<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.223.211"/>
        </slice>
        <from usec="0" sec="1404709222"/>
        <to usec="0" sec="1404709463"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.25.114"/>
        </slice>
        <from usec="0" sec="1404709849"/>
        <to usec="0" sec="1404709851"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.134.119" dst_ip="171.172.41.215" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709624"/>
        <to usec="0" sec="1404709664"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.16.167"/>
        </slice>
        <from usec="0" sec="1404709837"/>
        <to usec="0" sec="1404709839"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.172.133.65" dst_ip="51.184.71.171" src_port="61674" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709872"/>
        <to usec="0" sec="1404709874"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.137.228.49"/>
        </slice>
        <from usec="0" sec="1404709259"/>
        <to usec="0" sec="1404709261"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.114.11"/>
        </slice>
        <from usec="0" sec="1404710082"/>
        <to usec="0" sec="1404710084"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.245.185"/>
        </slice>
        <from usec="0" sec="1404709992"/>
        <to usec="0" sec="1404709997"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="31.30.129.19" dst_ip="163.16.171.32" src_port="29814" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709889"/>
        <to usec="0" sec="1404709892"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.206.55" dst_ip="56.94.27.3" src_port="58951" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404710102"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.172.187.101" dst_ip="76.17.24.135" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709302"/>
        <to usec="0" sec="1404710043"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.16.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709356"/>
        <to usec="0" sec="1404709916"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.6.59" dst_ip="100.48.85.80" src_port="61437" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709966"/>
        <to usec="0" sec="1404709969"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.69.222" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709577"/>
        <to usec="0" sec="1404709902"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.0.132" dst_ip="76.18.119.73" src_port="49984" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709321"/>
        <to usec="0" sec="1404709324"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.146.165" dst_ip="49.173.201.144" src_port="49622" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709916"/>
        <to usec="0" sec="1404709957"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.134.100"/>
        </slice>
        <from usec="0" sec="1404709460"/>
        <to usec="0" sec="1404709462"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.228.132"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404710099"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="110.194.90.79" dst_ip="202.136.136.55" src_port="443" dst_port="1041" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709302"/>
        <to usec="0" sec="1404709306"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.225.170.110"/>
        </slice>
        <from usec="0" sec="1404709375"/>
        <to usec="0" sec="1404709377"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="22.9.158.12"/>
        </slice>
        <from usec="0" sec="1404710069"/>
        <to usec="0" sec="1404710071"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.245.0.197"/>
        </slice>
        <from usec="0" sec="1404709684"/>
        <to usec="0" sec="1404709686"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.121.180"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709356"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.16.201.200" dst_ip="193.22.79.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709593"/>
        <to usec="0" sec="1404709616"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.153.156.41" dst_ip="193.109.138.203" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709831"/>
        <to usec="0" sec="1404709833"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.96.89"/>
        </slice>
        <from usec="0" sec="1404710092"/>
        <to usec="0" sec="1404710097"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.128.153.34" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709891"/>
        <to usec="0" sec="1404710085"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="181.69.0.183"/>
        </slice>
        <from usec="0" sec="1404709591"/>
        <to usec="0" sec="1404709605"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.228.210"/>
        </slice>
        <from usec="0" sec="1404709855"/>
        <to usec="0" sec="1404709893"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.172.121.233" dst_ip="110.240.175.217" src_port="64996" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709798"/>
        <to usec="0" sec="1404709807"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.16.200.85" dst_ip="216.7.97.83" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709643"/>
        <to usec="0" sec="1404709645"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.245.250" dst_ip="128.81.93.189" src_port="49944" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709371"/>
        <to usec="0" sec="1404709802"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.114.124"/>
        </slice>
        <from usec="0" sec="1404709424"/>
        <to usec="0" sec="1404709425"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.129.41" dst_ip="28.251.20.94"/>
            <filter src_ip="147.153.129.41" dst_ip="9.138.33.135"/>
            <filter src_ip="147.153.129.41" dst_port="80"/>
            <filter src_ip="147.153.129.41" dst_port="443"/>
            <filter dst_ip="28.251.20.94" dst_port="80"/>
            <filter dst_ip="9.138.33.135" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709632"/>
        <to usec="0" sec="1404710058"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="60.9.231.82" dst_ip="147.26.78.223" src_port="1935" dst_port="49389" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709211"/>
        <to usec="0" sec="1404709859"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.16.203.25" dst_ip="64.184.38.1" src_port="49596" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709858"/>
        <to usec="0" sec="1404709916"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.225.170.23"/>
        </slice>
        <from usec="0" sec="1404709313"/>
        <to usec="0" sec="1404709315"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.19.80.127" dst_ip="203.109.194.17" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709303"/>
        <to usec="0" sec="1404709683"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="134.28.200.88" dst_ip="100.48.90.19" src_port="8176" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709879"/>
        <to usec="0" sec="1404709880"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.27.212"/>
        </slice>
        <from usec="0" sec="1404709507"/>
        <to usec="0" sec="1404709529"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.172.25.22" dst_ip="177.69.32.198" src_port="51942" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709791"/>
        <to usec="0" sec="1404709908"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.180.42.97"/>
        </slice>
        <from usec="0" sec="1404709660"/>
        <to usec="0" sec="1404709662"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.130.7"/>
        </slice>
        <from usec="0" sec="1404709523"/>
        <to usec="0" sec="1404709576"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.211.22" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709603"/>
        <to usec="0" sec="1404710098"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="202.137.116.181" dst_ip="202.136.136.112" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709355"/>
        <to usec="0" sec="1404709356"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="193.67.26.42" dst_ip="203.109.202.78" dst_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709922"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="38.198.70.194" dst_ip="203.109.205.167" src_port="55825" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709427"/>
        <to usec="0" sec="1404709429"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="18.144.12.200"/>
        </slice>
        <from usec="0" sec="1404709335"/>
        <to usec="0" sec="1404709336"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.148.86"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.20.155"/>
        </slice>
        <from usec="0" sec="1404709350"/>
        <to usec="0" sec="1404709352"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.132.17.22" dst_ip="76.19.141.171" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709535"/>
        <to usec="0" sec="1404709564"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.49.85"/>
        </slice>
        <from usec="0" sec="1404710098"/>
        <to usec="0" sec="1404710100"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.132.115"/>
        </slice>
        <from usec="0" sec="1404709393"/>
        <to usec="0" sec="1404709410"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.6.65"/>
        </slice>
        <from usec="0" sec="1404709444"/>
        <to usec="0" sec="1404709620"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.217.116" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709610"/>
        <to usec="0" sec="1404709615"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.202.43"/>
        </slice>
        <from usec="0" sec="1404709589"/>
        <to usec="0" sec="1404709591"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.153.150.52" dst_ip="14.17.110.121" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404710049"/>
        <to usec="0" sec="1404710093"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.207.230" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709511"/>
        <to usec="0" sec="1404709892"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.200.23" dst_ip="89.72.129.60" src_port="50300" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709640"/>
        <to usec="0" sec="1404709666"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.194.32" dst_ip="14.18.246.251" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.201.196" dst_ip="150.27.160.45" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709770"/>
        <to usec="0" sec="1404709772"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.12.147" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709321"/>
        <to usec="0" sec="1404710030"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.26.76.110" dst_ip="110.240.93.55" src_port="60277" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404710013"/>
        <to usec="0" sec="1404710018"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.16.200.177" dst_ip="44.86.194.39" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709445"/>
        <to usec="0" sec="1404709807"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.128.86" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709255"/>
        <to usec="0" sec="1404709405"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.6.148.77" dst_ip="141.52.143.25" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709302"/>
        <to usec="0" sec="1404709315"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.214.163" dst_ip="75.24.41.201" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709396"/>
        <to usec="0" sec="1404709419"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="96.13.110.41" dst_ip="203.109.200.221" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709701"/>
        <to usec="0" sec="1404710062"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.249.152"/>
        </slice>
        <from usec="0" sec="1404709587"/>
        <to usec="0" sec="1404709776"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.211.194" dst_ip="180.251.161.149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709238"/>
        <to usec="0" sec="1404709549"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.26.28.163"/>
        </slice>
        <from usec="0" sec="1404709620"/>
        <to usec="0" sec="1404709622"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.16.37.42" dst_ip="75.24.3.180" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709538"/>
        <to usec="0" sec="1404709877"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.70.26" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709868"/>
        <to usec="0" sec="1404710000"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.153.102.20" dst_ip="110.240.104.141" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709264"/>
        <to usec="0" sec="1404709290"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="181.69.0.97"/>
        </slice>
        <from usec="0" sec="1404709226"/>
        <to usec="0" sec="1404709228"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.35.17.94" dst_ip="141.52.79.120" src_port="15859" dst_port="1195" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709232"/>
        <to usec="0" sec="1404709744"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.29.50"/>
        </slice>
        <from usec="0" sec="1404710075"/>
        <to usec="0" sec="1404710102"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.200.131"/>
        </slice>
        <from usec="0" sec="1404709712"/>
        <to usec="0" sec="1404709718"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="134.28.133.66" dst_ip="100.48.93.81" src_port="53413" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709378"/>
        <to usec="0" sec="1404709380"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.164.157"/>
        </slice>
        <from usec="0" sec="1404709581"/>
        <to usec="0" sec="1404710095"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.135.13" dst_ip="196.90.67.229" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709445"/>
        <to usec="0" sec="1404710004"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.182.199"/>
        </slice>
        <from usec="0" sec="1404710084"/>
        <to usec="0" sec="1404710085"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.109.192.68" dst_ip="177.190.175.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709603"/>
        <to usec="0" sec="1404709614"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="64.14.49.53" dst_ip="202.136.136.101" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709896"/>
        <to usec="0" sec="1404709899"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.111.20" dst_ip="110.240.73.230" src_port="64776" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709774"/>
        <to usec="0" sec="1404709776"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.150.207.34" dst_ip="203.109.207.106" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709417"/>
        <to usec="0" sec="1404709426"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.26.10.103" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709879"/>
        <to usec="0" sec="1404710022"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.221.141"/>
        </slice>
        <from usec="0" sec="1404709637"/>
        <to usec="0" sec="1404709664"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.9.122"/>
        </slice>
        <from usec="0" sec="1404709675"/>
        <to usec="0" sec="1404709677"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.112.15" dst_ip="14.18.194.9" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709450"/>
        <to usec="0" sec="1404709530"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.228.86"/>
        </slice>
        <from usec="0" sec="1404709227"/>
        <to usec="0" sec="1404709234"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.137.244.163"/>
        </slice>
        <from usec="0" sec="1404709596"/>
        <to usec="0" sec="1404709599"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.113.54"/>
        </slice>
        <from usec="0" sec="1404709747"/>
        <to usec="0" sec="1404709749"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.228.85"/>
        </slice>
        <from usec="0" sec="1404709346"/>
        <to usec="0" sec="1404709347"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.201.138" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709341"/>
        <to usec="0" sec="1404709366"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.109.2" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404710049"/>
        <to usec="0" sec="1404710090"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.206.133" dst_ip="180.41.126.30" src_port="49366" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709706"/>
        <to usec="0" sec="1404709708"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="96.119.2.144"/>
        </slice>
        <from usec="0" sec="1404709510"/>
        <to usec="0" sec="1404709512"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.223.116"/>
        </slice>
        <from usec="0" sec="1404709298"/>
        <to usec="0" sec="1404709301"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.16.113.35" dst_ip="75.5.21.184" src_port="7886" dst_port="182" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709778"/>
        <to usec="0" sec="1404709923"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.69.117"/>
        </slice>
        <from usec="0" sec="1404709277"/>
        <to usec="0" sec="1404709945"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.201.154"/>
        </slice>
        <from usec="0" sec="1404709457"/>
        <to usec="0" sec="1404709614"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.10.120"/>
        </slice>
        <from usec="0" sec="1404709368"/>
        <to usec="0" sec="1404709952"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.16.114.40" dst_ip="202.137.154.200" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709741"/>
        <to usec="0" sec="1404709916"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="202.132.223.64" dst_ip="75.25.170.58" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709576"/>
        <to usec="0" sec="1404709623"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.28.166.10"/>
        </slice>
        <from usec="0" sec="1404710090"/>
        <to usec="0" sec="1404710095"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.200.208"/>
        </slice>
        <from usec="0" sec="1404709373"/>
        <to usec="0" sec="1404709948"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.198.233"/>
        </slice>
        <from usec="0" sec="1404709893"/>
        <to usec="0" sec="1404709894"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.193.168.122" dst_ip="141.52.143.25" src_port="36014" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709398"/>
        <to usec="0" sec="1404709410"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.113.1"/>
        </slice>
        <from usec="0" sec="1404709274"/>
        <to usec="0" sec="1404709919"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.109.192.53" dst_ip="207.107.116.130" src_port="62207" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709845"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.201.42"/>
        </slice>
        <from usec="0" sec="1404709759"/>
        <to usec="0" sec="1404709761"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.233.130"/>
        </slice>
        <from usec="0" sec="1404709994"/>
        <to usec="0" sec="1404709997"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="75.132.81.96" dst_ip="203.109.205.173" src_port="56198" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709830"/>
        <to usec="0" sec="1404709844"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="57.15.137.29"/>
        </slice>
        <from usec="0" sec="1404709470"/>
        <to usec="0" sec="1404709610"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.102.122" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709493"/>
        <to usec="0" sec="1404709631"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.172.70.67" dst_ip="14.19.65.226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709548"/>
        <to usec="0" sec="1404709564"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.201.52"/>
        </slice>
        <from usec="0" sec="1404709355"/>
        <to usec="0" sec="1404709391"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.54.58.71" dst_ip="148.172.168.12" src_port="1935" dst_port="49573" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709857"/>
        <to usec="0" sec="1404709905"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.132.13.91" dst_ip="202.132.13.91" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710102"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.48.85.13" dst_ip="100.48.85.13" src_port="59208" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709279"/>
        <to usec="0" sec="1404709840"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="147.153.144.49" dst_port="443"/>
            <filter src_ip="147.153.140.41" dst_port="80"/>
            <filter dst_ip="100.48.94.15" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="89.72.129.60" dst_ip="89.72.129.60" src_port="50300" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709652"/>
        <to usec="0" sec="1404709666"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.48.90.77" dst_ip="100.48.90.77" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709379"/>
        <to usec="0" sec="1404709960"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.136.136.55" dst_ip="202.136.136.55" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709291"/>
        <to usec="0" sec="1404709324"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.48.81.163" dst_ip="100.48.81.163" src_port="51148" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709759"/>
        <to usec="0" sec="1404710052"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.203.42" dst_ip="203.109.203.42" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710081"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.48.90.19" dst_ip="100.48.90.19" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709475"/>
        <to usec="0" sec="1404710088"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.203.33" dst_ip="203.109.203.33" src_port="56854" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="147.153.230.14" dst_ip="147.153.230.14" src_port="1997" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709242"/>
        <to usec="0" sec="1404709861"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.48.86.121" dst_ip="100.48.86.121" src_port="56213" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709358"/>
        <to usec="0" sec="1404709388"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="141.52.79.120" dst_ip="141.52.79.120" src_port="15859" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709352"/>
        <to usec="0" sec="1404709774"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="196.73.52.144" dst_ip="196.73.52.144" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709453"/>
        <to usec="0" sec="1404710047"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.194.188" dst_ip="203.109.194.188" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="197.165.253.19" dst_ip="197.165.253.19" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709460"/>
        <to usec="0" sec="1404709984"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.42.60" dst_ip="82.34.42.60" src_port="45823" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.43.142" dst_ip="82.34.43.142" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404710100"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="16.233.71.163" dst_ip="16.233.71.163" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709210"/>
        <to usec="0" sec="1404710063"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.198.211" dst_ip="203.109.198.211" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710102"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="141.52.143.25" dst_ip="141.52.143.25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709288"/>
        <to usec="0" sec="1404709974"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="147.153.80.128" dst_ip="147.153.80.128" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709240"/>
        <to usec="0" sec="1404710096"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="144.221.20.184" dst_ip="144.221.20.184" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709242"/>
        <to usec="0" sec="1404710095"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="76.10.255.92" dst_ip="76.10.255.92" src_port="60774" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709860"/>
        <to usec="0" sec="1404710092"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="145.44.164.145" src_port="60320" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709710"/>
        <to usec="0" sec="1404709716"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.42.8" dst_ip="82.34.42.8" src_port="45823" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404710057"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.43.160" dst_ip="82.34.43.160" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404710039"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="16.233.71.143" dst_ip="16.233.71.143" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709210"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="141.52.152.111" dst_ip="141.52.152.111" src_port="42996" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709215"/>
        <to usec="0" sec="1404710099"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.73.52.144" dst_ip="202.132.16.86" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709782"/>
        <to usec="0" sec="1404709783"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="201.146.104.82"/>
        </slice>
        <from usec="0" sec="1404709693"/>
        <to usec="0" sec="1404709776"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.77.55"/>
        </slice>
        <from usec="0" sec="1404709433"/>
        <to usec="0" sec="1404709517"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.180.21"/>
        </slice>
        <from usec="0" sec="1404710041"/>
        <to usec="0" sec="1404710043"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.172.78.236" dst_ip="185.139.190.17" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709653"/>
        <to usec="0" sec="1404709821"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.132.223.230"/>
        </slice>
        <from usec="0" sec="1404710001"/>
        <to usec="0" sec="1404710003"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.27.91" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709517"/>
        <to usec="0" sec="1404709856"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.84.158" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709321"/>
        <to usec="0" sec="1404709982"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.6.114"/>
        </slice>
        <from usec="0" sec="1404709919"/>
        <to usec="0" sec="1404709920"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="18.232.115.172" dst_ip="141.52.182.39" dst_port="1081" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709243"/>
        <to usec="0" sec="1404709732"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.41.145.76" dst_ip="208.187.78.14" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709519"/>
        <to usec="0" sec="1404709523"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.28.14.139"/>
        </slice>
        <from usec="0" sec="1404709352"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="1.002530,1.620870,503,1 0 0 1 1 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="163.16.171.46" dst_port="80"/>
            <filter dst_ip="163.16.171.45" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710071"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.147.19"/>
        </slice>
        <from usec="0" sec="1404709762"/>
        <to usec="0" sec="1404709764"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.201.189"/>
        </slice>
        <from usec="0" sec="1404709601"/>
        <to usec="0" sec="1404709604"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.132.130"/>
        </slice>
        <from usec="0" sec="1404709511"/>
        <to usec="0" sec="1404709513"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.153.144.43" dst_ip="100.48.94.15" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709814"/>
        <to usec="0" sec="1404709817"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.41.145.130" dst_ip="202.182.60.183" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709683"/>
        <to usec="0" sec="1404709685"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.200.10"/>
        </slice>
        <from usec="0" sec="1404709807"/>
        <to usec="0" sec="1404709809"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="28.194.59.128" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709211"/>
        <to usec="0" sec="1404709374"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.65.193.166"/>
        </slice>
        <from usec="0" sec="1404709444"/>
        <to usec="0" sec="1404709446"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.204.103"/>
        </slice>
        <from usec="0" sec="1404709580"/>
        <to usec="0" sec="1404709581"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="2.124.238.23" dst_ip="203.109.196.205" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709758"/>
        <to usec="0" sec="1404709923"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.130.2.11"/>
        </slice>
        <from usec="0" sec="1404709565"/>
        <to usec="0" sec="1404709567"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.64.229.97" dst_ip="203.109.196.205" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404710054"/>
        <to usec="0" sec="1404710095"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.85.65"/>
        </slice>
        <from usec="0" sec="1404709557"/>
        <to usec="0" sec="1404709559"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.109.192.70"/>
        </slice>
        <from usec="0" sec="1404709876"/>
        <to usec="0" sec="1404709878"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="26.160.215.65"/>
        </slice>
        <from usec="0" sec="1404709384"/>
        <to usec="0" sec="1404709386"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.109.20"/>
        </slice>
        <from usec="0" sec="1404709834"/>
        <to usec="0" sec="1404709836"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.16.202.136" src_port="40228"/>
        </slice>
        <from usec="0" sec="1404709573"/>
        <to usec="0" sec="1404709574"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.168.85"/>
        </slice>
        <from usec="0" sec="1404709536"/>
        <to usec="0" sec="1404709538"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.228.64"/>
        </slice>
        <from usec="0" sec="1404709752"/>
        <to usec="0" sec="1404709754"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.190.180"/>
        </slice>
        <from usec="0" sec="1404709935"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.81.162"/>
        </slice>
        <from usec="0" sec="1404709596"/>
        <to usec="0" sec="1404709841"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="169.158.36.61" dst_ip="169.158.36.61" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709334"/>
        <to usec="0" sec="1404709882"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.196.205" dst_ip="203.109.196.205" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404710093"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.37.1"/>
        </slice>
        <from usec="0" sec="1404709798"/>
        <to usec="0" sec="1404709800"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.217.108" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709629"/>
        <to usec="0" sec="1404710062"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.43.81.236"/>
        </slice>
        <from usec="0" sec="1404709300"/>
        <to usec="0" sec="1404709313"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.149.190"/>
        </slice>
        <from usec="0" sec="1404709626"/>
        <to usec="0" sec="1404709628"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.201.130"/>
        </slice>
        <from usec="0" sec="1404709296"/>
        <to usec="0" sec="1404709298"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.219.152"/>
        </slice>
        <from usec="0" sec="1404709665"/>
        <to usec="0" sec="1404709720"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.206.77"/>
        </slice>
        <from usec="0" sec="1404709915"/>
        <to usec="0" sec="1404709917"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.52.137.168" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709278"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="28.194.59.157"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709293"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="8.58.15.78" dst_port="22"/>
            <filter src_ip="28.194.56.227" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709892"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="19.153.192.186" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709538"/>
        <to usec="0" sec="1404709553"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.129.224.132" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709904"/>
        <to usec="0" sec="1404709924"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="214.15.183.171" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709259"/>
        <to usec="0" sec="1404709319"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="147.153.145.194"/>
        </slice>
        <from usec="0" sec="1404709367"/>
        <to usec="0" sec="1404709369"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="202.132.16.86"/>
        </slice>
        <from usec="0" sec="1404709286"/>
        <to usec="0" sec="1404709763"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.129.46.102"/>
        </slice>
        <from usec="0" sec="1404709668"/>
        <to usec="0" sec="1404709670"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.201.80"/>
        </slice>
        <from usec="0" sec="1404709870"/>
        <to usec="0" sec="1404709872"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.41.145.198"/>
        </slice>
        <from usec="0" sec="1404709640"/>
        <to usec="0" sec="1404709642"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="141.107.78.167"/>
        </slice>
        <from usec="0" sec="1404709904"/>
        <to usec="0" sec="1404709905"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="147.153.132.195"/>
        </slice>
        <from usec="0" sec="1404709382"/>
        <to usec="0" sec="1404709384"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="28.194.92.216" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709287"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.132.2.137"/>
        </slice>
        <from usec="0" sec="1404709776"/>
        <to usec="0" sec="1404709790"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.180.254.106"/>
        </slice>
        <from usec="0" sec="1404709810"/>
        <to usec="0" sec="1404709812"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.159.214.186"/>
        </slice>
        <from usec="0" sec="1404709632"/>
        <to usec="0" sec="1404709634"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.102.108"/>
        </slice>
        <from usec="0" sec="1404709239"/>
        <to usec="0" sec="1404709241"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.1.78"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709215"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.156.237" dst_port="443"/>
            <filter src_ip="147.153.156.237" dst_ip="219.140.150.147" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709363"/>
        <to usec="0" sec="1404709896"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="100.48.92.119"/>
        </slice>
        <from usec="0" sec="1404709344"/>
        <to usec="0" sec="1404709346"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.172.236.22"/>
        </slice>
        <from usec="0" sec="1404709286"/>
        <to usec="0" sec="1404709287"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="202.136.136.86"/>
        </slice>
        <from usec="0" sec="1404709677"/>
        <to usec="0" sec="1404709679"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="104.48.167.40"/>
        </slice>
        <from usec="0" sec="1404709865"/>
        <to usec="0" sec="1404709867"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="141.52.143.1"/>
        </slice>
        <from usec="0" sec="1404709655"/>
        <to usec="0" sec="1404709657"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.201.96" dst_ip="104.18.28.229" dst_port="443"/>
            <filter src_ip="147.153.201.96" dst_ip="104.18.28.228" dst_port="443"/>
            <filter src_ip="147.153.201.96" dst_ip="104.18.69.8" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709662"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="202.132.13.91" dst_ip="202.132.13.91" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="218.206.113.200" dst_ip="164.46.235.72" dst_port="80" proto="tcp"/>
            <filter src_ip="218.206.113.200" dst_ip="164.46.235.72" dst_port="873" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709466"/>
        <to usec="0" sec="1404709468"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.194.188" dst_ip="203.109.194.188" src_port="62675" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709241"/>
        <to usec="0" sec="1404710070"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.43.142" dst_ip="82.34.43.142" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709324"/>
        <to usec="0" sec="1404710100"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="16.233.71.163" dst_ip="16.233.71.163" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709287"/>
        <to usec="0" sec="1404710063"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="203.109.198.211" dst_ip="203.109.198.211" dst_port="53" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="82.34.43.160" dst_ip="82.34.43.160" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709233"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="16.233.71.143" dst_ip="16.233.71.143" proto="udp"/>
        </slice>
        <from usec="0" sec="1404709412"/>
        <to usec="0" sec="1404710101"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,503,0 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.16.203.25" dst_ip="18.74.233.129" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1404709857"/>
        <to usec="0" sec="1404709859"/>
    </anomaly>
    <anomaly type="notice" value="1.117010,1.686500,011,0 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="21.149.193.141" src_port="1603" dst_port="50415"/>
        </slice>
        <from usec="0" sec="1404710073"/>
        <to usec="0" sec="1404710075"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="100.48.80.8"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709302"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.70.26"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709306"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="45.142.47.35"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.223.22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.33.76"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709241"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.16.203.77"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="67.108.22.25"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.128.42.121"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709295"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.26.58.138"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.6.0"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.180.126.188"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="177.69.32.199"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709307"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="134.28.154.201"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404709300"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="22.128.232.225"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709279"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.221.11"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709292"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.79.172"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.231.21"/>
        </slice>
        <from usec="0" sec="1404709218"/>
        <to usec="0" sec="1404709306"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.81.35"/>
        </slice>
        <from usec="0" sec="1404709218"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="91.130.17.32"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="216.22.185.246"/>
        </slice>
        <from usec="0" sec="1404709225"/>
        <to usec="0" sec="1404709228"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.137.164.247"/>
        </slice>
        <from usec="0" sec="1404709262"/>
        <to usec="0" sec="1404709264"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="148.172.121.128"/>
        </slice>
        <from usec="0" sec="1404709272"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.130.138.171"/>
        </slice>
        <from usec="0" sec="1404709282"/>
        <to usec="0" sec="1404709304"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.154.60.3"/>
        </slice>
        <from usec="0" sec="1404709289"/>
        <to usec="0" sec="1404709295"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.109.201.54"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.895730,1.638610,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.109.202.104" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710028"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="28.194.56.5"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.202.139"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709391"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="181.86.219.244"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="203.109.193.10"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.122.84"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.180.18" dst_ip="61.92.57.168" dst_port="80"/>
            <filter src_ip="148.172.180.18" dst_ip="196.73.52.144" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709915"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="136.207.149.208"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709398"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.218.180"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.180.126.172"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.128.153"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709391"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.203.2"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709398"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.225.170.20"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709349"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.192.221"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709389"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.9.84.185"/>
        </slice>
        <from usec="0" sec="1404709217"/>
        <to usec="0" sec="1404709398"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.128.204.116"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709308"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.6.64.33"/>
        </slice>
        <from usec="0" sec="1404709225"/>
        <to usec="0" sec="1404709394"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.167.247"/>
        </slice>
        <from usec="0" sec="1404709274"/>
        <to usec="0" sec="1404709399"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.218.99.208"/>
        </slice>
        <from usec="0" sec="1404709277"/>
        <to usec="0" sec="1404709308"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.157.158.57"/>
        </slice>
        <from usec="0" sec="1404709281"/>
        <to usec="0" sec="1404709299"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="210.103.200.144"/>
        </slice>
        <from usec="0" sec="1404709355"/>
        <to usec="0" sec="1404709361"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.197.150"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.15.163.151"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709365"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="116.54.58.71"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709447"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="20.141.19.165"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.198.148"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.136.182.44"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.203.22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.200.240"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.16.122.120"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709487"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="193.132.89.201"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.156.156"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.133.0"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.251.123.17"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="110.234.124.82" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.114.33"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.212.181"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.243.96"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.156.80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709485"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.205.17"/>
        </slice>
        <from usec="0" sec="1404709607"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.180.21"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709481"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.139.103.23"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="221.75.4.94"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709434"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="25.108.69.43"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709466"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.203.22"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709472"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.25.65"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.202.140"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709481"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.48.85.64"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709487"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="148.172.146.179"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709487"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,999,1 0 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="218.246.7.50" src_port="3389"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709438"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.148.30"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709481"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.70.104"/>
        </slice>
        <from usec="0" sec="1404709207"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.132.147"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709467"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.0.193.88"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709483"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.70.106"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.203.107.37"/>
        </slice>
        <from usec="0" sec="1404709215"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.193.42"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709479"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.149.204"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709487"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="151.75.186.195"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709421"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.15.42.202"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.149.229"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709481"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.32.36"/>
        </slice>
        <from usec="0" sec="1404709227"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.8.42.216"/>
        </slice>
        <from usec="0" sec="1404709234"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="61.56.178.45"/>
        </slice>
        <from usec="0" sec="1404709237"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.207.220"/>
        </slice>
        <from usec="0" sec="1404709237"/>
        <to usec="0" sec="1404709485"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.18.69.92"/>
        </slice>
        <from usec="0" sec="1404709239"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.241.74"/>
        </slice>
        <from usec="0" sec="1404709239"/>
        <to usec="0" sec="1404709479"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.193.214"/>
        </slice>
        <from usec="0" sec="1404709244"/>
        <to usec="0" sec="1404709465"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.135.98"/>
        </slice>
        <from usec="0" sec="1404709252"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.0.194.86"/>
        </slice>
        <from usec="0" sec="1404709258"/>
        <to usec="0" sec="1404709473"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.120.44.172"/>
        </slice>
        <from usec="0" sec="1404709276"/>
        <to usec="0" sec="1404709477"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.175.164"/>
        </slice>
        <from usec="0" sec="1404709280"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.9.5.94" dst_ip="203.109.207.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709296"/>
        <to usec="0" sec="1404709395"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.106.80.9"/>
        </slice>
        <from usec="0" sec="1404709300"/>
        <to usec="0" sec="1404709385"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.4.68.179"/>
        </slice>
        <from usec="0" sec="1404709302"/>
        <to usec="0" sec="1404709833"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.69.125"/>
        </slice>
        <from usec="0" sec="1404709304"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.215.30.186"/>
        </slice>
        <from usec="0" sec="1404709331"/>
        <to usec="0" sec="1404709476"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.245.7.214"/>
        </slice>
        <from usec="0" sec="1404709339"/>
        <to usec="0" sec="1404709341"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.9.84.22"/>
        </slice>
        <from usec="0" sec="1404709346"/>
        <to usec="0" sec="1404709485"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.125.166"/>
        </slice>
        <from usec="0" sec="1404709350"/>
        <to usec="0" sec="1404709484"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="43.94.164.46"/>
        </slice>
        <from usec="0" sec="1404709391"/>
        <to usec="0" sec="1404709420"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.103.72.163"/>
        </slice>
        <from usec="0" sec="1404709393"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.23.109"/>
        </slice>
        <from usec="0" sec="1404709403"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.224.205.178"/>
        </slice>
        <from usec="0" sec="1404709454"/>
        <to usec="0" sec="1404709466"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.74.88.191"/>
        </slice>
        <from usec="0" sec="1404709456"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="68.6.202.95"/>
        </slice>
        <from usec="0" sec="1404709456"/>
        <to usec="0" sec="1404709465"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.230.14" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709783"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.146.237"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709577"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.217.138"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709569"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.49.19.49"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709578"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="141.71.173.2"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709577"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.114.112"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="67.44.87.203"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709572"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.202.176.225"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709563"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="3.251.96.138"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.146.19"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709553"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.55.46" dst_port="443"/>
            <filter src_ip="163.16.55.46" dst_ip="14.182.130.205" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709797"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.180.126.133"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709578"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="140.171.85.63"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709576"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="147.153.151.13"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.64.88.171"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709578"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.172.27.135"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.17.177"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709533"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="186.104.69.36"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.223.136"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.206.53"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709577"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.199.189"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709505"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="202.132.31.115"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709571"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.36.250.216"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709570"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.193.225"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709930"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="59.90.176.198"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709572"/>
    </anomaly>
    <anomaly type="notice" value="0.532968,1.615240,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.200.160" dst_ip="100.48.86.82" dst_port="443"/>
            <filter src_ip="163.16.200.160" dst_ip="169.158.36.61" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709298"/>
        <to usec="0" sec="1404709321"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.204.128"/>
        </slice>
        <from usec="0" sec="1404709209"/>
        <to usec="0" sec="1404709536"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="184.117.198.135"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.195.34"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709545"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.225.170.21"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709449"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.135.184"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709468"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.28.132"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709561"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.9.87.122"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709566"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.209.2"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.201.152"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709521"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.128.87"/>
        </slice>
        <from usec="0" sec="1404709216"/>
        <to usec="0" sec="1404709577"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.200.173"/>
        </slice>
        <from usec="0" sec="1404709794"/>
        <to usec="0" sec="1404709811"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.200.130"/>
        </slice>
        <from usec="0" sec="1404709219"/>
        <to usec="0" sec="1404709525"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="163.16.68.73"/>
        </slice>
        <from usec="0" sec="1404709220"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.194.84.210"/>
        </slice>
        <from usec="0" sec="1404709876"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.7.89.201"/>
        </slice>
        <from usec="0" sec="1404709245"/>
        <to usec="0" sec="1404709455"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="14.18.201.59"/>
        </slice>
        <from usec="0" sec="1404709247"/>
        <to usec="0" sec="1404709542"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="9.139.173.219"/>
        </slice>
        <from usec="0" sec="1404709251"/>
        <to usec="0" sec="1404709571"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="218.157.62.145"/>
        </slice>
        <from usec="0" sec="1404709260"/>
        <to usec="0" sec="1404709495"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.58.70.80"/>
        </slice>
        <from usec="0" sec="1404709265"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.55.169"/>
        </slice>
        <from usec="0" sec="1404709273"/>
        <to usec="0" sec="1404709575"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.200.228"/>
        </slice>
        <from usec="0" sec="1404709304"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="195.212.8.85"/>
        </slice>
        <from usec="0" sec="1404709322"/>
        <to usec="0" sec="1404709400"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.207.248"/>
        </slice>
        <from usec="0" sec="1404709350"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="75.81.63.64"/>
        </slice>
        <from usec="0" sec="1404709391"/>
        <to usec="0" sec="1404709419"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="22.64.184.48"/>
        </slice>
        <from usec="0" sec="1404709399"/>
        <to usec="0" sec="1404709403"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.130.148.12"/>
        </slice>
        <from usec="0" sec="1404709401"/>
        <to usec="0" sec="1404709419"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="189.187.113.184"/>
        </slice>
        <from usec="0" sec="1404709437"/>
        <to usec="0" sec="1404709547"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="89.101.161.18"/>
        </slice>
        <from usec="0" sec="1404709446"/>
        <to usec="0" sec="1404709472"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.206.141"/>
        </slice>
        <from usec="0" sec="1404709448"/>
        <to usec="0" sec="1404709555"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="217.175.85.117"/>
        </slice>
        <from usec="0" sec="1404709455"/>
        <to usec="0" sec="1404709519"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.221.181.44"/>
        </slice>
        <from usec="0" sec="1404709457"/>
        <to usec="0" sec="1404709470"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="169.173.197.114"/>
        </slice>
        <from usec="0" sec="1404709468"/>
        <to usec="0" sec="1404709530"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="69.109.104.105"/>
        </slice>
        <from usec="0" sec="1404709480"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.146.50"/>
        </slice>
        <from usec="0" sec="1404709483"/>
        <to usec="0" sec="1404709571"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.192.19"/>
        </slice>
        <from usec="0" sec="1404709564"/>
        <to usec="0" sec="1404709576"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="57.135.116.253"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.145.23.157"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="148.172.55.132"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.109.195.54"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.132.12.124"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="57.238.82.148"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="204.80.98.69" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="59.147.180.163" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709663"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.180.126.184"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.212.84.212"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="192.42.142.165"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709641"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.41.145.68"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.17.67"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.13.21.71"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709658"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.200.72"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709655"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.27.83"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709557"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.153.128.11" src_port="63850" dst_port="17788"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.56.148.14"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709661"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.151.229"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709659"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.132.17.18" dst_port="80"/>
            <filter dst_ip="202.180.30.94" dst_port="80"/>
            <filter src_ip="202.132.17.18" dst_ip="202.180.30.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709725"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.32.20"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709659"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.38.54"/>
        </slice>
        <from usec="0" sec="1404709218"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.139.103.20"/>
        </slice>
        <from usec="0" sec="1404709218"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.221.1"/>
        </slice>
        <from usec="0" sec="1404709223"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.128.48"/>
        </slice>
        <from usec="0" sec="1404709228"/>
        <to usec="0" sec="1404709662"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="2.138.25.108"/>
        </slice>
        <from usec="0" sec="1404709255"/>
        <to usec="0" sec="1404709493"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.147.73.170"/>
        </slice>
        <from usec="0" sec="1404709266"/>
        <to usec="0" sec="1404709492"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.200.225"/>
        </slice>
        <from usec="0" sec="1404709444"/>
        <to usec="0" sec="1404709612"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="121.226.107.194"/>
        </slice>
        <from usec="0" sec="1404709449"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.31.125.152"/>
        </slice>
        <from usec="0" sec="1404709553"/>
        <to usec="0" sec="1404709647"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="37.255.61.112"/>
        </slice>
        <from usec="0" sec="1404709556"/>
        <to usec="0" sec="1404709651"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="41.120.151.91"/>
        </slice>
        <from usec="0" sec="1404709557"/>
        <to usec="0" sec="1404709564"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="35.1.157.220"/>
        </slice>
        <from usec="0" sec="1404709591"/>
        <to usec="0" sec="1404709602"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="207.49.24.200"/>
        </slice>
        <from usec="0" sec="1404709593"/>
        <to usec="0" sec="1404709594"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="120.96.210.193"/>
        </slice>
        <from usec="0" sec="1404709614"/>
        <to usec="0" sec="1404709626"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="6.81.15.166"/>
        </slice>
        <from usec="0" sec="1404709631"/>
        <to usec="0" sec="1404709668"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="59.147.177.25"/>
        </slice>
        <from usec="0" sec="1404709639"/>
        <to usec="0" sec="1404709646"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="220.150.88.101"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.228.28" dst_port="443"/>
            <filter src_ip="148.172.228.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.105.38.70"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.201.37"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709712"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.153.231.204"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.20.45"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709731"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.55.81"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709757"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.198.100"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="197.179.29.22" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="208.94.49.4"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709752"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.194.50"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709740"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="138.65.37.14"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709757"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.69.64.216"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709653"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.253.109"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709743"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.34.101"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709755"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.109.229"/>
        </slice>
        <from usec="0" sec="1404709222"/>
        <to usec="0" sec="1404709734"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.200.125"/>
        </slice>
        <from usec="0" sec="1404709223"/>
        <to usec="0" sec="1404709703"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.240.80"/>
        </slice>
        <from usec="0" sec="1404709248"/>
        <to usec="0" sec="1404709754"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.17.41"/>
        </slice>
        <from usec="0" sec="1404709277"/>
        <to usec="0" sec="1404709756"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.27.187.196"/>
        </slice>
        <from usec="0" sec="1404709306"/>
        <to usec="0" sec="1404709737"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.135.62"/>
        </slice>
        <from usec="0" sec="1404709406"/>
        <to usec="0" sec="1404709713"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.66.30.213"/>
        </slice>
        <from usec="0" sec="1404709422"/>
        <to usec="0" sec="1404709629"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="27.94.149.229"/>
        </slice>
        <from usec="0" sec="1404709451"/>
        <to usec="0" sec="1404709758"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="58.206.93.153"/>
        </slice>
        <from usec="0" sec="1404709486"/>
        <to usec="0" sec="1404709757"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="214.54.161.166" dst_ip="203.109.207.106" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709523"/>
        <to usec="0" sec="1404709646"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="36.187.11.63"/>
        </slice>
        <from usec="0" sec="1404709545"/>
        <to usec="0" sec="1404709672"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="72.61.98.59"/>
        </slice>
        <from usec="0" sec="1404709560"/>
        <to usec="0" sec="1404709747"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.202.199"/>
        </slice>
        <from usec="0" sec="1404709564"/>
        <to usec="0" sec="1404709725"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="212.105.112.141"/>
        </slice>
        <from usec="0" sec="1404709584"/>
        <to usec="0" sec="1404709586"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="202.132.16.156"/>
        </slice>
        <from usec="0" sec="1404709603"/>
        <to usec="0" sec="1404709756"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.174.19.160"/>
        </slice>
        <from usec="0" sec="1404709624"/>
        <to usec="0" sec="1404709630"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="64.174.19.143"/>
        </slice>
        <from usec="0" sec="1404709629"/>
        <to usec="0" sec="1404709636"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.1.155"/>
        </slice>
        <from usec="0" sec="1404709646"/>
        <to usec="0" sec="1404709709"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.251.150.130"/>
        </slice>
        <from usec="0" sec="1404709658"/>
        <to usec="0" sec="1404709679"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="62.193.144.24"/>
        </slice>
        <from usec="0" sec="1404709674"/>
        <to usec="0" sec="1404709705"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="98.147.76.78"/>
        </slice>
        <from usec="0" sec="1404709682"/>
        <to usec="0" sec="1404709702"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="36.150.205.93"/>
        </slice>
        <from usec="0" sec="1404709713"/>
        <to usec="0" sec="1404709743"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.203.242"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="69.128.28.135"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709926"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="110.203.101.164" src_port="443"/>
            <filter src_ip="51.9.86.247" src_port="80"/>
            <filter dst_ip="202.132.16.38" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.37.2"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709816"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.18.69.9"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709841"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.20.84.4"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.150.5"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709845"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.16.162"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.27.80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709836"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="148.172.25.144"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="190.32.9.37"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709838"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="76.22.110.101"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.53.42"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709845"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="91.62.160.56"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709848"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.203.25"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709832"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="141.71.168.43"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709835"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="162.151.134.74"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709842"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="203.109.204.200" src_port="53"/>
            <filter src_ip="203.109.204.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709210"/>
        <to usec="0" sec="1404709834"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.9.80.91"/>
        </slice>
        <from usec="0" sec="1404709211"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.109.203.26"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACKt">
        <slice>
            <filter src_ip="147.153.148.171"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709846"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.71.182"/>
        </slice>
        <from usec="0" sec="1404709214"/>
        <to usec="0" sec="1404709805"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.233.144"/>
        </slice>
        <from usec="0" sec="1404709219"/>
        <to usec="0" sec="1404709829"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.85.142"/>
        </slice>
        <from usec="0" sec="1404709220"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.206.12"/>
        </slice>
        <from usec="0" sec="1404709221"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.184.131"/>
        </slice>
        <from usec="0" sec="1404709222"/>
        <to usec="0" sec="1404709832"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.57.19.240"/>
        </slice>
        <from usec="0" sec="1404709223"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.201.156"/>
        </slice>
        <from usec="0" sec="1404709224"/>
        <to usec="0" sec="1404709826"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.81.28.111"/>
        </slice>
        <from usec="0" sec="1404709228"/>
        <to usec="0" sec="1404709788"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.26.67.232"/>
        </slice>
        <from usec="0" sec="1404709239"/>
        <to usec="0" sec="1404709834"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.1.57"/>
        </slice>
        <from usec="0" sec="1404709251"/>
        <to usec="0" sec="1404709835"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.31.226"/>
        </slice>
        <from usec="0" sec="1404709264"/>
        <to usec="0" sec="1404709828"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.28.153.73"/>
        </slice>
        <from usec="0" sec="1404709269"/>
        <to usec="0" sec="1404709790"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.210.249"/>
        </slice>
        <from usec="0" sec="1404709312"/>
        <to usec="0" sec="1404709836"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="58.206.93.130"/>
        </slice>
        <from usec="0" sec="1404709538"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.129.27"/>
        </slice>
        <from usec="0" sec="1404709582"/>
        <to usec="0" sec="1404709832"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.55.165.252"/>
        </slice>
        <from usec="0" sec="1404709659"/>
        <to usec="0" sec="1404709814"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.186.240"/>
        </slice>
        <from usec="0" sec="1404709660"/>
        <to usec="0" sec="1404709842"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.207.94"/>
        </slice>
        <from usec="0" sec="1404709678"/>
        <to usec="0" sec="1404709795"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="90.151.109.232"/>
        </slice>
        <from usec="0" sec="1404709697"/>
        <to usec="0" sec="1404709726"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="201.76.148.32"/>
        </slice>
        <from usec="0" sec="1404709732"/>
        <to usec="0" sec="1404709832"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,002,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="112.36.213.54"/>
        </slice>
        <from usec="0" sec="1404709742"/>
        <to usec="0" sec="1404709773"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.158.235"/>
        </slice>
        <from usec="0" sec="1404709744"/>
        <to usec="0" sec="1404709754"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.2.50.15"/>
        </slice>
        <from usec="0" sec="1404709791"/>
        <to usec="0" sec="1404709811"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="6.164.32.44"/>
        </slice>
        <from usec="0" sec="1404709802"/>
        <to usec="0" sec="1404709813"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="194.66.30.65"/>
        </slice>
        <from usec="0" sec="1404709802"/>
        <to usec="0" sec="1404709833"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="134.28.14.139"/>
        </slice>
        <from usec="0" sec="1404709824"/>
        <to usec="0" sec="1404709826"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="8.58.15.67" dst_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.199.112" dst_port="8080"/>
            <filter src_ip="203.109.199.112" dst_ip="192.168.114.56" dst_port="80"/>
            <filter src_ip="203.109.199.112" dst_ip="192.168.114.56" dst_port="81"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.193.168"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709938"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,011,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="27.29.16.57"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709936"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.61.64.212"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="163.16.132.149"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.2.121.181"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709828"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="194.9.172.38"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709928"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="51.9.86.147" src_port="80"/>
            <filter src_ip="51.9.86.147" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.205.48"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709834"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="148.172.65.54"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="196.90.67.245"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709936"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.171.32"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="151.212.80.211"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709925"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.200.90"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709934"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.77.82"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709929"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.68.99"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.32.178.180"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709791"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.114.3"/>
        </slice>
        <from usec="0" sec="1404709210"/>
        <to usec="0" sec="1404709931"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.17.25"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.1.88"/>
        </slice>
        <from usec="0" sec="1404709213"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.58.71.18"/>
        </slice>
        <from usec="0" sec="1404709217"/>
        <to usec="0" sec="1404709847"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.35.151.72"/>
        </slice>
        <from usec="0" sec="1404709217"/>
        <to usec="0" sec="1404709932"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="110.215.30.161"/>
        </slice>
        <from usec="0" sec="1404709223"/>
        <to usec="0" sec="1404709928"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.70.204"/>
        </slice>
        <from usec="0" sec="1404709226"/>
        <to usec="0" sec="1404709909"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.31.200"/>
        </slice>
        <from usec="0" sec="1404709232"/>
        <to usec="0" sec="1404709936"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.37.45"/>
        </slice>
        <from usec="0" sec="1404709237"/>
        <to usec="0" sec="1404709879"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.35.165"/>
        </slice>
        <from usec="0" sec="1404709245"/>
        <to usec="0" sec="1404710019"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.130.156"/>
        </slice>
        <from usec="0" sec="1404709248"/>
        <to usec="0" sec="1404709921"/>
    </anomaly>
    <anomaly type="notice" value="1.002530,1.620870,504,1 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.147.99" dst_port="80"/>
            <filter src_ip="147.153.147.99" dst_ip="169.158.12.24" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709253"/>
        <to usec="0" sec="1404709927"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="31.230.46.160"/>
        </slice>
        <from usec="0" sec="1404709287"/>
        <to usec="0" sec="1404709826"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,999,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.224.144" dst_port="25"/>
        </slice>
        <from usec="0" sec="1404709303"/>
        <to usec="0" sec="1404709901"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.96.101"/>
        </slice>
        <from usec="0" sec="1404709398"/>
        <to usec="0" sec="1404709825"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="25.71.13.104"/>
        </slice>
        <from usec="0" sec="1404709419"/>
        <to usec="0" sec="1404709884"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.201.41"/>
        </slice>
        <from usec="0" sec="1404709583"/>
        <to usec="0" sec="1404709916"/>
    </anomaly>
    <anomaly type="notice" value="0.483826,1.581970,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.91.161" dst_ip="14.17.89.45" src_port="50339" dst_port="443"/>
            <filter src_ip="148.172.91.161" dst_ip="14.17.89.45" src_port="50338" dst_port="443"/>
            <filter src_ip="148.172.91.161" dst_ip="180.250.255.9" src_port="50348" dst_port="443"/>
            <filter src_ip="148.172.91.161" dst_ip="180.250.255.9" src_port="50347" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709586"/>
        <to usec="0" sec="1404709863"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.200.178"/>
        </slice>
        <from usec="0" sec="1404709641"/>
        <to usec="0" sec="1404709772"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="21.225.230.248"/>
        </slice>
        <from usec="0" sec="1404709702"/>
        <to usec="0" sec="1404709933"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.24.252.214"/>
        </slice>
        <from usec="0" sec="1404709709"/>
        <to usec="0" sec="1404709854"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="104.58.78.188"/>
        </slice>
        <from usec="0" sec="1404709734"/>
        <to usec="0" sec="1404709869"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.10.78.22"/>
        </slice>
        <from usec="0" sec="1404709766"/>
        <to usec="0" sec="1404709780"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.220.37.99"/>
        </slice>
        <from usec="0" sec="1404709771"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="17.181.166.55"/>
        </slice>
        <from usec="0" sec="1404709793"/>
        <to usec="0" sec="1404709898"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.128.98.43"/>
        </slice>
        <from usec="0" sec="1404709810"/>
        <to usec="0" sec="1404709930"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.118.2"/>
        </slice>
        <from usec="0" sec="1404709819"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="183.1.197.37"/>
        </slice>
        <from usec="0" sec="1404709830"/>
        <to usec="0" sec="1404709838"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="205.118.97.46"/>
        </slice>
        <from usec="0" sec="1404709833"/>
        <to usec="0" sec="1404709927"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="32.168.94.33"/>
        </slice>
        <from usec="0" sec="1404709882"/>
        <to usec="0" sec="1404709931"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.134.37"/>
        </slice>
        <from usec="0" sec="1404709909"/>
        <to usec="0" sec="1404709936"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="58.206.93.161"/>
        </slice>
        <from usec="0" sec="1404709913"/>
        <to usec="0" sec="1404709938"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.100.210"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710023"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.9.87.104"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709999"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.26.208.193"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710008"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.6.64.240"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710026"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="48.180.126.147"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710028"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.200.20" dst_ip="8.58.15.78" src_port="22"/>
            <filter src_ip="203.109.200.20" dst_ip="28.194.59.231" src_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="46.204.12.166"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710027"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="207.134.68.69"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.212.4.112"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.153.150.47" dst_ip="104.18.28.229" dst_port="443"/>
            <filter src_ip="147.153.150.47" dst_ip="104.18.28.228" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.85.4"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404710025"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="159.74.251.234"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404710025"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="60.52.123.54"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709988"/>
    </anomaly>
    <anomaly type="notice" value="1.002530,1.620870,503,1 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.29.166" dst_ip="8.208.185.75" dst_port="80"/>
            <filter src_ip="147.26.29.166" dst_ip="8.208.188.80" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709209"/>
        <to usec="0" sec="1404710017"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.54.154"/>
        </slice>
        <from usec="0" sec="1404709209"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.16.200.93"/>
        </slice>
        <from usec="0" sec="1404709220"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.17.115"/>
        </slice>
        <from usec="0" sec="1404709249"/>
        <to usec="0" sec="1404710006"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="8.231.141.51"/>
        </slice>
        <from usec="0" sec="1404709273"/>
        <to usec="0" sec="1404710023"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="220.200.68.10"/>
        </slice>
        <from usec="0" sec="1404709297"/>
        <to usec="0" sec="1404709907"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.26.37.5"/>
        </slice>
        <from usec="0" sec="1404709455"/>
        <to usec="0" sec="1404710027"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.16.20.141"/>
        </slice>
        <from usec="0" sec="1404709583"/>
        <to usec="0" sec="1404709954"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="148.172.22.201"/>
        </slice>
        <from usec="0" sec="1404709614"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.138.120.143"/>
        </slice>
        <from usec="0" sec="1404709671"/>
        <to usec="0" sec="1404709991"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.47.108.92"/>
        </slice>
        <from usec="0" sec="1404709773"/>
        <to usec="0" sec="1404709903"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.74.227.56"/>
        </slice>
        <from usec="0" sec="1404709804"/>
        <to usec="0" sec="1404710024"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.139.100.46"/>
        </slice>
        <from usec="0" sec="1404709815"/>
        <to usec="0" sec="1404710024"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.243.135.197"/>
        </slice>
        <from usec="0" sec="1404709847"/>
        <to usec="0" sec="1404710015"/>
    </anomaly>
    <anomaly type="notice" value="0.373221,1.602820,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="18.146.68.128"/>
        </slice>
        <from usec="0" sec="1404710000"/>
        <to usec="0" sec="1404710027"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="148.172.121.143" dst_ip="46.236.247.238" src_port="51355" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709668"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.193.126.50" dst_ip="148.172.25.168" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709303"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="136.65.231.224" dst_ip="163.16.68.206" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="51.9.87.91" dst_ip="202.136.136.55" src_port="443"/>
            <filter src_ip="51.9.87.91" dst_ip="163.16.201.130" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709309"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="110.234.121.22" dst_ip="148.172.196.10" src_port="443"/>
            <filter src_ip="110.234.121.22" dst_ip="148.172.135.166" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709209"/>
        <to usec="0" sec="1404709305"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.137.164.213" dst_ip="202.136.136.55" src_port="80"/>
            <filter src_ip="202.137.164.213" dst_ip="163.16.36.0" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709255"/>
        <to usec="0" sec="1404709308"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,010,0 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="91.214.125.45" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709483"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,010,0 0 0 1 1 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="167.193.61.150" dst_port="445"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.73.70.84" dst_ip="203.109.200.62" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709483"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="147.153.145.16" src_port="51413"/>
            <filter src_ip="147.153.145.16" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="163.16.203.42" dst_port="80"/>
            <filter src_ip="163.16.203.42" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709486"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.156.113" src_port="19482"/>
            <filter src_ip="147.153.156.113" dst_port="80"/>
            <filter src_ip="147.153.156.113" dst_ip="14.18.133.76" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709223"/>
        <to usec="0" sec="1404709488"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.202.179.176" dst_ip="202.132.29.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709234"/>
        <to usec="0" sec="1404709456"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.148.192.68" dst_ip="141.52.141.50" src_port="80" dst_port="62954"/>
        </slice>
        <from usec="0" sec="1404709305"/>
        <to usec="0" sec="1404709330"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,020,0 0 0 1 1 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="63.19.37.22" dst_ip="203.109.202.105"/>
        </slice>
        <from usec="0" sec="1404709454"/>
        <to usec="0" sec="1404709456"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="203.109.199.151" src_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="208.251.125.20" dst_ip="148.172.189.25" src_port="80" dst_port="53522"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709579"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,502,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="203.109.197.134" src_port="22"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709545"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="163.16.202.100" dst_port="80"/>
            <filter src_ip="163.16.202.100" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709230"/>
        <to usec="0" sec="1404709578"/>
    </anomaly>
    <anomaly type="notice" value="1.002530,1.620870,010,1 0 0 1 1 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="21.196.208.50" dst_port="23"/>
        </slice>
        <from usec="0" sec="1404709422"/>
        <to usec="0" sec="1404709444"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.172.146.170" dst_ip="60.9.249.68" dst_port="80"/>
            <filter src_ip="148.172.146.170" dst_ip="55.254.22.128" dst_port="80"/>
            <filter src_ip="148.172.146.170" dst_ip="85.23.64.108" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709448"/>
        <to usec="0" sec="1404709576"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.17.97" dst_ip="104.48.125.109" dst_port="443"/>
            <filter src_ip="202.132.17.97" dst_ip="104.48.125.70" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="169.180.99.124" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.153.206.4" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.155.167.177" dst_ip="141.52.23.139" src_port="25" dst_port="62835"/>
            <filter src_ip="112.155.167.177" dst_ip="141.52.23.139" src_port="25" dst_port="62641"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709668"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.132.2.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709669"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="217.130.134.220" dst_ip="203.109.202.97" src_port="8333" dst_port="41989"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709667"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.103.165.20" dst_ip="202.136.136.55" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709302"/>
        <to usec="0" sec="1404709665"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="120.74.143.87" dst_ip="202.136.136.55" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709602"/>
        <to usec="0" sec="1404709666"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.153.231.82" src_port="25"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709756"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.153.207.70" dst_port="80"/>
            <filter src_ip="147.153.207.70" dst_ip="60.171.61.163" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709759"/>
    </anomaly>
    <anomaly type="notice" value="0.979913,1.673330,503,0 0 0 0 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="206.206.41.8" dst_ip="163.16.33.167" src_port="80"/>
            <filter src_ip="206.206.41.8" dst_ip="202.132.222.39" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709518"/>
        <to usec="0" sec="1404709668"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.153.231.206" src_port="53"/>
            <filter src_ip="147.153.231.206" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709846"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.202.98.180" dst_ip="141.52.218.139" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709529"/>
        <to usec="0" sec="1404709849"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.206.48.37" dst_ip="141.52.250.40" src_port="443" dst_port="52144"/>
            <filter src_ip="110.206.48.37" dst_ip="141.52.250.40" src_port="443" dst_port="52143"/>
            <filter src_ip="110.206.48.37" dst_ip="141.52.250.40" src_port="443" dst_port="52136"/>
        </slice>
        <from usec="0" sec="1404709806"/>
        <to usec="0" sec="1404709809"/>
    </anomaly>
    <anomaly type="notice" value="0.979913,1.673330,901,0 0 0 0 1 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="148.172.26.27" dst_port="2703"/>
            <filter src_ip="148.172.26.27" src_port="49152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709934"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="181.107.202.89" dst_ip="203.109.198.148" src_port="25345" dst_port="53"/>
            <filter src_ip="181.107.202.89" dst_ip="203.109.198.129" src_port="25345" dst_port="53"/>
            <filter src_ip="181.107.202.89" dst_ip="203.109.205.12" src_port="25345" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="148.172.45.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="104.48.125.105" dst_ip="202.132.16.162" src_port="443"/>
            <filter src_ip="104.48.125.105" dst_ip="202.132.16.114" src_port="443"/>
            <filter src_ip="104.48.125.105" dst_ip="202.132.17.151" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709924"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="208.245.7.201" dst_ip="148.172.180.11" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709205"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,999,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.128.181.196" dst_ip="26.79.117.113" src_port="64210"/>
            <filter src_ip="147.128.181.196" dst_ip="170.18.160.212" src_port="64210"/>
        </slice>
        <from usec="0" sec="1404709582"/>
        <to usec="0" sec="1404709936"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="202.132.17.42" dst_port="443"/>
            <filter src_ip="202.132.17.42" dst_port="5223"/>
        </slice>
        <from usec="0" sec="1404709594"/>
        <to usec="0" sec="1404709862"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="203.109.194.6" src_port="22"/>
            <filter src_ip="203.109.194.6" dst_ip="85.129.46.102" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="1.002530,1.620870,503,1 0 0 1 1 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.153.207.234" dst_ip="41.44.151.109" src_port="49511" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709228"/>
        <to usec="0" sec="1404710029"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,504,0 0 0 1 1 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="147.153.150.75" dst_ip="104.8.182.207" dst_port="443"/>
        </slice>
        <from usec="0" sec="1404709501"/>
        <to usec="0" sec="1404710010"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.132.13.91" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709247"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.198.211" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709247"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.72.96.100"/>
            <filter dst_ip="44.72.96.100"/>
            <filter dst_ip="210.20.203.103"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709753"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,010,0 0 0 1 0 0 1 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="126.145.13.34" dst_ip="203.109.205.50" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710018"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="193.4.161.41" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709937"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,502,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="28.194.59.128" src_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709900"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="141.52.137.179" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709931"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.198.241" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.41.146.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="197.179.28.72" src_port="53"/>
            <filter dst_ip="147.133.188.75" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709203"/>
        <to usec="0" sec="1404709489"/>
    </anomaly>
    <anomaly type="notice" value="0.954077,1.641230,503,0 0 0 1 1 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="169.185.33.28" dst_ip="202.132.221.179" src_port="80" dst_port="56505"/>
            <filter src_ip="169.185.33.28" dst_ip="202.132.221.179" src_port="80" dst_port="44198"/>
            <filter src_ip="169.185.33.28" dst_ip="202.132.222.39" src_port="80" dst_port="49312"/>
        </slice>
        <from usec="0" sec="1404709212"/>
        <to usec="0" sec="1404709356"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="26.139.17.97" src_port="53"/>
            <filter dst_ip="141.52.138.147" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709210"/>
        <to usec="0" sec="1404709928"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.55.105" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.216.84" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.136.172.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="193.173.166.22" src_port="53"/>
            <filter dst_ip="163.16.128.37" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.132.13.91" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="60.41.114.93" dst_port="443"/>
            <filter dst_ip="60.41.114.93" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709206"/>
        <to usec="0" sec="1404709935"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.195.48" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.195.52" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.195.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.194.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.194.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.895730,1.638610,999,1 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="43.107.65.27" dst_ip="203.109.196.205" dst_port="53"/>
            <filter src_ip="51.18.104.111" dst_ip="203.109.196.205" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404710067"/>
    </anomaly>
    <anomaly type="notice" value="0.895730,1.638610,503,1 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.109.194.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709202"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.198.211" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="141.52.21.168" src_port="80"/>
            <filter src_ip="188.209.176.223" dst_ip="141.52.216.100" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709224"/>
        <to usec="0" sec="1404709668"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="147.41.146.239" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709382"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.198.211" dst_port="53"/>
            <filter dst_ip="202.132.13.91" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709208"/>
        <to usec="0" sec="1404709939"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.153.228.168"/>
        </slice>
        <from usec="0" sec="1404709606"/>
        <to usec="0" sec="1404709652"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="147.153.224.188"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="203.109.193.10"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="134.28.8.132" dst_ip="193.201.174.47"/>
        </slice>
        <from usec="0" sec="1404709209"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="148.172.55.132"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.153.240.103" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="163.16.33.167" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709518"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.132.9.76"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.197.81"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.41.146.5" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="193.36.132.215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.202.105" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.55.105" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.177.12" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="141.52.141.50" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709241"/>
        <to usec="0" sec="1404709754"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.136.148.86" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="60.41.114.93" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709240"/>
        <to usec="0" sec="1404709928"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.195.32" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.132.18.243" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.109.200.62" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709204"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.195.54" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.194.89" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="202.132.12.127" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="147.153.70.58" dst_port="53"/>
            <filter dst_ip="147.153.197.249" dst_port="53"/>
            <filter dst_ip="147.153.240.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709518"/>
        <to usec="0" sec="1404709801"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.41.146.239" dst_ip="96.15.32.209" src_port="53"/>
            <filter src_ip="147.41.146.239" dst_ip="216.24.80.7" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="208.23.35.47" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.923201,1.670760,503,1 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="114.239.1.134" dst_ip="141.52.143.25" dst_port="80"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,504,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="202.132.221.179" src_port="443"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710012"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.198.240" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709697"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.55.102" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.133.188.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,999,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="203.109.202.105"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710025"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.172.129.84"/>
        </slice>
        <from usec="0" sec="1404709696"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.153.228.168" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.153.228.172" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="160.16.20.130" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.132.221.105" dst_ip="197.8.89.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.923201,1.670760,999,1 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.209.75" dst_port="53"/>
        </slice>
        <from usec="0" sec="1404709298"/>
        <to usec="0" sec="1404709918"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,502,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="202.132.218.143" src_port="22"/>
            <filter dst_ip="28.194.56.110" src_port="22"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404709926"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="203.109.201.54" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1404709336"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="62.85.38.77"/>
        </slice>
        <from usec="0" sec="1404709696"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.870348,1.690520,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="202.74.175.29" dst_ip="10.100.90.220" src_port="53"/>
        </slice>
        <from usec="0" sec="1404709651"/>
        <to usec="0" sec="1404709742"/>
    </anomaly>
    <anomaly type="notice" value="0.841153,1.658750,503,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="110.215.29.76" src_port="80"/>
            <filter dst_ip="203.109.200.62" src_port="80"/>
        </slice>
        <from usec="0" sec="1404709201"/>
        <to usec="0" sec="1404710028"/>
    </anomaly>
</admd:annotation>
