<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.203.177.23" dst_ip="32.176.129.51" src_port="80" dst_port="38552" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858024"/>
        <to usec="0" sec="1293858026"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="168.203.147.134"/>
        </slice>
        <from usec="0" sec="1293858279"/>
        <to usec="0" sec="1293858402"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.224.32.180"/>
        </slice>
        <from usec="0" sec="1293858846"/>
        <to usec="0" sec="1293858849"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.216.168"/>
        </slice>
        <from usec="0" sec="1293858009"/>
        <to usec="0" sec="1293858019"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.203.147.180" dst_ip="208.16.146.210" src_port="2130" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858790"/>
        <to usec="0" sec="1293858794"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="132.170.30.191"/>
        </slice>
        <from usec="0" sec="1293858323"/>
        <to usec="0" sec="1293858398"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.203.146.53" dst_ip="166.1.135.144" src_port="2224" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858199"/>
        <to usec="0" sec="1293858811"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.170.164.97" dst_ip="0.69.60.8" src_port="3389" dst_port="2470" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858224"/>
        <to usec="0" sec="1293858227"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.147.195"/>
        </slice>
        <from usec="0" sec="1293858009"/>
        <to usec="0" sec="1293858898"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.114.169.90" dst_ip="208.16.98.121" src_port="23518" dst_port="110" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858313"/>
        <to usec="0" sec="1293858608"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.203.144.157" dst_ip="42.60.250.151" src_port="54522" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858498"/>
        <to usec="0" sec="1293858815"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.221.171.160" dst_ip="128.169.20.109" src_port="4500" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858202"/>
        <to usec="0" sec="1293858222"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.112.122.14" dst_ip="168.203.144.144" src_port="1935" dst_port="60042" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858197"/>
        <to usec="0" sec="1293858319"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.114.183.62" dst_ip="119.180.210.20" src_port="49736" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858498"/>
        <to usec="0" sec="1293858803"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.203.147.19" dst_ip="206.111.5.21" src_port="2071" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858394"/>
        <to usec="0" sec="1293858402"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.169.6.167"/>
        </slice>
        <from usec="0" sec="1293858321"/>
        <to usec="0" sec="1293858324"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.180.248.195" dst_ip="206.111.5.216" src_port="4630" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858226"/>
        <to usec="0" sec="1293858228"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="132.170.217.201"/>
        </slice>
        <from usec="0" sec="1293858801"/>
        <to usec="0" sec="1293858889"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.31.125.108" dst_ip="217.217.93.72" src_port="54619" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858683"/>
        <to usec="0" sec="1293858750"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.71.143.148" dst_ip="18.40.70.159" src_port="2247" dst_port="15536" proto="udp"/>
        </slice>
        <from usec="0" sec="1293858211"/>
        <to usec="0" sec="1293858326"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.32.5"/>
        </slice>
        <from usec="0" sec="1293858496"/>
        <to usec="0" sec="1293858840"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="168.203.144.157" src_port="1935"/>
            <filter dst_ip="168.203.144.157" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858197"/>
        <to usec="0" sec="1293858324"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="218.117.39.64" dst_port="25"/>
            <filter dst_ip="128.169.6.12" dst_port="25"/>
        </slice>
        <from usec="0" sec="1293858522"/>
        <to usec="0" sec="1293858896"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="209.114.173.179" dst_ip="209.114.173.179" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858016"/>
        <to usec="0" sec="1293858896"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="26.234.168.183"/>
        </slice>
        <from usec="0" sec="1293858212"/>
        <to usec="0" sec="1293858214"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.111.5.225"/>
        </slice>
        <from usec="0" sec="1293858373"/>
        <to usec="0" sec="1293858376"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.68.14.134"/>
        </slice>
        <from usec="0" sec="1293858342"/>
        <to usec="0" sec="1293858346"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.169.186.80"/>
        </slice>
        <from usec="0" sec="1293858161"/>
        <to usec="0" sec="1293858164"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="24.27.154.169"/>
        </slice>
        <from usec="0" sec="1293858497"/>
        <to usec="0" sec="1293858503"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="168.203.32.0" dst_ip="168.203.32.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858496"/>
        <to usec="0" sec="1293858840"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="168.203.32.73" dst_ip="168.203.32.73" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858205"/>
        <to usec="0" sec="1293858889"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="51.67.64.121" dst_port="445"/>
        </slice>
        <from usec="0" sec="1293858732"/>
        <to usec="0" sec="1293858750"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="213.147.3.86"/>
        </slice>
        <from usec="0" sec="1293858536"/>
        <to usec="0" sec="1293858540"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.224.252.143"/>
        </slice>
        <from usec="0" sec="1293858078"/>
        <to usec="0" sec="1293858081"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="25.72.106.98"/>
        </slice>
        <from usec="0" sec="1293858731"/>
        <to usec="0" sec="1293858734"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="218.70.47.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858020"/>
        <to usec="0" sec="1293858745"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="189.152.38.31"/>
        </slice>
        <from usec="0" sec="1293858394"/>
        <to usec="0" sec="1293858398"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="132.170.30.250"/>
        </slice>
        <from usec="0" sec="1293858719"/>
        <to usec="0" sec="1293858722"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.0.165.37"/>
        </slice>
        <from usec="0" sec="1293858569"/>
        <to usec="0" sec="1293858573"/>
    </anomaly>
    <anomaly type="notice" value="0.507636,1.250910,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.148.93.114"/>
        </slice>
        <from usec="0" sec="1293858461"/>
        <to usec="0" sec="1293858465"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,901,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="168.203.144.218" dst_ip="140.88.107.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858498"/>
        <to usec="0" sec="1293858526"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="11.216.72.77" dst_ip="168.203.147.195" src_port="80" dst_port="1734"/>
            <filter src_ip="11.216.72.77" dst_ip="168.203.147.195" src_port="80" dst_port="1733"/>
        </slice>
        <from usec="0" sec="1293858895"/>
        <to usec="0" sec="1293858898"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.157.16.6" dst_ip="168.203.104.210" src_port="57229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858509"/>
        <to usec="0" sec="1293858513"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.203.147.27" dst_ip="215.32.209.61" src_port="1521" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858230"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.46.219.13" dst_ip="206.111.5.44" src_port="3485" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858733"/>
        <to usec="0" sec="1293858736"/>
    </anomaly>
    <anomaly type="notice" value="0.770772,1.297260,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="209.114.173.179" dst_ip="209.114.173.179" proto="tcp"/>
        </slice>
        <from usec="0" sec="1293858443"/>
        <to usec="0" sec="1293858884"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="128.169.6.12" src_port="25"/>
            <filter src_ip="128.169.6.12" dst_port="25"/>
        </slice>
        <from usec="0" sec="1293858231"/>
        <to usec="0" sec="1293858866"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="191.76.111.174" dst_port="445"/>
            <filter src_ip="191.76.111.174" dst_port="139"/>
        </slice>
        <from usec="0" sec="1293858801"/>
        <to usec="0" sec="1293858847"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.52.209.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1293858020"/>
        <to usec="0" sec="1293858030"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="17.110.168.182" dst_port="139"/>
        </slice>
        <from usec="0" sec="1293858673"/>
        <to usec="0" sec="1293858881"/>
    </anomaly>
    <anomaly type="notice" value="0.815583,1.290810,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="16.148.106.135"/>
        </slice>
        <from usec="0" sec="1293858514"/>
        <to usec="0" sec="1293858558"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="11.226.223.185"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858377"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.227.55.88"/>
        </slice>
        <from usec="0" sec="1293858008"/>
        <to usec="0" sec="1293858368"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.176.139.7"/>
        </slice>
        <from usec="0" sec="1293858121"/>
        <to usec="0" sec="1293858378"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="134.222.0.184"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858468"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="0.229.66.250"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858466"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="168.203.1.90"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858465"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.31.103.216"/>
        </slice>
        <from usec="0" sec="1293858001"/>
        <to usec="0" sec="1293858468"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.31.125.231"/>
        </slice>
        <from usec="0" sec="1293858001"/>
        <to usec="0" sec="1293858467"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="164.226.248.162"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858468"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.170.1.108"/>
        </slice>
        <from usec="0" sec="1293858006"/>
        <to usec="0" sec="1293858465"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.84.81.167"/>
        </slice>
        <from usec="0" sec="1293858006"/>
        <to usec="0" sec="1293858466"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="24.213.6.60"/>
        </slice>
        <from usec="0" sec="1293858008"/>
        <to usec="0" sec="1293858443"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.16.171.69"/>
        </slice>
        <from usec="0" sec="1293858013"/>
        <to usec="0" sec="1293858460"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="222.80.12.11"/>
        </slice>
        <from usec="0" sec="1293858224"/>
        <to usec="0" sec="1293858423"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="182.50.32.243"/>
        </slice>
        <from usec="0" sec="1293858292"/>
        <to usec="0" sec="1293858372"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.84.81.168"/>
        </slice>
        <from usec="0" sec="1293858308"/>
        <to usec="0" sec="1293858360"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.206.179.58"/>
        </slice>
        <from usec="0" sec="1293858422"/>
        <to usec="0" sec="1293858480"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.114.162.130"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858558"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.114.163.13"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858558"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="170.194.11.32"/>
        </slice>
        <from usec="0" sec="1293858003"/>
        <to usec="0" sec="1293858555"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.194.3.117"/>
        </slice>
        <from usec="0" sec="1293858004"/>
        <to usec="0" sec="1293858547"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.31.97.128"/>
        </slice>
        <from usec="0" sec="1293858009"/>
        <to usec="0" sec="1293858523"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="37.233.129.18"/>
        </slice>
        <from usec="0" sec="1293858024"/>
        <to usec="0" sec="1293858434"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.84.81.161"/>
        </slice>
        <from usec="0" sec="1293858038"/>
        <to usec="0" sec="1293858556"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.176.129.51"/>
        </slice>
        <from usec="0" sec="1293858345"/>
        <to usec="0" sec="1293858416"/>
    </anomaly>
    <anomaly type="notice" value="0.625064,1.242680,011,1 0 0 1 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="96.72.3.36" src_port="135" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1293858437"/>
        <to usec="0" sec="1293858442"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.158.126.104"/>
        </slice>
        <from usec="0" sec="1293858474"/>
        <to usec="0" sec="1293858481"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="43.60.65.187"/>
        </slice>
        <from usec="0" sec="1293858534"/>
        <to usec="0" sec="1293858554"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.10"/>
        </slice>
        <from usec="0" sec="1293858001"/>
        <to usec="0" sec="1293858646"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.180.82.52"/>
        </slice>
        <from usec="0" sec="1293858203"/>
        <to usec="0" sec="1293858543"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.143.224.35"/>
        </slice>
        <from usec="0" sec="1293858425"/>
        <to usec="0" sec="1293858540"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="19.224.4.75"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858828"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.234.112.174"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858826"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="97.194.50.94"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858828"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="132.170.201.37"/>
        </slice>
        <from usec="0" sec="1293858002"/>
        <to usec="0" sec="1293858814"/>
    </anomaly>
    <anomaly type="notice" value="0.625064,1.242680,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="209.114.160.26" dst_port="443"/>
            <filter src_ip="209.114.160.26" dst_port="80"/>
            <filter dst_ip="161.227.55.21" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858010"/>
        <to usec="0" sec="1293858879"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.167.79.96"/>
        </slice>
        <from usec="0" sec="1293858433"/>
        <to usec="0" sec="1293858805"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="209.114.162.89" dst_ip="45.51.67.35" dst_port="80"/>
            <filter src_ip="168.203.32.64" dst_ip="45.51.67.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858060"/>
        <to usec="0" sec="1293858368"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.170.145.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.170.96.126" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.169.6.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.685659,1.264420,999,0 0 0 1 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.138.113.215" dst_ip="42.232.147.27" src_port="53"/>
        </slice>
        <from usec="0" sec="1293858000"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="56.21.146.91" src_port="5060"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.203.0.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858775"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.203.1.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="106.186.122.62" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.42.240.127" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.32.64" dst_port="80"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858531"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.136.64.67" src_port="12200" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858136"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.114.168.97" src_port="23269"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="128.12.110.12"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="128.12.110.14"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="218.239.201.36"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.170.68.64" src_port="53"/>
            <filter src_ip="132.170.68.64" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.685659,1.264420,503,0 0 0 1 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="132.170.218.126" dst_ip="34.187.241.135" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858007"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.114.165.162"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.170.145.56" src_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.685659,1.264420,503,0 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.168.96" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858363"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,999,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.31.96.73" dst_port="53"/>
            <filter dst_ip="208.31.96.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858043"/>
        <to usec="0" sec="1293858691"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.169.6.75" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="56.21.146.91" src_port="5060"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="96.121.119.151" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="29.72.228.56" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.169.6.8" src_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="23.160.219.44" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="189.152.10.123" src_port="22"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="128.169.193.223" src_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="37.112.123.88" src_port="6005"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="23.245.125.84" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.685659,1.264420,503,0 0 0 1 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="208.31.96.192" dst_ip="11.32.93.79" src_port="80"/>
            <filter src_ip="208.31.96.192" dst_ip="197.217.4.182" src_port="80"/>
            <filter src_ip="208.31.96.192" dst_ip="11.133.79.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858383"/>
        <to usec="0" sec="1293858550"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.194.161.169" src_port="53"/>
            <filter dst_ip="170.194.161.169" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858784"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="28.136.64.67" src_port="12200" dst_port="8085"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858451"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="106.186.122.62" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858405"/>
        <to usec="0" sec="1293858496"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="210.132.200.212" dst_port="445"/>
        </slice>
        <from usec="0" sec="1293858450"/>
        <to usec="0" sec="1293858496"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="132.170.164.84" src_port="58276"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="58.38.83.208"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="56.21.146.91" src_port="5060"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="106.186.122.62" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.42.240.127" src_port="80"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.638909,1.265920,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.194.161.168" dst_port="53"/>
        </slice>
        <from usec="0" sec="1293858090"/>
        <to usec="0" sec="1293858830"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858631"/>
    </anomaly>
    <anomaly type="notice" value="0.580618,1.272510,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="16.86.214.222" src_port="12241"/>
        </slice>
        <from usec="0" sec="1293858585"/>
        <to usec="0" sec="1293858676"/>
    </anomaly>
    <anomaly type="notice" value="0.795116,1.241180,999,1 0 0 0 0 0 1 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="132.170.182.149" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="132.170.106.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="128.180.204.115" dst_ip="32.176.129.130" src_port="80"/>
            <filter src_ip="128.180.25.48" dst_ip="32.176.129.130" src_port="53"/>
        </slice>
        <from usec="0" sec="1293858075"/>
        <to usec="0" sec="1293858539"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.169.162.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="159.46.4.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.565348,1.249390,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.203.144.129" dst_ip="42.106.96.54" src_port="8375" dst_port="10258"/>
        </slice>
        <from usec="0" sec="1293858345"/>
        <to usec="0" sec="1293858439"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.114.169.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749081,1.247890,999,0 0 0 0 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.203.32.73"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749081,1.247890,999,0 0 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.32.73"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.694046,1.225860,503,1 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="168.203.147.27" src_port="80"/>
            <filter dst_ip="168.203.147.27" dst_port="60416"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.147.19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.203.147.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.640790,1.232650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="168.203.92.214"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
