<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.105.111.79" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.64.155.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="204.64.154.159" dst_port="10643"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="204.64.154.159" dst_port="18209"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="204.64.154.159" dst_port="27190"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.64.154.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="205.114.128.178" dst_port="10834"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="205.114.128.178" dst_port="13077"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="205.114.128.178" dst_port="13740"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.240.192.204"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318222937"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="168.147.119.91"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318222937"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.64.155.95"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318222937"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.64.156.230"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318222937"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.240.214.153" dst_port="55430"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.858610,1.288180,010,1 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="204.64.154.159"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="204.64.154.130"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="106.67.178.219" src_port="123"/>
        </slice>
        <from usec="0" sec="1318222936"/>
        <to usec="0" sec="1318222982"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="205.114.36.57" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.47.17.101"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.122.226.56"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.41.229.38"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.157.78.149"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.105.110.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="146.136.253.28"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.114.38.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="205.122.227.106" dst_ip="196.166.72.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.114.153.19" dst_ip="120.2.58.156"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223252"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.64.144.66"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.114.128.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.161.197.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.105.66.206"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.157.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223071"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.157.75" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.157.72"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.114.144.176"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="41.222.101.233" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.114.141.88"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.64.152.91"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.114.128.181" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318222891"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.114.141.88" src_port="24498"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.105.110.127" src_port="53"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.114.38.45" src_port="53"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223387"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.157.18.170"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.213.219.147" src_port="64720"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.114.128.15" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.213.68.82" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.213.68.80"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.64.157.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.105.197.42" src_port="58637"/>
            <filter src_ip="137.105.197.42" src_port="27005"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="87.136.186.103"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.858610,1.288180,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.20.32.73" src_port="2425" dst_port="2425"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="123.1.255.160"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.114.38.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.64.155.95"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.114.141.93"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.213.194.108" src_port="53"/>
        </slice>
        <from usec="0" sec="1318223206"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="176.213.135.144"/>
        </slice>
        <from usec="0" sec="1318223386"/>
        <to usec="0" sec="1318223432"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.105.110.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223611"/>
        <to usec="0" sec="1318223657"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.114.145.24" src_port="10046"/>
        </slice>
        <from usec="0" sec="1318223611"/>
        <to usec="0" sec="1318223657"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.9.64.68"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.114.128.15" src_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="168.147.119.91"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.155.164" dst_port="58228"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.105.110.127"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,020,0 0 0 0 0 0 1 0 0 0 0 0,DDoSIC">
        <slice>
            <filter dst_ip="204.64.157.0"/>
        </slice>
        <from usec="0" sec="1318223341"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.105.198.205"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.114.145.24"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="180.157.42.246"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.64.154.159" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.161.197.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.64.154.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="194.4.22.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.157.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.157.75" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.145.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.64.145.16" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="205.123.7.232" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,011,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="41.222.101.233" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.390134,1.220790,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.114.128.178" dst_port="80"/>
        </slice>
        <from usec="0" sec="1318223656"/>
        <to usec="0" sec="1318223702"/>
    </anomaly>
    <anomaly type="notice" value="0.796192,1.309710,503,0 0 0 0 0 0 0 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.105.66.205"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.727890,1.274920,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="176.213.68.12" src_port="53"/>
            <filter src_ip="176.213.68.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.727890,1.274920,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="205.114.38.45" dst_port="53"/>
        </slice>
        <from usec="0" sec="1318222801"/>
        <to usec="0" sec="1318222847"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.157.46.236"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.157.123.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.529213,1.184570,010,0 0 0 0 0 0 1 0 0 1 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="205.122.227.106" dst_ip="196.166.72.44" dst_port="80"/>
            <filter src_ip="204.64.145.35" dst_ip="196.166.72.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.73.33.109"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.529213,1.184570,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="205.114.144.100" dst_port="39947"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="35.216.43.81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.40.178.233"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.40.178.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="180.157.123.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.105.66.194"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.105.66.192"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.105.196.50" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.105.197.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="31.133.17.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="128.165.214.175"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.84.81.150"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.181.225.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.181.225.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.181.225.47"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="58.183.252.198"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="74.24.49.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="73.114.53.157"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.619810,1.221930,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="73.114.57.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
