<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.129.56.102" dst_ip="182.38.17.83" src_port="54307" dst_port="49302" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610429"/>
        <to usec="0" sec="1352610887"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.30.157.102" dst_ip="64.6.55.32" src_port="49226" dst_port="1936" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610412"/>
        <to usec="0" sec="1352610846"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="18.249.33.22" dst_ip="215.129.52.202" src_port="65312" dst_port="61963" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610235"/>
        <to usec="0" sec="1352610784"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="22.24.135.203" dst_ip="130.30.157.38" src_port="80" dst_port="61905" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610229"/>
        <to usec="0" sec="1352610718"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.30.212.73" dst_ip="9.175.110.106" src_port="49582" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610701"/>
        <to usec="0" sec="1352610708"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.27.5.5" dst_ip="32.147.49.95" src_port="1039" dst_port="4174" proto="udp"/>
        </slice>
        <from usec="0" sec="1352610133"/>
        <to usec="0" sec="1352610767"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.156.109" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610246"/>
        <to usec="0" sec="1352610720"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.27.186.201" dst_ip="136.168.21.99" src_port="80" dst_port="4237" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610341"/>
        <to usec="0" sec="1352610345"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="79.2.183.22" dst_ip="130.30.212.73" src_port="80" dst_port="49530" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610483"/>
        <to usec="0" sec="1352610487"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.46.103.14" dst_ip="28.164.149.16" src_port="12157" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610395"/>
        <to usec="0" sec="1352610876"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.166.240.13" dst_ip="139.64.144.139" src_port="53484" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610893"/>
        <to usec="0" sec="1352610897"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="215.137.86.251" dst_ip="215.129.50.18" src_port="62916" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610867"/>
        <to usec="0" sec="1352610870"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.30.157.24" dst_ip="37.67.123.138" src_port="1673" dst_port="6112" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610167"/>
        <to usec="0" sec="1352610233"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.30.158.185" dst_ip="64.16.32.23" src_port="59794" dst_port="8182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610274"/>
        <to usec="0" sec="1352610514"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.27.80.89" dst_ip="8.8.97.157" src_port="3128" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610464"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="78.230.47.74" dst_ip="130.30.157.213" src_port="61289" dst_port="15935" proto="udp"/>
        </slice>
        <from usec="0" sec="1352610394"/>
        <to usec="0" sec="1352610398"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="169.193.253.142" dst_ip="44.89.97.150" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610829"/>
        <to usec="0" sec="1352610831"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.27.196.86" dst_ip="221.16.92.85" src_port="52861" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610776"/>
        <to usec="0" sec="1352610779"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.16.170" dst_ip="216.254.89.64" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610268"/>
        <to usec="0" sec="1352610272"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.27.4.32" dst_ip="139.81.96.11" src_port="55400" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610145"/>
        <to usec="0" sec="1352610673"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.46.76.164" dst_ip="2.207.117.137" src_port="56199" dst_port="17895" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610203"/>
        <to usec="0" sec="1352610833"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.33.2.226" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610200"/>
        <to usec="0" sec="1352610261"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.30.156.139" dst_ip="205.164.82.11" src_port="52157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610145"/>
        <to usec="0" sec="1352610779"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.33.131.168" dst_ip="216.254.89.64" src_port="59923" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610274"/>
        <to usec="0" sec="1352610281"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.52.198.18" dst_ip="215.129.62.5" src_port="50522" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610359"/>
        <to usec="0" sec="1352610362"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.156.228" dst_ip="208.152.167.129" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610454"/>
        <to usec="0" sec="1352610458"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="8.98.200.201" dst_ip="130.30.42.230" src_port="52393" dst_port="995" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610309"/>
        <to usec="0" sec="1352610313"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.5.164"/>
        </slice>
        <from usec="0" sec="1352610648"/>
        <to usec="0" sec="1352610652"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.30.156.204" dst_ip="216.200.44.194" src_port="59973" dst_port="1935" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610145"/>
        <to usec="0" sec="1352610756"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="61.64.24.2" dst_ip="215.129.52.202" src_port="51209" dst_port="61963" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610185"/>
        <to usec="0" sec="1352610830"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.198.208" dst_ip="203.55.3.57" src_port="59648" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610506"/>
        <to usec="0" sec="1352610510"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.221.227" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610669"/>
        <to usec="0" sec="1352610673"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.129.52.16" dst_ip="216.254.89.193" src_port="60641" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610161"/>
        <to usec="0" sec="1352610632"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="210.26.159.63"/>
        </slice>
        <from usec="0" sec="1352610224"/>
        <to usec="0" sec="1352610578"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="136.41.124.56" dst_ip="215.129.56.102" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610277"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.166.14.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610592"/>
        <to usec="0" sec="1352610596"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.158.177" dst_ip="204.250.33.85" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610821"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,053,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.25.142" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610821"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.156.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610643"/>
        <to usec="0" sec="1352610879"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.156.181" dst_ip="37.68.13.17" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610429"/>
        <to usec="0" sec="1352610433"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.33.157.1" dst_ip="36.71.146.78" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610853"/>
        <to usec="0" sec="1352610856"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.30.25.41" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610465"/>
        <to usec="0" sec="1352610762"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,ipv46tun">
        <slice>
            <filter src_ip="182.24.117.198" dst_ip="215.129.50.135"/>
        </slice>
        <from usec="0" sec="1352610069"/>
        <to usec="0" sec="1352610304"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="152.234.216.111" dst_ip="152.234.216.111" proto="icmp"/>
        </slice>
        <from usec="0" sec="1352610428"/>
        <to usec="0" sec="1352610433"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="215.129.50.163" proto="icmp"/>
        </slice>
        <from usec="0" sec="1352610224"/>
        <to usec="0" sec="1352610888"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.129.52.25" src_port="51413" proto="udp"/>
        </slice>
        <from usec="0" sec="1352610189"/>
        <to usec="0" sec="1352610485"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="79.214.140.234" proto="icmp"/>
        </slice>
        <from usec="0" sec="1352610223"/>
        <to usec="0" sec="1352610304"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.193.151"/>
        </slice>
        <from usec="0" sec="1352610839"/>
        <to usec="0" sec="1352610843"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="130.30.228.145" dst_ip="35.120.245.82" src_port="65057" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1352610839"/>
        <to usec="0" sec="1352610841"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscICec">
        <slice>
            <filter src_ip="154.120.83.57"/>
        </slice>
        <from usec="0" sec="1352610292"/>
        <to usec="0" sec="1352610299"/>
    </anomaly>
    <anomaly type="notice" value="0.596900,1.128080,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="181.101.73.196"/>
        </slice>
        <from usec="0" sec="1352610778"/>
        <to usec="0" sec="1352610784"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.129.58.20" dst_ip="39.66.5.50" src_port="3389"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610849"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.68.210"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610108"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.148.250.13"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610646"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.30.70.47"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610100"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.36.240.68"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610104"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.196.210.41"/>
        </slice>
        <from usec="0" sec="1352610015"/>
        <to usec="0" sec="1352610093"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="44.89.97.150"/>
        </slice>
        <from usec="0" sec="1352610018"/>
        <to usec="0" sec="1352610090"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.157.165"/>
        </slice>
        <from usec="0" sec="1352610020"/>
        <to usec="0" sec="1352610103"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.209.100.253"/>
        </slice>
        <from usec="0" sec="1352610028"/>
        <to usec="0" sec="1352610108"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="202.252.64.205"/>
        </slice>
        <from usec="0" sec="1352610089"/>
        <to usec="0" sec="1352610104"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="203.0.63.118"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610076"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.197.3"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610198"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.168.138.45"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610197"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.4.97"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610198"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,999,1 0 0 1 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="214.46.84.104" dst_ip="174.174.4.3" src_port="123" dst_port="123"/>
            <filter src_ip="214.46.84.104" dst_ip="210.26.159.63"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610229"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="194.206.156.172"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610198"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="34.41.218.21"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610196"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,002,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="15.234.251.14"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610196"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="38.49.236.253"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610198"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.254.90.200"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610196"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.30.218.46"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610187"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.129.57.53"/>
        </slice>
        <from usec="0" sec="1352610004"/>
        <to usec="0" sec="1352610175"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.47.3.236"/>
        </slice>
        <from usec="0" sec="1352610010"/>
        <to usec="0" sec="1352610188"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.218.16.74"/>
        </slice>
        <from usec="0" sec="1352610014"/>
        <to usec="0" sec="1352610123"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="12.193.121.119"/>
        </slice>
        <from usec="0" sec="1352610062"/>
        <to usec="0" sec="1352610117"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.166.42.66"/>
        </slice>
        <from usec="0" sec="1352610158"/>
        <to usec="0" sec="1352610193"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="216.200.44.216"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610270"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="39.121.51.216"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610287"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="6.38.46.250"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610285"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.254.146"/>
        </slice>
        <from usec="0" sec="1352610019"/>
        <to usec="0" sec="1352610288"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.51.76.241" dst_ip="128.70.163.52" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610193"/>
        <to usec="0" sec="1352610373"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.158.129"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610378"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="25.232.207.37"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="79.89.84.83" src_port="53"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610378"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="7.72.100.4"/>
        </slice>
        <from usec="0" sec="1352610310"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,501,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="218.185.170.14"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="35.120.246.24"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610467"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.156.177"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610465"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="5.166.198.94"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610466"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.152.195.85"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610461"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.43.199.132"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610464"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.33.137.116"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610445"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="130.30.157.50"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610463"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="38.49.236.253"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.63.36.62"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610461"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="169.27.186.238" dst_ip="208.238.164.72" dst_port="53"/>
            <filter src_ip="130.30.103.107" dst_ip="208.238.164.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610454"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.134.45.137"/>
        </slice>
        <from usec="0" sec="1352610006"/>
        <to usec="0" sec="1352610466"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="221.169.101.240"/>
        </slice>
        <from usec="0" sec="1352610006"/>
        <to usec="0" sec="1352610432"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="216.254.90.226"/>
        </slice>
        <from usec="0" sec="1352610008"/>
        <to usec="0" sec="1352610824"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.136.52.26"/>
        </slice>
        <from usec="0" sec="1352610011"/>
        <to usec="0" sec="1352610467"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="151.24.209.165"/>
        </slice>
        <from usec="0" sec="1352610013"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.207.155"/>
        </slice>
        <from usec="0" sec="1352610014"/>
        <to usec="0" sec="1352610461"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="15.33.140.17"/>
        </slice>
        <from usec="0" sec="1352610015"/>
        <to usec="0" sec="1352610461"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.16.70"/>
        </slice>
        <from usec="0" sec="1352610049"/>
        <to usec="0" sec="1352610411"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="165.191.5.208"/>
        </slice>
        <from usec="0" sec="1352610219"/>
        <to usec="0" sec="1352610468"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="4.160.175.122"/>
        </slice>
        <from usec="0" sec="1352610237"/>
        <to usec="0" sec="1352610646"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.172.80.190"/>
        </slice>
        <from usec="0" sec="1352610253"/>
        <to usec="0" sec="1352610296"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.152.38.133"/>
        </slice>
        <from usec="0" sec="1352610311"/>
        <to usec="0" sec="1352610449"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="173.54.246.9"/>
        </slice>
        <from usec="0" sec="1352610441"/>
        <to usec="0" sec="1352610444"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.30.157.164" dst_ip="148.163.5.209" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610773"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.166.12.50"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.129.53.110"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610557"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.141.218.32"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.107.89.252"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="3.140.57.38"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610556"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.27.4.117"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.186.106"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610537"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.30.156.200" dst_ip="76.178.26.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610004"/>
        <to usec="0" sec="1352610894"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.166.197.149"/>
        </slice>
        <from usec="0" sec="1352610007"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.129.51.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.158.197" dst_port="80"/>
            <filter src_ip="130.30.158.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="1352610008"/>
        <to usec="0" sec="1352610544"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.47.3.244" dst_ip="130.30.156.200" src_port="80"/>
        </slice>
        <from usec="0" sec="1352610008"/>
        <to usec="0" sec="1352610647"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="133.164.56.116"/>
        </slice>
        <from usec="0" sec="1352610011"/>
        <to usec="0" sec="1352610795"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.196.222.163"/>
        </slice>
        <from usec="0" sec="1352610019"/>
        <to usec="0" sec="1352610546"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.27.5.131"/>
        </slice>
        <from usec="0" sec="1352610024"/>
        <to usec="0" sec="1352610390"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.152.137.172"/>
        </slice>
        <from usec="0" sec="1352610028"/>
        <to usec="0" sec="1352610506"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="214.47.3.177"/>
        </slice>
        <from usec="0" sec="1352610666"/>
        <to usec="0" sec="1352610807"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.33.138.107"/>
        </slice>
        <from usec="0" sec="1352610294"/>
        <to usec="0" sec="1352610549"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.254.90.196"/>
        </slice>
        <from usec="0" sec="1352610379"/>
        <to usec="0" sec="1352610474"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="28.164.149.16"/>
        </slice>
        <from usec="0" sec="1352610387"/>
        <to usec="0" sec="1352610451"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.246.27.190"/>
        </slice>
        <from usec="0" sec="1352610424"/>
        <to usec="0" sec="1352610441"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="9.212.183.142"/>
        </slice>
        <from usec="0" sec="1352610464"/>
        <to usec="0" sec="1352610606"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.166.197.11"/>
        </slice>
        <from usec="0" sec="1352610472"/>
        <to usec="0" sec="1352610558"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.46.77.214"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="98.230.29.183" dst_ip="130.30.199.154" src_port="443"/>
            <filter src_ip="15.33.140.53" dst_ip="130.30.199.154" src_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="98.230.21.184" src_port="443"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610645"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,hostout">
        <slice>
            <filter src_ip="215.129.55.113"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610645"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.51.121.147"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610642"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="46.68.120.141"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.36.194.128"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610646"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="8.20.123.39"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610644"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="214.46.68.190"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.2.71.12"/>
        </slice>
        <from usec="0" sec="1352610006"/>
        <to usec="0" sec="1352610647"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.97.2"/>
        </slice>
        <from usec="0" sec="1352610014"/>
        <to usec="0" sec="1352610643"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="46.68.120.128"/>
        </slice>
        <from usec="0" sec="1352610014"/>
        <to usec="0" sec="1352610645"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.27.5.92"/>
        </slice>
        <from usec="0" sec="1352610036"/>
        <to usec="0" sec="1352610647"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="172.63.160.19"/>
        </slice>
        <from usec="0" sec="1352610040"/>
        <to usec="0" sec="1352610638"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.139.40.160"/>
        </slice>
        <from usec="0" sec="1352610251"/>
        <to usec="0" sec="1352610633"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.132.4.206"/>
        </slice>
        <from usec="0" sec="1352610305"/>
        <to usec="0" sec="1352610599"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.226.102"/>
        </slice>
        <from usec="0" sec="1352610359"/>
        <to usec="0" sec="1352610511"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="139.186.122.72"/>
        </slice>
        <from usec="0" sec="1352610365"/>
        <to usec="0" sec="1352610499"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.229.130.65"/>
        </slice>
        <from usec="0" sec="1352610380"/>
        <to usec="0" sec="1352610645"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.49.201.62"/>
        </slice>
        <from usec="0" sec="1352610441"/>
        <to usec="0" sec="1352610648"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="214.47.3.178"/>
        </slice>
        <from usec="0" sec="1352610472"/>
        <to usec="0" sec="1352610530"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="181.101.146.110"/>
        </slice>
        <from usec="0" sec="1352610525"/>
        <to usec="0" sec="1352610646"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.248.33.178"/>
        </slice>
        <from usec="0" sec="1352610527"/>
        <to usec="0" sec="1352610534"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.34.91.185"/>
        </slice>
        <from usec="0" sec="1352610528"/>
        <to usec="0" sec="1352610546"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.102.6.129"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="16.9.52.117"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="187.209.167.237"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.138.30.74"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="195.175.129.60"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610737"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.152.167.138"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610737"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.157.147"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610724"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.27.4.81"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610730"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.30.158.248"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610826"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.2.4.62"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="214.46.96.90"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610737"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="221.173.17.220"/>
        </slice>
        <from usec="0" sec="1352610004"/>
        <to usec="0" sec="1352610737"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.30.157.128"/>
        </slice>
        <from usec="0" sec="1352610004"/>
        <to usec="0" sec="1352610728"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="215.129.54.153"/>
        </slice>
        <from usec="0" sec="1352610009"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.193.20.86" src_port="8090" dst_port="10553"/>
        </slice>
        <from usec="0" sec="1352610010"/>
        <to usec="0" sec="1352610723"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="64.71.235.157"/>
        </slice>
        <from usec="0" sec="1352610011"/>
        <to usec="0" sec="1352610580"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="8.122.178.125"/>
        </slice>
        <from usec="0" sec="1352610012"/>
        <to usec="0" sec="1352610737"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.27.229.255" dst_port="80"/>
            <filter src_ip="169.27.5.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="44.89.97.150"/>
        </slice>
        <from usec="0" sec="1352610018"/>
        <to usec="0" sec="1352610720"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.33.139.165"/>
        </slice>
        <from usec="0" sec="1352610018"/>
        <to usec="0" sec="1352610713"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.166.89"/>
        </slice>
        <from usec="0" sec="1352610019"/>
        <to usec="0" sec="1352610729"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="100.29.23.112"/>
        </slice>
        <from usec="0" sec="1352610035"/>
        <to usec="0" sec="1352610723"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="194.215.3.109"/>
        </slice>
        <from usec="0" sec="1352610040"/>
        <to usec="0" sec="1352610736"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.27.186.129"/>
        </slice>
        <from usec="0" sec="1352610133"/>
        <to usec="0" sec="1352610569"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.98.200.201"/>
        </slice>
        <from usec="0" sec="1352610221"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.133.154.8"/>
        </slice>
        <from usec="0" sec="1352610231"/>
        <to usec="0" sec="1352610728"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="4.0.38.182"/>
        </slice>
        <from usec="0" sec="1352610237"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="216.200.44.194"/>
        </slice>
        <from usec="0" sec="1352610284"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="7.83.214.23"/>
        </slice>
        <from usec="0" sec="1352610304"/>
        <to usec="0" sec="1352610736"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="1.131.95.148"/>
        </slice>
        <from usec="0" sec="1352610305"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.220.41.214"/>
        </slice>
        <from usec="0" sec="1352610315"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.57.55.160"/>
        </slice>
        <from usec="0" sec="1352610374"/>
        <to usec="0" sec="1352610738"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.46.103.185"/>
        </slice>
        <from usec="0" sec="1352610514"/>
        <to usec="0" sec="1352610606"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.133.154.159"/>
        </slice>
        <from usec="0" sec="1352610604"/>
        <to usec="0" sec="1352610627"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.7.16.103"/>
        </slice>
        <from usec="0" sec="1352610618"/>
        <to usec="0" sec="1352610661"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="130.30.134.228"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="216.254.90.225" src_port="443"/>
            <filter src_ip="216.254.90.225" src_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610822"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="32.205.248.38"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610821"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.54.21.124"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.4.46"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610823"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.30.156.140" src_port="6699"/>
            <filter src_ip="130.30.156.140" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.156.224"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.228.150"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610819"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.27.186.200"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.148.251.135" dst_ip="57.27.113.17" src_port="22"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.141.71.174"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610826"/>
    </anomaly>
    <anomaly type="notice" value="0.549019,1.103490,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.184.145" dst_ip="14.68.201.0" dst_port="80"/>
            <filter src_ip="130.30.184.145" dst_ip="14.68.201.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="79.6.39.194"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610735"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="59.149.138.123"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610826"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.136.119"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610827"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.36.242.173"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610827"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="214.33.3.112" dst_port="80"/>
            <filter src_ip="214.33.3.112" dst_port="443"/>
        </slice>
        <from usec="0" sec="1352610000"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.78.58.114"/>
        </slice>
        <from usec="0" sec="1352610001"/>
        <to usec="0" sec="1352610827"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.129.50.240"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.2.11.131" dst_ip="14.173.209.163" src_port="80"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="77.71.229.85"/>
        </slice>
        <from usec="0" sec="1352610002"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.199.16"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610826"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.27.33.198"/>
        </slice>
        <from usec="0" sec="1352610003"/>
        <to usec="0" sec="1352610776"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.157.41"/>
        </slice>
        <from usec="0" sec="1352610005"/>
        <to usec="0" sec="1352610808"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="173.166.197.149"/>
        </slice>
        <from usec="0" sec="1352610007"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.157.44"/>
        </slice>
        <from usec="0" sec="1352610009"/>
        <to usec="0" sec="1352610821"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.27.4.80"/>
        </slice>
        <from usec="0" sec="1352610011"/>
        <to usec="0" sec="1352610821"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="203.33.17.81"/>
        </slice>
        <from usec="0" sec="1352610013"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.33.5.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="1352610013"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="76.208.20.189"/>
        </slice>
        <from usec="0" sec="1352610014"/>
        <to usec="0" sec="1352610800"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="73.140.33.26"/>
        </slice>
        <from usec="0" sec="1352610016"/>
        <to usec="0" sec="1352610818"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.26.104"/>
        </slice>
        <from usec="0" sec="1352610016"/>
        <to usec="0" sec="1352610796"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.229.242.231"/>
        </slice>
        <from usec="0" sec="1352610024"/>
        <to usec="0" sec="1352610810"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.33.5.1"/>
        </slice>
        <from usec="0" sec="1352610026"/>
        <to usec="0" sec="1352610779"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="216.7.214.208" src_port="80"/>
            <filter dst_ip="173.166.93.65" src_port="80"/>
            <filter dst_ip="173.166.93.65" src_port="443"/>
        </slice>
        <from usec="0" sec="1352610013"/>
        <to usec="0" sec="1352610793"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.30.216.144"/>
        </slice>
        <from usec="0" sec="1352610037"/>
        <to usec="0" sec="1352610823"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.81.80.130"/>
        </slice>
        <from usec="0" sec="1352610043"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.30.157.8"/>
        </slice>
        <from usec="0" sec="1352610058"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.166.209.128"/>
        </slice>
        <from usec="0" sec="1352610087"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.61.162.200"/>
        </slice>
        <from usec="0" sec="1352610108"/>
        <to usec="0" sec="1352610825"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="15.33.140.44"/>
        </slice>
        <from usec="0" sec="1352610252"/>
        <to usec="0" sec="1352610786"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.61.65.55"/>
        </slice>
        <from usec="0" sec="1352610305"/>
        <to usec="0" sec="1352610828"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.152.0.209"/>
        </slice>
        <from usec="0" sec="1352610465"/>
        <to usec="0" sec="1352610757"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.186.102.130"/>
        </slice>
        <from usec="0" sec="1352610517"/>
        <to usec="0" sec="1352610819"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="64.85.147.47"/>
        </slice>
        <from usec="0" sec="1352610667"/>
        <to usec="0" sec="1352610816"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="79.93.74.165"/>
        </slice>
        <from usec="0" sec="1352610692"/>
        <to usec="0" sec="1352610720"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="38.196.210.121"/>
        </slice>
        <from usec="0" sec="1352610700"/>
        <to usec="0" sec="1352610707"/>
    </anomaly>
    <anomaly type="notice" value="0.381436,1.106290,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.122.160.255"/>
        </slice>
        <from usec="0" sec="1352610768"/>
        <to usec="0" sec="1352610822"/>
    </anomaly>
</admd:annotation>
