<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.843393,1.393560,011,1 0 0 0 0 0 0 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="145.140.177.106" dst_ip="49.84.65.43" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938470"/>
        <to usec="0" sec="1375938475"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.255.202.117" dst_ip="69.198.122.176" src_port="62662" dst_port="182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938824"/>
        <to usec="0" sec="1375938828"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.28.162.224"/>
        </slice>
        <from usec="0" sec="1375938633"/>
        <to usec="0" sec="1375938637"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.255.154.24" dst_ip="187.251.46.35" src_port="51222" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938796"/>
        <to usec="0" sec="1375938800"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.28.251.157"/>
        </slice>
        <from usec="0" sec="1375938594"/>
        <to usec="0" sec="1375938700"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.28.247.155" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938863"/>
        <to usec="0" sec="1375938867"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.255.206.45"/>
        </slice>
        <from usec="0" sec="1375938717"/>
        <to usec="0" sec="1375938721"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="148.255.202.208" dst_ip="80.17.169.106" src_port="37906" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938642"/>
        <to usec="0" sec="1375938646"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="165.187.20.188" dst_ip="122.96.194.77" src_port="54914" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1375938681"/>
        <to usec="0" sec="1375938837"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="204.148.16.41" dst_ip="145.28.103.23" dst_port="80"/>
        </slice>
        <from usec="0" sec="1375938595"/>
        <to usec="0" sec="1375938855"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.187.102.29"/>
        </slice>
        <from usec="0" sec="1375938748"/>
        <to usec="0" sec="1375938751"/>
    </anomaly>
    <anomaly type="notice" value="0.843393,1.393560,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.18.106.24"/>
        </slice>
        <from usec="0" sec="1375938582"/>
        <to usec="0" sec="1375938586"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938828"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.187.224.22"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="24.240.179.244"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938068"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.28.157.2" dst_ip="202.241.90.161" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938107"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="217.2.89.244"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938106"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ipv4gretun">
        <slice>
            <filter dst_ip="192.18.96.31"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="189.11.87.26"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.68.227.195"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.187.146.142"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="8.208.59.2"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938377"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.28.157.80"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.148.26.168"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938084"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="204.40.94.0"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="150.77.25.187"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938107"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.187.226.8"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="26.8.236.22"/>
        </slice>
        <from usec="0" sec="1375938003"/>
        <to usec="0" sec="1375938017"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.140.184.236"/>
        </slice>
        <from usec="0" sec="1375938004"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="183.169.218.250"/>
        </slice>
        <from usec="0" sec="1375938005"/>
        <to usec="0" sec="1375938036"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.251.88.61"/>
        </slice>
        <from usec="0" sec="1375938007"/>
        <to usec="0" sec="1375938042"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="98.171.157.80"/>
        </slice>
        <from usec="0" sec="1375938033"/>
        <to usec="0" sec="1375938046"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.96.243.57"/>
        </slice>
        <from usec="0" sec="1375938045"/>
        <to usec="0" sec="1375938107"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="214.57.73.34"/>
        </slice>
        <from usec="0" sec="1375938081"/>
        <to usec="0" sec="1375938094"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="12.228.168.51"/>
        </slice>
        <from usec="0" sec="1375938097"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="145.28.96.185"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938350"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="4.37.253.202"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938198"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.255.59.113"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938195"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.187.206.154"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938198"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.218.11.76"/>
        </slice>
        <from usec="0" sec="1375938003"/>
        <to usec="0" sec="1375938184"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="148.255.181.68"/>
        </slice>
        <from usec="0" sec="1375938004"/>
        <to usec="0" sec="1375938466"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="165.187.149.132"/>
        </slice>
        <from usec="0" sec="1375938007"/>
        <to usec="0" sec="1375938176"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="193.208.2.210"/>
        </slice>
        <from usec="0" sec="1375938010"/>
        <to usec="0" sec="1375938197"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.173.120.21" dst_ip="183.99.189.182" dst_port="80"/>
            <filter src_ip="145.173.120.21" dst_ip="28.161.37.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1375938012"/>
        <to usec="0" sec="1375938181"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.28.3.247"/>
        </slice>
        <from usec="0" sec="1375938023"/>
        <to usec="0" sec="1375938192"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="9.164.175.216"/>
        </slice>
        <from usec="0" sec="1375938047"/>
        <to usec="0" sec="1375938148"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="9.62.19.129"/>
        </slice>
        <from usec="0" sec="1375938185"/>
        <to usec="0" sec="1375938196"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.18.100.3"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938284"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.187.153.43"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938281"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="85.26.105.151"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938288"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.86.82.29"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938281"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="187.251.22.108"/>
        </slice>
        <from usec="0" sec="1375938003"/>
        <to usec="0" sec="1375938260"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.255.171.194"/>
        </slice>
        <from usec="0" sec="1375938004"/>
        <to usec="0" sec="1375938223"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="139.255.122.86"/>
        </slice>
        <from usec="0" sec="1375938005"/>
        <to usec="0" sec="1375938251"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.255.54.142"/>
        </slice>
        <from usec="0" sec="1375938006"/>
        <to usec="0" sec="1375938286"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="13.4.64.141"/>
        </slice>
        <from usec="0" sec="1375938144"/>
        <to usec="0" sec="1375938176"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="167.86.14.220"/>
        </slice>
        <from usec="0" sec="1375938205"/>
        <to usec="0" sec="1375938260"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="122.99.244.153"/>
        </slice>
        <from usec="0" sec="1375938215"/>
        <to usec="0" sec="1375938219"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="193.99.197.237"/>
        </slice>
        <from usec="0" sec="1375938258"/>
        <to usec="0" sec="1375938285"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.179.192.33"/>
        </slice>
        <from usec="0" sec="1375938275"/>
        <to usec="0" sec="1375938281"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.164.206.203"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938378"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="165.187.81.92"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938378"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.144.204.208"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938375"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.28.52.65"/>
        </slice>
        <from usec="0" sec="1375938013"/>
        <to usec="0" sec="1375938378"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="85.4.88.38"/>
        </slice>
        <from usec="0" sec="1375938020"/>
        <to usec="0" sec="1375938427"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="148.255.8.139"/>
        </slice>
        <from usec="0" sec="1375938207"/>
        <to usec="0" sec="1375938337"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.208.2.209"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="131.49.200.239"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="17.172.13.234"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="88.234.194.22"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="139.255.236.145"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938462"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.28.161.224"/>
        </slice>
        <from usec="0" sec="1375938004"/>
        <to usec="0" sec="1375938464"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.28.86.181"/>
        </slice>
        <from usec="0" sec="1375938005"/>
        <to usec="0" sec="1375938443"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="51.87.115.130"/>
        </slice>
        <from usec="0" sec="1375938005"/>
        <to usec="0" sec="1375938431"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="192.18.100.218"/>
        </slice>
        <from usec="0" sec="1375938015"/>
        <to usec="0" sec="1375938465"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="139.255.122.61"/>
        </slice>
        <from usec="0" sec="1375938038"/>
        <to usec="0" sec="1375938462"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="198.225.168.251"/>
        </slice>
        <from usec="0" sec="1375938144"/>
        <to usec="0" sec="1375938334"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="23.30.173.82"/>
        </slice>
        <from usec="0" sec="1375938208"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.4.43.53"/>
        </slice>
        <from usec="0" sec="1375938248"/>
        <to usec="0" sec="1375938450"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="57.61.216.98"/>
        </slice>
        <from usec="0" sec="1375938343"/>
        <to usec="0" sec="1375938436"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.16.45.235"/>
        </slice>
        <from usec="0" sec="1375938414"/>
        <to usec="0" sec="1375938430"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.177.132.125"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938468"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.187.64.10"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938558"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="145.140.188.146" src_port="25"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938553"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.219.152.0"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938557"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="145.173.60.26" src_port="80"/>
            <filter dst_ip="145.173.60.26" src_port="443"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938554"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="21.163.45.209"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938556"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="139.255.13.100"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938418"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="17.207.16.153"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938557"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="145.28.164.83"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938503"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.66.177.82" dst_ip="193.208.9.7" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.187.101.37"/>
        </slice>
        <from usec="0" sec="1375938006"/>
        <to usec="0" sec="1375938557"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="145.6.168.63"/>
        </slice>
        <from usec="0" sec="1375938018"/>
        <to usec="0" sec="1375938521"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="165.187.102.147"/>
        </slice>
        <from usec="0" sec="1375938026"/>
        <to usec="0" sec="1375938541"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.28.243.66"/>
        </slice>
        <from usec="0" sec="1375938047"/>
        <to usec="0" sec="1375938556"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.47.41.124"/>
        </slice>
        <from usec="0" sec="1375938149"/>
        <to usec="0" sec="1375938427"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="165.187.155.102"/>
        </slice>
        <from usec="0" sec="1375938201"/>
        <to usec="0" sec="1375938554"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.122.202.6"/>
        </slice>
        <from usec="0" sec="1375938333"/>
        <to usec="0" sec="1375938535"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="165.187.153.201"/>
        </slice>
        <from usec="0" sec="1375938011"/>
        <to usec="0" sec="1375938642"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="74.58.200.245"/>
        </slice>
        <from usec="0" sec="1375938016"/>
        <to usec="0" sec="1375938594"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="189.144.170.6"/>
        </slice>
        <from usec="0" sec="1375938501"/>
        <to usec="0" sec="1375938648"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.45.208.11"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="8.135.11.207"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938735"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="165.187.101.98" dst_ip="124.129.42.76" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="28.161.36.135" dst_ip="165.187.206.185" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938736"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="184.157.178.11"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="35.92.84.33"/>
        </slice>
        <from usec="0" sec="1375938006"/>
        <to usec="0" sec="1375938737"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="172.24.4.40"/>
        </slice>
        <from usec="0" sec="1375938008"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.255.181.23"/>
        </slice>
        <from usec="0" sec="1375938009"/>
        <to usec="0" sec="1375938730"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="192.18.96.97"/>
            <filter dst_ip="173.61.100.224"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938726"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="160.174.68.160" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938029"/>
        <to usec="0" sec="1375938728"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.173.1.166"/>
        </slice>
        <from usec="0" sec="1375938054"/>
        <to usec="0" sec="1375938723"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.20.173.209"/>
        </slice>
        <from usec="0" sec="1375938055"/>
        <to usec="0" sec="1375938725"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.28.203.88"/>
        </slice>
        <from usec="0" sec="1375938093"/>
        <to usec="0" sec="1375938622"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="192.139.249.133"/>
        </slice>
        <from usec="0" sec="1375938305"/>
        <to usec="0" sec="1375938712"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.187.155.213"/>
        </slice>
        <from usec="0" sec="1375938338"/>
        <to usec="0" sec="1375938735"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="145.140.166.25"/>
        </slice>
        <from usec="0" sec="1375938383"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.0.180.30"/>
        </slice>
        <from usec="0" sec="1375938511"/>
        <to usec="0" sec="1375938717"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="18.128.173.29"/>
        </slice>
        <from usec="0" sec="1375938530"/>
        <to usec="0" sec="1375938734"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.192.175.102"/>
        </slice>
        <from usec="0" sec="1375938551"/>
        <to usec="0" sec="1375938569"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="165.187.206.207" src_port="49023"/>
            <filter src_ip="165.187.206.207" dst_port="80"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938827"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="145.173.2.1"/>
        </slice>
        <from usec="0" sec="1375938013"/>
        <to usec="0" sec="1375938828"/>
    </anomaly>
    <anomaly type="notice" value="0.385608,1.321170,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.124.128.39"/>
        </slice>
        <from usec="0" sec="1375938059"/>
        <to usec="0" sec="1375938822"/>
    </anomaly>
    <anomaly type="notice" value="0.852739,1.356480,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938828"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.219.167.149" dst_ip="37.15.192.182" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,010,0 0 0 1 1 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter dst_ip="202.229.228.201" dst_port="2049"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="145.28.157.0" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.18.110.12" dst_ip="202.171.47.31" src_port="51631" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,503,0 0 0 1 1 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="26.101.161.10" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938041"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="122.68.124.146" dst_ip="165.187.125.221" src_port="80"/>
            <filter src_ip="53.155.200.52" dst_ip="165.187.125.221" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938198"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="122.81.136.165" dst_ip="165.187.149.134" src_port="80" dst_port="64329"/>
            <filter src_ip="122.81.136.165" dst_ip="165.187.149.134" src_port="80" dst_port="63918"/>
            <filter src_ip="122.81.136.172" dst_ip="165.187.149.134" src_port="80" dst_port="64328"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938286"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="145.28.86.5" dst_ip="177.80.130.227" src_port="60468" dst_port="443"/>
            <filter src_ip="145.28.86.5" dst_ip="177.80.130.227" src_port="60467" dst_port="443"/>
            <filter src_ip="145.28.86.5" dst_ip="217.105.16.153" src_port="60469" dst_port="443"/>
            <filter src_ip="145.28.86.5" dst_ip="8.208.58.16" src_port="60805" dst_port="80"/>
        </slice>
        <from usec="0" sec="1375938033"/>
        <to usec="0" sec="1375938378"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="193.106.47.51" dst_ip="192.168.250.5" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938738"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,504,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="193.208.10.138" dst_ip="124.149.131.125" dst_port="443"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938729"/>
    </anomaly>
    <anomaly type="notice" value="0.827488,1.320350,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="165.187.206.168" dst_ip="29.144.204.208" src_port="12814" dst_port="5262"/>
        </slice>
        <from usec="0" sec="1375938001"/>
        <to usec="0" sec="1375938737"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.197.114.124" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938046"/>
    </anomaly>
    <anomaly type="notice" value="0.677821,1.300170,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.208.24.17" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938108"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.18.104.81" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938270"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.677821,1.300170,503,0 0 0 1 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="192.18.101.7" dst_ip="21.153.121.11" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938002"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.28.157.86" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938270"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.677821,1.300170,503,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.208.2.138" dst_ip="197.165.20.0" dst_port="80"/>
        </slice>
        <from usec="0" sec="1375938270"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.28.27.46" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938270"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.106.47.51" src_port="53" dst_port="1001"/>
        </slice>
        <from usec="0" sec="1375938000"/>
        <to usec="0" sec="1375938316"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.255.241.52" src_port="53"/>
            <filter dst_ip="148.255.241.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.255.178.36"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="167.86.120.4" src_port="53"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="165.187.45.96"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="209.1.196.92"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.208.24.92"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="192.18.100.65"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="218.106.41.27"/>
        </slice>
        <from usec="0" sec="1375938450"/>
        <to usec="0" sec="1375938496"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.255.183.34" dst_port="53"/>
        </slice>
        <from usec="0" sec="1375938495"/>
        <to usec="0" sec="1375938541"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,010,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="49.84.65.29" dst_ip="145.140.187.148"/>
        </slice>
        <from usec="0" sec="1375938360"/>
        <to usec="0" sec="1375938586"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="145.28.87.13" src_port="23477"/>
        </slice>
        <from usec="0" sec="1375938540"/>
        <to usec="0" sec="1375938586"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="178.247.250.156" src_port="6005"/>
        </slice>
        <from usec="0" sec="1375938540"/>
        <to usec="0" sec="1375938586"/>
    </anomaly>
    <anomaly type="notice" value="0.708426,1.336860,010,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="104.215.11.179" dst_ip="193.208.27.198" src_port="80"/>
        </slice>
        <from usec="0" sec="1375938540"/>
        <to usec="0" sec="1375938586"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="18.130.94.4"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="165.187.44.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.187.103.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="165.187.251.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="165.187.178.118"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="205.110.231.50"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="192.18.97.5"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.85.222.152"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.232.224.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="59.112.69.209"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="8.108.230.92"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="16.108.85.51"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.255.92.34" src_port="80"/>
            <filter dst_ip="148.255.92.34" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.187.205.93" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter src_ip="145.178.26.50" dst_ip="165.187.155.106" src_port="443"/>
            <filter src_ip="53.74.65.161" dst_ip="165.187.155.106" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="165.187.146.145" src_port="443"/>
            <filter src_ip="170.188.2.99" dst_ip="165.187.146.145" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="101.46.17.65" dst_ip="165.187.20.188" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="193.208.2.138" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="193.208.11.147"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="192.18.100.26"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="198.55.20.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="69.198.107.22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="62.13.108.33"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.618037,1.317750,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="44.42.216.227"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
