<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.932028,1.483080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.5.132.42"/>
        </slice>
        <from usec="0" sec="1301893596"/>
        <to usec="0" sec="1301893598"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="171.102.90.14"/>
        </slice>
        <from usec="0" sec="1301893852"/>
        <to usec="0" sec="1301893854"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="137.174.58.64" dst_ip="193.155.151.20" src_port="64097" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893649"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.188.131.8" dst_ip="193.154.39.176" src_port="47819" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893823"/>
        <to usec="0" sec="1301893825"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.174.205.14" dst_ip="85.245.51.1" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893641"/>
        <to usec="0" sec="1301893825"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="198.79.198.0" dst_ip="137.174.7.93" src_port="58469" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893651"/>
        <to usec="0" sec="1301893653"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.181.76.133" dst_ip="215.5.175.214" src_port="80" dst_port="44538" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893848"/>
        <to usec="0" sec="1301893851"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.244.89.79" dst_ip="192.244.89.79" proto="tcp"/>
        </slice>
        <from usec="0" sec="1301893234"/>
        <to usec="0" sec="1301894096"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter src_ip="137.174.166.171"/>
        </slice>
        <from usec="0" sec="1301893263"/>
        <to usec="0" sec="1301893266"/>
    </anomaly>
    <anomaly type="notice" value="0.932028,1.483080,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="85.241.219.23" dst_ip="171.102.56.27" src_port="80" dst_port="64626"/>
            <filter src_ip="85.241.218.221" dst_ip="171.102.56.27" src_port="80" dst_port="64623"/>
        </slice>
        <from usec="0" sec="1301893238"/>
        <to usec="0" sec="1301893607"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.233.81.0"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893482"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.5.116.159"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893451"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="114.149.56.209"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893488"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.102.64.228"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893488"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.154.2.132"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301893488"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="89.74.1.64"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301893486"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.5.175.26"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301893484"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="160.136.77.110"/>
        </slice>
        <from usec="0" sec="1301893203"/>
        <to usec="0" sec="1301893484"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.178.105.84"/>
        </slice>
        <from usec="0" sec="1301893203"/>
        <to usec="0" sec="1301893483"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.102.228.93"/>
        </slice>
        <from usec="0" sec="1301893204"/>
        <to usec="0" sec="1301893484"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.90.24"/>
        </slice>
        <from usec="0" sec="1301893205"/>
        <to usec="0" sec="1301893488"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="191.96.13.69"/>
        </slice>
        <from usec="0" sec="1301893215"/>
        <to usec="0" sec="1301893483"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.144.82.75"/>
        </slice>
        <from usec="0" sec="1301893218"/>
        <to usec="0" sec="1301893470"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.135.234.21"/>
        </slice>
        <from usec="0" sec="1301893219"/>
        <to usec="0" sec="1301893577"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.93.40"/>
        </slice>
        <from usec="0" sec="1301893224"/>
        <to usec="0" sec="1301893487"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="191.179.29.87"/>
        </slice>
        <from usec="0" sec="1301893293"/>
        <to usec="0" sec="1301893313"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="117.181.80.196"/>
        </slice>
        <from usec="0" sec="1301893295"/>
        <to usec="0" sec="1301893469"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="173.56.117.57"/>
        </slice>
        <from usec="0" sec="1301893926"/>
        <to usec="0" sec="1301893934"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.251.71.130"/>
        </slice>
        <from usec="0" sec="1301893341"/>
        <to usec="0" sec="1301893351"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.215.224.10"/>
        </slice>
        <from usec="0" sec="1301893363"/>
        <to usec="0" sec="1301893464"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="199.70.131.28"/>
        </slice>
        <from usec="0" sec="1301893402"/>
        <to usec="0" sec="1301893424"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="76.211.41.66"/>
        </slice>
        <from usec="0" sec="1301893447"/>
        <to usec="0" sec="1301893452"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.213.101.31"/>
        </slice>
        <from usec="0" sec="1301893478"/>
        <to usec="0" sec="1301893488"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="192.244.87.86"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893578"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.244.81.192"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893578"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="115.24.42.32"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893572"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.233.104.19"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893577"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="61.12.160.155"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893578"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="89.88.232.13"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301893573"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="202.133.123.6"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301893667"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="113.137.101.22"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301893570"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="118.123.69.88"/>
        </slice>
        <from usec="0" sec="1301893204"/>
        <to usec="0" sec="1301893573"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="198.192.40.217"/>
        </slice>
        <from usec="0" sec="1301893214"/>
        <to usec="0" sec="1301893517"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="171.102.168.243"/>
        </slice>
        <from usec="0" sec="1301893228"/>
        <to usec="0" sec="1301893478"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="192.244.92.208"/>
        </slice>
        <from usec="0" sec="1301893238"/>
        <to usec="0" sec="1301893561"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="66.27.65.64"/>
        </slice>
        <from usec="0" sec="1301893257"/>
        <to usec="0" sec="1301893419"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="89.88.228.210"/>
        </slice>
        <from usec="0" sec="1301893337"/>
        <to usec="0" sec="1301893429"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="213.95.181.137"/>
        </slice>
        <from usec="0" sec="1301893350"/>
        <to usec="0" sec="1301893472"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.144.40.110"/>
        </slice>
        <from usec="0" sec="1301893380"/>
        <to usec="0" sec="1301893487"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="181.43.21.24"/>
        </slice>
        <from usec="0" sec="1301893390"/>
        <to usec="0" sec="1301893399"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="70.18.110.12"/>
        </slice>
        <from usec="0" sec="1301893416"/>
        <to usec="0" sec="1301893536"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.224.21.107"/>
        </slice>
        <from usec="0" sec="1301893435"/>
        <to usec="0" sec="1301893440"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.146.233.142"/>
        </slice>
        <from usec="0" sec="1301893443"/>
        <to usec="0" sec="1301893463"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="22.183.166.250"/>
        </slice>
        <from usec="0" sec="1301893463"/>
        <to usec="0" sec="1301893578"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.181.2.33"/>
        </slice>
        <from usec="0" sec="1301893474"/>
        <to usec="0" sec="1301893481"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.36.28.180"/>
        </slice>
        <from usec="0" sec="1301893509"/>
        <to usec="0" sec="1301893516"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="121.143.167.69"/>
        </slice>
        <from usec="0" sec="1301893511"/>
        <to usec="0" sec="1301893520"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.144.85.209"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893668"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.233.105.17"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301893666"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="119.118.66.243"/>
        </slice>
        <from usec="0" sec="1301893211"/>
        <to usec="0" sec="1301893667"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.5.175.0"/>
        </slice>
        <from usec="0" sec="1301893214"/>
        <to usec="0" sec="1301893668"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.85.5.122"/>
        </slice>
        <from usec="0" sec="1301893491"/>
        <to usec="0" sec="1301893589"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.210.7.128"/>
        </slice>
        <from usec="0" sec="1301893517"/>
        <to usec="0" sec="1301893548"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="99.9.157.159"/>
        </slice>
        <from usec="0" sec="1301893524"/>
        <to usec="0" sec="1301893561"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.129.23.69"/>
        </slice>
        <from usec="0" sec="1301893550"/>
        <to usec="0" sec="1301893563"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="117.8.181.168"/>
        </slice>
        <from usec="0" sec="1301893633"/>
        <to usec="0" sec="1301893666"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.85.65"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301893755"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.102.228.166"/>
        </slice>
        <from usec="0" sec="1301893209"/>
        <to usec="0" sec="1301893750"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="187.140.118.208"/>
        </slice>
        <from usec="0" sec="1301893212"/>
        <to usec="0" sec="1301893754"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="89.88.228.72"/>
        </slice>
        <from usec="0" sec="1301893214"/>
        <to usec="0" sec="1301893743"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="61.129.209.172"/>
        </slice>
        <from usec="0" sec="1301893609"/>
        <to usec="0" sec="1301893631"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="171.102.239.53" src_port="443"/>
            <filter dst_ip="171.102.239.53" dst_port="54538"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893848"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.174.205.14"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="45.132.226.39"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893938"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.144.140.98" src_port="53" dst_port="32867"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893938"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.57.225.166"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301894026"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="209.140.116.0"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.233.225.252"/>
        </slice>
        <from usec="0" sec="1301893221"/>
        <to usec="0" sec="1301893923"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="82.96.106.126"/>
        </slice>
        <from usec="0" sec="1301893237"/>
        <to usec="0" sec="1301893937"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="63.6.137.183"/>
        </slice>
        <from usec="0" sec="1301893270"/>
        <to usec="0" sec="1301893917"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.5.175.41"/>
        </slice>
        <from usec="0" sec="1301893281"/>
        <to usec="0" sec="1301893799"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="85.11.78.20"/>
        </slice>
        <from usec="0" sec="1301893686"/>
        <to usec="0" sec="1301893762"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="26.64.37.166"/>
        </slice>
        <from usec="0" sec="1301893749"/>
        <to usec="0" sec="1301893831"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="89.88.228.209"/>
        </slice>
        <from usec="0" sec="1301893795"/>
        <to usec="0" sec="1301893797"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="86.205.52.43"/>
        </slice>
        <from usec="0" sec="1301893871"/>
        <to usec="0" sec="1301893885"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="80.45.20.32"/>
        </slice>
        <from usec="0" sec="1301893874"/>
        <to usec="0" sec="1301893901"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.244.81.211"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894022"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.43.131.166"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894018"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.64.83"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="125.81.44.135" dst_ip="171.102.145.255" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="171.102.227.5" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894017"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="90.137.191.217"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894026"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.233.225.248"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.74.130.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.174.180.55"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301894027"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.232.161.100"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="89.88.230.108"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301894017"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="69.140.53.166"/>
        </slice>
        <from usec="0" sec="1301893204"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.195.60.193"/>
        </slice>
        <from usec="0" sec="1301893204"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="143.233.36.64"/>
        </slice>
        <from usec="0" sec="1301893207"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.244.81.240" src_port="53"/>
        </slice>
        <from usec="0" sec="1301893208"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.188.102.140" src_port="80"/>
            <filter dst_ip="214.188.102.140" src_port="53"/>
        </slice>
        <from usec="0" sec="1301893214"/>
        <to usec="0" sec="1301894016"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="161.26.28.176"/>
        </slice>
        <from usec="0" sec="1301893223"/>
        <to usec="0" sec="1301894021"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="171.102.227.196" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893228"/>
        <to usec="0" sec="1301894001"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.172.250.159"/>
        </slice>
        <from usec="0" sec="1301893231"/>
        <to usec="0" sec="1301894009"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="171.102.16.149" dst_port="34968"/>
        </slice>
        <from usec="0" sec="1301893242"/>
        <to usec="0" sec="1301894023"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.5.175.169"/>
        </slice>
        <from usec="0" sec="1301893249"/>
        <to usec="0" sec="1301893963"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="10.241.73.100"/>
        </slice>
        <from usec="0" sec="1301893300"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.179.162.1"/>
        </slice>
        <from usec="0" sec="1301893394"/>
        <to usec="0" sec="1301893913"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="121.246.80.164"/>
        </slice>
        <from usec="0" sec="1301893503"/>
        <to usec="0" sec="1301893986"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.161.104.233"/>
        </slice>
        <from usec="0" sec="1301893543"/>
        <to usec="0" sec="1301893957"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="193.155.78.176"/>
        </slice>
        <from usec="0" sec="1301893566"/>
        <to usec="0" sec="1301893882"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="187.137.53.10"/>
        </slice>
        <from usec="0" sec="1301893731"/>
        <to usec="0" sec="1301894024"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.245.34.61"/>
        </slice>
        <from usec="0" sec="1301893772"/>
        <to usec="0" sec="1301893935"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="115.204.125.70"/>
        </slice>
        <from usec="0" sec="1301893776"/>
        <to usec="0" sec="1301894015"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="89.39.110.147"/>
        </slice>
        <from usec="0" sec="1301893776"/>
        <to usec="0" sec="1301893975"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="168.167.225.244"/>
        </slice>
        <from usec="0" sec="1301893805"/>
        <to usec="0" sec="1301893985"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="189.182.144.71"/>
        </slice>
        <from usec="0" sec="1301893810"/>
        <to usec="0" sec="1301894009"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.92.43.101"/>
        </slice>
        <from usec="0" sec="1301893856"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.85.10.3"/>
        </slice>
        <from usec="0" sec="1301893864"/>
        <to usec="0" sec="1301893868"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="132.241.117.108"/>
        </slice>
        <from usec="0" sec="1301893917"/>
        <to usec="0" sec="1301893926"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="57.130.71.239"/>
        </slice>
        <from usec="0" sec="1301893920"/>
        <to usec="0" sec="1301893981"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.140.1.104"/>
        </slice>
        <from usec="0" sec="1301893950"/>
        <to usec="0" sec="1301893963"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.52.18.138"/>
        </slice>
        <from usec="0" sec="1301893955"/>
        <to usec="0" sec="1301893958"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="137.179.227.41"/>
        </slice>
        <from usec="0" sec="1301893966"/>
        <to usec="0" sec="1301894028"/>
    </anomaly>
    <anomaly type="notice" value="0.371186,1.415050,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.154.2.213"/>
        </slice>
        <from usec="0" sec="1301893967"/>
        <to usec="0" sec="1301893988"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,501,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.244.87.39" dst_ip="122.249.65.5" src_port="21"/>
        </slice>
        <from usec="0" sec="1301893226"/>
        <to usec="0" sec="1301893469"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="171.102.73.181" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893239"/>
        <to usec="0" sec="1301893574"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.233.168.174" dst_ip="90.109.157.81" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893201"/>
        <to usec="0" sec="1301893668"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="171.102.16.0" dst_ip="215.5.175.12" src_port="80" dst_port="49618"/>
            <filter src_ip="137.181.130.145" dst_ip="215.5.175.12" src_port="80" dst_port="39709"/>
        </slice>
        <from usec="0" sec="1301893463"/>
        <to usec="0" sec="1301893519"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.102.188.135" dst_ip="196.68.232.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893433"/>
        <to usec="0" sec="1301893745"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="171.102.83.1" dst_ip="187.141.173.48" dst_port="80"/>
            <filter src_ip="143.233.38.31" dst_ip="187.141.173.48" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893206"/>
        <to usec="0" sec="1301893929"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,502,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.244.85.1" dst_ip="204.211.123.37" dst_port="22"/>
            <filter src_ip="192.244.85.1" dst_ip="204.211.123.37" dst_port="16514"/>
        </slice>
        <from usec="0" sec="1301893207"/>
        <to usec="0" sec="1301893929"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.181.23.81" dst_ip="148.47.229.131" dst_port="443"/>
        </slice>
        <from usec="0" sec="1301893213"/>
        <to usec="0" sec="1301894016"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.102.164.226" src_port="8090" dst_port="9939"/>
        </slice>
        <from usec="0" sec="1301893298"/>
        <to usec="0" sec="1301893933"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.233.16.243" dst_ip="93.143.225.124" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893609"/>
        <to usec="0" sec="1301893882"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="171.102.189.22" dst_port="21246"/>
        </slice>
        <from usec="0" sec="1301893774"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.873715,1.413180,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="192.244.86.96" dst_ip="193.155.112.9" src_port="53"/>
            <filter src_ip="192.244.86.101" dst_ip="193.155.112.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1301893855"/>
        <to usec="0" sec="1301894026"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="171.102.56.36"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893246"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.144.141.160"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893578"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.244.81.133" dst_port="53"/>
            <filter dst_ip="204.242.11.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893937"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.244.80.64" dst_port="2117"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893741"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="137.74.131.116"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,020,0 0 0 0 0 0 1 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="137.74.131.118"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="143.233.67.145" dst_ip="193.155.151.20"/>
            <filter src_ip="143.233.67.145" dst_port="80"/>
            <filter src_ip="143.233.67.145" dst_port="20480"/>
            <filter src_ip="143.233.67.145" dst_port="53"/>
            <filter dst_ip="193.155.151.20" dst_port="80"/>
            <filter dst_ip="193.155.151.20" dst_port="20480"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,503,0 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.67.230" dst_port="443"/>
            <filter src_ip="143.233.67.230" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893211"/>
        <to usec="0" sec="1301894024"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="143.233.157.36" dst_port="80"/>
            <filter dst_ip="116.20.230.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894016"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.174.227.146"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,504,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.154.29.113"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="171.102.239.45" src_port="16396"/>
            <filter src_ip="171.102.239.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="114.239.26.31"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.154.18.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.144.142" src_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.144.142" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.161.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.102.15.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.144.141.33" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="192.244.90.43" dst_port="53"/>
            <filter dst_ip="198.13.55.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893938"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.92.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.174.205.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.174.205.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="51.44.114.170" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.148.184" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="171.102.171.189" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.102.170.81" dst_ip="146.221.196.163" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894025"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="77.19.2.207" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.16.236" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="51.45.240.149" src_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="143.233.67.214" dst_port="6667"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.64.190.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.244.81.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="62.113.4.139" dst_ip="171.102.128.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.761821,1.351380,503,0 0 0 1 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.87.39" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="206.176.128.108" dst_port="110"/>
        </slice>
        <from usec="0" sec="1301893605"/>
        <to usec="0" sec="1301893651"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="143.233.165.25" dst_port="80"/>
            <filter dst_ip="89.109.170.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1301893211"/>
        <to usec="0" sec="1301894018"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.244.87.104" dst_ip="198.163.46.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301893208"/>
        <to usec="0" sec="1301894020"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.69.25" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1301893202"/>
        <to usec="0" sec="1301893921"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.71.151.85" dst_port="22"/>
        </slice>
        <from usec="0" sec="1301893875"/>
        <to usec="0" sec="1301893921"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1301893875"/>
        <to usec="0" sec="1301893921"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.219.106"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.233.161.94"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.574988,1.402530,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.244.89.66" src_port="23269"/>
            <filter src_ip="192.244.89.66" src_port="6881"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.90.43"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.174.205.74"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.244.86.117" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.244.81.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="161.27.160.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1301894055"/>
        <to usec="0" sec="1301894101"/>
    </anomaly>
    <anomaly type="notice" value="0.641384,1.450810,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.144.141.167"/>
        </slice>
        <from usec="0" sec="1301893200"/>
        <to usec="0" sec="1301893471"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="109.25.133.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.622527,1.364370,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.148.178" dst_port="80"/>
            <filter src_ip="143.233.148.178" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.622527,1.364370,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="143.233.73.99" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.154.39.241"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.16.42.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="192.244.85.161"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="192.244.85.65"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.85.14.199"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.85.10.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.813101,1.401430,020,0 0 0 0 0 0 1 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="192.55.151.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="202.177.128.153" dst_ip="171.102.236.20" src_port="80"/>
            <filter src_ip="198.208.233.64" dst_ip="171.102.236.20" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.622527,1.364370,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="88.183.32.62" dst_ip="171.102.98.12" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.154.27.89" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.244.82.2" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,999,0 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="192.244.81.151" dst_ip="192.244.81.133" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.915605,1.436950,999,0 0 0 0 0 0 1 0 0 0 1 0,mptmp">
        <slice>
            <filter src_ip="143.233.92.158" dst_port="80"/>
            <filter dst_ip="85.245.115.116" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="26.64.37.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.684325,1.413960,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="85.245.115.116" dst_port="993"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
