<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="anomalous" value="1.595470,1.357980,999,1 0 0 1 1 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="168.203.32.73"/>
            <filter src_ip="209.114.168.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.840470,1.547160,503,1 1 0 1 1 1 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.114.169.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.754920,1.517750,503,1 1 1 0 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="99.37.172.42" dst_ip="168.203.32.10"/>
            <filter src_ip="99.37.172.42" dst_port="80"/>
            <filter dst_ip="209.114.169.99" dst_port="80"/>
            <filter dst_ip="168.203.32.10" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="4.018810,3.102660,999,1 1 1 1 1 1 1 1 1 1 1 1,ptmp">
        <slice>
            <filter src_ip="209.114.1.69" src_port="58584"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.350270,1.312330,999,1 1 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter src_ip="173.95.10.146" dst_ip="209.114.165.255"/>
            <filter dst_ip="209.114.165.255" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.658440,1.547670,504,1 1 1 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.114.162.130" dst_ip="144.28.150.162" dst_port="443"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858881"/>
    </anomaly>
    <anomaly type="anomalous" value="1.971070,1.555170,503,1 1 0 1 1 1 1 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.169.91" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,999,0 0 0 1 1 1 0 0 0 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.17.234.31" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.509530,1.471390,999,1 1 1 1 0 0 1 0 0 1 0 0,ipv46tun">
        <slice>
            <filter src_ip="218.239.201.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.451470,1.318900,999,1 1 0 1 0 0 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="168.203.32.74"/>
            <filter dst_ip="209.114.168.106"/>
            <filter dst_ip="209.114.168.106"/>
            <filter src_ip="209.114.168.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.978360,1.552530,999,1 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="168.203.32.74"/>
            <filter dst_ip="209.114.168.96"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.303050,2.855290,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.31.103.165" src_port="27745"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858676"/>
    </anomaly>
    <anomaly type="anomalous" value="3.303050,2.855290,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.42.240.127" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858496"/>
    </anomaly>
    <anomaly type="anomalous" value="1.318010,1.300780,503,0 0 0 1 1 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="132.170.69.51" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.200130,1.710060,503,1 1 1 1 1 1 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.114.169.96" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.181070,2.375980,010,1 1 1 1 1 1 1 1 0 1 1 1,ntscSYNt">
        <slice>
            <filter src_ip="96.72.3.36" src_port="6000" dst_port="135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.524440,1.350200,503,0 0 0 1 1 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="159.46.137.5" dst_ip="207.157.16.168" src_port="80"/>
            <filter src_ip="168.203.91.224" dst_ip="207.157.16.168" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,503,0 0 0 1 1 1 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="128.169.165.49" dst_ip="33.143.175.148" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="128.169.6.107" src_port="80"/>
            <filter src_ip="128.169.6.106" dst_ip="119.161.132.52" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.318010,1.300780,999,0 0 0 1 1 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="168.203.144.129" src_port="8375"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,999,0 0 0 1 1 1 0 0 0 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.31.96.197" dst_port="40515"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.350270,1.312330,503,1 1 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="209.114.173.179" dst_port="80"/>
            <filter dst_ip="209.114.173.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="159.46.237.79" dst_ip="40.84.81.151" src_port="80" dst_port="58997"/>
            <filter src_ip="133.71.38.158" dst_ip="40.84.81.151" src_port="80" dst_port="38953"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.960310,1.557900,999,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="159.46.232.166" dst_ip="207.157.16.84"/>
            <filter src_ip="159.46.232.166" src_port="21"/>
            <filter dst_ip="207.157.16.84" src_port="80"/>
            <filter dst_ip="207.157.16.84" src_port="21"/>
            <filter src_ip="159.46.232.166" dst_ip="32.176.133.188" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.386240,1.499180,020,1 1 1 0 0 0 1 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="209.179.4.12"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858573"/>
    </anomaly>
    <anomaly type="suspicious" value="0.874768,1.232890,999,1 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.114.163.8" src_port="53"/>
            <filter dst_ip="209.114.163.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.111960,1.261430,503,1 1 0 0 0 0 0 0 0 1 1 0,malphfl">
        <slice>
            <filter src_ip="58.55.89.29" dst_ip="168.203.146.225" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.942964,1.266550,999,1 1 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="132.170.44.195" dst_port="10477"/>
            <filter dst_ip="132.170.44.195" dst_port="17525"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.339760,1.374600,999,1 1 0 1 1 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.32.64"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858784"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.1.141.68" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1293858197"/>
        <to usec="0" sec="1293858234"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,503,1 1 1 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="33.143.242.160" dst_ip="209.114.163.88" src_port="46624" dst_port="80"/>
            <filter src_ip="33.143.242.160" dst_ip="209.114.163.88" src_port="45840" dst_port="80"/>
            <filter src_ip="45.19.70.40" dst_ip="209.114.163.88" src_port="64701" dst_port="80"/>
            <filter src_ip="45.19.70.40" dst_ip="209.114.163.88" src_port="60862" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858032"/>
        <to usec="0" sec="1293858048"/>
    </anomaly>
    <anomaly type="suspicious" value="1.433420,1.492320,999,1 1 1 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="209.114.164.88" src_port="53"/>
            <filter src_ip="209.114.164.88" dst_port="53"/>
            <filter dst_ip="209.114.164.88" src_port="53"/>
            <filter dst_ip="209.114.164.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858877"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="18.213.55.23" dst_port="25"/>
        </slice>
        <from usec="0" sec="1293858033"/>
        <to usec="0" sec="1293858511"/>
    </anomaly>
    <anomaly type="suspicious" value="1.386240,1.499180,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="42.221.72.160" src_port="5061" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1293858562"/>
        <to usec="0" sec="1293858885"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.117.19.142" src_port="6000" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1293858811"/>
        <to usec="0" sec="1293858813"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.80.165.192" dst_port="135"/>
        </slice>
        <from usec="0" sec="1293858317"/>
        <to usec="0" sec="1293858329"/>
    </anomaly>
    <anomaly type="suspicious" value="1.330850,1.486520,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.132.165.246" src_port="8888" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1293858063"/>
        <to usec="0" sec="1293858066"/>
    </anomaly>
    <anomaly type="suspicious" value="1.112190,1.322990,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.21.82" src_port="44304"/>
            <filter src_ip="168.203.21.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858006"/>
        <to usec="0" sec="1293858526"/>
    </anomaly>
    <anomaly type="suspicious" value="0.893413,1.282840,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.114.168.97" src_port="2391"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858648"/>
    </anomaly>
    <anomaly type="suspicious" value="1.079760,1.329290,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="197.97.72.31" dst_ip="132.170.93.141" src_port="48058" dst_port="80"/>
            <filter src_ip="208.197.70.38" dst_ip="132.170.93.141" src_port="39288" dst_port="80"/>
            <filter src_ip="208.197.70.42" dst_ip="132.170.93.141" src_port="40434" dst_port="80"/>
            <filter src_ip="134.222.2.128" dst_ip="132.170.93.141" src_port="46410" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858008"/>
        <to usec="0" sec="1293858345"/>
    </anomaly>
    <anomaly type="suspicious" value="0.903153,1.305370,999,1 1 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.31.189.162" dst_port="53"/>
            <filter dst_ip="208.31.189.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858879"/>
    </anomaly>
    <anomaly type="suspicious" value="1.433420,1.492320,999,1 1 1 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.114.163.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858023"/>
        <to usec="0" sec="1293858898"/>
    </anomaly>
    <anomaly type="suspicious" value="0.874768,1.232890,999,1 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="208.31.96.192"/>
            <filter dst_ip="209.114.162.89"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943875,1.219010,999,0 0 0 1 0 0 0 0 0 1 1 0,ptmp">
        <slice>
            <filter src_ip="132.170.44.195" src_port="10477"/>
            <filter src_ip="132.170.44.195" src_port="17525"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.215600,1.271610,503,0 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.173.179" src_port="80"/>
            <filter src_ip="209.114.173.179" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.910482,1.220570,503,1 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="96.223.236.160" dst_ip="208.31.185.102" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.215600,1.271610,503,0 0 0 1 0 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="132.170.92.80" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.147340,1.343430,999,0 0 0 1 1 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.32.64"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858823"/>
    </anomaly>
    <anomaly type="suspicious" value="0.943875,1.219010,503,0 0 0 1 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="214.157.74.7" dst_ip="209.114.183.62" src_port="80"/>
            <filter src_ip="119.180.210.185" dst_ip="209.114.183.62" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="128.180.204.115" src_port="80"/>
            <filter src_ip="133.71.174.55" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="207.157.16.146" src_port="80"/>
            <filter src_ip="132.170.109.67" dst_ip="33.143.240.58" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="45.19.106.201" src_port="80"/>
            <filter src_ip="159.46.236.191" dst_ip="32.176.139.54" src_port="80"/>
            <filter src_ip="209.114.173.178" dst_ip="207.157.16.17" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="128.180.225.171" dst_ip="207.157.16.99"/>
            <filter src_ip="128.180.225.171" src_port="80"/>
            <filter src_ip="159.46.138.142" src_port="80"/>
            <filter src_ip="133.71.129.183" dst_ip="207.157.16.99" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="209.114.173.179" dst_ip="32.176.129.192" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="168.203.148.135" dst_ip="208.16.16.197" dst_port="80"/>
            <filter src_ip="168.203.147.87" dst_ip="37.233.129.203" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.71.0.243" dst_ip="63.166.129.130" src_port="80"/>
            <filter src_ip="133.71.0.243" dst_ip="32.176.133.77" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.180.172.177" dst_ip="207.157.16.111" src_port="80"/>
            <filter src_ip="128.180.172.177" dst_ip="32.176.133.56" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="159.46.237.73" dst_ip="40.84.81.219" src_port="80" dst_port="38933"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="159.46.238.75" dst_ip="207.157.16.68"/>
            <filter src_ip="128.180.40.85" dst_ip="207.157.16.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="208.31.185.102" dst_ip="96.223.236.160" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.251500,1.287860,503,1 0 0 0 0 0 1 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.165.255" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.147.186" dst_port="61936"/>
            <filter src_ip="208.124.209.133" dst_ip="168.203.147.186" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,999,0 0 0 0 0 0 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="168.203.144.129" dst_port="8375"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="33.143.224.186" dst_ip="168.203.104.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="209.114.163.26" dst_ip="207.157.16.174" src_port="80"/>
            <filter src_ip="128.180.228.145" dst_ip="207.157.16.174" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="128.180.29.231" dst_ip="207.157.16.109" src_port="80"/>
            <filter src_ip="128.180.253.157" dst_ip="207.157.16.109" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="159.46.173.139" dst_ip="32.176.139.45" src_port="80" dst_port="58631"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.870569,1.227390,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.169.96" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.159600,1.279650,503,0 0 0 0 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="208.16.16.197" dst_ip="168.203.148.135" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.961194,1.322980,503,0 0 0 0 0 0 1 0 0 0 0 1,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.173.179" src_port="80"/>
            <filter src_ip="209.114.173.179" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
