<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.161.114.53" dst_ip="96.10.118.48" src_port="49378" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051967"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.51.54.170" dst_ip="86.81.186.19" src_port="64199" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051965"/>
        <to usec="0" sec="1365052496"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.164.118.98" dst_ip="216.215.186.212" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051634"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.19.148.33" dst_ip="137.91.58.107" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052030"/>
        <to usec="0" sec="1365052033"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.161.230.65" dst_ip="205.47.156.40" src_port="64068" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051656"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.161.137.45" dst_ip="174.5.138.52" src_port="3782" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365052489"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.51.10.33" dst_ip="124.122.15.97" src_port="53504" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365051822"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="158.51.196.171"/>
        </slice>
        <from usec="0" sec="1365051625"/>
        <to usec="0" sec="1365051653"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.161.204.144" dst_ip="96.10.35.127" src_port="64526" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051625"/>
        <to usec="0" sec="1365051656"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="40.112.26.26"/>
        </slice>
        <from usec="0" sec="1365052482"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.146.156.76" dst_ip="80.107.206.143" src_port="3654" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051633"/>
        <to usec="0" sec="1365051653"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="42.88.49.42" dst_ip="202.49.107.142" src_port="46150" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051969"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.19.210.212" dst_ip="217.71.75.157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052371"/>
        <to usec="0" sec="1365052375"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="152.161.229.59" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.38.71.146" dst_ip="12.10.157.105" src_port="51397" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052482"/>
        <to usec="0" sec="1365052496"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.161.230.1" dst_ip="15.71.47.104" src_port="50776" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051609"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.144.210.249" dst_ip="202.49.107.151" src_port="49634" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051652"/>
        <to usec="0" sec="1365051656"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.215.160.1"/>
        </slice>
        <from usec="0" sec="1365052481"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.146.199.51" dst_ip="197.25.60.82" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052482"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.57.201.96" dst_ip="86.81.18.173" src_port="58555" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051650"/>
        <to usec="0" sec="1365052496"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="152.161.201.79" dst_ip="178.10.53.207" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051608"/>
        <to usec="0" sec="1365051971"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="158.51.197.13" dst_ip="181.213.18.186" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051658"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="152.161.34.16" dst_ip="96.10.51.156" src_port="56976" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051683"/>
        <to usec="0" sec="1365051687"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.0.2.61" dst_ip="203.160.230.33" src_port="52709" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051969"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="178.10.53.207" dst_ip="152.161.201.79" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.52.73.166" dst_ip="152.161.217.59" src_port="443" dst_port="55584" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052481"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.57.197.110" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.57.39.162" dst_ip="166.71.181.142" src_port="8292" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051603"/>
        <to usec="0" sec="1365051822"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.19.157.133" dst_ip="86.81.128.148" src_port="56414" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051969"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="6.80.171.205"/>
        </slice>
        <from usec="0" sec="1365052481"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.160.235.178" dst_ip="26.51.191.38" src_port="58037" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365051822"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.226.206"/>
        </slice>
        <from usec="0" sec="1365051969"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.49.122.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1365051610"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.19.112.127"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365051822"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,504,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="104.131.42.16" dst_port="80"/>
            <filter dst_ip="104.131.42.16" dst_port="443"/>
            <filter dst_ip="104.131.42.9" dst_port="80"/>
            <filter dst_ip="104.131.42.9" dst_port="443"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052491"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="23.44.156.255" dst_ip="202.49.107.215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="152.161.136.103" dst_ip="96.8.165.227" src_port="49306" dst_port="443"/>
            <filter src_ip="152.161.221.148" dst_ip="96.8.165.227" src_port="48886" dst_port="443"/>
        </slice>
        <from usec="0" sec="1365051650"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.51.244.18" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051603"/>
        <to usec="0" sec="1365051656"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="42.90.15.126"/>
        </slice>
        <from usec="0" sec="1365051655"/>
        <to usec="0" sec="1365051658"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="104.131.45.205"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051604"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.19.112.124" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365051650"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.160.227.91"/>
        </slice>
        <from usec="0" sec="1365051612"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.160.235.185"/>
        </slice>
        <from usec="0" sec="1365051647"/>
        <to usec="0" sec="1365052496"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="158.51.144.124"/>
        </slice>
        <from usec="0" sec="1365052482"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,002,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="28.169.175.119" src_port="1033" dst_port="137" proto="udp"/>
        </slice>
        <from usec="0" sec="1365051650"/>
        <to usec="0" sec="1365051657"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="78.35.212.82" dst_port="1433" proto="tcp"/>
        </slice>
        <from usec="0" sec="1365052336"/>
        <to usec="0" sec="1365052338"/>
    </anomaly>
    <anomaly type="notice" value="0.395082,1.053300,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="171.36.174.94"/>
        </slice>
        <from usec="0" sec="1365051969"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.682531,1.120970,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.49.107.198" dst_ip="21.135.97.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051621"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.51.10.78" dst_ip="96.10.114.209" src_port="51778" dst_port="443"/>
        </slice>
        <from usec="0" sec="1365051819"/>
        <to usec="0" sec="1365052496"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="34.118.157.74" dst_ip="158.33.88.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051822"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="158.51.197.82" dst_ip="178.40.248.16" src_port="63805" dst_port="443"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051648"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.160.235.188" dst_ip="205.95.199.161" src_port="62797" dst_port="80"/>
            <filter src_ip="203.160.235.188" dst_ip="205.95.199.161" src_port="62439" dst_port="80"/>
            <filter src_ip="203.160.235.188" dst_ip="205.95.199.161" src_port="61177" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052489"/>
    </anomaly>
    <anomaly type="notice" value="0.682531,1.120970,010,0 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="4.244.165.66" src_port="80"/>
        </slice>
        <from usec="0" sec="1365052206"/>
        <to usec="0" sec="1365052449"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,999,1 1 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.49.80.45" src_port="1826"/>
            <filter src_ip="202.49.80.45"/>
            <filter src_ip="202.49.80.46" src_port="1826"/>
            <filter src_ip="202.49.80.46"/>
            <filter src_ip="202.49.80.1" src_port="1826"/>
            <filter src_ip="202.49.80.1"/>
            <filter src_ip="202.49.80.45" dst_ip="14.18.202.4" src_port="53"/>
            <filter src_ip="202.49.80.46" dst_ip="14.18.202.4" src_port="53"/>
            <filter src_ip="202.49.80.1" dst_ip="14.18.202.4" src_port="53"/>
            <filter dst_ip="14.18.202.4" src_port="1826"/>
        </slice>
        <from usec="0" sec="1365051632"/>
        <to usec="0" sec="1365051636"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="26.194.68.117" src_port="43594"/>
        </slice>
        <from usec="0" sec="1365052331"/>
        <to usec="0" sec="1365052334"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,010,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="188.85.72.94" src_port="6005"/>
        </slice>
        <from usec="0" sec="1365052283"/>
        <to usec="0" sec="1365052286"/>
    </anomaly>
    <anomaly type="notice" value="0.633342,1.046080,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="216.230.119.17" src_port="25" dst_port="7341"/>
        </slice>
        <from usec="0" sec="1365052484"/>
        <to usec="0" sec="1365052487"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052069"/>
    </anomaly>
    <anomaly type="notice" value="0.673130,1.057920,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.19.157.134" dst_ip="216.215.160.1" dst_port="80"/>
            <filter src_ip="163.19.157.134" dst_ip="90.172.104.226" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051625"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="22.109.238.152"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052249"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,053,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="163.19.76.134" dst_ip="192.225.161.26" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052248"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.19.184.1" src_port="80"/>
            <filter dst_ip="163.19.184.1" dst_port="19148"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052245"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="152.161.78.204"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052241"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="96.20.226.67"/>
        </slice>
        <from usec="0" sec="1365051604"/>
        <to usec="0" sec="1365052249"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.231.165"/>
        </slice>
        <from usec="0" sec="1365051605"/>
        <to usec="0" sec="1365052248"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="36.114.203.101"/>
        </slice>
        <from usec="0" sec="1365052108"/>
        <to usec="0" sec="1365052118"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="218.10.77.248"/>
        </slice>
        <from usec="0" sec="1365052025"/>
        <to usec="0" sec="1365052225"/>
    </anomaly>
    <anomaly type="notice" value="0.719604,1.132030,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="57.52.2.83"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365052429"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.235.7" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051647"/>
    </anomaly>
    <anomaly type="notice" value="0.534796,1.049310,503,1 0 0 0 0 0 1 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.49.107.198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1365051601"/>
        <to usec="0" sec="1365051972"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.19.73.244" dst_port="53"/>
        </slice>
        <from usec="0" sec="1365051916"/>
        <to usec="0" sec="1365051962"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_port="18240" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1365051916"/>
        <to usec="0" sec="1365051962"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="214.100.143.94"/>
        </slice>
        <from usec="0" sec="1365051961"/>
        <to usec="0" sec="1365052007"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,503,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.160.226.195"/>
        </slice>
        <from usec="0" sec="1365052006"/>
        <to usec="0" sec="1365052052"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="214.19.169.162"/>
            <filter src_ip="158.51.145.74" dst_ip="92.147.51.165"/>
        </slice>
        <from usec="0" sec="1365052006"/>
        <to usec="0" sec="1365052052"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,011,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="14.18.195.228" src_port="80" dst_port="1234"/>
            <filter src_ip="14.18.192.48" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="1365052006"/>
        <to usec="0" sec="1365052052"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="194.27.236.140"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.534796,1.049310,999,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.226.207" dst_port="18979"/>
            <filter dst_ip="203.160.226.207" dst_port="80"/>
            <filter dst_ip="203.160.226.207"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.235.7"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="64.203.143.74"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="160.251.97.106"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="31.23.170.98"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.534796,1.049310,020,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.160.235.23" dst_port="80"/>
            <filter dst_ip="203.160.235.23"/>
        </slice>
        <from usec="0" sec="1365051650"/>
        <to usec="0" sec="1365052485"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.160.225.133"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.155.221.54" dst_port="80"/>
            <filter dst_ip="173.155.221.54" dst_port="443"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="92.136.70.2"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.160.236.84"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.160.234.73"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="26.230.54.117"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.160.232.229"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.57.218.17"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052187"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="26.151.145.25" dst_ip="158.164.117.63"/>
        </slice>
        <from usec="0" sec="1365052141"/>
        <to usec="0" sec="1365052232"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="46.152.196.91"/>
        </slice>
        <from usec="0" sec="1365052276"/>
        <to usec="0" sec="1365052322"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="214.19.169.162"/>
        </slice>
        <from usec="0" sec="1365052276"/>
        <to usec="0" sec="1365052322"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="158.51.145.74" dst_ip="214.19.169.162"/>
        </slice>
        <from usec="0" sec="1365052456"/>
        <to usec="0" sec="1365052502"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.49.107.198" src_port="53"/>
        </slice>
        <from usec="0" sec="1365052456"/>
        <to usec="0" sec="1365052502"/>
    </anomaly>
    <anomaly type="notice" value="0.592227,1.123980,011,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="195.193.33.63" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="1365052456"/>
        <to usec="0" sec="1365052502"/>
    </anomaly>
</admd:annotation>
