<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.32.89" dst_ip="11.147.20.132" src_port="36941" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917593"/>
        <to usec="0" sec="1412917595"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="20.216.145.129" dst_ip="132.38.32.89" src_port="5938" dst_port="38683" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917276"/>
        <to usec="0" sec="1412918005"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="126.225.11.70" dst_ip="179.136.1.137" src_port="993" dst_port="52230" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917613"/>
        <to usec="0" sec="1412917615"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="132.38.229.231" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917670"/>
        <to usec="0" sec="1412917777"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="208.247.32.24" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917322"/>
        <to usec="0" sec="1412917798"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.106.169.145" dst_ip="130.149.193.236" src_port="51792" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917203"/>
        <to usec="0" sec="1412917762"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="49.219.45.59" dst_ip="179.136.16.128" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917588"/>
        <to usec="0" sec="1412917908"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="175.43.0.29" dst_ip="130.149.104.131" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917683"/>
        <to usec="0" sec="1412917820"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.38.176" dst_ip="67.81.38.52" src_port="41846" dst_port="22186" proto="udp"/>
        </slice>
        <from usec="0" sec="1412917448"/>
        <to usec="0" sec="1412918054"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.189.248.13" dst_ip="179.136.177.69" src_port="80" dst_port="40158" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917714"/>
        <to usec="0" sec="1412917716"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.109.120" dst_ip="11.147.10.215" src_port="35050" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917455"/>
        <to usec="0" sec="1412917457"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="184.169.16.75" dst_ip="209.50.147.3" src_port="443" dst_port="61672" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917593"/>
        <to usec="0" sec="1412917601"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.136.111.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917325"/>
        <to usec="0" sec="1412917798"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="11.23.142.30" dst_ip="179.136.18.74" src_port="1935" dst_port="57149" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917440"/>
        <to usec="0" sec="1412918048"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.109.86" dst_ip="58.102.148.222" src_port="62849" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917593"/>
        <to usec="0" sec="1412917595"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="181.225.170.152" dst_ip="179.136.178.23" src_port="80" dst_port="56610" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917367"/>
        <to usec="0" sec="1412917369"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="130.149.33.211" dst_ip="119.88.181.169" src_port="63602" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917957"/>
        <to usec="0" sec="1412917959"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.50.147.97" dst_ip="223.82.138.79" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917324"/>
        <to usec="0" sec="1412917373"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.109.82" dst_ip="58.102.148.149" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918043"/>
        <to usec="0" sec="1412918045"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="77.44.237.86" dst_ip="208.247.37.175" src_port="80" dst_port="58174" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918030"/>
        <to usec="0" sec="1412918032"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.102.202" dst_ip="165.67.5.213" src_port="59410" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917753"/>
        <to usec="0" sec="1412917756"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.149.112.252"/>
        </slice>
        <from usec="0" sec="1412918011"/>
        <to usec="0" sec="1412918058"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.57.130.98" dst_ip="11.147.23.99" src_port="61063" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917719"/>
        <to usec="0" sec="1412917741"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="209.57.26.36" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917278"/>
        <to usec="0" sec="1412917800"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="49.171.7.126" dst_ip="130.82.75.18" src_port="1935" dst_port="50860" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917600"/>
        <to usec="0" sec="1412918042"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.49.62" src_port="58519" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917396"/>
        <to usec="0" sec="1412917790"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="77.44.237.69" dst_ip="179.136.127.78" src_port="80" dst_port="54874" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917204"/>
        <to usec="0" sec="1412917219"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.4.138" dst_ip="13.42.5.34" src_port="64842" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917737"/>
        <to usec="0" sec="1412918054"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.79.40" dst_ip="201.175.82.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917554"/>
        <to usec="0" sec="1412917804"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.149.49.57" dst_ip="223.217.14.77" src_port="58259" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917696"/>
        <to usec="0" sec="1412917699"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.149.54.55" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917595"/>
        <to usec="0" sec="1412917704"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.37.123" dst_ip="5.34.39.172" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917558"/>
        <to usec="0" sec="1412917797"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.38.37.216" dst_ip="13.57.81.101" src_port="52036" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917714"/>
        <to usec="0" sec="1412917716"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.57.130.24"/>
        </slice>
        <from usec="0" sec="1412917796"/>
        <to usec="0" sec="1412917798"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.38.168.144" dst_ip="49.144.171.29" src_port="49604" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917674"/>
        <to usec="0" sec="1412917675"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.109.44" dst_ip="223.217.14.77" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917730"/>
        <to usec="0" sec="1412917810"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.161.192.243" dst_ip="208.247.43.161" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917676"/>
        <to usec="0" sec="1412917741"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.122.170" dst_ip="13.113.165.51" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917692"/>
        <to usec="0" sec="1412917738"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.136.179.88" dst_ip="223.183.208.175" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917206"/>
        <to usec="0" sec="1412917793"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.168.128" dst_ip="114.231.65.88" src_port="56083" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917785"/>
        <to usec="0" sec="1412917787"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.82.74.82"/>
        </slice>
        <from usec="0" sec="1412917723"/>
        <to usec="0" sec="1412917725"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.230.45" dst_ip="13.56.41.23" src_port="61222" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917741"/>
        <to usec="0" sec="1412917743"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.137.111" dst_ip="219.242.113.120" src_port="56640" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917768"/>
        <to usec="0" sec="1412917773"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.7.145" dst_ip="11.147.192.33" src_port="49281" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917719"/>
        <to usec="0" sec="1412917733"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.78.90"/>
        </slice>
        <from usec="0" sec="1412917735"/>
        <to usec="0" sec="1412917740"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.26.43.178" proto="udp"/>
        </slice>
        <from usec="0" sec="1412917342"/>
        <to usec="0" sec="1412917769"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.57.29.154"/>
        </slice>
        <from usec="0" sec="1412918034"/>
        <to usec="0" sec="1412918085"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.38.139.253" dst_ip="58.102.150.9" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917677"/>
        <to usec="0" sec="1412917790"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.136.176.142" dst_ip="181.225.170.236" src_port="49554" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917278"/>
        <to usec="0" sec="1412917412"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.38.229.95" dst_ip="212.57.143.76" src_port="58332" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917768"/>
        <to usec="0" sec="1412917771"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.149.53.101" dst_ip="223.217.14.77" src_port="49251" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917778"/>
        <to usec="0" sec="1412917781"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="179.136.11.54"/>
        </slice>
        <from usec="0" sec="1412917718"/>
        <to usec="0" sec="1412917720"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.128.110.73" dst_ip="132.38.193.214" src_port="80" dst_port="1033" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918096"/>
        <to usec="0" sec="1412918099"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="209.57.130.162"/>
        </slice>
        <from usec="0" sec="1412917506"/>
        <to usec="0" sec="1412917517"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.82.75.75"/>
        </slice>
        <from usec="0" sec="1412917598"/>
        <to usec="0" sec="1412917810"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="155.67.97.189" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917757"/>
        <to usec="0" sec="1412917760"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.4.8" dst_ip="117.17.107.216" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917683"/>
        <to usec="0" sec="1412917685"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,502,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="219.208.237.172"/>
        </slice>
        <from usec="0" sec="1412917691"/>
        <to usec="0" sec="1412917693"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="132.38.136.95"/>
        </slice>
        <from usec="0" sec="1412917757"/>
        <to usec="0" sec="1412917759"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.82.70.149" dst_ip="175.42.96.165" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917701"/>
        <to usec="0" sec="1412917746"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.132.70.97" dst_ip="110.213.39.170" src_port="60157" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918068"/>
        <to usec="0" sec="1412918082"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.25.23.235" dst_ip="148.113.165.223" src_port="43361" dst_port="993" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917231"/>
        <to usec="0" sec="1412917243"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.103.228.237"/>
        </slice>
        <from usec="0" sec="1412917676"/>
        <to usec="0" sec="1412917787"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.53.65" dst_ip="101.207.169.129" src_port="63738" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917696"/>
        <to usec="0" sec="1412918033"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.136.178.250" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917766"/>
        <to usec="0" sec="1412917769"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.176.70" dst_ip="58.102.148.131" src_port="52725" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917686"/>
        <to usec="0" sec="1412917690"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.82.70.163" dst_ip="20.5.96.219" src_port="60297" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917696"/>
        <to usec="0" sec="1412917738"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.82.20.68" dst_ip="64.99.211.212" src_port="55131" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917757"/>
        <to usec="0" sec="1412917759"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.57.26.144" dst_ip="148.117.181.6" src_port="80" dst_port="45258" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917396"/>
        <to usec="0" sec="1412917398"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="64.155.38.49" dst_ip="130.149.193.236" src_port="40088" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917203"/>
        <to usec="0" sec="1412917774"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="219.123.125.201" dst_ip="148.113.47.182" src_port="65528" dst_port="40007" proto="udp"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917920"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="214.134.176.20" dst_ip="148.113.195.81" src_port="993" dst_port="58927" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917804"/>
        <to usec="0" sec="1412917805"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="179.136.178.156"/>
        </slice>
        <from usec="0" sec="1412917319"/>
        <to usec="0" sec="1412917322"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.149.72.198" dst_ip="53.48.243.20" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917803"/>
        <to usec="0" sec="1412917806"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.109.170" dst_ip="214.67.4.144" src_port="49308" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917784"/>
        <to usec="0" sec="1412917802"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="132.38.73.225" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917777"/>
        <to usec="0" sec="1412917793"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.0.122" dst_ip="58.102.148.182" src_port="57467" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917772"/>
        <to usec="0" sec="1412917775"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.136.108.234" dst_ip="86.109.22.61" src_port="52716" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917598"/>
        <to usec="0" sec="1412917810"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="209.57.130.194" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917217"/>
        <to usec="0" sec="1412917778"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="179.136.109.145" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917712"/>
        <to usec="0" sec="1412917803"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.244.104" dst_ip="13.57.115.166" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917801"/>
        <to usec="0" sec="1412917805"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.136.178.164"/>
        </slice>
        <from usec="0" sec="1412917205"/>
        <to usec="0" sec="1412917207"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.20.15.154" dst_ip="179.136.246.140" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917798"/>
        <to usec="0" sec="1412917800"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.230.169" dst_ip="11.147.13.24" src_port="58727" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917719"/>
        <to usec="0" sec="1412918099"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="179.136.177.69" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917686"/>
        <to usec="0" sec="1412917805"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="132.38.242.240" dst_ip="49.147.54.183" src_port="35121" dst_port="443"/>
            <filter src_ip="132.38.242.240" dst_ip="187.64.186.4" src_port="45859" dst_port="443"/>
            <filter src_ip="132.38.242.240" dst_ip="58.102.150.7" src_port="37342" dst_port="443"/>
            <filter src_ip="132.38.242.240" dst_ip="58.102.150.17" src_port="44784" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917768"/>
        <to usec="0" sec="1412917776"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.57.131.215" dst_ip="181.225.170.163" src_port="49297" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917686"/>
        <to usec="0" sec="1412917778"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="179.136.176.202" dst_ip="179.136.176.202" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918057"/>
        <to usec="0" sec="1412918064"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="58.102.152.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917272"/>
        <to usec="0" sec="1412918045"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="179.136.111.11" src_port="8000" dst_port="6000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917224"/>
        <to usec="0" sec="1412917227"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="223.217.14.77" dst_ip="179.136.109.44" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917731"/>
        <to usec="0" sec="1412917733"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="169.167.97.164" proto="icmp"/>
        </slice>
        <from usec="0" sec="1412917910"/>
        <to usec="0" sec="1412917921"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="11.147.200.194" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917683"/>
        <to usec="0" sec="1412917729"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="132.38.189.13" dst_ip="223.172.63.38" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917347"/>
        <to usec="0" sec="1412917798"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="122.25.233.39" dst_ip="130.149.193.236" src_port="65009" dst_port="80"/>
            <filter src_ip="122.25.233.39" dst_ip="130.149.193.236" src_port="61313" dst_port="80"/>
            <filter src_ip="122.25.233.19" dst_ip="130.149.193.236" src_port="63006" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917723"/>
        <to usec="0" sec="1412917727"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.20.15.154" dst_ip="179.136.246.140" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917729"/>
        <to usec="0" sec="1412917731"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.165.223"/>
        </slice>
        <from usec="0" sec="1412917699"/>
        <to usec="0" sec="1412917746"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="78.180.160.4" dst_ip="208.247.32.24" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917795"/>
        <to usec="0" sec="1412917797"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.78.16" dst_ip="58.102.146.6" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917745"/>
        <to usec="0" sec="1412918054"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="209.50.183.198" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917440"/>
        <to usec="0" sec="1412918048"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.136.25.107" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917723"/>
        <to usec="0" sec="1412917725"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.149.96.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917276"/>
        <to usec="0" sec="1412917773"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="179.136.91.215"/>
        </slice>
        <from usec="0" sec="1412917674"/>
        <to usec="0" sec="1412917676"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.132.170.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917711"/>
        <to usec="0" sec="1412917760"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="102.105.25.32" dst_ip="208.247.36.171" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917718"/>
        <to usec="0" sec="1412917721"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.231.117" dst_ip="53.36.8.117" dst_port="443"/>
            <filter src_ip="130.149.231.117" dst_ip="53.36.66.3" dst_port="443"/>
            <filter src_ip="130.149.231.117" dst_ip="53.36.8.116" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917205"/>
        <to usec="0" sec="1412917790"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="130.149.79.72"/>
        </slice>
        <from usec="0" sec="1412918049"/>
        <to usec="0" sec="1412918051"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.115.119" dst_ip="49.55.86.202" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917893"/>
        <to usec="0" sec="1412917915"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.82.29.16" dst_ip="53.11.235.216" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917792"/>
        <to usec="0" sec="1412917794"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="179.136.178.154"/>
        </slice>
        <from usec="0" sec="1412917735"/>
        <to usec="0" sec="1412917738"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.37.225"/>
        </slice>
        <from usec="0" sec="1412917688"/>
        <to usec="0" sec="1412917690"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="208.247.43.151" dst_ip="208.247.43.151"/>
        </slice>
        <from usec="0" sec="1412917627"/>
        <to usec="0" sec="1412918000"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.245.164"/>
        </slice>
        <from usec="0" sec="1412917700"/>
        <to usec="0" sec="1412917759"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="53.2.146.149"/>
        </slice>
        <from usec="0" sec="1412917704"/>
        <to usec="0" sec="1412917706"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.57.26.206"/>
        </slice>
        <from usec="0" sec="1412917600"/>
        <to usec="0" sec="1412917603"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.247.36.171" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917701"/>
        <to usec="0" sec="1412918099"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.98.213"/>
        </slice>
        <from usec="0" sec="1412917386"/>
        <to usec="0" sec="1412917388"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="208.247.32.19"/>
        </slice>
        <from usec="0" sec="1412917419"/>
        <to usec="0" sec="1412918058"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="125.186.107.199" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918054"/>
        <to usec="0" sec="1412918067"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="164.234.146.32" dst_port="139" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917885"/>
        <to usec="0" sec="1412917887"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="106.135.3.9" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917921"/>
        <to usec="0" sec="1412917945"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.162.242.225"/>
        </slice>
        <from usec="0" sec="1412918039"/>
        <to usec="0" sec="1412918061"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.55.140.21" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917631"/>
        <to usec="0" sec="1412917632"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.189.208.196"/>
        </slice>
        <from usec="0" sec="1412917342"/>
        <to usec="0" sec="1412917353"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="62.118.191.209" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918057"/>
        <to usec="0" sec="1412918065"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.219.139.171" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917822"/>
        <to usec="0" sec="1412917829"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.177.127.216" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918039"/>
        <to usec="0" sec="1412918041"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.209.83.20" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918034"/>
        <to usec="0" sec="1412918045"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="137.86.76.114" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917497"/>
        <to usec="0" sec="1412917524"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="200.79.212.171" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918011"/>
        <to usec="0" sec="1412918016"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.109.85.25" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917205"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="110.55.99.3" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917765"/>
        <to usec="0" sec="1412917778"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="196.158.10.50" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917387"/>
        <to usec="0" sec="1412917396"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="161.150.212.21" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917907"/>
        <to usec="0" sec="1412917935"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.209.214.109" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917391"/>
        <to usec="0" sec="1412917395"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="115.181.210.172"/>
        </slice>
        <from usec="0" sec="1412917883"/>
        <to usec="0" sec="1412917895"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="117.26.238.152"/>
        </slice>
        <from usec="0" sec="1412917683"/>
        <to usec="0" sec="1412917692"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.228.69.0" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918050"/>
        <to usec="0" sec="1412918052"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.201.53.43" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917618"/>
        <to usec="0" sec="1412917620"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="111.220.187.236" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918084"/>
        <to usec="0" sec="1412918097"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.15.176.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917730"/>
        <to usec="0" sec="1412917734"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.39.168.247" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917301"/>
        <to usec="0" sec="1412917315"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.226.132.141"/>
        </slice>
        <from usec="0" sec="1412917206"/>
        <to usec="0" sec="1412917212"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.107.232.30"/>
        </slice>
        <from usec="0" sec="1412917203"/>
        <to usec="0" sec="1412917213"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="105.204.244.21" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917618"/>
        <to usec="0" sec="1412917625"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.205.9.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917204"/>
        <to usec="0" sec="1412917206"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.53.208.19" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917405"/>
        <to usec="0" sec="1412917414"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.123.8.81" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918099"/>
        <to usec="0" sec="1412918101"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.220.166.48" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918023"/>
        <to usec="0" sec="1412918033"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="210.9.24.162" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917668"/>
        <to usec="0" sec="1412917696"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.36.185.102" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917560"/>
        <to usec="0" sec="1412917567"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="29.39.237.82" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917341"/>
        <to usec="0" sec="1412917344"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.78.151.174"/>
        </slice>
        <from usec="0" sec="1412918084"/>
        <to usec="0" sec="1412918097"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="162.167.21.163"/>
        </slice>
        <from usec="0" sec="1412917420"/>
        <to usec="0" sec="1412917431"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="98.175.205.10" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917391"/>
        <to usec="0" sec="1412917393"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.45.75.33"/>
        </slice>
        <from usec="0" sec="1412917627"/>
        <to usec="0" sec="1412917637"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="201.165.144.190"/>
        </slice>
        <from usec="0" sec="1412917263"/>
        <to usec="0" sec="1412917280"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="165.67.29.169"/>
        </slice>
        <from usec="0" sec="1412917726"/>
        <to usec="0" sec="1412917728"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="132.38.244.7" dst_ip="151.109.212.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917714"/>
        <to usec="0" sec="1412917840"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="160.95.10.13" proto="icmp"/>
        </slice>
        <from usec="0" sec="1412917320"/>
        <to usec="0" sec="1412917329"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="4.189.208.196" proto="icmp"/>
        </slice>
        <from usec="0" sec="1412917342"/>
        <to usec="0" sec="1412917353"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="29.39.237.82"/>
        </slice>
        <from usec="0" sec="1412917346"/>
        <to usec="0" sec="1412917348"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="94.244.106.200" proto="icmp"/>
        </slice>
        <from usec="0" sec="1412917324"/>
        <to usec="0" sec="1412917325"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="62.118.191.209" src_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412918057"/>
        <to usec="0" sec="1412918065"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="5.0.104.197"/>
        </slice>
        <from usec="0" sec="1412917623"/>
        <to usec="0" sec="1412917626"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.57.150.76"/>
        </slice>
        <from usec="0" sec="1412917262"/>
        <to usec="0" sec="1412917265"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="174.217.211.117" proto="icmp"/>
        </slice>
        <from usec="0" sec="1412917388"/>
        <to usec="0" sec="1412917390"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="53.36.8.116"/>
        </slice>
        <from usec="0" sec="1412917788"/>
        <to usec="0" sec="1412918059"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="116.234.90.61"/>
        </slice>
        <from usec="0" sec="1412917849"/>
        <to usec="0" sec="1412917851"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="179.136.20.28" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917256"/>
        <to usec="0" sec="1412917258"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.149.72.101"/>
        </slice>
        <from usec="0" sec="1412917558"/>
        <to usec="0" sec="1412917560"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="130.149.231.96"/>
        </slice>
        <from usec="0" sec="1412917628"/>
        <to usec="0" sec="1412917630"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.4.237.68"/>
        </slice>
        <from usec="0" sec="1412917614"/>
        <to usec="0" sec="1412917617"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.132.105.181"/>
        </slice>
        <from usec="0" sec="1412917808"/>
        <to usec="0" sec="1412917810"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="179.136.108.154"/>
        </slice>
        <from usec="0" sec="1412917618"/>
        <to usec="0" sec="1412917620"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.142.193.144"/>
        </slice>
        <from usec="0" sec="1412917797"/>
        <to usec="0" sec="1412917799"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="179.136.234.113"/>
        </slice>
        <from usec="0" sec="1412917761"/>
        <to usec="0" sec="1412917763"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="132.38.197.75" dst_port="80"/>
            <filter dst_ip="11.136.210.194" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917493"/>
        <to usec="0" sec="1412917805"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="219.242.113.121"/>
        </slice>
        <from usec="0" sec="1412918029"/>
        <to usec="0" sec="1412918031"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="130.103.230.23"/>
        </slice>
        <from usec="0" sec="1412918095"/>
        <to usec="0" sec="1412918097"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.113.180.3"/>
        </slice>
        <from usec="0" sec="1412917785"/>
        <to usec="0" sec="1412917787"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.54.38" dst_ip="114.228.51.19" src_port="59914" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917203"/>
        <to usec="0" sec="1412917931"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="132.38.62.117" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917233"/>
        <to usec="0" sec="1412917803"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.53.133" dst_ip="11.156.103.196" src_port="61715" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917757"/>
        <to usec="0" sec="1412917810"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.136.176.202" dst_ip="212.107.205.171" src_port="62662" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917311"/>
        <to usec="0" sec="1412918063"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="130.149.78.47" src_port="55180"/>
        </slice>
        <from usec="0" sec="1412917696"/>
        <to usec="0" sec="1412917790"/>
    </anomaly>
    <anomaly type="notice" value="0.749125,1.391540,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.79.40" dst_ip="201.156.37.75" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917764"/>
        <to usec="0" sec="1412917765"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.136.133.148" dst_ip="53.60.242.197" src_port="54792" dst_port="25"/>
        </slice>
        <from usec="0" sec="1412917425"/>
        <to usec="0" sec="1412917429"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="110.21.60.184" dst_ip="208.247.34.135" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917202"/>
        <to usec="0" sec="1412917206"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.57.131.7" dst_ip="108.25.196.34" src_port="10117" dst_port="14962"/>
        </slice>
        <from usec="0" sec="1412917496"/>
        <to usec="0" sec="1412917524"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.36.21" dst_ip="219.168.217.118" src_port="62452" dst_port="5116"/>
        </slice>
        <from usec="0" sec="1412917375"/>
        <to usec="0" sec="1412917795"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="122.25.233.19" dst_ip="130.149.193.236" src_port="63006" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917262"/>
        <to usec="0" sec="1412917931"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.57.145.8" dst_ip="11.147.1.31" src_port="49522" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917202"/>
        <to usec="0" sec="1412917712"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="179.136.178.23" dst_ip="53.11.220.41" src_port="55744" dst_port="443"/>
            <filter src_ip="179.136.178.23" dst_ip="53.60.240.124" src_port="56674" dst_port="443"/>
            <filter src_ip="179.136.178.23" dst_ip="53.60.240.125" src_port="56673" dst_port="443"/>
            <filter src_ip="179.136.178.23" dst_ip="181.225.170.152" src_port="56610" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917205"/>
        <to usec="0" sec="1412917832"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="24.178.8.3" dst_ip="148.113.47.182" src_port="60841" dst_port="20133"/>
        </slice>
        <from usec="0" sec="1412917718"/>
        <to usec="0" sec="1412917720"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.89.213" dst_ip="119.89.59.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917231"/>
        <to usec="0" sec="1412917845"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="179.136.176.144" dst_ip="171.2.216.107" src_port="63412" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917728"/>
        <to usec="0" sec="1412917797"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="130.149.74.136" dst_ip="20.168.172.211" src_port="54187" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917671"/>
        <to usec="0" sec="1412917701"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.149.49.192" dst_ip="11.147.192.49" src_port="52881" dst_port="443"/>
            <filter src_ip="130.149.49.192" dst_ip="11.147.192.49" src_port="52880" dst_port="443"/>
            <filter src_ip="130.149.49.192" dst_ip="11.147.192.49" src_port="52879" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917373"/>
        <to usec="0" sec="1412918054"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="208.247.46.62" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917240"/>
        <to usec="0" sec="1412918065"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="132.38.53.10" dst_port="443"/>
            <filter src_ip="132.38.53.10" dst_ip="11.186.2.102" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917539"/>
        <to usec="0" sec="1412917754"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.82.85.81" dst_ip="1.225.27.133" dst_port="80"/>
            <filter src_ip="130.82.85.81" dst_ip="4.145.188.184" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917731"/>
        <to usec="0" sec="1412918084"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="179.136.137.197" src_port="63139"/>
            <filter src_ip="179.136.137.197" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917670"/>
        <to usec="0" sec="1412917674"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.247.38.134" dst_ip="207.92.173.239" src_port="58508" dst_port="16683"/>
        </slice>
        <from usec="0" sec="1412917777"/>
        <to usec="0" sec="1412917779"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="209.57.131.215" dst_ip="181.225.170.163" src_port="49297" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917670"/>
        <to usec="0" sec="1412917804"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="208.247.38.162" dst_ip="186.181.160.41" src_port="51410" dst_port="57195"/>
        </slice>
        <from usec="0" sec="1412917680"/>
        <to usec="0" sec="1412917682"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.155.147.145" dst_ip="208.247.44.27" src_port="53979" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917691"/>
        <to usec="0" sec="1412917701"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="132.38.168.37" dst_ip="184.177.90.144" src_port="62798" dst_port="443"/>
            <filter src_ip="132.38.168.37" dst_ip="184.177.90.144" src_port="61454" dst_port="443"/>
            <filter src_ip="132.38.168.37" dst_ip="13.58.167.37" src_port="62155" dst_port="443"/>
            <filter src_ip="132.38.168.37" dst_ip="114.231.98.178" src_port="63090" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917719"/>
        <to usec="0" sec="1412917728"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="173.124.54.107"/>
        </slice>
        <from usec="0" sec="1412917629"/>
        <to usec="0" sec="1412917638"/>
    </anomaly>
    <anomaly type="notice" value="0.749125,1.391540,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="179.136.111.11" src_port="8000" dst_port="6000" proto="tcp"/>
        </slice>
        <from usec="0" sec="1412917224"/>
        <to usec="0" sec="1412917227"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.149.96.166" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917262"/>
        <to usec="0" sec="1412917803"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,999,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="65.74.137.67" dst_ip="148.113.165.199" src_port="52124" dst_port="25"/>
            <filter src_ip="200.163.204.123" dst_ip="148.113.165.199" src_port="40130" dst_port="25"/>
        </slice>
        <from usec="0" sec="1412917910"/>
        <to usec="0" sec="1412917916"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="130.149.52.32" dst_ip="93.159.25.120" dst_port="80"/>
            <filter src_ip="130.149.52.32" dst_ip="93.159.25.122" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917590"/>
        <to usec="0" sec="1412917806"/>
    </anomaly>
    <anomaly type="notice" value="0.514563,1.351150,503,1 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="69.177.54.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917761"/>
    </anomaly>
    <anomaly type="notice" value="0.775374,1.369360,503,1 1 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="130.149.53.96" dst_ip="107.73.93.20" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917687"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.749125,1.391540,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="208.247.43.151" dst_ip="208.247.43.151"/>
        </slice>
        <from usec="0" sec="1412917627"/>
        <to usec="0" sec="1412917999"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.65.32.106" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917324"/>
        <to usec="0" sec="1412917326"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.30.25.84" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917625"/>
        <to usec="0" sec="1412917638"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="101.214.17.56" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412918019"/>
        <to usec="0" sec="1412918041"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.95.10.13" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917320"/>
        <to usec="0" sec="1412917328"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="68.114.76.98" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917293"/>
        <to usec="0" sec="1412917319"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.155.49.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917758"/>
        <to usec="0" sec="1412917774"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="173.124.54.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917629"/>
        <to usec="0" sec="1412917638"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="14.189.7.35" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917749"/>
        <to usec="0" sec="1412917761"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="186.174.201.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917512"/>
        <to usec="0" sec="1412917526"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.86.208.139" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917789"/>
        <to usec="0" sec="1412917791"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.60.202.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917217"/>
        <to usec="0" sec="1412917228"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.40.111.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917661"/>
        <to usec="0" sec="1412917664"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.187.68.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917202"/>
        <to usec="0" sec="1412917219"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.167.2.70" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917827"/>
        <to usec="0" sec="1412917839"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="97.46.215.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917885"/>
        <to usec="0" sec="1412917895"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="134.167.79.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917253"/>
        <to usec="0" sec="1412917257"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="60.85.230.57" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917439"/>
        <to usec="0" sec="1412917453"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="108.209.206.124" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917254"/>
        <to usec="0" sec="1412917273"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.217.211.117" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917386"/>
        <to usec="0" sec="1412917390"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="42.163.50.115" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917783"/>
        <to usec="0" sec="1412917797"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.231.225.135" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917749"/>
        <to usec="0" sec="1412917761"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.3.232.67" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917455"/>
        <to usec="0" sec="1412917469"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="169.181.34.38" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917684"/>
        <to usec="0" sec="1412917688"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.249.61.208" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917425"/>
        <to usec="0" sec="1412917429"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="188.33.205.129" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917806"/>
        <to usec="0" sec="1412917808"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="99.20.192.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917834"/>
        <to usec="0" sec="1412917846"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="104.2.122.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917734"/>
        <to usec="0" sec="1412917761"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="166.117.106.210" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917556"/>
        <to usec="0" sec="1412917566"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="33.177.87.1" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917878"/>
        <to usec="0" sec="1412917889"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="94.244.106.200" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917323"/>
        <to usec="0" sec="1412917708"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.84.102.73" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917796"/>
        <to usec="0" sec="1412917798"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="169.181.34.38"/>
        </slice>
        <from usec="0" sec="1412917684"/>
        <to usec="0" sec="1412917688"/>
    </anomaly>
    <anomaly type="notice" value="0.775374,1.369360,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="203.249.61.208"/>
        </slice>
        <from usec="0" sec="1412917425"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="162.167.21.163"/>
        </slice>
        <from usec="0" sec="1412917420"/>
        <to usec="0" sec="1412917431"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.2.109" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917405"/>
        <to usec="0" sec="1412917407"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="116.222.106.222"/>
        </slice>
        <from usec="0" sec="1412917999"/>
        <to usec="0" sec="1412918001"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="99.65.32.106"/>
        </slice>
        <from usec="0" sec="1412917325"/>
        <to usec="0" sec="1412917326"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="160.45.75.33"/>
        </slice>
        <from usec="0" sec="1412917625"/>
        <to usec="0" sec="1412917638"/>
    </anomaly>
    <anomaly type="notice" value="0.734342,1.367390,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.146.136.224" dst_port="23"/>
        </slice>
        <from usec="0" sec="1412917668"/>
        <to usec="0" sec="1412917680"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="223.145.56.79" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917678"/>
        <to usec="0" sec="1412918009"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.50.147.120" src_port="443"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="105.128.105.2" dst_ip="132.38.89.49" src_port="80"/>
            <filter src_ip="105.128.105.2" dst_ip="132.38.122.216" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917735"/>
        <to usec="0" sec="1412917738"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="130.149.79.17" src_port="23355"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="70.246.95.168" src_port="10704"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.178.160" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.199.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.49.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.150.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.225" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_port="4935" dst_port="3389"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="33.95.180.54" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917246"/>
        <to usec="0" sec="1412917292"/>
    </anomaly>
    <anomaly type="notice" value="0.942880,1.463380,010,1 0 0 0 0 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="208.247.32.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412918055"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.103.230.186" src_port="53"/>
            <filter dst_ip="130.103.230.186" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.249.228.219"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.247.34.160"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="78.33.103.239"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.178.160" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.196.11"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.82.120.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="110.24.14.117" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="110.24.14.117" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="161.142.2.150" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,504,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="69.177.54.220" dst_port="443"/>
            <filter dst_ip="69.177.54.220" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.8.232.88"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.670519,1.372570,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.36.20" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412918059"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.46.152" src_port="123" dst_port="123"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="125.173.138.9"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.199.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="92.233.186.233"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.187.119" dst_port="37541"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.114.56"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.57.155.71" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.514563,1.351150,504,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="58.102.152.26" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917756"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.63.81" dst_port="50000"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.775374,1.369360,503,1 1 0 0 0 0 1 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="207.4.182.111" dst_ip="148.113.193.194" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917987"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.204"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="111.42.133.111" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="111.42.133.111" dst_port="53"/>
            <filter src_ip="209.57.144.2" dst_ip="111.42.133.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.514563,1.351150,503,1 0 0 0 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="132.38.95.51" dst_ip="222.17.181.114"/>
            <filter src_ip="132.38.95.51" dst_port="80"/>
            <filter dst_ip="222.17.181.114" dst_port="80"/>
            <filter dst_ip="222.17.181.125" dst_port="80"/>
            <filter dst_ip="222.17.181.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917325"/>
        <to usec="0" sec="1412917713"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.3.26"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.670519,1.372570,999,1 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.49.141" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917410"/>
        <to usec="0" sec="1412917940"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.136.175" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.247.106"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.18.69"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,010,0 0 0 0 0 0 1 1 1 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="117.116.68.25" dst_ip="208.247.38.37" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="208.247.44.65" dst_port="61963"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.35.57" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,504,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.113.47.169" src_port="80"/>
            <filter dst_ip="148.113.47.169" src_port="443"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.150.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.203"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.57.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.11.1" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.886581,1.390500,999,1 1 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="130.149.221.64" src_port="3389"/>
        </slice>
        <from usec="0" sec="1412917396"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="49.44.41.223"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.147.42" dst_port="64644"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="179.136.144.173"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.44.177" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="178.105.143.136"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="6.37.177.89" dst_ip="148.113.193.29" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="37.9.23.201"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="201.244.65.111"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="101.207.161.53" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.670519,1.372570,502,1 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="68.217.88.197" dst_ip="222.60.117.185" src_port="22"/>
            <filter src_ip="68.217.88.192" dst_ip="222.60.117.185" src_port="22"/>
            <filter src_ip="68.217.88.193" dst_ip="222.60.117.185" src_port="22"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412918060"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,010,0 0 0 0 0 0 1 1 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="148.113.107.112" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="132.38.214.152"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="132.38.214.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.214.25" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.100.176" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.886581,1.390500,999,1 1 0 0 0 0 1 1 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="208.247.42.134" src_port="53"/>
            <filter src_ip="208.247.42.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917713"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="177.158.128.54" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.134" src_port="53"/>
            <filter dst_ip="208.247.42.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.199.39" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="114.49.206.134" dst_ip="130.103.230.71" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="219.194.171.11" dst_ip="208.247.45.66" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.103.230.186"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.178.160" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.942880,1.463380,010,1 0 0 0 0 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="208.247.44.35" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412918045"/>
    </anomaly>
    <anomaly type="notice" value="0.852134,1.466210,999,0 0 0 0 0 0 1 0 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="110.24.14.117" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="110.24.14.117" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.158" src_port="53"/>
            <filter dst_ip="209.57.151.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="161.142.2.150" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.144.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.514563,1.351150,504,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="58.102.152.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917758"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="125.173.138.9"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.198.190" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.199.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.775374,1.369360,503,1 1 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.247.34.135" src_port="80"/>
            <filter dst_ip="208.247.34.135" src_port="443"/>
        </slice>
        <from usec="0" sec="1412917278"/>
        <to usec="0" sec="1412918063"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="97.103.109.81" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.247.42.194"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.149.58.224"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.204"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.70.50"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.57.29.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,503,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.113.47.169" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.50.173.237" src_port="443"/>
            <filter dst_ip="209.50.173.237" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.71.247"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="206.180.111.98"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.46.79" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.670519,1.372570,999,1 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.193.34" dst_port="12391"/>
            <filter src_ip="100.30.138.251" dst_ip="148.113.193.34" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="208.247.90.167"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="101.40.109.213"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.24.62"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.46.177"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.514563,1.351150,504,1 0 0 0 0 0 1 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.25.6" dst_ip="172.11.120.45" dst_port="443"/>
            <filter src_ip="209.50.147.120" dst_ip="172.11.120.45" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917752"/>
        <to usec="0" sec="1412918036"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="78.33.103.238"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.187.119" dst_port="37541"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,010,0 0 0 0 0 0 1 1 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="208.247.44.34" dst_ip="192.168.114.56" dst_port="80"/>
            <filter src_ip="208.247.44.34" dst_ip="192.168.114.56" dst_port="81"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="196.109.85.25"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.228.204.59"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,010,0 0 0 0 0 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="148.113.107.112" dst_port="8888"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.247.43.5" src_port="53"/>
            <filter dst_ip="208.247.43.5"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.177.97" src_port="53"/>
            <filter dst_ip="148.113.177.97"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.224.157.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.50.161.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="5.78.199.183" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="5.78.199.183" dst_port="53"/>
            <filter src_ip="209.57.144.2" dst_ip="5.78.199.183" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.196.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="110.24.14.116" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="110.24.14.116" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.149.98.101" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.149.98.98" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.158" src_port="53"/>
            <filter dst_ip="209.57.151.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.158" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="110.24.14.112" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="110.24.14.112" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="177.158.128.54" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.8.232.88" src_port="53"/>
            <filter dst_ip="148.8.232.88" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.36.22" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.151" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.134" src_port="53"/>
            <filter dst_ip="208.247.42.134" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.50.147.120" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.202.242" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.202.242" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.216.72" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.216.72" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.202.241" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.202.241" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.216.73" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.216.73" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.202.240" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.202.240" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.216.77" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.216.77" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.2.253" dst_ip="64.99.202.245" src_port="53"/>
            <filter src_ip="130.132.155.43" dst_ip="64.99.202.245" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.57.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.190.48" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.639985,1.394710,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.24.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.24.49" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,504,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="209.57.25.6" dst_ip="117.80.110.236" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,010,0 0 0 0 0 0 1 0 0 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="208.247.32.19" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.103.230.186" src_port="53"/>
            <filter dst_ip="130.103.230.186" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="130.149.101.130"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="219.224.157.241" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.50.161.35" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.196.11" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.639985,1.394710,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.82.120.212" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.247.32.24" src_port="80"/>
            <filter dst_ip="208.247.32.24"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.152" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="69.177.49.44" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="64.99.219.52" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.129.8" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="0.176.52.195"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,051,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="208.247.37.61" dst_ip="125.173.138.9" dst_port="21"/>
            <filter src_ip="209.57.142.20" dst_ip="125.173.138.9" dst_port="21"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.247.40.185"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,010,0 0 0 0 0 0 1 1 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="208.247.44.34" dst_ip="192.168.114.56" dst_port="80"/>
            <filter src_ip="208.247.44.34" dst_ip="192.168.114.56" dst_port="81"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="97.103.109.81" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.136.130" src_port="53"/>
            <filter dst_ip="148.113.136.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="111.74.210.65" dst_ip="208.247.33.38" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.149.98.96" dst_ip="223.45.192.6" dst_port="53"/>
            <filter src_ip="130.149.98.99" dst_ip="223.45.192.6" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.204" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="5.198.33.229" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.228.193" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.198.113" dst_port="10228"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.149.98.96" dst_ip="223.45.192.42" dst_port="53"/>
            <filter src_ip="130.149.98.99" dst_ip="223.45.192.42" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.639985,1.394710,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.247.106"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.639985,1.394710,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.18.69"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="179.136.111.11" dst_ip="101.207.161.53" dst_port="8000"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.57.29.129" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,020,0 0 0 0 0 0 1 1 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="104.42.201.156"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.150.108" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.43.225" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.202" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.57.20" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.168.96" dst_port="14986"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="208.247.47.10"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.131.177" dst_port="56724"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.639985,1.394710,999,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.114"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.150" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.46.102" dst_port="26123"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.178.3" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.24.62" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.97" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.82" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.178.160" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.56.3" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="132.38.85.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.57.151.158" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,503,0 0 0 0 0 0 1 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.11.131" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.198.190" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="179.136.199.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="209.50.147.120" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.686678,1.396640,999,0 0 0 0 0 0 1 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917561"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.103.230.186" src_port="53"/>
            <filter dst_ip="130.103.230.186" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.128.178.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="78.33.103.239"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="132.38.85.159" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="132.38.100.176" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="130.82.120.213" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="5.78.199.177" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="5.78.199.177" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.942880,1.463380,010,1 0 0 0 0 0 1 1 1 0 0 0,DDoSSYN">
        <slice>
            <filter dst_ip="208.247.44.63" dst_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412918034"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="214.142.193.229" dst_ip="148.113.68.234" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="209.50.147.120" src_port="80"/>
            <filter dst_ip="209.50.147.120" src_port="53"/>
            <filter dst_ip="209.50.147.120" src_port="443"/>
        </slice>
        <from usec="0" sec="1412917426"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.136.130" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="170.118.41.154"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917607"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,503,0 0 0 0 0 0 1 1 1 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="4.188.48.219" dst_ip="148.113.193.194" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="209.57.151.158" dst_ip="111.42.133.111" dst_port="53"/>
            <filter src_ip="209.50.161.46" dst_ip="111.42.133.111" dst_port="53"/>
            <filter src_ip="209.57.144.2" dst_ip="111.42.133.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.814976,1.464370,999,0 0 0 0 0 0 0 0 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.199.39"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,502,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="68.217.88.197" dst_ip="222.60.117.185" src_port="22"/>
            <filter src_ip="68.217.88.193" dst_ip="222.60.117.185" src_port="22"/>
            <filter src_ip="68.217.88.192" dst_ip="222.60.117.185" src_port="22"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="148.113.212.171" dst_port="43457"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,503,0 0 0 0 0 0 1 1 1 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="148.113.201.123" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,mptpla">
        <slice>
            <filter src_ip="130.132.155.43" dst_ip="64.99.216.74" src_port="53"/>
            <filter src_ip="130.132.2.253" dst_ip="64.99.216.74" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="219.194.171.11" dst_ip="208.247.45.2" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.814976,1.464370,999,0 0 0 0 0 0 0 0 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="148.113.177.202"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.852134,1.466210,999,0 0 0 0 0 0 1 0 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.123" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.814976,1.464370,999,0 0 0 0 0 0 0 0 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.114" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.44.177" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.67" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,020,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="178.105.143.136"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917472"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.45.66" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,503,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="49.219.44.36" dst_ip="130.128.178.28" src_port="80"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="13.42.175.91" dst_ip="148.113.182.159" src_port="80" dst_port="57510"/>
        </slice>
        <from usec="0" sec="1412917414"/>
        <to usec="0" sec="1412918045"/>
    </anomaly>
    <anomaly type="notice" value="0.880147,1.349120,503,1 0 0 0 0 0 0 0 0 1 0 0,ntscACK">
        <slice>
            <filter src_ip="132.38.130.165" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,999,0 0 0 0 0 0 0 0 0 1 0 0,ntscUDP">
        <slice>
            <filter src_ip="130.149.120.59"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="130.149.49.91"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,504,0 0 0 0 0 0 1 1 1 0 0 0,mptp">
        <slice>
            <filter dst_ip="64.99.193.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.535449,1.375590,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="208.247.45.87"/>
        </slice>
        <from usec="0" sec="1412917831"/>
        <to usec="0" sec="1412917877"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,010,0 0 0 0 0 0 0 0 0 1 0 0,ntscSYNt">
        <slice>
            <filter src_ip="222.35.206.3"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="208.247.42.128" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.954439,1.485980,999,0 0 0 0 0 0 1 1 1 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="132.38.214.23" src_port="53"/>
        </slice>
        <from usec="0" sec="1412917201"/>
        <to usec="0" sec="1412917247"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="130.82.21.182" src_port="80"/>
            <filter dst_ip="130.82.21.182" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="65.74.101.19" src_port="80"/>
            <filter src_ip="5.2.239.45" dst_ip="130.149.231.117"/>
            <filter src_ip="5.2.239.45" dst_ip="130.149.230.203"/>
            <filter src_ip="5.2.239.45" src_port="80"/>
            <filter dst_ip="130.149.231.117" src_port="80"/>
            <filter dst_ip="130.149.230.203" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.450365,1.349150,999,1 0 0 0 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="178.105.143.136" dst_port="53"/>
        </slice>
        <from usec="0" sec="1412917202"/>
        <to usec="0" sec="1412918099"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,504,0 0 0 0 0 0 0 0 0 1 0 0,mptp">
        <slice>
            <filter dst_ip="179.136.111.1" src_port="443"/>
            <filter dst_ip="179.136.111.1" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,999,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="179.136.45.105"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.46.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.23.84" src_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.880147,1.349120,999,1 0 0 0 0 0 0 0 0 1 0 0,ptmp">
        <slice>
            <filter src_ip="130.149.78.48" src_port="26085"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,504,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="187.64.170.85"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="220.106.1.219"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,999,0 0 0 0 0 0 0 0 0 1 0 0,salphfl">
        <slice>
            <filter dst_ip="222.4.154.155"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,999,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="207.57.135.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,502,0 0 0 0 0 0 0 0 0 1 0 0,mptpla">
        <slice>
            <filter dst_ip="204.203.58.29"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.880147,1.349120,504,1 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter src_ip="132.38.57.95" dst_ip="49.147.60.88" dst_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,504,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="11.147.200.182"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.880147,1.349120,504,1 0 0 0 0 0 0 0 0 1 0 0,mptmp">
        <slice>
            <filter src_ip="132.38.197.6" dst_port="443"/>
            <filter dst_ip="11.147.163.137" dst_port="443"/>
            <filter dst_ip="11.147.163.137" dst_port="80"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,502,0 0 0 0 0 0 0 0 0 1 0 0,alphfl">
        <slice>
            <filter dst_ip="95.234.12.130"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
    <anomaly type="notice" value="0.670519,1.372570,504,1 0 0 0 0 0 1 1 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="132.38.197.4"/>
            <filter src_ip="223.145.56.78" src_port="443"/>
        </slice>
        <from usec="0" sec="1412917391"/>
        <to usec="0" sec="1412918008"/>
    </anomaly>
    <anomaly type="notice" value="0.892519,1.373600,503,0 0 0 0 0 0 0 0 0 1 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="179.136.109.120" src_port="80"/>
            <filter dst_ip="179.136.109.120" src_port="443"/>
        </slice>
        <from usec="0" sec="0"/>
        <to usec="0" sec="2147483645"/>
    </anomaly>
</admd:annotation>
