<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="135.193.10.210" dst_ip="61.12.105.70" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682584"/>
        <to usec="0" sec="1415682620"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.106.64" dst_ip="177.80.129.195" src_port="57139" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682549"/>
        <to usec="0" sec="1415682655"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.30.194.192" dst_ip="152.29.66.196" src_port="64493" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682649"/>
        <to usec="0" sec="1415682651"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.194.197" dst_ip="9.166.155.200" src_port="62763" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682779"/>
        <to usec="0" sec="1415682804"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.65.50.151"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.112.58.192" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682632"/>
        <to usec="0" sec="1415682772"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.19.139" dst_ip="179.19.207.163" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682411"/>
        <to usec="0" sec="1415682414"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.114.35.98"/>
        </slice>
        <from usec="0" sec="1415682720"/>
        <to usec="0" sec="1415682886"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="205.7.29.11"/>
        </slice>
        <from usec="0" sec="1415682664"/>
        <to usec="0" sec="1415682666"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.243.56.27" dst_ip="218.254.17.188" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682660"/>
        <to usec="0" sec="1415682662"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.112.126.178"/>
        </slice>
        <from usec="0" sec="1415682514"/>
        <to usec="0" sec="1415682519"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="193.116.238.97"/>
        </slice>
        <from usec="0" sec="1415682866"/>
        <to usec="0" sec="1415682868"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.158.22" dst_ip="192.3.247.193" src_port="49482" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682077"/>
        <to usec="0" sec="1415682079"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.235.185" dst_ip="9.167.140.84" src_port="55072" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682164"/>
        <to usec="0" sec="1415682894"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="18.217.69.208" dst_ip="215.114.34.140" src_port="53387" dst_port="5829" proto="udp"/>
        </slice>
        <from usec="0" sec="1415682505"/>
        <to usec="0" sec="1415682516"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.25.160" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682438"/>
        <to usec="0" sec="1415682683"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.150.220" dst_ip="172.17.158.155" src_port="52924" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682284"/>
        <to usec="0" sec="1415682834"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.12.122" dst_ip="81.102.210.51" src_port="52175" dst_port="1119" proto="udp"/>
        </slice>
        <from usec="0" sec="1415682161"/>
        <to usec="0" sec="1415682891"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.186.254.145" dst_ip="143.32.47.72" src_port="443" dst_port="58221" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.193.144" dst_ip="53.87.141.238" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682239"/>
        <to usec="0" sec="1415682324"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.243.249.110" dst_ip="147.240.93.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682678"/>
        <to usec="0" sec="1415682681"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="222.155.33.23" dst_ip="186.30.15.193" src_port="80" dst_port="50791" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682567"/>
        <to usec="0" sec="1415682568"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.167.137.5" dst_ip="147.240.201.177" src_port="443" dst_port="49249" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682370"/>
        <to usec="0" sec="1415682372"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.243.177.97"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682014"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.151.120" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682712"/>
        <to usec="0" sec="1415682715"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="92.226.214.188" dst_ip="149.243.21.146" src_port="80" dst_port="3486" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682230"/>
        <to usec="0" sec="1415682232"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="147.240.204.217" dst_ip="50.7.128.52" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682610"/>
        <to usec="0" sec="1415682611"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.148.79" dst_ip="114.243.29.244" src_port="51756" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682349"/>
        <to usec="0" sec="1415682386"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="148.125.148.235"/>
        </slice>
        <from usec="0" sec="1415682712"/>
        <to usec="0" sec="1415682714"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="9.167.137.116" dst_ip="147.240.151.244" src_port="443" dst_port="50527" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682451"/>
        <to usec="0" sec="1415682453"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.27.40" dst_ip="9.180.29.237" src_port="59502" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682151"/>
        <to usec="0" sec="1415682153"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.114.34.237" dst_ip="164.98.244.80" src_port="49521" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682546"/>
        <to usec="0" sec="1415682547"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.254.227" dst_ip="15.110.16.164" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682007"/>
        <to usec="0" sec="1415682395"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.228.2.176" dst_ip="61.12.106.14" src_port="54461" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682506"/>
        <to usec="0" sec="1415682517"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.114.35.9" dst_ip="208.65.106.10" src_port="51888" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682802"/>
        <to usec="0" sec="1415682804"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.193.112.128" dst_ip="1.31.81.85" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682693"/>
        <to usec="0" sec="1415682695"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.243.230.107" dst_ip="145.213.228.80" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682251"/>
        <to usec="0" sec="1415682442"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="83.240.252.101"/>
        </slice>
        <from usec="0" sec="1415682553"/>
        <to usec="0" sec="1415682555"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.140.97" dst_ip="9.167.25.169" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682609"/>
        <to usec="0" sec="1415682618"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="206.140.199.126" dst_ip="147.239.119.65" dst_port="443" proto="udp"/>
        </slice>
        <from usec="0" sec="1415682127"/>
        <to usec="0" sec="1415682883"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.114.34.212"/>
        </slice>
        <from usec="0" sec="1415682263"/>
        <to usec="0" sec="1415682529"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.149.48"/>
        </slice>
        <from usec="0" sec="1415682119"/>
        <to usec="0" sec="1415682121"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.167.129.225" dst_ip="149.243.37.110" src_port="443" dst_port="53743" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682851"/>
        <to usec="0" sec="1415682853"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.112.114.242"/>
        </slice>
        <from usec="0" sec="1415682180"/>
        <to usec="0" sec="1415682182"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.126.129" dst_ip="45.193.208.228" src_port="54582" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682294"/>
        <to usec="0" sec="1415682296"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.146.190"/>
        </slice>
        <from usec="0" sec="1415682879"/>
        <to usec="0" sec="1415682881"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.195.204"/>
        </slice>
        <from usec="0" sec="1415682451"/>
        <to usec="0" sec="1415682453"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.15.193" dst_ip="222.155.33.23" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682183"/>
        <to usec="0" sec="1415682805"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.12.177" dst_ip="208.43.116.86" src_port="49813" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682154"/>
        <to usec="0" sec="1415682580"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="201.96.189.159" dst_ip="214.133.85.85" src_port="37516" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682118"/>
        <to usec="0" sec="1415682129"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.228.139.201" dst_ip="1.31.81.85" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682439"/>
        <to usec="0" sec="1415682754"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.200.222" dst_ip="222.155.33.45" src_port="65232" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682431"/>
        <to usec="0" sec="1415682650"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.148.204" dst_ip="172.17.158.222" src_port="53451" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682677"/>
        <to usec="0" sec="1415682881"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.139.111" dst_ip="223.28.52.5" src_port="53685" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682162"/>
        <to usec="0" sec="1415682325"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.114.35.179"/>
        </slice>
        <from usec="0" sec="1415682803"/>
        <to usec="0" sec="1415682894"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.134.182" dst_ip="9.167.27.32" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682843"/>
        <to usec="0" sec="1415682857"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.143.132"/>
        </slice>
        <from usec="0" sec="1415682230"/>
        <to usec="0" sec="1415682734"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.116.46.10" dst_ip="214.133.91.131" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682776"/>
        <to usec="0" sec="1415682778"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.141.155" dst_ip="177.80.129.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682781"/>
        <to usec="0" sec="1415682796"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="117.127.112.172"/>
        </slice>
        <from usec="0" sec="1415682328"/>
        <to usec="0" sec="1415682330"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.195.71" dst_ip="53.87.3.49" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682831"/>
        <to usec="0" sec="1415682868"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.146.83" dst_ip="61.12.107.184" src_port="49336" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682019"/>
        <to usec="0" sec="1415682021"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.15.235" dst_ip="193.68.18.171" src_port="55003" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682005"/>
        <to usec="0" sec="1415682858"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.167.140.119" dst_ip="147.240.201.177" src_port="443" dst_port="49251" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.86.208.218" dst_ip="9.128.102.212" src_port="55394" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682427"/>
        <to usec="0" sec="1415682429"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.151.244"/>
        </slice>
        <from usec="0" sec="1415682280"/>
        <to usec="0" sec="1415682459"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.195.94"/>
        </slice>
        <from usec="0" sec="1415682679"/>
        <to usec="0" sec="1415682683"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.112.114.98" dst_ip="193.68.18.229" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682622"/>
        <to usec="0" sec="1415682624"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.243.248.227" dst_ip="179.19.249.49" src_port="59951" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682681"/>
        <to usec="0" sec="1415682684"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="205.136.3.56" dst_ip="147.112.14.75" src_port="59035" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682690"/>
        <to usec="0" sec="1415682805"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.114.35.253" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682618"/>
        <to usec="0" sec="1415682842"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="215.114.139.188" dst_ip="193.66.138.117" src_port="80" dst_port="39683" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682158"/>
        <to usec="0" sec="1415682160"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.207.245" dst_ip="150.204.252.217" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682691"/>
        <to usec="0" sec="1415682895"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.145.14" dst_ip="222.155.33.42" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682409"/>
        <to usec="0" sec="1415682674"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="186.30.14.211" dst_ip="207.140.174.243" src_port="55707" dst_port="1040" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682887"/>
        <to usec="0" sec="1415682889"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.127.123" dst_ip="53.87.1.118" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682240"/>
        <to usec="0" sec="1415682242"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.243.235.90" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682312"/>
        <to usec="0" sec="1415682885"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.132.164"/>
        </slice>
        <from usec="0" sec="1415682127"/>
        <to usec="0" sec="1415682890"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.200.147" dst_ip="9.182.155.43" src_port="49193" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682301"/>
        <to usec="0" sec="1415682305"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.141.212"/>
        </slice>
        <from usec="0" sec="1415682330"/>
        <to usec="0" sec="1415682653"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.77.122" dst_ip="70.95.94.105" src_port="63478" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682681"/>
        <to usec="0" sec="1415682686"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.93.205" dst_ip="113.144.56.48" src_port="80" dst_port="61231" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.22.15" dst_ip="169.220.32.231" src_port="4631" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682201"/>
        <to usec="0" sec="1415682296"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.140.226" dst_ip="169.168.176.131" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682741"/>
        <to usec="0" sec="1415682895"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.243.16.186"/>
        </slice>
        <from usec="0" sec="1415682514"/>
        <to usec="0" sec="1415682516"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.193.200.149" dst_ip="178.149.154.54" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682197"/>
        <to usec="0" sec="1415682640"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="149.243.6.251" dst_ip="193.115.95.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682308"/>
        <to usec="0" sec="1415682741"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="181.250.15.118" dst_ip="143.32.184.130" src_port="44583" dst_port="27809" proto="udp"/>
        </slice>
        <from usec="0" sec="1415682663"/>
        <to usec="0" sec="1415682676"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.229.174" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682570"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.140.195" dst_ip="53.85.82.193" src_port="53224" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682483"/>
        <to usec="0" sec="1415682491"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.71.123" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682612"/>
        <to usec="0" sec="1415682712"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.236.80.246" dst_ip="214.133.80.242" src_port="49615" dst_port="143" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682090"/>
        <to usec="0" sec="1415682817"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.114.49.248" dst_ip="193.68.18.128" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682121"/>
        <to usec="0" sec="1415682274"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.143.231"/>
        </slice>
        <from usec="0" sec="1415682299"/>
        <to usec="0" sec="1415682336"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.132.150" dst_ip="45.199.14.55" src_port="59302" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682642"/>
        <to usec="0" sec="1415682644"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="153.124.79.210" dst_ip="147.240.182.230" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682305"/>
        <to usec="0" sec="1415682307"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="148.125.149.17" dst_ip="61.12.107.254" src_port="51651" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682581"/>
        <to usec="0" sec="1415682695"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="193.82.73.56" dst_ip="193.82.73.56" src_port="4289" proto="udp"/>
        </slice>
        <from usec="0" sec="1415682004"/>
        <to usec="0" sec="1415682895"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.30.162.247"/>
        </slice>
        <from usec="0" sec="1415682894"/>
        <to usec="0" sec="1415682897"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="177.127.156.134" dst_port="80"/>
            <filter src_ip="215.114.136.7" dst_ip="177.127.156.134" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682868"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.193.168.253" dst_ip="114.72.127.222" dst_port="443"/>
            <filter src_ip="135.193.168.253" dst_ip="114.72.127.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682062"/>
        <to usec="0" sec="1415682482"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="15.13.255.48" dst_ip="15.13.255.48" src_port="40732" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682231"/>
        <to usec="0" sec="1415682782"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="61.12.100.85" dst_ip="61.12.100.85" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682337"/>
        <to usec="0" sec="1415682900"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="70.92.98.243" dst_ip="70.92.98.243" src_port="52732" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682255"/>
        <to usec="0" sec="1415682899"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="214.133.94.78"/>
        </slice>
        <from usec="0" sec="1415682595"/>
        <to usec="0" sec="1415682597"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.243.119.32"/>
        </slice>
        <from usec="0" sec="1415682029"/>
        <to usec="0" sec="1415682031"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.12.107.235" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682631"/>
        <to usec="0" sec="1415682684"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="147.240.201.177" dst_ip="9.167.140.205" src_port="49243" dst_port="443"/>
            <filter src_ip="215.114.61.24" dst_ip="9.167.140.205" src_port="61653" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682186"/>
        <to usec="0" sec="1415682235"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.96.204.172" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682898"/>
    </anomaly>
    <anomaly type="notice" value="0.588126,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="147.240.231.34" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682164"/>
        <to usec="0" sec="1415682715"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="215.114.139.38"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="214.133.83.49" dst_port="53" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682642"/>
        <to usec="0" sec="1415682645"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="147.240.231.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682399"/>
        <to usec="0" sec="1415682715"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.133.83.59"/>
        </slice>
        <from usec="0" sec="1415682646"/>
        <to usec="0" sec="1415682648"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,503,1 1 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.126.136" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682665"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="15.14.90.245" dst_ip="15.14.90.245" src_port="52731" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682355"/>
        <to usec="0" sec="1415682890"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="64.32.177.252"/>
        </slice>
        <from usec="0" sec="1415682437"/>
        <to usec="0" sec="1415682439"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="190.25.234.2"/>
        </slice>
        <from usec="0" sec="1415682341"/>
        <to usec="0" sec="1415682343"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="177.80.129.195" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682898"/>
        <to usec="0" sec="1415682900"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="145.213.228.80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682730"/>
        <to usec="0" sec="1415682742"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.162.245"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682014"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.145.138" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682295"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="147.240.141.28" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682572"/>
        <to usec="0" sec="1415682892"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.99.134"/>
        </slice>
        <from usec="0" sec="1415682756"/>
        <to usec="0" sec="1415682758"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.145.229"/>
        </slice>
        <from usec="0" sec="1415682690"/>
        <to usec="0" sec="1415682692"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="186.30.14.58"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682489"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="149.243.5.12" dst_ip="9.82.117.237" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682507"/>
        <to usec="0" sec="1415682508"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.86.208.89"/>
        </slice>
        <from usec="0" sec="1415682127"/>
        <to usec="0" sec="1415682129"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.30.222.100"/>
        </slice>
        <from usec="0" sec="1415682160"/>
        <to usec="0" sec="1415682166"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.195.121" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682480"/>
        <to usec="0" sec="1415682638"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.142.246" dst_ip="177.101.168.48" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682306"/>
        <to usec="0" sec="1415682343"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.90.25" dst_ip="45.76.218.114" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682305"/>
        <to usec="0" sec="1415682307"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.142.166"/>
        </slice>
        <from usec="0" sec="1415682187"/>
        <to usec="0" sec="1415682189"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.132.188"/>
        </slice>
        <from usec="0" sec="1415682375"/>
        <to usec="0" sec="1415682377"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="150.24.92.88"/>
        </slice>
        <from usec="0" sec="1415682583"/>
        <to usec="0" sec="1415682585"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.114.35.196" dst_ip="166.238.113.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682291"/>
        <to usec="0" sec="1415682807"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.30.162.249" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682645"/>
        <to usec="0" sec="1415682673"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="106.98.53.160" dst_ip="106.98.53.160" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682081"/>
        <to usec="0" sec="1415682898"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="143.32.138.41" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682414"/>
        <to usec="0" sec="1415682833"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="222.145.161.224" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682393"/>
        <to usec="0" sec="1415682395"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="147.240.146.200" dst_ip="50.24.54.111"/>
            <filter src_ip="147.240.146.200" dst_ip="50.24.94.195"/>
            <filter src_ip="147.240.146.200" dst_port="443"/>
            <filter src_ip="186.30.114.114" dst_ip="50.24.54.111"/>
            <filter src_ip="186.30.114.114" dst_ip="50.24.94.195"/>
            <filter src_ip="186.30.114.114" dst_port="443"/>
            <filter src_ip="147.240.201.167" dst_ip="50.24.54.111"/>
            <filter src_ip="147.240.201.167" dst_port="443"/>
            <filter dst_ip="50.24.54.111" dst_port="443"/>
            <filter dst_ip="50.24.94.195" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682035"/>
        <to usec="0" sec="1415682647"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="214.133.94.126" dst_ip="214.133.94.126"/>
        </slice>
        <from usec="0" sec="1415682471"/>
        <to usec="0" sec="1415682611"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="64.168.88.203" src_port="12200" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682729"/>
        <to usec="0" sec="1415682756"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="223.135.7.31" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682585"/>
        <to usec="0" sec="1415682603"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.217.127.9" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682572"/>
        <to usec="0" sec="1415682583"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.147.46.208"/>
        </slice>
        <from usec="0" sec="1415682127"/>
        <to usec="0" sec="1415682141"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.228.37.47"/>
        </slice>
        <from usec="0" sec="1415682885"/>
        <to usec="0" sec="1415682887"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.98.126.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682537"/>
        <to usec="0" sec="1415682556"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.167.0.188" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682397"/>
        <to usec="0" sec="1415682407"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.71.104.108" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682030"/>
        <to usec="0" sec="1415682057"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="121.231.185.105" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682535"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="0.214.41.28" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682636"/>
        <to usec="0" sec="1415682651"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.89.22.186" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682297"/>
        <to usec="0" sec="1415682305"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.242.239.223" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682254"/>
        <to usec="0" sec="1415682256"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="1.102.52.239" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682638"/>
        <to usec="0" sec="1415682640"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="206.164.4.97" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682816"/>
        <to usec="0" sec="1415682827"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.90.61.139" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682725"/>
        <to usec="0" sec="1415682726"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="94.149.146.240" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682154"/>
        <to usec="0" sec="1415682164"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="204.64.7.146" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682037"/>
        <to usec="0" sec="1415682040"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="219.54.239.60"/>
        </slice>
        <from usec="0" sec="1415682664"/>
        <to usec="0" sec="1415682676"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.55.111.222" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1415682794"/>
        <to usec="0" sec="1415682805"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.243.150.6"/>
        </slice>
        <from usec="0" sec="1415682380"/>
        <to usec="0" sec="1415682384"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="1.102.52.239" proto="icmp"/>
        </slice>
        <from usec="0" sec="1415682638"/>
        <to usec="0" sec="1415682640"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="179.26.8.64" dst_ip="186.30.14.58" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="186.30.100.196"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,999,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="100.171.80.78"/>
        </slice>
        <from usec="0" sec="1415682178"/>
        <to usec="0" sec="1415682180"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="162.178.45.92" proto="icmp"/>
        </slice>
        <from usec="0" sec="1415682748"/>
        <to usec="0" sec="1415682749"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="81.89.22.186" proto="icmp"/>
        </slice>
        <from usec="0" sec="1415682297"/>
        <to usec="0" sec="1415682305"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.62.188.220" proto="icmp"/>
        </slice>
        <from usec="0" sec="1415682639"/>
        <to usec="0" sec="1415682641"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="160.44.254.169" proto="icmp"/>
        </slice>
        <from usec="0" sec="1415682687"/>
        <to usec="0" sec="1415682689"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,999,1 1 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.32.94.199" src_port="80"/>
            <filter dst_ip="143.32.94.199" dst_port="995"/>
            <filter dst_ip="143.32.94.199" dst_port="28253"/>
        </slice>
        <from usec="0" sec="1415682014"/>
        <to usec="0" sec="1415682893"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="149.243.230.31"/>
        </slice>
        <from usec="0" sec="1415682492"/>
        <to usec="0" sec="1415682554"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="203.176.38.112"/>
        </slice>
        <from usec="0" sec="1415682354"/>
        <to usec="0" sec="1415682398"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.4.3.17"/>
        </slice>
        <from usec="0" sec="1415682714"/>
        <to usec="0" sec="1415682716"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="186.30.47.204"/>
        </slice>
        <from usec="0" sec="1415682780"/>
        <to usec="0" sec="1415682782"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="202.228.215.137"/>
        </slice>
        <from usec="0" sec="1415682039"/>
        <to usec="0" sec="1415682041"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.114.61.74"/>
        </slice>
        <from usec="0" sec="1415682360"/>
        <to usec="0" sec="1415682362"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="135.193.194.158"/>
        </slice>
        <from usec="0" sec="1415682881"/>
        <to usec="0" sec="1415682884"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.114.34.124"/>
        </slice>
        <from usec="0" sec="1415682816"/>
        <to usec="0" sec="1415682818"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="207.184.186.217"/>
        </slice>
        <from usec="0" sec="1415682203"/>
        <to usec="0" sec="1415682205"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.147.246"/>
        </slice>
        <from usec="0" sec="1415682627"/>
        <to usec="0" sec="1415682630"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="215.114.35.236"/>
        </slice>
        <from usec="0" sec="1415682827"/>
        <to usec="0" sec="1415682829"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="147.86.212.103"/>
        </slice>
        <from usec="0" sec="1415682791"/>
        <to usec="0" sec="1415682793"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="147.240.144.245" dst_ip="9.167.140.119"/>
            <filter dst_ip="9.167.140.119" dst_port="80"/>
            <filter dst_ip="9.167.140.119" dst_port="443"/>
            <filter src_ip="147.240.144.245" dst_ip="9.167.137.5" dst_port="80"/>
            <filter src_ip="147.240.144.245" dst_ip="9.167.129.221" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682372"/>
        <to usec="0" sec="1415682711"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="143.32.138.51"/>
        </slice>
        <from usec="0" sec="1415682352"/>
        <to usec="0" sec="1415682354"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="1.58.150.70" src_port="80"/>
            <filter src_ip="1.58.150.70" dst_ip="147.240.107.73" src_port="443"/>
            <filter src_ip="1.58.150.70" dst_ip="149.243.60.119" src_port="443"/>
        </slice>
        <from usec="0" sec="1415682831"/>
        <to usec="0" sec="1415682833"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,901,1 1 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="147.240.138.114" dst_ip="50.58.92.226" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682610"/>
        <to usec="0" sec="1415682612"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,503,0 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.120.156.166" dst_ip="32.74.30.99" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682011"/>
        <to usec="0" sec="1415682698"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,504,0 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.145.154" dst_ip="9.167.25.57" src_port="58365" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682151"/>
        <to usec="0" sec="1415682153"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.139.9" dst_ip="70.92.98.92" src_port="46638" dst_port="443"/>
            <filter src_ip="149.243.139.9" dst_ip="70.92.98.92" src_port="46637" dst_port="443"/>
            <filter src_ip="149.243.139.9" dst_ip="70.92.98.92" src_port="46636" dst_port="443"/>
            <filter src_ip="149.243.139.9" dst_ip="70.92.98.92" src_port="46635" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682408"/>
        <to usec="0" sec="1415682693"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.240.139.235" dst_ip="2.101.105.10" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682732"/>
        <to usec="0" sec="1415682734"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.112.112.111" dst_ip="9.65.50.151" src_port="50145" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682117"/>
        <to usec="0" sec="1415682512"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.100.172" dst_ip="61.200.227.103" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682039"/>
        <to usec="0" sec="1415682828"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.138.86" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682333"/>
        <to usec="0" sec="1415682889"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,999,0 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="50.163.26.218" dst_ip="215.114.143.156" src_port="60102" dst_port="25"/>
        </slice>
        <from usec="0" sec="1415682117"/>
        <to usec="0" sec="1415682120"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.144.52" dst_ip="219.166.102.74" src_port="56801" dst_port="80"/>
            <filter src_ip="147.240.144.52" dst_ip="219.166.102.74" src_port="56800" dst_port="80"/>
            <filter src_ip="147.240.144.52" dst_ip="218.58.90.134" src_port="56767" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682695"/>
        <to usec="0" sec="1415682697"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.214.142" dst_ip="53.87.1.97" src_port="62984" dst_port="443"/>
            <filter src_ip="149.243.214.142" dst_ip="53.87.1.97" src_port="62983" dst_port="443"/>
            <filter src_ip="149.243.214.142" dst_ip="53.87.1.97" src_port="62981" dst_port="443"/>
            <filter src_ip="149.243.214.142" dst_ip="15.15.202.123" src_port="62982" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682284"/>
        <to usec="0" sec="1415682441"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.214.143" dst_ip="15.13.49.70" src_port="63200" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682250"/>
        <to usec="0" sec="1415682781"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="74.114.236.222" dst_ip="215.114.143.156" src_port="49300" dst_port="25"/>
        </slice>
        <from usec="0" sec="1415682209"/>
        <to usec="0" sec="1415682211"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="206.116.211.12" dst_ip="214.133.94.78" src_port="63647" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682281"/>
        <to usec="0" sec="1415682283"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.114.40.210" dst_ip="53.85.208.90" dst_port="443"/>
            <filter src_ip="215.114.40.210" dst_ip="210.26.135.63" dst_port="443"/>
            <filter src_ip="215.114.40.210" dst_ip="15.14.90.34" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682710"/>
        <to usec="0" sec="1415682894"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.147.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682270"/>
        <to usec="0" sec="1415682586"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.231.32" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682797"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.86.208.82" dst_ip="189.121.11.77" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682164"/>
        <to usec="0" sec="1415682886"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.197.29" dst_ip="17.214.28.29" src_port="50246" dst_port="60801"/>
        </slice>
        <from usec="0" sec="1415682254"/>
        <to usec="0" sec="1415682256"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,503,1 1 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.145.216" dst_ip="110.221.90.230" src_port="50305" dst_port="80"/>
            <filter src_ip="147.240.145.216" dst_ip="110.221.88.157" src_port="50306" dst_port="80"/>
            <filter src_ip="147.240.145.216" dst_ip="110.221.90.145" src_port="50307" dst_port="80"/>
            <filter src_ip="147.240.145.216" dst_ip="17.250.159.11" src_port="50105" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682350"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="186.30.102.211" dst_ip="61.12.102.211" src_port="59749" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682004"/>
        <to usec="0" sec="1415682035"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,503,1 1 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.83.218.141" dst_ip="214.133.85.227" src_port="53525" dst_port="80"/>
            <filter src_ip="203.83.218.141" dst_ip="214.133.85.227" src_port="53522" dst_port="80"/>
            <filter src_ip="203.83.218.141" dst_ip="214.133.85.227" src_port="53521" dst_port="80"/>
            <filter src_ip="203.83.218.141" dst_ip="214.133.85.227" src_port="53518" dst_port="80"/>
            <filter src_ip="203.83.218.141" dst_ip="214.133.85.227" src_port="53517" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682894"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.114.34.198" dst_ip="116.171.160.81" dst_port="80"/>
            <filter src_ip="215.114.34.198" dst_ip="192.192.193.24" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682785"/>
        <to usec="0" sec="1415682861"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.127.164" dst_ip="53.87.141.83" src_port="55951" dst_port="443"/>
            <filter src_ip="149.243.127.164" dst_ip="53.87.141.83" src_port="55950" dst_port="443"/>
            <filter src_ip="149.243.127.164" dst_ip="53.87.141.83" src_port="55949" dst_port="443"/>
            <filter src_ip="149.243.127.164" dst_ip="53.87.141.83" src_port="55948" dst_port="443"/>
            <filter src_ip="149.243.127.164" dst_ip="53.87.141.83" src_port="55943" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682535"/>
        <to usec="0" sec="1415682721"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.83.211.48" dst_ip="214.133.86.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682248"/>
        <to usec="0" sec="1415682250"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.117.145.143" dst_ip="215.114.143.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682742"/>
        <to usec="0" sec="1415682745"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.139.97" dst_ip="53.87.180.60" src_port="51118" dst_port="443"/>
            <filter src_ip="147.240.139.97" dst_ip="53.87.180.60" src_port="51117" dst_port="443"/>
            <filter src_ip="147.240.139.97" dst_ip="53.87.180.60" src_port="51116" dst_port="443"/>
            <filter src_ip="147.240.139.97" dst_ip="53.87.180.60" src_port="51115" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682322"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.240.97.117" dst_ip="70.95.77.71" src_port="58306" dst_port="443"/>
            <filter src_ip="147.240.97.117" dst_ip="70.95.77.71" src_port="58304" dst_port="443"/>
            <filter src_ip="147.240.97.117" dst_ip="70.95.77.71" src_port="58303" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682608"/>
        <to usec="0" sec="1415682764"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,502,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="94.110.101.61" dst_ip="147.239.119.94" src_port="60615" dst_port="22"/>
        </slice>
        <from usec="0" sec="1415682236"/>
        <to usec="0" sec="1415682741"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.23.59" dst_ip="179.19.223.99" src_port="52989" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682727"/>
        <to usec="0" sec="1415682729"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.107.11" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682431"/>
        <to usec="0" sec="1415682456"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.148.252" dst_ip="218.31.220.232" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682171"/>
        <to usec="0" sec="1415682668"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.182.230" dst_ip="15.29.187.246" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682337"/>
        <to usec="0" sec="1415682444"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.243.37.84" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682251"/>
        <to usec="0" sec="1415682791"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,503,0 1 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="149.243.118.231" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682049"/>
        <to usec="0" sec="1415682880"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.243.64.80" dst_ip="192.94.33.44" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682030"/>
        <to usec="0" sec="1415682782"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.243.229.129" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682488"/>
        <to usec="0" sec="1415682640"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.14.213" dst_ip="168.68.78.110" src_port="63820" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682171"/>
        <to usec="0" sec="1415682885"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.119.248.113" dst_ip="215.120.186.195" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682646"/>
        <to usec="0" sec="1415682648"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.68.108" dst_ip="113.235.10.195" src_port="61974" dst_port="443"/>
            <filter src_ip="149.243.68.108" dst_ip="113.235.10.195" src_port="61963" dst_port="443"/>
            <filter src_ip="149.243.68.108" dst_ip="113.235.10.195" src_port="61961" dst_port="443"/>
            <filter src_ip="149.243.68.108" dst_ip="113.235.10.195" src_port="61960" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682615"/>
        <to usec="0" sec="1415682862"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.74.159" dst_ip="113.235.10.202" dst_port="443"/>
            <filter src_ip="149.243.74.159" dst_ip="113.235.10.217" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682084"/>
        <to usec="0" sec="1415682882"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="203.113.235.221" dst_ip="147.240.254.201" src_port="54222" dst_port="80"/>
            <filter src_ip="203.113.235.221" dst_ip="147.240.254.201" src_port="52739" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682462"/>
        <to usec="0" sec="1415682490"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="215.114.63.4" dst_ip="193.68.18.81" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682122"/>
        <to usec="0" sec="1415682825"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="147.240.139.58" dst_ip="177.80.129.196" src_port="63110" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682349"/>
        <to usec="0" sec="1415682421"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.114.43.123" dst_ip="208.112.242.249" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682181"/>
        <to usec="0" sec="1415682892"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="149.243.189.224" dst_ip="9.167.71.203" src_port="57994" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682642"/>
        <to usec="0" sec="1415682654"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.194.36" dst_ip="189.121.60.163" src_port="61685" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682401"/>
        <to usec="0" sec="1415682427"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="85.119.74.27" dst_ip="215.114.143.132" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682262"/>
        <to usec="0" sec="1415682580"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="177.124.69.18" dst_ip="186.30.205.212" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682559"/>
        <to usec="0" sec="1415682794"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="168.83.60.179" dst_ip="143.32.159.169" src_port="33633" dst_port="993"/>
        </slice>
        <from usec="0" sec="1415682652"/>
        <to usec="0" sec="1415682683"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="186.30.115.10" dst_ip="223.241.238.194" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682190"/>
        <to usec="0" sec="1415682884"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="195.115.229.155" src_port="6000" dst_port="1433"/>
        </slice>
        <from usec="0" sec="1415682298"/>
        <to usec="0" sec="1415682300"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="166.255.3.54" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682462"/>
        <to usec="0" sec="1415682474"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.179.226.192" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682883"/>
        <to usec="0" sec="1415682885"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.204.46.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682606"/>
        <to usec="0" sec="1415682611"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.195.229" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682463"/>
        <to usec="0" sec="1415682660"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="167.162.187.25" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682684"/>
        <to usec="0" sec="1415682692"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="95.96.85.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682026"/>
        <to usec="0" sec="1415682038"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.79.189.191" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682081"/>
        <to usec="0" sec="1415682092"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="170.25.247.75" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682677"/>
        <to usec="0" sec="1415682693"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.177.37.223" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682397"/>
        <to usec="0" sec="1415682416"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.200.31.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682021"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.172.225.25" dst_port="2222"/>
        </slice>
        <from usec="0" sec="1415682354"/>
        <to usec="0" sec="1415682502"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="109.91.166.248" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682783"/>
        <to usec="0" sec="1415682785"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="12.112.57.111" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682158"/>
        <to usec="0" sec="1415682183"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.118.253.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682219"/>
        <to usec="0" sec="1415682242"/>
    </anomaly>
    <anomaly type="notice" value="0.667732,1.389930,010,0 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.173.253.22" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1415682818"/>
        <to usec="0" sec="1415682873"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="7.33.157.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682437"/>
        <to usec="0" sec="1415682451"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="160.44.254.169" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682683"/>
        <to usec="0" sec="1415682690"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="6.181.71.145" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682117"/>
        <to usec="0" sec="1415682130"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="7.204.46.144"/>
        </slice>
        <from usec="0" sec="1415682606"/>
        <to usec="0" sec="1415682611"/>
    </anomaly>
    <anomaly type="notice" value="0.811377,1.361890,020,1 1 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="205.242.239.223"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="166.255.3.54"/>
        </slice>
        <from usec="0" sec="1415682462"/>
        <to usec="0" sec="1415682475"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="167.179.226.192"/>
        </slice>
        <from usec="0" sec="1415682883"/>
        <to usec="0" sec="1415682885"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="174.136.147.20" dst_port="23"/>
        </slice>
        <from usec="0" sec="1415682268"/>
        <to usec="0" sec="1415682281"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="215.114.34.3" dst_ip="90.227.161.122" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682411"/>
        <to usec="0" sec="1415682806"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="215.114.136.7" dst_ip="169.220.32.253" dst_port="80"/>
            <filter src_ip="215.120.186.184" dst_ip="169.220.32.253" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682011"/>
        <to usec="0" sec="1415682391"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682108"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682648"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.145.197"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682104"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.144.96"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682105"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="149.243.58.151"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682108"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="222.132.77.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682118"/>
        <to usec="0" sec="1415682859"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.151.123"/>
        </slice>
        <from usec="0" sec="1415682003"/>
        <to usec="0" sec="1415682106"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.240.200.78"/>
        </slice>
        <from usec="0" sec="1415682011"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="99.72.112.232"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="9.244.18.187"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,054,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="50.54.21.160"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682183"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="143.97.48.12"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682193"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.129.151"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="28.12.109.222"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.240.138.120" src_port="64099"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="147.228.47.32"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.112.22.131"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682194"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,002,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="201.137.245.99"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="214.133.89.24"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.147.174"/>
        </slice>
        <from usec="0" sec="1415682006"/>
        <to usec="0" sec="1415682197"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="149.243.239.165"/>
        </slice>
        <from usec="0" sec="1415682007"/>
        <to usec="0" sec="1415682192"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.228.32"/>
        </slice>
        <from usec="0" sec="1415682008"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="106.88.189.100"/>
        </slice>
        <from usec="0" sec="1415682009"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,504,1 1 0 1 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.12.105.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682015"/>
        <to usec="0" sec="1415682810"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.193.151"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682194"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.30.19.1"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682196"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="186.30.195.75"/>
        </slice>
        <from usec="0" sec="1415682015"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="67.126.101.243"/>
        </slice>
        <from usec="0" sec="1415682020"/>
        <to usec="0" sec="1415682194"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.142.71"/>
        </slice>
        <from usec="0" sec="1415682022"/>
        <to usec="0" sec="1415682191"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.137.169"/>
        </slice>
        <from usec="0" sec="1415682023"/>
        <to usec="0" sec="1415682170"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="53.9.146.118"/>
        </slice>
        <from usec="0" sec="1415682048"/>
        <to usec="0" sec="1415682146"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.129.97.67"/>
        </slice>
        <from usec="0" sec="1415682049"/>
        <to usec="0" sec="1415682198"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="158.67.234.204"/>
        </slice>
        <from usec="0" sec="1415682094"/>
        <to usec="0" sec="1415682117"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.141.202"/>
        </slice>
        <from usec="0" sec="1415682179"/>
        <to usec="0" sec="1415682196"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="53.70.112.192"/>
        </slice>
        <from usec="0" sec="1415682184"/>
        <to usec="0" sec="1415682197"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.240.201.187"/>
        </slice>
        <from usec="0" sec="1415682007"/>
        <to usec="0" sec="1415682257"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.91.26"/>
        </slice>
        <from usec="0" sec="1415682010"/>
        <to usec="0" sec="1415682288"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.30.132.177"/>
        </slice>
        <from usec="0" sec="1415682013"/>
        <to usec="0" sec="1415682264"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="67.114.212.159"/>
        </slice>
        <from usec="0" sec="1415682038"/>
        <to usec="0" sec="1415682117"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.57.105.119"/>
        </slice>
        <from usec="0" sec="1415682072"/>
        <to usec="0" sec="1415682123"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="67.178.10.24"/>
        </slice>
        <from usec="0" sec="1415682170"/>
        <to usec="0" sec="1415682174"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="90.246.128.60"/>
        </slice>
        <from usec="0" sec="1415682193"/>
        <to usec="0" sec="1415682211"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,002,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="3.126.24.67"/>
        </slice>
        <from usec="0" sec="1415682265"/>
        <to usec="0" sec="1415682288"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="9.233.15.169"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682376"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="97.159.21.116" dst_ip="214.133.83.124" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682340"/>
        <to usec="0" sec="1415682539"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="61.12.100.108"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,053,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="215.114.43.135"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="124.139.35.131"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="149.243.91.31" dst_port="80"/>
            <filter src_ip="149.243.91.31" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.240.148.182"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682376"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="114.107.14.134"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,504,1 1 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="215.114.139.115" dst_port="443"/>
            <filter src_ip="215.114.139.115" dst_ip="172.17.148.228" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682752"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.228.159.233"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682373"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="9.74.35.33"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="136.214.217.36"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682459"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="179.195.85.25"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682276"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.235.249"/>
        </slice>
        <from usec="0" sec="1415682004"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="115.152.117.209"/>
        </slice>
        <from usec="0" sec="1415682005"/>
        <to usec="0" sec="1415682371"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="149.243.59.105"/>
        </slice>
        <from usec="0" sec="1415682006"/>
        <to usec="0" sec="1415682354"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="114.122.71.204"/>
        </slice>
        <from usec="0" sec="1415682007"/>
        <to usec="0" sec="1415682376"/>
    </anomaly>
    <anomaly type="notice" value="0.779916,1.355670,504,1 1 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter dst_ip="61.12.100.58" dst_port="443"/>
            <filter dst_ip="61.12.100.64" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682900"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.30.242.157"/>
        </slice>
        <from usec="0" sec="1415682012"/>
        <to usec="0" sec="1415682316"/>
    </anomaly>
    <anomaly type="notice" value="0.588126,1.372660,503,1 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.145.192" dst_port="443"/>
            <filter src_ip="147.240.145.192" dst_ip="200.5.56.84" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682019"/>
        <to usec="0" sec="1415682547"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.174.212.158"/>
        </slice>
        <from usec="0" sec="1415682025"/>
        <to usec="0" sec="1415682370"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.149.151"/>
        </slice>
        <from usec="0" sec="1415682041"/>
        <to usec="0" sec="1415682335"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="42.197.204.195"/>
        </slice>
        <from usec="0" sec="1415682138"/>
        <to usec="0" sec="1415682311"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="203.243.103.85"/>
        </slice>
        <from usec="0" sec="1415682202"/>
        <to usec="0" sec="1415682221"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="205.17.168.49"/>
        </slice>
        <from usec="0" sec="1415682221"/>
        <to usec="0" sec="1415682378"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="196.4.80.156"/>
        </slice>
        <from usec="0" sec="1415682245"/>
        <to usec="0" sec="1415682260"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="53.9.177.254"/>
        </slice>
        <from usec="0" sec="1415682247"/>
        <to usec="0" sec="1415682262"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="126.53.194.112"/>
        </slice>
        <from usec="0" sec="1415682288"/>
        <to usec="0" sec="1415682370"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.240.141.203"/>
        </slice>
        <from usec="0" sec="1415682295"/>
        <to usec="0" sec="1415682375"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.82.186.83"/>
        </slice>
        <from usec="0" sec="1415682306"/>
        <to usec="0" sec="1415682308"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.62.145.202"/>
        </slice>
        <from usec="0" sec="1415682340"/>
        <to usec="0" sec="1415682364"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.174.114.190"/>
        </slice>
        <from usec="0" sec="1415682348"/>
        <to usec="0" sec="1415682353"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="53.104.61.181" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682468"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.193.3.165" dst_ip="114.72.123.175" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682823"/>
        <to usec="0" sec="1415682825"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSSYN">
        <slice>
            <filter src_ip="186.30.12.10"/>
        </slice>
        <from usec="0" sec="1415682008"/>
        <to usec="0" sec="1415682462"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.204.28"/>
        </slice>
        <from usec="0" sec="1415682017"/>
        <to usec="0" sec="1415682442"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.38.207"/>
        </slice>
        <from usec="0" sec="1415682260"/>
        <to usec="0" sec="1415682447"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.147.142.58"/>
        </slice>
        <from usec="0" sec="1415682286"/>
        <to usec="0" sec="1415682313"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="85.222.200.184"/>
        </slice>
        <from usec="0" sec="1415682327"/>
        <to usec="0" sec="1415682328"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.201.157"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="61.13.155.177"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="169.149.171.20" src_port="33404" dst_port="123"/>
            <filter src_ip="169.149.171.20" src_port="51386" dst_port="123"/>
            <filter src_ip="169.149.171.20" src_port="41720" dst_port="123"/>
            <filter src_ip="169.149.171.20" src_port="39387" dst_port="123"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="118.130.51.180"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="215.114.136.251"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.112.115.91"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="186.30.57.78"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="147.240.145.239"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,502,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="144.157.252.49"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="108.157.149.31"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="215.120.189.119"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682556"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="147.240.200.195"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682554"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="86.87.154.238"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="135.193.14.245"/>
        </slice>
        <from usec="0" sec="1415682003"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="73.172.61.41"/>
        </slice>
        <from usec="0" sec="1415682005"/>
        <to usec="0" sec="1415682477"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.239.174"/>
        </slice>
        <from usec="0" sec="1415682006"/>
        <to usec="0" sec="1415682557"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.149.146"/>
        </slice>
        <from usec="0" sec="1415682011"/>
        <to usec="0" sec="1415682539"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="214.116.252.232"/>
        </slice>
        <from usec="0" sec="1415682224"/>
        <to usec="0" sec="1415682474"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="65.45.88.235"/>
        </slice>
        <from usec="0" sec="1415682273"/>
        <to usec="0" sec="1415682473"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.10.2.182"/>
        </slice>
        <from usec="0" sec="1415682324"/>
        <to usec="0" sec="1415682458"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="95.183.24.17"/>
        </slice>
        <from usec="0" sec="1415682325"/>
        <to usec="0" sec="1415682470"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="1.6.152.2"/>
        </slice>
        <from usec="0" sec="1415682367"/>
        <to usec="0" sec="1415682390"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.240.139.159"/>
        </slice>
        <from usec="0" sec="1415682415"/>
        <to usec="0" sec="1415682419"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="15.13.10.109"/>
        </slice>
        <from usec="0" sec="1415682435"/>
        <to usec="0" sec="1415682450"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="219.15.19.217"/>
        </slice>
        <from usec="0" sec="1415682476"/>
        <to usec="0" sec="1415682544"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="41.106.85.70"/>
        </slice>
        <from usec="0" sec="1415682480"/>
        <to usec="0" sec="1415682513"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="157.96.121.179"/>
        </slice>
        <from usec="0" sec="1415682483"/>
        <to usec="0" sec="1415682493"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="178.143.124.132"/>
        </slice>
        <from usec="0" sec="1415682494"/>
        <to usec="0" sec="1415682519"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="223.241.238.194"/>
        </slice>
        <from usec="0" sec="1415682552"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="135.193.224.237"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682648"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="147.240.150.28"/>
        </slice>
        <from usec="0" sec="1415682001"/>
        <to usec="0" sec="1415682644"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.114.35.193"/>
        </slice>
        <from usec="0" sec="1415682007"/>
        <to usec="0" sec="1415682644"/>
    </anomaly>
    <anomaly type="notice" value="0.663686,1.348830,504,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="215.114.34.80" dst_ip="50.58.74.67" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682803"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="187.187.105.35"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682729"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="168.76.171.83"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682730"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="147.228.240.109"/>
        </slice>
        <from usec="0" sec="1415682003"/>
        <to usec="0" sec="1415682733"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="147.228.68.54"/>
        </slice>
        <from usec="0" sec="1415682024"/>
        <to usec="0" sec="1415682721"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="124.30.92.222" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682828"/>
    </anomaly>
    <anomaly type="notice" value="0.750830,1.385500,504,1 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="114.72.127.222" dst_port="443"/>
            <filter dst_ip="114.72.127.222" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682811"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="215.114.34.172"/>
        </slice>
        <from usec="0" sec="1415682080"/>
        <to usec="0" sec="1415682819"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="186.30.14.88" dst_port="443"/>
            <filter src_ip="186.30.14.88" dst_ip="166.238.113.188" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682458"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="107.87.33.211" dst_ip="147.226.176.186" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.12.105.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682267"/>
        <to usec="0" sec="1415682900"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="149.243.193.27"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.169.86"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.81.146" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="73.191.4.234" dst_ip="143.32.137.103" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682193"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.57.255" src_port="53"/>
            <filter dst_ip="215.114.57.255" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.754409,1.425540,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="115.102.146.230" dst_ip="184.116.99.81"/>
            <filter src_ip="115.102.146.230" src_port="53"/>
            <filter dst_ip="184.116.99.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.754409,1.425540,503,0 0 0 1 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="149.243.37.110" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682286"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.94.37"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682046"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter dst_ip="33.58.74.117"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.754409,1.425540,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="147.213.16.124" dst_ip="218.248.182.110" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682015"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.754409,1.425540,020,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPICdurp">
        <slice>
            <filter dst_ip="124.30.92.222"/>
        </slice>
        <from usec="0" sec="1415682002"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.57.251"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="116.187.5.41" dst_ip="215.120.167.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.814690,1.402610,504,0 1 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="61.12.105.94" dst_port="443"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682689"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.32.40"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="203.176.38.112"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="104.223.149.240"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.30.205.14"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.114.56"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.232" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.183.251"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.94.37"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.247.178"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.214.27"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.231.190"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.629250,1.378800,999,1 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.133.90.168" dst_port="61963"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.95.193"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.94.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.142.72"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.252.38"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.91.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.133.88.75"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="147.86.210.244" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="143.32.210.111"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="186.30.76.32"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.142.46"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.89.102" dst_port="26123"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.137.206"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.81.146" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.228.148" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.57.255" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.228.149" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.230.42" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682271"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.245.45.173"/>
        </slice>
        <from usec="0" sec="1415682405"/>
        <to usec="0" sec="1415682451"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="19.13.130.98"/>
        </slice>
        <from usec="0" sec="1415682450"/>
        <to usec="0" sec="1415682496"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="147.240.224.128"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.212.54"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="143.32.209.220"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.228.149"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="118.246.30.212" dst_ip="215.120.167.170" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.138.120" dst_port="64099"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.754409,1.425540,999,0 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.30.193.143" dst_port="19835"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682558"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.249" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="90.245.45.173"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.133.92.57"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.114.56"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.236" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.232" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.95.234"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="149.243.58.151"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.232.153"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.94.37"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.214.27"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="87.181.16.60"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.98.242"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="214.133.85.223"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.81.82" dst_port="6881"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.95.193"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPICrp">
        <slice>
            <filter dst_ip="215.114.56.141"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.94.31" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.142.72"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.142.73"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="56.146.72.252"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.72.33"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="147.86.210.142" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,icmp_error">
        <slice>
            <filter dst_ip="214.133.94.244" src_port="53"/>
            <filter dst_ip="214.133.94.244"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.91.252" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,020,0 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="81.59.127.47"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="147.86.210.244" dst_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="215.114.63.28"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.142.46"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.90.113" dst_port="51413"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="143.32.140.50"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,504,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="215.114.35.222"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.114.137.198"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.226.176.186" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="79.220.240.76" dst_ip="147.226.176.185" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.193.27" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.81.146" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.28.228" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="149.243.32.37" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.112.7.125" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="147.240.228.144" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.30.130.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="186.30.130.11" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.908913,1.368670,504,1 1 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="177.127.158.103" dst_port="443"/>
            <filter dst_ip="177.127.158.103" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682900"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="193.126.29.192" dst_ip="149.243.87.209" src_port="443" dst_port="50528"/>
            <filter src_ip="193.126.29.192" dst_ip="149.243.87.209" src_port="443" dst_port="38509"/>
            <filter src_ip="193.126.29.192" dst_ip="215.120.186.184" src_port="443" dst_port="55269"/>
            <filter src_ip="193.126.29.192" dst_ip="147.240.231.114" src_port="443" dst_port="63876"/>
            <filter src_ip="193.126.29.192" dst_ip="186.30.14.94" src_port="443" dst_port="49874"/>
        </slice>
        <from usec="0" sec="1415682003"/>
        <to usec="0" sec="1415682555"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter dst_ip="147.240.77.81" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="143.32.30.43" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="143.32.6.205" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682495"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="214.133.91.206" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682225"/>
        <to usec="0" sec="1415682541"/>
    </anomaly>
    <anomaly type="notice" value="0.629250,1.378800,999,1 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="74.88.77.232" dst_ip="143.32.211.250"/>
        </slice>
        <from usec="0" sec="1415682171"/>
        <to usec="0" sec="1415682757"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.245.45.173"/>
        </slice>
        <from usec="0" sec="1415682630"/>
        <to usec="0" sec="1415682676"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="205.173.253.22" dst_port="8080"/>
        </slice>
        <from usec="0" sec="1415682765"/>
        <to usec="0" sec="1415682811"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,010,0 0 0 0 0 0 1 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="222.158.204.166" src_port="80" dst_port="1234"/>
        </slice>
        <from usec="0" sec="1415682630"/>
        <to usec="0" sec="1415682811"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="74.88.77.232" dst_ip="143.32.211.250"/>
        </slice>
        <from usec="0" sec="1415682855"/>
        <to usec="0" sec="1415682901"/>
    </anomaly>
    <anomaly type="notice" value="0.633516,1.419030,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="61.5.117.231" src_port="5158"/>
        </slice>
        <from usec="0" sec="1415682855"/>
        <to usec="0" sec="1415682901"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="186.30.97.81" dst_port="80"/>
        </slice>
        <from usec="0" sec="1415682011"/>
        <to usec="0" sec="1415682632"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,011,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="0.218.88.59" src_port="8088" dst_port="6000"/>
        </slice>
        <from usec="0" sec="1415682830"/>
        <to usec="0" sec="1415682831"/>
    </anomaly>
    <anomaly type="notice" value="0.422022,1.365900,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="1.58.150.70" dst_ip="149.243.185.72"/>
            <filter src_ip="1.58.150.70" src_port="80"/>
            <filter src_ip="1.58.150.70" src_port="443"/>
            <filter dst_ip="149.243.185.72" src_port="443"/>
            <filter src_ip="92.226.211.140" dst_ip="149.243.185.72" src_port="80"/>
            <filter src_ip="53.115.107.17" dst_ip="149.243.185.72" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682644"/>
        <to usec="0" sec="1415682646"/>
    </anomaly>
    <anomaly type="notice" value="0.592688,1.413060,503,0 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="197.193.91.121"/>
            <filter src_ip="203.113.234.212" src_port="80"/>
        </slice>
        <from usec="0" sec="1415682003"/>
        <to usec="0" sec="1415682556"/>
    </anomaly>
    <anomaly type="notice" value="0.783362,1.396570,504,0 1 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="209.96.204.172" src_port="443"/>
        </slice>
        <from usec="0" sec="1415682000"/>
        <to usec="0" sec="1415682646"/>
    </anomaly>
    <anomaly type="notice" value="0.750830,1.385500,999,1 0 0 1 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="215.120.186.184" src_port="53"/>
        </slice>
        <from usec="0" sec="1415682004"/>
        <to usec="0" sec="1415682880"/>
    </anomaly>
</admd:annotation>
