<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.161.97.17"/>
        </slice>
        <from usec="0" sec="1296622827"/>
        <to usec="0" sec="1296623421"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.37.82.104" dst_ip="142.21.174.166" src_port="54211" dst_port="61455" proto="udp"/>
        </slice>
        <from usec="0" sec="1296622813"/>
        <to usec="0" sec="1296623151"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.132.173"/>
        </slice>
        <from usec="0" sec="1296623378"/>
        <to usec="0" sec="1296623380"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.37.9.141" dst_ip="218.13.82.16" src_port="80" dst_port="55892" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623359"/>
        <to usec="0" sec="1296623535"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.81.29.114"/>
        </slice>
        <from usec="0" sec="1296623422"/>
        <to usec="0" sec="1296623430"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.165.43.235" dst_ip="12.81.29.156" src_port="80" dst_port="44172" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623478"/>
        <to usec="0" sec="1296623480"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.11.49" dst_ip="4.40.153.170" src_port="55153" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623217"/>
        <to usec="0" sec="1296623219"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="54.105.90.25" dst_ip="171.197.55.124" src_port="80" dst_port="1420" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623473"/>
        <to usec="0" sec="1296623475"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="6.175.152.206" dst_ip="142.21.181.106" src_port="80" dst_port="55326" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622959"/>
        <to usec="0" sec="1296623040"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.214.2" dst_ip="218.13.82.193" src_port="80" dst_port="55557" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623430"/>
        <to usec="0" sec="1296623432"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.34.187.169"/>
        </slice>
        <from usec="0" sec="1296622836"/>
        <to usec="0" sec="1296623351"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.131.157.66" dst_ip="199.107.154.230" src_port="50549" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623376"/>
        <to usec="0" sec="1296623384"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.165.101.48"/>
        </slice>
        <from usec="0" sec="1296622823"/>
        <to usec="0" sec="1296622852"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.5.41.38" dst_ip="12.81.29.105" src_port="80" dst_port="39813" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623450"/>
        <to usec="0" sec="1296623452"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.247.90.126" dst_ip="218.183.143.235" src_port="56334" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623109"/>
        <to usec="0" sec="1296623110"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.187.45.85" dst_ip="199.107.156.167" src_port="51047" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623279"/>
        <to usec="0" sec="1296623281"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.134.118.120"/>
        </slice>
        <from usec="0" sec="1296623395"/>
        <to usec="0" sec="1296623397"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.185.135.40" dst_ip="172.0.219.132" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623289"/>
        <to usec="0" sec="1296623303"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.1.157.65" dst_ip="124.183.4.28" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622814"/>
        <to usec="0" sec="1296623485"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.240.20"/>
        </slice>
        <from usec="0" sec="1296623279"/>
        <to usec="0" sec="1296623304"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.21.10.136" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623452"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.16.202" dst_ip="131.72.26.203" src_port="49241" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623032"/>
        <to usec="0" sec="1296623034"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.1.164.74" dst_ip="5.35.168.5" src_port="51489" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622879"/>
        <to usec="0" sec="1296622881"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.165.53.38" dst_ip="219.201.144.101" src_port="3914" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623438"/>
        <to usec="0" sec="1296623551"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.72.161" dst_ip="5.67.237.53" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622899"/>
        <to usec="0" sec="1296623289"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.55.198" dst_ip="96.133.229.74" src_port="50171" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622826"/>
        <to usec="0" sec="1296623384"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.181.133.160" dst_ip="171.197.210.29" src_port="80" dst_port="3397" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622834"/>
        <to usec="0" sec="1296623494"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.213.111"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296622811"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.146.70" dst_ip="198.49.247.81" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623495"/>
        <to usec="0" sec="1296623532"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.132.78" dst_ip="219.246.171.209" src_port="2144" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622898"/>
        <to usec="0" sec="1296623526"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.33.113.245" dst_ip="198.60.142.212" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623239"/>
        <to usec="0" sec="1296623537"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.58.112" dst_ip="105.18.233.55" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622997"/>
        <to usec="0" sec="1296622999"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.240.52" dst_ip="194.39.137.115" src_port="64782" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622919"/>
        <to usec="0" sec="1296622921"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.18.41"/>
        </slice>
        <from usec="0" sec="1296623512"/>
        <to usec="0" sec="1296623515"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.55.211" dst_ip="38.245.19.17" src_port="1128" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622904"/>
        <to usec="0" sec="1296623116"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.235.215" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622991"/>
        <to usec="0" sec="1296623417"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.130.201.15" dst_ip="171.197.96.162" src_port="80" dst_port="1145" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623560"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.66.221.211" dst_ip="198.60.8.208" src_port="8002" dst_port="1833" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622946"/>
        <to usec="0" sec="1296623427"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.162.139" dst_ip="5.35.171.137" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623447"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.147.86" dst_ip="80.33.242.201" src_port="45100" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622860"/>
        <to usec="0" sec="1296623096"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.9.134"/>
        </slice>
        <from usec="0" sec="1296623147"/>
        <to usec="0" sec="1296623414"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.45.244" dst_ip="198.49.16.127" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622932"/>
        <to usec="0" sec="1296622945"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.1.77.2"/>
        </slice>
        <from usec="0" sec="1296623373"/>
        <to usec="0" sec="1296623470"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.216.74" dst_ip="80.33.242.201" src_port="53974" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623137"/>
        <to usec="0" sec="1296623139"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.206.126"/>
        </slice>
        <from usec="0" sec="1296623312"/>
        <to usec="0" sec="1296623314"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.201.144.198"/>
        </slice>
        <from usec="0" sec="1296623387"/>
        <to usec="0" sec="1296623389"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.73.168.21" dst_ip="142.21.105.169" src_port="52687" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623083"/>
        <to usec="0" sec="1296623115"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.187.45.4" dst_ip="199.107.156.167" src_port="47527" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623155"/>
        <to usec="0" sec="1296623157"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.55.144" dst_ip="131.72.192.146" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622836"/>
        <to usec="0" sec="1296623062"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.55.145" dst_ip="96.133.225.114" src_port="2080" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623430"/>
        <to usec="0" sec="1296623475"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.98.220.109" dst_ip="171.197.220.210" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623073"/>
        <to usec="0" sec="1296623076"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.72.233" dst_ip="192.127.134.178" src_port="49752" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623093"/>
        <to usec="0" sec="1296623234"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.240.102" dst_ip="131.76.56.31" src_port="65169" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623582"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.29.151" dst_ip="128.130.173.68" src_port="61616" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622926"/>
        <to usec="0" sec="1296623188"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.172.74" dst_ip="201.238.62.171" src_port="49852" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623307"/>
        <to usec="0" sec="1296623579"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.172.66" dst_ip="219.186.69.91" src_port="64723" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623541"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.174.197" dst_ip="131.96.85.100" src_port="50679" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623565"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.18.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623294"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.132.218" dst_ip="16.192.87.224" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622953"/>
        <to usec="0" sec="1296623522"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.160.11"/>
        </slice>
        <from usec="0" sec="1296623516"/>
        <to usec="0" sec="1296623518"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.48.0.39" dst_ip="14.35.41.99" src_port="50322" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623319"/>
        <to usec="0" sec="1296623324"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.1.196.171" dst_ip="219.246.170.117" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623521"/>
        <to usec="0" sec="1296623523"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.1.70.170" dst_ip="13.157.21.157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623546"/>
        <to usec="0" sec="1296623548"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.72.25" dst_ip="213.99.52.8" src_port="56091" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623065"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.35.203.125"/>
        </slice>
        <from usec="0" sec="1296623438"/>
        <to usec="0" sec="1296623440"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.210.29" dst_ip="12.181.133.160" src_port="3397" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622831"/>
        <to usec="0" sec="1296623578"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.37.10.147" dst_ip="219.201.144.10" src_port="51433" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622823"/>
        <to usec="0" sec="1296623041"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.246.170.83" dst_ip="142.21.175.51" src_port="80" dst_port="62035" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622810"/>
        <to usec="0" sec="1296623365"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.144.174" dst_ip="201.22.161.132" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623451"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.29.59" dst_ip="218.130.7.102" src_port="65000" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622864"/>
        <to usec="0" sec="1296623372"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.5.243.23" dst_ip="220.96.9.73" src_port="43247" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623017"/>
        <to usec="0" sec="1296623023"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.107.150.198"/>
        </slice>
        <from usec="0" sec="1296622982"/>
        <to usec="0" sec="1296623271"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.201.144.12"/>
        </slice>
        <from usec="0" sec="1296623400"/>
        <to usec="0" sec="1296623402"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.208.51.6"/>
        </slice>
        <from usec="0" sec="1296622890"/>
        <to usec="0" sec="1296622893"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.81.24.240" dst_ip="142.21.10.162" src_port="40444" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623492"/>
        <to usec="0" sec="1296623497"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.165.62.36" dst_ip="219.201.144.98" src_port="58356" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623124"/>
        <to usec="0" sec="1296623139"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.145.69.129" dst_ip="142.21.66.36" src_port="59101" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623531"/>
        <to usec="0" sec="1296623534"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.81.26.41" dst_ip="199.107.140.96" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622931"/>
        <to usec="0" sec="1296623465"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.71.129"/>
        </slice>
        <from usec="0" sec="1296622992"/>
        <to usec="0" sec="1296623072"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.42.90.100"/>
        </slice>
        <from usec="0" sec="1296623624"/>
        <to usec="0" sec="1296623627"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.16.25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623473"/>
        <to usec="0" sec="1296623552"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.35.8.190"/>
        </slice>
        <from usec="0" sec="1296623335"/>
        <to usec="0" sec="1296623351"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.21.72.79"/>
        </slice>
        <from usec="0" sec="1296622817"/>
        <to usec="0" sec="1296623428"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.21.62.36" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622904"/>
        <to usec="0" sec="1296622912"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="13.145.16.99" dst_ip="198.60.19.17" src_port="41842" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623047"/>
        <to usec="0" sec="1296623488"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.49.0.181" dst_ip="198.60.27.177" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623468"/>
        <to usec="0" sec="1296623469"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.21.175.15" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623033"/>
        <to usec="0" sec="1296623183"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="5.35.10.85"/>
        </slice>
        <from usec="0" sec="1296623386"/>
        <to usec="0" sec="1296623397"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="212.86.226.66" dst_ip="142.21.172.52" src_port="80" dst_port="49404" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622938"/>
        <to usec="0" sec="1296622940"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="5.35.10.80"/>
        </slice>
        <from usec="0" sec="1296623268"/>
        <to usec="0" sec="1296623271"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="198.180.41.149" dst_ip="58.85.197.251" proto="icmp"/>
        </slice>
        <from usec="0" sec="1296623355"/>
        <to usec="0" sec="1296623356"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="198.49.0.164" dst_ip="142.21.200.123" src_port="80" dst_port="53894" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622982"/>
        <to usec="0" sec="1296623478"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="5.240.60.228" dst_ip="198.48.33.124" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623120"/>
        <to usec="0" sec="1296623122"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.136.21" dst_ip="65.205.121.137" src_port="50607" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623471"/>
        <to usec="0" sec="1296623581"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="213.106.206.91"/>
        </slice>
        <from usec="0" sec="1296623157"/>
        <to usec="0" sec="1296623168"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="194.171.174.13" dst_ip="194.171.174.13" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622846"/>
        <to usec="0" sec="1296623376"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.246.171.74" dst_ip="142.21.132.78" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623493"/>
        <to usec="0" sec="1296623509"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="171.197.130.71" src_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623225"/>
        <to usec="0" sec="1296623230"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.21.132.10"/>
        </slice>
        <from usec="0" sec="1296623334"/>
        <to usec="0" sec="1296623336"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.48.0.1"/>
        </slice>
        <from usec="0" sec="1296623531"/>
        <to usec="0" sec="1296623534"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="212.86.224.218" dst_ip="171.197.211.224" src_port="80" dst_port="2687"/>
            <filter src_ip="204.249.238.18" dst_ip="171.197.211.224" src_port="80" dst_port="2559"/>
            <filter src_ip="218.130.195.172" dst_ip="171.197.211.224" src_port="80" dst_port="2625"/>
        </slice>
        <from usec="0" sec="1296622973"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.49.0.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623556"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.60.2.210"/>
        </slice>
        <from usec="0" sec="1296623008"/>
        <to usec="0" sec="1296623370"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.39.106.248"/>
        </slice>
        <from usec="0" sec="1296622830"/>
        <to usec="0" sec="1296622832"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.247.72.94" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622872"/>
        <to usec="0" sec="1296623534"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.107.144.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623113"/>
        <to usec="0" sec="1296623361"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.66.50" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623452"/>
        <to usec="0" sec="1296623495"/>
    </anomaly>
    <anomaly type="notice" value="0.697335,1.234520,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.107.144.30" src_port="53"/>
            <filter dst_ip="199.107.144.30" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623521"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.201.144.40"/>
        </slice>
        <from usec="0" sec="1296622945"/>
        <to usec="0" sec="1296622983"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.21.105.169"/>
        </slice>
        <from usec="0" sec="1296622908"/>
        <to usec="0" sec="1296622910"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.84.10" dst_port="80"/>
            <filter src_ip="171.197.0.179" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623578"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.112.208.187" dst_ip="171.197.232.250" src_port="80" dst_port="2782" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296622803"/>
    </anomaly>
    <anomaly type="notice" value="0.711626,1.274200,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.114.33.152" dst_ip="172.1.159.33" src_port="59789" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623349"/>
        <to usec="0" sec="1296623351"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.21.97.138" src_port="52874"/>
        </slice>
        <from usec="0" sec="1296623193"/>
        <to usec="0" sec="1296623555"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.107.150.133" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622821"/>
        <to usec="0" sec="1296622823"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="168.75.97.82" dst_port="80"/>
            <filter dst_ip="198.49.0.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623499"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.247.137.38" dst_ip="142.21.128.181" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623226"/>
        <to usec="0" sec="1296623228"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.60.2.221" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623564"/>
        <to usec="0" sec="1296623573"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.178.50.33"/>
        </slice>
        <from usec="0" sec="1296623572"/>
        <to usec="0" sec="1296623577"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.7.134.178" dst_ip="198.60.27.33" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622893"/>
        <to usec="0" sec="1296622895"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.1.81.59" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623138"/>
        <to usec="0" sec="1296623473"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.21.172.52" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622937"/>
        <to usec="0" sec="1296623035"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.33.67" dst_ip="198.5.247.113" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623227"/>
        <to usec="0" sec="1296623229"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.221.151"/>
        </slice>
        <from usec="0" sec="1296623479"/>
        <to usec="0" sec="1296623482"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.0.38" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623060"/>
        <to usec="0" sec="1296623232"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="199.107.146.132"/>
        </slice>
        <from usec="0" sec="1296623542"/>
        <to usec="0" sec="1296623544"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.29.210"/>
        </slice>
        <from usec="0" sec="1296622886"/>
        <to usec="0" sec="1296623585"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.221.165" dst_ip="198.49.8.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623456"/>
        <to usec="0" sec="1296623475"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.72.65" dst_ip="218.14.35.193" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623078"/>
        <to usec="0" sec="1296623087"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="221.216.155.64"/>
        </slice>
        <from usec="0" sec="1296623515"/>
        <to usec="0" sec="1296623520"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.60.245" dst_ip="21.150.5.112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622929"/>
        <to usec="0" sec="1296622934"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.26.134.75"/>
        </slice>
        <from usec="0" sec="1296623027"/>
        <to usec="0" sec="1296623029"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.163.118"/>
        </slice>
        <from usec="0" sec="1296623515"/>
        <to usec="0" sec="1296623517"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.200.138" dst_ip="198.49.52.180" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623208"/>
        <to usec="0" sec="1296623210"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.247.129.42"/>
        </slice>
        <from usec="0" sec="1296623494"/>
        <to usec="0" sec="1296623497"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.60.2.221" dst_ip="128.19.7.35" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623534"/>
        <to usec="0" sec="1296623564"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.218.8"/>
        </slice>
        <from usec="0" sec="1296623288"/>
        <to usec="0" sec="1296623290"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.172.81"/>
        </slice>
        <from usec="0" sec="1296623038"/>
        <to usec="0" sec="1296623041"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.98.219.105"/>
        </slice>
        <from usec="0" sec="1296623024"/>
        <to usec="0" sec="1296623026"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.192.107"/>
        </slice>
        <from usec="0" sec="1296622839"/>
        <to usec="0" sec="1296622841"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.205.170" dst_ip="198.49.52.164" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622935"/>
        <to usec="0" sec="1296622938"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.59.2.192"/>
        </slice>
        <from usec="0" sec="1296622992"/>
        <to usec="0" sec="1296622994"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="172.247.2.150"/>
        </slice>
        <from usec="0" sec="1296623216"/>
        <to usec="0" sec="1296623289"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.192.70.5" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623250"/>
        <to usec="0" sec="1296623421"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.55.124" dst_ip="56.172.144.6" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296622897"/>
        <to usec="0" sec="1296623489"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.216.19" dst_ip="204.249.43.172" src_port="4334" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623478"/>
        <to usec="0" sec="1296623480"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.34.31"/>
        </slice>
        <from usec="0" sec="1296623332"/>
        <to usec="0" sec="1296623334"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.186.20.226"/>
        </slice>
        <from usec="0" sec="1296622900"/>
        <to usec="0" sec="1296622903"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.225.6" dst_port="80"/>
            <filter src_ip="198.48.37.65" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622852"/>
        <to usec="0" sec="1296623580"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.203.176" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1296623442"/>
        <to usec="0" sec="1296623444"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.80.222" dst_ip="80.33.242.201"/>
            <filter src_ip="171.197.80.222" dst_port="80"/>
            <filter src_ip="171.197.208.51" dst_ip="80.33.242.201" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623524"/>
        <to usec="0" sec="1296623531"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.249.213.33"/>
        </slice>
        <from usec="0" sec="1296623400"/>
        <to usec="0" sec="1296623402"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.170.132" dst_ip="5.35.239.12" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622813"/>
        <to usec="0" sec="1296623532"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="179.134.181.0"/>
        </slice>
        <from usec="0" sec="1296623534"/>
        <to usec="0" sec="1296623536"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.21.41.13" dst_port="80"/>
            <filter src_ip="171.197.84.162" dst_ip="128.130.33.238" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622825"/>
        <to usec="0" sec="1296623503"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.75.97.160"/>
        </slice>
        <from usec="0" sec="1296622882"/>
        <to usec="0" sec="1296622884"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.141.11" dst_ip="198.49.52.180" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623111"/>
        <to usec="0" sec="1296623124"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.247.129.42"/>
        </slice>
        <from usec="0" sec="1296623497"/>
        <to usec="0" sec="1296623499"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.107.132.21"/>
        </slice>
        <from usec="0" sec="1296623465"/>
        <to usec="0" sec="1296623467"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="214.153.149.40" dst_ip="198.60.18.37" proto="icmp"/>
        </slice>
        <from usec="0" sec="1296622969"/>
        <to usec="0" sec="1296622970"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="142.21.248.162"/>
        </slice>
        <from usec="0" sec="1296623345"/>
        <to usec="0" sec="1296623347"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.246.24" dst_port="80"/>
            <filter dst_ip="163.183.91.109" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622828"/>
        <to usec="0" sec="1296623539"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="199.107.159.156"/>
        </slice>
        <from usec="0" sec="1296622993"/>
        <to usec="0" sec="1296622995"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.74.211"/>
        </slice>
        <from usec="0" sec="1296623292"/>
        <to usec="0" sec="1296623294"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.5.157.182"/>
        </slice>
        <from usec="0" sec="1296622941"/>
        <to usec="0" sec="1296622944"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.60.0.85"/>
        </slice>
        <from usec="0" sec="1296623213"/>
        <to usec="0" sec="1296623258"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.225.4"/>
        </slice>
        <from usec="0" sec="1296623185"/>
        <to usec="0" sec="1296623187"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.200.37"/>
        </slice>
        <from usec="0" sec="1296623256"/>
        <to usec="0" sec="1296623258"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.209.38.49"/>
        </slice>
        <from usec="0" sec="1296622817"/>
        <to usec="0" sec="1296622819"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.240.46"/>
        </slice>
        <from usec="0" sec="1296623487"/>
        <to usec="0" sec="1296623489"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.201.145.84"/>
        </slice>
        <from usec="0" sec="1296623305"/>
        <to usec="0" sec="1296623308"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.171.165.160"/>
        </slice>
        <from usec="0" sec="1296623379"/>
        <to usec="0" sec="1296623381"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.0.151"/>
        </slice>
        <from usec="0" sec="1296623152"/>
        <to usec="0" sec="1296623358"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.209.38.160"/>
        </slice>
        <from usec="0" sec="1296622818"/>
        <to usec="0" sec="1296622820"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.200.212"/>
        </slice>
        <from usec="0" sec="1296623436"/>
        <to usec="0" sec="1296623438"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.74.72"/>
        </slice>
        <from usec="0" sec="1296623497"/>
        <to usec="0" sec="1296623499"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="9.25.37.126" dst_port="80"/>
            <filter dst_ip="199.107.157.115" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623021"/>
        <to usec="0" sec="1296623572"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="219.230.16.3"/>
        </slice>
        <from usec="0" sec="1296623570"/>
        <to usec="0" sec="1296623573"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.201.144.167"/>
        </slice>
        <from usec="0" sec="1296622810"/>
        <to usec="0" sec="1296622812"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.175.88"/>
        </slice>
        <from usec="0" sec="1296623570"/>
        <to usec="0" sec="1296623573"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.60.140.110" dst_ip="219.246.171.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623364"/>
        <to usec="0" sec="1296623566"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.222.232" dst_ip="39.139.66.20" src_port="143" dst_port="3699"/>
            <filter src_ip="171.197.222.232" dst_ip="39.139.66.20" src_port="143" dst_port="3698"/>
            <filter src_ip="171.197.222.232" dst_ip="39.139.66.20" src_port="143" dst_port="3689"/>
            <filter src_ip="171.197.222.232" dst_ip="39.139.66.20" src_port="143" dst_port="3685"/>
            <filter src_ip="171.197.222.232" dst_ip="5.35.90.69" src_port="38844" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296623582"/>
        <to usec="0" sec="1296623586"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.219.107" dst_ip="40.160.152.96" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623448"/>
        <to usec="0" sec="1296623472"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.220.209" dst_port="80"/>
            <filter dst_ip="192.79.229.247" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622839"/>
        <to usec="0" sec="1296623602"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.26.180" dst_ip="17.39.35.159" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623531"/>
        <to usec="0" sec="1296623564"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.145.17.226" dst_ip="199.107.148.182" src_port="48259" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623561"/>
        <to usec="0" sec="1296623563"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.16.226" dst_ip="12.179.35.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623304"/>
        <to usec="0" sec="1296623566"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.147.3" dst_ip="14.35.109.37" dst_port="80"/>
            <filter src_ip="142.21.147.3" dst_ip="218.82.163.241" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623376"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.145.17.192" dst_ip="198.48.0.24" src_port="45006" dst_port="80"/>
            <filter src_ip="13.145.17.192" dst_ip="198.48.0.24" src_port="45005" dst_port="80"/>
            <filter src_ip="13.145.17.192" dst_ip="198.48.0.24" src_port="45004" dst_port="80"/>
            <filter src_ip="13.145.17.192" dst_ip="198.48.0.24" src_port="45003" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623419"/>
        <to usec="0" sec="1296623421"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.58.2" dst_ip="219.246.171.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623070"/>
        <to usec="0" sec="1296623173"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.147.8" dst_ip="218.130.214.138" src_port="64730" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623578"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.5.155.99" dst_ip="199.93.109.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623360"/>
        <to usec="0" sec="1296623571"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.9.134" dst_ip="84.26.16.230" src_port="49695" dst_port="80"/>
            <filter src_ip="171.197.9.134" dst_ip="84.26.16.230" src_port="49667" dst_port="80"/>
            <filter src_ip="171.197.9.134" dst_ip="84.26.16.230" src_port="49632" dst_port="80"/>
            <filter src_ip="171.197.9.134" dst_ip="84.26.16.230" src_port="49620" dst_port="80"/>
            <filter src_ip="171.197.9.134" dst_ip="84.26.16.230" src_port="49606" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623268"/>
        <to usec="0" sec="1296623284"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.218.93.137" dst_ip="171.197.96.170" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622818"/>
        <to usec="0" sec="1296623240"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.81.29.33" dst_ip="142.21.10.168" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622840"/>
        <to usec="0" sec="1296623159"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.181.106" dst_ip="6.175.152.206" src_port="55326" dst_port="80"/>
            <filter src_ip="142.21.181.106" dst_ip="6.175.152.206" src_port="55316" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623046"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.210.141" dst_ip="168.75.97.40" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622850"/>
        <to usec="0" sec="1296622993"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.211.224" dst_ip="221.116.20.184" dst_port="80"/>
            <filter src_ip="171.197.211.224" dst_ip="218.130.202.53" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622980"/>
        <to usec="0" sec="1296623574"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.21.205.3" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623281"/>
        <to usec="0" sec="1296623287"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.202.20" dst_ip="5.35.239.116" src_port="2338" dst_port="80"/>
            <filter src_ip="142.21.202.20" dst_ip="5.35.239.116" src_port="2314" dst_port="80"/>
            <filter src_ip="142.21.202.20" dst_ip="219.201.144.69" src_port="2326" dst_port="80"/>
            <filter src_ip="142.21.202.20" dst_ip="219.201.144.42" src_port="2347" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622909"/>
        <to usec="0" sec="1296623345"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="172.5.109.72" dst_ip="219.201.144.12" src_port="50596" dst_port="80"/>
            <filter src_ip="172.5.109.72" dst_ip="219.201.145.93" src_port="50722" dst_port="80"/>
            <filter src_ip="142.21.174.218" dst_ip="219.201.144.12" src_port="51594" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623570"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.217.136" dst_ip="15.46.232.186" src_port="55031" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622859"/>
        <to usec="0" sec="1296623442"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,012,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="198.60.0.81" dst_ip="12.14.153.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622968"/>
        <to usec="0" sec="1296623410"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.165.227.52" dst_ip="212.159.120.16" src_port="43990" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296623448"/>
        <to usec="0" sec="1296623457"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.82.131" dst_ip="172.192.69.80" src_port="61630" dst_port="80"/>
            <filter src_ip="218.13.82.131" dst_ip="172.192.69.80" src_port="53852" dst_port="80"/>
            <filter src_ip="218.13.82.131" dst_ip="172.192.69.80" src_port="47531" dst_port="80"/>
            <filter src_ip="218.13.82.131" dst_ip="172.192.69.80" src_port="38657" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622928"/>
        <to usec="0" sec="1296623515"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.60.28.34" dst_ip="157.166.44.3" src_port="3851" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622858"/>
        <to usec="0" sec="1296623563"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.1.15.76" dst_ip="36.27.163.122" src_port="443" dst_port="1171"/>
        </slice>
        <from usec="0" sec="1296623270"/>
        <to usec="0" sec="1296623276"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.205.182" dst_ip="217.58.204.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296623351"/>
        <to usec="0" sec="1296623417"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.81.29.90" dst_ip="142.21.10.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622982"/>
        <to usec="0" sec="1296623529"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,901,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.216.6" dst_ip="219.186.11.82" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622894"/>
        <to usec="0" sec="1296622908"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.221.5" dst_ip="152.159.183.24" src_port="3420" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622976"/>
        <to usec="0" sec="1296622978"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.21.206.136" dst_ip="204.143.24.82"/>
            <filter src_ip="142.21.206.117" dst_ip="204.143.24.82"/>
            <filter src_ip="142.21.206.117" dst_port="80"/>
            <filter dst_ip="204.143.24.82" dst_port="80"/>
            <filter src_ip="142.21.206.136" dst_ip="194.108.32.17" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623577"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.216.38" dst_ip="8.155.61.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623017"/>
        <to usec="0" sec="1296623023"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.202.209" dst_ip="40.162.2.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623291"/>
        <to usec="0" sec="1296623507"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.5.109.154" dst_ip="219.201.144.47" dst_port="80"/>
            <filter src_ip="172.5.109.154" dst_ip="219.201.144.40" dst_port="80"/>
            <filter src_ip="172.5.109.154" dst_ip="219.201.145.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623058"/>
        <to usec="0" sec="1296623523"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="13.145.69.143" dst_ip="172.192.69.80" src_port="34995" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623157"/>
        <to usec="0" sec="1296623159"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.144.155" dst_ip="12.123.6.3" src_port="1138" dst_port="80"/>
            <filter src_ip="171.197.144.155" dst_ip="12.123.6.3" src_port="1137" dst_port="80"/>
            <filter src_ip="171.197.144.155" dst_ip="157.143.85.91" src_port="1167" dst_port="80"/>
            <filter src_ip="171.197.144.155" dst_ip="202.92.49.185" src_port="1156" dst_port="80"/>
            <filter src_ip="171.197.144.155" dst_ip="132.18.149.154" src_port="137" dst_port="137"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296622868"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="171.197.132.68" dst_port="80"/>
            <filter src_ip="171.197.132.68" dst_ip="179.208.207.179" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623585"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.223.226" dst_ip="219.201.144.12" src_port="55648" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623093"/>
        <to usec="0" sec="1296623284"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.21.74.151" src_port="32657"/>
            <filter src_ip="142.21.74.151" dst_ip="65.167.216.158" dst_port="993"/>
            <filter src_ip="171.197.214.29" dst_ip="65.167.216.158" dst_port="993"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296622872"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.162.16" dst_ip="12.123.7.189" src_port="50548" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623431"/>
        <to usec="0" sec="1296623469"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.81.24.188" dst_ip="142.21.62.153" src_port="62936" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622999"/>
        <to usec="0" sec="1296623002"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.74.171" dst_ip="30.106.240.159" src_port="54758" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623088"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.82.32" dst_ip="142.21.105.217" src_port="53826" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622861"/>
        <to usec="0" sec="1296623315"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.13.82.35" dst_ip="199.107.156.217" src_port="64321" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623093"/>
        <to usec="0" sec="1296623109"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.216.104" dst_ip="128.139.132.31" dst_port="80"/>
            <filter src_ip="171.197.216.104" dst_ip="212.174.80.108" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622976"/>
        <to usec="0" sec="1296623579"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.114.33.152" dst_ip="172.1.159.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623316"/>
        <to usec="0" sec="1296623408"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="105.18.233.42" dst_ip="142.21.10.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622846"/>
        <to usec="0" sec="1296623583"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.107.148.168" dst_ip="5.35.90.69" src_port="63968" dst_port="25"/>
            <filter src_ip="199.107.148.168" dst_ip="5.35.90.69" src_port="63956" dst_port="25"/>
            <filter src_ip="199.107.148.168" dst_ip="5.35.90.69" src_port="63954" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622949"/>
        <to usec="0" sec="1296622980"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.246.171.74" dst_ip="142.21.132.78" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623493"/>
        <to usec="0" sec="1296623517"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.107.159.140" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622933"/>
        <to usec="0" sec="1296623419"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="13.145.18.218" dst_ip="199.107.151.21" dst_port="80"/>
            <filter src_ip="218.13.82.19" dst_ip="199.107.151.21" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622866"/>
        <to usec="0" sec="1296623332"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.220.213" dst_ip="219.246.170.83" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623494"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="198.60.1.103" dst_ip="219.201.144.9" src_port="52323" dst_port="80"/>
            <filter src_ip="172.5.230.37" dst_ip="219.201.144.9" src_port="34095" dst_port="80"/>
            <filter src_ip="142.21.204.19" dst_ip="219.201.144.9" src_port="52219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622811"/>
        <to usec="0" sec="1296622884"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.114.33.152" dst_ip="172.1.159.33" src_port="59789" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623349"/>
        <to usec="0" sec="1296623351"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.72.125" dst_ip="57.26.205.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622991"/>
        <to usec="0" sec="1296623382"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="199.107.156.236" dst_ip="15.176.151.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623569"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.150.240" dst_ip="65.205.121.81" dst_port="443"/>
            <filter src_ip="171.197.150.240" dst_ip="65.205.121.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296623230"/>
        <to usec="0" sec="1296623232"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.208.42" dst_port="80"/>
            <filter dst_ip="219.234.169.132" dst_port="80"/>
            <filter dst_ip="219.234.169.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623168"/>
        <to usec="0" sec="1296623512"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="219.186.20.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622809"/>
        <to usec="0" sec="1296623555"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.9.212" dst_ip="176.104.54.210" dst_port="80"/>
            <filter src_ip="171.197.9.212" dst_ip="219.249.216.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622830"/>
        <to usec="0" sec="1296623335"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.130.71" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623056"/>
        <to usec="0" sec="1296623571"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.197.72.123" dst_ip="5.240.203.208" src_port="8780" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622802"/>
        <to usec="0" sec="1296623648"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.246.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623165"/>
        <to usec="0" sec="1296623489"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.1.15.79" src_port="25"/>
            <filter src_ip="172.1.15.79" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622813"/>
        <to usec="0" sec="1296623294"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.247.91.178" dst_ip="193.125.104.225" dst_port="80"/>
            <filter src_ip="172.247.91.178" dst_ip="15.49.90.204" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623182"/>
        <to usec="0" sec="1296623184"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.205.161" dst_ip="172.130.56.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623080"/>
        <to usec="0" sec="1296623082"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.232.250" dst_ip="170.91.54.208" dst_port="80"/>
            <filter src_ip="171.197.232.250" dst_ip="115.162.24.27" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622905"/>
        <to usec="0" sec="1296623579"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.74.250" dst_ip="216.244.104.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623146"/>
        <to usec="0" sec="1296623512"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.0.227" src_port="19599"/>
            <filter src_ip="198.60.0.227" dst_ip="14.46.154.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623106"/>
        <to usec="0" sec="1296623418"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.244.203" dst_ip="106.161.155.68" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623027"/>
        <to usec="0" sec="1296623221"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.10.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622861"/>
        <to usec="0" sec="1296623574"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="172.5.145.42" dst_ip="219.201.145.104" src_port="63444" dst_port="80"/>
            <filter src_ip="142.21.135.226" dst_ip="219.201.145.104" src_port="53704" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623407"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.29.172" dst_ip="219.242.181.7" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623384"/>
        <to usec="0" sec="1296623387"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="216.81.62.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622866"/>
        <to usec="0" sec="1296623529"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="213.241.174.216" dst_port="445"/>
        </slice>
        <from usec="0" sec="1296623018"/>
        <to usec="0" sec="1296623083"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.174.158" dst_ip="213.150.61.251" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623335"/>
        <to usec="0" sec="1296623403"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="172.1.135.221" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296623137"/>
        <to usec="0" sec="1296623171"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.48.48.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623100"/>
        <to usec="0" sec="1296623387"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="153.153.226.102" dst_port="139"/>
        </slice>
        <from usec="0" sec="1296622864"/>
        <to usec="0" sec="1296622891"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.21.176.112" src_port="8530"/>
            <filter src_ip="142.21.176.112" dst_port="443"/>
            <filter src_ip="142.21.176.112" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622913"/>
        <to usec="0" sec="1296623574"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.21.13.131" dst_ip="171.197.197.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623024"/>
        <to usec="0" sec="1296623050"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.1.14.12" dst_ip="195.144.49.172" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623077"/>
        <to usec="0" sec="1296623282"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.72.89" dst_ip="216.20.232.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623547"/>
        <to usec="0" sec="1296623550"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="96.133.248.51" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623578"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="198.48.48.241" dst_ip="54.94.2.217" dst_port="80"/>
            <filter src_ip="171.197.72.123" dst_ip="54.94.2.217" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622873"/>
        <to usec="0" sec="1296623208"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.107.145.136" dst_ip="179.208.207.174" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623627"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.9.8.121"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623178"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.1.47.72"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296622895"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.161.28.84"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623088"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="171.197.162.113"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296622908"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.225.5" dst_port="80"/>
            <filter src_ip="171.197.225.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623622"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.24.55"/>
        </slice>
        <from usec="0" sec="1296622802"/>
        <to usec="0" sec="1296622906"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.49.0.225"/>
        </slice>
        <from usec="0" sec="1296622806"/>
        <to usec="0" sec="1296622899"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.1.196.193"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623157"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.156.47.177"/>
        </slice>
        <from usec="0" sec="1296622817"/>
        <to usec="0" sec="1296622830"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="12.79.108.84"/>
        </slice>
        <from usec="0" sec="1296622835"/>
        <to usec="0" sec="1296622849"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.21.10.140" dst_ip="41.80.196.166" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622880"/>
        <to usec="0" sec="1296623489"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="193.140.7.56"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296622998"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="27.145.232.169"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296622973"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="15.32.104.145"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296622997"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.2.219"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296622982"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="53.212.154.191"/>
        </slice>
        <from usec="0" sec="1296622803"/>
        <to usec="0" sec="1296622998"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="32.192.64.193"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296622975"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.211.95"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296622987"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.228.107.15" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623570"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.1.64"/>
        </slice>
        <from usec="0" sec="1296622819"/>
        <to usec="0" sec="1296622998"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="56.34.212.85" dst_ip="172.0.186.29" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622824"/>
        <to usec="0" sec="1296622931"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.246.169.182"/>
        </slice>
        <from usec="0" sec="1296622829"/>
        <to usec="0" sec="1296622834"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.40.218"/>
        </slice>
        <from usec="0" sec="1296622852"/>
        <to usec="0" sec="1296622980"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="171.197.163.28"/>
        </slice>
        <from usec="0" sec="1296622855"/>
        <to usec="0" sec="1296622931"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.21.174.128"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623178"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="192.18.198.124"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623088"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.174.203" src_port="80"/>
            <filter dst_ip="142.21.174.203" src_port="443"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623088"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="14.35.100.8"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623087"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.114.186.137"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623176"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="5.228.230.32"/>
        </slice>
        <from usec="0" sec="1296622802"/>
        <to usec="0" sec="1296623088"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.48.49.210" src_port="53"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623087"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.29.33"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623068"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.21.217.100"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623084"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.107.154.233"/>
        </slice>
        <from usec="0" sec="1296622827"/>
        <to usec="0" sec="1296623068"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="198.49.82.81"/>
        </slice>
        <from usec="0" sec="1296622832"/>
        <to usec="0" sec="1296622960"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="201.59.2.14"/>
        </slice>
        <from usec="0" sec="1296622873"/>
        <to usec="0" sec="1296622973"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.24.78"/>
        </slice>
        <from usec="0" sec="1296622886"/>
        <to usec="0" sec="1296622984"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.60.141.235" dst_ip="27.254.117.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622950"/>
        <to usec="0" sec="1296623108"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.60.18.37" dst_ip="202.101.134.193"/>
            <filter src_ip="198.60.18.37" dst_ip="24.90.211.173" src_port="49548" dst_port="3903"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623410"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.60.0.167"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623177"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.2"/>
        </slice>
        <from usec="0" sec="1296622802"/>
        <to usec="0" sec="1296623173"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.49.199.205"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623549"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.21.175.130"/>
        </slice>
        <from usec="0" sec="1296622809"/>
        <to usec="0" sec="1296623173"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.97.140" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622827"/>
        <to usec="0" sec="1296623164"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="12.81.29.152" dst_port="53"/>
            <filter src_ip="12.81.29.152" dst_ip="199.107.156.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622832"/>
        <to usec="0" sec="1296623178"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.16.226"/>
        </slice>
        <from usec="0" sec="1296622839"/>
        <to usec="0" sec="1296623158"/>
    </anomaly>
    <anomaly type="notice" value="0.750408,1.202070,503,1 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.128.46" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.69.101.81"/>
        </slice>
        <from usec="0" sec="1296622927"/>
        <to usec="0" sec="1296623031"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.21.246.24"/>
        </slice>
        <from usec="0" sec="1296622962"/>
        <to usec="0" sec="1296623103"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.175.99.131"/>
        </slice>
        <from usec="0" sec="1296623000"/>
        <to usec="0" sec="1296623163"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="217.145.163.232"/>
        </slice>
        <from usec="0" sec="1296623035"/>
        <to usec="0" sec="1296623095"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.132.146.181"/>
        </slice>
        <from usec="0" sec="1296623077"/>
        <to usec="0" sec="1296623172"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.21.181.20"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623244"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="209.247.228.37"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623267"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.247.92.201"/>
        </slice>
        <from usec="0" sec="1296622835"/>
        <to usec="0" sec="1296623355"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.137.90" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.236.136.70"/>
        </slice>
        <from usec="0" sec="1296623004"/>
        <to usec="0" sec="1296623265"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.200.58"/>
        </slice>
        <from usec="0" sec="1296623081"/>
        <to usec="0" sec="1296623266"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="105.171.14.25"/>
        </slice>
        <from usec="0" sec="1296623101"/>
        <to usec="0" sec="1296623130"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.23.7.109"/>
        </slice>
        <from usec="0" sec="1296623131"/>
        <to usec="0" sec="1296623148"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,501,1 1 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.21.21.148" dst_port="21"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623582"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="128.115.84.70"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623358"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="198.48.48.248" dst_ip="219.214.62.213" dst_port="25"/>
            <filter src_ip="198.48.48.248" dst_ip="128.139.42.65" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623358"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="9.200.39.81"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623448"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="56.172.128.168"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623357"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.128.201.182" src_port="53"/>
            <filter src_ip="198.128.201.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623353"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.213.141.85"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623352"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.10"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623623"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.34.125.218"/>
        </slice>
        <from usec="0" sec="1296622802"/>
        <to usec="0" sec="1296623345"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="198.48.48.252"/>
        </slice>
        <from usec="0" sec="1296622806"/>
        <to usec="0" sec="1296623357"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.60.136.42" dst_ip="6.131.165.229" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623416"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="140.230.255.176"/>
        </slice>
        <from usec="0" sec="1296622814"/>
        <to usec="0" sec="1296623358"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.21.217.0"/>
        </slice>
        <from usec="0" sec="1296622815"/>
        <to usec="0" sec="1296623356"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.51.41.166"/>
        </slice>
        <from usec="0" sec="1296622815"/>
        <to usec="0" sec="1296623355"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="171.197.84.217"/>
            <filter dst_ip="171.197.146.227" dst_port="6264"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="201.197.32.72"/>
        </slice>
        <from usec="0" sec="1296622839"/>
        <to usec="0" sec="1296623346"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.21.175.138" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622917"/>
        <to usec="0" sec="1296623571"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.120.147.61"/>
        </slice>
        <from usec="0" sec="1296623082"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.22.51.155"/>
        </slice>
        <from usec="0" sec="1296623113"/>
        <to usec="0" sec="1296623289"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="171.197.216.231"/>
        </slice>
        <from usec="0" sec="1296623221"/>
        <to usec="0" sec="1296623320"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.21.175.152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623307"/>
        <to usec="0" sec="1296623367"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.87.143.36"/>
        </slice>
        <from usec="0" sec="1296623319"/>
        <to usec="0" sec="1296623337"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.135.30.142"/>
        </slice>
        <from usec="0" sec="1296623323"/>
        <to usec="0" sec="1296623339"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="157.152.104.128"/>
        </slice>
        <from usec="0" sec="1296623329"/>
        <to usec="0" sec="1296623357"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.93.203.113"/>
        </slice>
        <from usec="0" sec="1296623348"/>
        <to usec="0" sec="1296623353"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.60.9.12" dst_ip="22.41.24.27" dst_port="80"/>
            <filter src_ip="198.60.9.12" dst_ip="22.41.24.17" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623572"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.183.91.109"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623444"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="171.197.29.168"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623447"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.145.234.186" dst_ip="198.60.1.97" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622854"/>
        <to usec="0" sec="1296622998"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="105.132.38.158"/>
        </slice>
        <from usec="0" sec="1296623470"/>
        <to usec="0" sec="1296623526"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.162.39" dst_port="443"/>
            <filter src_ip="171.197.162.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623585"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.171.165.141"/>
        </slice>
        <from usec="0" sec="1296622813"/>
        <to usec="0" sec="1296623434"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="12.81.29.244"/>
        </slice>
        <from usec="0" sec="1296622821"/>
        <to usec="0" sec="1296623430"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="171.197.221.132"/>
        </slice>
        <from usec="0" sec="1296622929"/>
        <to usec="0" sec="1296623442"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.143.229.201"/>
        </slice>
        <from usec="0" sec="1296623001"/>
        <to usec="0" sec="1296623276"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.21.58.24" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623041"/>
        <to usec="0" sec="1296623556"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.13.82.35"/>
        </slice>
        <from usec="0" sec="1296623091"/>
        <to usec="0" sec="1296623411"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.5.232.93"/>
        </slice>
        <from usec="0" sec="1296623122"/>
        <to usec="0" sec="1296623354"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="31.144.154.21"/>
        </slice>
        <from usec="0" sec="1296623315"/>
        <to usec="0" sec="1296623349"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.161.221.187"/>
        </slice>
        <from usec="0" sec="1296623362"/>
        <to usec="0" sec="1296623364"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.5.202.31"/>
        </slice>
        <from usec="0" sec="1296623407"/>
        <to usec="0" sec="1296623433"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.29.91.145"/>
        </slice>
        <from usec="0" sec="1296623425"/>
        <to usec="0" sec="1296623430"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.72.14.141"/>
        </slice>
        <from usec="0" sec="1296623436"/>
        <to usec="0" sec="1296623611"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.21.175.42" src_port="20129" dst_port="20129"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.60.21.182"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.141.60" dst_port="80"/>
            <filter src_ip="171.197.141.60" dst_port="20480"/>
            <filter dst_ip="65.205.121.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623509"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="214.142.66.118"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623537"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.42.6.113" src_port="80"/>
            <filter dst_ip="198.60.0.67" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623537"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.238.15.63" dst_ip="198.60.141.208" src_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.178.143.178"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623522"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="171.197.84.198" src_port="80"/>
            <filter dst_ip="171.197.84.198" src_port="443"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="171.197.58.118"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623520"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.48.4.91"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623534"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.25.95.30"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623502"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="199.144.170.65"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.215.171.59" src_port="53"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623532"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="39.14.215.49"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623607"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.24.77"/>
        </slice>
        <from usec="0" sec="1296622810"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="171.197.163.118"/>
        </slice>
        <from usec="0" sec="1296622812"/>
        <to usec="0" sec="1296623526"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.24.118"/>
        </slice>
        <from usec="0" sec="1296622822"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.114.14.71"/>
        </slice>
        <from usec="0" sec="1296622823"/>
        <to usec="0" sec="1296623529"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.81.29.43"/>
        </slice>
        <from usec="0" sec="1296622862"/>
        <to usec="0" sec="1296623511"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="133.82.242.160"/>
        </slice>
        <from usec="0" sec="1296622863"/>
        <to usec="0" sec="1296623522"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="171.197.0.151"/>
        </slice>
        <from usec="0" sec="1296623045"/>
        <to usec="0" sec="1296623511"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.130.173.108"/>
        </slice>
        <from usec="0" sec="1296623088"/>
        <to usec="0" sec="1296623507"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,999,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="171.197.96.164" dst_ip="198.49.128.40"/>
            <filter src_ip="171.197.96.164" dst_port="587"/>
            <filter dst_ip="198.49.128.40" dst_port="587"/>
            <filter src_ip="171.197.96.164" dst_ip="198.49.246.81" dst_port="443"/>
            <filter src_ip="171.197.96.164" dst_ip="8.44.82.82" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623304"/>
        <to usec="0" sec="1296623377"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="107.7.52.180"/>
        </slice>
        <from usec="0" sec="1296623314"/>
        <to usec="0" sec="1296623521"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="199.107.152.45"/>
        </slice>
        <from usec="0" sec="1296623315"/>
        <to usec="0" sec="1296623520"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="46.194.176.175"/>
        </slice>
        <from usec="0" sec="1296623344"/>
        <to usec="0" sec="1296623361"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.197.76.54"/>
        </slice>
        <from usec="0" sec="1296623383"/>
        <to usec="0" sec="1296623521"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="30.54.231.162"/>
        </slice>
        <from usec="0" sec="1296623401"/>
        <to usec="0" sec="1296623415"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.217.219.170"/>
        </slice>
        <from usec="0" sec="1296623424"/>
        <to usec="0" sec="1296623534"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.234.6.85"/>
        </slice>
        <from usec="0" sec="1296623485"/>
        <to usec="0" sec="1296623538"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.152.248"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="12.216.169.201"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="106.41.45.1" dst_ip="171.197.170.251" dst_port="80"/>
            <filter src_ip="106.41.45.1" dst_ip="171.197.170.248" dst_port="80"/>
            <filter src_ip="106.41.45.1" dst_ip="171.197.209.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623624"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.60.11.10"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="171.197.170.249"/>
        </slice>
        <from usec="0" sec="1296622803"/>
        <to usec="0" sec="1296623611"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="37.234.141.133"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623605"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.107.159.183" src_port="40447"/>
        </slice>
        <from usec="0" sec="1296622805"/>
        <to usec="0" sec="1296623625"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.197.162.72" dst_ip="6.48.17.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623214"/>
        <to usec="0" sec="1296623450"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="37.20.60.223"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623624"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.21.74.107" dst_port="7471"/>
        </slice>
        <from usec="0" sec="1296622809"/>
        <to usec="0" sec="1296623609"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.32.112.57"/>
        </slice>
        <from usec="0" sec="1296622810"/>
        <to usec="0" sec="1296623611"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="172.1.34.205"/>
        </slice>
        <from usec="0" sec="1296622810"/>
        <to usec="0" sec="1296623625"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="142.21.201.155"/>
        </slice>
        <from usec="0" sec="1296622815"/>
        <to usec="0" sec="1296623610"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="129.105.87.34"/>
        </slice>
        <from usec="0" sec="1296622816"/>
        <to usec="0" sec="1296623609"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="128.114.14.57" dst_port="80"/>
            <filter src_ip="171.197.163.108" dst_ip="195.144.37.85" dst_port="80"/>
            <filter src_ip="171.197.163.108" dst_ip="195.144.37.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622817"/>
        <to usec="0" sec="1296623619"/>
    </anomaly>
    <anomaly type="notice" value="0.751630,1.211770,503,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.21.97.140" dst_port="80"/>
            <filter dst_ip="213.150.61.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623617"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.48.49.142" dst_port="80"/>
            <filter src_ip="198.48.49.142" dst_ip="8.143.229.244" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296623227"/>
        <to usec="0" sec="1296623229"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="89.7.146.212"/>
        </slice>
        <from usec="0" sec="1296623024"/>
        <to usec="0" sec="1296623514"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.60.8.246"/>
        </slice>
        <from usec="0" sec="1296623167"/>
        <to usec="0" sec="1296623623"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="46.108.54.122"/>
        </slice>
        <from usec="0" sec="1296623194"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.134.68.134"/>
        </slice>
        <from usec="0" sec="1296623224"/>
        <to usec="0" sec="1296623587"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.228.230.136"/>
        </slice>
        <from usec="0" sec="1296623225"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="44.247.79.64"/>
        </slice>
        <from usec="0" sec="1296623246"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.1.159.129"/>
        </slice>
        <from usec="0" sec="1296623340"/>
        <to usec="0" sec="1296623523"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.141.4" dst_port="80"/>
            <filter src_ip="198.60.141.4" dst_ip="198.60.141.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623299"/>
        <to usec="0" sec="1296623541"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="6.173.18.31"/>
        </slice>
        <from usec="0" sec="1296623388"/>
        <to usec="0" sec="1296623587"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,504,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="171.197.162.17" dst_ip="218.12.62.157" dst_port="443"/>
            <filter src_ip="172.1.32.223" dst_ip="218.12.62.157" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296623425"/>
        <to usec="0" sec="1296623626"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,504,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.197.224.30" dst_ip="212.214.161.177" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296623432"/>
        <to usec="0" sec="1296623502"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="128.130.173.106"/>
        </slice>
        <from usec="0" sec="1296623453"/>
        <to usec="0" sec="1296623489"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.29.35.19"/>
        </slice>
        <from usec="0" sec="1296623465"/>
        <to usec="0" sec="1296623475"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.131.186.219"/>
        </slice>
        <from usec="0" sec="1296623482"/>
        <to usec="0" sec="1296623493"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="16.134.30.28" dst_port="445"/>
            <filter src_ip="16.134.30.28" dst_port="139"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623628"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="14.34.35.81"/>
        </slice>
        <from usec="0" sec="1296623496"/>
        <to usec="0" sec="1296623570"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.165.34.39"/>
        </slice>
        <from usec="0" sec="1296623515"/>
        <to usec="0" sec="1296623517"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="128.130.138.199"/>
        </slice>
        <from usec="0" sec="1296623526"/>
        <to usec="0" sec="1296623606"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.214.66.137"/>
        </slice>
        <from usec="0" sec="1296623541"/>
        <to usec="0" sec="1296623589"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.68.16.148"/>
        </slice>
        <from usec="0" sec="1296623587"/>
        <to usec="0" sec="1296623602"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.23.127.221"/>
        </slice>
        <from usec="0" sec="1296623592"/>
        <to usec="0" sec="1296623606"/>
    </anomaly>
    <anomaly type="notice" value="0.518034,1.193840,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.130.71" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296622807"/>
        <to usec="0" sec="1296623624"/>
    </anomaly>
    <anomaly type="notice" value="0.762504,1.233340,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.60.18.33" dst_port="6881"/>
            <filter dst_ip="198.60.18.33" dst_port="40515"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623358"/>
    </anomaly>
    <anomaly type="notice" value="0.750408,1.202070,504,1 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.48.33.124" dst_ip="5.240.60.162"/>
            <filter src_ip="198.48.33.124" dst_port="80"/>
            <filter src_ip="198.48.33.124" dst_port="443"/>
            <filter dst_ip="5.240.60.162" dst_port="80"/>
            <filter dst_ip="5.240.60.162" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622808"/>
        <to usec="0" sec="1296623625"/>
    </anomaly>
    <anomaly type="notice" value="0.762504,1.233340,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="199.107.132.18" src_port="62042"/>
            <filter src_ip="199.107.132.18" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1296622800"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.197.118.59" src_port="53"/>
            <filter src_ip="171.197.118.59" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623340"/>
        <to usec="0" sec="1296623386"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.192.69.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.197.118.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.697335,1.234520,010,1 0 0 0 0 0 1 0 0 0 0 0,ntscSYN">
        <slice>
            <filter src_ip="172.1.155.188" dst_port="25"/>
        </slice>
        <from usec="0" sec="1296622947"/>
        <to usec="0" sec="1296623567"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.21.57.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.762504,1.233340,502,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.65.96.89" dst_port="22"/>
        </slice>
        <from usec="0" sec="1296622804"/>
        <to usec="0" sec="1296623536"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.60.136.30"/>
        </slice>
        <from usec="0" sec="1296623520"/>
        <to usec="0" sec="1296623566"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="199.59.105.30"/>
        </slice>
        <from usec="0" sec="1296623520"/>
        <to usec="0" sec="1296623566"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="198.49.202.168"/>
        </slice>
        <from usec="0" sec="1296623610"/>
        <to usec="0" sec="1296623656"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.21.32.65" dst_ip="133.82.251.63"/>
        </slice>
        <from usec="0" sec="1296623610"/>
        <to usec="0" sec="1296623656"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="172.192.68.44"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.197.55.198" dst_port="80"/>
            <filter src_ip="171.197.55.198" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.192.69.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.21.74.75" src_port="8000" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1296623610"/>
        <to usec="0" sec="1296623656"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.1.15.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.21.57.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="107.101.19.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.197.160.143" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,002,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="73.152.109.18" dst_port="137"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="9.134.122.204" src_port="3389"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.437634,1.226500,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.107.156.193" src_port="80"/>
            <filter dst_ip="199.107.156.193" src_port="17788" dst_port="1463"/>
        </slice>
        <from usec="0" sec="1296622939"/>
        <to usec="0" sec="1296622941"/>
    </anomaly>
    <anomaly type="notice" value="0.698650,1.243960,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.1.77.23" dst_ip="204.228.107.15" dst_port="443"/>
        </slice>
        <from usec="0" sec="1296622851"/>
        <to usec="0" sec="1296623219"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="198.60.18.209" dst_ip="107.153.114.220" dst_port="53"/>
        </slice>
        <from usec="0" sec="1296622814"/>
        <to usec="0" sec="1296623620"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="201.56.80.242" dst_ip="199.107.144.30" src_port="53"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="172.5.13.66" dst_ip="218.13.82.220" src_port="80" dst_port="52631"/>
            <filter src_ip="172.5.117.201" dst_ip="218.13.82.220" src_port="80" dst_port="49341"/>
            <filter src_ip="171.197.160.92" dst_ip="218.13.82.220" src_port="80" dst_port="62824"/>
            <filter src_ip="187.165.44.82" dst_ip="218.13.82.220" src_port="80" dst_port="45941"/>
        </slice>
        <from usec="0" sec="1296622812"/>
        <to usec="0" sec="1296622955"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="199.168.76.53"/>
        </slice>
        <from usec="0" sec="1296623295"/>
        <to usec="0" sec="1296623341"/>
    </anomaly>
    <anomaly type="notice" value="0.710335,1.264990,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="198.60.1.126" dst_port="80"/>
        </slice>
        <from usec="0" sec="1296623655"/>
        <to usec="0" sec="1296623701"/>
    </anomaly>
    <anomaly type="notice" value="0.535406,1.225320,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="142.21.174.0" src_port="80"/>
            <filter dst_ip="172.192.70.29" src_port="80"/>
            <filter dst_ip="172.192.70.29" dst_port="12262"/>
        </slice>
        <from usec="0" sec="1296622801"/>
        <to usec="0" sec="1296623442"/>
    </anomaly>
</admd:annotation>
