<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.13.170.225" dst_ip="204.69.138.44" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349845874"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="66.13.205.57" dst_ip="137.177.220.175" src_port="80" dst_port="55052" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845339"/>
        <to usec="0" sec="1349846098"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.70.73" dst_ip="150.31.128.123" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845802"/>
        <to usec="0" sec="1349845805"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="122.197.94.161"/>
        </slice>
        <from usec="0" sec="1349845757"/>
        <to usec="0" sec="1349845760"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.17.147.81" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845360"/>
        <to usec="0" sec="1349845653"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.64.164" dst_ip="212.54.180.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845372"/>
        <to usec="0" sec="1349845375"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.48.197" dst_ip="66.44.42.224" src_port="61170" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845773"/>
        <to usec="0" sec="1349845777"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="36.227.32.145" dst_ip="137.177.236.212" src_port="80" dst_port="50207" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845698"/>
        <to usec="0" sec="1349845701"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="196.45.120.84" dst_ip="204.69.138.108" src_port="80" dst_port="63754" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845245"/>
        <to usec="0" sec="1349845247"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.50.219.178" dst_ip="204.75.101.172" src_port="80" dst_port="33952" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845825"/>
        <to usec="0" sec="1349845827"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.141.65.6"/>
        </slice>
        <from usec="0" sec="1349845853"/>
        <to usec="0" sec="1349845856"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="50.74.17.41" dst_ip="137.177.223.194" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845959"/>
        <to usec="0" sec="1349845961"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="196.45.120.91" dst_ip="137.177.140.56" src_port="80" dst_port="50844" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349846073"/>
        <to usec="0" sec="1349846076"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter src_ip="42.97.41.0" dst_ip="137.177.115.39"/>
        </slice>
        <from usec="0" sec="1349845338"/>
        <to usec="0" sec="1349845341"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.141.187.128" dst_ip="202.215.8.163" src_port="50482" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845754"/>
        <to usec="0" sec="1349845762"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="45.198.89.115" dst_ip="204.69.56.63" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845917"/>
        <to usec="0" sec="1349845920"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.196.234.216" dst_ip="162.159.227.176" src_port="443" dst_port="1068" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845345"/>
        <to usec="0" sec="1349845951"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.181.208.176"/>
        </slice>
        <from usec="0" sec="1349846059"/>
        <to usec="0" sec="1349846067"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.149.198.188" dst_ip="51.83.63.51" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349845535"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.166.237" dst_ip="66.44.40.187" src_port="61441" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845221"/>
        <to usec="0" sec="1349845733"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.159.209.103" dst_ip="48.185.112.146" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845478"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="137.177.85.192" dst_ip="55.52.241.22" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845400"/>
        <to usec="0" sec="1349846053"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.17.132.241" dst_ip="197.236.162.115" src_port="2947" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845932"/>
        <to usec="0" sec="1349846044"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.87.118"/>
        </slice>
        <from usec="0" sec="1349845647"/>
        <to usec="0" sec="1349845701"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="162.159.208.77" dst_ip="153.172.165.18" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845727"/>
        <to usec="0" sec="1349845730"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.177.85.142" dst_ip="221.126.96.193" src_port="8835" dst_port="12438" proto="udp"/>
        </slice>
        <from usec="0" sec="1349845708"/>
        <to usec="0" sec="1349845711"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.69.62.205"/>
        </slice>
        <from usec="0" sec="1349845239"/>
        <to usec="0" sec="1349845800"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.1.133.8"/>
        </slice>
        <from usec="0" sec="1349845250"/>
        <to usec="0" sec="1349845253"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.29.213" dst_ip="116.111.13.164" src_port="54889" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845787"/>
        <to usec="0" sec="1349846001"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.61.115"/>
        </slice>
        <from usec="0" sec="1349845296"/>
        <to usec="0" sec="1349845755"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.40.92.102" dst_ip="50.71.212.249" src_port="59199" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845618"/>
        <to usec="0" sec="1349846092"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.212.0" dst_ip="123.92.40.219" src_port="4662" dst_port="3553" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845708"/>
        <to usec="0" sec="1349845711"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.79.96.195" dst_ip="41.55.46.32" src_port="49943" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845467"/>
        <to usec="0" sec="1349845744"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.146.215"/>
        </slice>
        <from usec="0" sec="1349845597"/>
        <to usec="0" sec="1349845919"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.64.237"/>
        </slice>
        <from usec="0" sec="1349845362"/>
        <to usec="0" sec="1349845366"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.131.20"/>
        </slice>
        <from usec="0" sec="1349845698"/>
        <to usec="0" sec="1349845701"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.69.57.230"/>
        </slice>
        <from usec="0" sec="1349845350"/>
        <to usec="0" sec="1349845849"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.198.92.35" dst_ip="204.69.131.202" src_port="443" dst_port="63762" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845708"/>
        <to usec="0" sec="1349845711"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,010,1 0 0 0 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="48.183.223.254" dst_ip="192.169.12.24" src_port="80" dst_port="1234" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845510"/>
        <to usec="0" sec="1349845513"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.53.108" dst_ip="116.109.180.154" src_port="51903" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349846085"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.73.248"/>
        </slice>
        <from usec="0" sec="1349845445"/>
        <to usec="0" sec="1349845581"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="179.70.212.159" dst_ip="137.177.175.91" src_port="41622" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845703"/>
        <to usec="0" sec="1349845706"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.71.186" dst_ip="212.4.123.56" src_port="50154" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845817"/>
        <to usec="0" sec="1349845820"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.141.130" dst_ip="66.46.78.139" src_port="50396" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845420"/>
        <to usec="0" sec="1349846022"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="196.240.168.20"/>
        </slice>
        <from usec="0" sec="1349845596"/>
        <to usec="0" sec="1349845600"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.73.164" dst_ip="201.203.17.168" src_port="51848" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845908"/>
        <to usec="0" sec="1349845911"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.86.38"/>
        </slice>
        <from usec="0" sec="1349846061"/>
        <to usec="0" sec="1349846070"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.86.58"/>
        </slice>
        <from usec="0" sec="1349845586"/>
        <to usec="0" sec="1349845589"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.87.148"/>
        </slice>
        <from usec="0" sec="1349845283"/>
        <to usec="0" sec="1349845287"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="50.71.212.249"/>
        </slice>
        <from usec="0" sec="1349845597"/>
        <to usec="0" sec="1349845600"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.177.225.82"/>
        </slice>
        <from usec="0" sec="1349845259"/>
        <to usec="0" sec="1349845875"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="185.219.37.88"/>
        </slice>
        <from usec="0" sec="1349845415"/>
        <to usec="0" sec="1349845419"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.69.131.181" dst_ip="52.224.32.112" src_port="49290" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845986"/>
        <to usec="0" sec="1349846087"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="162.159.7.251" dst_ip="59.82.152.119" src_port="59854" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845336"/>
        <to usec="0" sec="1349845570"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.166.58" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845772"/>
        <to usec="0" sec="1349845880"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.40.94.66" dst_port="25"/>
        </slice>
        <from usec="0" sec="1349845246"/>
        <to usec="0" sec="1349845566"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="44.198.97.174"/>
        </slice>
        <from usec="0" sec="1349845757"/>
        <to usec="0" sec="1349845760"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="205.79.96.230" dst_ip="205.79.96.230" src_port="55996" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845579"/>
        <to usec="0" sec="1349845956"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.17.143.166" dst_ip="196.196.127.58" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845357"/>
        <to usec="0" sec="1349846020"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.177.101.80" dst_ip="196.214.23.108" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845698"/>
        <to usec="0" sec="1349845769"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.24.190" dst_ip="201.160.151.62" dst_port="443"/>
            <filter src_ip="164.141.24.190" dst_ip="203.100.20.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845865"/>
        <to usec="0" sec="1349846097"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.38.55.82" dst_ip="164.17.211.245" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845667"/>
        <to usec="0" sec="1349845676"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.35.50.154" dst_ip="137.177.86.180" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349846060"/>
        <to usec="0" sec="1349846062"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.141.48.193"/>
        </slice>
        <from usec="0" sec="1349845324"/>
        <to usec="0" sec="1349845328"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.67.220" dst_ip="60.167.193.81" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845422"/>
        <to usec="0" sec="1349845425"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.69.139.152"/>
        </slice>
        <from usec="0" sec="1349845892"/>
        <to usec="0" sec="1349845895"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.62.220"/>
        </slice>
        <from usec="0" sec="1349845778"/>
        <to usec="0" sec="1349845781"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.69.139.248"/>
        </slice>
        <from usec="0" sec="1349846043"/>
        <to usec="0" sec="1349846046"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.69.139.213" dst_ip="37.20.166.148" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845388"/>
        <to usec="0" sec="1349845392"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="219.127.77.71"/>
        </slice>
        <from usec="0" sec="1349845613"/>
        <to usec="0" sec="1349845616"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.73.201"/>
        </slice>
        <from usec="0" sec="1349845473"/>
        <to usec="0" sec="1349845477"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.229.242.96"/>
        </slice>
        <from usec="0" sec="1349845643"/>
        <to usec="0" sec="1349845650"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.19.54.165"/>
        </slice>
        <from usec="0" sec="1349845268"/>
        <to usec="0" sec="1349845271"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.79.107.173" dst_ip="201.160.62.7" dst_port="5667" proto="tcp"/>
        </slice>
        <from usec="0" sec="1349845280"/>
        <to usec="0" sec="1349845525"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.79.106.24"/>
        </slice>
        <from usec="0" sec="1349845844"/>
        <to usec="0" sec="1349845847"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,999,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.35.252.169" dst_ip="204.75.98.3"/>
        </slice>
        <from usec="0" sec="1349845443"/>
        <to usec="0" sec="1349846088"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.121.204" dst_port="80"/>
            <filter src_ip="137.177.121.204" dst_ip="55.53.169.136" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845498"/>
        <to usec="0" sec="1349845742"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="50.98.155.236"/>
        </slice>
        <from usec="0" sec="1349845480"/>
        <to usec="0" sec="1349845483"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.42.33"/>
        </slice>
        <from usec="0" sec="1349845381"/>
        <to usec="0" sec="1349845385"/>
    </anomaly>
    <anomaly type="notice" value="0.567875,1.434120,502,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.177.43.10"/>
        </slice>
        <from usec="0" sec="1349846031"/>
        <to usec="0" sec="1349846034"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="43.21.68.34" dst_ip="137.177.238.186" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845604"/>
        <to usec="0" sec="1349845607"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.177.139.24" dst_ip="197.234.142.81" src_port="61524" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349846054"/>
        <to usec="0" sec="1349846067"/>
    </anomaly>
    <anomaly type="notice" value="0.906261,1.408970,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="201.254.14.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845228"/>
        <to usec="0" sec="1349845993"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="44.229.66.77" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845408"/>
        <to usec="0" sec="1349846046"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.159.27.233" dst_ip="43.92.86.199" dst_port="80"/>
            <filter src_ip="162.159.27.233" dst_ip="43.92.86.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845660"/>
        <to usec="0" sec="1349845664"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.17.218.8" dst_ip="209.135.178.39" src_port="2305" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845252"/>
        <to usec="0" sec="1349846022"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="33.188.129.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845266"/>
        <to usec="0" sec="1349845373"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.75.71.97" dst_ip="44.37.131.60" src_port="25" dst_port="44740"/>
            <filter src_ip="204.75.71.97" dst_ip="157.236.217.117" src_port="25" dst_port="25000"/>
            <filter src_ip="204.75.71.97" dst_ip="196.214.23.70" src_port="25" dst_port="20485"/>
            <filter src_ip="204.75.71.97" dst_ip="55.52.14.138" src_port="24335" dst_port="25"/>
        </slice>
        <from usec="0" sec="1349845675"/>
        <to usec="0" sec="1349845685"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="164.141.140.39" dst_ip="66.46.182.219" src_port="61697" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845400"/>
        <to usec="0" sec="1349846057"/>
    </anomaly>
    <anomaly type="notice" value="0.906261,1.408970,504,1 1 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="204.69.131.202" dst_ip="133.198.92.35" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.70.212.156" dst_ip="204.69.61.147" src_port="37752" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845643"/>
        <to usec="0" sec="1349845646"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="164.141.48.13" dst_ip="214.65.227.37" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845279"/>
        <to usec="0" sec="1349846044"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.177.96.97" dst_port="25"/>
        </slice>
        <from usec="0" sec="1349845432"/>
        <to usec="0" sec="1349846037"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.177.223.74" dst_ip="213.173.233.139" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845231"/>
        <to usec="0" sec="1349845363"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.4" dst_ip="56.51.237.138" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="56.51.237.138" src_port="53"/>
            <filter src_ip="204.75.121.7" dst_ip="56.51.237.138" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845579"/>
        <to usec="0" sec="1349846057"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.7" dst_ip="36.191.233.52" src_port="53"/>
            <filter src_ip="204.75.121.4" dst_ip="36.191.233.52" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="36.191.233.52" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845532"/>
        <to usec="0" sec="1349845818"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.48" dst_ip="56.18.199.82" src_port="53"/>
            <filter src_ip="204.75.121.4" dst_ip="56.18.199.82" src_port="53"/>
            <filter src_ip="204.75.121.7" dst_ip="56.18.199.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845416"/>
        <to usec="0" sec="1349845944"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.7" dst_ip="56.186.146.79" src_port="53"/>
            <filter src_ip="204.75.121.4" dst_ip="56.186.146.79" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="56.186.146.79" src_port="53"/>
        </slice>
        <from usec="0" sec="1349846019"/>
        <to usec="0" sec="1349846087"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.48" dst_ip="76.132.129.35" src_port="53"/>
            <filter src_ip="204.75.121.7" dst_ip="76.132.129.35" src_port="53"/>
            <filter src_ip="204.75.121.4" dst_ip="76.132.129.35" src_port="53"/>
        </slice>
        <from usec="0" sec="1349846082"/>
        <to usec="0" sec="1349846085"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.7" dst_ip="50.49.128.108" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="50.49.128.108" src_port="53"/>
            <filter src_ip="204.75.121.4" dst_ip="50.49.128.108" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845658"/>
        <to usec="0" sec="1349846080"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.4" dst_ip="57.17.40.39" src_port="53"/>
            <filter src_ip="204.75.121.7" dst_ip="57.17.40.39" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="57.17.40.39" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845602"/>
        <to usec="0" sec="1349845605"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.151.15" dst_ip="212.56.2.124" dst_port="80"/>
            <filter src_ip="204.69.151.15" dst_ip="201.254.14.22" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845331"/>
        <to usec="0" sec="1349845337"/>
    </anomaly>
    <anomaly type="notice" value="0.906261,1.408970,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.141.68.138" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845578"/>
        <to usec="0" sec="1349845805"/>
    </anomaly>
    <anomaly type="notice" value="0.945018,1.454350,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.75.121.4" dst_ip="98.31.28.119" src_port="53"/>
            <filter src_ip="204.75.121.7" dst_ip="98.31.28.119" src_port="53"/>
            <filter src_ip="204.75.121.48" dst_ip="98.31.28.119" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845467"/>
        <to usec="0" sec="1349845490"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.180.81"/>
        </slice>
        <from usec="0" sec="1349845627"/>
        <to usec="0" sec="1349845856"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.105.76.126"/>
        </slice>
        <from usec="0" sec="1349845209"/>
        <to usec="0" sec="1349845444"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="92.140.17.252"/>
        </slice>
        <from usec="0" sec="1349845259"/>
        <to usec="0" sec="1349845275"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="137.177.96.104"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845398"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="50.74.21.193"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845394"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.91.152"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845398"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="135.145.164.232"/>
        </slice>
        <from usec="0" sec="1349845214"/>
        <to usec="0" sec="1349845378"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.48.35.205"/>
        </slice>
        <from usec="0" sec="1349845216"/>
        <to usec="0" sec="1349845398"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.53.7.100"/>
        </slice>
        <from usec="0" sec="1349845245"/>
        <to usec="0" sec="1349845326"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.102.101.149"/>
        </slice>
        <from usec="0" sec="1349845286"/>
        <to usec="0" sec="1349845315"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="200.118.32.74"/>
        </slice>
        <from usec="0" sec="1349845301"/>
        <to usec="0" sec="1349845315"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="215.136.22.29"/>
        </slice>
        <from usec="0" sec="1349845376"/>
        <to usec="0" sec="1349845386"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="116.48.29.158"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845488"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.177.85.236"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845488"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.141.6.84"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845488"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.88.33"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.75.71.8"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845486"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,999,1 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.141.66.65" src_port="41824"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845755"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="37.20.162.131"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845752"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="123.130.27.93"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845484"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="162.159.88.217"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845485"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.79.111.16"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845488"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="164.144.129.81"/>
        </slice>
        <from usec="0" sec="1349845206"/>
        <to usec="0" sec="1349845485"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="205.79.104.179" dst_ip="34.198.70.189" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349845474"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.177.85.132"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349845480"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.185.40.225"/>
        </slice>
        <from usec="0" sec="1349845234"/>
        <to usec="0" sec="1349845471"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.169.239.213"/>
        </slice>
        <from usec="0" sec="1349845245"/>
        <to usec="0" sec="1349845516"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="220.139.172.156"/>
        </slice>
        <from usec="0" sec="1349845272"/>
        <to usec="0" sec="1349845481"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.180.29"/>
        </slice>
        <from usec="0" sec="1349845628"/>
        <to usec="0" sec="1349845961"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.67.231.11"/>
        </slice>
        <from usec="0" sec="1349845306"/>
        <to usec="0" sec="1349845369"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="58.181.78.33"/>
        </slice>
        <from usec="0" sec="1349845318"/>
        <to usec="0" sec="1349845488"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="50.100.23.102"/>
        </slice>
        <from usec="0" sec="1349845322"/>
        <to usec="0" sec="1349845346"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="36.164.89.194"/>
        </slice>
        <from usec="0" sec="1349845395"/>
        <to usec="0" sec="1349845421"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="82.82.139.21"/>
        </slice>
        <from usec="0" sec="1349845414"/>
        <to usec="0" sec="1349845462"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="33.216.106.125"/>
        </slice>
        <from usec="0" sec="1349845459"/>
        <to usec="0" sec="1349845469"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,901,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.98.221.186"/>
        </slice>
        <from usec="0" sec="1349845486"/>
        <to usec="0" sec="1349845487"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.159.93.246"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,502,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="122.102.97.32"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.178.159.42"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.48.35.207"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845554"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="135.145.199.199"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845562"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.69.155.34"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845558"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="49.167.142.19"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="205.137.137.68"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.212.3"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845611"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="196.45.120.70"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845536"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.73.44"/>
        </slice>
        <from usec="0" sec="1349845204"/>
        <to usec="0" sec="1349845562"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="129.172.232.190"/>
        </slice>
        <from usec="0" sec="1349845208"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.177.84.84"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.180.68"/>
        </slice>
        <from usec="0" sec="1349845216"/>
        <to usec="0" sec="1349845546"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.177.139.32"/>
        </slice>
        <from usec="0" sec="1349845218"/>
        <to usec="0" sec="1349845562"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="116.109.147.131"/>
        </slice>
        <from usec="0" sec="1349845245"/>
        <to usec="0" sec="1349845577"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.73.38"/>
        </slice>
        <from usec="0" sec="1349845312"/>
        <to usec="0" sec="1349845558"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="43.186.195.244"/>
        </slice>
        <from usec="0" sec="1349845322"/>
        <to usec="0" sec="1349845462"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="43.167.225.209"/>
        </slice>
        <from usec="0" sec="1349845353"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.106.148.22"/>
        </slice>
        <from usec="0" sec="1349845367"/>
        <to usec="0" sec="1349845572"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.177.133.218"/>
        </slice>
        <from usec="0" sec="1349845368"/>
        <to usec="0" sec="1349845446"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.141.136.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845374"/>
        <to usec="0" sec="1349845769"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.159.232.14"/>
        </slice>
        <from usec="0" sec="1349845445"/>
        <to usec="0" sec="1349845513"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="51.222.161.157"/>
        </slice>
        <from usec="0" sec="1349845451"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.23.219.60"/>
        </slice>
        <from usec="0" sec="1349845486"/>
        <to usec="0" sec="1349845505"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="221.235.98.142"/>
        </slice>
        <from usec="0" sec="1349845503"/>
        <to usec="0" sec="1349845516"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.163.209.125"/>
        </slice>
        <from usec="0" sec="1349845505"/>
        <to usec="0" sec="1349845555"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="35.104.23.20"/>
        </slice>
        <from usec="0" sec="1349845535"/>
        <to usec="0" sec="1349845583"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.177.231.141"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845664"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="44.67.125.191"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.30.87.90"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845582"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.40.85.15"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.159.106.223"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.88.98.148"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845559"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.177.96.139"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="45.38.192.227"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845923"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.153.113.89"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter dst_ip="209.43.219.153"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845667"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.159.70.202"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845654"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.177.76.190"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845649"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.159.181.140"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845937"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="48.89.7.27"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.17.218.150" dst_ip="212.56.2.124" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845661"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.222.157"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845666"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="137.177.220.150"/>
        </slice>
        <from usec="0" sec="1349845204"/>
        <to usec="0" sec="1349845657"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.17.172.241"/>
        </slice>
        <from usec="0" sec="1349845205"/>
        <to usec="0" sec="1349845500"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="221.145.94.96"/>
        </slice>
        <from usec="0" sec="1349845206"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.177.0.37"/>
        </slice>
        <from usec="0" sec="1349845207"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="179.45.208.116"/>
        </slice>
        <from usec="0" sec="1349845207"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="109.76.47.90"/>
        </slice>
        <from usec="0" sec="1349845208"/>
        <to usec="0" sec="1349845660"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="137.177.96.96"/>
        </slice>
        <from usec="0" sec="1349845210"/>
        <to usec="0" sec="1349845666"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.79.104.200"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349845615"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="40.202.85.245"/>
        </slice>
        <from usec="0" sec="1349845213"/>
        <to usec="0" sec="1349845649"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="204.75.65.102"/>
        </slice>
        <from usec="0" sec="1349845215"/>
        <to usec="0" sec="1349845662"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.48.35.204"/>
        </slice>
        <from usec="0" sec="1349845216"/>
        <to usec="0" sec="1349845665"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="116.105.76.127"/>
        </slice>
        <from usec="0" sec="1349845227"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="54.142.68.95"/>
        </slice>
        <from usec="0" sec="1349845239"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="164.17.150.189"/>
        </slice>
        <from usec="0" sec="1349845247"/>
        <to usec="0" sec="1349845653"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.220.153.93"/>
        </slice>
        <from usec="0" sec="1349845266"/>
        <to usec="0" sec="1349845535"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="52.21.180.222"/>
        </slice>
        <from usec="0" sec="1349845273"/>
        <to usec="0" sec="1349845588"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="164.141.71.90"/>
        </slice>
        <from usec="0" sec="1349845280"/>
        <to usec="0" sec="1349845663"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="204.193.169.209"/>
        </slice>
        <from usec="0" sec="1349845334"/>
        <to usec="0" sec="1349845542"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.65.105"/>
        </slice>
        <from usec="0" sec="1349845417"/>
        <to usec="0" sec="1349845661"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="45.100.101.32"/>
        </slice>
        <from usec="0" sec="1349845446"/>
        <to usec="0" sec="1349845490"/>
    </anomaly>
    <anomaly type="notice" value="0.871830,1.352140,503,1 0 0 1 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="219.210.18.240" dst_ip="205.79.100.92" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.236.10.242"/>
        </slice>
        <from usec="0" sec="1349845501"/>
        <to usec="0" sec="1349845559"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.26.241.133"/>
        </slice>
        <from usec="0" sec="1349845501"/>
        <to usec="0" sec="1349845555"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.17.132.172"/>
        </slice>
        <from usec="0" sec="1349845518"/>
        <to usec="0" sec="1349845663"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.136.130"/>
        </slice>
        <from usec="0" sec="1349845565"/>
        <to usec="0" sec="1349845644"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.29.224.3"/>
        </slice>
        <from usec="0" sec="1349845568"/>
        <to usec="0" sec="1349845635"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="54.142.0.24"/>
        </slice>
        <from usec="0" sec="1349845602"/>
        <to usec="0" sec="1349845605"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="59.116.245.135"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="192.67.73.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="38.42.178.190"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845757"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.159.116.87" src_port="53"/>
            <filter src_ip="51.151.95.67" dst_ip="162.159.116.87" src_port="443"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845754"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="137.177.96.139" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845757"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="134.123.137.118"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845755"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.213.2.137"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845757"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.14"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.81.16.230"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845752"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.11.17"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845756"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="222.52.11.179"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.24.113.134"/>
        </slice>
        <from usec="0" sec="1349845204"/>
        <to usec="0" sec="1349845715"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.149.151.194"/>
        </slice>
        <from usec="0" sec="1349845205"/>
        <to usec="0" sec="1349845749"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="217.81.84.8"/>
        </slice>
        <from usec="0" sec="1349845207"/>
        <to usec="0" sec="1349845751"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="55.52.241.202"/>
        </slice>
        <from usec="0" sec="1349845208"/>
        <to usec="0" sec="1349845657"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="137.177.137.218"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349845750"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.11.71.85"/>
        </slice>
        <from usec="0" sec="1349845253"/>
        <to usec="0" sec="1349845736"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="76.171.205.103"/>
        </slice>
        <from usec="0" sec="1349845262"/>
        <to usec="0" sec="1349845665"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="45.5.101.158"/>
        </slice>
        <from usec="0" sec="1349845283"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.180.35"/>
        </slice>
        <from usec="0" sec="1349845356"/>
        <to usec="0" sec="1349845634"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.55.202"/>
        </slice>
        <from usec="0" sec="1349845418"/>
        <to usec="0" sec="1349845586"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="195.194.128.70"/>
        </slice>
        <from usec="0" sec="1349845427"/>
        <to usec="0" sec="1349845756"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="185.219.132.25"/>
        </slice>
        <from usec="0" sec="1349845429"/>
        <to usec="0" sec="1349845749"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="137.177.220.138" src_port="11740"/>
            <filter src_ip="137.177.220.138" src_port="5635"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845930"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="50.74.17.50"/>
        </slice>
        <from usec="0" sec="1349845510"/>
        <to usec="0" sec="1349845642"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="164.141.54.107"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845847"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.177.156.15"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845848"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="60.84.161.40"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845846"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="162.159.194.59"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845835"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="52.21.180.179"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845846"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.212.149.4"/>
        </slice>
        <from usec="0" sec="1349845206"/>
        <to usec="0" sec="1349845837"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.70.9"/>
        </slice>
        <from usec="0" sec="1349845218"/>
        <to usec="0" sec="1349845797"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="162.159.138.173"/>
        </slice>
        <from usec="0" sec="1349845257"/>
        <to usec="0" sec="1349845784"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="54.1.140.140"/>
        </slice>
        <from usec="0" sec="1349845378"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="69.216.112.130"/>
        </slice>
        <from usec="0" sec="1349845413"/>
        <to usec="0" sec="1349845793"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.132.189"/>
        </slice>
        <from usec="0" sec="1349845487"/>
        <to usec="0" sec="1349845845"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="189.99.16.100"/>
        </slice>
        <from usec="0" sec="1349845613"/>
        <to usec="0" sec="1349845719"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.242.65.181"/>
        </slice>
        <from usec="0" sec="1349845701"/>
        <to usec="0" sec="1349845820"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.35.49.4"/>
        </slice>
        <from usec="0" sec="1349845714"/>
        <to usec="0" sec="1349845823"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="200.32.192.216"/>
        </slice>
        <from usec="0" sec="1349845727"/>
        <to usec="0" sec="1349845795"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.35.224.207"/>
        </slice>
        <from usec="0" sec="1349845751"/>
        <to usec="0" sec="1349845843"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,502,1 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="205.79.104.188" dst_ip="192.113.138.80" dst_port="22"/>
            <filter src_ip="205.79.106.6" dst_ip="192.113.138.80" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349846078"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="137.177.249.10"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="123.81.190.215"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.140.162.185"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845937"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.75.125.61" dst_port="48732"/>
            <filter dst_ip="204.75.125.61" dst_port="40531"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845911"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.134.172.86"/>
        </slice>
        <from usec="0" sec="1349845204"/>
        <to usec="0" sec="1349845934"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.97.44.110"/>
        </slice>
        <from usec="0" sec="1349845205"/>
        <to usec="0" sec="1349845933"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="124.12.64.231"/>
        </slice>
        <from usec="0" sec="1349845383"/>
        <to usec="0" sec="1349845925"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="54.167.164.189"/>
        </slice>
        <from usec="0" sec="1349845401"/>
        <to usec="0" sec="1349845894"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="164.141.54.71" dst_port="443"/>
            <filter dst_ip="120.8.53.211" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845213"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="124.150.65.183"/>
        </slice>
        <from usec="0" sec="1349845426"/>
        <to usec="0" sec="1349846014"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.180.49"/>
        </slice>
        <from usec="0" sec="1349845435"/>
        <to usec="0" sec="1349845920"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="51.198.20.93"/>
        </slice>
        <from usec="0" sec="1349845493"/>
        <to usec="0" sec="1349845881"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="41.97.170.164"/>
        </slice>
        <from usec="0" sec="1349845515"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="91.74.193.47"/>
        </slice>
        <from usec="0" sec="1349845524"/>
        <to usec="0" sec="1349845922"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="69.228.218.58"/>
        </slice>
        <from usec="0" sec="1349845665"/>
        <to usec="0" sec="1349845796"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="62.164.41.8"/>
        </slice>
        <from usec="0" sec="1349845689"/>
        <to usec="0" sec="1349845877"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.97.11.158"/>
        </slice>
        <from usec="0" sec="1349845689"/>
        <to usec="0" sec="1349845901"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.69.32"/>
        </slice>
        <from usec="0" sec="1349845760"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="44.40.170.169"/>
        </slice>
        <from usec="0" sec="1349845803"/>
        <to usec="0" sec="1349845842"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="57.226.101.130"/>
        </slice>
        <from usec="0" sec="1349845814"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="137.177.225.206"/>
        </slice>
        <from usec="0" sec="1349845817"/>
        <to usec="0" sec="1349845830"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="137.177.225.206"/>
        </slice>
        <from usec="0" sec="1349845817"/>
        <to usec="0" sec="1349845830"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.136.108"/>
        </slice>
        <from usec="0" sec="1349845847"/>
        <to usec="0" sec="1349845904"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.64.3.122"/>
        </slice>
        <from usec="0" sec="1349845854"/>
        <to usec="0" sec="1349845875"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.42.34" src_port="80"/>
        </slice>
        <from usec="0" sec="1349845215"/>
        <to usec="0" sec="1349845977"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="129.172.207.155"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349846009"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.159.135.71"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845959"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="50.30.202.153"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845985"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="43.47.55.190"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="47.22.232.96"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="164.141.141.29"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="213.179.0.254"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349846019"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="53.106.39.22"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349846022"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.218.169.237"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349846020"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.75.108.59"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349846025"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.177.158.26" dst_ip="32.162.160.192" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845999"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="220.15.95.210" dst_ip="204.69.159.105" src_port="5261" dst_port="5247"/>
            <filter src_ip="220.15.95.210" dst_ip="204.69.159.105" src_port="5261" dst_port="5246"/>
            <filter src_ip="51.150.117.114" dst_ip="204.69.159.105" src_port="7171" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="164.141.55.119"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349846027"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="125.156.60.69"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="218.187.149.83"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349846017"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="138.169.184.47"/>
        </slice>
        <from usec="0" sec="1349845205"/>
        <to usec="0" sec="1349846015"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.201.129.26"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349846023"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="137.177.220.228"/>
        </slice>
        <from usec="0" sec="1349845211"/>
        <to usec="0" sec="1349846026"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.75.112.71" src_port="8090" dst_port="21252"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349846010"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.85.132"/>
        </slice>
        <from usec="0" sec="1349845212"/>
        <to usec="0" sec="1349846026"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="164.141.65.61"/>
        </slice>
        <from usec="0" sec="1349845217"/>
        <to usec="0" sec="1349846027"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="51.208.86.165"/>
        </slice>
        <from usec="0" sec="1349845221"/>
        <to usec="0" sec="1349845953"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.177.156.19"/>
        </slice>
        <from usec="0" sec="1349845224"/>
        <to usec="0" sec="1349846019"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.30.228.52"/>
        </slice>
        <from usec="0" sec="1349845226"/>
        <to usec="0" sec="1349846027"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.177.84.46"/>
        </slice>
        <from usec="0" sec="1349845227"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.52.17"/>
        </slice>
        <from usec="0" sec="1349845228"/>
        <to usec="0" sec="1349846007"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="66.44.89.52"/>
        </slice>
        <from usec="0" sec="1349845236"/>
        <to usec="0" sec="1349846002"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.141.26.236"/>
        </slice>
        <from usec="0" sec="1349845246"/>
        <to usec="0" sec="1349846025"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.82.176.27"/>
        </slice>
        <from usec="0" sec="1349845285"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="124.177.10.208"/>
        </slice>
        <from usec="0" sec="1349845421"/>
        <to usec="0" sec="1349846027"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="41.214.88.114"/>
        </slice>
        <from usec="0" sec="1349845587"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.500732,1.388080,503,1 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="164.141.64.20" dst_ip="201.162.173.16" dst_port="80"/>
            <filter src_ip="164.141.29.230" dst_ip="201.162.173.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845617"/>
        <to usec="0" sec="1349845943"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="52.21.176.245"/>
        </slice>
        <from usec="0" sec="1349845778"/>
        <to usec="0" sec="1349845870"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="46.174.251.145"/>
        </slice>
        <from usec="0" sec="1349845803"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.217.56.3"/>
        </slice>
        <from usec="0" sec="1349845811"/>
        <to usec="0" sec="1349845970"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="60.155.203.165"/>
        </slice>
        <from usec="0" sec="1349845814"/>
        <to usec="0" sec="1349845943"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.159.34.159"/>
        </slice>
        <from usec="0" sec="1349845835"/>
        <to usec="0" sec="1349846017"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="32.73.12.194"/>
        </slice>
        <from usec="0" sec="1349845877"/>
        <to usec="0" sec="1349845939"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.42.34.127"/>
        </slice>
        <from usec="0" sec="1349845904"/>
        <to usec="0" sec="1349845955"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="212.53.0.129"/>
        </slice>
        <from usec="0" sec="1349845910"/>
        <to usec="0" sec="1349845981"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="217.197.25.17"/>
        </slice>
        <from usec="0" sec="1349845923"/>
        <to usec="0" sec="1349845938"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="134.100.41.6"/>
        </slice>
        <from usec="0" sec="1349845927"/>
        <to usec="0" sec="1349845993"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="133.61.24.187"/>
        </slice>
        <from usec="0" sec="1349845931"/>
        <to usec="0" sec="1349845957"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="69.231.197.158"/>
        </slice>
        <from usec="0" sec="1349845943"/>
        <to usec="0" sec="1349845984"/>
    </anomaly>
    <anomaly type="notice" value="0.366829,1.430260,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="138.169.178.169"/>
        </slice>
        <from usec="0" sec="1349845970"/>
        <to usec="0" sec="1349845977"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="137.177.222.9" dst_ip="39.225.106.189" src_port="60964" dst_port="20002"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845308"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.19.153.159" dst_ip="137.177.84.162" src_port="80" dst_port="49955"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.64.184" dst_ip="214.65.227.3" src_port="52365" dst_port="80"/>
            <filter src_ip="164.141.64.184" dst_ip="214.65.227.3" src_port="52235" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845210"/>
        <to usec="0" sec="1349845247"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="164.149.215.145" dst_ip="52.21.186.0" src_port="80" dst_port="54035"/>
            <filter src_ip="164.149.215.145" dst_ip="52.21.186.0" src_port="80" dst_port="39835"/>
            <filter src_ip="164.149.215.145" dst_ip="52.21.186.135" src_port="443" dst_port="43617"/>
        </slice>
        <from usec="0" sec="1349845226"/>
        <to usec="0" sec="1349845460"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.239.210.207" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845569"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.100.119.46" dst_ip="137.177.223.1" src_port="1551" dst_port="4060"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845576"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.141.26.160" src_port="29981"/>
        </slice>
        <from usec="0" sec="1349845201"/>
        <to usec="0" sec="1349845578"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.123.138.166" dst_ip="138.169.225.190" src_port="1863" dst_port="1863"/>
        </slice>
        <from usec="0" sec="1349845503"/>
        <to usec="0" sec="1349845572"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="179.70.213.96" dst_ip="137.177.16.9" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="164.141.6.7" dst_ip="144.12.6.129" src_port="8080"/>
        </slice>
        <from usec="0" sec="1349845621"/>
        <to usec="0" sec="1349845668"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.68.145" dst_ip="46.77.100.28" src_port="23614" dst_port="16980"/>
        </slice>
        <from usec="0" sec="1349845637"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="137.177.222.237" dst_ip="116.110.91.96" src_port="49166" dst_port="443"/>
        </slice>
        <from usec="0" sec="1349845228"/>
        <to usec="0" sec="1349845835"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="164.141.201.213" dst_ip="52.225.126.25" src_port="51344" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845927"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,999,0 0 0 1 1 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="162.159.185.100" dst_ip="195.199.208.216" dst_port="8080"/>
            <filter src_ip="162.159.185.100" dst_ip="195.199.208.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845208"/>
        <to usec="0" sec="1349845931"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="162.159.135.14" dst_ip="150.68.177.166" src_port="80" dst_port="47998"/>
            <filter src_ip="162.159.135.14" dst_ip="150.68.177.166" src_port="80" dst_port="43864"/>
            <filter src_ip="162.159.135.14" dst_ip="150.68.177.166" src_port="80" dst_port="35335"/>
            <filter src_ip="162.159.135.14" dst_ip="150.68.177.166" src_port="80" dst_port="34825"/>
            <filter src_ip="162.159.135.14" dst_ip="150.68.177.166" src_port="80" dst_port="34147"/>
        </slice>
        <from usec="0" sec="1349845764"/>
        <to usec="0" sec="1349845797"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,503,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="212.49.236.210" dst_ip="162.159.113.176" src_port="80"/>
        </slice>
        <from usec="0" sec="1349845214"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.159.214.40"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845246"/>
    </anomaly>
    <anomaly type="notice" value="0.892086,1.451270,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.79.111.109" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845758"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.141.167.27" src_port="23477"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845246"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.69.156.13" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845246"/>
    </anomaly>
    <anomaly type="notice" value="0.892086,1.451270,503,0 0 0 1 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.75.121.34" dst_ip="98.212.173.189" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845203"/>
        <to usec="0" sec="1349845485"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.75.121.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845515"/>
        <to usec="0" sec="1349845561"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.73.74.192" src_port="15100"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="161.73.74.192" src_port="15103"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="204.75.121.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.892086,1.451270,999,0 0 0 1 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="204.173.30.12" dst_ip="10.5.115.115" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349846028"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="62.164.179.89" src_port="80"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.141.201.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_port="7171" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_port="7171" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1349845650"/>
        <to usec="0" sec="1349845696"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="164.141.6.46" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845695"/>
        <to usec="0" sec="1349845741"/>
    </anomaly>
    <anomaly type="notice" value="0.931432,1.495360,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.67.246.233" dst_ip="137.177.154.150" src_port="80"/>
        </slice>
        <from usec="0" sec="1349845695"/>
        <to usec="0" sec="1349845741"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.68.86.52"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,020,0 0 0 0 0 0 0 0 0 1 0 0,hostout">
        <slice>
            <filter src_ip="164.141.233.124"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.906261,1.408970,999,1 1 0 1 0 0 0 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="192.82.175.67" dst_port="53"/>
        </slice>
        <from usec="0" sec="1349845200"/>
        <to usec="0" sec="1349845677"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.219.242.201"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="137.177.42.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.912050,1.399360,504,1 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="137.177.136.89" dst_port="443"/>
            <filter src_ip="137.177.136.89" dst_ip="59.74.144.58" dst_port="80"/>
            <filter src_ip="137.177.136.89" dst_ip="59.74.149.68" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.254.14.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="53.84.162.50"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="42.24.108.115"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="162.159.220.67"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="164.40.92.101"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="138.169.185.193"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="137.177.222.105" src_port="80"/>
            <filter dst_ip="137.177.222.105" dst_port="6699"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,501,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="157.108.199.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,020,0 0 0 0 0 0 0 0 0 1 0 0,ttl_error">
        <slice>
            <filter dst_ip="196.182.206.148"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.912050,1.399360,999,1 0 0 0 0 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="160.108.57.152" dst_ip="205.79.107.36"/>
            <filter src_ip="160.108.57.152" dst_ip="205.79.107.36" src_port="123" dst_port="123"/>
            <filter src_ip="194.205.18.171" dst_ip="205.79.107.36"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.912050,1.399360,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="137.177.84.162" src_port="16401"/>
            <filter src_ip="137.177.84.162" dst_ip="201.254.14.61" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.912050,1.399360,503,1 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="204.69.56.66" dst_port="443"/>
            <filter src_ip="204.69.56.66" dst_ip="212.4.123.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.802445,1.395390,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="137.177.222.153" dst_ip="54.140.9.98" dst_port="80"/>
            <filter src_ip="137.177.222.153" dst_ip="54.140.16.240" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.845971,1.441200,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="185.219.142.236" dst_ip="62.154.199.28" src_port="80" dst_port="57204"/>
            <filter src_ip="185.219.142.236" dst_ip="52.21.189.186" src_port="80" dst_port="59640"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.926457,1.425530,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="50.74.29.138" dst_ip="137.177.101.244" src_port="443"/>
        </slice>
        <from usec="0" sec="1349845202"/>
        <to usec="0" sec="1349845986"/>
    </anomaly>
</admd:annotation>
