>
        </slice>
        <from usec="0" sec="1284008608"/>
        <to usec="0" sec="1284008688"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.90.211.166"/>
        </slice>
        <from usec="0" sec="1284008611"/>
        <to usec="0" sec="1284008657"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="26.144.142.126"/>
        </slice>
        <from usec="0" sec="1284008617"/>
        <to usec="0" sec="1284008635"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="16.75.2.186"/>
        </slice>
        <from usec="0" sec="1284008644"/>
        <to usec="0" sec="1284008685"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="223.219.49.149"/>
        </slice>
        <from usec="0" sec="1284008650"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="218.86.168.20"/>
        </slice>
        <from usec="0" sec="1284008653"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.108.26"/>
        </slice>
        <from usec="0" sec="1284008653"/>
        <to usec="0" sec="1284008732"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="19.72.146.150"/>
        </slice>
        <from usec="0" sec="1284008663"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.36.131.148"/>
        </slice>
        <from usec="0" sec="1284008667"/>
        <to usec="0" sec="1284008678"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.8.87.37"/>
        </slice>
        <from usec="0" sec="1284008671"/>
        <to usec="0" sec="1284008748"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="199.56.56.162"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008764"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="223.17.82.130"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008744"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.17.146.171"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.1.165.157"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.190.217.204" src_port="443"/>
            <filter dst_ip="167.190.217.204" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="19.109.10.208"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008638"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="29.208.2.163"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="221.126.100.53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.204.49.100"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008957"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.6.125.25" dst_ip="199.56.56.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="130.17.150.189"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.36.213.160"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008778"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.185.71.58"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008663"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.66.24.80"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008777"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="164.12.200.194"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008773"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="60.234.48.98"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008742"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.181.37"/>
        </slice>
        <from usec="0" sec="1284008408"/>
        <to usec="0" sec="1284008771"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="29.43.6.44"/>
        </slice>
        <from usec="0" sec="1284008412"/>
        <to usec="0" sec="1284008756"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="183.103.15.99"/>
        </slice>
        <from usec="0" sec="1284008413"/>
        <to usec="0" sec="1284008774"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.5.6.120"/>
        </slice>
        <from usec="0" sec="1284008415"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.229.81"/>
        </slice>
        <from usec="0" sec="1284008420"/>
        <to usec="0" sec="1284008731"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="118.56.46.174"/>
        </slice>
        <from usec="0" sec="1284008426"/>
        <to usec="0" sec="1284008775"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.111.162.124"/>
        </slice>
        <from usec="0" sec="1284008432"/>
        <to usec="0" sec="1284008863"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.42.232.12"/>
        </slice>
        <from usec="0" sec="1284008466"/>
        <to usec="0" sec="1284008854"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.48.162.215"/>
        </slice>
        <from usec="0" sec="1284008471"/>
        <to usec="0" sec="1284008778"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.181.162"/>
        </slice>
        <from usec="0" sec="1284008472"/>
        <to usec="0" sec="1284008755"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="196.68.95.249"/>
        </slice>
        <from usec="0" sec="1284008488"/>
        <to usec="0" sec="1284008687"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.29.89.23"/>
        </slice>
        <from usec="0" sec="1284008550"/>
        <to usec="0" sec="1284008613"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="186.212.24.38"/>
        </slice>
        <from usec="0" sec="1284008565"/>
        <to usec="0" sec="1284008611"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.172.168.249"/>
        </slice>
        <from usec="0" sec="1284008584"/>
        <to usec="0" sec="1284008626"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="27.179.181.189"/>
        </slice>
        <from usec="0" sec="1284008592"/>
        <to usec="0" sec="1284008607"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="20.133.8.1"/>
        </slice>
        <from usec="0" sec="1284008593"/>
        <to usec="0" sec="1284008628"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.52.46.38"/>
        </slice>
        <from usec="0" sec="1284008614"/>
        <to usec="0" sec="1284008657"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="42.241.84.172"/>
        </slice>
        <from usec="0" sec="1284008646"/>
        <to usec="0" sec="1284008761"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="27.0.247.73"/>
        </slice>
        <from usec="0" sec="1284008647"/>
        <to usec="0" sec="1284008778"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="48.26.80.101"/>
        </slice>
        <from usec="0" sec="1284008657"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.238.158.253"/>
        </slice>
        <from usec="0" sec="1284008667"/>
        <to usec="0" sec="1284008739"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="192.62.177.143"/>
        </slice>
        <from usec="0" sec="1284008670"/>
        <to usec="0" sec="1284008766"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="223.169.147.147"/>
        </slice>
        <from usec="0" sec="1284008686"/>
        <to usec="0" sec="1284008721"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="118.56.46.98"/>
        </slice>
        <from usec="0" sec="1284008694"/>
        <to usec="0" sec="1284008774"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.32.206.36"/>
        </slice>
        <from usec="0" sec="1284008701"/>
        <to usec="0" sec="1284008762"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.36.82.245"/>
        </slice>
        <from usec="0" sec="1284008704"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="221.126.192.17"/>
        </slice>
        <from usec="0" sec="1284008727"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.109.195.128"/>
        </slice>
        <from usec="0" sec="1284008729"/>
        <to usec="0" sec="1284008758"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="40.26.225.35"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.6.125.25" dst_ip="148.142.75.53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="20.178.52.228"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.12.216.229" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="48.59.50.198"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.200.46.237"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008753"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="17.109.219.197"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="167.190.151.93"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008845"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="40.44.150.17"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008852"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.115.66.239"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008857"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="37.166.47.87"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="145.105.138.188"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="64.66.172.8"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="9.64.88.165"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.230.73.100"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008853"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.2.231.36" dst_ip="198.45.60.210" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008867"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="3.130.11.202"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="167.190.199.35"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008867"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="170.128.16.234"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008868"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.190.109.226"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008858"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.181.230"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008837"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.91.196.22"/>
        </slice>
        <from usec="0" sec="1284008404"/>
        <to usec="0" sec="1284008864"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.17.245.120"/>
        </slice>
        <from usec="0" sec="1284008407"/>
        <to usec="0" sec="1284008812"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.213.77.70"/>
        </slice>
        <from usec="0" sec="1284008407"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="53.27.187.107"/>
        </slice>
        <from usec="0" sec="1284008408"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="34.235.208.180" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008408"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.73.177.8"/>
        </slice>
        <from usec="0" sec="1284008409"/>
        <to usec="0" sec="1284008742"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.12.216.201"/>
        </slice>
        <from usec="0" sec="1284008412"/>
        <to usec="0" sec="1284008857"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="35.1.140.49"/>
        </slice>
        <from usec="0" sec="1284008412"/>
        <to usec="0" sec="1284008696"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.210.147.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008417"/>
        <to usec="0" sec="1284008866"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="118.80.199.158"/>
        </slice>
        <from usec="0" sec="1284008427"/>
        <to usec="0" sec="1284008851"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="167.190.66.148"/>
        </slice>
        <from usec="0" sec="1284008443"/>
        <to usec="0" sec="1284008838"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.105.59.17"/>
        </slice>
        <from usec="0" sec="1284008490"/>
        <to usec="0" sec="1284008862"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="55.152.114.141"/>
        </slice>
        <from usec="0" sec="1284008503"/>
        <to usec="0" sec="1284008702"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="38.208.175.155"/>
        </slice>
        <from usec="0" sec="1284008513"/>
        <to usec="0" sec="1284008712"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="204.217.194.35"/>
        </slice>
        <from usec="0" sec="1284008532"/>
        <to usec="0" sec="1284008731"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="140.88.199.2"/>
        </slice>
        <from usec="0" sec="1284008593"/>
        <to usec="0" sec="1284008793"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.108.82.139"/>
        </slice>
        <from usec="0" sec="1284008610"/>
        <to usec="0" sec="1284008690"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.184.242.51"/>
        </slice>
        <from usec="0" sec="1284008611"/>
        <to usec="0" sec="1284008786"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.157.167.48"/>
        </slice>
        <from usec="0" sec="1284008614"/>
        <to usec="0" sec="1284008818"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.190.229.89"/>
        </slice>
        <from usec="0" sec="1284008644"/>
        <to usec="0" sec="1284008825"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.105.35.196"/>
        </slice>
        <from usec="0" sec="1284008649"/>
        <to usec="0" sec="1284008760"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.2.6"/>
        </slice>
        <from usec="0" sec="1284008655"/>
        <to usec="0" sec="1284008819"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="50.194.53.236"/>
        </slice>
        <from usec="0" sec="1284008669"/>
        <to usec="0" sec="1284008698"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.242.5.82"/>
        </slice>
        <from usec="0" sec="1284008670"/>
        <to usec="0" sec="1284008759"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.94.146.88"/>
        </slice>
        <from usec="0" sec="1284008677"/>
        <to usec="0" sec="1284008727"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.160.192.103"/>
        </slice>
        <from usec="0" sec="1284008677"/>
        <to usec="0" sec="1284008699"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="50.194.103.153"/>
        </slice>
        <from usec="0" sec="1284008688"/>
        <to usec="0" sec="1284008722"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="170.51.150.122"/>
        </slice>
        <from usec="0" sec="1284008697"/>
        <to usec="0" sec="1284008728"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.18.135.180"/>
        </slice>
        <from usec="0" sec="1284008698"/>
        <to usec="0" sec="1284008701"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.74.7"/>
        </slice>
        <from usec="0" sec="1284008705"/>
        <to usec="0" sec="1284008763"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.87.177.217"/>
        </slice>
        <from usec="0" sec="1284008712"/>
        <to usec="0" sec="1284008770"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.89.114.109"/>
        </slice>
        <from usec="0" sec="1284008722"/>
        <to usec="0" sec="1284008767"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.247.179.198"/>
        </slice>
        <from usec="0" sec="1284008725"/>
        <to usec="0" sec="1284008761"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.27.69.206"/>
        </slice>
        <from usec="0" sec="1284008742"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.25.121.121"/>
        </slice>
        <from usec="0" sec="1284008762"/>
        <to usec="0" sec="1284008783"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.104.1.223"/>
        </slice>
        <from usec="0" sec="1284008778"/>
        <to usec="0" sec="1284008813"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="170.42.180.202"/>
        </slice>
        <from usec="0" sec="1284008803"/>
        <to usec="0" sec="1284008832"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="22.34.84.167"/>
        </slice>
        <from usec="0" sec="1284008811"/>
        <to usec="0" sec="1284008830"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="220.182.35.82"/>
        </slice>
        <from usec="0" sec="1284008820"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.721106,1.200280,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.190.180.29" dst_ip="217.194.37.180" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008560"/>
        <to usec="0" sec="1284009120"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.96.59.248"/>
        </slice>
        <from usec="0" sec="1284008834"/>
        <to usec="0" sec="1284008847"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="20.168.58.225"/>
        </slice>
        <from usec="0" sec="1284008853"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="51.96.244.243"/>
        </slice>
        <from usec="0" sec="1284008859"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.80.26.162"/>
        </slice>
        <from usec="0" sec="1284008863"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="45.96.178.128"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="167.190.9.134"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="61.223.249.69"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.78.133.208"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="218.110.203.125" dst_ip="145.105.110.253" dst_port="80"/>
            <filter src_ip="39.132.119.163" dst_ip="145.105.110.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.2.229.122" dst_ip="145.105.92.85" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.9.223.127"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008936"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="65.179.174.117"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="146.127.175.91" dst_ip="145.105.116.211" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008958"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="88.234.61.84" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.12.248.120"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="20.24.203.43"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="167.190.133.76" dst_ip="203.235.14.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008958"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.190.229.85"/>
        </slice>
        <from usec="0" sec="1284008409"/>
        <to usec="0" sec="1284008957"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.177.218"/>
        </slice>
        <from usec="0" sec="1284008416"/>
        <to usec="0" sec="1284008951"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.36.74.82"/>
        </slice>
        <from usec="0" sec="1284008418"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.180.202.72"/>
        </slice>
        <from usec="0" sec="1284008431"/>
        <to usec="0" sec="1284008942"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="167.190.11.210" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008436"/>
        <to usec="0" sec="1284008958"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="32.89.224.160"/>
        </slice>
        <from usec="0" sec="1284008538"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.10.6.91"/>
        </slice>
        <from usec="0" sec="1284008545"/>
        <to usec="0" sec="1284008780"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.232.191.113"/>
        </slice>
        <from usec="0" sec="1284008607"/>
        <to usec="0" sec="1284008958"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.170.12.98"/>
        </slice>
        <from usec="0" sec="1284008622"/>
        <to usec="0" sec="1284008958"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.14.160.71"/>
        </slice>
        <from usec="0" sec="1284008658"/>
        <to usec="0" sec="1284008791"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="202.229.225.217"/>
        </slice>
        <from usec="0" sec="1284008687"/>
        <to usec="0" sec="1284008886"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.238.174.60"/>
        </slice>
        <from usec="0" sec="1284008728"/>
        <to usec="0" sec="1284008807"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="186.101.221.208"/>
        </slice>
        <from usec="0" sec="1284008746"/>
        <to usec="0" sec="1284008795"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.161.38.92"/>
        </slice>
        <from usec="0" sec="1284008748"/>
        <to usec="0" sec="1284008788"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="59.8.180.13"/>
        </slice>
        <from usec="0" sec="1284008763"/>
        <to usec="0" sec="1284008792"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.169.197.171"/>
        </slice>
        <from usec="0" sec="1284008774"/>
        <to usec="0" sec="1284008797"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="29.193.50.212"/>
        </slice>
        <from usec="0" sec="1284008778"/>
        <to usec="0" sec="1284008819"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.174.50.16"/>
        </slice>
        <from usec="0" sec="1284008800"/>
        <to usec="0" sec="1284008830"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.100.204.250"/>
        </slice>
        <from usec="0" sec="1284008853"/>
        <to usec="0" sec="1284008934"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="20.162.170.214"/>
        </slice>
        <from usec="0" sec="1284008857"/>
        <to usec="0" sec="1284008896"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="176.75.132.59"/>
        </slice>
        <from usec="0" sec="1284008872"/>
        <to usec="0" sec="1284008956"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.12.181.153"/>
        </slice>
        <from usec="0" sec="1284008885"/>
        <to usec="0" sec="1284008922"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="39.79.106.161"/>
        </slice>
        <from usec="0" sec="1284008905"/>
        <to usec="0" sec="1284008931"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="26.17.225.90"/>
        </slice>
        <from usec="0" sec="1284008906"/>
        <to usec="0" sec="1284008914"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.7.224.144"/>
        </slice>
        <from usec="0" sec="1284008911"/>
        <to usec="0" sec="1284008950"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="50.125.67.150"/>
        </slice>
        <from usec="0" sec="1284008914"/>
        <to usec="0" sec="1284008945"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="120.240.84.144"/>
        </slice>
        <from usec="0" sec="1284008919"/>
        <to usec="0" sec="1284008950"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="25.160.237.126"/>
        </slice>
        <from usec="0" sec="1284008951"/>
        <to usec="0" sec="1284008966"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.241.68.218"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284009020"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="148.36.16.131"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284009049"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.181.197"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284009038"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.36.153.171"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284009046"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.36.69.69"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284009019"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="148.196.23.2"/>
        </slice>
        <from usec="0" sec="1284008407"/>
        <to usec="0" sec="1284009048"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="23.201.115.208"/>
        </slice>
        <from usec="0" sec="1284008421"/>
        <to usec="0" sec="1284009039"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.160.67.66"/>
        </slice>
        <from usec="0" sec="1284008432"/>
        <to usec="0" sec="1284008986"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.73.177.154"/>
        </slice>
        <from usec="0" sec="1284008438"/>
        <to usec="0" sec="1284009031"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="38.13.203.110"/>
        </slice>
        <from usec="0" sec="1284008480"/>
        <to usec="0" sec="1284009003"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.85.91.117"/>
        </slice>
        <from usec="0" sec="1284008808"/>
        <to usec="0" sec="1284008877"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="0.53.65.130"/>
        </slice>
        <from usec="0" sec="1284008858"/>
        <to usec="0" sec="1284008940"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="28.186.240.146"/>
        </slice>
        <from usec="0" sec="1284008890"/>
        <to usec="0" sec="1284008991"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="170.159.43.0"/>
        </slice>
        <from usec="0" sec="1284008905"/>
        <to usec="0" sec="1284008939"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="105.52.133.131"/>
        </slice>
        <from usec="0" sec="1284008949"/>
        <to usec="0" sec="1284009029"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.68.12.110"/>
        </slice>
        <from usec="0" sec="1284008959"/>
        <to usec="0" sec="1284009038"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.250.66.1"/>
        </slice>
        <from usec="0" sec="1284008985"/>
        <to usec="0" sec="1284009015"/>
    </anomaly>
    <anomaly type="notice" value="0.300550,1.178720,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.91.62.29"/>
        </slice>
        <from usec="0" sec="1284008997"/>
        <to usec="0" sec="1284009015"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.190.154.249" dst_ip="217.20.157.225" src_port="45005" dst_port="1755"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.105.25.108" dst_port="25"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="20.185.71.58" dst_ip="145.105.82.111" dst_port="80"/>
            <filter src_ip="21.233.226.37" dst_ip="145.105.82.111" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008509"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="167.190.180.98" dst_ip="210.128.36.136" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008688"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="148.36.35.114" dst_port="53342"/>
            <filter src_ip="148.36.35.114" dst_ip="2.146.35.173" src_port="993"/>
            <filter dst_ip="2.146.35.173" src_port="993" dst_port="53342"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284008504"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="167.190.200.69" dst_ip="28.216.158.223" dst_port="80"/>
            <filter src_ip="167.190.4.133" dst_ip="28.216.158.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.190.109.211" dst_ip="0.174.241.134" src_port="13511" dst_port="62007"/>
        </slice>
        <from usec="0" sec="1284008411"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="167.190.122.16" dst_ip="209.161.50.41" dst_port="80"/>
            <filter src_ip="145.105.116.147" dst_ip="209.161.50.41" dst_port="80"/>
            <filter src_ip="167.190.30.210" dst_ip="209.161.50.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008414"/>
        <to usec="0" sec="1284008576"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="199.56.56.128" dst_ip="38.175.42.192"/>
            <filter src_ip="199.56.53.96" dst_ip="38.175.42.192"/>
            <filter src_ip="199.56.56.145" dst_ip="38.175.42.192"/>
            <filter src_ip="199.56.53.97" dst_ip="38.175.42.192"/>
            <filter src_ip="199.56.53.107" dst_ip="38.175.42.192"/>
        </slice>
        <from usec="0" sec="1284008442"/>
        <to usec="0" sec="1284008476"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="145.105.42.236" dst_ip="190.20.16.249" dst_port="80"/>
            <filter src_ip="145.105.42.236" dst_ip="190.20.16.249" dst_port="20480"/>
            <filter src_ip="145.105.89.59" dst_ip="190.20.16.249" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008407"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="146.127.169.205" dst_ip="148.36.70.34" src_port="80"/>
            <filter src_ip="146.127.169.67" dst_ip="148.36.70.34" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008417"/>
        <to usec="0" sec="1284008853"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="145.105.208.188" dst_ip="170.155.3.38" src_port="80" dst_port="60454"/>
            <filter src_ip="145.105.208.188" dst_ip="170.155.3.38" src_port="80" dst_port="38951"/>
            <filter src_ip="145.105.40.179" dst_ip="170.155.3.38" src_port="80" dst_port="51513"/>
            <filter src_ip="145.105.40.179" dst_ip="170.155.3.38" src_port="80" dst_port="43081"/>
        </slice>
        <from usec="0" sec="1284008464"/>
        <to usec="0" sec="1284008499"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.5.40.75" dst_ip="49.157.34.243" src_port="80" dst_port="1333"/>
        </slice>
        <from usec="0" sec="1284008502"/>
        <to usec="0" sec="1284008527"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="167.190.180.28" dst_ip="55.109.26.199" src_port="3127"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008634"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="198.45.152.70" dst_ip="217.116.240.92" dst_port="53"/>
            <filter src_ip="199.56.57.65" dst_ip="217.116.240.92" dst_port="53"/>
            <filter src_ip="199.56.60.112" dst_ip="217.116.240.92" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008689"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.105.68.59" dst_ip="23.212.0.104" src_port="5041" dst_port="5041"/>
        </slice>
        <from usec="0" sec="1284008565"/>
        <to usec="0" sec="1284008652"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="167.190.180.30" dst_ip="54.236.88.222"/>
            <filter src_ip="167.190.180.28" dst_ip="54.236.88.222"/>
            <filter src_ip="167.190.180.29" dst_ip="54.236.88.222"/>
            <filter src_ip="167.190.180.19" dst_ip="54.236.88.222"/>
        </slice>
        <from usec="0" sec="1284008651"/>
        <to usec="0" sec="1284008680"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.56.52.83" dst_ip="19.35.208.17" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008778"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.52.196.120" dst_ip="33.73.177.55" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.190.47.4" dst_ip="2.3.39.15" src_port="1602" dst_port="11418"/>
        </slice>
        <from usec="0" sec="1284008403"/>
        <to usec="0" sec="1284008665"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="167.190.225.175" dst_ip="25.106.32.150" src_port="995"/>
        </slice>
        <from usec="0" sec="1284008431"/>
        <to usec="0" sec="1284008732"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.56.52.97" dst_ip="22.130.56.135" src_port="80" dst_port="36342"/>
            <filter src_ip="199.56.52.97" dst_ip="22.130.56.135" src_port="80" dst_port="36338"/>
        </slice>
        <from usec="0" sec="1284008574"/>
        <to usec="0" sec="1284008700"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.52.96" dst_ip="69.216.58.207" src_port="80" dst_port="2351"/>
        </slice>
        <from usec="0" sec="1284008696"/>
        <to usec="0" sec="1284008727"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.52.97" dst_ip="9.41.250.87" src_port="80" dst_port="2492"/>
        </slice>
        <from usec="0" sec="1284008707"/>
        <to usec="0" sec="1284008767"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.6.125.25" dst_ip="199.56.36.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="199.134.37.208" dst_ip="203.54.35.198" src_port="53"/>
            <filter src_ip="199.134.37.209" dst_ip="203.54.35.198" src_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008869"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="146.127.169.205" dst_ip="167.190.53.131" src_port="443"/>
            <filter src_ip="173.251.253.153" dst_ip="167.190.53.131" src_port="443"/>
            <filter src_ip="173.251.253.27" dst_ip="167.190.53.131" src_port="443"/>
        </slice>
        <from usec="0" sec="1284008405"/>
        <to usec="0" sec="1284008859"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="145.105.82.104" dst_ip="209.160.67.4" src_port="80" dst_port="63171"/>
            <filter src_ip="148.52.134.237" dst_ip="209.160.67.4" src_port="80" dst_port="49622"/>
        </slice>
        <from usec="0" sec="1284008635"/>
        <to usec="0" sec="1284008695"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.52.96" dst_ip="39.18.240.160" src_port="80" dst_port="65207"/>
        </slice>
        <from usec="0" sec="1284008734"/>
        <to usec="0" sec="1284008770"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.52.98" dst_ip="29.240.216.92" src_port="80" dst_port="2540"/>
        </slice>
        <from usec="0" sec="1284008742"/>
        <to usec="0" sec="1284008841"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.52.98" dst_ip="196.177.140.102" src_port="80" dst_port="64371"/>
        </slice>
        <from usec="0" sec="1284008786"/>
        <to usec="0" sec="1284008824"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.62.177.163" dst_ip="167.190.109.89" src_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008946"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="167.190.108.73" dst_ip="223.17.89.37" src_port="51683" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008959"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.104.40.132" dst_port="443"/>
            <filter src_ip="145.105.74.91" dst_ip="35.104.40.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="1284008417"/>
        <to usec="0" sec="1284008937"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="145.105.179.104" dst_ip="208.22.249.111" dst_port="2703"/>
            <filter src_ip="198.32.87.46" dst_ip="208.22.249.111" dst_port="2703"/>
        </slice>
        <from usec="0" sec="1284008420"/>
        <to usec="0" sec="1284008937"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.44.150" dst_ip="20.170.129.223" src_port="49946" dst_port="32657"/>
            <filter src_ip="199.56.44.150" dst_ip="20.170.129.223" src_port="5200" dst_port="52559"/>
        </slice>
        <from usec="0" sec="1284008811"/>
        <to usec="0" sec="1284008845"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.5.40.75" dst_ip="176.74.26.3" src_port="80" dst_port="52798"/>
        </slice>
        <from usec="0" sec="1284008902"/>
        <to usec="0" sec="1284008950"/>
    </anomaly>
    <anomaly type="notice" value="0.767270,1.182500,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="203.211.102.216" dst_ip="10.220.25.100" src_port="53"/>
            <filter src_ip="203.211.102.233" dst_ip="10.220.25.100" src_port="53"/>
            <filter src_ip="203.211.102.220" dst_ip="10.220.25.100" src_port="53"/>
        </slice>
        <from usec="0" sec="1284008402"/>
        <to usec="0" sec="1284009048"/>
    </anomaly>
    <anomaly type="notice" value="0.891443,1.347790,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.56.57.204" dst_port="7282"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008537"/>
    </anomaly>
    <anomaly type="notice" value="0.891443,1.347790,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.36.35.116" src_port="53"/>
            <filter dst_ip="148.36.35.116" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008779"/>
    </anomaly>
    <anomaly type="notice" value="0.891443,1.347790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.12.249.187" dst_port="10067"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008537"/>
    </anomaly>
    <anomaly type="notice" value="0.891443,1.347790,999,0 0 0 1 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="208.6.125.25" src_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284008987"/>
    </anomaly>
    <anomaly type="notice" value="0.891443,1.347790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="198.32.104.161" dst_port="53"/>
            <filter dst_ip="34.66.24.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="1284008401"/>
        <to usec="0" sec="1284009049"/>
    </anomaly>
    <anomaly type="notice" value="0.780957,1.174970,999,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="199.56.48.58" src_port="53" dst_port="44807"/>
            <filter dst_ip="199.56.48.58"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.780957,1.174970,999,0 0 0 1 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="167.190.108.64" src_port="10991" dst_port="17788"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.780957,1.174970,503,0 0 0 1 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="28.13.62.87" dst_ip="167.190.47.48" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
