<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.162.185.5" dst_ip="138.3.190.138" src_port="25062" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515793"/>
        <to usec="0" sec="1333516221"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="172.81.243.164" dst_ip="20.209.67.215" src_port="2294" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515712"/>
        <to usec="0" sec="1333515714"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.197.84.189" dst_ip="172.65.48.124" src_port="443" dst_port="1070" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515871"/>
        <to usec="0" sec="1333515946"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="183.11.115.148" dst_ip="208.171.177.238" src_port="24195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516164"/>
        <to usec="0" sec="1333516195"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.65.92.252" dst_ip="61.179.66.105" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515943"/>
        <to usec="0" sec="1333515965"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.104.140.21"/>
        </slice>
        <from usec="0" sec="1333516124"/>
        <to usec="0" sec="1333516155"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.228.38.157" dst_ip="34.208.57.201" src_port="57497" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515868"/>
        <to usec="0" sec="1333516218"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.65.91.69" dst_ip="16.164.23.42" src_port="49186" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515859"/>
        <to usec="0" sec="1333516133"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="11.163.233.110" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515893"/>
        <to usec="0" sec="1333516261"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="69.25.28.168" dst_ip="136.209.151.57" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516187"/>
        <to usec="0" sec="1333516195"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.65.168.6" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515864"/>
        <to usec="0" sec="1333516214"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="172.65.104.55" dst_ip="78.42.146.109" src_port="1201" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515868"/>
        <to usec="0" sec="1333516261"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.237.145.20" dst_ip="208.154.235.90" src_port="55975" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515914"/>
        <to usec="0" sec="1333515959"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="218.35.79.58"/>
        </slice>
        <from usec="0" sec="1333516012"/>
        <to usec="0" sec="1333516014"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.41.247.63" dst_ip="8.73.67.213" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515602"/>
        <to usec="0" sec="1333516310"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.65.92.149" dst_ip="208.157.36.129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516297"/>
        <to usec="0" sec="1333516299"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.228.66.19" dst_ip="46.212.43.225" src_port="50109" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515879"/>
        <to usec="0" sec="1333515881"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.65.69.29"/>
        </slice>
        <from usec="0" sec="1333515856"/>
        <to usec="0" sec="1333515859"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.209.72.41" dst_ip="114.24.90.181" src_port="51057" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515778"/>
        <to usec="0" sec="1333516063"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.228.90.16" dst_ip="17.29.34.231" src_port="45671" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515864"/>
        <to usec="0" sec="1333515881"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="20.164.104.62" dst_ip="170.228.52.174" src_port="80" dst_port="50078" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516264"/>
        <to usec="0" sec="1333516266"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="206.139.165.64" dst_ip="206.41.247.63" src_port="40776" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515860"/>
        <to usec="0" sec="1333516305"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.209.106.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515793"/>
        <to usec="0" sec="1333516299"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.228.28.89" dst_ip="46.197.84.176" src_port="59979" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516038"/>
        <to usec="0" sec="1333516060"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="24.167.192.116" dst_ip="207.237.67.196" src_port="55494" dst_port="64894" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515894"/>
        <to usec="0" sec="1333516309"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="64.213.104.129" dst_ip="138.3.246.96" src_port="5041" dst_port="5041" proto="udp"/>
        </slice>
        <from usec="0" sec="1333515864"/>
        <to usec="0" sec="1333515866"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.65.172.78" dst_ip="192.133.151.220" src_port="61224" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516115"/>
        <to usec="0" sec="1333516146"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="114.24.90.181" dst_ip="136.209.72.41" src_port="80" dst_port="51057" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515866"/>
        <to usec="0" sec="1333515868"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="172.164.68.86" dst_ip="131.48.173.104" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516185"/>
        <to usec="0" sec="1333516187"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.203.49.86" dst_ip="136.209.146.211" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515934"/>
        <to usec="0" sec="1333516219"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.43.176.16" dst_ip="136.209.147.128" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516215"/>
        <to usec="0" sec="1333516217"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.209.72.93" dst_ip="32.203.223.127" src_port="49586" dst_port="182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515864"/>
        <to usec="0" sec="1333516171"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.209.203.149" dst_ip="202.135.16.28" src_port="80" dst_port="10740" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515997"/>
        <to usec="0" sec="1333515999"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.209.175.137" dst_ip="180.72.192.29" src_port="57124" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515877"/>
        <to usec="0" sec="1333516048"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.41.249.12" dst_ip="210.70.232.33" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516223"/>
        <to usec="0" sec="1333516225"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="136.209.106.109"/>
        </slice>
        <from usec="0" sec="1333516253"/>
        <to usec="0" sec="1333516263"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.100.51.225" dst_ip="136.209.58.136" src_port="34166" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515926"/>
        <to usec="0" sec="1333515927"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="206.41.247.63" dst_ip="206.41.247.63" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515865"/>
        <to usec="0" sec="1333516301"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.3.77.84"/>
        </slice>
        <from usec="0" sec="1333515893"/>
        <to usec="0" sec="1333515896"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="207.226.50.178" dst_ip="46.197.144.194" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515948"/>
        <to usec="0" sec="1333516164"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="172.65.94.73" dst_ip="208.157.39.43" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515896"/>
        <to usec="0" sec="1333515898"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="206.41.246.121"/>
        </slice>
        <from usec="0" sec="1333515967"/>
        <to usec="0" sec="1333516155"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="37.108.100.40"/>
        </slice>
        <from usec="0" sec="1333516238"/>
        <to usec="0" sec="1333516240"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.209.58.136" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516004"/>
        <to usec="0" sec="1333516307"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.209.58.138"/>
        </slice>
        <from usec="0" sec="1333516004"/>
        <to usec="0" sec="1333516264"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="206.41.252.87" dst_port="80"/>
            <filter dst_ip="37.108.101.163" dst_port="80"/>
            <filter dst_ip="37.108.101.163" dst_port="443"/>
        </slice>
        <from usec="0" sec="1333516019"/>
        <to usec="0" sec="1333516270"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="11.212.50.75" dst_ip="206.41.251.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1333515886"/>
        <to usec="0" sec="1333516269"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="154.237.185.186" dst_port="8080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515702"/>
        <to usec="0" sec="1333515705"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.248.6.64" dst_port="3389" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333515648"/>
        <to usec="0" sec="1333515650"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.38.33.228" dst_port="21" proto="tcp"/>
        </slice>
        <from usec="0" sec="1333516145"/>
        <to usec="0" sec="1333516150"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="131.226.16.195"/>
        </slice>
        <from usec="0" sec="1333516123"/>
        <to usec="0" sec="1333516125"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="84.10.22.13" proto="icmp"/>
        </slice>
        <from usec="0" sec="1333515712"/>
        <to usec="0" sec="1333515715"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="138.3.244.152"/>
        </slice>
        <from usec="0" sec="1333515865"/>
        <to usec="0" sec="1333515867"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="37.108.100.41"/>
        </slice>
        <from usec="0" sec="1333515886"/>
        <to usec="0" sec="1333515888"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="17.29.16.191"/>
        </slice>
        <from usec="0" sec="1333516283"/>
        <to usec="0" sec="1333516286"/>
    </anomaly>
    <anomaly type="notice" value="0.369234,0.634255,010,1 0 0 0 0 0 0 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="206.41.253.23"/>
        </slice>
        <from usec="0" sec="1333516262"/>
        <to usec="0" sec="1333516264"/>
    </anomaly>
</admd:annotation>
