<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.15.165.24" src_port="6882"/>
        </slice>
        <from usec="0" sec="1312780320"/>
        <to usec="0" sec="1312780366"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.1.16.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="131.41.98.154" src_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="131.41.83.14" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="124.213.104.183" dst_port="443"/>
        </slice>
        <from usec="0" sec="1312779690"/>
        <to usec="0" sec="1312779736"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="196.232.242.88"/>
        </slice>
        <from usec="0" sec="1312779690"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="138.223.0.20"/>
        </slice>
        <from usec="0" sec="1312779915"/>
        <to usec="0" sec="1312779961"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="56.48.18.234"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="192.244.44.45" dst_ip="128.1.16.90" src_port="53"/>
        </slice>
        <from usec="0" sec="1312779690"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="131.41.98.144"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="168.55.115.154" src_port="53"/>
            <filter dst_ip="201.207.62.238" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312780140"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.232.252.108" src_port="53"/>
            <filter dst_ip="196.232.252.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="86.237.78.9"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.232.240.69" dst_port="41020"/>
            <filter dst_ip="196.232.240.69" dst_port="60000"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter src_ip="200.109.137.7" dst_ip="196.232.250.192"/>
            <filter dst_ip="196.232.250.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.166.175"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.91.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312780185"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.21.182"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.55.191.42"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.252.116"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="168.55.163.32" dst_ip="221.87.64.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.232.248.0"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.62.110"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.55.17.69"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.232.253.133"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.238.51" src_port="53"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.110.104" src_port="53"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.232.249.116" src_port="80"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="138.223.0.20" src_port="80"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="63.17.117.90" src_port="80"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.141.215" dst_port="27960"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780366"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="196.232.242.80" src_port="6881"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780366"/>
    </anomaly>
    <anomaly type="notice" value="0.498525,1.177450,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.242.80" src_port="6882"/>
        </slice>
        <from usec="0" sec="1312780275"/>
        <to usec="0" sec="1312780366"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.60.9" src_port="56854"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.1.107.160" dst_port="80"/>
            <filter src_ip="174.1.107.160" dst_port="443"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.55.47.133" src_port="55763"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312780321"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.49.136" src_port="36922"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.194.235" src_port="59756"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.206.234" dst_port="6346"/>
            <filter src_ip="174.1.206.234" dst_ip="14.179.69.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscICec">
        <slice>
            <filter src_ip="31.8.47.176"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="174.1.28.112" src_port="59623"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.238.51" src_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.238.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.0.57.58" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.21.165" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.110.104" src_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.110.104" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.91.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,011,0 0 0 0 0 0 1 1 1 0 0 0,DDoSRSTrp">
        <slice>
            <filter src_ip="196.232.242.88"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779736"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.162.22.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.162.22.38" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="179.162.244.93" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.191.41" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.191.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.103.97" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,011,0 0 0 0 0 0 1 1 1 0 0 0,DDoSRSTrp">
        <slice>
            <filter src_ip="196.232.249.116"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.252.116" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="60.195.165.79" src_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="131.41.82.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.244.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="174.1.114.140" dst_ip="219.225.123.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.239.83.140" src_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.191.77" src_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.191.77" dst_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ptmp">
        <slice>
            <filter src_ip="168.55.191.72" src_port="25"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="168.55.3.189" dst_ip="204.216.227.138" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,010,0 0 0 0 0 0 1 1 1 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="193.38.177.95" src_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,503,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.232.253.209" src_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,503,0 0 0 0 0 0 1 1 1 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="131.41.37.211" dst_ip="208.29.127.224" dst_port="80"/>
            <filter src_ip="131.41.37.211" dst_ip="208.30.220.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.115.154" src_port="53"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="174.1.206.23" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.242.80" src_port="4878" dst_port="4878"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="196.232.242.81" src_port="4878" dst_port="4878"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,011,0 0 0 0 0 0 1 1 1 0 0 0,DDoSRSTrp">
        <slice>
            <filter src_ip="196.232.249.105"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779961"/>
    </anomaly>
    <anomaly type="notice" value="0.803210,1.244310,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="168.55.202.115" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.636418,1.194880,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="54.89.186.30"/>
        </slice>
        <from usec="0" sec="1312780230"/>
        <to usec="0" sec="1312780276"/>
    </anomaly>
    <anomaly type="notice" value="0.712174,1.248210,999,0 0 0 0 0 0 0 0 1 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="131.41.241.134"/>
        </slice>
        <from usec="0" sec="1312779600"/>
        <to usec="0" sec="1312779646"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="51.84.13.140"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="174.1.106.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="174.1.160.28"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="181.147.39.116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="138.189.24.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="204.230.40.248"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.232.248.68"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.225.123.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="90.32.167.185"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.525791,1.121000,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="196.232.242.80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="17.133.217.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="49.229.38.204"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="54.97.136.141"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="174.1.201.8"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="131.41.138.100"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="131.41.128.171"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="136.197.108.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="136.197.105.44"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,010,0 0 0 0 0 0 0 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.0.101"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.41.75.102"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.0.24.79" src_port="80"/>
            <filter dst_ip="197.0.24.79" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.0.24.97"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.525791,1.121000,503,0 0 0 0 0 0 1 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.84.247.87" dst_ip="196.232.253.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.657994,1.139290,010,0 0 0 0 0 0 1 1 0 1 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="196.232.249.116"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="194.174.142.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="216.147.213.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.178.97.164"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.21.77.157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="168.55.2.251" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="12.69.133.137"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.69.133.186"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="12.69.132.220"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="13.214.133.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.543140,1.143550,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="2.35.176.187"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
