<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.84.129.152" dst_ip="15.88.4.7" src_port="80" dst_port="35262" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959559"/>
        <to usec="0" sec="1338959561"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.157.40.144" dst_ip="216.47.28.134" src_port="53126" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958846"/>
        <to usec="0" sec="1338958848"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.157.189.75" dst_ip="200.139.184.12" src_port="60938" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958877"/>
        <to usec="0" sec="1338958879"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.134.186.117" dst_ip="10.175.2.60" src_port="53" dst_port="1067" proto="udp"/>
        </slice>
        <from usec="0" sec="1338958834"/>
        <to usec="0" sec="1338959362"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.68.96.19" dst_ip="13.75.180.158" src_port="44244" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959268"/>
        <to usec="0" sec="1338959270"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.176.218.203" dst_ip="124.11.152.104" src_port="51338" dst_port="12340" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958855"/>
        <to usec="0" sec="1338959391"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.68.39.44" dst_ip="216.47.28.96" src_port="51590" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959241"/>
        <to usec="0" sec="1338959296"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="194.176.218.217"/>
        </slice>
        <from usec="0" sec="1338959277"/>
        <to usec="0" sec="1338959279"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="46.129.198.92" dst_ip="152.157.122.20" src_port="33577" dst_port="47931" proto="udp"/>
        </slice>
        <from usec="0" sec="1338959322"/>
        <to usec="0" sec="1338959327"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.110.33.44" dst_ip="217.95.97.108" src_port="54193" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959301"/>
        <to usec="0" sec="1338959303"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.45.38.142" dst_ip="152.157.104.227" src_port="48500" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958837"/>
        <to usec="0" sec="1338958868"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.68.129.34" dst_ip="60.42.165.228" src_port="58634" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958870"/>
        <to usec="0" sec="1338958872"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.68.61.64" dst_ip="0.81.164.80" src_port="44745" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959020"/>
        <to usec="0" sec="1338959362"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.40.78"/>
        </slice>
        <from usec="0" sec="1338959242"/>
        <to usec="0" sec="1338959244"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.137.17.183" dst_ip="194.176.208.13" src_port="58427" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959282"/>
        <to usec="0" sec="1338959283"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.110.218.228" dst_ip="5.65.199.90" src_port="49955" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959058"/>
        <to usec="0" sec="1338959312"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.157.121.96" dst_ip="150.52.174.203" src_port="3933" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958857"/>
        <to usec="0" sec="1338959366"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="104.37.77.144" dst_ip="195.110.38.26" src_port="58060" dst_port="24048" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959275"/>
        <to usec="0" sec="1338959280"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.35.4" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959199"/>
        <to usec="0" sec="1338959201"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.157.129.78" dst_ip="93.133.20.114" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959054"/>
        <to usec="0" sec="1338959373"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.98.219.25" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958862"/>
        <to usec="0" sec="1338959344"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.157.121.116" dst_ip="16.231.203.154" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959144"/>
        <to usec="0" sec="1338959322"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.238.162.219" dst_ip="194.176.216.32" src_port="41678" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959071"/>
        <to usec="0" sec="1338959073"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="195.110.34.74" dst_ip="214.224.28.134" src_port="54482" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959369"/>
        <to usec="0" sec="1338959373"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.176.245" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959320"/>
        <to usec="0" sec="1338959384"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.68.34.33" dst_ip="205.227.43.31" src_port="50443" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958836"/>
        <to usec="0" sec="1338959385"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.153.45.101" dst_ip="191.103.63.74" src_port="49934" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958838"/>
        <to usec="0" sec="1338958840"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.82.137" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958862"/>
        <to usec="0" sec="1338959238"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="194.176.192.237" dst_ip="205.133.30.219" src_port="1054" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959235"/>
        <to usec="0" sec="1338959304"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="136.207.222.79" dst_ip="152.157.105.57" src_port="51131" dst_port="2238" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959190"/>
        <to usec="0" sec="1338959195"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.128.22" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958802"/>
        <to usec="0" sec="1338959021"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.68.37.98" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959216"/>
        <to usec="0" sec="1338959322"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.176.215.174" dst_ip="171.101.22.138" src_port="64825" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959036"/>
        <to usec="0" sec="1338959308"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="194.176.216.32" dst_ip="194.176.216.32" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959145"/>
        <to usec="0" sec="1338959340"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="194.176.222.200" dst_ip="194.176.222.200" src_port="54380" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959218"/>
        <to usec="0" sec="1338959373"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.11.25.135" dst_ip="152.157.193.108" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959243"/>
        <to usec="0" sec="1338959245"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.153.116.40"/>
        </slice>
        <from usec="0" sec="1338959268"/>
        <to usec="0" sec="1338959270"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.182.200"/>
        </slice>
        <from usec="0" sec="1338959137"/>
        <to usec="0" sec="1338959139"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.98.192"/>
        </slice>
        <from usec="0" sec="1338959252"/>
        <to usec="0" sec="1338959255"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="162.68.85.43"/>
        </slice>
        <from usec="0" sec="1338959218"/>
        <to usec="0" sec="1338959220"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.68.82.39" dst_ip="32.182.247.77" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959305"/>
        <to usec="0" sec="1338959307"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.153.41.197" dst_ip="220.172.175.21" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959107"/>
        <to usec="0" sec="1338959291"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.68.38.122" dst_ip="83.244.49.129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959030"/>
        <to usec="0" sec="1338959032"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.110.32.150" dst_ip="94.214.6.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338959249"/>
        <to usec="0" sec="1338959251"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.157.193.111"/>
        </slice>
        <from usec="0" sec="1338958844"/>
        <to usec="0" sec="1338958847"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="152.157.193.98" dst_ip="152.157.193.98" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1338958841"/>
        <to usec="0" sec="1338959186"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.208.20.168"/>
        </slice>
        <from usec="0" sec="1338959369"/>
        <to usec="0" sec="1338959371"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.153.109.34"/>
        </slice>
        <from usec="0" sec="1338959063"/>
        <to usec="0" sec="1338959065"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.110.210.182"/>
        </slice>
        <from usec="0" sec="1338959173"/>
        <to usec="0" sec="1338959175"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.86.246.81"/>
        </slice>
        <from usec="0" sec="1338959236"/>
        <to usec="0" sec="1338959238"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="195.110.38.27"/>
        </slice>
        <from usec="0" sec="1338959331"/>
        <to usec="0" sec="1338959333"/>
    </anomaly>
    <anomaly type="notice" value="0.584514,1.157380,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="95.88.231.166"/>
        </slice>
        <from usec="0" sec="1338959025"/>
        <to usec="0" sec="1338959027"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959628"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="16.231.213.88"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958908"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.157.193.98"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958908"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.8.6.181"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959529"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.176.208.16"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338958905"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="93.185.68.149"/>
        </slice>
        <from usec="0" sec="1338958807"/>
        <to usec="0" sec="1338958908"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="10.14.32.175"/>
        </slice>
        <from usec="0" sec="1338958813"/>
        <to usec="0" sec="1338958906"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.117.73.186"/>
        </slice>
        <from usec="0" sec="1338958873"/>
        <to usec="0" sec="1338958894"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="194.176.208.43"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958998"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="163.8.151.152"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958892"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.86.9"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958995"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.157.131.37"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958997"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="57.42.183.54"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959178"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.110.35.107"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958990"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="100.74.192.243"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958869"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.153.109.20"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338958994"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.98.219.18" src_port="53"/>
            <filter dst_ip="195.98.219.18" dst_port="53"/>
        </slice>
        <from usec="0" sec="1338958802"/>
        <to usec="0" sec="1338958989"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.77.51.159"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338958881"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="35.232.132.76" dst_ip="164.226.234.237" src_port="53"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338958998"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.226.37.110"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338958994"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="97.109.164.205"/>
        </slice>
        <from usec="0" sec="1338958807"/>
        <to usec="0" sec="1338958983"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.26.201.224"/>
        </slice>
        <from usec="0" sec="1338958810"/>
        <to usec="0" sec="1338958992"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.110.210.249"/>
        </slice>
        <from usec="0" sec="1338958818"/>
        <to usec="0" sec="1338958955"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="35.232.134.176"/>
        </slice>
        <from usec="0" sec="1338958823"/>
        <to usec="0" sec="1338958994"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.144.170.52"/>
        </slice>
        <from usec="0" sec="1338958841"/>
        <to usec="0" sec="1338958855"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="195.110.37.24"/>
        </slice>
        <from usec="0" sec="1338958842"/>
        <to usec="0" sec="1338958998"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.157.224.34"/>
        </slice>
        <from usec="0" sec="1338958843"/>
        <to usec="0" sec="1338958871"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="124.11.152.104"/>
        </slice>
        <from usec="0" sec="1338958966"/>
        <to usec="0" sec="1338958998"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.26.60.101"/>
        </slice>
        <from usec="0" sec="1338958991"/>
        <to usec="0" sec="1338958994"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="93.197.80.71"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959402"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.157.40.16"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959086"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.176.212.235" src_port="53"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959088"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.110.216.99"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959076"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="15.98.167.13"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959087"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,020,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSIC">
        <slice>
            <filter src_ip="172.133.105.57"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959088"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.155.131.37"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959087"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,004,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="83.161.2.213"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959047"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="16.231.229.130"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959088"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="15.88.7.176"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959067"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.153.96.153"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959086"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.102.142"/>
        </slice>
        <from usec="0" sec="1338958809"/>
        <to usec="0" sec="1338959069"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="130.154.51.244"/>
        </slice>
        <from usec="0" sec="1338958893"/>
        <to usec="0" sec="1338958911"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.26.252.183"/>
        </slice>
        <from usec="0" sec="1338958936"/>
        <to usec="0" sec="1338959049"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,901,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.120.201.216"/>
        </slice>
        <from usec="0" sec="1338958942"/>
        <to usec="0" sec="1338958943"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.68.100.81"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959178"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="195.110.34.61" src_port="80"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959178"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="152.157.50.37"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959173"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.202.155.91"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959178"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="35.232.135.60"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959169"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.157.12.14"/>
        </slice>
        <from usec="0" sec="1338958812"/>
        <to usec="0" sec="1338959176"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.110.198.198"/>
        </slice>
        <from usec="0" sec="1338958822"/>
        <to usec="0" sec="1338959333"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="194.176.215.132"/>
        </slice>
        <from usec="0" sec="1338958861"/>
        <to usec="0" sec="1338959177"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="210.2.9.83"/>
        </slice>
        <from usec="0" sec="1338958956"/>
        <to usec="0" sec="1338959156"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.157.9.5"/>
        </slice>
        <from usec="0" sec="1338958995"/>
        <to usec="0" sec="1338959109"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.157.30.21"/>
        </slice>
        <from usec="0" sec="1338959061"/>
        <to usec="0" sec="1338959175"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="195.110.39.140"/>
        </slice>
        <from usec="0" sec="1338959077"/>
        <to usec="0" sec="1338959172"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.7.106.170"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959268"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.79.86.31"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959249"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.75.33.42"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959358"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.176.215.221"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959262"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.68.112.212"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959268"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="205.133.30.213"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959268"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="15.98.167.22"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959268"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.156.116.96"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959260"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="92.52.35.6"/>
        </slice>
        <from usec="0" sec="1338958802"/>
        <to usec="0" sec="1338959265"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="191.103.62.101"/>
        </slice>
        <from usec="0" sec="1338958809"/>
        <to usec="0" sec="1338959261"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.110.209.90"/>
        </slice>
        <from usec="0" sec="1338958813"/>
        <to usec="0" sec="1338959250"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.39.11"/>
        </slice>
        <from usec="0" sec="1338958813"/>
        <to usec="0" sec="1338959256"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.41.144"/>
        </slice>
        <from usec="0" sec="1338958826"/>
        <to usec="0" sec="1338959603"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.153.47.64"/>
        </slice>
        <from usec="0" sec="1338958849"/>
        <to usec="0" sec="1338959240"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="210.2.40.94"/>
        </slice>
        <from usec="0" sec="1338958884"/>
        <to usec="0" sec="1338959250"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="25.41.59.248"/>
        </slice>
        <from usec="0" sec="1338958958"/>
        <to usec="0" sec="1338959181"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="152.157.162.235"/>
        </slice>
        <from usec="0" sec="1338958994"/>
        <to usec="0" sec="1338959224"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.107.148.199"/>
        </slice>
        <from usec="0" sec="1338959070"/>
        <to usec="0" sec="1338959096"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="35.232.135.136"/>
        </slice>
        <from usec="0" sec="1338959140"/>
        <to usec="0" sec="1338959169"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="128.148.215.44"/>
        </slice>
        <from usec="0" sec="1338959181"/>
        <to usec="0" sec="1338959187"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="46.177.9.252"/>
        </slice>
        <from usec="0" sec="1338959232"/>
        <to usec="0" sec="1338959245"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.26.45.231"/>
        </slice>
        <from usec="0" sec="1338959250"/>
        <to usec="0" sec="1338959257"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="11.67.182.31"/>
        </slice>
        <from usec="0" sec="1338959259"/>
        <to usec="0" sec="1338959265"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="194.176.214.138"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959358"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,012,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.226.48.186"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959289"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.112.22"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959356"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.226.108.114"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959318"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.75.33.168"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959351"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.153.109.143"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959593"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="17.2.211.159"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959529"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.68.85.192"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338959322"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,010,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="31.229.216.3"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338959358"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.157.241.230"/>
        </slice>
        <from usec="0" sec="1338958812"/>
        <to usec="0" sec="1338959355"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="152.157.241.72"/>
        </slice>
        <from usec="0" sec="1338958813"/>
        <to usec="0" sec="1338959358"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.157.121.9"/>
        </slice>
        <from usec="0" sec="1338958850"/>
        <to usec="0" sec="1338959355"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.32.145"/>
        </slice>
        <from usec="0" sec="1338959014"/>
        <to usec="0" sec="1338959321"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.226.72.81"/>
        </slice>
        <from usec="0" sec="1338959125"/>
        <to usec="0" sec="1338959351"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.110.210.132"/>
        </slice>
        <from usec="0" sec="1338959179"/>
        <to usec="0" sec="1338959301"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="46.235.221.202"/>
        </slice>
        <from usec="0" sec="1338959211"/>
        <to usec="0" sec="1338959364"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.226.42.16"/>
        </slice>
        <from usec="0" sec="1338959335"/>
        <to usec="0" sec="1338959356"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="15.98.167.8"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959448"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.110.210.19"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959446"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.226.161.138"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959448"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="28.81.164.90"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959447"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="162.68.35.25"/>
        </slice>
        <from usec="0" sec="1338958802"/>
        <to usec="0" sec="1338959435"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.110.196.18"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338959416"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.226.240.182"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959448"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.212.208.65"/>
        </slice>
        <from usec="0" sec="1338958805"/>
        <to usec="0" sec="1338959445"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.26.62.34"/>
        </slice>
        <from usec="0" sec="1338958808"/>
        <to usec="0" sec="1338959406"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.157.76.9"/>
        </slice>
        <from usec="0" sec="1338958808"/>
        <to usec="0" sec="1338959448"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="152.157.137.214"/>
        </slice>
        <from usec="0" sec="1338958809"/>
        <to usec="0" sec="1338959446"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="152.157.217.112"/>
        </slice>
        <from usec="0" sec="1338959110"/>
        <to usec="0" sec="1338959332"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.116.163.24"/>
        </slice>
        <from usec="0" sec="1338959254"/>
        <to usec="0" sec="1338959444"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.144.212.81"/>
        </slice>
        <from usec="0" sec="1338959426"/>
        <to usec="0" sec="1338959434"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.157.241.202"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959538"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="205.133.30.198"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959380"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.145.123"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338959536"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="195.110.33.98"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959538"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.98.230.161"/>
        </slice>
        <from usec="0" sec="1338958809"/>
        <to usec="0" sec="1338959531"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.68.32.42"/>
        </slice>
        <from usec="0" sec="1338958831"/>
        <to usec="0" sec="1338959599"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.75.162.135"/>
        </slice>
        <from usec="0" sec="1338958846"/>
        <to usec="0" sec="1338959533"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.68.84.179"/>
        </slice>
        <from usec="0" sec="1338958854"/>
        <to usec="0" sec="1338959580"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.68.41.254"/>
        </slice>
        <from usec="0" sec="1338958918"/>
        <to usec="0" sec="1338959525"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="35.232.137.233"/>
        </slice>
        <from usec="0" sec="1338959064"/>
        <to usec="0" sec="1338959369"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.75.8.119"/>
        </slice>
        <from usec="0" sec="1338959095"/>
        <to usec="0" sec="1338959511"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.226.97.105"/>
        </slice>
        <from usec="0" sec="1338959178"/>
        <to usec="0" sec="1338959538"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="12.106.153.105" dst_port="443"/>
            <filter src_ip="152.157.131.176" dst_ip="83.243.123.133" dst_port="443"/>
        </slice>
        <from usec="0" sec="1338958848"/>
        <to usec="0" sec="1338959531"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="100.74.214.111"/>
        </slice>
        <from usec="0" sec="1338959335"/>
        <to usec="0" sec="1338959454"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.174.194.16"/>
        </slice>
        <from usec="0" sec="1338959514"/>
        <to usec="0" sec="1338959538"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.226.200.53"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959626"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="75.144.40.212" src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959618"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.68.33.92" dst_port="443"/>
            <filter src_ip="162.68.33.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959612"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="152.157.177.27"/>
        </slice>
        <from usec="0" sec="1338958801"/>
        <to usec="0" sec="1338959617"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.0.2"/>
        </slice>
        <from usec="0" sec="1338958803"/>
        <to usec="0" sec="1338959627"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="141.186.221.212" src_port="80"/>
        </slice>
        <from usec="0" sec="1338958805"/>
        <to usec="0" sec="1338959626"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="11.147.178.160"/>
        </slice>
        <from usec="0" sec="1338958813"/>
        <to usec="0" sec="1338959626"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.153.45.98"/>
        </slice>
        <from usec="0" sec="1338958815"/>
        <to usec="0" sec="1338959627"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.153.109.32"/>
        </slice>
        <from usec="0" sec="1338958835"/>
        <to usec="0" sec="1338959618"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.157.162.213"/>
        </slice>
        <from usec="0" sec="1338958845"/>
        <to usec="0" sec="1338959624"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="4.29.130.135"/>
        </slice>
        <from usec="0" sec="1338958847"/>
        <to usec="0" sec="1338959628"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.169.179.226"/>
        </slice>
        <from usec="0" sec="1338958863"/>
        <to usec="0" sec="1338959617"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="67.151.115.199"/>
        </slice>
        <from usec="0" sec="1338959202"/>
        <to usec="0" sec="1338959628"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="7.175.191.236"/>
        </slice>
        <from usec="0" sec="1338959352"/>
        <to usec="0" sec="1338959625"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.26.217.51"/>
        </slice>
        <from usec="0" sec="1338959366"/>
        <to usec="0" sec="1338959621"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="56.38.179.154"/>
        </slice>
        <from usec="0" sec="1338959386"/>
        <to usec="0" sec="1338959628"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="72.112.160.149"/>
        </slice>
        <from usec="0" sec="1338959597"/>
        <to usec="0" sec="1338959600"/>
    </anomaly>
    <anomaly type="notice" value="0.373961,1.136700,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.157.26.68" src_port="80"/>
        </slice>
        <from usec="0" sec="1338958804"/>
        <to usec="0" sec="1338959078"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.98.230.224" dst_port="53"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958846"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="195.98.230.224" dst_port="8612"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958846"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.176.209.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338958846"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.169.179.225"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.145.172.210"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.226.234.237"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="194.176.218.237"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.176.209.182" src_port="53"/>
            <filter dst_ip="194.176.209.182" dst_port="53"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.176.215.216" src_port="53"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.176.170.191"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.176.170.190"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.176.170.186"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.176.170.187"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.176.170.185"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="219.101.178.120"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="154.196.249.144"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959206"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="195.110.34.201"/>
        </slice>
        <from usec="0" sec="1338959295"/>
        <to usec="0" sec="1338959341"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="134.245.40.190" dst_ip="154.196.172.183" src_port="53"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959341"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.176.216.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1338959160"/>
        <to usec="0" sec="1338959341"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="195.110.195.83" src_port="24498"/>
        </slice>
        <from usec="0" sec="1338959340"/>
        <to usec="0" sec="1338959431"/>
    </anomaly>
    <anomaly type="notice" value="0.665509,1.150400,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="164.226.33.30" src_port="123"/>
            <filter dst_ip="164.226.33.30" dst_port="123"/>
            <filter src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1338958800"/>
        <to usec="0" sec="1338959611"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1338959565"/>
        <to usec="0" sec="1338959611"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.176.217.123" src_port="18979"/>
            <filter src_ip="194.176.217.123" src_port="53"/>
            <filter src_ip="194.176.217.123"/>
        </slice>
        <from usec="0" sec="1338958890"/>
        <to usec="0" sec="1338959656"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="162.153.35.9"/>
        </slice>
        <from usec="0" sec="1338959610"/>
        <to usec="0" sec="1338959656"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="129.194.1.155" dst_ip="162.153.213.132"/>
        </slice>
        <from usec="0" sec="1338959610"/>
        <to usec="0" sec="1338959656"/>
    </anomaly>
    <anomaly type="notice" value="0.703313,1.187300,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="195.98.230.224" src_port="53"/>
        </slice>
        <from usec="0" sec="1338959610"/>
        <to usec="0" sec="1338959656"/>
    </anomaly>
</admd:annotation>
