<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.19.62.229" dst_ip="212.82.128.174" src_port="56170" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130007"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.72.38.195"/>
        </slice>
        <from usec="0" sec="1292130309"/>
        <to usec="0" sec="1292130850"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.138.161" dst_ip="12.40.194.227" src_port="80" dst_port="2346" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130476"/>
        <to usec="0" sec="1292130479"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="208.153.17.122" dst_ip="173.46.181.169" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130229"/>
        <to usec="0" sec="1292130231"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="34.56.74.221"/>
        </slice>
        <from usec="0" sec="1292130371"/>
        <to usec="0" sec="1292130374"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.56.74.223" dst_ip="213.240.198.89" src_port="36930" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130811"/>
        <to usec="0" sec="1292130816"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.196.106"/>
        </slice>
        <from usec="0" sec="1292130818"/>
        <to usec="0" sec="1292130821"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.19.9.43" dst_ip="200.116.40.118" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130390"/>
        <to usec="0" sec="1292130398"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.241.59"/>
        </slice>
        <from usec="0" sec="1292130764"/>
        <to usec="0" sec="1292130814"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="9.53.33.107"/>
        </slice>
        <from usec="0" sec="1292130727"/>
        <to usec="0" sec="1292130730"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.19.9.40"/>
        </slice>
        <from usec="0" sec="1292130404"/>
        <to usec="0" sec="1292130407"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.73.89.54" dst_ip="219.112.48.215" src_port="55931" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130432"/>
        <to usec="0" sec="1292130442"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.46.109.243" dst_ip="8.26.200.255" src_port="61965" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130839"/>
        <to usec="0" sec="1292130876"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.19.145.212" dst_ip="2.8.35.247" src_port="51952" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130140"/>
        <to usec="0" sec="1292130146"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="193.57.42.70" dst_ip="212.68.144.41" src_port="51703" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130143"/>
        <to usec="0" sec="1292130146"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.121.251" dst_ip="193.1.8.186" src_port="57971" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130233"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.46.19.68" dst_ip="0.120.229.0" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130159"/>
        <to usec="0" sec="1292130402"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.240.198.38" dst_ip="193.39.223.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130808"/>
        <to usec="0" sec="1292130812"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.18.219" dst_ip="160.169.20.191" src_port="55267" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130226"/>
        <to usec="0" sec="1292130901"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.49.202.150"/>
        </slice>
        <from usec="0" sec="1292130141"/>
        <to usec="0" sec="1292130145"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="203.2.9.115" dst_ip="213.240.197.22" src_port="17453" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130186"/>
        <to usec="0" sec="1292130188"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.210.249" dst_ip="212.72.38.195" dst_port="110" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130076"/>
        <to usec="0" sec="1292130737"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.145.147" dst_ip="209.44.233.200" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130111"/>
        <to usec="0" sec="1292130257"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.54.75.25" dst_ip="173.46.19.65" src_port="80" dst_port="50493" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130062"/>
        <to usec="0" sec="1292130547"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.83.144.110"/>
        </slice>
        <from usec="0" sec="1292130888"/>
        <to usec="0" sec="1292130892"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.241.226.56"/>
        </slice>
        <from usec="0" sec="1292130736"/>
        <to usec="0" sec="1292130773"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.192.64.191"/>
        </slice>
        <from usec="0" sec="1292130307"/>
        <to usec="0" sec="1292130314"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="53.72.68.173"/>
        </slice>
        <from usec="0" sec="1292130824"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.49.202.245" dst_ip="133.162.109.44" src_port="40050" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130753"/>
        <to usec="0" sec="1292130759"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.73.120.175" dst_ip="9.53.50.129" src_port="80" dst_port="46543" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130871"/>
        <to usec="0" sec="1292130873"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.245.143.122" dst_ip="173.46.150.166" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130050"/>
        <to usec="0" sec="1292130272"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.107.244"/>
        </slice>
        <from usec="0" sec="1292130535"/>
        <to usec="0" sec="1292130538"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.1.9.124"/>
        </slice>
        <from usec="0" sec="1292130305"/>
        <to usec="0" sec="1292130391"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.68.148.134" dst_ip="206.83.157.12" src_port="37922" dst_port="8000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130872"/>
        <to usec="0" sec="1292130874"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.141.56" dst_ip="8.49.193.69" src_port="80" dst_port="36073" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130139"/>
        <to usec="0" sec="1292130391"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.156.51.6" dst_ip="133.162.109.91" src_port="48276" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130221"/>
        <to usec="0" sec="1292130871"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.237.119.96" dst_ip="213.240.197.22" src_port="63567" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130512"/>
        <to usec="0" sec="1292130514"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="9.53.50.198"/>
        </slice>
        <from usec="0" sec="1292130239"/>
        <to usec="0" sec="1292130242"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.141.50" dst_ip="204.166.90.3" src_port="80" dst_port="49695" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130292"/>
        <to usec="0" sec="1292130695"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.46.21.115" dst_ip="9.56.138.46" src_port="33090" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130624"/>
        <to usec="0" sec="1292130626"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.111.228"/>
        </slice>
        <from usec="0" sec="1292130621"/>
        <to usec="0" sec="1292130625"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.46.99.69" dst_ip="131.19.90.146" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130100"/>
        <to usec="0" sec="1292130108"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.170.70.217" dst_ip="131.19.217.52" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130410"/>
        <to usec="0" sec="1292130596"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.19.9.97" dst_ip="203.32.247.76" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130897"/>
        <to usec="0" sec="1292130899"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.14.187.215"/>
        </slice>
        <from usec="0" sec="1292130259"/>
        <to usec="0" sec="1292130265"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.68.148.172" dst_ip="9.53.33.205" src_port="80" dst_port="43043" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130365"/>
        <to usec="0" sec="1292130854"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.46.16.154" dst_ip="163.151.106.111" src_port="51540" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130003"/>
        <to usec="0" sec="1292130867"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.0.90.128" dst_ip="209.44.176.103" src_port="80" dst_port="13855" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130250"/>
        <to usec="0" sec="1292130298"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.46.16.144" dst_ip="3.20.53.149" src_port="3178" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130082"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.0.90.129"/>
        </slice>
        <from usec="0" sec="1292130487"/>
        <to usec="0" sec="1292130489"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="128.52.147.59" dst_ip="131.19.247.135" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130340"/>
        <to usec="0" sec="1292130342"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.18.138" dst_ip="8.228.161.196" src_port="50656" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130015"/>
        <to usec="0" sec="1292130814"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.4.76.207" dst_ip="213.240.205.69" src_port="7907" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130186"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.106.76"/>
        </slice>
        <from usec="0" sec="1292130764"/>
        <to usec="0" sec="1292130770"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="69.134.142.116" dst_ip="213.240.203.48" src_port="80" dst_port="1702" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130608"/>
        <to usec="0" sec="1292130610"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.19.43"/>
        </slice>
        <from usec="0" sec="1292130034"/>
        <to usec="0" sec="1292130244"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.181.169" dst_ip="181.105.78.238" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130022"/>
        <to usec="0" sec="1292130440"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.46.16.130" dst_ip="16.217.247.146" src_port="61582" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130594"/>
        <to usec="0" sec="1292130887"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.20.53.149" dst_ip="173.46.16.144" src_port="1935" dst_port="3178" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130093"/>
        <to usec="0" sec="1292130869"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.1.8.187" dst_ip="173.46.18.168" src_port="80" dst_port="2538" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130101"/>
        <to usec="0" sec="1292130182"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.202.128.175"/>
        </slice>
        <from usec="0" sec="1292130491"/>
        <to usec="0" sec="1292130495"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="204.5.130.5" dst_ip="212.68.148.170" src_port="46852" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130514"/>
        <to usec="0" sec="1292130517"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.19.225" dst_ip="193.1.8.177" src_port="62638" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130341"/>
        <to usec="0" sec="1292130760"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.20.53.155" dst_ip="131.19.195.19" src_port="1935" dst_port="54200" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130852"/>
        <to usec="0" sec="1292130854"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.46.232.128" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130117"/>
        <to usec="0" sec="1292130480"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.240.211.210" dst_ip="193.39.222.149" src_port="63462" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130040"/>
        <to usec="0" sec="1292130871"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.1.8.132" dst_ip="173.46.16.139" src_port="80" dst_port="51248" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130749"/>
        <to usec="0" sec="1292130799"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.53.50.59" dst_ip="213.240.207.180" src_port="39147" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130862"/>
        <to usec="0" sec="1292130869"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.124.110" dst_ip="221.62.205.161" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130360"/>
        <to usec="0" sec="1292130367"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.18.86" dst_ip="193.1.8.199" src_port="54306" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130038"/>
        <to usec="0" sec="1292130085"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.19.164.173" dst_ip="3.176.153.34" src_port="4117" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130007"/>
        <to usec="0" sec="1292130346"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.19.47.46" dst_ip="122.165.179.112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130122"/>
        <to usec="0" sec="1292130732"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="64.40.143.101"/>
        </slice>
        <from usec="0" sec="1292130064"/>
        <to usec="0" sec="1292130527"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.217.54.13" dst_ip="173.46.19.65" src_port="80" dst_port="50373" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130185"/>
        <to usec="0" sec="1292130876"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.111.128.218" dst_ip="173.46.101.119" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130597"/>
        <to usec="0" sec="1292130632"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="128.189.117.1" dst_ip="133.0.157.142" src_port="80" dst_port="36164" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130001"/>
        <to usec="0" sec="1292130003"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.68.161" dst_ip="209.44.4.255" src_port="1044" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130089"/>
        <to usec="0" sec="1292130092"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.12.84.195" dst_ip="173.46.112.108" src_port="80" dst_port="50941" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130568"/>
        <to usec="0" sec="1292130742"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.240.203.48" dst_ip="163.62.82.74" src_port="1528" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130089"/>
        <to usec="0" sec="1292130092"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.47.198.54"/>
        </slice>
        <from usec="0" sec="1292130638"/>
        <to usec="0" sec="1292130641"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="59.231.219.162" dst_ip="133.21.80.21" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130296"/>
        <to usec="0" sec="1292130460"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.53.33.186" dst_ip="173.46.6.201" src_port="41396" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130292"/>
        <to usec="0" sec="1292130295"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.5.156.198" dst_ip="213.240.205.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130536"/>
        <to usec="0" sec="1292130615"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="8.49.202.250" dst_ip="173.46.150.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130064"/>
        <to usec="0" sec="1292130745"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="12.161.142.131" dst_ip="131.19.126.175" dst_port="80"/>
            <filter src_ip="12.161.142.131" dst_ip="131.19.73.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130019"/>
        <to usec="0" sec="1292130762"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.240.200.20"/>
        </slice>
        <from usec="0" sec="1292130681"/>
        <to usec="0" sec="1292130684"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.217.224.159" dst_ip="131.19.9.43" dst_port="80"/>
            <filter src_ip="192.217.224.159" dst_ip="131.19.81.237" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130022"/>
        <to usec="0" sec="1292130253"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.46.19.91"/>
        </slice>
        <from usec="0" sec="1292130070"/>
        <to usec="0" sec="1292130396"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.53.33.228" dst_ip="213.240.198.89" src_port="40952" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130098"/>
        <to usec="0" sec="1292130164"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.240.197.22" dst_ip="213.240.197.22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130006"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="0.120.229.90" dst_port="993"/>
            <filter src_ip="133.0.157.70" dst_ip="0.120.229.90" dst_port="995"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130887"/>
    </anomaly>
    <anomaly type="notice" value="0.731817,1.218600,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.150.218"/>
        </slice>
        <from usec="0" sec="1292130001"/>
        <to usec="0" sec="1292130901"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="56.93.27.85" dst_ip="213.240.205.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130073"/>
        <to usec="0" sec="1292130316"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.116.69.62"/>
        </slice>
        <from usec="0" sec="1292130207"/>
        <to usec="0" sec="1292130296"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="173.46.106.73" dst_ip="193.1.8.184" src_port="52099" dst_port="80"/>
            <filter src_ip="173.46.19.68" dst_ip="193.1.8.184" src_port="56017" dst_port="80"/>
            <filter src_ip="173.46.45.36" dst_ip="193.1.8.184" src_port="52917" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130101"/>
        <to usec="0" sec="1292130858"/>
    </anomaly>
    <anomaly type="notice" value="0.731817,1.218600,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="128.189.114.72" dst_port="443"/>
            <filter dst_ip="128.189.114.72" dst_port="80"/>
            <filter src_ip="133.0.55.217" dst_ip="53.109.134.107" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130810"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="173.46.16.154" dst_ip="160.168.100.190" src_port="51591" dst_port="1935"/>
            <filter src_ip="173.46.16.153" dst_ip="160.168.100.190" src_port="1875" dst_port="1935"/>
            <filter src_ip="173.46.16.152" dst_ip="160.168.100.190" src_port="1297" dst_port="1935"/>
        </slice>
        <from usec="0" sec="1292130019"/>
        <to usec="0" sec="1292130886"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,503,0 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="131.19.118.73" dst_port="80"/>
            <filter src_ip="131.19.145.154" dst_ip="212.72.158.199" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130093"/>
        <to usec="0" sec="1292130754"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.100.116" dst_ip="16.199.96.235" dst_port="80"/>
            <filter src_ip="131.19.100.116" dst_ip="8.100.187.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130523"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="210.172.52.52" dst_ip="133.0.156.211" dst_port="80"/>
            <filter src_ip="210.172.52.182" dst_ip="133.0.156.211" dst_port="80"/>
            <filter src_ip="210.172.52.57" dst_ip="133.0.156.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.68.148.175" dst_ip="37.15.219.96" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130216"/>
        <to usec="0" sec="1292130437"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.102.65" dst_ip="193.39.222.29" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130583"/>
        <to usec="0" sec="1292130586"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.19.70" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130734"/>
        <to usec="0" sec="1292130870"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.18.216" dst_ip="193.49.18.158" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130505"/>
        <to usec="0" sec="1292130546"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.0.73.112"/>
        </slice>
        <from usec="0" sec="1292130368"/>
        <to usec="0" sec="1292130372"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.168.5" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130824"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="13.58.104.16" dst_ip="173.46.150.216"/>
        </slice>
        <from usec="0" sec="1292130061"/>
        <to usec="0" sec="1292130063"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="64.249.82.28"/>
        </slice>
        <from usec="0" sec="1292130688"/>
        <to usec="0" sec="1292130691"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.2.34" dst_ip="0.72.180.58" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130154"/>
        <to usec="0" sec="1292130159"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.12.213.148" dst_ip="131.19.120.29" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130261"/>
        <to usec="0" sec="1292130266"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.220.207"/>
        </slice>
        <from usec="0" sec="1292130259"/>
        <to usec="0" sec="1292130294"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.19.38"/>
        </slice>
        <from usec="0" sec="1292130624"/>
        <to usec="0" sec="1292130627"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.19.91.232" dst_ip="195.151.4.209" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130169"/>
        <to usec="0" sec="1292130651"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.240.211.240" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130187"/>
        <to usec="0" sec="1292130770"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="36.12.27.245"/>
        </slice>
        <from usec="0" sec="1292130860"/>
        <to usec="0" sec="1292130868"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.232.174" dst_ip="206.188.220.133" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130291"/>
        <to usec="0" sec="1292130442"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.60.143" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130054"/>
        <to usec="0" sec="1292130103"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="212.68.144.90" dst_ip="218.228.238.175" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1292130869"/>
        <to usec="0" sec="1292130876"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="131.19.200.8" dst_ip="13.149.240.146" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130147"/>
        <to usec="0" sec="1292130150"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.2.169" dst_ip="67.115.53.109" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130303"/>
        <to usec="0" sec="1292130340"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.240.204.88" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130101"/>
        <to usec="0" sec="1292130693"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.18.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130038"/>
        <to usec="0" sec="1292130045"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.18.1" dst_ip="0.203.3.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130225"/>
        <to usec="0" sec="1292130228"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.46.19.177" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130278"/>
        <to usec="0" sec="1292130811"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="68.39.155.232"/>
        </slice>
        <from usec="0" sec="1292130608"/>
        <to usec="0" sec="1292130611"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="59.161.55.120"/>
        </slice>
        <from usec="0" sec="1292130219"/>
        <to usec="0" sec="1292130222"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.57.83.80"/>
        </slice>
        <from usec="0" sec="1292130707"/>
        <to usec="0" sec="1292130711"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.240.200.17" dst_ip="213.240.200.17" proto="udp"/>
        </slice>
        <from usec="0" sec="1292130178"/>
        <to usec="0" sec="1292130854"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.46.18.148" dst_port="80"/>
            <filter dst_ip="193.57.83.11" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130273"/>
        <to usec="0" sec="1292130858"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.46.16.227" dst_port="443"/>
            <filter dst_ip="128.189.114.198" dst_port="443"/>
            <filter dst_ip="128.189.114.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130894"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.240.193.145" dst_ip="213.240.193.145" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130343"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.119.60" dst_ip="165.50.73.54" dst_port="80"/>
            <filter src_ip="131.19.119.60" dst_ip="128.189.114.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130863"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter src_ip="133.141.130.92" dst_ip="181.129.83.41" proto="icmp"/>
        </slice>
        <from usec="0" sec="1292130006"/>
        <to usec="0" sec="1292130398"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="145.7.58.156"/>
        </slice>
        <from usec="0" sec="1292130110"/>
        <to usec="0" sec="1292130299"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="146.57.122.156"/>
        </slice>
        <from usec="0" sec="1292130125"/>
        <to usec="0" sec="1292130219"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="196.31.113.38" dst_ip="213.240.196.48" proto="icmp"/>
        </slice>
        <from usec="0" sec="1292130635"/>
        <to usec="0" sec="1292130637"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="213.240.201.224" proto="icmp"/>
        </slice>
        <from usec="0" sec="1292130041"/>
        <to usec="0" sec="1292130334"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.73.82.48" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130003"/>
        <to usec="0" sec="1292130671"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="133.0.138.59" dst_port="443"/>
            <filter dst_ip="128.189.114.37" dst_port="80"/>
            <filter src_ip="131.19.218.133" dst_ip="128.189.114.37" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130054"/>
        <to usec="0" sec="1292130802"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.161.100.91" dst_port="21"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130894"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.0.152.96"/>
        </slice>
        <from usec="0" sec="1292130254"/>
        <to usec="0" sec="1292130257"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.194.160.79" dst_port="21"/>
        </slice>
        <from usec="0" sec="1292130006"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.194.46.19" dst_port="21"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130778"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.68.18.44" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130237"/>
        <to usec="0" sec="1292130255"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="213.240.207.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130102"/>
        <to usec="0" sec="1292130737"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.46.18.0"/>
        </slice>
        <from usec="0" sec="1292130388"/>
        <to usec="0" sec="1292130391"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="19.210.214.97"/>
        </slice>
        <from usec="0" sec="1292130802"/>
        <to usec="0" sec="1292130805"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.46.42.160"/>
        </slice>
        <from usec="0" sec="1292130185"/>
        <to usec="0" sec="1292130188"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.68.8.128"/>
        </slice>
        <from usec="0" sec="1292130498"/>
        <to usec="0" sec="1292130501"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.19.34.71"/>
        </slice>
        <from usec="0" sec="1292130441"/>
        <to usec="0" sec="1292130444"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.15.219.96"/>
        </slice>
        <from usec="0" sec="1292130221"/>
        <to usec="0" sec="1292130224"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.17.156.215"/>
        </slice>
        <from usec="0" sec="1292130472"/>
        <to usec="0" sec="1292130475"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.162.75.40"/>
        </slice>
        <from usec="0" sec="1292130472"/>
        <to usec="0" sec="1292130475"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="213.240.199.43"/>
        </slice>
        <from usec="0" sec="1292130537"/>
        <to usec="0" sec="1292130652"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.68.8.214" dst_ip="12.135.173.244" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130009"/>
        <to usec="0" sec="1292130400"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.98.9.81" dst_ip="173.46.64.160" src_port="8765" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130588"/>
        <to usec="0" sec="1292130591"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.249.89.250" dst_ip="131.19.247.101" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130160"/>
        <to usec="0" sec="1292130166"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.56.74.222" dst_ip="213.240.198.89" src_port="35903" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130529"/>
        <to usec="0" sec="1292130532"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.53.33.104" dst_ip="213.240.201.68" src_port="32998" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130246"/>
        <to usec="0" sec="1292130287"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.73.83.22" dst_ip="3.182.142.244" src_port="29967" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130901"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.1.8.91" dst_ip="173.46.19.43" src_port="80" dst_port="1932"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130249"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.40.149" dst_ip="209.175.101.70" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130734"/>
        <to usec="0" sec="1292130853"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.19.65" dst_ip="8.217.54.13" src_port="50373" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130894"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.53.50.129" dst_ip="212.73.120.175" src_port="46543" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130866"/>
        <to usec="0" sec="1292130878"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.19.50.228" dst_ip="192.81.176.33" src_port="9960" dst_port="80"/>
            <filter src_ip="131.19.50.228" dst_ip="192.81.176.33" src_port="9752" dst_port="80"/>
            <filter src_ip="131.19.50.228" dst_ip="192.81.176.33" src_port="9736" dst_port="80"/>
            <filter src_ip="131.19.50.228" dst_ip="192.81.176.33" src_port="9720" dst_port="80"/>
            <filter src_ip="131.19.50.228" dst_ip="192.81.176.33" src_port="9480" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130221"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.18.221" dst_ip="8.225.118.48" dst_port="80"/>
            <filter src_ip="173.46.18.221" dst_ip="81.236.72.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130530"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.0.0.228" dst_ip="193.39.223.42" dst_port="80"/>
            <filter src_ip="133.0.0.228" dst_ip="193.39.223.19" dst_port="80"/>
            <filter src_ip="133.0.0.228" dst_ip="193.39.223.49" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130806"/>
        <to usec="0" sec="1292130809"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.19.170.236" dst_ip="206.215.96.190" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130230"/>
        <to usec="0" sec="1292130346"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.18.160" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130894"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.47.247" dst_ip="9.56.208.33" src_port="1366" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130199"/>
        <to usec="0" sec="1292130202"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,901,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.21.103" dst_ip="67.90.102.47" dst_port="80"/>
            <filter src_ip="173.46.21.103" dst_ip="67.90.102.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130765"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.1.9.125" dst_ip="212.68.19.72" src_port="80" dst_port="1300"/>
        </slice>
        <from usec="0" sec="1292130176"/>
        <to usec="0" sec="1292130444"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.156.51.6" dst_ip="133.162.109.91" src_port="65089" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130868"/>
        <to usec="0" sec="1292130871"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.112.131" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130820"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.209.166" dst_ip="216.222.53.132" src_port="51669" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130180"/>
        <to usec="0" sec="1292130850"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.46.100.140" dst_ip="173.46.106.104" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130267"/>
        <to usec="0" sec="1292130279"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,502,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="64.99.200.14" dst_ip="212.73.72.10" src_port="40958" dst_port="53"/>
            <filter src_ip="64.99.200.14" dst_ip="212.73.72.10" src_port="39034" dst_port="53"/>
            <filter src_ip="66.58.136.56" dst_ip="212.73.72.10" src_port="34084" dst_port="53"/>
            <filter src_ip="33.45.92.104" dst_ip="212.73.72.10" src_port="49185" dst_port="22"/>
        </slice>
        <from usec="0" sec="1292130029"/>
        <to usec="0" sec="1292130346"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.18.130" dst_ip="28.137.40.160" src_port="32906" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130050"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.109.180" dst_ip="193.39.223.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130133"/>
        <to usec="0" sec="1292130137"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.19.145.160" dst_port="80"/>
            <filter src_ip="131.19.145.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130373"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="35.210.134.228" dst_ip="212.73.120.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130691"/>
        <to usec="0" sec="1292130869"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.49.193.98" dst_ip="213.240.198.17" src_port="56270" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130254"/>
        <to usec="0" sec="1292130260"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,999,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.156.8.47" dst_ip="213.240.205.84" src_port="35138" dst_port="995"/>
        </slice>
        <from usec="0" sec="1292130078"/>
        <to usec="0" sec="1292130081"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.19.166.45" dst_ip="128.189.114.97" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130343"/>
        <to usec="0" sec="1292130803"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="160.168.100.190" dst_ip="173.46.16.154" src_port="1935" dst_port="51591"/>
            <filter src_ip="160.168.100.190" dst_ip="173.46.16.153" src_port="1935" dst_port="1875"/>
            <filter src_ip="160.168.100.190" dst_ip="173.46.16.152" src_port="1935" dst_port="1297"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130858"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.136.114" dst_ip="210.164.67.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130822"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,012,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="133.0.161.43" dst_ip="163.150.238.73" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130024"/>
        <to usec="0" sec="1292130896"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.118.69" dst_ip="212.72.166.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130296"/>
        <to usec="0" sec="1292130299"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.53.33.205" dst_ip="212.68.148.172" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130157"/>
        <to usec="0" sec="1292130869"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.17.15.243" dst_ip="193.1.9.122" src_port="1760" dst_port="80"/>
            <filter src_ip="133.17.15.243" dst_ip="193.1.9.122" src_port="1756" dst_port="80"/>
            <filter src_ip="133.17.15.243" dst_ip="193.1.8.188" src_port="1730" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130202"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.68.8.234" dst_ip="3.176.153.52" src_port="3060" dst_port="80"/>
            <filter src_ip="212.68.8.234" dst_ip="193.1.9.124" src_port="3068" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130284"/>
        <to usec="0" sec="1292130396"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.240.193.153" dst_ip="192.45.132.74" src_port="50525" dst_port="873"/>
        </slice>
        <from usec="0" sec="1292130022"/>
        <to usec="0" sec="1292130894"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.0.152.165" dst_ip="212.72.166.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130510"/>
        <to usec="0" sec="1292130752"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="131.19.218.19" dst_ip="12.192.77.145" src_port="1569" dst_port="1935"/>
            <filter src_ip="131.19.218.19" dst_ip="12.192.77.145" src_port="1568" dst_port="1935"/>
            <filter src_ip="131.19.218.19" dst_ip="206.16.211.227" src_port="1567" dst_port="80"/>
            <filter src_ip="131.19.218.19" dst_ip="206.16.211.244" src_port="1565" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130017"/>
        <to usec="0" sec="1292130020"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.247.101" dst_ip="13.149.49.213" dst_port="80"/>
            <filter src_ip="131.19.247.101" dst_ip="81.225.19.14" dst_port="80"/>
            <filter src_ip="131.19.247.101" dst_ip="8.74.124.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130494"/>
        <to usec="0" sec="1292130542"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="59.90.17.107" dst_ip="145.7.56.5" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130505"/>
        <to usec="0" sec="1292130708"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.19.166" dst_ip="29.114.64.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130108"/>
        <to usec="0" sec="1292130391"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="212.68.19.72" dst_ip="193.1.9.125" src_port="1300" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130173"/>
        <to usec="0" sec="1292130451"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.240.198.89" dst_ip="213.240.198.89" src_port="40952" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130112"/>
        <to usec="0" sec="1292130148"/>
    </anomaly>
    <anomaly type="notice" value="0.671919,1.314790,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="213.240.197.22" dst_ip="213.240.197.22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1292130017"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.156.8.47" dst_ip="213.240.205.84" src_port="35138" dst_port="995"/>
        </slice>
        <from usec="0" sec="1292130078"/>
        <to usec="0" sec="1292130081"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.63.69" dst_ip="8.2.240.164" dst_port="80"/>
            <filter src_ip="131.19.63.69" dst_ip="9.53.105.13" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130187"/>
        <to usec="0" sec="1292130205"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.0.2.200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130577"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.35.27" dst_ip="8.237.199.39" dst_port="80"/>
            <filter src_ip="131.19.35.27" dst_ip="213.62.10.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130700"/>
        <to usec="0" sec="1292130796"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.46.19.86" dst_ip="8.238.152.235"/>
            <filter dst_ip="8.238.152.235" dst_port="80"/>
            <filter src_ip="173.46.19.86" dst_ip="8.238.152.250" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130290"/>
        <to usec="0" sec="1292130570"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.19.57.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130161"/>
        <to usec="0" sec="1292130841"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.45.37" dst_ip="221.116.233.70" dst_port="80"/>
            <filter src_ip="131.19.45.37" dst_ip="218.40.58.127" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130284"/>
        <to usec="0" sec="1292130316"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.116.26" dst_ip="218.99.125.45" src_port="50197" dst_port="80"/>
            <filter src_ip="173.46.116.26" dst_ip="218.99.125.45" src_port="50196" dst_port="80"/>
            <filter src_ip="173.46.116.26" dst_ip="218.99.125.45" src_port="50195" dst_port="80"/>
            <filter src_ip="173.46.116.26" dst_ip="218.99.125.45" src_port="50194" dst_port="80"/>
            <filter src_ip="173.46.116.26" dst_ip="218.99.125.45" src_port="50193" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130820"/>
        <to usec="0" sec="1292130823"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.19.170.244" dst_ip="181.104.137.24" dst_port="80"/>
            <filter src_ip="131.19.170.244" dst_ip="212.72.166.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130163"/>
        <to usec="0" sec="1292130538"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.46.116.54" dst_ip="67.115.57.165" dst_port="80"/>
            <filter src_ip="173.46.116.54" dst_ip="196.225.128.89" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130360"/>
        <to usec="0" sec="1292130366"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="33.45.57.97" dst_ip="173.46.101.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130225"/>
        <to usec="0" sec="1292130366"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="12.161.142.131" dst_ip="131.19.126.175" dst_port="80"/>
            <filter src_ip="8.154.204.192" dst_ip="131.19.126.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130263"/>
        <to usec="0" sec="1292130516"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.19.89" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130248"/>
        <to usec="0" sec="1292130252"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="179.77.1.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1292130845"/>
        <to usec="0" sec="1292130854"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="6.136.143.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1292130108"/>
        <to usec="0" sec="1292130116"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="4.78.77.10" dst_ip="173.46.225.38" dst_port="993"/>
            <filter src_ip="205.64.18.47" dst_ip="173.46.225.38" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130180"/>
        <to usec="0" sec="1292130785"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="173.46.116.95" dst_ip="128.189.114.97" src_port="62036" dst_port="443"/>
            <filter src_ip="173.46.116.95" dst_ip="128.189.114.97" src_port="62035" dst_port="443"/>
            <filter src_ip="173.46.116.95" dst_ip="128.189.114.97" src_port="62034" dst_port="443"/>
            <filter src_ip="173.46.116.95" dst_ip="128.189.114.97" src_port="62033" dst_port="443"/>
            <filter src_ip="131.19.1.56" dst_ip="128.189.114.97" src_port="33768" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130720"/>
        <to usec="0" sec="1292130723"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="213.240.211.228" dst_ip="107.64.90.154" dst_port="443"/>
            <filter src_ip="173.46.117.200" dst_ip="107.64.90.154" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130315"/>
        <to usec="0" sec="1292130318"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.248.58.140" dst_ip="131.19.126.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130644"/>
        <to usec="0" sec="1292130647"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.76.66.200" dst_ip="131.19.84.227" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130292"/>
        <to usec="0" sec="1292130329"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.46.92.74" dst_ip="128.189.123.107" dst_port="443"/>
            <filter src_ip="173.46.92.74" dst_ip="165.50.73.140" dst_port="443"/>
            <filter src_ip="173.46.92.74" dst_ip="128.189.117.1" dst_port="443"/>
        </slice>
        <from usec="0" sec="1292130081"/>
        <to usec="0" sec="1292130444"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="117.0.240.214" dst_ip="133.162.109.44" src_port="63827" dst_port="80"/>
            <filter src_ip="117.0.240.214" dst_ip="133.162.109.44" src_port="63799" dst_port="80"/>
            <filter src_ip="9.53.33.178" dst_ip="133.162.109.44" src_port="58315" dst_port="80"/>
            <filter src_ip="9.53.33.178" dst_ip="133.162.109.44" src_port="48730" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130091"/>
        <to usec="0" sec="1292130346"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.46.73.65" dst_port="80"/>
            <filter src_ip="131.19.64.70" dst_port="80"/>
            <filter src_ip="173.46.55.0" dst_ip="218.40.58.127" dst_port="80"/>
            <filter src_ip="173.46.55.0" dst_ip="8.108.112.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130263"/>
        <to usec="0" sec="1292130602"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="2.207.234.116"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130108"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="29.214.63.40"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130108"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="133.0.158.19"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130108"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="212.186.213.121"/>
        </slice>
        <from usec="0" sec="1292130030"/>
        <to usec="0" sec="1292130044"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.0.76.34"/>
        </slice>
        <from usec="0" sec="1292130048"/>
        <to usec="0" sec="1292130065"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.0.35.185" dst_ip="44.98.143.186" src_port="1935" dst_port="51310"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130637"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.156.51.157"/>
        </slice>
        <from usec="0" sec="1292130003"/>
        <to usec="0" sec="1292130285"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="27.235.141.145"/>
        </slice>
        <from usec="0" sec="1292130078"/>
        <to usec="0" sec="1292130281"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICterp">
        <slice>
            <filter dst_ip="29.40.103.178"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130648"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="192.45.132.74" dst_ip="213.240.193.153" src_port="873" dst_port="50525"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130876"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="173.46.150.216" dst_ip="193.1.8.193" src_port="41597" dst_port="80"/>
            <filter src_ip="131.19.119.60" dst_ip="193.1.8.193" src_port="61156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130886"/>
        <to usec="0" sec="1292130889"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="165.50.65.12" dst_ip="133.0.138.59" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130809"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.162.45.55"/>
        </slice>
        <from usec="0" sec="1292130021"/>
        <to usec="0" sec="1292130373"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="9.53.50.198"/>
        </slice>
        <from usec="0" sec="1292130237"/>
        <to usec="0" sec="1292130253"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.22.217.13"/>
        </slice>
        <from usec="0" sec="1292130325"/>
        <to usec="0" sec="1292130354"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="58.188.74.148"/>
        </slice>
        <from usec="0" sec="1292130352"/>
        <to usec="0" sec="1292130374"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="173.46.16.130"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130468"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="44.137.99.107"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="9.220.25.23"/>
        </slice>
        <from usec="0" sec="1292130008"/>
        <to usec="0" sec="1292130439"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="131.19.204.161"/>
        </slice>
        <from usec="0" sec="1292130053"/>
        <to usec="0" sec="1292130455"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.141.131.165"/>
        </slice>
        <from usec="0" sec="1292130084"/>
        <to usec="0" sec="1292130460"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="193.44.18.227"/>
        </slice>
        <from usec="0" sec="1292130263"/>
        <to usec="0" sec="1292130462"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="33.178.177.6"/>
        </slice>
        <from usec="0" sec="1292130301"/>
        <to usec="0" sec="1292130373"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="53.84.98.137"/>
        </slice>
        <from usec="0" sec="1292130363"/>
        <to usec="0" sec="1292130376"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.240.211.193"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130556"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.46.209.135" dst_ip="181.105.123.140" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130737"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.96.193.134"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130558"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.0.197.219"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130557"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.41.184.41"/>
        </slice>
        <from usec="0" sec="1292130055"/>
        <to usec="0" sec="1292130541"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="34.251.66.116"/>
        </slice>
        <from usec="0" sec="1292130182"/>
        <to usec="0" sec="1292130506"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="144.204.130.23"/>
        </slice>
        <from usec="0" sec="1292130273"/>
        <to usec="0" sec="1292130473"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="133.0.158.65" src_port="64772" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1292130007"/>
        <to usec="0" sec="1292130857"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.24.109.236"/>
        </slice>
        <from usec="0" sec="1292130531"/>
        <to usec="0" sec="1292130543"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="9.56.162.113" dst_port="3544"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130752"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.53.33.220" dst_ip="212.68.146.146" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130648"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="213.240.211.197"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130648"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="3.20.53.174"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130648"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="53.4.195.246"/>
        </slice>
        <from usec="0" sec="1292130002"/>
        <to usec="0" sec="1292130523"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.209.185.100"/>
        </slice>
        <from usec="0" sec="1292130004"/>
        <to usec="0" sec="1292130644"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.40.0.52"/>
        </slice>
        <from usec="0" sec="1292130007"/>
        <to usec="0" sec="1292130648"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.240.202.177"/>
        </slice>
        <from usec="0" sec="1292130445"/>
        <to usec="0" sec="1292130492"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="64.98.131.158"/>
        </slice>
        <from usec="0" sec="1292130521"/>
        <to usec="0" sec="1292130537"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.46.209.159"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130738"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.171.108.55"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130736"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="54.100.112.248" dst_port="21"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130891"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.52.135.72"/>
        </slice>
        <from usec="0" sec="1292130022"/>
        <to usec="0" sec="1292130723"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="214.109.201.0"/>
        </slice>
        <from usec="0" sec="1292130444"/>
        <to usec="0" sec="1292130738"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="4.188.92.186"/>
        </slice>
        <from usec="0" sec="1292130508"/>
        <to usec="0" sec="1292130738"/>
    </anomaly>
    <anomaly type="notice" value="0.731817,1.218600,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.46.150.169" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130024"/>
        <to usec="0" sec="1292130888"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="65.201.152.39"/>
        </slice>
        <from usec="0" sec="1292130689"/>
        <to usec="0" sec="1292130707"/>
    </anomaly>
    <anomaly type="notice" value="0.618046,1.254860,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="213.240.193.145" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="188.122.144.99"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130823"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="174.41.72.240"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130827"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="131.19.240.155" src_port="53"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="133.0.157.71"/>
        </slice>
        <from usec="0" sec="1292130003"/>
        <to usec="0" sec="1292130828"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="18.46.9.185"/>
        </slice>
        <from usec="0" sec="1292130529"/>
        <to usec="0" sec="1292130691"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.105.103.255"/>
        </slice>
        <from usec="0" sec="1292130578"/>
        <to usec="0" sec="1292130658"/>
    </anomaly>
    <anomaly type="notice" value="0.731817,1.218600,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.83.182.25" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130165"/>
        <to usec="0" sec="1292130681"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.49.202.47"/>
        </slice>
        <from usec="0" sec="1292130735"/>
        <to usec="0" sec="1292130816"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.46.105.193"/>
        </slice>
        <from usec="0" sec="1292130773"/>
        <to usec="0" sec="1292130820"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.141.131.92" src_port="53"/>
            <filter dst_ip="133.141.131.92" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130046"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="213.240.196.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130019"/>
        <to usec="0" sec="1292130865"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.68.6.17" src_port="53"/>
            <filter dst_ip="212.68.6.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130046"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.46.172.203" src_port="53"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130046"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="131.19.90.64"/>
        </slice>
        <from usec="0" sec="1292130000"/>
        <to usec="0" sec="1292130046"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="131.19.208.254"/>
        </slice>
        <from usec="0" sec="1292130405"/>
        <to usec="0" sec="1292130451"/>
    </anomaly>
    <anomaly type="notice" value="0.731570,1.347950,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="131.19.113.253" dst_ip="165.232.150.242" dst_port="53"/>
            <filter src_ip="131.19.234.179" dst_ip="165.232.150.242" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130001"/>
        <to usec="0" sec="1292130737"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="41.4.67.201" src_port="6300"/>
        </slice>
        <from usec="0" sec="1292130405"/>
        <to usec="0" sec="1292130451"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.68.1.105" src_port="27745"/>
        </slice>
        <from usec="0" sec="1292130405"/>
        <to usec="0" sec="1292130451"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.68.25.48" src_port="23593"/>
        </slice>
        <from usec="0" sec="1292130405"/>
        <to usec="0" sec="1292130586"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,010,0 0 0 0 0 0 1 0 0 0 0 0,dntscSYN">
        <slice>
            <filter src_port="25" dst_port="25"/>
        </slice>
        <from usec="0" sec="1292130540"/>
        <to usec="0" sec="1292130586"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="4162" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1292130585"/>
        <to usec="0" sec="1292130631"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1292130585"/>
        <to usec="0" sec="1292130631"/>
    </anomaly>
    <anomaly type="notice" value="0.840995,1.366680,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.73.82.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1292130630"/>
        <to usec="0" sec="1292130676"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.11.40.197"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.17.38.103"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.17.17.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.240.194.166" dst_ip="128.189.117.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130185"/>
        <to usec="0" sec="1292130862"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.222.53.132" dst_ip="173.46.209.166" src_port="80" dst_port="51669"/>
            <filter src_ip="216.222.53.132" dst_ip="173.46.209.166" src_port="80" dst_port="51668"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.546134,1.219180,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.240.197.23" dst_ip="39.135.56.102" src_port="80"/>
            <filter src_ip="213.240.197.23" dst_ip="34.227.161.186" src_port="80"/>
        </slice>
        <from usec="0" sec="1292130594"/>
        <to usec="0" sec="1292130598"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="213.240.207.180"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="3.176.77.220"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="213.240.193.144" dst_ip="162.115.114.123" src_port="80" dst_port="36389"/>
            <filter src_ip="213.240.197.21" dst_ip="162.115.114.123" src_port="80" dst_port="43126"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.0.220.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,999,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="173.46.19.135" dst_port="10991"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.46.19.68" src_port="80"/>
            <filter dst_ip="173.46.19.68" dst_port="61936"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,999,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="197.34.132.212" dst_ip="173.46.18.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,503,1 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.46.18.222" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,503,1 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="3.176.153.41" dst_ip="173.46.70.166" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.68.25.48" dst_port="23593"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.46.210.197" dst_ip="163.150.206.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130113"/>
        <to usec="0" sec="1292130798"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.156.51.173"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="194.65.65.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.17.129.75" dst_ip="192.156.51.154" src_port="80"/>
            <filter src_ip="133.17.129.75" dst_ip="8.49.206.183" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.768419,1.243900,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="131.19.62.146" dst_ip="13.30.220.165" src_port="63941" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.862369,1.337750,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="24.43.111.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.380378,1.255430,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="131.19.62.36" dst_ip="212.72.166.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1292130375"/>
        <to usec="0" sec="1292130378"/>
    </anomaly>
</admd:annotation>
