<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.521099,0.846981,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.136.51.123"/>
        </slice>
        <from usec="0" sec="1336194580"/>
        <to usec="0" sec="1336194582"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="129.79.155.97" dst_ip="97.91.235.27" src_port="10425" dst_port="1102" proto="udp"/>
        </slice>
        <from usec="0" sec="1336194569"/>
        <to usec="0" sec="1336194793"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.79.155.71" dst_ip="14.2.16.146" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194229"/>
        <to usec="0" sec="1336194883"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.79.154.11" dst_ip="155.169.142.115" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194521"/>
        <to usec="0" sec="1336194882"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.79.154.2" dst_ip="62.103.181.242" src_port="57903" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194524"/>
        <to usec="0" sec="1336194797"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.82.96.193" dst_ip="129.79.37.204" src_port="51097" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194199"/>
        <to usec="0" sec="1336194201"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.79.153.86" dst_ip="63.168.3.129" src_port="51620" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194200"/>
        <to usec="0" sec="1336194202"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="177.136.50.131" dst_ip="40.169.242.253" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194679"/>
        <to usec="0" sec="1336194682"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.79.247.80" dst_ip="72.229.245.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194619"/>
        <to usec="0" sec="1336194622"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="9.138.44.115" dst_ip="198.88.152.108" src_port="55479" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194646"/>
        <to usec="0" sec="1336194864"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.24.203.111" dst_ip="29.150.197.227" src_port="80" dst_port="1828" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194784"/>
        <to usec="0" sec="1336194787"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.79.155.250" dst_ip="194.117.14.0" src_port="50891" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194667"/>
        <to usec="0" sec="1336194669"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.79.84.166" dst_ip="34.19.15.47" src_port="61812" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194592"/>
        <to usec="0" sec="1336194682"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="33.47.70.248"/>
        </slice>
        <from usec="0" sec="1336194225"/>
        <to usec="0" sec="1336194827"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="177.136.50.87"/>
        </slice>
        <from usec="0" sec="1336194517"/>
        <to usec="0" sec="1336194520"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="177.136.50.81" dst_ip="46.70.28.88" src_port="59228" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194517"/>
        <to usec="0" sec="1336194864"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="63.168.3.129" dst_ip="129.79.153.86" src_port="80" dst_port="51620" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194200"/>
        <to usec="0" sec="1336194203"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="129.79.227.217" dst_ip="155.22.70.190" src_port="60753" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194564"/>
        <to usec="0" sec="1336194816"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="198.88.148.9" dst_ip="198.88.148.9" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194537"/>
        <to usec="0" sec="1336194900"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.73.42.146" dst_ip="173.86.247.61" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1336194138"/>
        <to usec="0" sec="1336194141"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="16.141.137.152" dst_ip="198.88.156.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194679"/>
        <to usec="0" sec="1336194682"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="129.79.153.42" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194791"/>
        <to usec="0" sec="1336194793"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.96.13.35"/>
        </slice>
        <from usec="0" sec="1336194532"/>
        <to usec="0" sec="1336194535"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTrp">
        <slice>
            <filter dst_ip="156.166.35.217" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1336194527"/>
        <to usec="0" sec="1336194530"/>
    </anomaly>
    <anomaly type="notice" value="0.521099,0.846981,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="129.79.155.27"/>
        </slice>
        <from usec="0" sec="1336194248"/>
        <to usec="0" sec="1336194251"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="198.98.146.229"/>
        </slice>
        <from usec="0" sec="1336194000"/>
        <to usec="0" sec="1336194046"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.153.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194000"/>
        <to usec="0" sec="1336194046"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.153.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194000"/>
        <to usec="0" sec="1336194046"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1336194270"/>
        <to usec="0" sec="1336194316"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="173.86.245.7"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="87.143.249.5"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="198.149.25.132"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="198.88.153.48"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="129.79.2.85"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="222.65.222.187"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.17.215.249"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="199.106.6.51"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="199.106.29.140"/>
        </slice>
        <from usec="0" sec="1336194270"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="34.32.154.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="199.96.215.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="199.96.215.0" dst_ip="57.165.0.241" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="139.180.125.36" src_port="80"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="177.136.70.20" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="61.21.208.179" src_port="80"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194406"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="199.96.230.121"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="31.9.12.241"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="199.96.215.0" dst_ip="57.165.0.244" src_port="53"/>
            <filter src_ip="199.96.215.3" dst_ip="57.165.0.244" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="199.96.215.0" dst_ip="57.165.0.245" src_port="53"/>
            <filter src_ip="199.96.215.3" dst_ip="57.165.0.245" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.165.0.240"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="57.165.0.241"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="199.96.215.0" dst_ip="57.165.0.242" src_port="53"/>
            <filter src_ip="199.96.215.3" dst_ip="57.165.0.242" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.166.236.172" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="198.88.149.29" dst_port="80"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.153.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.148.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.106.29.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194721"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="198.88.149.29"/>
        </slice>
        <from usec="0" sec="1336194360"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="198.88.149.16" dst_port="18299"/>
        </slice>
        <from usec="0" sec="1336194270"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="17.120.189.233"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="129.79.155.64"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="152.244.43.91"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.153.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="129.79.2.85" src_port="53"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.148.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="158.94.28.127"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter src_ip="198.98.146.229" dst_ip="199.106.26.240"/>
            <filter dst_ip="199.106.26.240" dst_port="50987"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.106.16.173"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="199.106.29.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1336194855"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
    <anomaly type="notice" value="0.498794,0.837101,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="198.88.157.168" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1336194675"/>
        <to usec="0" sec="1336194901"/>
    </anomaly>
</admd:annotation>
