<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.241.86.8" dst_ip="182.222.210.244" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687171"/>
        <to usec="0" sec="1286687173"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.79.228.65" dst_ip="211.26.86.88" src_port="54527" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687153"/>
        <to usec="0" sec="1286687155"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="33.79.117.150"/>
        </slice>
        <from usec="0" sec="1286687193"/>
        <to usec="0" sec="1286687235"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.222.63.221" dst_ip="211.20.20.184" src_port="58950" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687177"/>
        <to usec="0" sec="1286687221"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="182.222.210.139" dst_ip="222.180.179.27" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687106"/>
        <to usec="0" sec="1286687238"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.106.200.25" dst_ip="196.79.235.76" src_port="42202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687167"/>
        <to usec="0" sec="1286687175"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.89.248.180" dst_ip="25.130.251.63" src_port="36230" dst_port="36346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687183"/>
        <to usec="0" sec="1286687207"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="218.216.95.140" src_port="1433" dst_port="6000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686804"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="141.102.92.247"/>
        </slice>
        <from usec="0" sec="1286687645"/>
        <to usec="0" sec="1286687647"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.222.160.128" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1286687202"/>
        <to usec="0" sec="1286687205"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="38.39.173.123" src_port="60495" dst_port="2425" proto="udp"/>
        </slice>
        <from usec="0" sec="1286687452"/>
        <to usec="0" sec="1286687454"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.79.230.231" src_port="33467" proto="udp"/>
        </slice>
        <from usec="0" sec="1286687120"/>
        <to usec="0" sec="1286687225"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="199.124.213.87"/>
        </slice>
        <from usec="0" sec="1286687043"/>
        <to usec="0" sec="1286687047"/>
    </anomaly>
    <anomaly type="notice" value="0.794799,1.244610,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.228.48.164"/>
        </slice>
        <from usec="0" sec="1286687464"/>
        <to usec="0" sec="1286687466"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.222.81.18"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686900"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="38.85.136.165"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686861"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="36.114.189.203"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686908"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="32.36.192.123"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686908"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.218.74.112"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686908"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.30.9.221"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286686833"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.198.33.12"/>
        </slice>
        <from usec="0" sec="1286686808"/>
        <to usec="0" sec="1286686894"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.84.208.37"/>
        </slice>
        <from usec="0" sec="1286686817"/>
        <to usec="0" sec="1286686864"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.204.92.216"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687176"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.132.17.71"/>
        </slice>
        <from usec="0" sec="1286686817"/>
        <to usec="0" sec="1286686998"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.21.0.48"/>
        </slice>
        <from usec="0" sec="1286686824"/>
        <to usec="0" sec="1286686844"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="1.83.186.126"/>
        </slice>
        <from usec="0" sec="1286686957"/>
        <to usec="0" sec="1286686959"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="67.76.138.212"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687088"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="33.199.183.158"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687088"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.79.229.64"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687088"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="189.204.92.134"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687088"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="182.222.60.27"/>
        </slice>
        <from usec="0" sec="1286686802"/>
        <to usec="0" sec="1286687088"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.53.120.207"/>
        </slice>
        <from usec="0" sec="1286686806"/>
        <to usec="0" sec="1286687076"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="6.5.39.197"/>
        </slice>
        <from usec="0" sec="1286686818"/>
        <to usec="0" sec="1286687017"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="182.222.63.12"/>
        </slice>
        <from usec="0" sec="1286686848"/>
        <to usec="0" sec="1286687029"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="182.222.145.186"/>
        </slice>
        <from usec="0" sec="1286686875"/>
        <to usec="0" sec="1286687057"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.51.148.235"/>
        </slice>
        <from usec="0" sec="1286686905"/>
        <to usec="0" sec="1286686964"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="217.146.205.87"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687022"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.102.185.5"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687174"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="1.83.192.177"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="30.152.158.72"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.164.41.84"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.41.76.46"/>
        </slice>
        <from usec="0" sec="1286686802"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.102.73.81"/>
        </slice>
        <from usec="0" sec="1286686803"/>
        <to usec="0" sec="1286687138"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="1.83.186.42"/>
        </slice>
        <from usec="0" sec="1286686803"/>
        <to usec="0" sec="1286687173"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="197.80.105.78" dst_ip="222.244.56.232" src_port="53"/>
            <filter src_ip="197.80.105.76" dst_ip="222.244.56.232" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686803"/>
        <to usec="0" sec="1286687065"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.80.125.78"/>
        </slice>
        <from usec="0" sec="1286686804"/>
        <to usec="0" sec="1286687177"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="51.43.170.31"/>
        </slice>
        <from usec="0" sec="1286686804"/>
        <to usec="0" sec="1286687176"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.102.73.40"/>
        </slice>
        <from usec="0" sec="1286686815"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.58.181.80"/>
        </slice>
        <from usec="0" sec="1286686819"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.105.217.76"/>
        </slice>
        <from usec="0" sec="1286686822"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="71.80.171.222"/>
        </slice>
        <from usec="0" sec="1286686835"/>
        <to usec="0" sec="1286687034"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="196.196.165.152"/>
        </slice>
        <from usec="0" sec="1286686934"/>
        <to usec="0" sec="1286687133"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="32.8.233.173"/>
        </slice>
        <from usec="0" sec="1286686952"/>
        <to usec="0" sec="1286687033"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.125.49.251"/>
        </slice>
        <from usec="0" sec="1286686984"/>
        <to usec="0" sec="1286687177"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.30.228.164"/>
        </slice>
        <from usec="0" sec="1286687006"/>
        <to usec="0" sec="1286687148"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="216.59.82.22"/>
        </slice>
        <from usec="0" sec="1286687097"/>
        <to usec="0" sec="1286687178"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.38.90.227"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687268"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="69.66.67.102"/>
        </slice>
        <from usec="0" sec="1286686805"/>
        <to usec="0" sec="1286687266"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.186.14"/>
        </slice>
        <from usec="0" sec="1286686858"/>
        <to usec="0" sec="1286687259"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.186.179"/>
        </slice>
        <from usec="0" sec="1286687072"/>
        <to usec="0" sec="1286687264"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.198.74.159"/>
        </slice>
        <from usec="0" sec="1286687089"/>
        <to usec="0" sec="1286687235"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="209.50.206.62"/>
        </slice>
        <from usec="0" sec="1286687111"/>
        <to usec="0" sec="1286687209"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="39.106.41.73"/>
        </slice>
        <from usec="0" sec="1286687169"/>
        <to usec="0" sec="1286687185"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.112.104.177"/>
        </slice>
        <from usec="0" sec="1286687195"/>
        <to usec="0" sec="1286687212"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="220.33.0.171"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687272"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="34.48.57.152"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687349"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="16.96.118.93"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="21.149.96.37"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="67.92.81.121"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="175.108.200.139"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.17.100"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687307"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="6.9.92.179"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687355"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="10.3.1.130"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687342"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="44.245.124.100"/>
        </slice>
        <from usec="0" sec="1286686803"/>
        <to usec="0" sec="1286687354"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.108.36.23"/>
        </slice>
        <from usec="0" sec="1286686805"/>
        <to usec="0" sec="1286687625"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="67.178.74.172"/>
        </slice>
        <from usec="0" sec="1286686805"/>
        <to usec="0" sec="1286687626"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="168.96.194.66"/>
        </slice>
        <from usec="0" sec="1286686808"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.190.245"/>
        </slice>
        <from usec="0" sec="1286686809"/>
        <to usec="0" sec="1286687334"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,011,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.106.210.18"/>
        </slice>
        <from usec="0" sec="1286686813"/>
        <to usec="0" sec="1286687624"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.106.203.34"/>
        </slice>
        <from usec="0" sec="1286686846"/>
        <to usec="0" sec="1286687350"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="69.228.45.115" dst_ip="136.222.176.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686869"/>
        <to usec="0" sec="1286687216"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.81.140.211"/>
        </slice>
        <from usec="0" sec="1286686893"/>
        <to usec="0" sec="1286687414"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="1.40.0.126"/>
        </slice>
        <from usec="0" sec="1286686987"/>
        <to usec="0" sec="1286687186"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.108.29.66"/>
        </slice>
        <from usec="0" sec="1286687026"/>
        <to usec="0" sec="1286687356"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.81.131.79"/>
        </slice>
        <from usec="0" sec="1286687133"/>
        <to usec="0" sec="1286687328"/>
    </anomaly>
    <anomaly type="notice" value="0.762475,1.208450,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.222.188.96" src_port="15000"/>
        </slice>
        <from usec="0" sec="1286687140"/>
        <to usec="0" sec="1286687647"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="211.7.114.159"/>
        </slice>
        <from usec="0" sec="1286687178"/>
        <to usec="0" sec="1286687338"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="185.8.233.37"/>
        </slice>
        <from usec="0" sec="1286687196"/>
        <to usec="0" sec="1286687200"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.48.65.53"/>
        </slice>
        <from usec="0" sec="1286687223"/>
        <to usec="0" sec="1286687236"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="205.193.94.212"/>
        </slice>
        <from usec="0" sec="1286687257"/>
        <to usec="0" sec="1286687358"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="2.28.154.189"/>
        </slice>
        <from usec="0" sec="1286687316"/>
        <to usec="0" sec="1286687335"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.84.94.214"/>
        </slice>
        <from usec="0" sec="1286687316"/>
        <to usec="0" sec="1286687337"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="18.228.28.232"/>
        </slice>
        <from usec="0" sec="1286687330"/>
        <to usec="0" sec="1286687345"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="68.13.48.129"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687448"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="141.128.133.156"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687378"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.38.90.192"/>
        </slice>
        <from usec="0" sec="1286686803"/>
        <to usec="0" sec="1286687445"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.222.186.35" dst_port="80"/>
            <filter dst_ip="136.222.186.35" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1286686821"/>
        <to usec="0" sec="1286687441"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="141.102.193.201" dst_ip="193.182.49.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686834"/>
        <to usec="0" sec="1286687442"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="30.138.62.215"/>
        </slice>
        <from usec="0" sec="1286687124"/>
        <to usec="0" sec="1286687323"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.81.32.218"/>
        </slice>
        <from usec="0" sec="1286687298"/>
        <to usec="0" sec="1286687317"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="128.192.70.178"/>
        </slice>
        <from usec="0" sec="1286687342"/>
        <to usec="0" sec="1286687448"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.159.167.234"/>
        </slice>
        <from usec="0" sec="1286687379"/>
        <to usec="0" sec="1286687388"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="112.191.177.56"/>
        </slice>
        <from usec="0" sec="1286687428"/>
        <to usec="0" sec="1286687535"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="152.94.11.65"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687628"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.6.40.77"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687533"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="220.212.158.160"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687538"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="221.216.173.48"/>
        </slice>
        <from usec="0" sec="1286686804"/>
        <to usec="0" sec="1286687538"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="7.75.210.139"/>
        </slice>
        <from usec="0" sec="1286686981"/>
        <to usec="0" sec="1286687536"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="66.152.99.5"/>
        </slice>
        <from usec="0" sec="1286686997"/>
        <to usec="0" sec="1286687516"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="222.77.204.19"/>
        </slice>
        <from usec="0" sec="1286687236"/>
        <to usec="0" sec="1286687436"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="212.143.133.52"/>
        </slice>
        <from usec="0" sec="1286687283"/>
        <to usec="0" sec="1286687482"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="2.91.150.1"/>
        </slice>
        <from usec="0" sec="1286687318"/>
        <to usec="0" sec="1286687517"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="70.77.82.66"/>
        </slice>
        <from usec="0" sec="1286687456"/>
        <to usec="0" sec="1286687470"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.85.184.176"/>
        </slice>
        <from usec="0" sec="1286687494"/>
        <to usec="0" sec="1286687520"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.174.40.36"/>
        </slice>
        <from usec="0" sec="1286687531"/>
        <to usec="0" sec="1286687538"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="210.25.26.154"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687628"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.79.234.39" dst_port="59538"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687628"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.79.230.149" dst_port="52938"/>
        </slice>
        <from usec="0" sec="1286686801"/>
        <to usec="0" sec="1286687624"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.201.100"/>
        </slice>
        <from usec="0" sec="1286686811"/>
        <to usec="0" sec="1286687628"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.128.174.209"/>
        </slice>
        <from usec="0" sec="1286686861"/>
        <to usec="0" sec="1286687616"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.132.134.12"/>
        </slice>
        <from usec="0" sec="1286686922"/>
        <to usec="0" sec="1286687583"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.4.141.180"/>
        </slice>
        <from usec="0" sec="1286687215"/>
        <to usec="0" sec="1286687567"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.47.90.77"/>
        </slice>
        <from usec="0" sec="1286687343"/>
        <to usec="0" sec="1286687628"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="193.164.212.84"/>
        </slice>
        <from usec="0" sec="1286687368"/>
        <to usec="0" sec="1286687568"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="160.119.80.6"/>
        </slice>
        <from usec="0" sec="1286687436"/>
        <to usec="0" sec="1286687449"/>
    </anomaly>
    <anomaly type="notice" value="0.388709,1.214860,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.105.177.17"/>
        </slice>
        <from usec="0" sec="1286687516"/>
        <to usec="0" sec="1286687536"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.222.164.18"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.79.228.65"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.79.234.14" dst_port="80"/>
            <filter dst_ip="196.79.234.14"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="182.222.221.207"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.79.230.231"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="173.214.220.113"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.80.83.80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="196.79.237.17"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.119.33.104"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.222.181.242"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.89.252.197"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="136.222.50.209"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.664879,1.250080,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.102.13.69" dst_port="32623"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687268"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="80.202.212.80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.222.188.96"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.89.248.180"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.175.84.155" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="172.16.7.5" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.89.248.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.119.69.205" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.119.69.204" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.245.53.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="182.222.210.240" dst_port="80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="182.222.210.244" dst_port="80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.80.105.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.102.214.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.664879,1.250080,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.222.232.52" src_port="53"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687538"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.79.237.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="182.222.210.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.102.22.139" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.89.248.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.80.64.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286686891"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.79.237.80" dst_port="53"/>
            <filter dst_ip="203.72.117.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686800"/>
        <to usec="0" sec="1286687026"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.79.237.67" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286687026"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.89.20.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="1286686845"/>
        <to usec="0" sec="1286687116"/>
    </anomaly>
    <anomaly type="notice" value="0.701714,1.285070,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.89.252.197" src_port="27745"/>
        </slice>
        <from usec="0" sec="1286687070"/>
        <to usec="0" sec="1286687116"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.70.34.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.582622,1.171940,504,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="136.222.110.230" dst_port="443"/>
            <filter src_ip="136.222.110.230" dst_port="80"/>
            <filter dst_ip="138.60.173.171" dst_port="443"/>
            <filter dst_ip="138.60.173.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.6.225.196"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.6.145.128"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.793989,1.208400,999,0 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.79.228.75" dst_port="50986"/>
            <filter dst_ip="196.79.228.75" dst_port="52287"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.582622,1.171940,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.79.229.73" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="33.199.94.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="182.222.60.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="182.222.86.183"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="138.60.173.222" src_port="80"/>
            <filter dst_ip="182.222.253.164" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="160.0.182.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="168.120.86.156"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.106.202.82" dst_ip="196.79.238.73" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.147.78.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.147.78.251"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.147.78.93"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="2.254.162.197"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.186.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.186.205"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.186.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.188.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.188.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.83.188.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.624329,1.209190,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="25.56.180.168"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
