<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="161.11.244.24"/>
        </slice>
        <from usec="0" sec="1341637210"/>
        <to usec="0" sec="1341637282"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="196.238.154.46"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637398"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.239.251.156"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637398"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.248.154.36"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637398"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="177.76.66.5" src_port="53"/>
            <filter dst_ip="177.76.66.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637392"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.57.165.156"/>
        </slice>
        <from usec="0" sec="1341637221"/>
        <to usec="0" sec="1341637395"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.20.158.121" dst_ip="42.241.244.244" src_port="80" dst_port="64520"/>
        </slice>
        <from usec="0" sec="1341637328"/>
        <to usec="0" sec="1341637337"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637938"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="52.41.97.180"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637488"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="164.250.230.87"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637488"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="33.241.98.171"/>
        </slice>
        <from usec="0" sec="1341637394"/>
        <to usec="0" sec="1341637399"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.204.86.24"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637578"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="196.221.116.49"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637577"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.239.132.202"/>
        </slice>
        <from usec="0" sec="1341637206"/>
        <to usec="0" sec="1341637577"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.241.242.221"/>
        </slice>
        <from usec="0" sec="1341637234"/>
        <to usec="0" sec="1341637575"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="138.142.202.136"/>
        </slice>
        <from usec="0" sec="1341637246"/>
        <to usec="0" sec="1341637420"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.130.67.180"/>
        </slice>
        <from usec="0" sec="1341637281"/>
        <to usec="0" sec="1341637497"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.68.249.160"/>
        </slice>
        <from usec="0" sec="1341637397"/>
        <to usec="0" sec="1341637519"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="34.143.66.205"/>
        </slice>
        <from usec="0" sec="1341637402"/>
        <to usec="0" sec="1341637461"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="200.241.100.4"/>
        </slice>
        <from usec="0" sec="1341637489"/>
        <to usec="0" sec="1341637502"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.239.62.219"/>
        </slice>
        <from usec="0" sec="1341638001"/>
        <to usec="0" sec="1341638009"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.57.160.166"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="219.42.46.104"/>
        </slice>
        <from usec="0" sec="1341637207"/>
        <to usec="0" sec="1341637660"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.22.176.45"/>
        </slice>
        <from usec="0" sec="1341637213"/>
        <to usec="0" sec="1341637664"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.239.13.159"/>
        </slice>
        <from usec="0" sec="1341637551"/>
        <to usec="0" sec="1341637558"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.25.160.244"/>
        </slice>
        <from usec="0" sec="1341637586"/>
        <to usec="0" sec="1341637594"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.148.90.129"/>
        </slice>
        <from usec="0" sec="1341637614"/>
        <to usec="0" sec="1341637649"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="33.228.149.238"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.208.78.206"/>
        </slice>
        <from usec="0" sec="1341637404"/>
        <to usec="0" sec="1341637738"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="70.28.133.171"/>
        </slice>
        <from usec="0" sec="1341637482"/>
        <to usec="0" sec="1341637756"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="56.177.47.16"/>
        </slice>
        <from usec="0" sec="1341637562"/>
        <to usec="0" sec="1341637621"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.239.91.144"/>
        </slice>
        <from usec="0" sec="1341637593"/>
        <to usec="0" sec="1341637678"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="151.239.36.249"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.233.34.227"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.20.121.113"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="47.113.92.129"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637822"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.250.94.254"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637797"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="151.239.172.238"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="18.113.217.46"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637847"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.183.91.40"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637842"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="42.241.242.130"/>
        </slice>
        <from usec="0" sec="1341637202"/>
        <to usec="0" sec="1341637837"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.20.124.46"/>
        </slice>
        <from usec="0" sec="1341637206"/>
        <to usec="0" sec="1341637841"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="151.239.132.165"/>
        </slice>
        <from usec="0" sec="1341637208"/>
        <to usec="0" sec="1341637846"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.20.121.182"/>
        </slice>
        <from usec="0" sec="1341637213"/>
        <to usec="0" sec="1341637840"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,053,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.9.3.35"/>
        </slice>
        <from usec="0" sec="1341637218"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.130.67.169"/>
        </slice>
        <from usec="0" sec="1341637219"/>
        <to usec="0" sec="1341637824"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.239.174.16" src_port="80"/>
        </slice>
        <from usec="0" sec="1341637266"/>
        <to usec="0" sec="1341637841"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.57.166.201"/>
        </slice>
        <from usec="0" sec="1341637380"/>
        <to usec="0" sec="1341637832"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.221.117.240"/>
        </slice>
        <from usec="0" sec="1341637476"/>
        <to usec="0" sec="1341637695"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="151.239.36.255"/>
        </slice>
        <from usec="0" sec="1341637549"/>
        <to usec="0" sec="1341637772"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="154.213.28.172"/>
        </slice>
        <from usec="0" sec="1341637549"/>
        <to usec="0" sec="1341637733"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.20.61.53"/>
        </slice>
        <from usec="0" sec="1341637612"/>
        <to usec="0" sec="1341637847"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="155.107.130.128"/>
        </slice>
        <from usec="0" sec="1341637704"/>
        <to usec="0" sec="1341637847"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="101.182.88.91"/>
        </slice>
        <from usec="0" sec="1341637739"/>
        <to usec="0" sec="1341637768"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.215.190.172"/>
        </slice>
        <from usec="0" sec="1341637758"/>
        <to usec="0" sec="1341637824"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="83.152.84.109"/>
        </slice>
        <from usec="0" sec="1341637763"/>
        <to usec="0" sec="1341637804"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="130.133.226.99"/>
        </slice>
        <from usec="0" sec="1341637778"/>
        <to usec="0" sec="1341637790"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="14.120.247.1"/>
        </slice>
        <from usec="0" sec="1341637787"/>
        <to usec="0" sec="1341637799"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="1.228.68.80"/>
        </slice>
        <from usec="0" sec="1341637802"/>
        <to usec="0" sec="1341637808"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="105.83.118.200"/>
        </slice>
        <from usec="0" sec="1341637812"/>
        <to usec="0" sec="1341637848"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="151.239.175.149"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637938"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="151.239.148.86"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637938"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.250.174.209"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341637938"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="42.241.240.67"/>
        </slice>
        <from usec="0" sec="1341637224"/>
        <to usec="0" sec="1341637908"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="34.131.209.71"/>
        </slice>
        <from usec="0" sec="1341637413"/>
        <to usec="0" sec="1341637884"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.250.79.250"/>
        </slice>
        <from usec="0" sec="1341637760"/>
        <to usec="0" sec="1341637935"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.170.230.2"/>
        </slice>
        <from usec="0" sec="1341637822"/>
        <to usec="0" sec="1341637830"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="108.148.64.126"/>
        </slice>
        <from usec="0" sec="1341637840"/>
        <to usec="0" sec="1341637860"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.186.221.107"/>
        </slice>
        <from usec="0" sec="1341637844"/>
        <to usec="0" sec="1341637919"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="220.187.59.110"/>
        </slice>
        <from usec="0" sec="1341637886"/>
        <to usec="0" sec="1341637903"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.45.5.209"/>
        </slice>
        <from usec="0" sec="1341637921"/>
        <to usec="0" sec="1341637928"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="151.239.36.0"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="132.224.203.174"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341638019"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="151.239.175.223"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341638020"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="192.80.202.224"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341638027"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.221.118.175"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341638025"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="201.20.56.150"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341638027"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.20.122.163"/>
        </slice>
        <from usec="0" sec="1341637201"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="220.44.55.181"/>
        </slice>
        <from usec="0" sec="1341637202"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.119.18.68"/>
        </slice>
        <from usec="0" sec="1341637203"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.244.244.87"/>
        </slice>
        <from usec="0" sec="1341637203"/>
        <to usec="0" sec="1341638013"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="151.239.155.174"/>
        </slice>
        <from usec="0" sec="1341637204"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="161.11.110.9"/>
        </slice>
        <from usec="0" sec="1341637204"/>
        <to usec="0" sec="1341638027"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.250.172.35"/>
        </slice>
        <from usec="0" sec="1341637204"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.17.218.76"/>
        </slice>
        <from usec="0" sec="1341637205"/>
        <to usec="0" sec="1341638024"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.20.96.168"/>
        </slice>
        <from usec="0" sec="1341637206"/>
        <to usec="0" sec="1341638027"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.250.72.201"/>
        </slice>
        <from usec="0" sec="1341637211"/>
        <to usec="0" sec="1341637864"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.170.230.152"/>
        </slice>
        <from usec="0" sec="1341637219"/>
        <to usec="0" sec="1341638000"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.113.76.162"/>
        </slice>
        <from usec="0" sec="1341637220"/>
        <to usec="0" sec="1341638026"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="151.239.172.233"/>
        </slice>
        <from usec="0" sec="1341637229"/>
        <to usec="0" sec="1341638028"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="161.183.91.32"/>
        </slice>
        <from usec="0" sec="1341637391"/>
        <to usec="0" sec="1341638005"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="72.233.36.131"/>
        </slice>
        <from usec="0" sec="1341637433"/>
        <to usec="0" sec="1341638021"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.145.2.59"/>
        </slice>
        <from usec="0" sec="1341637537"/>
        <to usec="0" sec="1341638018"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="37.100.149.138"/>
        </slice>
        <from usec="0" sec="1341637797"/>
        <to usec="0" sec="1341638022"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.52.65.35"/>
        </slice>
        <from usec="0" sec="1341637848"/>
        <to usec="0" sec="1341638016"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.250.229.175"/>
        </slice>
        <from usec="0" sec="1341637849"/>
        <to usec="0" sec="1341637991"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="200.52.97.76" dst_ip="56.177.47.18" src_port="53"/>
            <filter src_ip="200.52.97.78" dst_ip="56.177.47.18" src_port="53"/>
        </slice>
        <from usec="0" sec="1341637865"/>
        <to usec="0" sec="1341637920"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.106.146.199"/>
        </slice>
        <from usec="0" sec="1341637886"/>
        <to usec="0" sec="1341637917"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="34.230.10.12"/>
        </slice>
        <from usec="0" sec="1341637889"/>
        <to usec="0" sec="1341637990"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.250.97.220"/>
        </slice>
        <from usec="0" sec="1341637895"/>
        <to usec="0" sec="1341638002"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.250.207.80"/>
        </slice>
        <from usec="0" sec="1341637957"/>
        <to usec="0" sec="1341638026"/>
    </anomaly>
    <anomaly type="notice" value="0.445157,1.014290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.90.228.197"/>
        </slice>
        <from usec="0" sec="1341637978"/>
        <to usec="0" sec="1341637985"/>
    </anomaly>
    <anomaly type="notice" value="0.619966,0.949517,999,0 0 0 1 0 0 1 1 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="200.57.89.52"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637307"/>
    </anomaly>
    <anomaly type="notice" value="0.610137,1.017130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.102.247.95" src_port="21"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637246"/>
    </anomaly>
    <anomaly type="notice" value="0.610137,1.017130,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="201.20.114.18" dst_port="3124"/>
        </slice>
        <from usec="0" sec="1341637335"/>
        <to usec="0" sec="1341637381"/>
    </anomaly>
    <anomaly type="notice" value="0.610137,1.017130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="46.88.219.100" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="1341637785"/>
        <to usec="0" sec="1341637831"/>
    </anomaly>
    <anomaly type="notice" value="0.610137,1.017130,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1341637785"/>
        <to usec="0" sec="1341637831"/>
    </anomaly>
    <anomaly type="notice" value="0.610137,1.017130,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="194.129.82.50" src_port="6667" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1341637785"/>
        <to usec="0" sec="1341637831"/>
    </anomaly>
    <anomaly type="notice" value="0.619966,0.949517,999,0 0 0 1 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="161.11.134.77" dst_port="53"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341637485"/>
    </anomaly>
    <anomaly type="notice" value="0.619966,0.949517,999,0 0 0 1 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="151.239.37.122" src_port="16413"/>
        </slice>
        <from usec="0" sec="1341637200"/>
        <to usec="0" sec="1341638020"/>
    </anomaly>
</admd:annotation>
