<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.52.119.80"/>
        </slice>
        <from usec="0" sec="1299128899"/>
        <to usec="0" sec="1299128901"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.175.7.194" dst_ip="62.135.43.110" src_port="49154" dst_port="49234" proto="udp"/>
        </slice>
        <from usec="0" sec="1299128800"/>
        <to usec="0" sec="1299128801"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.0.148.52"/>
        </slice>
        <from usec="0" sec="1299128981"/>
        <to usec="0" sec="1299128982"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.42.101.96" dst_ip="207.10.193.134" src_port="80" dst_port="49603" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299129002"/>
        <to usec="0" sec="1299129004"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="30.197.10.83" dst_ip="164.6.240.68" src_port="80" dst_port="3846" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299128942"/>
        <to usec="0" sec="1299128944"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.52.148.202" dst_ip="218.166.79.12" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299129003"/>
        <to usec="0" sec="1299129005"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.52.119.25"/>
        </slice>
        <from usec="0" sec="1299128814"/>
        <to usec="0" sec="1299128816"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.6.88.133"/>
        </slice>
        <from usec="0" sec="1299128981"/>
        <to usec="0" sec="1299128982"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.6.110.133"/>
        </slice>
        <from usec="0" sec="1299129265"/>
        <to usec="0" sec="1299129267"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="142.0.202.195" dst_ip="218.129.56.60" src_port="1643" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299129256"/>
        <to usec="0" sec="1299129259"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.6.22.39"/>
        </slice>
        <from usec="0" sec="1299129206"/>
        <to usec="0" sec="1299129262"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.52.73.65"/>
        </slice>
        <from usec="0" sec="1299129256"/>
        <to usec="0" sec="1299129259"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="206.175.14.158" dst_ip="206.175.14.158" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299128742"/>
        <to usec="0" sec="1299128901"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.6.53.85" dst_ip="219.187.167.121" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299129206"/>
        <to usec="0" sec="1299129208"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="206.175.15.123" dst_ip="206.175.15.123" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299128905"/>
        <to usec="0" sec="1299129230"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="19.33.236.192" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1299128900"/>
        <to usec="0" sec="1299128907"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.175.12.71"/>
        </slice>
        <from usec="0" sec="1299128406"/>
        <to usec="0" sec="1299128408"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.0.18.157"/>
        </slice>
        <from usec="0" sec="1299128499"/>
        <to usec="0" sec="1299128501"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.22.29.80"/>
        </slice>
        <from usec="0" sec="1299128899"/>
        <to usec="0" sec="1299128901"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.175.8.188"/>
        </slice>
        <from usec="0" sec="1299128499"/>
        <to usec="0" sec="1299128501"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,010,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="206.175.0.73"/>
        </slice>
        <from usec="0" sec="1299129220"/>
        <to usec="0" sec="1299129222"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.36.8.181" dst_port="443"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129210"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="5.169.179.44" dst_ip="206.175.14.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299129206"/>
        <to usec="0" sec="1299129262"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.6.168.234"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128509"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.43.178"/>
        </slice>
        <from usec="0" sec="1299128420"/>
        <to usec="0" sec="1299128437"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.202.230"/>
        </slice>
        <from usec="0" sec="1299128432"/>
        <to usec="0" sec="1299128500"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.202.238"/>
        </slice>
        <from usec="0" sec="1299128480"/>
        <to usec="0" sec="1299128486"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.89.250.109"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299128733"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="63.77.247.169"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299128407"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.178.130.101"/>
        </slice>
        <from usec="0" sec="1299128406"/>
        <to usec="0" sec="1299128595"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="3.125.82.88"/>
        </slice>
        <from usec="0" sec="1299128408"/>
        <to usec="0" sec="1299129227"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.190.4.110"/>
        </slice>
        <from usec="0" sec="1299128423"/>
        <to usec="0" sec="1299128543"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.144.22.109"/>
        </slice>
        <from usec="0" sec="1299128424"/>
        <to usec="0" sec="1299128561"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.57.83"/>
        </slice>
        <from usec="0" sec="1299128463"/>
        <to usec="0" sec="1299128535"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.253.23.106"/>
        </slice>
        <from usec="0" sec="1299129074"/>
        <to usec="0" sec="1299129092"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.48.12"/>
        </slice>
        <from usec="0" sec="1299128543"/>
        <to usec="0" sec="1299128599"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="208.135.134.157"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.236.3"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="3.125.12.6"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129038"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.184.163.80"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128679"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="142.22.24.46"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.780395,1.219870,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.52.176.123" dst_ip="4.145.174.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129267"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="142.139.0.170"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128686"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.52.212.130"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="169.224.129.126"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299128685"/>
    </anomaly>
    <anomaly type="notice" value="0.816618,1.232640,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.175.168.98" src_port="58584"/>
        </slice>
        <from usec="0" sec="1299128558"/>
        <to usec="0" sec="1299129251"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.52.84.91"/>
        </slice>
        <from usec="0" sec="1299128440"/>
        <to usec="0" sec="1299128652"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="78.208.123.26"/>
        </slice>
        <from usec="0" sec="1299128451"/>
        <to usec="0" sec="1299128631"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="12.189.137.121"/>
        </slice>
        <from usec="0" sec="1299128486"/>
        <to usec="0" sec="1299128667"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="207.10.63.156" dst_ip="55.62.209.177" dst_port="53"/>
            <filter src_ip="206.175.3.113" dst_ip="55.62.209.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128503"/>
        <to usec="0" sec="1299128608"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.48.14"/>
        </slice>
        <from usec="0" sec="1299128523"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="57.212.100.18"/>
        </slice>
        <from usec="0" sec="1299128524"/>
        <to usec="0" sec="1299128590"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="208.123.71.154"/>
        </slice>
        <from usec="0" sec="1299128524"/>
        <to usec="0" sec="1299128590"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.198.97.101"/>
        </slice>
        <from usec="0" sec="1299128530"/>
        <to usec="0" sec="1299128544"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="218.129.57.99"/>
        </slice>
        <from usec="0" sec="1299128534"/>
        <to usec="0" sec="1299128689"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.125.45.88"/>
        </slice>
        <from usec="0" sec="1299128546"/>
        <to usec="0" sec="1299128565"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.117.75.153"/>
        </slice>
        <from usec="0" sec="1299128568"/>
        <to usec="0" sec="1299128581"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.116.180.88"/>
        </slice>
        <from usec="0" sec="1299128574"/>
        <to usec="0" sec="1299128577"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.5.32.20"/>
        </slice>
        <from usec="0" sec="1299128602"/>
        <to usec="0" sec="1299128656"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.139.82.119"/>
        </slice>
        <from usec="0" sec="1299128615"/>
        <to usec="0" sec="1299128618"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.205.65"/>
        </slice>
        <from usec="0" sec="1299128638"/>
        <to usec="0" sec="1299128673"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="4.46.66.43" dst_ip="207.2.16.26" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128505"/>
        <to usec="0" sec="1299128510"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="56.75.237.248"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128771"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="164.6.117.217"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="19.85.118.158"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="5.55.164.57"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.65.38.37"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="24.81.111.82"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.48.119.110"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299128736"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.52.152.116"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299128777"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.162.247.131"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="2.240.145.44"/>
        </slice>
        <from usec="0" sec="1299128406"/>
        <to usec="0" sec="1299128774"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="78.176.5.210"/>
        </slice>
        <from usec="0" sec="1299128409"/>
        <to usec="0" sec="1299128728"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="2.240.131.141"/>
        </slice>
        <from usec="0" sec="1299128419"/>
        <to usec="0" sec="1299128761"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="3.125.233.144"/>
        </slice>
        <from usec="0" sec="1299128431"/>
        <to usec="0" sec="1299128776"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="218.129.58.221"/>
        </slice>
        <from usec="0" sec="1299128481"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="206.59.63.0"/>
        </slice>
        <from usec="0" sec="1299128498"/>
        <to usec="0" sec="1299128773"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="73.84.95.146"/>
        </slice>
        <from usec="0" sec="1299128558"/>
        <to usec="0" sec="1299128729"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="55.72.42.158"/>
        </slice>
        <from usec="0" sec="1299128558"/>
        <to usec="0" sec="1299128695"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="220.1.49.97"/>
        </slice>
        <from usec="0" sec="1299128592"/>
        <to usec="0" sec="1299128746"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.25.189.193"/>
        </slice>
        <from usec="0" sec="1299128629"/>
        <to usec="0" sec="1299128757"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="161.40.54.87"/>
        </slice>
        <from usec="0" sec="1299128648"/>
        <to usec="0" sec="1299128658"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.3.218.105"/>
        </slice>
        <from usec="0" sec="1299128650"/>
        <to usec="0" sec="1299128754"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.172.20.198"/>
        </slice>
        <from usec="0" sec="1299128789"/>
        <to usec="0" sec="1299128797"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="63.72.43.128"/>
        </slice>
        <from usec="0" sec="1299128683"/>
        <to usec="0" sec="1299128697"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="78.208.123.27"/>
        </slice>
        <from usec="0" sec="1299128690"/>
        <to usec="0" sec="1299129152"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.48.117.90"/>
        </slice>
        <from usec="0" sec="1299128692"/>
        <to usec="0" sec="1299128695"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="63.147.115.4"/>
        </slice>
        <from usec="0" sec="1299128736"/>
        <to usec="0" sec="1299128779"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="31.43.210.57"/>
        </slice>
        <from usec="0" sec="1299128760"/>
        <to usec="0" sec="1299128775"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.10.57.62" dst_ip="218.187.83.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128426"/>
        <to usec="0" sec="1299129037"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.254.58.215"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299128801"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="2.248.128.24"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299128865"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.156.32.99"/>
        </slice>
        <from usec="0" sec="1299128837"/>
        <to usec="0" sec="1299128849"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.22.10.81"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128958"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="151.215.236.220" src_port="53"/>
            <filter dst_ip="151.215.236.220" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.48.107.225"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.190.4.23"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299128938"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.190.142.102"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="180.29.98.126"/>
        </slice>
        <from usec="0" sec="1299128405"/>
        <to usec="0" sec="1299128958"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.202.4"/>
        </slice>
        <from usec="0" sec="1299128406"/>
        <to usec="0" sec="1299128957"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.184.16.60"/>
        </slice>
        <from usec="0" sec="1299128417"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="3.125.46.216"/>
        </slice>
        <from usec="0" sec="1299128426"/>
        <to usec="0" sec="1299128883"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.48.3.58"/>
        </slice>
        <from usec="0" sec="1299128427"/>
        <to usec="0" sec="1299128934"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="166.224.141.73"/>
        </slice>
        <from usec="0" sec="1299128467"/>
        <to usec="0" sec="1299128958"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="166.224.78.85"/>
        </slice>
        <from usec="0" sec="1299128538"/>
        <to usec="0" sec="1299128915"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="55.160.132.237"/>
        </slice>
        <from usec="0" sec="1299128617"/>
        <to usec="0" sec="1299128816"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.166.76.118"/>
        </slice>
        <from usec="0" sec="1299128657"/>
        <to usec="0" sec="1299128955"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="180.6.28.93"/>
        </slice>
        <from usec="0" sec="1299128661"/>
        <to usec="0" sec="1299128903"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="2.162.68.216"/>
        </slice>
        <from usec="0" sec="1299128714"/>
        <to usec="0" sec="1299128913"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="63.36.96.54"/>
        </slice>
        <from usec="0" sec="1299128736"/>
        <to usec="0" sec="1299128816"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="21.25.148.44"/>
        </slice>
        <from usec="0" sec="1299128760"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="79.215.197.201"/>
        </slice>
        <from usec="0" sec="1299128778"/>
        <to usec="0" sec="1299128889"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="3.126.247.224"/>
        </slice>
        <from usec="0" sec="1299128801"/>
        <to usec="0" sec="1299128863"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="207.3.65.71"/>
        </slice>
        <from usec="0" sec="1299128805"/>
        <to usec="0" sec="1299128828"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.62.125"/>
        </slice>
        <from usec="0" sec="1299128841"/>
        <to usec="0" sec="1299128847"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.3.230.248"/>
        </slice>
        <from usec="0" sec="1299128841"/>
        <to usec="0" sec="1299128949"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="202.18.146.108"/>
        </slice>
        <from usec="0" sec="1299128857"/>
        <to usec="0" sec="1299128937"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="22.98.139.166"/>
        </slice>
        <from usec="0" sec="1299128892"/>
        <to usec="0" sec="1299128932"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.208.64.74"/>
        </slice>
        <from usec="0" sec="1299128894"/>
        <to usec="0" sec="1299128906"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.58.164"/>
        </slice>
        <from usec="0" sec="1299128941"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="1.61.88.225"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129018"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="207.228.9.60"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129047"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,053,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="221.244.153.25"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129049"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.236.40"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129046"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="192.168.42.102"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129048"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.52.64.24"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299129040"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="166.224.52.168"/>
        </slice>
        <from usec="0" sec="1299128405"/>
        <to usec="0" sec="1299129048"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.52.32.200"/>
        </slice>
        <from usec="0" sec="1299128413"/>
        <to usec="0" sec="1299129049"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="66.64.170.228"/>
        </slice>
        <from usec="0" sec="1299128422"/>
        <to usec="0" sec="1299129048"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="2.232.33.118"/>
        </slice>
        <from usec="0" sec="1299128423"/>
        <to usec="0" sec="1299129044"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.52.30.138"/>
        </slice>
        <from usec="0" sec="1299128426"/>
        <to usec="0" sec="1299129020"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="48.80.73.162"/>
        </slice>
        <from usec="0" sec="1299128427"/>
        <to usec="0" sec="1299128888"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="22.112.72.90"/>
        </slice>
        <from usec="0" sec="1299128507"/>
        <to usec="0" sec="1299129039"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.48.40"/>
        </slice>
        <from usec="0" sec="1299128658"/>
        <to usec="0" sec="1299128945"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="218.129.48.11"/>
        </slice>
        <from usec="0" sec="1299128672"/>
        <to usec="0" sec="1299128912"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.64.19"/>
        </slice>
        <from usec="0" sec="1299128862"/>
        <to usec="0" sec="1299129048"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="31.42.10.231"/>
        </slice>
        <from usec="0" sec="1299128867"/>
        <to usec="0" sec="1299128881"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.209.212.98"/>
        </slice>
        <from usec="0" sec="1299128870"/>
        <to usec="0" sec="1299129013"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.37.109.120"/>
        </slice>
        <from usec="0" sec="1299128871"/>
        <to usec="0" sec="1299129037"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.16.108.213"/>
        </slice>
        <from usec="0" sec="1299128887"/>
        <to usec="0" sec="1299128995"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="0.51.245.48"/>
        </slice>
        <from usec="0" sec="1299128892"/>
        <to usec="0" sec="1299129042"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.234.139.202"/>
        </slice>
        <from usec="0" sec="1299128910"/>
        <to usec="0" sec="1299128979"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.128.116.67"/>
        </slice>
        <from usec="0" sec="1299128924"/>
        <to usec="0" sec="1299129018"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.16.103.22"/>
        </slice>
        <from usec="0" sec="1299128963"/>
        <to usec="0" sec="1299128966"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.56.5"/>
        </slice>
        <from usec="0" sec="1299129001"/>
        <to usec="0" sec="1299129032"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.52.33.201"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129127"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.52.194.232" src_port="53" dst_port="49152"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129139"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.139.9.43"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="195.193.191.128" dst_ip="206.175.1.34" src_port="80"/>
            <filter src_ip="195.193.191.214" dst_ip="206.175.1.34" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299129139"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.135.43.111"/>
        </slice>
        <from usec="0" sec="1299128406"/>
        <to usec="0" sec="1299129187"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.190.74.16"/>
        </slice>
        <from usec="0" sec="1299128407"/>
        <to usec="0" sec="1299129134"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.59.63.21"/>
        </slice>
        <from usec="0" sec="1299128585"/>
        <to usec="0" sec="1299129139"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.19.4.199"/>
        </slice>
        <from usec="0" sec="1299128900"/>
        <to usec="0" sec="1299129060"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="76.5.110.200"/>
        </slice>
        <from usec="0" sec="1299128970"/>
        <to usec="0" sec="1299128981"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.65.40.54"/>
        </slice>
        <from usec="0" sec="1299129003"/>
        <to usec="0" sec="1299129084"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="57.69.49.97"/>
        </slice>
        <from usec="0" sec="1299129129"/>
        <to usec="0" sec="1299129139"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="166.224.169.105"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.52.208.173"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.6.9.173"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129228"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="188.71.210.182"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129228"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.62.239"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.139.5.145"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129225"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.144.217.226"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129212"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.205.214"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129225"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="1.48.117.8" dst_ip="206.175.12.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.74.138.165"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129222"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="164.6.9.174"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129228"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.22.3.65"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129188"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="207.3.93.83"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129227"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.184.163.209"/>
        </slice>
        <from usec="0" sec="1299128403"/>
        <to usec="0" sec="1299129212"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.254.58.152" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128404"/>
        <to usec="0" sec="1299129210"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="2.248.128.41"/>
        </slice>
        <from usec="0" sec="1299128405"/>
        <to usec="0" sec="1299129219"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="55.188.70.187"/>
        </slice>
        <from usec="0" sec="1299128408"/>
        <to usec="0" sec="1299129221"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="72.75.144.123"/>
        </slice>
        <from usec="0" sec="1299128408"/>
        <to usec="0" sec="1299129223"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.240.129.100"/>
        </slice>
        <from usec="0" sec="1299128409"/>
        <to usec="0" sec="1299129159"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.6.244.190"/>
        </slice>
        <from usec="0" sec="1299128411"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.22.44.39"/>
        </slice>
        <from usec="0" sec="1299128411"/>
        <to usec="0" sec="1299129227"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="164.6.98.148"/>
        </slice>
        <from usec="0" sec="1299128420"/>
        <to usec="0" sec="1299129203"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.145.60.135"/>
        </slice>
        <from usec="0" sec="1299128428"/>
        <to usec="0" sec="1299129210"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="99.139.4.105"/>
        </slice>
        <from usec="0" sec="1299128445"/>
        <to usec="0" sec="1299129218"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.222.2"/>
        </slice>
        <from usec="0" sec="1299128454"/>
        <to usec="0" sec="1299129198"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.205.144"/>
        </slice>
        <from usec="0" sec="1299128458"/>
        <to usec="0" sec="1299129216"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="203.242.132.73"/>
        </slice>
        <from usec="0" sec="1299128518"/>
        <to usec="0" sec="1299129185"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="62.141.175.4"/>
        </slice>
        <from usec="0" sec="1299128594"/>
        <to usec="0" sec="1299129224"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.139.9.48"/>
        </slice>
        <from usec="0" sec="1299128702"/>
        <to usec="0" sec="1299129138"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="73.0.92.46"/>
        </slice>
        <from usec="0" sec="1299128830"/>
        <to usec="0" sec="1299129195"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="214.187.100.254"/>
        </slice>
        <from usec="0" sec="1299128877"/>
        <to usec="0" sec="1299129076"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.57.109"/>
        </slice>
        <from usec="0" sec="1299128881"/>
        <to usec="0" sec="1299129177"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.166.76.175"/>
        </slice>
        <from usec="0" sec="1299128885"/>
        <to usec="0" sec="1299129078"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="186.158.135.213"/>
        </slice>
        <from usec="0" sec="1299128903"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="0.8.203.35"/>
        </slice>
        <from usec="0" sec="1299128914"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.2.151.54"/>
        </slice>
        <from usec="0" sec="1299128919"/>
        <to usec="0" sec="1299129224"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.55.20.209"/>
        </slice>
        <from usec="0" sec="1299128925"/>
        <to usec="0" sec="1299129221"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="210.6.221.71"/>
        </slice>
        <from usec="0" sec="1299128932"/>
        <to usec="0" sec="1299129131"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.81.207.128"/>
        </slice>
        <from usec="0" sec="1299128934"/>
        <to usec="0" sec="1299129110"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.196.133.165"/>
        </slice>
        <from usec="0" sec="1299128999"/>
        <to usec="0" sec="1299129057"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.115.241.3"/>
        </slice>
        <from usec="0" sec="1299129044"/>
        <to usec="0" sec="1299129050"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.153.160.164"/>
        </slice>
        <from usec="0" sec="1299129050"/>
        <to usec="0" sec="1299129057"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="154.211.209.176"/>
        </slice>
        <from usec="0" sec="1299129072"/>
        <to usec="0" sec="1299129193"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="176.226.156.232"/>
        </slice>
        <from usec="0" sec="1299129093"/>
        <to usec="0" sec="1299129212"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="72.103.18.73"/>
        </slice>
        <from usec="0" sec="1299129097"/>
        <to usec="0" sec="1299129202"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.3.49.127"/>
        </slice>
        <from usec="0" sec="1299129123"/>
        <to usec="0" sec="1299129134"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="79.215.2.234"/>
        </slice>
        <from usec="0" sec="1299129148"/>
        <to usec="0" sec="1299129179"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="29.41.147.243"/>
        </slice>
        <from usec="0" sec="1299129159"/>
        <to usec="0" sec="1299129195"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="12.181.4.10"/>
        </slice>
        <from usec="0" sec="1299129161"/>
        <to usec="0" sec="1299129177"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.198.188.66"/>
        </slice>
        <from usec="0" sec="1299129162"/>
        <to usec="0" sec="1299129172"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.129.49.15"/>
        </slice>
        <from usec="0" sec="1299129173"/>
        <to usec="0" sec="1299129212"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.37.231"/>
        </slice>
        <from usec="0" sec="1299129203"/>
        <to usec="0" sec="1299129207"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="206.175.9.146" dst_ip="208.144.4.24" src_port="80" dst_port="41635"/>
            <filter src_ip="136.52.212.3" dst_ip="208.144.4.24" src_port="123" dst_port="41678"/>
        </slice>
        <from usec="0" sec="1299128848"/>
        <to usec="0" sec="1299128866"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="206.175.6.183" src_port="58228"/>
            <filter src_ip="142.22.166.247" src_port="60290"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129222"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.22.29.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="206.175.9.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="206.175.2.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.6.23.67" src_port="18751"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="166.224.135.142" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.175.3.113" dst_port="53"/>
            <filter dst_ip="206.175.3.113" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.6.221.148" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128626"/>
        <to usec="0" sec="1299128672"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="207.10.63.156" dst_ip="216.169.65.79" dst_port="53"/>
            <filter src_ip="206.175.3.113" dst_ip="216.169.65.79" dst_port="53"/>
            <filter src_ip="206.175.6.97" dst_ip="216.169.65.79" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128716"/>
        <to usec="0" sec="1299128762"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="207.10.63.156" dst_ip="76.74.207.111" dst_port="53"/>
            <filter src_ip="206.175.6.97" dst_ip="76.74.207.111" dst_port="53"/>
            <filter src_ip="206.175.3.113" dst_ip="76.74.207.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128716"/>
        <to usec="0" sec="1299128762"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,020,0 0 0 1 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="142.139.8.172"/>
            <filter src_ip="142.139.8.175"/>
            <filter src_ip="206.21.94.220"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="4.26.146.237"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="206.175.12.90"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.52.192.71"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.52.192.86" dst_port="443"/>
            <filter src_ip="136.52.192.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="207.2.10.83"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="136.52.150.156" src_port="80"/>
            <filter src_ip="136.52.150.156" dst_port="80"/>
            <filter dst_ip="195.129.174.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128441"/>
        <to usec="0" sec="1299129223"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.52.212.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.52.245.9" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.52.33.217" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="136.52.96.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.22.29.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.178.109.87" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.22.29.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="76.146.56.9" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.780395,1.219870,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="207.2.16.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128402"/>
        <to usec="0" sec="1299129205"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYNACKrp">
        <slice>
            <filter src_ip="53.84.166.113" src_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="53.84.166.113" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="207.2.63.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="207.2.63.209" dst_port="80"/>
            <filter src_ip="136.52.100.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.6.220.57" dst_ip="151.150.164.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129226"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.6.22.175" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.252.132.52" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="218.161.85.135" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.32.42.235" src_port="9890"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.607667,1.198050,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.175.6.97" dst_port="53"/>
            <filter dst_ip="206.175.6.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129227"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="164.6.196.110" src_port="13716"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="41.34.254.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.52.100.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="14.97.103.53" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.175.6.97" src_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128852"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYNACKrp">
        <slice>
            <filter src_ip="53.84.166.113" src_port="53"/>
        </slice>
        <from usec="0" sec="1299128986"/>
        <to usec="0" sec="1299129032"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="142.22.166.247" src_port="60290"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128447"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="142.22.29.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128986"/>
        <to usec="0" sec="1299129032"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="206.175.3.146"/>
        </slice>
        <from usec="0" sec="1299129121"/>
        <to usec="0" sec="1299129167"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="207.10.63.156" dst_port="53"/>
        </slice>
        <from usec="0" sec="1299128806"/>
        <to usec="0" sec="1299128897"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="13.144.6.196" dst_port="443"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299129229"/>
    </anomaly>
    <anomaly type="notice" value="0.661599,1.174410,503,0 0 0 1 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="136.52.75.240" src_port="80"/>
            <filter src_ip="164.6.168.234" dst_ip="14.80.177.17" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="136.52.192.218"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.0.206.153"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="142.0.48.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="142.22.28.6"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661599,1.174410,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="154.17.109.132" src_port="62170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661599,1.174410,503,0 0 0 1 0 0 0 0 0 1 0 0,heavy_hitter">
        <slice>
            <filter src_ip="164.6.236.8" dst_ip="78.178.156.142" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="207.10.60.14"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.175.14.157" dst_ip="73.40.74.88" src_port="80" dst_port="18493"/>
        </slice>
        <from usec="0" sec="1299128401"/>
        <to usec="0" sec="1299128959"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.129.57.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.129.57.30"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="219.184.132.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.653536,1.211060,010,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="12.179.20.140" dst_ip="164.6.236.89" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1299128851"/>
        <to usec="0" sec="1299128897"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="8.118.18.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="57.70.196.90"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="136.52.207.153"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.52.148.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="142.190.41.125"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.6.153.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="192.168.100.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="206.175.9.54" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="200.5.120.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.5.247.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.5.244.20"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.48.94"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.129.48.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661599,1.174410,503,0 0 0 1 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.10.63.40" dst_ip="218.129.48.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.184.163.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.661599,1.174410,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="206.175.14.157" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="86.18.83.129"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="76.5.109.142"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="14.71.36.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="28.227.15.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.703963,1.187680,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="16.170.208.232"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.383681,1.197430,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.175.0.64" dst_ip="0.8.205.170" src_port="80"/>
        </slice>
        <from usec="0" sec="1299128415"/>
        <to usec="0" sec="1299129221"/>
    </anomaly>
</admd:annotation>
