<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.179.58.35" dst_ip="82.40.22.3" src_port="63957" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239453"/>
        <to usec="0" sec="1410239456"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.164.74"/>
        </slice>
        <from usec="0" sec="1410238856"/>
        <to usec="0" sec="1410238861"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.215.105" dst_ip="85.86.69.72" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239036"/>
        <to usec="0" sec="1410239688"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.2.180.40" dst_ip="200.227.253.148" src_port="53929" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238817"/>
        <to usec="0" sec="1410238829"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.98.101.74" dst_ip="133.98.13.59" src_port="1935" dst_port="64069" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239536"/>
        <to usec="0" sec="1410239548"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.239.52.40" dst_ip="176.117.202.36" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239570"/>
        <to usec="0" sec="1410239601"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.194.55.0" dst_ip="133.98.28.168" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239628"/>
        <to usec="0" sec="1410239630"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.8.192.8" dst_ip="90.61.163.197" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238986"/>
        <to usec="0" sec="1410238989"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.106.77.77" dst_ip="176.117.152.97" src_port="80" dst_port="58310" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239632"/>
        <to usec="0" sec="1410239634"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.8.84.229" dst_ip="206.71.69.154" src_port="63116" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238881"/>
        <to usec="0" sec="1410238884"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="52.224.171.76" dst_ip="170.42.229.123" src_port="33767" dst_port="12480" proto="udp"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410238812"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="29.194.52.130" dst_ip="180.179.42.128" src_port="443" dst_port="64839" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239488"/>
        <to usec="0" sec="1410239490"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.29.171.202"/>
        </slice>
        <from usec="0" sec="1410239604"/>
        <to usec="0" sec="1410239634"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="100.36.58.23" dst_ip="133.98.148.51" src_port="443" dst_port="54310" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239482"/>
        <to usec="0" sec="1410239490"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.98.158"/>
        </slice>
        <from usec="0" sec="1410239424"/>
        <to usec="0" sec="1410239427"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.71.184.33"/>
        </slice>
        <from usec="0" sec="1410239524"/>
        <to usec="0" sec="1410239526"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="182.151.229.31" dst_ip="133.98.24.24" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239199"/>
        <to usec="0" sec="1410239460"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.157.33"/>
        </slice>
        <from usec="0" sec="1410239573"/>
        <to usec="0" sec="1410239653"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.194.52.185" dst_ip="201.64.56.221" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239455"/>
        <to usec="0" sec="1410239457"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="150.97.147.2" dst_ip="200.227.246.181" src_port="40435" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239215"/>
        <to usec="0" sec="1410239221"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.206.85" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239163"/>
        <to usec="0" sec="1410239357"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="180.130.62.174"/>
        </slice>
        <from usec="0" sec="1410238877"/>
        <to usec="0" sec="1410238903"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="29.194.55.43" dst_ip="133.98.151.57" src_port="443" dst_port="51359" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239167"/>
        <to usec="0" sec="1410239168"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.227.241.179" dst_ip="20.168.14.192" src_port="57380" dst_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238819"/>
        <to usec="0" sec="1410238821"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="41.18.173.12" dst_ip="170.42.229.123" src_port="19332" dst_port="12480" proto="udp"/>
        </slice>
        <from usec="0" sec="1410239139"/>
        <to usec="0" sec="1410239592"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="49.118.229.0" dst_ip="170.42.196.6" src_port="80" dst_port="51241" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238869"/>
        <to usec="0" sec="1410238871"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.23.16.100" dst_ip="48.55.20.108" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239628"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.98.196.54" dst_ip="100.37.10.7" src_port="50980" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410239661"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.179.76.16" dst_ip="48.55.5.161" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238875"/>
        <to usec="0" sec="1410238912"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.150.144" dst_ip="82.40.31.183" src_port="26745" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239312"/>
        <to usec="0" sec="1410239319"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.29.43.65" dst_ip="90.61.163.184" src_port="48434" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239286"/>
        <to usec="0" sec="1410239335"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.52.76"/>
        </slice>
        <from usec="0" sec="1410239215"/>
        <to usec="0" sec="1410239270"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.184.105.105" dst_ip="170.42.229.123" src_port="35754" dst_port="12480" proto="udp"/>
        </slice>
        <from usec="0" sec="1410238855"/>
        <to usec="0" sec="1410238857"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="177.59.8.148" dst_ip="206.71.58.226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239180"/>
        <to usec="0" sec="1410239183"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.117.89.81" dst_ip="82.40.21.37" src_port="49977" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238944"/>
        <to usec="0" sec="1410238947"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.64.40.167" dst_ip="52.71.68.160" src_port="51492" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238911"/>
        <to usec="0" sec="1410238913"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.177.176.41"/>
        </slice>
        <from usec="0" sec="1410238879"/>
        <to usec="0" sec="1410238882"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.179.38.207" dst_ip="174.22.195.36" src_port="80" dst_port="44871" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239188"/>
        <to usec="0" sec="1410239190"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="151.232.125.196" dst_ip="170.42.196.37" src_port="1119" dst_port="9900" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238811"/>
        <to usec="0" sec="1410238908"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="38.104.36.212" dst_ip="170.42.22.64" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239411"/>
        <to usec="0" sec="1410239418"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="108.219.10.12" dst_ip="133.98.9.220" src_port="80" dst_port="52816" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239223"/>
        <to usec="0" sec="1410239225"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="100.36.58.110" dst_ip="180.179.22.4" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239600"/>
        <to usec="0" sec="1410239608"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.106.76.74" dst_ip="176.117.2.17" src_port="80" dst_port="49504" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238859"/>
        <to usec="0" sec="1410238860"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="201.107.86.5" dst_ip="133.98.175.10" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239653"/>
        <to usec="0" sec="1410239655"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="56.82.196.199" dst_ip="170.42.196.16" src_port="27046" dst_port="62963" proto="udp"/>
        </slice>
        <from usec="0" sec="1410238808"/>
        <to usec="0" sec="1410238819"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.179.190.187" dst_ip="201.75.16.50" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239668"/>
        <to usec="0" sec="1410239690"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.129.24.18" dst_ip="133.98.157.158" src_port="80" dst_port="62324" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239071"/>
        <to usec="0" sec="1410239074"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="82.43.67.0" dst_ip="133.98.18.240" src_port="443" dst_port="57750" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239556"/>
        <to usec="0" sec="1410239558"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="29.194.52.226" dst_ip="133.98.2.130" src_port="443" dst_port="50567" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239311"/>
        <to usec="0" sec="1410239312"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.89.96" dst_ip="108.132.142.196" src_port="56332" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239231"/>
        <to usec="0" sec="1410239234"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.194.52.224" dst_ip="133.98.95.77" src_port="443" dst_port="64021" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239443"/>
        <to usec="0" sec="1410239445"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.37.2"/>
        </slice>
        <from usec="0" sec="1410238882"/>
        <to usec="0" sec="1410239561"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.148.186" dst_ip="131.107.130.130" src_port="54664" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239443"/>
        <to usec="0" sec="1410239550"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.29.2.141" dst_ip="206.71.63.200" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239573"/>
        <to usec="0" sec="1410239575"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.45.157.198" dst_ip="200.227.246.177" src_port="51742" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238969"/>
        <to usec="0" sec="1410238971"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="180.23.241.109" src_port="25" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238808"/>
        <to usec="0" sec="1410238813"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.227.244.10" dst_ip="221.162.245.177" src_port="80" dst_port="43750" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239313"/>
        <to usec="0" sec="1410239315"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.101.80.183" dst_ip="201.64.49.42" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238864"/>
        <to usec="0" sec="1410238884"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.43.84.35" dst_ip="170.42.22.33" src_port="443" dst_port="51107" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239698"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="55.114.145.30" dst_ip="180.23.13.25" src_port="80" dst_port="52623" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238839"/>
        <to usec="0" sec="1410238844"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.37.88" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239182"/>
        <to usec="0" sec="1410239341"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="29.194.52.59" dst_ip="133.98.148.51" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239311"/>
        <to usec="0" sec="1410239453"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.1.85"/>
        </slice>
        <from usec="0" sec="1410239306"/>
        <to usec="0" sec="1410239310"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="180.23.161.45" dst_port="80"/>
            <filter src_ip="180.23.161.45" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238854"/>
        <to usec="0" sec="1410239240"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="108.16.83.44" dst_ip="133.98.29.169" src_port="80" dst_port="64234" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239189"/>
        <to usec="0" sec="1410239191"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="221.12.245.205" dst_ip="170.42.196.220" src_port="11411" dst_port="9494" proto="udp"/>
        </slice>
        <from usec="0" sec="1410239416"/>
        <to usec="0" sec="1410239418"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.219.32.178" dst_ip="133.98.150.52" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239416"/>
        <to usec="0" sec="1410239418"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="90.10.245.58" dst_ip="133.98.94.239" src_port="80" dst_port="54769" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239063"/>
        <to usec="0" sec="1410239533"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.180.102" dst_ip="108.132.136.11" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238995"/>
        <to usec="0" sec="1410239008"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="29.194.54.144" dst_ip="134.71.225.72" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238931"/>
        <to usec="0" sec="1410238933"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.157.145.51" dst_ip="176.117.224.98" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239450"/>
        <to usec="0" sec="1410239452"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="163.29.150.41" dst_ip="132.240.164.202" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239627"/>
        <to usec="0" sec="1410239636"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.98.94.98"/>
        </slice>
        <from usec="0" sec="1410238869"/>
        <to usec="0" sec="1410239677"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.39.225"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410238809"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.100.86.52" dst_ip="176.117.214.3" src_port="80" dst_port="58711" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239171"/>
        <to usec="0" sec="1410239179"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.98.95.49" dst_ip="201.74.135.227" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238844"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="180.23.13.25"/>
        </slice>
        <from usec="0" sec="1410238843"/>
        <to usec="0" sec="1410239382"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.113.197.239" dst_ip="170.42.229.123" src_port="1043" dst_port="12480" proto="udp"/>
        </slice>
        <from usec="0" sec="1410238972"/>
        <to usec="0" sec="1410239638"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="137.227.22.130" dst_ip="133.98.42.46" src_port="80" dst_port="63855" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239093"/>
        <to usec="0" sec="1410239094"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.194.54.135" dst_ip="201.64.39.6" src_port="80" dst_port="64703" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238933"/>
        <to usec="0" sec="1410238938"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.150.108.104" dst_ip="170.42.214.59" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239103"/>
        <to usec="0" sec="1410239105"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="29.194.54.219" dst_ip="201.64.39.6" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238926"/>
        <to usec="0" sec="1410238928"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.23.160.14" dst_ip="219.122.119.2" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239215"/>
        <to usec="0" sec="1410239325"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.186.172" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239089"/>
        <to usec="0" sec="1410239696"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.179.105.160" dst_ip="18.66.152.197" src_port="57743" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239047"/>
        <to usec="0" sec="1410239096"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="62.232.146.35" dst_ip="170.42.110.132" src_port="56597" dst_port="40004" proto="udp"/>
        </slice>
        <from usec="0" sec="1410239094"/>
        <to usec="0" sec="1410239460"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="223.181.52.27" dst_ip="170.42.229.123" src_port="19001" dst_port="12480" proto="udp"/>
        </slice>
        <from usec="0" sec="1410239153"/>
        <to usec="0" sec="1410239155"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.150.28.208" dst_ip="133.98.42.46" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239090"/>
        <to usec="0" sec="1410239096"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.98.153.192" dst_ip="117.227.97.120" src_port="52564" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238924"/>
        <to usec="0" sec="1410239355"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="176.117.204.115" dst_ip="150.96.97.28" src_port="40291" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239629"/>
        <to usec="0" sec="1410239690"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.38.29" dst_ip="85.88.1.0" src_port="61263" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239294"/>
        <to usec="0" sec="1410239297"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.206.231" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238866"/>
        <to usec="0" sec="1410239464"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.67.149"/>
        </slice>
        <from usec="0" sec="1410239554"/>
        <to usec="0" sec="1410239557"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.98.180.116" dst_ip="48.52.40.164" src_port="49893" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239284"/>
        <to usec="0" sec="1410239327"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.100.86.72" dst_ip="133.98.94.51" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238819"/>
        <to usec="0" sec="1410238821"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="223.32.163.200" dst_ip="200.227.249.120" src_port="80" dst_port="41155" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239293"/>
        <to usec="0" sec="1410239295"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="124.174.48.6" dst_ip="176.117.219.134" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239016"/>
        <to usec="0" sec="1410239017"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="90.145.51.226" dst_ip="176.117.176.183" src_port="80" dst_port="6188" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239242"/>
        <to usec="0" sec="1410239244"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.89.32.157" dst_ip="176.117.48.16" src_port="80" dst_port="1132" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238929"/>
        <to usec="0" sec="1410238967"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="18.66.152.197" dst_ip="18.66.152.197" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238845"/>
        <to usec="0" sec="1410239500"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="100.36.53.169" dst_ip="100.36.53.169" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239220"/>
        <to usec="0" sec="1410239593"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="176.117.131.86"/>
        </slice>
        <from usec="0" sec="1410238852"/>
        <to usec="0" sec="1410238855"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.89.197" dst_ip="100.36.57.144" src_port="53548" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238814"/>
        <to usec="0" sec="1410239370"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.42.101.178" dst_port="995"/>
            <filter src_ip="44.63.99.21" dst_ip="170.42.101.178" src_port="80"/>
        </slice>
        <from usec="0" sec="1410238822"/>
        <to usec="0" sec="1410239601"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="98.190.85.104" dst_ip="98.190.85.104" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239538"/>
        <to usec="0" sec="1410239552"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="133.98.92.13" dst_ip="133.98.92.13" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239538"/>
        <to usec="0" sec="1410239552"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.130.62.212" dst_ip="206.165.17.35" src_port="51338" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238817"/>
        <to usec="0" sec="1410239632"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.88.170.138" dst_ip="176.117.48.16" src_port="80" dst_port="1132"/>
        </slice>
        <from usec="0" sec="1410239056"/>
        <to usec="0" sec="1410239696"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.113.71.58" dst_ip="200.227.254.67" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239670"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="25.171.0.89" dst_ip="176.117.48.0" src_port="443"/>
            <filter src_ip="25.171.0.23" dst_ip="176.117.48.0" src_port="80"/>
        </slice>
        <from usec="0" sec="1410238860"/>
        <to usec="0" sec="1410239607"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="163.29.181.24" dst_ip="206.71.58.197" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239646"/>
        <to usec="0" sec="1410239649"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="180.8.51.101" dst_ip="206.71.58.226" src_port="4523" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239486"/>
        <to usec="0" sec="1410239503"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="42.218.4.107"/>
        </slice>
        <from usec="0" sec="1410239196"/>
        <to usec="0" sec="1410239198"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="177.59.6.251" dst_ip="100.36.61.49" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239184"/>
        <to usec="0" sec="1410239582"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.179.26.31" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239681"/>
        <to usec="0" sec="1410239698"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.177.101" dst_ip="143.71.80.18" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239340"/>
        <to usec="0" sec="1410239555"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.23.40.70" dst_ip="12.225.203.44" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238849"/>
        <to usec="0" sec="1410239512"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.149.104" dst_ip="29.18.89.155" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239661"/>
    </anomaly>
    <anomaly type="notice" value="0.907921,1.624170,999,1 1 0 1 0 0 1 0 0 0 0 0,heavy_hitter">
        <slice>
            <filter src_ip="112.151.11.65" dst_ip="176.117.49.147" dst_port="1456"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239698"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="216.192.67.109"/>
        </slice>
        <from usec="0" sec="1410239518"/>
        <to usec="0" sec="1410239521"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.23.225.101" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238807"/>
        <to usec="0" sec="1410239556"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.176.5"/>
        </slice>
        <from usec="0" sec="1410239327"/>
        <to usec="0" sec="1410239341"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="201.64.54.94" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238835"/>
        <to usec="0" sec="1410239621"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.98.151.122"/>
        </slice>
        <from usec="0" sec="1410239497"/>
        <to usec="0" sec="1410239500"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.116.40.3"/>
        </slice>
        <from usec="0" sec="1410238826"/>
        <to usec="0" sec="1410238829"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,012,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="180.130.62.118" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238860"/>
        <to usec="0" sec="1410239291"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.155.15" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238984"/>
        <to usec="0" sec="1410239466"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.148.32" dst_ip="215.181.122.234" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239105"/>
        <to usec="0" sec="1410239112"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="216.201.242.4" dst_ip="200.227.251.40" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239047"/>
        <to usec="0" sec="1410239560"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.120.0" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239455"/>
        <to usec="0" sec="1410239458"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.180.69" dst_ip="201.74.236.48" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238909"/>
        <to usec="0" sec="1410239166"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.98.184.227" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239180"/>
        <to usec="0" sec="1410239223"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.237.66.150"/>
        </slice>
        <from usec="0" sec="1410239689"/>
        <to usec="0" sec="1410239692"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.23.17.219" dst_ip="85.124.88.78" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239177"/>
        <to usec="0" sec="1410239183"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="37.237.3.39" dst_ip="133.98.173.237" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238906"/>
        <to usec="0" sec="1410238909"/>
    </anomaly>
    <anomaly type="notice" value="1.042550,1.579200,503,1 1 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.227.241.218" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.98.248.218"/>
        </slice>
        <from usec="0" sec="1410239140"/>
        <to usec="0" sec="1410239143"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="100.36.50.133"/>
        </slice>
        <from usec="0" sec="1410239455"/>
        <to usec="0" sec="1410239458"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.227.243.140"/>
        </slice>
        <from usec="0" sec="1410238928"/>
        <to usec="0" sec="1410239172"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="133.98.235.178"/>
        </slice>
        <from usec="0" sec="1410239190"/>
        <to usec="0" sec="1410239667"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="206.71.58.177" dst_ip="206.71.58.177" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239358"/>
        <to usec="0" sec="1410239675"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.42.158.73"/>
        </slice>
        <from usec="0" sec="1410239150"/>
        <to usec="0" sec="1410239352"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="180.130.60.160" dst_ip="180.130.60.160" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239190"/>
        <to usec="0" sec="1410239353"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.227.226.19"/>
        </slice>
        <from usec="0" sec="1410239006"/>
        <to usec="0" sec="1410239020"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="30.171.240.129"/>
        </slice>
        <from usec="0" sec="1410239071"/>
        <to usec="0" sec="1410239074"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.247.84.64" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239681"/>
        <to usec="0" sec="1410239690"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.25.97.16" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239023"/>
        <to usec="0" sec="1410239040"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.167.204.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239167"/>
        <to usec="0" sec="1410239179"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.24.203.184"/>
        </slice>
        <from usec="0" sec="1410239052"/>
        <to usec="0" sec="1410239079"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.239.98.129" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239644"/>
        <to usec="0" sec="1410239678"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="176.117.120.196"/>
        </slice>
        <from usec="0" sec="1410239163"/>
        <to usec="0" sec="1410239166"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.110.222.91" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239312"/>
        <to usec="0" sec="1410239331"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.190.106.136" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239482"/>
        <to usec="0" sec="1410239502"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.190.85.104" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239546"/>
        <to usec="0" sec="1410239552"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="156.6.192.148"/>
        </slice>
        <from usec="0" sec="1410239573"/>
        <to usec="0" sec="1410239585"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.78.223.216" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239184"/>
        <to usec="0" sec="1410239195"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.181.88.38" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238802"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.191.191.114"/>
        </slice>
        <from usec="0" sec="1410238847"/>
        <to usec="0" sec="1410238872"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.230.104.182" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239447"/>
        <to usec="0" sec="1410239471"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.199.40.104" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239020"/>
        <to usec="0" sec="1410239031"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="220.97.197.142" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238959"/>
        <to usec="0" sec="1410238963"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.225.200.180" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239072"/>
        <to usec="0" sec="1410239074"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.206.209.80" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239490"/>
        <to usec="0" sec="1410239497"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.106"/>
        </slice>
        <from usec="0" sec="1410239497"/>
        <to usec="0" sec="1410239500"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.113.44.110"/>
        </slice>
        <from usec="0" sec="1410238808"/>
        <to usec="0" sec="1410238811"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.185.172.167" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239582"/>
        <to usec="0" sec="1410239584"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="53.28.17.38" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239131"/>
        <to usec="0" sec="1410239136"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="39.128.45.78" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239495"/>
        <to usec="0" sec="1410239497"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.110.222.91"/>
        </slice>
        <from usec="0" sec="1410239329"/>
        <to usec="0" sec="1410239331"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="2.167.154.178" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239602"/>
        <to usec="0" sec="1410239607"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="204.66.19.155" dst_ip="170.42.23.21" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410239452"/>
        <to usec="0" sec="1410239453"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.179.75.153"/>
        </slice>
        <from usec="0" sec="1410239142"/>
        <to usec="0" sec="1410239145"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="197.150.109.33"/>
        </slice>
        <from usec="0" sec="1410239571"/>
        <to usec="0" sec="1410239574"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="192.63.158.169" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239504"/>
        <to usec="0" sec="1410239525"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.149.37"/>
        </slice>
        <from usec="0" sec="1410239313"/>
        <to usec="0" sec="1410239316"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.23.230.195"/>
        </slice>
        <from usec="0" sec="1410238925"/>
        <to usec="0" sec="1410238928"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.213.16"/>
        </slice>
        <from usec="0" sec="1410239371"/>
        <to usec="0" sec="1410239374"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.197.90"/>
        </slice>
        <from usec="0" sec="1410239656"/>
        <to usec="0" sec="1410239659"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.113.44.33"/>
        </slice>
        <from usec="0" sec="1410239282"/>
        <to usec="0" sec="1410239285"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.39.53"/>
        </slice>
        <from usec="0" sec="1410238819"/>
        <to usec="0" sec="1410238822"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.106.85"/>
        </slice>
        <from usec="0" sec="1410238881"/>
        <to usec="0" sec="1410238884"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.150.11"/>
        </slice>
        <from usec="0" sec="1410239150"/>
        <to usec="0" sec="1410239153"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="42.69.0.74"/>
        </slice>
        <from usec="0" sec="1410238938"/>
        <to usec="0" sec="1410238941"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.23.41.155"/>
        </slice>
        <from usec="0" sec="1410239224"/>
        <to usec="0" sec="1410239227"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.167.154.178"/>
        </slice>
        <from usec="0" sec="1410239602"/>
        <to usec="0" sec="1410239605"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="201.64.40.104"/>
        </slice>
        <from usec="0" sec="1410239604"/>
        <to usec="0" sec="1410239607"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.179.22.4"/>
        </slice>
        <from usec="0" sec="1410239286"/>
        <to usec="0" sec="1410239464"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="221.167.33.14"/>
        </slice>
        <from usec="0" sec="1410239360"/>
        <to usec="0" sec="1410239363"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.130.60.22"/>
        </slice>
        <from usec="0" sec="1410239656"/>
        <to usec="0" sec="1410239659"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="180.130.56.211"/>
        </slice>
        <from usec="0" sec="1410239393"/>
        <to usec="0" sec="1410239396"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="206.71.69.131"/>
        </slice>
        <from usec="0" sec="1410239677"/>
        <to usec="0" sec="1410239680"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.160.57"/>
        </slice>
        <from usec="0" sec="1410239610"/>
        <to usec="0" sec="1410239613"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.59.145.158"/>
        </slice>
        <from usec="0" sec="1410239196"/>
        <to usec="0" sec="1410239198"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="54.59.146.136"/>
        </slice>
        <from usec="0" sec="1410239362"/>
        <to usec="0" sec="1410239366"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="200.227.244.20"/>
        </slice>
        <from usec="0" sec="1410238852"/>
        <to usec="0" sec="1410238855"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="85.93.20.44"/>
        </slice>
        <from usec="0" sec="1410239381"/>
        <to usec="0" sec="1410239384"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="142.95.14.194"/>
        </slice>
        <from usec="0" sec="1410239134"/>
        <to usec="0" sec="1410239136"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="200.227.249.120" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410239667"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.225.124" dst_ip="108.134.172.169" src_port="58061" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239075"/>
        <to usec="0" sec="1410239659"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="200.178.43.74" dst_ip="200.227.246.33" src_port="36014" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239135"/>
        <to usec="0" sec="1410239137"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.236.175.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238988"/>
        <to usec="0" sec="1410239001"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.117.190.70" dst_ip="48.52.42.186" src_port="50088" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238854"/>
        <to usec="0" sec="1410238857"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="177.59.206.16" dst_ip="206.71.56.17" dst_port="25"/>
            <filter src_ip="177.59.206.16" dst_ip="206.71.56.86" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238858"/>
        <to usec="0" sec="1410239359"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="36.91.36.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238887"/>
        <to usec="0" sec="1410238900"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.29.12.30" dst_ip="206.71.56.17" src_port="52369" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238983"/>
        <to usec="0" sec="1410238985"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.6.40" dst_ip="108.132.142.132" src_port="57227" dst_port="443"/>
            <filter src_ip="176.117.6.40" dst_ip="108.132.142.132" src_port="57211" dst_port="443"/>
            <filter src_ip="176.117.6.40" dst_ip="108.132.142.132" src_port="57209" dst_port="443"/>
            <filter src_ip="176.117.6.40" dst_ip="108.132.142.132" src_port="57207" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238898"/>
        <to usec="0" sec="1410239098"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.165.99.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239193"/>
        <to usec="0" sec="1410239223"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.19.57" dst_ip="206.71.56.17" src_port="34766" dst_port="25"/>
            <filter src_ip="180.8.19.57" dst_ip="206.71.56.17" src_port="34632" dst_port="25"/>
            <filter src_ip="180.8.19.57" dst_ip="206.71.239.134" src_port="33466" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410239182"/>
        <to usec="0" sec="1410239401"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="133.98.24.24" dst_ip="182.151.229.31" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238819"/>
        <to usec="0" sec="1410239698"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.100.85.69" dst_ip="133.98.95.160" src_port="80" dst_port="60243"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239402"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.167.122" dst_ip="158.53.36.21" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239493"/>
        <to usec="0" sec="1410239607"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.177.38" dst_ip="107.32.215.145" src_port="35965" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410239665"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.4.240.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239263"/>
        <to usec="0" sec="1410239278"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.181.212.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239135"/>
        <to usec="0" sec="1410239149"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.23.204.176"/>
        </slice>
        <from usec="0" sec="1410238965"/>
        <to usec="0" sec="1410239331"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="222.46.80.69" dst_port="53413"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238921"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.45.157.231" dst_ip="176.117.216.142" src_port="52451" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238932"/>
        <to usec="0" sec="1410238935"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.227.229.96" dst_ip="85.122.184.62" src_port="53970" dst_port="443"/>
            <filter src_ip="200.227.229.96" dst_ip="107.33.120.136" src_port="58878" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239570"/>
        <to usec="0" sec="1410239572"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.32.34.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238877"/>
        <to usec="0" sec="1410238904"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.23.17.73" dst_ip="193.81.104.234" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238817"/>
        <to usec="0" sec="1410239619"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.223.2.32" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238808"/>
        <to usec="0" sec="1410238819"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,504,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.194.52.225" dst_ip="133.98.180.162" src_port="443" dst_port="55961"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239664"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.176.91.14" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239172"/>
        <to usec="0" sec="1410239197"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.117.178.96" dst_ip="207.27.226.143" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410239581"/>
        <to usec="0" sec="1410239585"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.195.205.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239216"/>
        <to usec="0" sec="1410239225"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.31.171.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239173"/>
        <to usec="0" sec="1410239191"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.176.24" dst_ip="108.132.177.100" src_port="65089" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239131"/>
        <to usec="0" sec="1410239458"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.157.24" src_port="25"/>
            <filter src_ip="201.64.157.24" dst_ip="219.123.195.44" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238824"/>
        <to usec="0" sec="1410239454"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="207.149.14.23" dst_ip="176.117.244.130" src_port="1935" dst_port="1034"/>
        </slice>
        <from usec="0" sec="1410239010"/>
        <to usec="0" sec="1410239696"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="124.88.169.161" dst_ip="176.117.48.16" src_port="80" dst_port="1144"/>
        </slice>
        <from usec="0" sec="1410238821"/>
        <to usec="0" sec="1410238921"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.65.126.6" dst_ip="170.42.21.51" src_port="443" dst_port="57581"/>
            <filter src_ip="85.65.126.6" dst_ip="170.42.21.51" src_port="443" dst_port="57578"/>
            <filter src_ip="85.65.126.6" dst_ip="170.42.21.51" src_port="443" dst_port="57575"/>
            <filter src_ip="85.65.126.6" dst_ip="170.42.21.51" src_port="443" dst_port="57572"/>
        </slice>
        <from usec="0" sec="1410239297"/>
        <to usec="0" sec="1410239304"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.19.39.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238932"/>
        <to usec="0" sec="1410238947"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.77.106.169" dst_ip="170.42.131.201" src_port="57347" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410239340"/>
        <to usec="0" sec="1410239345"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.157.145.2" dst_ip="176.117.202.7" src_port="80"/>
        </slice>
        <from usec="0" sec="1410238839"/>
        <to usec="0" sec="1410238840"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.243.216.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238944"/>
        <to usec="0" sec="1410238957"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,502,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="37.237.2.97" dst_ip="180.3.178.128" src_port="51274" dst_port="22"/>
        </slice>
        <from usec="0" sec="1410239188"/>
        <to usec="0" sec="1410239659"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="216.220.107.205" dst_ip="170.42.229.123" src_port="50014" dst_port="11277"/>
        </slice>
        <from usec="0" sec="1410238921"/>
        <to usec="0" sec="1410238934"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="70.137.81.123" src_port="12200" dst_port="1080"/>
        </slice>
        <from usec="0" sec="1410239098"/>
        <to usec="0" sec="1410239423"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.83.97.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238925"/>
        <to usec="0" sec="1410238940"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.105.42.95" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239036"/>
        <to usec="0" sec="1410239049"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="223.54.222.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239446"/>
        <to usec="0" sec="1410239472"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.180.6" dst_ip="206.165.21.150" src_port="60631" dst_port="443"/>
            <filter src_ip="176.117.180.6" dst_ip="206.165.21.150" src_port="60353" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239544"/>
        <to usec="0" sec="1410239552"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.238.125.197" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239222"/>
        <to usec="0" sec="1410239238"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.170.161" dst_ip="82.41.71.41" src_port="46701" dst_port="443"/>
            <filter src_ip="176.117.170.161" dst_ip="82.41.71.41" src_port="37418" dst_port="443"/>
            <filter src_ip="176.117.170.161" dst_ip="48.53.130.88" src_port="36951" dst_port="443"/>
            <filter src_ip="176.117.170.161" dst_ip="108.134.17.14" src_port="36902" dst_port="443"/>
            <filter src_ip="176.117.170.161" dst_ip="82.42.21.172" src_port="38520" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238988"/>
        <to usec="0" sec="1410239016"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="139.134.220.201" dst_ip="200.227.249.120" src_port="80" dst_port="52243"/>
        </slice>
        <from usec="0" sec="1410239080"/>
        <to usec="0" sec="1410239090"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.171.68.131" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239629"/>
        <to usec="0" sec="1410239642"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.166.233.166" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239059"/>
        <to usec="0" sec="1410239072"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="29.46.91.205" dst_ip="200.227.241.77" src_port="80" dst_port="57496"/>
        </slice>
        <from usec="0" sec="1410239606"/>
        <to usec="0" sec="1410239609"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.154.97.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238811"/>
        <to usec="0" sec="1410238829"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,502,1 1 1 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="19.239.234.249" dst_port="22"/>
        </slice>
        <from usec="0" sec="1410238848"/>
        <to usec="0" sec="1410238855"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="157.37.114.156" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239006"/>
        <to usec="0" sec="1410239022"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="17.165.99.106"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239223"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,503,1 1 1 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="192.152.179.116" dst_ip="176.117.170.51" src_port="80"/>
        </slice>
        <from usec="0" sec="1410239200"/>
        <to usec="0" sec="1410239223"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="201.64.38.52" dst_ip="200.1.133.7" src_port="55439" dst_port="80"/>
            <filter src_ip="180.179.66.145" dst_ip="200.1.133.7" src_port="61806" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239603"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="54.53.32.94" dst_ip="133.98.177.42" src_port="59770" dst_port="25"/>
            <filter src_ip="54.53.32.89" dst_ip="133.98.177.42" src_port="44661" dst_port="25"/>
            <filter src_ip="193.113.44.108" dst_ip="133.98.177.42" src_port="48191" dst_port="25"/>
            <filter src_ip="193.113.44.32" dst_ip="133.98.177.42" src_port="50376" dst_port="25"/>
            <filter src_ip="193.113.44.33" dst_ip="133.98.177.42" src_port="46284" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410238812"/>
    </anomaly>
    <anomaly type="notice" value="0.617518,1.618540,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="192.129.24.18" dst_ip="192.129.24.18" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1410238864"/>
        <to usec="0" sec="1410239551"/>
    </anomaly>
    <anomaly type="notice" value="0.617518,1.618540,020,0 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="98.190.85.104" proto="icmp"/>
        </slice>
        <from usec="0" sec="1410239548"/>
        <to usec="0" sec="1410239551"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="180.23.241.109" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410238867"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.131.201" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238854"/>
        <to usec="0" sec="1410238857"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.227.249.119" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238866"/>
        <to usec="0" sec="1410239666"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="13.85.138.109" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239282"/>
        <to usec="0" sec="1410239301"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.90.252.188" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239099"/>
        <to usec="0" sec="1410239118"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.4.21.147" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239479"/>
        <to usec="0" sec="1410239498"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.26.74.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238916"/>
        <to usec="0" sec="1410238929"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.255.129.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239088"/>
        <to usec="0" sec="1410239103"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.142.194.176" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239177"/>
        <to usec="0" sec="1410239189"/>
    </anomaly>
    <anomaly type="notice" value="0.979502,1.602200,502,1 1 1 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.8.121" dst_ip="176.102.136.87" dst_port="22"/>
        </slice>
        <from usec="0" sec="1410238823"/>
        <to usec="0" sec="1410239564"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="133.98.94.201" dst_ip="30.157.196.241" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238873"/>
        <to usec="0" sec="1410238920"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.227.6.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238854"/>
        <to usec="0" sec="1410238874"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.190.70.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239162"/>
        <to usec="0" sec="1410239176"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.187.78.179" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239345"/>
        <to usec="0" sec="1410239357"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.132.108.69" dst_ip="201.64.152.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410239648"/>
        <to usec="0" sec="1410239678"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.77.102.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239283"/>
        <to usec="0" sec="1410239308"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,502,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="197.109.114.56" dst_ip="200.227.249.79" dst_port="22"/>
            <filter src_ip="197.109.114.56" dst_ip="200.227.249.77" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238879"/>
        <to usec="0" sec="1410239676"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.82.16.66" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239553"/>
        <to usec="0" sec="1410239567"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.169.208.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239308"/>
        <to usec="0" sec="1410239323"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.40.211.29" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239338"/>
        <to usec="0" sec="1410239353"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.30.244.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239295"/>
        <to usec="0" sec="1410239310"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="163.29.103.36" dst_ip="206.71.85.112" src_port="49159" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239571"/>
        <to usec="0" sec="1410239574"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.114.18.219" dst_ip="200.227.254.67" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410239192"/>
        <to usec="0" sec="1410239195"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.82.103.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239359"/>
        <to usec="0" sec="1410239376"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.167.99.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239571"/>
        <to usec="0" sec="1410239582"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.82.16.207" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239616"/>
        <to usec="0" sec="1410239631"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.225.160.27" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238839"/>
        <to usec="0" sec="1410238854"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.90.59.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239165"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.40.193.170" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238905"/>
        <to usec="0" sec="1410238922"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.199.57.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239650"/>
        <to usec="0" sec="1410239664"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.43.10.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239520"/>
        <to usec="0" sec="1410239532"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.215.114.219" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238912"/>
        <to usec="0" sec="1410238924"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.74.59.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239544"/>
        <to usec="0" sec="1410239558"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.53.237.19" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239003"/>
        <to usec="0" sec="1410239015"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.11.247.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239396"/>
        <to usec="0" sec="1410239410"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.126.150.88" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239550"/>
        <to usec="0" sec="1410239574"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.98.9.1" dst_ip="193.218.158.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410239369"/>
        <to usec="0" sec="1410239376"/>
    </anomaly>
    <anomaly type="notice" value="0.769624,1.629750,999,1 1 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="201.64.54.196" dst_ip="39.4.224.138" dst_port="53"/>
            <filter src_ip="200.227.242.76" dst_ip="39.4.224.138" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239682"/>
    </anomaly>
    <anomaly type="notice" value="1.042550,1.579200,503,1 1 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.98.248.213" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="163.29.150.160" dst_ip="206.71.69.154" dst_port="80"/>
            <filter src_ip="180.8.193.132" dst_ip="206.71.69.154" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238944"/>
        <to usec="0" sec="1410238947"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="200.227.245.128"/>
        </slice>
        <from usec="0" sec="1410239023"/>
        <to usec="0" sec="1410239690"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.149.40" dst_ip="206.71.239.164" src_port="50749" dst_port="25"/>
            <filter src_ip="180.8.149.40" dst_ip="206.71.239.198" src_port="44086" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410239271"/>
        <to usec="0" sec="1410239274"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.132.52.0" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239027"/>
        <to usec="0" sec="1410239043"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.75.0.95" src_port="53"/>
        </slice>
        <from usec="0" sec="1410238951"/>
        <to usec="0" sec="1410239595"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.102.225.230" src_port="6000" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1410239645"/>
        <to usec="0" sec="1410239647"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.35.246.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239001"/>
        <to usec="0" sec="1410239016"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.142.112.134" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239410"/>
        <to usec="0" sec="1410239430"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,502,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.49.204.44" dst_ip="200.227.243.66" src_port="51133" dst_port="22"/>
        </slice>
        <from usec="0" sec="1410239590"/>
        <to usec="0" sec="1410239593"/>
    </anomaly>
    <anomaly type="notice" value="0.774924,1.575710,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.189.80.101" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239008"/>
        <to usec="0" sec="1410239025"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.18.147.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238811"/>
    </anomaly>
    <anomaly type="notice" value="0.979502,1.602200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.179.129.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239138"/>
        <to usec="0" sec="1410239162"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.89.7.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410238820"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.116.221.100" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239591"/>
        <to usec="0" sec="1410239606"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.165.17.205" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239559"/>
        <to usec="0" sec="1410239572"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.217.165.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239536"/>
        <to usec="0" sec="1410239553"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.5.36.138" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239625"/>
        <to usec="0" sec="1410239631"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.90.163.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238912"/>
        <to usec="0" sec="1410238929"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.251.29.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239118"/>
        <to usec="0" sec="1410239122"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="137.62.100.13" dst_ip="200.227.244.106" dst_port="53"/>
            <filter src_ip="137.62.100.13" dst_ip="200.227.229.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239596"/>
        <to usec="0" sec="1410239599"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.185.172.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239574"/>
        <to usec="0" sec="1410239584"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.220.104.247" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239452"/>
        <to usec="0" sec="1410239466"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.150.118.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239456"/>
        <to usec="0" sec="1410239471"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.37.188.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239192"/>
        <to usec="0" sec="1410239205"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.61.50.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239629"/>
        <to usec="0" sec="1410239640"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.240.4.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239561"/>
        <to usec="0" sec="1410239588"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="120.215.90.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239217"/>
        <to usec="0" sec="1410239225"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.95.14.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239134"/>
        <to usec="0" sec="1410239139"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="74.110.71.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239056"/>
        <to usec="0" sec="1410239066"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.96.203.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239254"/>
        <to usec="0" sec="1410239259"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.32.236.133" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239451"/>
        <to usec="0" sec="1410239457"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="8.184.101.128" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238979"/>
        <to usec="0" sec="1410239364"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,999,1 1 1 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.113.44.52" dst_ip="180.23.241.109" src_port="56017" dst_port="25"/>
            <filter src_ip="193.113.44.52" dst_ip="176.117.212.40" src_port="36228" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238856"/>
        <to usec="0" sec="1410238859"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="184.116.75.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239198"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="1.042550,1.579200,010,1 1 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.160.33.210" dst_port="135"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.28.17.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239131"/>
        <to usec="0" sec="1410239136"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.19.225.46" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239656"/>
        <to usec="0" sec="1410239682"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.128.233.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238988"/>
        <to usec="0" sec="1410239012"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.11.214.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239348"/>
        <to usec="0" sec="1410239366"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.199.117.137" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239487"/>
        <to usec="0" sec="1410239493"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="39.10.42.155" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238982"/>
        <to usec="0" sec="1410239001"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.181.116.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239028"/>
        <to usec="0" sec="1410239050"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.63.158.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239504"/>
        <to usec="0" sec="1410239525"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.151.194.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239393"/>
        <to usec="0" sec="1410239409"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.175.232.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238994"/>
        <to usec="0" sec="1410239013"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.96.49.194" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239384"/>
        <to usec="0" sec="1410239411"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="202.228.204.199" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238864"/>
        <to usec="0" sec="1410238879"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="112.2.165.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239368"/>
        <to usec="0" sec="1410239380"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.3.193.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238807"/>
        <to usec="0" sec="1410238827"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.199.90.143" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238908"/>
        <to usec="0" sec="1410238931"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.67.14.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239570"/>
        <to usec="0" sec="1410239591"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.158.11.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238959"/>
        <to usec="0" sec="1410238978"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.250.122.150" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239481"/>
        <to usec="0" sec="1410239505"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.128.96.89" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239607"/>
        <to usec="0" sec="1410239617"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="46.133.47.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238843"/>
        <to usec="0" sec="1410238857"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="45.160.128.5" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239266"/>
        <to usec="0" sec="1410239288"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.31.131.148" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239587"/>
        <to usec="0" sec="1410239608"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="40.195.64.93" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238882"/>
        <to usec="0" sec="1410238909"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="52.129.25.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239464"/>
        <to usec="0" sec="1410239474"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.99.230.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239071"/>
        <to usec="0" sec="1410239086"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="156.121.229.96" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="58.50.168.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238822"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.23.153.110" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239443"/>
        <to usec="0" sec="1410239455"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.18.167.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239687"/>
        <to usec="0" sec="1410239699"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.232.31.64" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239607"/>
        <to usec="0" sec="1410239631"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.233.210.193" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239444"/>
        <to usec="0" sec="1410239458"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="221.93.7.130" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239663"/>
        <to usec="0" sec="1410239689"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="151.29.39.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238942"/>
        <to usec="0" sec="1410238957"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.224.20.189" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239325"/>
        <to usec="0" sec="1410239335"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="149.0.221.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238849"/>
        <to usec="0" sec="1410238875"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.33.185.204" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239498"/>
        <to usec="0" sec="1410239514"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.67.154.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239165"/>
        <to usec="0" sec="1410239193"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.9.115.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239621"/>
        <to usec="0" sec="1410239645"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.30.240.255" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239324"/>
        <to usec="0" sec="1410239343"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.241.7.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239649"/>
        <to usec="0" sec="1410239673"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="152.106.104.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239597"/>
        <to usec="0" sec="1410239621"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="34.2.198.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239090"/>
        <to usec="0" sec="1410239101"/>
    </anomaly>
    <anomaly type="notice" value="0.979502,1.602200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.121.1.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238853"/>
        <to usec="0" sec="1410238880"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.166.47.36" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238854"/>
        <to usec="0" sec="1410238872"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="157.44.161.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238972"/>
        <to usec="0" sec="1410238992"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.2.227.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239663"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.45.185.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239510"/>
        <to usec="0" sec="1410239524"/>
    </anomaly>
    <anomaly type="notice" value="1.087770,1.649880,010,1 1 1 1 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.117.77.82" dst_port="2083"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239643"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="16.41.145.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238931"/>
        <to usec="0" sec="1410238949"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="32.198.32.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239443"/>
        <to usec="0" sec="1410239470"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="100.246.69.41" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239627"/>
        <to usec="0" sec="1410239657"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.12.23.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239519"/>
        <to usec="0" sec="1410239533"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="53.245.43.30" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238921"/>
        <to usec="0" sec="1410238935"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.196.134.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239396"/>
        <to usec="0" sec="1410239413"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.107.10.77" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239121"/>
        <to usec="0" sec="1410239128"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="41.143.152.211" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239556"/>
        <to usec="0" sec="1410239579"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.132.187.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239084"/>
        <to usec="0" sec="1410239102"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.244.84.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239547"/>
        <to usec="0" sec="1410239561"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.180.24.161" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239075"/>
        <to usec="0" sec="1410239099"/>
    </anomaly>
    <anomaly type="notice" value="0.979502,1.602200,010,1 1 1 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="8.146.37.33" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239141"/>
        <to usec="0" sec="1410239161"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="44.138.117.200" dst_ip="200.227.254.66" src_port="64230" dst_port="143"/>
            <filter src_ip="44.138.117.200" dst_ip="200.227.254.66" src_port="64229" dst_port="143"/>
            <filter src_ip="44.138.117.200" dst_ip="200.227.254.66" src_port="64228" dst_port="143"/>
            <filter src_ip="44.138.117.200" dst_ip="200.227.254.66" src_port="64227" dst_port="143"/>
        </slice>
        <from usec="0" sec="1410239656"/>
        <to usec="0" sec="1410239659"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="144.236.211.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239158"/>
        <to usec="0" sec="1410239176"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="216.183.53.158" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239135"/>
        <to usec="0" sec="1410239160"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.231.18.116" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239219"/>
        <to usec="0" sec="1410239246"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="49.14.12.233" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239638"/>
        <to usec="0" sec="1410239657"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.132.28.87" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239144"/>
        <to usec="0" sec="1410239149"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="154.217.220.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239352"/>
        <to usec="0" sec="1410239658"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="218.117.192.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239598"/>
        <to usec="0" sec="1410239621"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="47.160.133.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239035"/>
        <to usec="0" sec="1410239049"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.32.9.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239093"/>
        <to usec="0" sec="1410239108"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.139.157.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239272"/>
        <to usec="0" sec="1410239286"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="72.2.247.16" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239379"/>
        <to usec="0" sec="1410239404"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="153.137.227.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239401"/>
        <to usec="0" sec="1410239428"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="37.76.98.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239663"/>
        <to usec="0" sec="1410239669"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="55.88.251.82" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239359"/>
        <to usec="0" sec="1410239382"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="14.90.84.147" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238869"/>
        <to usec="0" sec="1410238872"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="35.242.220.48" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239234"/>
        <to usec="0" sec="1410239253"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.220.242.231" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238999"/>
        <to usec="0" sec="1410239022"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,010,1 1 1 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="44.86.56.37" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239511"/>
        <to usec="0" sec="1410239515"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,011,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="203.34.172.136" src_port="22" dst_port="48735"/>
        </slice>
        <from usec="0" sec="1410239501"/>
        <to usec="0" sec="1410239502"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.86.56.37"/>
        </slice>
        <from usec="0" sec="1410239511"/>
        <to usec="0" sec="1410239514"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="221.40.132.162" src_port="10022"/>
        </slice>
        <from usec="0" sec="1410239502"/>
        <to usec="0" sec="1410239504"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,011,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="176.117.77.82" src_port="2083"/>
        </slice>
        <from usec="0" sec="1410239298"/>
        <to usec="0" sec="1410239300"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="33.132.28.87"/>
        </slice>
        <from usec="0" sec="1410239145"/>
        <to usec="0" sec="1410239149"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="93.96.203.193"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="44.32.236.133"/>
        </slice>
        <from usec="0" sec="1410239452"/>
        <to usec="0" sec="1410239457"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="150.2.227.129"/>
        </slice>
        <from usec="0" sec="1410239658"/>
        <to usec="0" sec="1410239663"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="217.81.58.227"/>
        </slice>
        <from usec="0" sec="1410239297"/>
        <to usec="0" sec="1410239305"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="1.231.18.116"/>
        </slice>
        <from usec="0" sec="1410239219"/>
        <to usec="0" sec="1410239246"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="100.247.84.64"/>
        </slice>
        <from usec="0" sec="1410239681"/>
        <to usec="0" sec="1410239690"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="92.61.50.24"/>
        </slice>
        <from usec="0" sec="1410239632"/>
        <to usec="0" sec="1410239640"/>
    </anomaly>
    <anomaly type="notice" value="0.769624,1.629750,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="92.178.53.205"/>
        </slice>
        <from usec="0" sec="1410239024"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,020,1 1 1 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="184.116.75.182"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="98.200.136.172"/>
        </slice>
        <from usec="0" sec="1410239307"/>
        <to usec="0" sec="1410239314"/>
    </anomaly>
    <anomaly type="notice" value="0.852893,1.607860,020,1 1 1 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="40.195.205.195"/>
        </slice>
        <from usec="0" sec="1410239216"/>
        <to usec="0" sec="1410239225"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.153.51"/>
        </slice>
        <from usec="0" sec="1410239020"/>
        <to usec="0" sec="1410239022"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.186.202" dst_port="80"/>
            <filter src_ip="176.117.186.202" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239192"/>
        <to usec="0" sec="1410239323"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,503,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="176.117.176.183" dst_ip="207.27.226.176" src_port="6074" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238864"/>
        <to usec="0" sec="1410238867"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.135.137.34" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410238840"/>
        <to usec="0" sec="1410238853"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="176.117.218.83" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238992"/>
        <to usec="0" sec="1410239568"/>
    </anomaly>
    <anomaly type="notice" value="0.607049,1.581460,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.23.204.70" dst_ip="107.42.74.121" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238883"/>
        <to usec="0" sec="1410238885"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.181.122.234"/>
        </slice>
        <from usec="0" sec="1410238842"/>
        <to usec="0" sec="1410238884"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.227.242.85"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238998"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.206.181.228"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238998"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.83.47.252"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238869"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.227.246.129"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238993"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.179.64.81"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238952"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="131.16.146.226"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238998"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.227.241.65"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239080"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.23.241.10"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238996"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="98.204.89.195"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410238998"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="108.6.22.104"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410238993"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="180.179.38.165"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410238996"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="7.58.141.89"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410238866"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="201.233.78.75"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239088"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.186"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239088"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="200.227.247.32"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239088"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="89.148.98.86"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239076"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.179.22.49"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410239079"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="77.62.78.97"/>
        </slice>
        <from usec="0" sec="1410238813"/>
        <to usec="0" sec="1410239086"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.179.76.144"/>
        </slice>
        <from usec="0" sec="1410238820"/>
        <to usec="0" sec="1410239073"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="2.95.202.121"/>
        </slice>
        <from usec="0" sec="1410238846"/>
        <to usec="0" sec="1410239088"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="91.187.69.194"/>
        </slice>
        <from usec="0" sec="1410238847"/>
        <to usec="0" sec="1410239070"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="2.6.203.120"/>
        </slice>
        <from usec="0" sec="1410238919"/>
        <to usec="0" sec="1410238955"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.181.127.9"/>
        </slice>
        <from usec="0" sec="1410238936"/>
        <to usec="0" sec="1410239081"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.99.102.209"/>
        </slice>
        <from usec="0" sec="1410238983"/>
        <to usec="0" sec="1410239033"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="58.64.84.28"/>
        </slice>
        <from usec="0" sec="1410239078"/>
        <to usec="0" sec="1410239088"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="192.33.105.36"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="34.189.114.197"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="180.179.23.48"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.189"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.6.66.120"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.89.143.204"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.75.33.178"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="1.182.207.15"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239178"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.92.99.139"/>
        </slice>
        <from usec="0" sec="1410238803"/>
        <to usec="0" sec="1410239175"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.130.62.48"/>
        </slice>
        <from usec="0" sec="1410238805"/>
        <to usec="0" sec="1410239164"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.227.251.117"/>
        </slice>
        <from usec="0" sec="1410238808"/>
        <to usec="0" sec="1410239176"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.95.105"/>
        </slice>
        <from usec="0" sec="1410238812"/>
        <to usec="0" sec="1410239159"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,503,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="176.117.97.33" dst_ip="183.171.149.228"/>
            <filter src_ip="176.117.97.33" dst_port="80"/>
            <filter dst_ip="183.171.149.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238815"/>
        <to usec="0" sec="1410239177"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.38.34"/>
        </slice>
        <from usec="0" sec="1410238815"/>
        <to usec="0" sec="1410239124"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.23.206.1"/>
        </slice>
        <from usec="0" sec="1410238826"/>
        <to usec="0" sec="1410239112"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.23.16.140"/>
        </slice>
        <from usec="0" sec="1410238833"/>
        <to usec="0" sec="1410239158"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="31.174.237.135"/>
        </slice>
        <from usec="0" sec="1410238858"/>
        <to usec="0" sec="1410239014"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,504,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.180.203" dst_ip="138.155.192.70" src_port="56368" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238928"/>
        <to usec="0" sec="1410239035"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.8.116" dst_port="80"/>
            <filter src_ip="176.117.8.116" dst_ip="48.52.84.147" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238953"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="204.66.19.133"/>
        </slice>
        <from usec="0" sec="1410239001"/>
        <to usec="0" sec="1410239177"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="108.17.12.174"/>
        </slice>
        <from usec="0" sec="1410239012"/>
        <to usec="0" sec="1410239044"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.23.234.70"/>
        </slice>
        <from usec="0" sec="1410239038"/>
        <to usec="0" sec="1410239106"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.180.115.172"/>
        </slice>
        <from usec="0" sec="1410239044"/>
        <to usec="0" sec="1410239133"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="8.246.87.234"/>
        </slice>
        <from usec="0" sec="1410239051"/>
        <to usec="0" sec="1410239357"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="40.100.131.156"/>
        </slice>
        <from usec="0" sec="1410239078"/>
        <to usec="0" sec="1410239158"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="176.117.219.101"/>
        </slice>
        <from usec="0" sec="1410239086"/>
        <to usec="0" sec="1410239094"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="46.238.199.114"/>
        </slice>
        <from usec="0" sec="1410239097"/>
        <to usec="0" sec="1410239110"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="150.100.40.75"/>
        </slice>
        <from usec="0" sec="1410239148"/>
        <to usec="0" sec="1410239172"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239268"/>
    </anomaly>
    <anomaly type="notice" value="0.774924,1.575710,999,1 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.227.253.88" src_port="8080"/>
            <filter src_ip="200.227.253.88" dst_port="25"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239693"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.14.81"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239245"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.6.66.74"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239268"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="163.29.171.202"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239193"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.3.182.34"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239267"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.133"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239268"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.23.17.164" src_port="26370"/>
            <filter src_ip="180.23.17.164"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239260"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="6.136.136.174"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.98.177.88"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410239267"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.12.132"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239245"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.16.237"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239135"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="200.227.244.156"/>
        </slice>
        <from usec="0" sec="1410238821"/>
        <to usec="0" sec="1410239267"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.98.17.72" dst_ip="108.132.158.87" dst_port="443"/>
            <filter src_ip="133.98.17.72" dst_ip="54.59.145.153" dst_port="443"/>
            <filter src_ip="133.98.17.72" dst_ip="54.59.145.112" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238826"/>
        <to usec="0" sec="1410239267"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="42.198.228.232"/>
        </slice>
        <from usec="0" sec="1410238835"/>
        <to usec="0" sec="1410239131"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="35.152.33.83"/>
        </slice>
        <from usec="0" sec="1410238847"/>
        <to usec="0" sec="1410239110"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.33.195.44"/>
        </slice>
        <from usec="0" sec="1410238936"/>
        <to usec="0" sec="1410239247"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="198.125.229.69"/>
        </slice>
        <from usec="0" sec="1410238948"/>
        <to usec="0" sec="1410239148"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="40.125.150.42"/>
        </slice>
        <from usec="0" sec="1410239086"/>
        <to usec="0" sec="1410239122"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="2.6.205.72"/>
        </slice>
        <from usec="0" sec="1410239095"/>
        <to usec="0" sec="1410239108"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.82.128.147"/>
        </slice>
        <from usec="0" sec="1410239106"/>
        <to usec="0" sec="1410239136"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.9.228"/>
        </slice>
        <from usec="0" sec="1410239153"/>
        <to usec="0" sec="1410239267"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,503,1 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="42.248.216.25" dst_ip="201.64.49.42" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410239157"/>
        <to usec="0" sec="1410239186"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,010,1 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="33.20.97.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1410239168"/>
        <to usec="0" sec="1410239190"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.179.40.111"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239358"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,504,1 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.23.179.78" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239358"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="200.227.242.132"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239357"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.190.54"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239358"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="107.24.193.82"/>
        </slice>
        <from usec="0" sec="1410238916"/>
        <to usec="0" sec="1410239326"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.18.94"/>
        </slice>
        <from usec="0" sec="1410238968"/>
        <to usec="0" sec="1410239351"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.130.62.125"/>
        </slice>
        <from usec="0" sec="1410238998"/>
        <to usec="0" sec="1410239342"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="21.23.202.147"/>
        </slice>
        <from usec="0" sec="1410239191"/>
        <to usec="0" sec="1410239234"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.156.206.79"/>
        </slice>
        <from usec="0" sec="1410239348"/>
        <to usec="0" sec="1410239350"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.153"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239447"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.94.70"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239446"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="208.196.150.103"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239447"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.155.210"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239446"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="52.158.203.227"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239445"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="114.22.58.33"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239421"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.6.66.93"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239448"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.23.182.108"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410239446"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.27.204.90"/>
        </slice>
        <from usec="0" sec="1410238811"/>
        <to usec="0" sec="1410239422"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="200.227.242.29"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239533"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="133.98.153.251" dst_ip="124.90.160.74" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="200.227.243.247"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239537"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.6.37.10"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239537"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="200.227.248.80"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.148" src_port="38166" dst_port="53"/>
            <filter src_ip="30.147.176.148" src_port="47192" dst_port="53"/>
            <filter src_ip="30.147.176.148" src_port="54888" dst_port="53"/>
            <filter src_ip="30.147.176.148" src_port="51215" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="108.6.8.201"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="201.64.38.136"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410239523"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="30.147.176.141"/>
        </slice>
        <from usec="0" sec="1410238801"/>
        <to usec="0" sec="1410239536"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,503,1 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="200.227.241.69" dst_port="80"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239532"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.43.32"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239545"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="92.58.26.212"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239536"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="40.147.154.247"/>
        </slice>
        <from usec="0" sec="1410238806"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="201.64.154.160"/>
        </slice>
        <from usec="0" sec="1410238807"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.645996,1.587320,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="159.37.168.46" dst_ip="133.98.94.98" src_port="80" dst_port="49840"/>
        </slice>
        <from usec="0" sec="1410238814"/>
        <to usec="0" sec="1410239538"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="133.98.57.85"/>
        </slice>
        <from usec="0" sec="1410238814"/>
        <to usec="0" sec="1410239536"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="201.64.56.133"/>
        </slice>
        <from usec="0" sec="1410238817"/>
        <to usec="0" sec="1410239503"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.190.99"/>
        </slice>
        <from usec="0" sec="1410238856"/>
        <to usec="0" sec="1410239496"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="90.121.1.223"/>
        </slice>
        <from usec="0" sec="1410239256"/>
        <to usec="0" sec="1410239455"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.111.32.128"/>
        </slice>
        <from usec="0" sec="1410239383"/>
        <to usec="0" sec="1410239409"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="201.64.37.45"/>
        </slice>
        <from usec="0" sec="1410239440"/>
        <to usec="0" sec="1410239453"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="200.227.244.95"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="35.86.47.18"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239625"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="176.117.214.166"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239582"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.240.39.189"/>
        </slice>
        <from usec="0" sec="1410238802"/>
        <to usec="0" sec="1410239619"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.28.8"/>
        </slice>
        <from usec="0" sec="1410238803"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.179.25.178"/>
        </slice>
        <from usec="0" sec="1410238804"/>
        <to usec="0" sec="1410239593"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.23.65.162"/>
        </slice>
        <from usec="0" sec="1410238805"/>
        <to usec="0" sec="1410239623"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="166.41.96.181"/>
        </slice>
        <from usec="0" sec="1410238805"/>
        <to usec="0" sec="1410239627"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="133.98.94.238"/>
        </slice>
        <from usec="0" sec="1410238814"/>
        <to usec="0" sec="1410239616"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="180.8.239.64"/>
        </slice>
        <from usec="0" sec="1410238820"/>
        <to usec="0" sec="1410239570"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.119.87"/>
        </slice>
        <from usec="0" sec="1410238822"/>
        <to usec="0" sec="1410239626"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="133.98.12.161"/>
        </slice>
        <from usec="0" sec="1410238831"/>
        <to usec="0" sec="1410239613"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="133.98.150.164"/>
        </slice>
        <from usec="0" sec="1410238846"/>
        <to usec="0" sec="1410239593"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="89.239.210.195"/>
        </slice>
        <from usec="0" sec="1410238861"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="34.141.21.219"/>
        </slice>
        <from usec="0" sec="1410238911"/>
        <to usec="0" sec="1410239603"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="120.36.208.65"/>
        </slice>
        <from usec="0" sec="1410239367"/>
        <to usec="0" sec="1410239622"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="200.227.253.181"/>
        </slice>
        <from usec="0" sec="1410239500"/>
        <to usec="0" sec="1410239542"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.197.130.39"/>
        </slice>
        <from usec="0" sec="1410239544"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="197.151.238.234"/>
        </slice>
        <from usec="0" sec="1410239568"/>
        <to usec="0" sec="1410239585"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="45.64.204.64"/>
        </slice>
        <from usec="0" sec="1410239605"/>
        <to usec="0" sec="1410239615"/>
    </anomaly>
    <anomaly type="notice" value="0.655844,1.624270,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="19.233.6.98"/>
        </slice>
        <from usec="0" sec="1410239605"/>
        <to usec="0" sec="1410239626"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="170.42.27.100"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="72.215.172.20"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,999,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.20.1" dst_port="63014"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239446"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="222.203.92.108"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.210"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.253.88" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.182.7.198"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.85.117.169"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.139"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.21"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,020,0 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.246.33"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239258"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.117.34.60" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.130.60.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.17.134.53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.45.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.213" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.98.177.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.229.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.54.196" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.0.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.61.169" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.36.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.98.208.107" src_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.160.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.228.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.252.99" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.193.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.23.241.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.117.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.107" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.245.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.94" src_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.154.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410238846"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="180.23.204.176" src_port="7690"/>
        </slice>
        <from usec="0" sec="1410238980"/>
        <to usec="0" sec="1410239026"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.23.242.134" src_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,999,1 1 1 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="201.64.48.209" dst_port="53"/>
            <filter src_ip="201.75.45.188" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239700"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="121.99.78.145"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.210"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.139"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.21"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.639629,1.640980,999,1 0 0 0 0 0 1 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="176.117.49.147" dst_ip="96.44.215.250" src_port="1456"/>
            <filter src_ip="176.117.49.147" dst_ip="108.59.63.11" src_port="1456"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239455"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.130.60.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.117.34.50" src_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.45.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.213" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.216.94.134" dst_ip="200.227.229.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.54.196" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.0.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.36.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.160.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.228.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,503,0 0 0 0 0 0 1 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="201.64.37.33" src_port="80"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.252.99" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.193.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.975315,1.655370,999,1 1 1 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.226.19" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239698"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.234.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.66.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.49.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="180.23.242.135" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239343"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.117.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.245.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.154.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.161" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239071"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="6.146.191.102"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="221.41.197.134"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="158.6.66.104"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.206.53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="85.149.228.127"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.134" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239628"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="48.182.7.198"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.53.71" dst_port="64644"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.90" dst_port="26123"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.130.60.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="197.17.134.53" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239025"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="205.42.136.43" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.45.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.213" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.229.12" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.54.196" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.0.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.36.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.769624,1.629750,999,1 1 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.74" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239561"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.160.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.228.122" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.252.99" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.193.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.234.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.66.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.808668,1.671320,504,0 0 0 1 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="23.99.157.156" dst_ip="170.42.104.95" src_port="443"/>
            <filter src_ip="163.81.92.99" dst_ip="170.42.104.95" src_port="443"/>
        </slice>
        <from usec="0" sec="1410238978"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.49.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.139" dst_port="161"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.21" dst_port="161"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.117.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.107" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.639629,1.640980,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.245.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239585"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.100" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.154.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.161" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239206"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="180.23.245.165"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="216.169.45.36"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="133.98.151.161" dst_port="19835"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="221.41.197.134"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="200.227.242.3"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.111.94" dst_port="12469"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.139"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.250.21"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="176.117.34.153"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.23.227.6" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.639629,1.640980,502,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="180.130.60.160" dst_port="53"/>
            <filter src_ip="90.88.242.84" dst_ip="180.130.60.160" dst_port="22"/>
        </slice>
        <from usec="0" sec="1410239160"/>
        <to usec="0" sec="1410239347"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="197.84.5.18" src_port="3306"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.51" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.130.60.22" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="176.117.34.50" src_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.45.179" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.38.0.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.213" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.38.0.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.48.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.38.0.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.38.0.159" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.54.196" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.0.95" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.430479,1.593030,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="163.29.1.245" dst_ip="100.36.49.7"/>
            <filter src_ip="163.29.1.245" dst_port="443"/>
            <filter dst_ip="100.36.49.7" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410238936"/>
        <to usec="0" sec="1410239692"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.85" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.36.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.639629,1.640980,504,1 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="42.186.169.205" dst_ip="170.85.59.0" dst_port="443"/>
        </slice>
        <from usec="0" sec="1410239137"/>
        <to usec="0" sec="1410239669"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.242.72" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.160.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.250" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.252.99" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="170.42.192.10" src_port="80"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.193.47" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.234.153" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.66.0" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.49.27" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.243.209" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.175" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.174" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.160" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.98.227.67" src_port="80"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.117.83" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,503,0 0 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.23.240.110" dst_ip="24.58.142.133" src_port="80"/>
        </slice>
        <from usec="0" sec="1410238800"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.246.107" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="200.227.244.106" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.153.195" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.154.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.161" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.649573,1.676740,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.64.154.173" dst_port="53"/>
        </slice>
        <from usec="0" sec="1410239250"/>
        <to usec="0" sec="1410239296"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="34.150.218.113"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="176.117.9.176"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.950640,1.590790,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="180.8.133.215" src_port="25"/>
            <filter src_ip="180.8.133.215" src_port="995"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.950640,1.590790,503,1 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="180.23.45.178" dst_ip="61.135.171.17" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="180.3.178.138"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,020,0 0 0 0 0 0 0 0 0 1 0 0,icmp_error">
        <slice>
            <filter src_ip="170.85.56.162"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.950640,1.590790,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="133.98.29.240" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="158.6.66.76"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter src_ip="197.115.54.206"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,ptmpla">
        <slice>
            <filter src_ip="200.227.253.158"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="96.113.130.106"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="176.117.254.64"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="180.130.62.80" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.23.242.135" src_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,502,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="180.3.182.1"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.206.72" dst_port="63536"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.067870,1.674610,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.194.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.067870,1.674610,999,0 0 0 0 0 0 1 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="170.42.100.37" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.950640,1.590790,504,1 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="170.42.169.172" src_port="443"/>
            <filter dst_ip="170.42.169.172" dst_port="45615"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="133.98.103.74" src_port="80"/>
            <filter src_ip="85.93.195.164" dst_ip="133.98.103.74" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="148.157.22.53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="201.64.157.24"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="201.75.16.82" dst_port="53"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.244.114" dst_port="25"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="1.067870,1.674610,999,0 0 0 0 0 0 1 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="200.227.245.218" dst_port="61963"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="85.98.101.74"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.957359,1.627650,503,0 0 0 0 0 0 0 0 0 1 0 0,alphflHTTP">
        <slice>
            <filter dst_ip="9.204.16.250"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
