<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.108.104.133" dst_ip="87.225.86.177" src_port="1266" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336841"/>
        <to usec="0" sec="1307336972"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="153.78.122.40"/>
        </slice>
        <from usec="0" sec="1307336860"/>
        <to usec="0" sec="1307336862"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="187.142.211.48"/>
        </slice>
        <from usec="0" sec="1307336501"/>
        <to usec="0" sec="1307336906"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.74.233.41"/>
        </slice>
        <from usec="0" sec="1307336451"/>
        <to usec="0" sec="1307336453"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="141.3.18.169" dst_ip="87.13.168.111" src_port="80" dst_port="55719" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336451"/>
        <to usec="0" sec="1307336453"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="178.249.40.8" dst_ip="209.127.42.16" src_port="55493" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307337108"/>
        <to usec="0" sec="1307337110"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.249.140.6" dst_ip="200.18.10.145" src_port="60768" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336650"/>
        <to usec="0" sec="1307336660"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="50.163.215.213" dst_ip="153.78.42.134" src_port="80" dst_port="58591" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336455"/>
        <to usec="0" sec="1307336577"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="200.18.10.144" dst_ip="209.126.64.224" src_port="80" dst_port="42911" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336990"/>
        <to usec="0" sec="1307337116"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="153.78.18.149" dst_ip="209.127.182.204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336607"/>
        <to usec="0" sec="1307337081"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.108.87.208"/>
        </slice>
        <from usec="0" sec="1307336958"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="209.113.18.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336943"/>
        <to usec="0" sec="1307337081"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="153.78.67.204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307336725"/>
        <to usec="0" sec="1307336848"/>
    </anomaly>
    <anomaly type="notice" value="0.807204,1.226410,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="102.15.221.126" dst_port="4899" proto="tcp"/>
        </slice>
        <from usec="0" sec="1307337108"/>
        <to usec="0" sec="1307337123"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.89.67"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336509"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.128.117.62"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336415"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="176.61.149.176"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.78.25.16"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336509"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="111.0.197.232"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336503"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="68.193.129.101"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336433"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="193.48.75.230"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="90.56.73.135"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336599"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="178.249.174.144"/>
        </slice>
        <from usec="0" sec="1307336404"/>
        <to usec="0" sec="1307336509"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="196.60.119.142"/>
        </slice>
        <from usec="0" sec="1307336405"/>
        <to usec="0" sec="1307336432"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="86.62.104.86"/>
        </slice>
        <from usec="0" sec="1307336409"/>
        <to usec="0" sec="1307336506"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="88.12.203.142"/>
        </slice>
        <from usec="0" sec="1307336421"/>
        <to usec="0" sec="1307336505"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="158.108.30.196"/>
        </slice>
        <from usec="0" sec="1307336450"/>
        <to usec="0" sec="1307336509"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.129.81.195"/>
        </slice>
        <from usec="0" sec="1307336455"/>
        <to usec="0" sec="1307336473"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="104.22.90.86"/>
        </slice>
        <from usec="0" sec="1307336461"/>
        <to usec="0" sec="1307336478"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="176.61.185.140"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336599"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.176.131.206"/>
        </slice>
        <from usec="0" sec="1307336516"/>
        <to usec="0" sec="1307336528"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="116.44.152.110"/>
        </slice>
        <from usec="0" sec="1307336537"/>
        <to usec="0" sec="1307336598"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="178.249.40.142"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336689"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="106.209.199.139"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336689"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.78.196.129"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336689"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="87.35.198.136"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336689"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.192.16.129"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336688"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.61.93.75"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336779"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="178.249.11.19"/>
        </slice>
        <from usec="0" sec="1307336404"/>
        <to usec="0" sec="1307336869"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="87.35.198.177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336406"/>
        <to usec="0" sec="1307336688"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="186.186.94.105"/>
        </slice>
        <from usec="0" sec="1307336407"/>
        <to usec="0" sec="1307336685"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.88.156.207"/>
        </slice>
        <from usec="0" sec="1307336408"/>
        <to usec="0" sec="1307336689"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.166.69.9"/>
        </slice>
        <from usec="0" sec="1307336409"/>
        <to usec="0" sec="1307336776"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.108.27.1"/>
        </slice>
        <from usec="0" sec="1307336411"/>
        <to usec="0" sec="1307336684"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="28.80.225.24" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336414"/>
        <to usec="0" sec="1307336688"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="119.168.44.46"/>
        </slice>
        <from usec="0" sec="1307336447"/>
        <to usec="0" sec="1307336618"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.125.52.139"/>
        </slice>
        <from usec="0" sec="1307336453"/>
        <to usec="0" sec="1307336644"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="109.166.109.29"/>
        </slice>
        <from usec="0" sec="1307336497"/>
        <to usec="0" sec="1307336533"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.156.199.32"/>
        </slice>
        <from usec="0" sec="1307336541"/>
        <to usec="0" sec="1307336562"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="102.53.117.163"/>
        </slice>
        <from usec="0" sec="1307336542"/>
        <to usec="0" sec="1307336574"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.72.213.203"/>
        </slice>
        <from usec="0" sec="1307336549"/>
        <to usec="0" sec="1307336669"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.246.137.234"/>
        </slice>
        <from usec="0" sec="1307336552"/>
        <to usec="0" sec="1307336621"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="178.249.79.130"/>
        </slice>
        <from usec="0" sec="1307336562"/>
        <to usec="0" sec="1307336753"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.197.87.7"/>
        </slice>
        <from usec="0" sec="1307336580"/>
        <to usec="0" sec="1307336664"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.179.68.202"/>
        </slice>
        <from usec="0" sec="1307336587"/>
        <to usec="0" sec="1307336611"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="84.47.61.98"/>
        </slice>
        <from usec="0" sec="1307336590"/>
        <to usec="0" sec="1307336671"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.156.158.148"/>
        </slice>
        <from usec="0" sec="1307336601"/>
        <to usec="0" sec="1307336658"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="209.127.149.212"/>
        </slice>
        <from usec="0" sec="1307336614"/>
        <to usec="0" sec="1307336619"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.197.123.76"/>
        </slice>
        <from usec="0" sec="1307336619"/>
        <to usec="0" sec="1307336631"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="97.222.1.158"/>
        </slice>
        <from usec="0" sec="1307336654"/>
        <to usec="0" sec="1307336657"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.57.58.168"/>
        </slice>
        <from usec="0" sec="1307336668"/>
        <to usec="0" sec="1307336676"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.113.240.204" dst_port="10508"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336779"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.34.69.24"/>
        </slice>
        <from usec="0" sec="1307336406"/>
        <to usec="0" sec="1307336774"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="213.164.125.24"/>
        </slice>
        <from usec="0" sec="1307336407"/>
        <to usec="0" sec="1307336779"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="132.91.254.21"/>
        </slice>
        <from usec="0" sec="1307336408"/>
        <to usec="0" sec="1307336776"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.61.89.180"/>
        </slice>
        <from usec="0" sec="1307336463"/>
        <to usec="0" sec="1307336942"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.216.255.13"/>
        </slice>
        <from usec="0" sec="1307336526"/>
        <to usec="0" sec="1307336610"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.139.0.92"/>
        </slice>
        <from usec="0" sec="1307336610"/>
        <to usec="0" sec="1307336621"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.198.96.109"/>
        </slice>
        <from usec="0" sec="1307336658"/>
        <to usec="0" sec="1307336779"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.78.25.12"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="93.236.47.250"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336869"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="88.63.43.214"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336869"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="178.249.161.2"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336831"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.108.31.112"/>
        </slice>
        <from usec="0" sec="1307336405"/>
        <to usec="0" sec="1307336869"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.88.62.12"/>
        </slice>
        <from usec="0" sec="1307336407"/>
        <to usec="0" sec="1307336868"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="84.163.205.245"/>
        </slice>
        <from usec="0" sec="1307336418"/>
        <to usec="0" sec="1307336864"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.198.208.68"/>
        </slice>
        <from usec="0" sec="1307336423"/>
        <to usec="0" sec="1307336865"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="88.48.208.154"/>
        </slice>
        <from usec="0" sec="1307336457"/>
        <to usec="0" sec="1307336841"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="205.220.249.46"/>
        </slice>
        <from usec="0" sec="1307336763"/>
        <to usec="0" sec="1307336867"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="102.20.6.181"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336927"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="99.1.112.190"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="87.35.192.40"/>
        </slice>
        <from usec="0" sec="1307336405"/>
        <to usec="0" sec="1307336959"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="33.18.222.80"/>
        </slice>
        <from usec="0" sec="1307336405"/>
        <to usec="0" sec="1307336954"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.80.17"/>
        </slice>
        <from usec="0" sec="1307336407"/>
        <to usec="0" sec="1307336953"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.73.93.128"/>
        </slice>
        <from usec="0" sec="1307336421"/>
        <to usec="0" sec="1307336957"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="207.166.69.11"/>
        </slice>
        <from usec="0" sec="1307336431"/>
        <to usec="0" sec="1307336957"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="87.13.169.46"/>
        </slice>
        <from usec="0" sec="1307336494"/>
        <to usec="0" sec="1307336947"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="207.166.72.87"/>
        </slice>
        <from usec="0" sec="1307336524"/>
        <to usec="0" sec="1307336876"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="96.154.181.13"/>
        </slice>
        <from usec="0" sec="1307336686"/>
        <to usec="0" sec="1307336957"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="116.46.170.217"/>
        </slice>
        <from usec="0" sec="1307336743"/>
        <to usec="0" sec="1307336867"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.172.41.10"/>
        </slice>
        <from usec="0" sec="1307336883"/>
        <to usec="0" sec="1307336912"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="170.193.163.46"/>
        </slice>
        <from usec="0" sec="1307336403"/>
        <to usec="0" sec="1307337048"/>
    </anomaly>
    <anomaly type="notice" value="0.410991,1.167380,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="119.131.121.4"/>
        </slice>
        <from usec="0" sec="1307336445"/>
        <to usec="0" sec="1307337049"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.192.248.186"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.192.248.168"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.192.248.146"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.108.183.122"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="158.108.85.13"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.113.16.77"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.84.144" src_port="80"/>
            <filter dst_ip="208.61.84.144" src_port="443"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.87.185"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.117.151.166"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.78.217.101" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.128.220.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.78.184.76" dst_port="27960"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.749165,1.141350,503,0 0 0 1 0 0 1 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="209.126.64.224" dst_port="80"/>
            <filter src_ip="209.126.64.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.61.81.2" dst_port="53"/>
            <filter dst_ip="208.61.88.200" dst_port="53"/>
            <filter dst_ip="219.239.71.248" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.126.112.120" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="221.241.188.113" dst_port="80"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.113.240.146" dst_port="27745"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.61.93.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.113.250.201" dst_port="24498"/>
        </slice>
        <from usec="0" sec="1307336401"/>
        <to usec="0" sec="1307336447"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.61.86.133"/>
        </slice>
        <from usec="0" sec="1307336626"/>
        <to usec="0" sec="1307336672"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.61.86.136" src_port="23269"/>
        </slice>
        <from usec="0" sec="1307336716"/>
        <to usec="0" sec="1307336762"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="153.78.184.76" dst_port="27960"/>
        </slice>
        <from usec="0" sec="1307336716"/>
        <to usec="0" sec="1307336762"/>
    </anomaly>
    <anomaly type="notice" value="0.603883,1.184250,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.113.240.146" src_port="27745"/>
        </slice>
        <from usec="0" sec="1307336896"/>
        <to usec="0" sec="1307336942"/>
    </anomaly>
    <anomaly type="notice" value="0.629948,1.166940,503,0 0 0 1 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.117.151.164" src_port="80"/>
            <filter dst_ip="158.117.151.164" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.629948,1.166940,503,0 0 0 1 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="153.78.224.77" dst_port="80"/>
            <filter src_ip="153.78.224.77" dst_ip="84.225.84.155" src_port="80"/>
            <filter src_ip="153.78.224.77" dst_ip="187.132.238.211" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="158.108.18.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.629948,1.166940,503,0 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="178.249.40.96" dst_ip="75.139.51.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749165,1.141350,503,0 0 0 1 0 0 1 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="209.113.16.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="208.61.87.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.629948,1.166940,999,0 0 0 1 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="88.63.200.130" dst_ip="178.249.136.184" src_port="25"/>
            <filter src_ip="88.63.200.130" dst_ip="208.61.89.200" src_port="25"/>
            <filter src_ip="88.63.200.130" dst_ip="208.61.93.114" src_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="88.63.170.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="117.220.210.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.78.41.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="214.0.187.108" dst_ip="178.249.175.11" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.629948,1.166940,999,0 0 0 1 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="178.249.174.208" dst_port="16001"/>
            <filter dst_ip="178.249.174.208" dst_port="6655"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="178.249.58.42"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="178.249.82.67"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.61.87.187" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.769802,1.183820,502,0 0 0 0 0 0 1 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="33.107.35.27" dst_ip="208.61.86.35" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.20.119.154"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.20.119.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="84.47.61.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="84.47.61.40"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.654357,1.208520,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="92.52.3.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
