<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.318693,1.763880,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="91.69.114.114"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381306"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="205.112.5.34"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381309"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="205.112.244.227"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381309"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.92.140"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381287"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.113.89.21"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381381292"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.101.21.218"/>
        </slice>
        <from usec="0" sec="1381381210"/>
        <to usec="0" sec="1381381300"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.187.91"/>
        </slice>
        <from usec="0" sec="1381381230"/>
        <to usec="0" sec="1381381307"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="194.29.144.63"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="204.122.93.25"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="212.147.32.74"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.164.138"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="100.125.255.80"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.229.31.130"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381383"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.122.89.33"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381391"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="205.230.9.109"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="32.181.20.113"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.101.93.49"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381396"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.215.45.189"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="209.214.84.244"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="100.183.182.192"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381381392"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.120.225.172"/>
        </slice>
        <from usec="0" sec="1381381208"/>
        <to usec="0" sec="1381381374"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.207.21"/>
        </slice>
        <from usec="0" sec="1381381213"/>
        <to usec="0" sec="1381381397"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="59.79.189.223"/>
        </slice>
        <from usec="0" sec="1381381213"/>
        <to usec="0" sec="1381381391"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.120.14.20"/>
        </slice>
        <from usec="0" sec="1381381216"/>
        <to usec="0" sec="1381381380"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="128.76.97.133"/>
        </slice>
        <from usec="0" sec="1381381232"/>
        <to usec="0" sec="1381381397"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.20.76"/>
        </slice>
        <from usec="0" sec="1381381251"/>
        <to usec="0" sec="1381381385"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="42.33.217.59"/>
        </slice>
        <from usec="0" sec="1381381270"/>
        <to usec="0" sec="1381381315"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.227.65.27"/>
        </slice>
        <from usec="0" sec="1381381270"/>
        <to usec="0" sec="1381381315"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="32.162.87.2"/>
        </slice>
        <from usec="0" sec="1381381304"/>
        <to usec="0" sec="1381381366"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="28.255.12.249"/>
        </slice>
        <from usec="0" sec="1381381321"/>
        <to usec="0" sec="1381381331"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="196.41.119.124"/>
        </slice>
        <from usec="0" sec="1381381388"/>
        <to usec="0" sec="1381381396"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="204.122.95.12"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.81.137" src_port="443"/>
            <filter dst_ip="175.204.81.137" src_port="80"/>
            <filter dst_ip="175.204.81.137" src_port="53" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="43.75.105.130"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="197.49.49.41"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.112.250.229"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.22.3"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381482"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.57.111.196"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381362"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="159.182.2.138"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381486"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.188.89"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381488"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.81.144"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381482"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="153.138.27.56"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381486"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.107.212.65"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381485"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.69.62"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381484"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.101.225.49"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,002,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="192.168.10.255"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381483"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="103.79.18.136"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381381488"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="158.37.215.73"/>
        </slice>
        <from usec="0" sec="1381381208"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.81.98"/>
        </slice>
        <from usec="0" sec="1381381209"/>
        <to usec="0" sec="1381381749"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.36.52"/>
        </slice>
        <from usec="0" sec="1381381221"/>
        <to usec="0" sec="1381381486"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.120.20.128"/>
        </slice>
        <from usec="0" sec="1381381230"/>
        <to usec="0" sec="1381381470"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.244.70.6"/>
        </slice>
        <from usec="0" sec="1381381253"/>
        <to usec="0" sec="1381381556"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="12.211.109.32"/>
        </slice>
        <from usec="0" sec="1381381282"/>
        <to usec="0" sec="1381381455"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.19.34"/>
        </slice>
        <from usec="0" sec="1381381282"/>
        <to usec="0" sec="1381381483"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="196.76.100.84"/>
        </slice>
        <from usec="0" sec="1381381342"/>
        <to usec="0" sec="1381381479"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.243.237"/>
        </slice>
        <from usec="0" sec="1381381376"/>
        <to usec="0" sec="1381381467"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.120.88.104"/>
        </slice>
        <from usec="0" sec="1381381467"/>
        <to usec="0" sec="1381381487"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.216.193.141"/>
        </slice>
        <from usec="0" sec="1381381475"/>
        <to usec="0" sec="1381381489"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="93.156.144.54"/>
        </slice>
        <from usec="0" sec="1381381483"/>
        <to usec="0" sec="1381381486"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.120.90.44"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381549"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.161.33"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381575"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.66.177.39"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381571"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="5.98.116.87"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="32.152.67.255"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381568"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.241.120.241"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381578"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="128.217.203.224"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381577"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.99.163.254"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381796"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="78.13.163.159"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381562"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="10.8.13.8"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381577"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="131.23.165.120"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381567"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="103.82.214.78"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.19.220"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381381578"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.56.242"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381381562"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.90.95"/>
        </slice>
        <from usec="0" sec="1381381208"/>
        <to usec="0" sec="1381381557"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.10.211.125"/>
        </slice>
        <from usec="0" sec="1381381208"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="158.37.215.105"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381573"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.90.187"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="220.143.18.12"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.191.227.36"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381502"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.154.89.249"/>
        </slice>
        <from usec="0" sec="1381381212"/>
        <to usec="0" sec="1381381515"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.160.45"/>
        </slice>
        <from usec="0" sec="1381381216"/>
        <to usec="0" sec="1381381550"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="212.175.214.31"/>
        </slice>
        <from usec="0" sec="1381381220"/>
        <to usec="0" sec="1381381574"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.101.92.8"/>
        </slice>
        <from usec="0" sec="1381381225"/>
        <to usec="0" sec="1381381574"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.101.23.195"/>
        </slice>
        <from usec="0" sec="1381381228"/>
        <to usec="0" sec="1381381550"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.200.2.69"/>
        </slice>
        <from usec="0" sec="1381381230"/>
        <to usec="0" sec="1381381568"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="219.58.200.117"/>
        </slice>
        <from usec="0" sec="1381381233"/>
        <to usec="0" sec="1381381425"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.130.28"/>
        </slice>
        <from usec="0" sec="1381381233"/>
        <to usec="0" sec="1381381566"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.101.89.187"/>
        </slice>
        <from usec="0" sec="1381381234"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.3.155"/>
        </slice>
        <from usec="0" sec="1381381236"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="66.64.5.115"/>
        </slice>
        <from usec="0" sec="1381381243"/>
        <to usec="0" sec="1381381472"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.152.99.26"/>
        </slice>
        <from usec="0" sec="1381381281"/>
        <to usec="0" sec="1381381457"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.120.217.209"/>
        </slice>
        <from usec="0" sec="1381381285"/>
        <to usec="0" sec="1381381444"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="194.161.246.14"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381510"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.101.20.169"/>
        </slice>
        <from usec="0" sec="1381381365"/>
        <to usec="0" sec="1381381561"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.3.74.244"/>
        </slice>
        <from usec="0" sec="1381381401"/>
        <to usec="0" sec="1381381511"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="178.40.165.165"/>
        </slice>
        <from usec="0" sec="1381381410"/>
        <to usec="0" sec="1381381561"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.214.125.50"/>
        </slice>
        <from usec="0" sec="1381381427"/>
        <to usec="0" sec="1381381530"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.204.213.144"/>
        </slice>
        <from usec="0" sec="1381381434"/>
        <to usec="0" sec="1381381571"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.246.123"/>
        </slice>
        <from usec="0" sec="1381381440"/>
        <to usec="0" sec="1381381564"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="169.101.27.84"/>
        </slice>
        <from usec="0" sec="1381381464"/>
        <to usec="0" sec="1381381485"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="210.104.253.227"/>
        </slice>
        <from usec="0" sec="1381381465"/>
        <to usec="0" sec="1381381497"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="129.178.87.33"/>
        </slice>
        <from usec="0" sec="1381381465"/>
        <to usec="0" sec="1381381538"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="96.188.124.63"/>
        </slice>
        <from usec="0" sec="1381381470"/>
        <to usec="0" sec="1381381478"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="40.160.233.140"/>
        </slice>
        <from usec="0" sec="1381381504"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="32.165.7.228"/>
        </slice>
        <from usec="0" sec="1381381519"/>
        <to usec="0" sec="1381381575"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.101.224.20"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="220.208.233.234"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381667"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.133.160.203" dst_ip="136.120.14.145" src_port="443"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.20.39"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381658"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.94.140"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.101.88.167"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382026"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.36.164"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.101.21.146"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381658"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.120.88.151"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381662"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="102.93.85.189"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="159.30.54.80"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.101.88.183"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381662"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.106.17.73"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381667"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.90.173"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381663"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="41.5.38.126"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="70.151.170.53" dst_ip="169.101.32.12" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="150.200.215.6"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="175.204.117.140" dst_port="443"/>
            <filter src_ip="175.204.117.140" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="136.120.102.178"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381667"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.101.18.69"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="21.208.139.90"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381660"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.81.84"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381381666"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.122.84.80"/>
        </slice>
        <from usec="0" sec="1381381212"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.101.20.145" dst_port="443"/>
            <filter dst_ip="93.67.243.92" dst_port="443"/>
        </slice>
        <from usec="0" sec="1381381212"/>
        <to usec="0" sec="1381381650"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.101.4.40" src_port="36979"/>
            <filter src_ip="169.101.4.40" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381212"/>
        <to usec="0" sec="1381381657"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="64.227.144.98"/>
        </slice>
        <from usec="0" sec="1381381214"/>
        <to usec="0" sec="1381381744"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="136.120.144.106"/>
        </slice>
        <from usec="0" sec="1381381215"/>
        <to usec="0" sec="1381381661"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="169.101.93.24" dst_port="443"/>
            <filter dst_ip="32.181.218.196" dst_port="443"/>
            <filter dst_ip="32.171.42.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381743"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="86.14.5.61"/>
        </slice>
        <from usec="0" sec="1381381219"/>
        <to usec="0" sec="1381381555"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="136.120.170.86"/>
        </slice>
        <from usec="0" sec="1381381219"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.95.78"/>
        </slice>
        <from usec="0" sec="1381381221"/>
        <to usec="0" sec="1381381665"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="169.101.21.49"/>
        </slice>
        <from usec="0" sec="1381381246"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.21.165.28"/>
        </slice>
        <from usec="0" sec="1381381257"/>
        <to usec="0" sec="1381381659"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.95.43"/>
        </slice>
        <from usec="0" sec="1381381297"/>
        <to usec="0" sec="1381381658"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="8.207.227.215"/>
        </slice>
        <from usec="0" sec="1381381339"/>
        <to usec="0" sec="1381381630"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="47.70.165.84"/>
        </slice>
        <from usec="0" sec="1381381347"/>
        <to usec="0" sec="1381381588"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="74.6.190.39"/>
        </slice>
        <from usec="0" sec="1381381383"/>
        <to usec="0" sec="1381381664"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.18.15.225"/>
        </slice>
        <from usec="0" sec="1381381442"/>
        <to usec="0" sec="1381381561"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.225.193"/>
        </slice>
        <from usec="0" sec="1381381479"/>
        <to usec="0" sec="1381381664"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="93.64.142.7"/>
        </slice>
        <from usec="0" sec="1381381505"/>
        <to usec="0" sec="1381381523"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="205.125.207.166"/>
        </slice>
        <from usec="0" sec="1381381509"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="8.204.161.234"/>
        </slice>
        <from usec="0" sec="1381381513"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="72.110.150.64"/>
        </slice>
        <from usec="0" sec="1381381598"/>
        <to usec="0" sec="1381381610"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="169.101.224.112"/>
        </slice>
        <from usec="0" sec="1381381601"/>
        <to usec="0" sec="1381381666"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.123.181.79"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="197.108.103.248"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.122.32.3"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="121.212.48.23"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="32.147.104.69"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381758"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="111.157.156.6"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="195.105.33.225"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381757"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.95.10"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381758"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.131.4"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381751"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.112.230.163" src_port="443"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381754"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="77.134.10.72"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381754"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.162.114.21"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="136.120.196.46"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381598"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="136.120.25.21"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381755"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="70.34.135.3"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381381833"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.112.228.82"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381382016"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="2.37.80.60"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381710"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.128.21"/>
        </slice>
        <from usec="0" sec="1381381217"/>
        <to usec="0" sec="1381381737"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.19.217"/>
        </slice>
        <from usec="0" sec="1381381218"/>
        <to usec="0" sec="1381381750"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="42.35.31.141"/>
        </slice>
        <from usec="0" sec="1381381221"/>
        <to usec="0" sec="1381381739"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.89.64"/>
        </slice>
        <from usec="0" sec="1381381224"/>
        <to usec="0" sec="1381381758"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.16.232"/>
        </slice>
        <from usec="0" sec="1381381233"/>
        <to usec="0" sec="1381381744"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.213.78"/>
        </slice>
        <from usec="0" sec="1381381250"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.123.176.38"/>
        </slice>
        <from usec="0" sec="1381381313"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="175.204.129.20"/>
        </slice>
        <from usec="0" sec="1381381389"/>
        <to usec="0" sec="1381381663"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="37.212.30.43"/>
        </slice>
        <from usec="0" sec="1381381418"/>
        <to usec="0" sec="1381381634"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.112.244.242"/>
        </slice>
        <from usec="0" sec="1381381499"/>
        <to usec="0" sec="1381381845"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="222.154.72.241"/>
        </slice>
        <from usec="0" sec="1381381517"/>
        <to usec="0" sec="1381381745"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="169.101.197.246"/>
        </slice>
        <from usec="0" sec="1381381549"/>
        <to usec="0" sec="1381381756"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="159.233.50.131"/>
        </slice>
        <from usec="0" sec="1381381567"/>
        <to usec="0" sec="1381381687"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="66.157.17.70"/>
        </slice>
        <from usec="0" sec="1381381640"/>
        <to usec="0" sec="1381381732"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.19.180"/>
        </slice>
        <from usec="0" sec="1381381676"/>
        <to usec="0" sec="1381381725"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="100.183.224.149"/>
        </slice>
        <from usec="0" sec="1381381729"/>
        <to usec="0" sec="1381381738"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="205.124.20.7"/>
        </slice>
        <from usec="0" sec="1381381749"/>
        <to usec="0" sec="1381381751"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter dst_ip="205.168.31.103"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.166.82"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381843"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,010,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="192.168.26.6"/>
        </slice>
        <from usec="0" sec="1381381203"/>
        <to usec="0" sec="1381381848"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="124.97.84.144"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="73.162.165.112"/>
        </slice>
        <from usec="0" sec="1381381209"/>
        <to usec="0" sec="1381381762"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="113.76.195.149"/>
        </slice>
        <from usec="0" sec="1381381209"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="89.111.137.231"/>
        </slice>
        <from usec="0" sec="1381381210"/>
        <to usec="0" sec="1381381848"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.77.160"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381848"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.74.81.76"/>
        </slice>
        <from usec="0" sec="1381381213"/>
        <to usec="0" sec="1381381798"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.1.108.168"/>
        </slice>
        <from usec="0" sec="1381381216"/>
        <to usec="0" sec="1381381847"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="29.194.42.36"/>
        </slice>
        <from usec="0" sec="1381381225"/>
        <to usec="0" sec="1381381848"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="201.123.176.38"/>
        </slice>
        <from usec="0" sec="1381381313"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.144.61.42"/>
        </slice>
        <from usec="0" sec="1381381374"/>
        <to usec="0" sec="1381381844"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.112.244.61"/>
        </slice>
        <from usec="0" sec="1381381429"/>
        <to usec="0" sec="1381381756"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.200.20.82"/>
        </slice>
        <from usec="0" sec="1381381429"/>
        <to usec="0" sec="1381381787"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.124.165.18"/>
        </slice>
        <from usec="0" sec="1381381506"/>
        <to usec="0" sec="1381381816"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="8.229.31.244"/>
        </slice>
        <from usec="0" sec="1381381536"/>
        <to usec="0" sec="1381381777"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.101.90.156"/>
        </slice>
        <from usec="0" sec="1381381560"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="32.162.165.196"/>
        </slice>
        <from usec="0" sec="1381381707"/>
        <to usec="0" sec="1381381846"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="32.162.93.187"/>
        </slice>
        <from usec="0" sec="1381381725"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="202.78.151.28"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381937"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="113.167.17.126"/>
        </slice>
        <from usec="0" sec="1381381215"/>
        <to usec="0" sec="1381381937"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.35.21.129"/>
        </slice>
        <from usec="0" sec="1381381251"/>
        <to usec="0" sec="1381381939"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.112.1.157"/>
        </slice>
        <from usec="0" sec="1381381484"/>
        <to usec="0" sec="1381381876"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.101.94.240"/>
        </slice>
        <from usec="0" sec="1381381648"/>
        <to usec="0" sec="1381382004"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.204.178.128"/>
        </slice>
        <from usec="0" sec="1381381859"/>
        <to usec="0" sec="1381381901"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.10.10.11"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.101.32.97"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="166.237.144.50"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382025"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="175.204.41.21"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382026"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.1.1.92"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.981185,1.724920,999,0 0 0 1 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.118.197.138" src_port="53"/>
            <filter dst_ip="169.171.36.27" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="111.38.142.16"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381382024"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="192.168.122.1"/>
        </slice>
        <from usec="0" sec="1381381204"/>
        <to usec="0" sec="1381382025"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="169.101.19.108"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381382014"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="103.137.156.223"/>
        </slice>
        <from usec="0" sec="1381381205"/>
        <to usec="0" sec="1381382017"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="72.14.154.78" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381382022"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="211.46.150.1"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381382011"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="201.188.24.196"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381382027"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="216.151.87.206"/>
        </slice>
        <from usec="0" sec="1381381208"/>
        <to usec="0" sec="1381382027"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="97.214.211.81" dst_ip="136.120.59.218"/>
            <filter src_ip="97.214.211.81" src_port="80"/>
            <filter src_ip="97.214.211.81" src_port="443"/>
            <filter dst_ip="136.120.59.218" src_port="80"/>
            <filter dst_ip="136.120.59.218" src_port="443"/>
        </slice>
        <from usec="0" sec="1381381209"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="40.98.226.34"/>
        </slice>
        <from usec="0" sec="1381381214"/>
        <to usec="0" sec="1381382018"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="93.64.235.125"/>
        </slice>
        <from usec="0" sec="1381381215"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="187.36.180.115"/>
        </slice>
        <from usec="0" sec="1381381227"/>
        <to usec="0" sec="1381382005"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,999,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="84.118.72.88"/>
        </slice>
        <from usec="0" sec="1381381232"/>
        <to usec="0" sec="1381382028"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="209.42.40.200"/>
        </slice>
        <from usec="0" sec="1381381675"/>
        <to usec="0" sec="1381381866"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="187.67.158.51"/>
        </slice>
        <from usec="0" sec="1381381685"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.26.181" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381382026"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="150.163.85.213"/>
        </slice>
        <from usec="0" sec="1381381843"/>
        <to usec="0" sec="1381382028"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="157.73.141.236"/>
        </slice>
        <from usec="0" sec="1381381974"/>
        <to usec="0" sec="1381381987"/>
    </anomaly>
    <anomaly type="notice" value="0.987241,1.799480,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382029"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="205.112.227.91" dst_ip="29.83.95.95" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381309"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,504,0 0 0 1 1 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.171.39.99" src_port="443"/>
            <filter dst_ip="169.171.39.99" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381306"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.122.93.212" dst_ip="216.72.134.31" src_port="143"/>
            <filter src_ip="204.122.80.27" dst_ip="216.72.134.31" src_port="80"/>
            <filter src_ip="204.122.80.66" dst_ip="216.72.134.31" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,011,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.122.82.166" dst_ip="73.193.104.39"/>
            <filter src_ip="205.112.227.91" dst_ip="73.193.104.39" src_port="9189"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381470"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.137.83.209" dst_ip="10.1.4.1" src_port="53" dst_port="1036"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.89.167" src_port="443"/>
            <filter src_ip="150.140.100.250" dst_ip="136.120.89.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381381578"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="25.71.112.42" dst_ip="175.204.161.162" src_port="443"/>
            <filter src_ip="19.192.72.138" dst_ip="175.204.161.162" src_port="80"/>
            <filter src_ip="25.182.77.167" dst_ip="175.204.161.162" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381228"/>
        <to usec="0" sec="1381381566"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,010,0 0 0 1 1 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="204.122.82.170" dst_ip="158.98.31.201" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381468"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="204.122.86.19" dst_ip="58.57.65.16" src_port="80" dst_port="61137"/>
            <filter src_ip="169.171.43.200" dst_ip="58.57.65.16" src_port="80" dst_port="58205"/>
        </slice>
        <from usec="0" sec="1381381472"/>
        <to usec="0" sec="1381381533"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.101.64.135" dst_ip="146.10.156.97" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1381381499"/>
        <to usec="0" sec="1381381579"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="175.204.6.214" dst_ip="219.165.8.219" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="205.137.83.209" dst_ip="10.36.20.17" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.211.66.227" dst_ip="169.101.48.34" src_port="443"/>
        </slice>
        <from usec="0" sec="1381381202"/>
        <to usec="0" sec="1381382027"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,504,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="175.204.128.213" dst_ip="8.204.12.214"/>
            <filter src_ip="175.204.78.27" dst_ip="8.204.12.214" dst_port="80"/>
            <filter src_ip="169.101.89.21" dst_ip="8.204.12.214" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381206"/>
        <to usec="0" sec="1381381668"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="86.14.112.24" dst_ip="136.120.166.96" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381234"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.120.88.137" dst_ip="158.16.152.107" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381272"/>
        <to usec="0" sec="1381381526"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="169.156.157.89" dst_ip="42.35.31.136" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381428"/>
        <to usec="0" sec="1381381669"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.67.172.214" dst_ip="0.239.137.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381511"/>
        <to usec="0" sec="1381381528"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.171.43.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381207"/>
        <to usec="0" sec="1381381759"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,999,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="136.120.167.2" dst_port="7050"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381751"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,011,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="204.122.92.148" dst_ip="81.114.170.45"/>
            <filter src_ip="204.122.82.166" dst_ip="81.114.170.45"/>
            <filter dst_ip="81.114.170.45" src_port="14768"/>
        </slice>
        <from usec="0" sec="1381381211"/>
        <to usec="0" sec="1381381739"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,011,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="205.112.227.91" dst_ip="152.32.99.74" src_port="28988"/>
            <filter src_ip="205.112.227.91" dst_ip="152.32.99.74" src_port="11404"/>
            <filter src_ip="204.122.82.167" dst_ip="152.32.99.74" src_port="10021"/>
            <filter src_ip="204.122.82.166" dst_ip="152.32.99.74" src_port="13412"/>
        </slice>
        <from usec="0" sec="1381381348"/>
        <to usec="0" sec="1381382009"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.120.198.16" dst_ip="59.238.82.57" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381618"/>
        <to usec="0" sec="1381381811"/>
    </anomaly>
    <anomaly type="notice" value="0.913497,1.779600,011,0 0 0 1 1 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="205.112.227.91" dst_ip="58.46.73.28"/>
            <filter src_ip="205.112.227.91" src_port="9853"/>
            <filter src_ip="205.112.227.91" src_port="13160"/>
            <filter src_ip="204.122.82.166" dst_ip="58.46.73.28" src_port="9853"/>
            <filter src_ip="204.122.82.166" dst_ip="58.46.73.28" src_port="13160"/>
        </slice>
        <from usec="0" sec="1381381238"/>
        <to usec="0" sec="1381382010"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="59.24.43.167" dst_ip="204.122.95.12" dst_port="19"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381247"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="195.54.241.239" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="137.13.86.239"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="169.101.32.74" dst_ip="205.206.30.89" dst_port="53"/>
            <filter src_ip="169.101.32.73" dst_ip="205.206.30.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381399"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.122.88.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381849"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.122.88.108"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="115.50.181.83"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.101.213.74"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.156.157.94"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="115.50.187.19"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="29.83.95.81" dst_ip="204.122.84.56" dst_port="53"/>
            <filter src_ip="64.12.56.200" dst_ip="204.122.84.56" dst_port="53"/>
            <filter src_ip="29.83.95.12" dst_ip="204.122.84.56" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="109.147.83.108"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="112.147.79.53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="204.122.95.222"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="43.75.105.130" dst_ip="169.156.157.42" dst_port="53"/>
            <filter src_ip="18.207.41.118" dst_ip="169.156.157.42" dst_port="53"/>
            <filter src_ip="2.74.134.31" dst_ip="169.156.157.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="110.70.242.3" dst_ip="175.204.87.101"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="110.70.242.3" dst_ip="175.204.37.50"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="110.70.242.3" dst_ip="175.204.130.246"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.16.26.41" dst_ip="175.204.87.101"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.16.26.41" dst_ip="175.204.37.50"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.16.26.41" dst_ip="175.204.130.246"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.223.97.10" dst_ip="204.122.95.87"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.204.104.52" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.120.229.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.318693,1.763880,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.36.11" src_port="80"/>
            <filter dst_ip="136.120.36.11" dst_port="20558"/>
        </slice>
        <from usec="0" sec="1381381423"/>
        <to usec="0" sec="1381381737"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.89.203" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381382"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.204.104.52" src_port="53"/>
            <filter dst_ip="175.204.104.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.156.157.150"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.204.188.67" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.122.38.114" src_port="80"/>
            <filter src_ip="25.160.106.135" dst_ip="169.122.38.114" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.122.106.185"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.106.22.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="18.207.41.118" dst_ip="205.125.210.181" dst_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="81.88.208.3" dst_ip="169.101.32.72"/>
            <filter src_ip="81.88.208.3" src_port="53"/>
            <filter dst_ip="169.101.32.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="205.112.227.91" dst_port="53"/>
            <filter dst_ip="204.122.82.166"/>
            <filter dst_ip="204.122.82.166"/>
        </slice>
        <from usec="0" sec="1381381201"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="204.122.82.141"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.120.229.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.120.228.49" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.200.171.17"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="205.137.83.209" dst_ip="10.12.7.59" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="204.122.88.43"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="197.6.16.49"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="205.125.250.74"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="131.188.244.78" dst_ip="204.122.95.12" dst_port="19"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.81.188"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="66.227.34.40"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.101.27.213"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="148.216.67.150"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.101.193.168"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381381607"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="53" dst_port="1001"/>
        </slice>
        <from usec="0" sec="1381381696"/>
        <to usec="0" sec="1381381742"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="80" dst_port="1024"/>
        </slice>
        <from usec="0" sec="1381381696"/>
        <to usec="0" sec="1381381742"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="80" dst_port="3072"/>
        </slice>
        <from usec="0" sec="1381381696"/>
        <to usec="0" sec="1381381742"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="169.156.146.212"/>
        </slice>
        <from usec="0" sec="1381381741"/>
        <to usec="0" sec="1381381787"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="138.106.22.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381741"/>
        <to usec="0" sec="1381381787"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="169.156.157.88"/>
        </slice>
        <from usec="0" sec="1381381786"/>
        <to usec="0" sec="1381381832"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.122.82.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381921"/>
        <to usec="0" sec="1381381967"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.122.92.148" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381921"/>
        <to usec="0" sec="1381381967"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.112.227.91" dst_port="80"/>
        </slice>
        <from usec="0" sec="1381381921"/>
        <to usec="0" sec="1381381967"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.204.104.52" src_port="53"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.112.227.180"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="103.122.200.48"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="169.101.32.72"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="136.120.229.88" src_port="53"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="204.122.83.98"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="99.141.123.207" dst_ip="204.122.95.12" dst_port="19"/>
            <filter src_ip="97.182.183.64" dst_ip="204.122.95.12" dst_port="19"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.88.251"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="204.122.81.116"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.252.235"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="205.125.247.24" src_port="80"/>
            <filter dst_ip="205.125.247.24" src_port="443"/>
            <filter dst_ip="205.125.247.24" src_port="53"/>
        </slice>
        <from usec="0" sec="1381381561"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="37.61.36.199"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="196.19.211.214" dst_port="80"/>
            <filter dst_ip="196.19.211.214" dst_port="443"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="175.204.130.136"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.530642,1.746790,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.101.111.99" src_port="53"/>
            <filter dst_ip="219.101.111.99" dst_port="4"/>
        </slice>
        <from usec="0" sec="1381381333"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter dst_ip="67.199.48.62"/>
        </slice>
        <from usec="0" sec="1381382056"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="175.204.26.215"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.050190,1.745410,503,0 0 0 0 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.220.97" src_port="80"/>
            <filter src_ip="96.211.66.227" dst_ip="175.204.220.97" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="93.64.238.15"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="172.216.116.127"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.981185,1.724920,503,0 0 0 1 0 0 1 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="175.204.220.125" src_port="80"/>
            <filter dst_ip="175.204.220.125" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.101.197.160"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="169.101.92.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="197.38.41.230" dst_ip="136.120.68.22" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="136.120.51.52" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="12.157.38.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.981185,1.724920,999,0 0 0 1 0 0 1 0 0 1 0 0,mptmp">
        <slice>
            <filter dst_ip="205.112.226.12" dst_port="53"/>
            <filter dst_ip="205.112.229.90" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.050190,1.745410,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="66.227.34.40" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="41.184.222.83"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.960664,1.762510,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="97.156.185.34"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.649422,1.767030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="169.118.197.221" src_port="443"/>
            <filter dst_ip="169.118.197.221" src_port="80"/>
        </slice>
        <from usec="0" sec="1381381336"/>
        <to usec="0" sec="1381382102"/>
    </anomaly>
</admd:annotation>
