<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.478719,1.051750,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666739"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.93.138.176"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666109"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="12.238.178.10"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666109"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.51.165.3"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666108"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="181.0.164.93"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666455"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.182.169"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666102"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.93.32.97"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666109"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="210.196.73.47"/>
        </slice>
        <from usec="0" sec="1323666002"/>
        <to usec="0" sec="1323666109"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="13.168.234.126"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666105"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.50.158.152"/>
        </slice>
        <from usec="0" sec="1323666006"/>
        <to usec="0" sec="1323666098"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.3.68.123"/>
        </slice>
        <from usec="0" sec="1323666014"/>
        <to usec="0" sec="1323666100"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="104.16.29.4"/>
        </slice>
        <from usec="0" sec="1323666020"/>
        <to usec="0" sec="1323666098"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.83.171.133"/>
        </slice>
        <from usec="0" sec="1323666025"/>
        <to usec="0" sec="1323666093"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="181.0.193.0"/>
        </slice>
        <from usec="0" sec="1323666034"/>
        <to usec="0" sec="1323666054"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.84.246.191"/>
        </slice>
        <from usec="0" sec="1323666100"/>
        <to usec="0" sec="1323666109"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="88.225.150.33"/>
        </slice>
        <from usec="0" sec="1323666076"/>
        <to usec="0" sec="1323666112"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.83.174.86"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666270"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="177.219.137.113"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666285"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,010,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.219.210.210"/>
        </slice>
        <from usec="0" sec="1323666002"/>
        <to usec="0" sec="1323666289"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.234.193.152"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666289"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="82.195.73.100"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666287"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.63.177.9"/>
        </slice>
        <from usec="0" sec="1323666006"/>
        <to usec="0" sec="1323666284"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.93.86.161"/>
        </slice>
        <from usec="0" sec="1323666013"/>
        <to usec="0" sec="1323666287"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="212.44.105.39"/>
        </slice>
        <from usec="0" sec="1323666227"/>
        <to usec="0" sec="1323666274"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.87.82.123"/>
        </slice>
        <from usec="0" sec="1323666256"/>
        <to usec="0" sec="1323666342"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.122.73.55"/>
        </slice>
        <from usec="0" sec="1323666280"/>
        <to usec="0" sec="1323666289"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.105.21.231" dst_ip="200.63.6.183" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666828"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="82.234.45.55"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666377"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="181.0.164.70"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666377"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.83.165.149"/>
        </slice>
        <from usec="0" sec="1323666002"/>
        <to usec="0" sec="1323666379"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="40.129.101.101"/>
        </slice>
        <from usec="0" sec="1323666008"/>
        <to usec="0" sec="1323666342"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="2.72.131.199"/>
        </slice>
        <from usec="0" sec="1323666010"/>
        <to usec="0" sec="1323666377"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="177.219.208.77"/>
        </slice>
        <from usec="0" sec="1323666013"/>
        <to usec="0" sec="1323666351"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.141.10"/>
        </slice>
        <from usec="0" sec="1323666032"/>
        <to usec="0" sec="1323666372"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="181.0.135.164"/>
        </slice>
        <from usec="0" sec="1323666146"/>
        <to usec="0" sec="1323666379"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="177.219.210.37"/>
        </slice>
        <from usec="0" sec="1323666193"/>
        <to usec="0" sec="1323666261"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.72.218.198"/>
        </slice>
        <from usec="0" sec="1323666203"/>
        <to usec="0" sec="1323666217"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="214.89.107.84"/>
        </slice>
        <from usec="0" sec="1323666325"/>
        <to usec="0" sec="1323666375"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.219.164.111"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666445"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.63.176.192"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666469"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.177.9"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666444"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="180.39.220.188"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666469"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.93.210.245"/>
        </slice>
        <from usec="0" sec="1323666017"/>
        <to usec="0" sec="1323666456"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.93.244.104"/>
        </slice>
        <from usec="0" sec="1323666017"/>
        <to usec="0" sec="1323666469"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="177.219.160.96"/>
        </slice>
        <from usec="0" sec="1323666018"/>
        <to usec="0" sec="1323666442"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.219.221.73"/>
        </slice>
        <from usec="0" sec="1323666019"/>
        <to usec="0" sec="1323666445"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="181.0.54.245"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666559"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.83.168.54" src_port="53"/>
            <filter dst_ip="201.83.168.54" src_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666559"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.93.244.55"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666546"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.93.47.205"/>
        </slice>
        <from usec="0" sec="1323666007"/>
        <to usec="0" sec="1323666554"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.1.133.178"/>
        </slice>
        <from usec="0" sec="1323666039"/>
        <to usec="0" sec="1323666439"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="177.219.138.204"/>
        </slice>
        <from usec="0" sec="1323666094"/>
        <to usec="0" sec="1323666557"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.180.194.164"/>
        </slice>
        <from usec="0" sec="1323666186"/>
        <to usec="0" sec="1323666547"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="32.1.111.235"/>
        </slice>
        <from usec="0" sec="1323666431"/>
        <to usec="0" sec="1323666453"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="147.210.142.152"/>
        </slice>
        <from usec="0" sec="1323666489"/>
        <to usec="0" sec="1323666559"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="1.65.167.13"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666649"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="58.103.170.157"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666606"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="216.250.136.72"/>
        </slice>
        <from usec="0" sec="1323666445"/>
        <to usec="0" sec="1323666645"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="181.0.97.154"/>
        </slice>
        <from usec="0" sec="1323666457"/>
        <to usec="0" sec="1323666637"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="177.219.138.189"/>
        </slice>
        <from usec="0" sec="1323666505"/>
        <to usec="0" sec="1323666643"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="106.184.45.136"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666739"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="32.245.161.174"/>
        </slice>
        <from usec="0" sec="1323666004"/>
        <to usec="0" sec="1323666739"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="177.51.166.217"/>
        </slice>
        <from usec="0" sec="1323666034"/>
        <to usec="0" sec="1323666717"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="181.0.135.142"/>
        </slice>
        <from usec="0" sec="1323666449"/>
        <to usec="0" sec="1323666739"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="136.160.187.47"/>
        </slice>
        <from usec="0" sec="1323666616"/>
        <to usec="0" sec="1323666665"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="52.219.117.15"/>
        </slice>
        <from usec="0" sec="1323666664"/>
        <to usec="0" sec="1323666677"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="61.42.99.237"/>
        </slice>
        <from usec="0" sec="1323666682"/>
        <to usec="0" sec="1323666689"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="24.62.141.52"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666829"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="177.51.198.22"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666802"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.93.0.193" src_port="80"/>
        </slice>
        <from usec="0" sec="1323666002"/>
        <to usec="0" sec="1323666823"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="181.0.198.64"/>
        </slice>
        <from usec="0" sec="1323666022"/>
        <to usec="0" sec="1323666823"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="177.219.214.142"/>
        </slice>
        <from usec="0" sec="1323666037"/>
        <to usec="0" sec="1323666824"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.27.40.114"/>
        </slice>
        <from usec="0" sec="1323666054"/>
        <to usec="0" sec="1323666814"/>
    </anomaly>
    <anomaly type="notice" value="0.478719,1.051750,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="181.0.135.193"/>
        </slice>
        <from usec="0" sec="1323666528"/>
        <to usec="0" sec="1323666809"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="152.93.208.235"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.211.196"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="177.219.151.54"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.138.214"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="201.83.168.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="181.0.172.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="200.51.35.51" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.51.34.73" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,503,0 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="200.63.0.133" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.214.37.117" src_port="80" dst_port="1024"/>
            <filter src_ip="145.214.37.117" src_port="80" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="177.219.136.93" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.82.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.63.0.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666181"/>
        <to usec="0" sec="1323666227"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.20.32.48" src_port="2425"/>
        </slice>
        <from usec="0" sec="1323666181"/>
        <to usec="0" sec="1323666227"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.83.160.102"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="181.0.172.80"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="5.42.68.207" dst_ip="177.219.180.5" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="17.94.165.166" src_port="80"/>
        </slice>
        <from usec="0" sec="1323666676"/>
        <to usec="0" sec="1323666722"/>
    </anomaly>
    <anomaly type="notice" value="0.538760,1.051920,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.208.140" src_port="16188"/>
        </slice>
        <from usec="0" sec="1323666766"/>
        <to usec="0" sec="1323666812"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.63.181.54" src_port="50001"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.211.164" src_port="51241"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.63.177.6" src_port="1863" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.219.180.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.83.172.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.83.165.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="152.93.101.238" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.63.0.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.83.168.113" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,503,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="181.0.135.193" dst_ip="147.225.98.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.83.173.72" dst_ip="204.74.39.61" dst_port="53"/>
            <filter src_ip="201.83.173.72" dst_ip="196.195.114.137" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.83.162.210" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666047"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,010,0 0 0 0 0 0 1 1 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="201.83.162.211" dst_ip="214.59.78.29" dst_port="53"/>
            <filter src_ip="201.83.162.211" dst_ip="214.59.78.29" dst_port="80"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="200.168.110.199" dst_ip="10.5.100.10" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666001"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.63.184.191" src_port="53"/>
            <filter src_ip="14.167.177.22" dst_ip="200.63.184.191" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.167.177.22" dst_ip="200.63.184.184" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.167.177.22" dst_ip="200.51.5.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="80.114.5.222" dst_ip="181.0.97.169" src_port="80"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.63.0.162" src_port="53"/>
            <filter src_ip="14.167.177.22" dst_ip="200.63.0.162" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.63.0.138" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.167.177.22" dst_ip="200.63.0.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.63.181.122" src_port="8090" dst_port="1541"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.83.168.113" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="14.167.177.22" dst_ip="201.83.171.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="14.167.177.22" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666677"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,503,0 0 0 0 0 0 1 1 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="147.246.89.74" dst_ip="177.51.101.131" src_port="80"/>
            <filter src_ip="147.246.89.70" dst_ip="177.51.101.131" src_port="80"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666632"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.199.233.230" dst_ip="192.194.170.50" dst_port="53"/>
        </slice>
        <from usec="0" sec="1323666586"/>
        <to usec="0" sec="1323666767"/>
    </anomaly>
    <anomaly type="notice" value="0.719805,1.084160,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.63.184.191" src_port="53"/>
        </slice>
        <from usec="0" sec="1323666676"/>
        <to usec="0" sec="1323666767"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="27.40.161.77"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="177.51.169.249"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="132.113.203.25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="29.180.155.117"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="181.0.169.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="181.0.33.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="154.219.37.18"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.3.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.211.68" src_port="80"/>
            <filter dst_ip="152.93.211.68" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.208.132"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.93.227.120"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.63.2.39" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.83.163.54"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.675655,1.055090,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="213.130.23.57"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
