<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.771128,1.374020,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.34.225.42" src_port="10633" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015702"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.34.232.192" dst_ip="107.29.22.66" src_port="41216" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015020"/>
        <to usec="0" sec="1310015022"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.7.42"/>
        </slice>
        <from usec="0" sec="1310015418"/>
        <to usec="0" sec="1310015419"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.101.206.133" dst_ip="19.71.65.179" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015446"/>
        <to usec="0" sec="1310015475"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.176.11" dst_ip="193.51.79.46" src_port="55495" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015112"/>
        <to usec="0" sec="1310015151"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.101.206.130" dst_ip="155.93.212.143" src_port="55078" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015147"/>
        <to usec="0" sec="1310015694"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.50.231.112"/>
        </slice>
        <from usec="0" sec="1310014908"/>
        <to usec="0" sec="1310014917"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.101.8.193" dst_ip="19.138.17.6" src_port="54056" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014925"/>
        <to usec="0" sec="1310014929"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="198.152.74.193"/>
        </slice>
        <from usec="0" sec="1310015096"/>
        <to usec="0" sec="1310015143"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.7.200" dst_ip="23.67.24.156" src_port="50365" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014896"/>
        <to usec="0" sec="1310014932"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.91.180.231" dst_ip="198.53.181.227" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014891"/>
        <to usec="0" sec="1310014935"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="48.11.7.65" dst_ip="150.30.106.244" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015258"/>
        <to usec="0" sec="1310015607"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.100.214.116" dst_ip="199.56.136.96" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015403"/>
        <to usec="0" sec="1310015662"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.33.32.103" dst_ip="16.150.232.71" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014929"/>
        <to usec="0" sec="1310015534"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="149.101.11.4" dst_ip="149.101.11.4" src_port="3724" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014963"/>
        <to usec="0" sec="1310015695"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="199.48.37.141" dst_ip="199.48.37.141" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014923"/>
        <to usec="0" sec="1310015025"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="3.34.201.158" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014919"/>
        <to usec="0" sec="1310014935"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.130.229.83" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014905"/>
        <to usec="0" sec="1310014910"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="174.50.139.130" dst_ip="31.144.117.206" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310014887"/>
        <to usec="0" sec="1310014889"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.69.87"/>
        </slice>
        <from usec="0" sec="1310014938"/>
        <to usec="0" sec="1310014940"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="199.56.19.48" dst_ip="199.56.19.48" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015594"/>
        <to usec="0" sec="1310015632"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="38.155.71.3" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015464"/>
        <to usec="0" sec="1310015466"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.146.168.112"/>
        </slice>
        <from usec="0" sec="1310014920"/>
        <to usec="0" sec="1310014922"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.40.77.94" dst_ip="149.101.206.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015473"/>
        <to usec="0" sec="1310015476"/>
    </anomaly>
    <anomaly type="notice" value="0.771128,1.374020,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.107.46.170" dst_ip="149.101.206.140" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1310015557"/>
        <to usec="0" sec="1310015559"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.181.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014908"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="39.240.161.189"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014908"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.112.178.43"/>
        </slice>
        <from usec="0" sec="1310014801"/>
        <to usec="0" sec="1310014908"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="146.81.55.195"/>
        </slice>
        <from usec="0" sec="1310014865"/>
        <to usec="0" sec="1310014879"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.101.8.209"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014998"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.50.224.172"/>
        </slice>
        <from usec="0" sec="1310014815"/>
        <to usec="0" sec="1310014998"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="155.22.69.232"/>
        </slice>
        <from usec="0" sec="1310014817"/>
        <to usec="0" sec="1310014992"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="49.88.160.24"/>
        </slice>
        <from usec="0" sec="1310014877"/>
        <to usec="0" sec="1310015027"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="49.94.51.255"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015178"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.234.110.216"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015163"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.128.173.79"/>
        </slice>
        <from usec="0" sec="1310014806"/>
        <to usec="0" sec="1310015118"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="174.50.138.196"/>
        </slice>
        <from usec="0" sec="1310014815"/>
        <to usec="0" sec="1310015156"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.101.176.227"/>
        </slice>
        <from usec="0" sec="1310014804"/>
        <to usec="0" sec="1310015267"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="48.138.95.233"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015356"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,999,0 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="59.86.115.25" dst_ip="174.39.99.31" src_port="1935"/>
            <filter src_ip="63.58.193.201" dst_ip="174.39.99.30" src_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015357"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.101.8.133"/>
        </slice>
        <from usec="0" sec="1310014803"/>
        <to usec="0" sec="1310015346"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.163.0"/>
        </slice>
        <from usec="0" sec="1310014805"/>
        <to usec="0" sec="1310015357"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="174.50.229.227"/>
        </slice>
        <from usec="0" sec="1310014807"/>
        <to usec="0" sec="1310015358"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.131.118.216"/>
        </slice>
        <from usec="0" sec="1310015010"/>
        <to usec="0" sec="1310015314"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="203.150.136.214"/>
        </slice>
        <from usec="0" sec="1310015253"/>
        <to usec="0" sec="1310015267"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="55.157.219.53"/>
        </slice>
        <from usec="0" sec="1310015254"/>
        <to usec="0" sec="1310015311"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.49.82.16"/>
        </slice>
        <from usec="0" sec="1310015281"/>
        <to usec="0" sec="1310015358"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.101.113.72"/>
        </slice>
        <from usec="0" sec="1310014802"/>
        <to usec="0" sec="1310015448"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="149.101.74.33"/>
        </slice>
        <from usec="0" sec="1310014808"/>
        <to usec="0" sec="1310015448"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.33.216.63"/>
        </slice>
        <from usec="0" sec="1310015012"/>
        <to usec="0" sec="1310015445"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="199.48.37.90"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015538"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.65.177.52"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015538"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="54.69.44.136"/>
        </slice>
        <from usec="0" sec="1310014802"/>
        <to usec="0" sec="1310015538"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.224.79.153"/>
        </slice>
        <from usec="0" sec="1310014816"/>
        <to usec="0" sec="1310015527"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="174.130.189.154"/>
        </slice>
        <from usec="0" sec="1310015354"/>
        <to usec="0" sec="1310015480"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="85.202.18.103" src_port="80"/>
            <filter dst_ip="174.50.239.5" src_port="80"/>
        </slice>
        <from usec="0" sec="1310014801"/>
        <to usec="0" sec="1310015626"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.101.205.92"/>
        </slice>
        <from usec="0" sec="1310014815"/>
        <to usec="0" sec="1310015607"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="152.155.198.81"/>
        </slice>
        <from usec="0" sec="1310015141"/>
        <to usec="0" sec="1310015520"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.0.200" dst_ip="86.170.35.27" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014825"/>
        <to usec="0" sec="1310015258"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.167.63.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.130.34.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.150.39" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.40.161" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.181.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,503,0 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.34.160.131" dst_port="80"/>
            <filter dst_ip="24.217.173.33" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.701393,1.302640,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="174.50.85.235" dst_port="53"/>
            <filter dst_ip="198.33.16.221" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015358"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.34.205.135" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.184.56" src_port="23269"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.155.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014890"/>
        <to usec="0" sec="1310014936"/>
    </anomaly>
    <anomaly type="notice" value="0.725014,1.324470,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="174.50.136.153" dst_ip="218.147.177.92" dst_port="443"/>
        </slice>
        <from usec="0" sec="1310014890"/>
        <to usec="0" sec="1310014936"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.56.21.67" src_port="11941"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="193.21.94.2" dst_ip="150.30.116.90" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.177.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014935"/>
        <to usec="0" sec="1310014981"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.12.57" dst_port="27960"/>
        </slice>
        <from usec="0" sec="1310014935"/>
        <to usec="0" sec="1310014981"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter src_ip="169.34.118.76"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.26.31"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.48.36.14" src_port="53"/>
            <filter src_ip="199.48.36.14" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,503,0 0 0 1 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.69.145" dst_port="80"/>
            <filter src_ip="169.34.69.145" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014802"/>
        <to usec="0" sec="1310015588"/>
    </anomaly>
    <anomaly type="notice" value="0.782436,1.304920,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.136.197" src_port="64720"/>
        </slice>
        <from usec="0" sec="1310014920"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.167.63.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.34.97.140" src_port="1155"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.40.161" dst_ip="208.238.100.70" dst_port="80"/>
            <filter src_ip="169.34.40.161" src_port="11266" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.167.63.188" src_port="53"/>
            <filter dst_ip="174.167.63.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.34.205.135" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="59.86.100.130" src_port="53"/>
            <filter dst_ip="174.50.161.96" src_port="53"/>
            <filter dst_ip="169.34.155.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.56.19.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.50.161.98" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.34.193.205"/>
            <filter dst_ip="107.176.209.218" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.101.150.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="149.101.8.205" src_port="11935"/>
            <filter dst_ip="149.101.8.205" dst_port="11935"/>
            <filter src_port="11935" dst_port="11935"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.50.161.13" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.120.108.54"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="7.52.9.149"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.218.190.89"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.184.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.180.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="129.200.127.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.48.36.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.74.179.90" dst_ip="198.53.179.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.177.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.212.227" dst_ip="30.11.46.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.64.38.244" dst_ip="174.50.241.63" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.56.28.151" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.182.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="174.50.241.63" dst_ip="9.193.78.109" src_port="123"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.33.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.96.70" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.101.8.205" src_port="11935" dst_port="11935"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.13" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="198.53.184.57" dst_port="13177"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.160.131" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.167.63.188" src_port="53"/>
            <filter dst_ip="174.167.63.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.53.186.117"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.34.155.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="199.56.19.48"/>
            <filter src_ip="198.53.180.92"/>
            <filter dst_ip="198.53.184.56" dst_port="23269"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.56.19.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.50.161.96" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="85.83.199.37"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.186.66"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="198.53.177.7"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.56.21.67" dst_port="11941"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.101.206.244" dst_port="63217"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="199.56.141.187" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="52.35.150.236"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.101.8.205" dst_port="11935"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="174.50.161.13" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="198.53.177.157"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.48.6.251" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.184.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.180.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="24.217.169.156" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="48.57.108.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.30.150.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.101.150.1" dst_port="53"/>
            <filter src_ip="198.53.177.119" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="24.40.44.182" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.177.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.177.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.185.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.212.227" dst_ip="30.11.46.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.155.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.182.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.53.176.233" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.180.64" src_port="40515"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.40.173" src_port="41009"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.150.252.90"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.101.38.239" src_port="8090"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.48.59.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.98" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.56.19.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.50.76.151" src_port="8090"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.188.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.91.124" src_port="20859" dst_port="4672"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.56.27.101" src_port="24498"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.177.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,999,0 0 0 1 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.34.116.63" dst_ip="29.209.133.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014854"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.4.6.64" dst_ip="174.50.241.63" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.50.42.45" dst_ip="203.57.189.206" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="174.50.241.63" dst_ip="138.153.133.27" src_port="123"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="174.50.241.63" dst_ip="198.59.130.189" src_port="123"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.451602,1.328640,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.180.64" dst_port="40515"/>
        </slice>
        <from usec="0" sec="1310015025"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.150.39" dst_port="80"/>
            <filter src_ip="169.34.150.39" dst_ip="31.185.236.59" dst_port="443"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,011,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.64.112.8"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.53.34" src_port="50640"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.63" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,999,0 0 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.34.64.154" src_port="123"/>
            <filter src_ip="174.50.241.63" src_port="123"/>
            <filter src_ip="174.50.241.63" dst_port="123"/>
            <filter src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="60.184.131.165" src_port="27262"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.205.135" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.155.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.155.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.166.180" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.130.34.176" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.56.19.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.96.70" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.96" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="199.142.153.155" dst_ip="10.64.17.12" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.34.202.10" dst_ip="174.219.218.17" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.101.151.54" dst_ip="182.31.208.227" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.74.175" dst_ip="204.100.192.126" src_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="22"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="110"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.4.6.64" dst_ip="174.50.241.63" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="6.137.179.226" src_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="3306"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter dst_port="53"/>
            <filter src_ip="174.50.85.234" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.85.235" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.13.223.69" src_port="80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,011,0 0 0 1 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.53.184.57"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.225.70" src_port="39836"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,999,0 0 0 1 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.101.206.244" src_port="63217"/>
        </slice>
        <from usec="0" sec="1310014813"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.63" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.167.63.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="60.184.131.165" src_port="27262"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.121.197.97" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.205.135" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.155.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.166.180" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.130.34.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.98" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.101.176.195" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="194.20.117.96" src_port="53"/>
            <filter dst_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.156.181" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.101.151.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,502,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="84.171.91.136" dst_port="22"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="22"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="149.101.10.90" dst_ip="129.200.127.58" dst_port="110"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.74.179.90" dst_ip="198.53.179.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="6.137.179.226" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="199.56.141.187" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,011,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.96.89.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="6.0.12.254" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.101.66.48" dst_ip="203.57.188.126" dst_port="80"/>
            <filter src_ip="149.101.66.48" dst_ip="203.57.189.85" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,502,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="61.67.92.178" dst_port="22"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="3306"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.226.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.50.77.33" dst_ip="38.214.161.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.160.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.538985,1.309150,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="20.134.168.45" src_port="6000"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="117.91.189.114" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="117.91.187.36" src_port="80"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.12.57" dst_port="27960"/>
        </slice>
        <from usec="0" sec="1310015610"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.184.56" src_port="4877" dst_port="4877"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015656"/>
    </anomaly>
    <anomaly type="notice" value="0.702134,1.345620,999,0 0 0 0 0 0 0 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.53.188.128" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.702134,1.345620,999,0 0 0 0 0 0 0 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="182.120.178.56" src_port="8090" dst_port="64729"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.702134,1.345620,011,0 0 0 0 0 0 0 1 1 0 0 0,malphfl">
        <slice>
            <filter src_ip="60.55.0.219" dst_ip="198.53.184.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,053,0 0 0 0 0 0 1 1 1 0 0 0,point_to_point">
        <slice>
            <filter src_ip="199.56.141.91" dst_ip="217.98.126.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.48.36.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="221.14.183.154" dst_ip="174.50.241.63" dst_port="123"/>
            <filter src_ip="14.4.6.64" dst_ip="174.50.241.63" dst_port="123"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014846"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICec">
        <slice>
            <filter src_ip="8.238.162.137"/>
        </slice>
        <from usec="0" sec="1310014890"/>
        <to usec="0" sec="1310015071"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICec">
        <slice>
            <filter src_ip="13.150.252.90"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.748962,1.352980,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="199.56.141.91" dst_ip="133.68.154.2" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310015441"/>
        <to usec="0" sec="1310015571"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="198.53.176.237" dst_port="53"/>
            <filter src_ip="198.53.176.237"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.225.42" src_port="20572" dst_port="4672"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.63" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.34.116.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,504,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.34.156.176" dst_port="443"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.101.150.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,504,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.34.129.144" dst_ip="84.96.218.146" dst_port="443"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="199.56.141.187" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,011,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="221.96.89.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.34.21.107" dst_ip="199.58.217.36" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.53.181.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="135"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015026"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_port="5060" dst_port="5060"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter src_ip="174.50.166.38"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICec">
        <slice>
            <filter src_ip="8.238.162.137"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.50.161.8" src_port="25"/>
            <filter src_ip="174.50.161.8" dst_port="25"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="149.101.230.81" src_port="55460"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.56.19.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.20.116.209" src_port="53"/>
        </slice>
        <from usec="0" sec="1310014980"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,010,0 0 0 0 0 0 1 1 1 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="197.98.148.235" dst_port="135"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.85.235" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="174.50.161.11"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="174.130.184.21"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.101.206.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.101.11.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="22.96.37.109" dst_ip="149.101.133.182" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="155.149.23.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="199.56.2.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.138.190.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.790851,1.288410,503,0 0 0 1 0 0 1 0 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="198.53.181.212" dst_port="80"/>
            <filter dst_ip="155.95.66.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310014883"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="194.228.78.226"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="195.0.61.19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="213.198.248.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.7.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="30.10.220.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.651152,1.294990,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.34.128.181" dst_port="80"/>
            <filter src_ip="169.34.128.181" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310015565"/>
        <to usec="0" sec="1310015611"/>
    </anomaly>
    <anomaly type="notice" value="0.822636,1.343080,020,0 0 0 0 0 0 0 0 0 1 0 0,ntscICecrqICecrqdurmterp">
        <slice>
            <filter dst_ip="8.238.162.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.843805,1.268300,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.50.161.98" dst_port="53"/>
        </slice>
        <from usec="0" sec="1310014800"/>
        <to usec="0" sec="1310015627"/>
    </anomaly>
</admd:annotation>
