<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="140.230.91.209"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750908"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="200.249.57.176"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750908"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="60.148.209.47"/>
        </slice>
        <from usec="0" sec="1330750811"/>
        <to usec="0" sec="1330750868"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.8.41"/>
        </slice>
        <from usec="0" sec="1330750817"/>
        <to usec="0" sec="1330750904"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.190.49"/>
        </slice>
        <from usec="0" sec="1330750818"/>
        <to usec="0" sec="1330750891"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.218.186.72"/>
        </slice>
        <from usec="0" sec="1330750824"/>
        <to usec="0" sec="1330750908"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.76.69.111"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750990"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="85.226.9.38"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="140.230.172.42"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330750941"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.45.8.147"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.226.23"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330750968"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="77.145.146.39"/>
        </slice>
        <from usec="0" sec="1330750803"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="35.66.33.217"/>
        </slice>
        <from usec="0" sec="1330750803"/>
        <to usec="0" sec="1330750940"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.69.44.121"/>
        </slice>
        <from usec="0" sec="1330750805"/>
        <to usec="0" sec="1330750984"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="82.229.215.52"/>
        </slice>
        <from usec="0" sec="1330750813"/>
        <to usec="0" sec="1330750819"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="35.120.158.171"/>
        </slice>
        <from usec="0" sec="1330750817"/>
        <to usec="0" sec="1330750995"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="2.180.197.47"/>
        </slice>
        <from usec="0" sec="1330750824"/>
        <to usec="0" sec="1330750961"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="117.15.38.209"/>
        </slice>
        <from usec="0" sec="1330750845"/>
        <to usec="0" sec="1330750951"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="211.12.229.121"/>
        </slice>
        <from usec="0" sec="1330750967"/>
        <to usec="0" sec="1330750984"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="82.101.65.126"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.96.218.239" dst_port="443"/>
            <filter dst_ip="196.96.218.239" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751087"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="81.204.23.229"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751068"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.76.157.201"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751087"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="80.181.152.18"/>
        </slice>
        <from usec="0" sec="1330750807"/>
        <to usec="0" sec="1330750931"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="37.20.177.144"/>
        </slice>
        <from usec="0" sec="1330750832"/>
        <to usec="0" sec="1330751065"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.7.11.147"/>
        </slice>
        <from usec="0" sec="1330750992"/>
        <to usec="0" sec="1330751058"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="140.230.242.6"/>
        </slice>
        <from usec="0" sec="1330751012"/>
        <to usec="0" sec="1330751072"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="200.46.76.82"/>
        </slice>
        <from usec="0" sec="1330751015"/>
        <to usec="0" sec="1330751020"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="84.151.184.54"/>
        </slice>
        <from usec="0" sec="1330751080"/>
        <to usec="0" sec="1330751088"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="38.9.105.71"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751178"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.111.111.200"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.112.48.131"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751175"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="13.133.66.76"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751178"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.71.3"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751169"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.76.106.208"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751178"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.76.69.116"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751023"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="35.120.158.181"/>
        </slice>
        <from usec="0" sec="1330750829"/>
        <to usec="0" sec="1330751172"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.160.38"/>
        </slice>
        <from usec="0" sec="1330750832"/>
        <to usec="0" sec="1330751178"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.145.9.71"/>
        </slice>
        <from usec="0" sec="1330750861"/>
        <to usec="0" sec="1330751019"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.109"/>
        </slice>
        <from usec="0" sec="1330751007"/>
        <to usec="0" sec="1330751220"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="149.140.72.123"/>
        </slice>
        <from usec="0" sec="1330751035"/>
        <to usec="0" sec="1330751051"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="148.179.20.5"/>
        </slice>
        <from usec="0" sec="1330751066"/>
        <to usec="0" sec="1330751171"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscTCPTCPICrp">
        <slice>
            <filter dst_ip="104.130.187.63"/>
        </slice>
        <from usec="0" sec="1330751085"/>
        <to usec="0" sec="1330751151"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.7.11.66"/>
        </slice>
        <from usec="0" sec="1330751167"/>
        <to usec="0" sec="1330751176"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="107.140.251.144"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="201.218.160.70" dst_port="25"/>
            <filter dst_ip="201.218.160.70" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751267"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.45.137.172"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="111.37.199.249"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.76.70.232"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.48.114.64"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751242"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="99.94.43.1"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751262"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="172.172.64.101" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="80.181.154.80"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751258"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="110.226.39.104"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751264"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="91.112.88.18"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751358"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.45.240.21"/>
        </slice>
        <from usec="0" sec="1330750803"/>
        <to usec="0" sec="1330751266"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="197.112.34.1"/>
        </slice>
        <from usec="0" sec="1330750803"/>
        <to usec="0" sec="1330751265"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.5.72"/>
        </slice>
        <from usec="0" sec="1330750804"/>
        <to usec="0" sec="1330751239"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.76.69.78" src_port="80"/>
            <filter dst_ip="142.76.69.78" dst_port="35963"/>
        </slice>
        <from usec="0" sec="1330750805"/>
        <to usec="0" sec="1330751257"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.152"/>
        </slice>
        <from usec="0" sec="1330751358"/>
        <to usec="0" sec="1330751603"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.76.84.35"/>
        </slice>
        <from usec="0" sec="1330750806"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.187"/>
        </slice>
        <from usec="0" sec="1330750814"/>
        <to usec="0" sec="1330751252"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.192.79.128"/>
        </slice>
        <from usec="0" sec="1330750817"/>
        <to usec="0" sec="1330751243"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.214.230.198"/>
        </slice>
        <from usec="0" sec="1330750818"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="112.78.192.16"/>
        </slice>
        <from usec="0" sec="1330750819"/>
        <to usec="0" sec="1330751228"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.69.33.194"/>
        </slice>
        <from usec="0" sec="1330750833"/>
        <to usec="0" sec="1330751190"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.149.80.153"/>
        </slice>
        <from usec="0" sec="1330750844"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.115.192"/>
        </slice>
        <from usec="0" sec="1330750851"/>
        <to usec="0" sec="1330751264"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.42.155.196"/>
        </slice>
        <from usec="0" sec="1330750857"/>
        <to usec="0" sec="1330751248"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="35.120.158.195"/>
        </slice>
        <from usec="0" sec="1330750858"/>
        <to usec="0" sec="1330751250"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="105.5.221.255"/>
        </slice>
        <from usec="0" sec="1330750860"/>
        <to usec="0" sec="1330751264"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="214.34.217.56"/>
        </slice>
        <from usec="0" sec="1330750968"/>
        <to usec="0" sec="1330751240"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="156.67.123.48"/>
        </slice>
        <from usec="0" sec="1330750975"/>
        <to usec="0" sec="1330751194"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.39.14.144"/>
        </slice>
        <from usec="0" sec="1330751026"/>
        <to usec="0" sec="1330751112"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.176.33"/>
        </slice>
        <from usec="0" sec="1330751065"/>
        <to usec="0" sec="1330751184"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="104.27.109.87"/>
        </slice>
        <from usec="0" sec="1330751088"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="101.190.90.107"/>
        </slice>
        <from usec="0" sec="1330751113"/>
        <to usec="0" sec="1330751626"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.7.11.72"/>
        </slice>
        <from usec="0" sec="1330751122"/>
        <to usec="0" sec="1330751168"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.7.11.74"/>
        </slice>
        <from usec="0" sec="1330751123"/>
        <to usec="0" sec="1330751237"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.8.42"/>
        </slice>
        <from usec="0" sec="1330751124"/>
        <to usec="0" sec="1330751197"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="106.74.162.206"/>
        </slice>
        <from usec="0" sec="1330751187"/>
        <to usec="0" sec="1330751193"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="2.180.211.230"/>
        </slice>
        <from usec="0" sec="1330751189"/>
        <to usec="0" sec="1330751251"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.139.145.192"/>
        </slice>
        <from usec="0" sec="1330751200"/>
        <to usec="0" sec="1330751206"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter dst_ip="221.102.50.35"/>
        </slice>
        <from usec="0" sec="1330751227"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="80.2.76.120"/>
        </slice>
        <from usec="0" sec="1330751243"/>
        <to usec="0" sec="1330751250"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="172.159.88.186"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751358"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.112.135.76"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751358"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="160.108.194.227"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751341"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="142.76.208.139"/>
        </slice>
        <from usec="0" sec="1330750806"/>
        <to usec="0" sec="1330751355"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.76.15.3"/>
        </slice>
        <from usec="0" sec="1330750807"/>
        <to usec="0" sec="1330751531"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.131.127.139"/>
        </slice>
        <from usec="0" sec="1330750807"/>
        <to usec="0" sec="1330751537"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.116"/>
        </slice>
        <from usec="0" sec="1330750895"/>
        <to usec="0" sec="1330751340"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.129.131.176"/>
        </slice>
        <from usec="0" sec="1330751029"/>
        <to usec="0" sec="1330751207"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="98.235.132.98"/>
        </slice>
        <from usec="0" sec="1330751067"/>
        <to usec="0" sec="1330751358"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.45.198.17"/>
        </slice>
        <from usec="0" sec="1330751077"/>
        <to usec="0" sec="1330751341"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.234.88"/>
        </slice>
        <from usec="0" sec="1330751101"/>
        <to usec="0" sec="1330751357"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="30.106.61.95"/>
        </slice>
        <from usec="0" sec="1330751132"/>
        <to usec="0" sec="1330751331"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="32.169.186.8"/>
        </slice>
        <from usec="0" sec="1330751151"/>
        <to usec="0" sec="1330751414"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.217.98.89"/>
        </slice>
        <from usec="0" sec="1330751253"/>
        <to usec="0" sec="1330751355"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="206.2.44.180"/>
        </slice>
        <from usec="0" sec="1330751270"/>
        <to usec="0" sec="1330751514"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.76.116.124"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751448"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="73.184.108.236"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751431"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.178.108.119"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751421"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.55.100.115"/>
        </slice>
        <from usec="0" sec="1330750806"/>
        <to usec="0" sec="1330751442"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.93.163.243"/>
        </slice>
        <from usec="0" sec="1330750869"/>
        <to usec="0" sec="1330751436"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="129.210.228.117"/>
        </slice>
        <from usec="0" sec="1330751416"/>
        <to usec="0" sec="1330751447"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.7.11.22"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751436"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.159.99.174"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751538"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,010,0 0 0 1 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="176.73.8.176"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751538"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="83.47.206.176"/>
        </slice>
        <from usec="0" sec="1330750804"/>
        <to usec="0" sec="1330751486"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="117.247.119.28"/>
        </slice>
        <from usec="0" sec="1330750816"/>
        <to usec="0" sec="1330751532"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.24"/>
        </slice>
        <from usec="0" sec="1330750835"/>
        <to usec="0" sec="1330751531"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="116.200.137.80"/>
        </slice>
        <from usec="0" sec="1330751089"/>
        <to usec="0" sec="1330751513"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="215.205.163.75"/>
        </slice>
        <from usec="0" sec="1330751155"/>
        <to usec="0" sec="1330751538"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="140.230.245.32"/>
        </slice>
        <from usec="0" sec="1330751189"/>
        <to usec="0" sec="1330751414"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.186.162"/>
        </slice>
        <from usec="0" sec="1330751219"/>
        <to usec="0" sec="1330751424"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="204.154.40.204"/>
        </slice>
        <from usec="0" sec="1330751272"/>
        <to usec="0" sec="1330751516"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="208.12.142.5"/>
        </slice>
        <from usec="0" sec="1330751285"/>
        <to usec="0" sec="1330751371"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="100.214.244.81"/>
        </slice>
        <from usec="0" sec="1330751368"/>
        <to usec="0" sec="1330751538"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="149.25.107.162"/>
        </slice>
        <from usec="0" sec="1330751373"/>
        <to usec="0" sec="1330751417"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="107.145.114.158"/>
        </slice>
        <from usec="0" sec="1330751524"/>
        <to usec="0" sec="1330751532"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="83.138.178.149" dst_ip="201.218.181.103" dst_port="53"/>
            <filter src_ip="83.138.186.125" dst_ip="201.218.181.103" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.114.14.217"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751627"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="142.76.214.35"/>
        </slice>
        <from usec="0" sec="1330750804"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.190.187"/>
        </slice>
        <from usec="0" sec="1330750805"/>
        <to usec="0" sec="1330751615"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="84.178.96.49" dst_port="80"/>
            <filter dst_ip="84.178.96.49" dst_port="443"/>
        </slice>
        <from usec="0" sec="1330750809"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="97.130.185.255"/>
        </slice>
        <from usec="0" sec="1330750810"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="152.123.72.39"/>
        </slice>
        <from usec="0" sec="1330750811"/>
        <to usec="0" sec="1330751617"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.76.70.125"/>
        </slice>
        <from usec="0" sec="1330750816"/>
        <to usec="0" sec="1330751626"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="58.72.232.118"/>
        </slice>
        <from usec="0" sec="1330750828"/>
        <to usec="0" sec="1330751611"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="83.3.184.137"/>
        </slice>
        <from usec="0" sec="1330751093"/>
        <to usec="0" sec="1330751612"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.45.164.8"/>
        </slice>
        <from usec="0" sec="1330751136"/>
        <to usec="0" sec="1330751614"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="118.239.180.115"/>
        </slice>
        <from usec="0" sec="1330751458"/>
        <to usec="0" sec="1330751561"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="117.219.140.81"/>
        </slice>
        <from usec="0" sec="1330751462"/>
        <to usec="0" sec="1330751469"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="117.13.176.17"/>
        </slice>
        <from usec="0" sec="1330751463"/>
        <to usec="0" sec="1330751582"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="99.85.142.113"/>
        </slice>
        <from usec="0" sec="1330751517"/>
        <to usec="0" sec="1330751625"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter dst_ip="33.60.199.108"/>
        </slice>
        <from usec="0" sec="1330751576"/>
        <to usec="0" sec="1330751615"/>
    </anomaly>
    <anomaly type="notice" value="0.353647,1.139670,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="200.70.101.145"/>
        </slice>
        <from usec="0" sec="1330751617"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.35.163.226"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751448"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.218.185.55" dst_ip="106.74.56.101" src_port="25565" dst_port="49912"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.76.67.146" dst_ip="100.98.119.242" src_port="29277" dst_port="45169"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750997"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.76.71.53" dst_ip="152.164.8.211" src_port="3658" dst_port="49281"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750998"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.45.8.41" dst_ip="131.76.160.232" src_port="22944" dst_port="11194"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751267"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="200.35.165.212" dst_ip="219.7.11.10" src_port="80" dst_port="54706"/>
            <filter src_ip="200.35.165.212" dst_ip="219.7.11.10" src_port="80" dst_port="53832"/>
            <filter src_ip="201.218.181.81" dst_ip="219.7.11.10" src_port="80" dst_port="53569"/>
        </slice>
        <from usec="0" sec="1330750834"/>
        <to usec="0" sec="1330750972"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.133.80.10" dst_ip="219.7.11.183" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750862"/>
        <to usec="0" sec="1330751343"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="111.180.156.73" dst_ip="142.76.17.72" src_port="80"/>
            <filter src_ip="218.134.74.51" dst_ip="142.76.17.72" src_port="80"/>
            <filter src_ip="111.177.90.2" dst_ip="142.76.17.72" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750802"/>
        <to usec="0" sec="1330751088"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,020,0 0 0 1 1 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="201.218.179.147" dst_ip="200.70.193.156"/>
        </slice>
        <from usec="0" sec="1330751038"/>
        <to usec="0" sec="1330751052"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="91.112.104.180" dst_ip="172.159.223.195" src_port="80"/>
            <filter src_ip="91.112.104.181" dst_ip="172.159.223.195" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750808"/>
        <to usec="0" sec="1330751627"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.76.5.141" dst_ip="196.112.134.117" dst_port="443"/>
        </slice>
        <from usec="0" sec="1330750812"/>
        <to usec="0" sec="1330751538"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.73.196.217" src_port="53"/>
            <filter dst_ip="176.73.196.217" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751262"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="170.45.240.75" dst_ip="34.214.71.20" dst_port="80"/>
            <filter src_ip="200.35.165.163" dst_ip="34.214.71.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751257"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.35.57.4" dst_ip="84.178.109.72" dst_port="443"/>
        </slice>
        <from usec="0" sec="1330751046"/>
        <to usec="0" sec="1330751233"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="201.218.190.38" dst_ip="108.220.98.75"/>
        </slice>
        <from usec="0" sec="1330751119"/>
        <to usec="0" sec="1330751154"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="54.122.46.184" dst_ip="142.76.16.187" src_port="80"/>
        </slice>
        <from usec="0" sec="1330751179"/>
        <to usec="0" sec="1330751254"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="142.76.140.144" src_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751448"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="142.76.71.68" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751447"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_port="51413" dst_port="65184"/>
            <filter src_ip="201.218.179.75" dst_ip="201.138.64.11" src_port="51413"/>
            <filter src_ip="201.218.179.75" dst_ip="201.138.64.11" dst_port="65184"/>
        </slice>
        <from usec="0" sec="1330750856"/>
        <to usec="0" sec="1330751419"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.133.112.212" dst_ip="83.3.176.38" src_port="80" dst_port="40151"/>
        </slice>
        <from usec="0" sec="1330751273"/>
        <to usec="0" sec="1330751283"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="142.76.163.155" dst_ip="210.82.210.37" src_port="80"/>
        </slice>
        <from usec="0" sec="1330751332"/>
        <to usec="0" sec="1330751339"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="170.45.46.29" dst_ip="80.186.45.83" dst_port="80"/>
            <filter src_ip="200.35.41.237" dst_ip="80.186.45.83" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330751129"/>
        <to usec="0" sec="1330751532"/>
    </anomaly>
    <anomaly type="notice" value="0.776996,1.180210,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.217.8.239" dst_ip="170.45.110.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1330751464"/>
        <to usec="0" sec="1330751628"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="102.49.10.49"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="70.36.247.27"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.35.51.44" src_port="27745"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751088"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,503,0 0 0 1 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.94.10.50" dst_ip="98.37.23.33" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751533"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.159.195.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,020,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.218.180.233"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.147.139.38" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.147.139.52" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.40.59.237" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="201.218.178.76" dst_port="53"/>
            <filter dst_ip="194.116.86.167" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751358"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.47.130.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="142.76.140.144" dst_port="53"/>
            <filter dst_ip="208.10.138.193" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330751535"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.148.2.6" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="208.147.139.152" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="108.125.172.216" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.218.184.75" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330750800"/>
        <to usec="0" sec="1330750846"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="200.47.146.131"/>
        </slice>
        <from usec="0" sec="1330750845"/>
        <to usec="0" sec="1330751448"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="91.194.78.17"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="85.65.168.126"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.47.164.176"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.159.99.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.47.164.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.47.165.30" src_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="41.100.106.190" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.47.130.212" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.479332,1.113930,503,0 0 0 1 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.218.185.28" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750801"/>
        <to usec="0" sec="1330751268"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="170.45.28.27" src_port="15494"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.159.99.193" src_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="200.47.164.167" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58" src_port="2106"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58" src_port="7777"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="172.159.195.136" src_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="33.74.97.168" src_port="80"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.218.180.233" dst_port="53"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="33.49.190.230" src_port="4019" dst_port="1434"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="118.90.213.92" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="1330750980"/>
        <to usec="0" sec="1330751026"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58"/>
        </slice>
        <from usec="0" sec="1330751070"/>
        <to usec="0" sec="1330751116"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="41.100.106.190" src_port="80"/>
        </slice>
        <from usec="0" sec="1330751160"/>
        <to usec="0" sec="1330751206"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58" src_port="2106"/>
        </slice>
        <from usec="0" sec="1330751385"/>
        <to usec="0" sec="1330751431"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.216.2.58" src_port="7777"/>
        </slice>
        <from usec="0" sec="1330751385"/>
        <to usec="0" sec="1330751431"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="215.100.209.90"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="202.140.43.152"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.47.130.212"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="54.101.21.202"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.218.185.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="110.177.53.58"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.73.153.242"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="172.153.101.37"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.218.142.157"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
    <anomaly type="notice" value="0.590475,1.164590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="142.76.84.59"/>
        </slice>
        <from usec="0" sec="1330751520"/>
        <to usec="0" sec="1330751566"/>
    </anomaly>
</admd:annotation>
