<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="106.86.184.166" dst_ip="208.124.59.109" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703079"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="157.187.170.3"/>
        </slice>
        <from usec="0" sec="1378702861"/>
        <to usec="0" sec="1378702863"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.187.105.243" dst_ip="16.52.85.129" src_port="19895" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702951"/>
        <to usec="0" sec="1378702954"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703701"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.15.150.147" dst_ip="16.52.85.141" src_port="41302" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702932"/>
        <to usec="0" sec="1378702940"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.20.190.142" dst_ip="154.51.75.141" src_port="50642" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703080"/>
        <to usec="0" sec="1378703085"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.187.131.244" dst_ip="16.52.44.212" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703030"/>
        <to usec="0" sec="1378703047"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="157.187.33.206"/>
        </slice>
        <from usec="0" sec="1378703074"/>
        <to usec="0" sec="1378703076"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.187.224.0" dst_ip="16.52.39.148" src_port="52200" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702833"/>
        <to usec="0" sec="1378703011"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="161.20.161.43" dst_ip="66.176.86.91" src_port="57357" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703080"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.20.161.37" dst_ip="206.37.101.159" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702839"/>
        <to usec="0" sec="1378703085"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.20.160.119" dst_ip="215.52.158.118" src_port="63054" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702805"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="194.249.129.14" dst_ip="157.187.68.122" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703073"/>
        <to usec="0" sec="1378703076"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="157.187.182.201" dst_ip="101.129.92.202" src_port="61999" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702819"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.9.200.5" dst_ip="56.98.205.36" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378703071"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703701"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="209.236.122.103"/>
        </slice>
        <from usec="0" sec="1378702839"/>
        <to usec="0" sec="1378702841"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="62.32.153.143" dst_ip="62.32.153.143" proto="tcp"/>
        </slice>
        <from usec="0" sec="1378702801"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="192.82.102.168" dst_ip="157.187.74.220" src_port="80"/>
            <filter src_ip="77.53.201.156" dst_ip="157.187.74.220" src_port="80"/>
        </slice>
        <from usec="0" sec="1378702801"/>
        <to usec="0" sec="1378703269"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="221.80.129.200" dst_ip="153.132.136.101" dst_port="80"/>
            <filter src_ip="26.4.53.68" dst_ip="153.132.136.101" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702874"/>
        <to usec="0" sec="1378703326"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.132.7.58"/>
        </slice>
        <from usec="0" sec="1378703031"/>
        <to usec="0" sec="1378703033"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="153.9.200.95"/>
        </slice>
        <from usec="0" sec="1378702834"/>
        <to usec="0" sec="1378702945"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.187.171.130"/>
        </slice>
        <from usec="0" sec="1378703009"/>
        <to usec="0" sec="1378703011"/>
    </anomaly>
    <anomaly type="suspicious" value="0.886874,1.180700,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="209.15.157.191" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1378702801"/>
        <to usec="0" sec="1378702804"/>
    </anomaly>
    <anomaly type="suspicious" value="1.403110,1.473310,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703701"/>
    </anomaly>
    <anomaly type="suspicious" value="1.403110,1.473310,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703701"/>
    </anomaly>
    <anomaly type="suspicious" value="1.625540,1.666450,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703701"/>
    </anomaly>
    <anomaly type="suspicious" value="1.625540,1.666450,901,0 0 1 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter proto="icmp"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703700"/>
    </anomaly>
    <anomaly type="suspicious" value="0.841761,1.163940,502,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="220.104.88.205" dst_ip="161.20.43.145"/>
            <filter src_ip="220.104.88.205" dst_port="22"/>
            <filter dst_ip="161.20.43.145" dst_port="22"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703538"/>
    </anomaly>
    <anomaly type="suspicious" value="0.817389,1.180580,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703628"/>
    </anomaly>
    <anomaly type="suspicious" value="1.000590,1.199840,504,0 0 0 1 1 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="161.20.134.198" dst_ip="212.120.128.73" src_port="1241" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.634130,1.675250,901,0 0 0 0 0 1 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703448"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075520,1.209470,010,1 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="206.181.102.163" src_port="80"/>
        </slice>
        <from usec="0" sec="1378703070"/>
        <to usec="0" sec="1378703212"/>
    </anomaly>
    <anomaly type="suspicious" value="1.075520,1.209470,999,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.193.52.241" dst_ip="208.124.34.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702938"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="suspicious" value="1.127550,1.255290,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="10.100.90.220" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="20.96.93.252"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="4.10.71.98"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.285930,1.299400,504,0 0 0 1 1 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="212.10.59.3" src_port="443"/>
            <filter dst_ip="208.112.249.96" src_port="443"/>
            <filter dst_ip="208.112.249.96" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,020,0 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="44.134.45.144"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="51.33.112.81"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="26.50.137.38"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="3.71.61.41"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="5.61.214.150" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.187.33.17" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter src_ip="7.126.75.33" dst_ip="153.60.229.128" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.092900,1.237120,999,0 0 0 1 0 0 0 0 0 1 1 0,ipv46tun">
        <slice>
            <filter src_ip="209.15.155.140" dst_ip="130.52.121.108"/>
            <filter src_ip="209.215.133.150" dst_ip="130.52.121.108"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,999,0 0 0 0 0 0 0 0 0 1 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="172.16.0.43"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.092900,1.237120,504,0 0 0 1 0 0 0 0 0 1 1 0,mptp">
        <slice>
            <filter dst_ip="208.112.239.86" src_port="443"/>
            <filter src_ip="84.137.48.221" dst_ip="208.112.239.86" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="105.66.45.99"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="0.787382,1.149320,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="33.59.165.111"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="16.53.21.29" dst_ip="161.20.250.87" src_port="443" dst_port="48050"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.092900,1.237120,503,0 0 0 1 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.15.159.88" src_port="80"/>
            <filter dst_ip="209.15.159.88" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.132.55.32" dst_port="443"/>
            <filter src_ip="153.132.55.32" dst_ip="101.245.16.201" dst_port="80"/>
            <filter src_ip="153.132.55.32" dst_ip="101.245.40.11" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="220.220.46.77" dst_ip="208.112.244.132" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.092900,1.237120,504,0 0 0 1 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="209.15.157.32" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,999,0 0 0 0 0 0 0 0 0 1 1 0,ptmpla">
        <slice>
            <filter src_ip="209.15.157.207" dst_ip="43.91.91.191"/>
            <filter src_ip="209.15.157.207" dst_ip="193.20.149.53"/>
            <filter src_ip="209.15.157.207" src_port="19"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="212.115.101.153" dst_ip="157.187.163.75" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.187.163.102" src_port="80"/>
            <filter dst_ip="157.187.163.102" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="208.112.248.58" dst_ip="165.108.38.15" src_port="49736" dst_port="80"/>
            <filter src_ip="208.112.248.58" dst_ip="165.108.38.15" src_port="49735" dst_port="80"/>
            <filter src_ip="208.112.248.58" dst_ip="165.108.38.15" src_port="49733" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="161.20.73.87" dst_ip="169.99.144.188" src_port="63775" dst_port="443"/>
            <filter src_ip="161.20.73.87" dst_ip="169.99.144.188" src_port="63771" dst_port="443"/>
            <filter src_ip="161.20.73.87" dst_ip="169.99.144.188" src_port="63766" dst_port="443"/>
            <filter src_ip="161.20.73.87" dst_ip="169.99.144.188" src_port="63763" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,503,0 0 0 0 0 0 0 0 0 1 1 0,alphflHTTP">
        <slice>
            <filter src_ip="208.112.248.58" dst_ip="186.180.250.162" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="suspicious" value="1.128010,1.252900,504,0 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="153.60.246.28" dst_ip="101.130.25.34" src_port="55793" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="23.139.119.80" src_port="6000" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1378703303"/>
        <to usec="0" sec="1378703305"/>
    </anomaly>
    <anomaly type="anomalous" value="2.313010,1.984680,010,1 1 1 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.119.26.85" src_port="12200" dst_port="21320"/>
            <filter src_ip="106.119.26.85" src_port="12200" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378703115"/>
        <to usec="0" sec="1378703277"/>
    </anomaly>
    <anomaly type="anomalous" value="2.383910,1.996190,999,1 1 1 1 0 0 1 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="50.114.234.74" src_port="50906" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="161.20.165.167" dst_ip="203.174.32.105" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702872"/>
        <to usec="0" sec="1378702875"/>
    </anomaly>
    <anomaly type="anomalous" value="2.604520,2.122540,010,1 1 1 0 0 0 1 1 1 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="183.1.57.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703047"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="63.1.8.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1378703079"/>
        <to usec="0" sec="1378703082"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.192.223.90" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1378703203"/>
        <to usec="0" sec="1378703205"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.11.23.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1378703415"/>
        <to usec="0" sec="1378703418"/>
    </anomaly>
    <anomaly type="anomalous" value="1.595730,1.526080,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="177.68.26.206" dst_port="445"/>
        </slice>
        <from usec="0" sec="1378702801"/>
        <to usec="0" sec="1378702808"/>
    </anomaly>
    <anomaly type="anomalous" value="1.571100,1.513150,010,1 1 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="51.104.14.47" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1378703166"/>
        <to usec="0" sec="1378703442"/>
    </anomaly>
    <anomaly type="anomalous" value="1.595730,1.526080,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="5.12.62.7" dst_port="23"/>
        </slice>
        <from usec="0" sec="1378703325"/>
        <to usec="0" sec="1378703330"/>
    </anomaly>
    <anomaly type="anomalous" value="2.231550,1.967280,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="106.119.26.85" src_port="80" dst_port="12200"/>
        </slice>
        <from usec="0" sec="1378703268"/>
        <to usec="0" sec="1378703269"/>
    </anomaly>
    <anomaly type="anomalous" value="2.066900,1.710150,999,1 1 0 1 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.112.33.1" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703628"/>
    </anomaly>
    <anomaly type="anomalous" value="2.304960,1.978900,502,1 1 1 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="55.155.247.38" dst_port="22"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.585020,1.410580,999,1 0 0 1 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.187.206.51" dst_ip="96.106.81.28" src_port="53"/>
            <filter src_ip="157.187.121.98" dst_ip="96.106.81.28" src_port="53"/>
            <filter src_ip="157.187.32.112" dst_ip="96.106.81.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703178"/>
    </anomaly>
    <anomaly type="anomalous" value="3.168160,2.505930,503,1 1 1 1 1 1 1 1 1 1 0 0,ntscACK">
        <slice>
            <filter src_ip="208.124.8.173" dst_port="80"/>
            <filter src_ip="208.124.8.173" dst_port="53"/>
            <filter src_ip="208.124.8.173" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.860810,1.735020,011,0 0 0 1 1 1 0 0 0 1 0 0,point_to_point">
        <slice>
            <filter src_ip="190.151.71.213" dst_ip="161.20.134.198" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,504,0 0 0 1 1 1 0 0 0 1 1 1,mptp">
        <slice>
            <filter dst_ip="157.187.136.184" src_port="443"/>
            <filter src_ip="194.194.200.100" dst_ip="157.187.136.184" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.691000,1.512050,504,0 0 0 1 1 0 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="443"/>
            <filter src_ip="8.36.226.186" src_port="80"/>
            <filter dst_ip="161.20.74.204" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="7.126.75.76" dst_ip="157.187.206.117" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.862280,2.372410,010,1 1 1 1 1 1 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.119.85.203" src_port="12200" dst_port="21320"/>
            <filter src_ip="106.119.85.203" src_port="12200" dst_port="80"/>
            <filter src_ip="106.119.85.203" src_port="12200" dst_port="3128"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703666"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="208.112.227.129" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.691000,1.512050,503,0 0 0 1 1 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="51.33.228.94" dst_ip="161.20.194.29" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter dst_ip="157.187.76.23" src_port="80"/>
            <filter src_ip="42.150.173.75" dst_ip="157.187.76.23" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.390930,1.353310,020,0 0 0 1 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="157.187.84.23"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703628"/>
    </anomaly>
    <anomaly type="anomalous" value="1.390930,1.353310,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.187.134.145" src_port="53"/>
            <filter dst_ip="157.187.134.145" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702908"/>
    </anomaly>
    <anomaly type="anomalous" value="1.390930,1.353310,999,0 0 0 1 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="59.43.13.141" dst_ip="157.187.98.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702908"/>
    </anomaly>
    <anomaly type="anomalous" value="2.503750,2.020890,504,1 0 0 1 1 1 1 0 0 1 1 1,mptmp">
        <slice>
            <filter src_ip="157.187.34.137" dst_port="80"/>
            <filter src_ip="157.187.34.137" dst_port="443"/>
            <filter dst_ip="172.143.35.66" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="216.173.108.227" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="153.132.40.117"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="192.168.5.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.556830,1.398540,999,0 0 0 0 0 0 1 1 1 1 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="10.1.1.4" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="192.168.250.6" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.187.84.128" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="2.289290,1.754860,503,1 0 0 1 1 0 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="209.15.148.210"/>
            <filter dst_ip="209.15.148.210" dst_port="80"/>
            <filter dst_ip="209.15.148.210"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.201.207.247" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.201.207.246" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="129.69.22.220" dst_ip="20.107.90.128" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.15.150.147" src_port="443"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.201.169.161" src_port="443"/>
            <filter dst_ip="162.201.169.161" src_port="9001"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.112.233.132" dst_ip="216.36.121.226"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.151.100" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="208.219.186.166" dst_ip="10.2.48.218" src_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="216.242.60.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="2.159450,1.709170,999,0 0 0 1 1 0 1 1 1 1 1 1,ntscUDP">
        <slice>
            <filter src_ip="153.132.76.210" src_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,503,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.15.158.135" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.124.34.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="2.676700,2.150310,504,1 1 1 1 1 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter src_ip="208.124.59.7" dst_ip="43.14.240.154"/>
            <filter src_ip="208.124.59.7" dst_port="443"/>
            <filter dst_ip="43.14.240.154" dst_port="443"/>
            <filter dst_ip="43.14.240.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703537"/>
    </anomaly>
    <anomaly type="anomalous" value="1.390930,1.353310,503,0 0 0 1 0 0 1 1 1 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="13.133.176.96" dst_ip="209.15.158.149" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703171"/>
    </anomaly>
    <anomaly type="anomalous" value="1.390930,1.353310,999,0 0 0 1 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.154.17" src_port="53"/>
            <filter dst_ip="209.15.154.17" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.154.21" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.154.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.556830,1.398540,503,0 0 0 0 0 0 1 1 1 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.15.149.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.609440,1.424440,999,1 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.112.232.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703076"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.178.97.161" dst_ip="209.15.133.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.157.76" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.132.194.192" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378702846"/>
    </anomaly>
    <anomaly type="anomalous" value="1.609440,1.424440,999,1 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.15.159.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703086"/>
    </anomaly>
    <anomaly type="anomalous" value="1.418690,1.367760,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.100.199.186" dst_ip="153.9.202.171" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703161"/>
    </anomaly>
    <anomaly type="anomalous" value="1.585020,1.410580,503,1 0 0 1 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.112.233.59" dst_port="80"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703538"/>
    </anomaly>
    <anomaly type="anomalous" value="1.609440,1.424440,999,1 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="157.187.32.112" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703431"/>
    </anomaly>
    <anomaly type="anomalous" value="2.066900,1.710150,999,1 1 0 1 0 0 1 1 1 0 0 0,mptmp">
        <slice>
            <filter dst_ip="157.187.206.51" dst_port="53"/>
            <filter dst_ip="157.187.121.98" dst_port="53"/>
        </slice>
        <from usec="0" sec="1378702800"/>
        <to usec="0" sec="1378703566"/>
    </anomaly>
    <anomaly type="anomalous" value="1.493730,1.358940,503,1 0 0 1 1 0 0 0 0 1 1 0,ptmplaHTTP">
        <slice>
            <filter src_ip="153.132.136.101" dst_ip="26.4.53.98"/>
            <filter dst_ip="26.4.53.98" src_port="80"/>
            <filter src_ip="153.132.136.101" dst_ip="221.80.129.200" src_port="80"/>
            <filter src_ip="153.132.136.101" dst_ip="26.4.53.68" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="153.149.134.220" src_port="80"/>
            <filter dst_ip="153.149.134.220" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.549290,1.458870,503,0 0 0 1 0 0 0 0 0 1 1 1,mptplaHTTP">
        <slice>
            <filter src_ip="213.0.16.160" dst_ip="161.20.74.205" src_port="80"/>
            <filter src_ip="213.0.19.83" dst_ip="161.20.74.205" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.076050,2.363280,503,1 1 0 1 1 1 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="208.124.59.7" src_port="80"/>
            <filter dst_ip="208.124.59.7" src_port="53"/>
            <filter dst_ip="208.124.59.7" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.331180,1.299510,504,1 0 0 1 0 0 0 0 0 1 1 0,mptmp">
        <slice>
            <filter src_ip="161.20.250.87" dst_port="443"/>
            <filter dst_ip="21.215.113.185" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.503750,2.020890,503,1 0 0 1 1 1 1 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="42.150.172.67" dst_ip="157.187.228.98" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.691000,1.512050,503,0 0 0 1 1 0 0 0 0 1 1 1,salphfl">
        <slice>
            <filter src_ip="84.137.10.105" dst_ip="153.60.246.28" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter src_port="80"/>
            <filter src_ip="172.143.31.89" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.186700,1.709250,999,1 0 0 1 0 0 1 1 1 1 1 1,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.15.157.191" dst_port="123"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.008720,1.575340,504,1 0 0 1 1 0 1 1 1 1 1 0,mptp">
        <slice>
            <filter dst_ip="172.143.31.89" dst_port="443"/>
            <filter dst_ip="172.143.31.89" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.360150,1.314550,504,1 0 0 0 0 0 0 0 0 1 1 0,alphfl">
        <slice>
            <filter src_ip="208.112.35.74" dst_ip="46.134.86.132" src_port="32952" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.306720,1.963910,503,0 0 0 1 1 1 0 0 0 1 1 1,mptmp">
        <slice>
            <filter dst_ip="161.20.182.156"/>
            <filter dst_ip="161.20.208.20" src_port="80"/>
            <filter dst_ip="161.20.163.3" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="3.071500,2.357050,503,1 1 1 1 1 0 1 1 1 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="209.15.155.244" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.574250,1.472280,503,0 0 0 0 0 0 0 0 0 1 1 1,mptpHTTP">
        <slice>
            <filter dst_ip="208.112.248.58" src_port="80"/>
            <filter dst_ip="208.112.248.58" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.859400,1.524280,503,0 0 0 1 1 0 1 1 1 1 1 0,mptmp">
        <slice>
            <filter src_ip="209.15.158.135"/>
            <filter dst_port="80"/>
            <filter src_ip="209.15.148.210"/>
            <filter src_ip="209.15.148.210"/>
            <filter src_ip="209.15.148.219"/>
            <filter src_ip="209.15.148.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.574250,1.472280,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="74.111.118.60" dst_ip="209.15.144.108" src_port="34210" dst_port="8080"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.574250,1.472280,504,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="96.106.69.23" dst_ip="161.20.66.68" src_port="443" dst_port="54729"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.574250,1.472280,503,0 0 0 0 0 0 0 0 0 1 1 1,ptmplaHTTP">
        <slice>
            <filter src_ip="39.144.158.209" dst_ip="161.20.195.180" src_port="80" dst_port="46452"/>
            <filter src_ip="39.144.158.209" dst_ip="161.20.195.180" src_port="80" dst_port="32972"/>
            <filter src_ip="39.144.158.209" dst_ip="153.9.200.145" src_port="80" dst_port="59611"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.574250,1.472280,999,0 0 0 0 0 0 0 0 0 1 1 1,alphfl">
        <slice>
            <filter src_ip="24.137.51.122" dst_ip="162.201.168.144" src_port="61046" dst_port="36377"/>
            <filter src_ip="24.137.51.122" dst_ip="162.201.168.144" src_port="61046" dst_port="11167"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.549290,1.458870,503,0 0 0 1 0 0 0 0 0 1 1 1,alphflHTTP">
        <slice>
            <filter src_ip="106.172.4.227" dst_ip="157.187.228.168" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="2.159450,1.709170,504,0 0 0 1 1 0 1 1 1 1 1 1,mptp">
        <slice>
            <filter dst_ip="208.124.22.72" src_port="80"/>
            <filter dst_ip="208.124.22.72" src_port="443"/>
            <filter dst_ip="208.124.22.72" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="anomalous" value="1.853940,1.563510,503,1 0 0 1 1 0 0 0 0 1 1 1,ptmpHTTP">
        <slice>
            <filter src_ip="209.15.155.244" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
