<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.706327,1.122530,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.160.35.14" dst_ip="118.197.130.201" src_port="57456" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1344402609"/>
        <to usec="0" sec="1344402612"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.227.105.56"/>
        </slice>
        <from usec="0" sec="1344402436"/>
        <to usec="0" sec="1344402438"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="123.47.13.55" dst_ip="123.47.13.55" proto="icmp"/>
        </slice>
        <from usec="0" sec="1344402750"/>
        <to usec="0" sec="1344402759"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.174.16.85"/>
        </slice>
        <from usec="0" sec="1344402435"/>
        <to usec="0" sec="1344402437"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.85.86.71" dst_port="80"/>
            <filter dst_ip="201.85.86.71"/>
        </slice>
        <from usec="0" sec="1344402435"/>
        <to usec="0" sec="1344402437"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="50.218.84.68" src_port="1027" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1344402609"/>
        <to usec="0" sec="1344402623"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="44.228.80.82" dst_port="445" proto="tcp"/>
        </slice>
        <from usec="0" sec="1344402604"/>
        <to usec="0" sec="1344402615"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="63.160.142.221" proto="icmp"/>
        </slice>
        <from usec="0" sec="1344402225"/>
        <to usec="0" sec="1344402787"/>
    </anomaly>
    <anomaly type="notice" value="0.706327,1.122530,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="135.84.26.102"/>
        </slice>
        <from usec="0" sec="1344402404"/>
        <to usec="0" sec="1344402407"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="123.47.13.55"/>
        </slice>
        <from usec="0" sec="1344402720"/>
        <to usec="0" sec="1344402766"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.70.198.45" dst_ip="132.110.145.224" dst_port="520"/>
        </slice>
        <from usec="0" sec="1344402765"/>
        <to usec="0" sec="1344402811"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="156.81.228.99" dst_ip="132.110.145.224" dst_port="520"/>
        </slice>
        <from usec="0" sec="1344402765"/>
        <to usec="0" sec="1344402811"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.166.163.146" dst_ip="132.110.145.224" dst_port="520"/>
        </slice>
        <from usec="0" sec="1344402765"/>
        <to usec="0" sec="1344402811"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="21.22.225.180"/>
        </slice>
        <from usec="0" sec="1344402855"/>
        <to usec="0" sec="1344402901"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="31.7.186.7"/>
        </slice>
        <from usec="0" sec="1344402855"/>
        <to usec="0" sec="1344402901"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.207.88.33"/>
        </slice>
        <from usec="0" sec="1344402855"/>
        <to usec="0" sec="1344402901"/>
    </anomaly>
    <anomaly type="notice" value="0.694152,1.173270,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="100.70.227.210"/>
        </slice>
        <from usec="0" sec="1344402855"/>
        <to usec="0" sec="1344402901"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="0.64.198.121"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="163.71.5.107"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.71.209.2"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="189.11.5.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="189.11.12.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="138.202.4.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.659309,1.091890,999,1 0 0 0 0 0 0 0 0 1 0 0,ipv46tun">
        <slice>
            <filter src_ip="195.71.70.250"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.194.106.202"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="200.169.170.216"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="53.152.143.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.206.74.84"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="163.87.92.203"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="178.163.55.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="135.84.28.234"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.84.25.114"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.84.25.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.84.25.79" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="135.84.87.148" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="159.166.188.123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="200.4.8.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="200.194.157.251"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.749450,1.134180,020,0 0 0 0 0 0 1 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.169.119.103" dst_port="80"/>
            <filter dst_ip="200.169.119.103"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="2.188.108.137" dst_ip="201.85.88.67" dst_port="80"/>
            <filter src_ip="29.221.220.13" dst_ip="201.85.88.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="205.136.98.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="215.8.253.16"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="217.4.228.70"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="86.39.58.136"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="125.2.193.146"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="124.66.48.189"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.71.208.126" dst_ip="50.185.112.241" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.435791,1.097950,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.185.114.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="163.71.229.33" dst_ip="50.185.117.85" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="163.87.92.241" dst_ip="53.21.64.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,salphfl">
        <slice>
            <filter src_ip="189.11.0.206" dst_ip="50.185.112.29" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="189.11.5.83" dst_ip="50.185.112.154" src_port="80" dst_port="58309"/>
            <filter src_ip="189.11.5.83" dst_ip="50.185.112.154" src_port="80" dst_port="35263"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,020,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.169.119.103" src_port="80"/>
            <filter src_ip="200.169.119.103"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter dst_ip="135.84.25.19" src_port="80"/>
            <filter dst_ip="135.84.69.64" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="201.85.88.95" dst_ip="6.141.90.194" src_port="80" dst_port="38765"/>
            <filter src_ip="201.85.88.95" dst_ip="6.141.90.194" src_port="80" dst_port="32219"/>
            <filter src_ip="201.85.88.95" dst_ip="6.141.90.194" src_port="80" dst_port="29829"/>
            <filter src_ip="135.84.25.149" dst_ip="6.141.90.194" src_port="56561" dst_port="47115"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="9.64.193.190" dst_ip="164.206.84.100" src_port="80"/>
            <filter dst_ip="164.206.84.100"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="221.77.141.40" dst_ip="164.206.210.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="91.166.236.250" dst_ip="135.84.224.157" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,504,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="163.87.136.159" dst_ip="156.64.150.129" src_port="49329" dst_port="443"/>
            <filter src_ip="201.85.84.37" dst_ip="156.64.150.129" src_port="63406" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,999,0 0 0 0 0 0 0 0 0 1 1 0,ptpposcaUDP">
        <slice>
            <filter src_ip="200.67.170.161" dst_ip="192.168.206.22" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.85.87.164" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,999,0 0 0 0 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="201.85.88.13" dst_port="61963"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="135.84.2.231" dst_ip="50.185.117.224"/>
            <filter dst_ip="50.185.117.224" src_port="80"/>
            <filter src_ip="135.84.2.231" dst_ip="214.123.148.206" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,mptplaHTTP">
        <slice>
            <filter src_ip="189.11.142.41" dst_ip="50.185.112.204" src_port="80"/>
            <filter src_ip="163.71.233.149" dst_ip="50.185.112.204" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.71.88.38" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.577886,1.087740,999,0 0 0 0 0 0 0 0 0 1 1 0,mptpla">
        <slice>
            <filter src_ip="164.206.149.139" dst_ip="53.129.72.83" src_port="53"/>
            <filter src_ip="201.85.89.227" dst_ip="53.129.72.83" src_port="53"/>
            <filter src_ip="201.85.89.242" dst_ip="53.129.72.83" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
