<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.525427,1.179820,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386825228"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="108.185.108.64"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824588"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.36.20.17"/>
        </slice>
        <from usec="0" sec="1386824401"/>
        <to usec="0" sec="1386824598"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="117.47.96.63"/>
        </slice>
        <from usec="0" sec="1386824401"/>
        <to usec="0" sec="1386824546"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,053,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="210.234.160.150"/>
        </slice>
        <from usec="0" sec="1386824402"/>
        <to usec="0" sec="1386824597"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="106.80.64.238"/>
        </slice>
        <from usec="0" sec="1386824462"/>
        <to usec="0" sec="1386824598"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="162.1.202.164"/>
        </slice>
        <from usec="0" sec="1386824572"/>
        <to usec="0" sec="1386824580"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="205.90.166.159"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.95.45.25" src_port="80"/>
            <filter dst_ip="153.95.45.25" src_port="443"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.178.139.218" dst_ip="196.32.46.153" dst_port="80"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="197.42.147.50"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="153.95.6.185"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="116.187.142.87"/>
        </slice>
        <from usec="0" sec="1386824402"/>
        <to usec="0" sec="1386824687"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.47.128.210"/>
        </slice>
        <from usec="0" sec="1386824402"/>
        <to usec="0" sec="1386824648"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.154.140.139"/>
        </slice>
        <from usec="0" sec="1386824404"/>
        <to usec="0" sec="1386824685"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="160.49.134.32"/>
        </slice>
        <from usec="0" sec="1386824412"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="153.95.1.213"/>
        </slice>
        <from usec="0" sec="1386824427"/>
        <to usec="0" sec="1386824634"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="162.1.204.146"/>
        </slice>
        <from usec="0" sec="1386824431"/>
        <to usec="0" sec="1386824677"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="117.43.250.231"/>
        </slice>
        <from usec="0" sec="1386824437"/>
        <to usec="0" sec="1386824548"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.47.128.61"/>
        </slice>
        <from usec="0" sec="1386824450"/>
        <to usec="0" sec="1386824688"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="179.221.188.132"/>
        </slice>
        <from usec="0" sec="1386824484"/>
        <to usec="0" sec="1386824568"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="157.47.167.114" dst_ip="82.11.96.211" dst_port="80"/>
            <filter src_ip="157.47.167.124" dst_ip="82.11.96.211" dst_port="80"/>
            <filter src_ip="157.47.167.121" dst_ip="82.11.96.211" dst_port="80"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.47.243.151"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="96.238.96.109"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824684"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="162.1.194.69"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824775"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,020,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="162.1.82.231"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="10.97.102.86"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824777"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.36.28.17"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824777"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,011,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.1.177.56"/>
        </slice>
        <from usec="0" sec="1386824408"/>
        <to usec="0" sec="1386824769"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.6.76"/>
        </slice>
        <from usec="0" sec="1386824412"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.47.243.141"/>
        </slice>
        <from usec="0" sec="1386824413"/>
        <to usec="0" sec="1386824775"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.154.198.85"/>
        </slice>
        <from usec="0" sec="1386824416"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="162.1.145.205"/>
        </slice>
        <from usec="0" sec="1386824431"/>
        <to usec="0" sec="1386824778"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,020,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter dst_ip="66.222.21.108"/>
        </slice>
        <from usec="0" sec="1386824498"/>
        <to usec="0" sec="1386824618"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="114.38.56.132"/>
        </slice>
        <from usec="0" sec="1386824502"/>
        <to usec="0" sec="1386824772"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.224.160.4"/>
        </slice>
        <from usec="0" sec="1386824563"/>
        <to usec="0" sec="1386824767"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="0.253.123.173"/>
        </slice>
        <from usec="0" sec="1386824607"/>
        <to usec="0" sec="1386824675"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="49.224.161.225"/>
        </slice>
        <from usec="0" sec="1386824626"/>
        <to usec="0" sec="1386824723"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="197.42.145.142"/>
        </slice>
        <from usec="0" sec="1386824702"/>
        <to usec="0" sec="1386824736"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="157.47.241.116"/>
        </slice>
        <from usec="0" sec="1386824404"/>
        <to usec="0" sec="1386825039"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="153.95.202.105"/>
        </slice>
        <from usec="0" sec="1386824416"/>
        <to usec="0" sec="1386825226"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="122.131.212.224"/>
        </slice>
        <from usec="0" sec="1386824620"/>
        <to usec="0" sec="1386825080"/>
    </anomaly>
    <anomaly type="notice" value="0.525427,1.179820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="59.169.146.18"/>
        </slice>
        <from usec="0" sec="1386825142"/>
        <to usec="0" sec="1386825163"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="203.70.76.180"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824446"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="196.32.49.16" dst_port="2315"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824446"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="210.173.207.227"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="192.168.122.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="10.1.1.26" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.1.116.18" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="120.194.162.159" src_port="53"/>
            <filter dst_ip="120.194.162.159" src_port="2868"/>
            <filter dst_ip="120.194.162.159" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="71.6.234.214" dst_port="80"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="153.95.107.5" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.197.133.56" src_port="2868"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="90.197.133.56" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.47.76.211" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.32.37.29" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="88.142.50.118"/>
        </slice>
        <from usec="0" sec="1386824580"/>
        <to usec="0" sec="1386824626"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="157.47.166.219" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386825075"/>
        <to usec="0" sec="1386825121"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="14.20.205.141" src_port="80"/>
        </slice>
        <from usec="0" sec="1386825075"/>
        <to usec="0" sec="1386825121"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,010,0 0 0 0 0 0 1 0 0 0 0 0,poscaSYN">
        <slice>
            <filter src_ip="82.27.236.169" dst_ip="157.166.127.172" src_port="24766"/>
        </slice>
        <from usec="0" sec="1386825075"/>
        <to usec="0" sec="1386825121"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="122.35.53.40" src_port="2868"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="122.35.53.40" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.112.40.10" src_port="2868"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="205.112.40.10" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.42.133.120" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.42.133.185" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="160.49.160.242" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="160.49.160.243" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="157.47.76.211" dst_ip="197.221.9.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.47.166.219" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="188.197.219.51" src_port="53"/>
            <filter dst_ip="188.197.219.51" src_port="2868"/>
            <filter dst_ip="188.197.219.51" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386824400"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="91.20.136.182" src_port="53"/>
            <filter dst_ip="91.20.136.182" src_port="2868"/>
            <filter dst_ip="91.20.136.182" src_port="2869"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,503,0 0 0 0 0 0 1 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="12.110.249.209" dst_ip="153.95.1.53" src_port="80"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.32.37.28" src_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.166.127.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.173.74.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.1.45.10" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="162.1.80.56" dst_port="80"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="157.47.166.144" dst_ip="197.219.143.43" dst_port="53"/>
            <filter src_ip="157.47.166.216" dst_ip="197.219.143.43" dst_port="53"/>
            <filter src_ip="157.47.166.218" dst_ip="197.219.143.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="196.32.33.80" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="157.47.166.144" dst_port="53"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824626"/>
    </anomaly>
    <anomaly type="notice" value="0.798373,1.220260,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="162.1.106.207" dst_port="9999"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824581"/>
    </anomaly>
    <anomaly type="notice" value="0.710870,1.214150,503,0 0 0 0 0 0 0 1 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="82.27.236.169" dst_port="80"/>
        </slice>
        <from usec="0" sec="1386825120"/>
        <to usec="0" sec="1386825166"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="111.158.214.240"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.647208,1.150590,503,0 0 0 0 0 0 1 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="96.194.29.74" dst_ip="153.95.87.37" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="153.95.94.45" dst_ip="173.63.230.218"/>
            <filter src_ip="153.95.94.45" dst_port="443"/>
            <filter dst_ip="173.63.230.218" dst_port="443"/>
            <filter src_ip="153.95.94.45" dst_ip="134.58.92.125" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.622945,1.140410,504,0 0 0 1 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="157.47.11.229" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="157.47.240.181"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="162.1.2.208"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.1.80.87"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="162.1.181.0"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="175.128.142.82"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,010,0 0 0 0 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="185.45.190.229"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.622945,1.140410,503,0 0 0 1 0 0 0 0 0 1 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="196.32.32.87" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,999,0 0 0 0 0 0 0 0 0 1 0 0,ipv4gretun">
        <slice>
            <filter src_ip="192.211.34.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="10.175.2.60"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="114.38.164.235"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="153.95.67.149"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="84.224.205.164" dst_ip="153.95.45.64"/>
            <filter src_ip="84.224.205.164" src_port="443"/>
            <filter dst_ip="153.95.45.64" src_port="80"/>
            <filter dst_ip="153.95.45.64" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="157.154.200.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="157.154.221.172"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="157.47.130.10"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="157.47.244.88"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="162.1.24.110"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="162.1.180.49" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="162.1.180.174" src_port="443"/>
            <filter src_ip="210.98.100.120" dst_ip="162.1.180.174" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="162.1.145.165"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="183.141.39.45"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,malphfl">
        <slice>
            <filter src_ip="151.7.127.152" dst_ip="197.42.57.228" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,504,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="157.47.240.185" dst_ip="192.70.232.2" dst_port="443"/>
            <filter src_ip="157.47.240.185" dst_ip="193.84.97.195" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="18.193.60.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.535552,1.144110,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="0.240.12.170"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.553977,1.189660,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="14.20.205.141" src_port="80"/>
        </slice>
        <from usec="0" sec="1386824535"/>
        <to usec="0" sec="1386824626"/>
    </anomaly>
</admd:annotation>
