<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.121.116.231"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="193.118.5.216"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.121.117.117" src_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.186.189.11" src_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="69.66.8.24" src_port="6020"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="193.118.1.155" dst_ip="216.3.163.133"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.212.130.122" dst_ip="201.120.240.205" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.150.29.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.66.48.130" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="150.66.48.128" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.150.18.94" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="205.15.2.71" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="44.217.198.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.118.5.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="2425" dst_port="2425"/>
        </slice>
        <from usec="0" sec="1325394090"/>
        <to usec="0" sec="1325394136"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.150.18.88" src_port="53"/>
            <filter dst_ip="192.150.18.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394315"/>
        <to usec="0" sec="1325394361"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="193.118.235.166" dst_port="16866"/>
        </slice>
        <from usec="0" sec="1325394315"/>
        <to usec="0" sec="1325394361"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="133.140.225.58"/>
        </slice>
        <from usec="0" sec="1325394540"/>
        <to usec="0" sec="1325394586"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.118.1.155" dst_ip="139.214.80.56"/>
        </slice>
        <from usec="0" sec="1325394675"/>
        <to usec="0" sec="1325394721"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.150.28.79" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394810"/>
        <to usec="0" sec="1325394856"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.118.1.155" dst_ip="139.214.80.56"/>
        </slice>
        <from usec="0" sec="1325394810"/>
        <to usec="0" sec="1325394856"/>
    </anomaly>
    <anomaly type="notice" value="0.475122,0.850501,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="193.118.1.155" dst_ip="216.3.163.133"/>
        </slice>
        <from usec="0" sec="1325394810"/>
        <to usec="0" sec="1325394856"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="208.109.20.239"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.150.20.187"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.54.4.215" src_port="39021"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,020,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.150.19.150" dst_ip="198.206.226.196" dst_port="53"/>
            <filter src_ip="192.150.19.150"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.121.108.59" dst_ip="76.59.14.35" dst_port="53"/>
            <filter src_ip="193.121.108.59" dst_ip="77.28.27.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.150.29.186" src_port="23269"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.54.32.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="45.12.56.167" src_port="6031"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.150.18.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,010,0 0 0 0 0 0 1 1 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="12.236.206.97" src_port="80"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.54.32.220" src_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.150.21.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.121.116.241" src_port="8080"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,010,0 0 0 0 0 0 1 1 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="193.121.116.241" dst_ip="205.15.2.71" dst_port="80"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.54.85.231" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.54.208.101" src_port="53"/>
        </slice>
        <from usec="0" sec="1325394000"/>
        <to usec="0" sec="1325394046"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="150.66.10.46" src_port="53"/>
        </slice>
        <from usec="0" sec="1325394315"/>
        <to usec="0" sec="1325394361"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.150.28.112" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394315"/>
        <to usec="0" sec="1325394361"/>
    </anomaly>
    <anomaly type="notice" value="0.532909,0.807222,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.118.5.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1325394315"/>
        <to usec="0" sec="1325394361"/>
    </anomaly>
</admd:annotation>
