<admd:annotation xmlns:admd="http://www.nict.go.jp/admd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.nict.go.jp/admd admd.xsd">
    <algorithm version="Graph-based combination of traffic classifier using SCANN" name="0.0.1">
        <description>Based on R.Fontugne et al. COST-TMA 2010</description>
        <url>http://www.fukuda-lab.org/~romain</url>
    </algorithm>
    <analysis>
        <description>MAWILab</description>
    </analysis>
    <dataset>
        <description>MAWI</description>
        <url>http://tracer.csl.sony.co.jp/mawi/</url>
    </dataset>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.105.55.248" dst_ip="34.232.218.169" src_port="23495" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360684"/>
        <to usec="0" sec="1418360824"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.146.92" dst_ip="176.136.118.30" src_port="50213" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418360906"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="211.10.88.34" dst_ip="180.85.247.255" src_port="443" dst_port="59533" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361095"/>
        <to usec="0" sec="1418361097"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="218.243.4.16" dst_ip="173.209.4.74" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418361135"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="93.52.21.244" dst_ip="212.141.195.213" src_port="53972" dst_port="54704" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361001"/>
        <to usec="0" sec="1418361014"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.225.128" dst_ip="8.166.27.102" src_port="60534" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361086"/>
        <to usec="0" sec="1418361088"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="209.237.61.12"/>
        </slice>
        <from usec="0" sec="1418360454"/>
        <to usec="0" sec="1418360618"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.177.90.79" dst_ip="203.8.246.227" src_port="49464" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360742"/>
        <to usec="0" sec="1418360786"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.209.105.24" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361063"/>
        <to usec="0" sec="1418361252"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="62.187.171.92" dst_ip="173.198.112.71" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360741"/>
        <to usec="0" sec="1418360745"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.122.161" dst_ip="119.232.244.71" src_port="54185" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360555"/>
        <to usec="0" sec="1418360703"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.89.62.241" dst_ip="173.209.107.9" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360566"/>
        <to usec="0" sec="1418360797"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="112.6.57.142" dst_ip="213.107.140.55" src_port="443" dst_port="63272" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360775"/>
        <to usec="0" sec="1418360776"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.10.217" dst_ip="27.21.107.174" src_port="49721" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360710"/>
        <to usec="0" sec="1418361283"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.177.30.97" dst_ip="203.8.247.226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360682"/>
        <to usec="0" sec="1418360788"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.5.195" dst_ip="219.120.235.59" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360561"/>
        <to usec="0" sec="1418360761"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.10.210" dst_ip="145.108.200.173" src_port="4254" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360422"/>
        <to usec="0" sec="1418361250"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.4.130" dst_ip="150.222.73.144" src_port="55277" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360920"/>
        <to usec="0" sec="1418361015"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.136.125" dst_ip="41.224.186.215" src_port="64185" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360602"/>
        <to usec="0" sec="1418360604"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.113.223" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360588"/>
        <to usec="0" sec="1418361277"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.194.136.136" dst_ip="203.8.254.220" src_port="62716" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361081"/>
        <to usec="0" sec="1418361083"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.4.138" dst_ip="47.133.157.24" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360481"/>
        <to usec="0" sec="1418361193"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.157.13.74" dst_ip="47.135.80.180" src_port="49175" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360787"/>
        <to usec="0" sec="1418360790"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="222.81.7.36" dst_ip="173.209.165.233" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360941"/>
        <to usec="0" sec="1418360943"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="122.145.82.158" dst_ip="154.68.165.9" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361066"/>
        <to usec="0" sec="1418361067"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.10.237" dst_ip="87.38.221.205" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360982"/>
        <to usec="0" sec="1418361233"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="87.218.36.25" dst_ip="213.107.128.121" src_port="1415" dst_port="7171" proto="udp"/>
        </slice>
        <from usec="0" sec="1418360886"/>
        <to usec="0" sec="1418360903"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.202.225.252" dst_ip="154.68.11.161" src_port="80" dst_port="62828" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360905"/>
        <to usec="0" sec="1418361119"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.145.82.143" dst_ip="173.209.124.141" src_port="80" dst_port="49719" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361008"/>
        <to usec="0" sec="1418361010"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.209.107.240" dst_ip="12.174.172.69" src_port="49226" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361110"/>
        <to usec="0" sec="1418361185"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="218.209.65.187" dst_ip="173.209.86.250" src_port="1935" dst_port="53530" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360407"/>
        <to usec="0" sec="1418360664"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.175.112.8" dst_ip="173.209.194.141" src_port="443" dst_port="54299" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360467"/>
        <to usec="0" sec="1418360485"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="17.85.59.41" dst_ip="213.107.128.121" src_port="7172" dst_port="7171" proto="udp"/>
        </slice>
        <from usec="0" sec="1418360866"/>
        <to usec="0" sec="1418360867"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.113.234" dst_ip="73.202.174.69" src_port="56889" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361039"/>
        <to usec="0" sec="1418361079"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.157.227.17" dst_ip="8.164.121.35" src_port="62910" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361060"/>
        <to usec="0" sec="1418361062"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.194.225.53" dst_ip="2.149.226.249" src_port="54449" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360801"/>
        <to usec="0" sec="1418360807"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.107.156.160" dst_ip="8.170.186.95" src_port="51555" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360779"/>
        <to usec="0" sec="1418360979"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.10.254" dst_ip="12.175.95.249" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361228"/>
        <to usec="0" sec="1418361268"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="122.145.82.131" dst_ip="154.68.64.212" src_port="80" dst_port="54831" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361101"/>
        <to usec="0" sec="1418361102"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.107.66.84" dst_ip="128.208.20.182" src_port="995" dst_port="25985" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360819"/>
        <to usec="0" sec="1418360830"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.209.110.181" dst_ip="12.175.120.133" src_port="61021" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361273"/>
        <to usec="0" sec="1418361275"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.209.253.13" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360448"/>
        <to usec="0" sec="1418360636"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="171.105.60.247" dst_ip="34.232.218.235" src_port="33038" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361126"/>
        <to usec="0" sec="1418361193"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.157.162.236" dst_ip="73.202.174.225" src_port="42229" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361032"/>
        <to usec="0" sec="1418361033"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.10.248" dst_ip="142.43.188.107" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360488"/>
        <to usec="0" sec="1418361182"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.90.218" dst_ip="12.174.156.246" src_port="50528" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360539"/>
        <to usec="0" sec="1418360621"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.133.7.141" dst_ip="154.68.136.155" src_port="443" dst_port="60080" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360412"/>
        <to usec="0" sec="1418360414"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.120.109"/>
        </slice>
        <from usec="0" sec="1418361227"/>
        <to usec="0" sec="1418361230"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.68.123.218"/>
        </slice>
        <from usec="0" sec="1418360429"/>
        <to usec="0" sec="1418360446"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="85.116.207.229" dst_ip="180.85.46.100" src_port="36733" dst_port="16414" proto="udp"/>
        </slice>
        <from usec="0" sec="1418361055"/>
        <to usec="0" sec="1418361085"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.125.83" dst_ip="210.155.76.89" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361208"/>
        <to usec="0" sec="1418361210"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="47.124.248.115" dst_ip="213.107.128.10" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361019"/>
        <to usec="0" sec="1418361028"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.177.191.159" dst_ip="34.232.213.225" src_port="43640" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360559"/>
        <to usec="0" sec="1418360564"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="143.74.172.205" dst_ip="170.157.204.73" src_port="443" dst_port="55156" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360594"/>
        <to usec="0" sec="1418360595"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="122.145.82.238" dst_ip="154.68.138.7" src_port="80" dst_port="64740" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361085"/>
        <to usec="0" sec="1418361104"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.157.130.43" dst_ip="171.23.77.2" src_port="53602" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360721"/>
        <to usec="0" sec="1418361110"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="118.156.132.66" dst_ip="154.68.10.191" src_port="80" dst_port="63208" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360880"/>
        <to usec="0" sec="1418360905"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="87.147.229.87" dst_ip="212.141.195.213" src_port="2233" dst_port="36448" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361016"/>
        <to usec="0" sec="1418361017"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="89.131.46.190" dst_ip="173.209.163.39" src_port="10348" dst_port="8136" proto="udp"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360574"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="98.85.185.56"/>
        </slice>
        <from usec="0" sec="1418360561"/>
        <to usec="0" sec="1418360562"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.84.101" dst_ip="8.167.191.240" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360476"/>
        <to usec="0" sec="1418360482"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.68.137.100" dst_ip="213.103.126.88" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360737"/>
        <to usec="0" sec="1418360948"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="81.255.144.186"/>
        </slice>
        <from usec="0" sec="1418360724"/>
        <to usec="0" sec="1418360726"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.194.144.56"/>
        </slice>
        <from usec="0" sec="1418360709"/>
        <to usec="0" sec="1418360711"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="145.153.218.86" dst_ip="173.209.1.229" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360884"/>
        <to usec="0" sec="1418360980"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.209.111.150" dst_ip="47.90.110.126" src_port="56139" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360472"/>
        <to usec="0" sec="1418360866"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.106.1.189" dst_ip="203.8.241.151" src_port="50622" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360713"/>
        <to usec="0" sec="1418360734"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.107.128.231" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360764"/>
        <to usec="0" sec="1418361275"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.135.186.75" dst_ip="173.198.136.35" src_port="4500" dst_port="4500" proto="udp"/>
        </slice>
        <from usec="0" sec="1418360555"/>
        <to usec="0" sec="1418360686"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="187.177.191.140" dst_ip="34.232.219.226" src_port="18463" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360486"/>
        <to usec="0" sec="1418360487"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.106.8.156" dst_ip="73.202.174.112" src_port="60836" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361053"/>
        <to usec="0" sec="1418361065"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="173.209.50.74" dst_ip="103.204.134.76" src_port="80" dst_port="65053" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360547"/>
        <to usec="0" sec="1418360548"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.139.124" dst_ip="53.4.71.56" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418360756"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.209.50.72" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360430"/>
        <to usec="0" sec="1418360661"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.107.129.86" dst_ip="77.118.200.143" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360765"/>
        <to usec="0" sec="1418361178"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.68.138.210" dst_ip="219.99.38.50" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360452"/>
        <to usec="0" sec="1418360460"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.136.34" dst_ip="218.180.52.149" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360780"/>
        <to usec="0" sec="1418360796"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="213.107.129.88"/>
        </slice>
        <from usec="0" sec="1418360428"/>
        <to usec="0" sec="1418360430"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.130.28" dst_ip="47.135.135.181" src_port="52639" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361296"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.155.37" dst_ip="8.164.184.89" src_port="49473" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360698"/>
        <to usec="0" sec="1418360741"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.99.78" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361155"/>
        <to usec="0" sec="1418361166"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.107.193" dst_ip="133.149.251.28" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360418"/>
        <to usec="0" sec="1418361257"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="187.177.217.159"/>
        </slice>
        <from usec="0" sec="1418361063"/>
        <to usec="0" sec="1418361065"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.194.43.18" dst_ip="203.8.247.174" src_port="55803" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360531"/>
        <to usec="0" sec="1418361123"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.195.63" dst_ip="76.85.86.82" src_port="58858" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360416"/>
        <to usec="0" sec="1418361179"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.122.217" dst_ip="34.232.208.65" src_port="51122" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360561"/>
        <to usec="0" sec="1418360566"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.194.219.46" dst_ip="203.8.254.99" src_port="56215" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360578"/>
        <to usec="0" sec="1418360579"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="180.80.26.190" dst_ip="170.157.132.201" src_port="65204" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360487"/>
        <to usec="0" sec="1418360492"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="101.93.103.143" dst_ip="173.209.50.74" src_port="52279" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360852"/>
        <to usec="0" sec="1418360853"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="222.40.206.203" dst_ip="173.106.115.106" src_port="443" dst_port="42842" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360860"/>
        <to usec="0" sec="1418360862"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="141.25.200.60" dst_ip="170.157.64.253" src_port="17925" dst_port="59611" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360790"/>
        <to usec="0" sec="1418360792"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.68.209.224"/>
        </slice>
        <from usec="0" sec="1418361190"/>
        <to usec="0" sec="1418361248"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.1.133" dst_ip="47.135.191.179" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360484"/>
        <to usec="0" sec="1418360492"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.125.246" dst_ip="219.120.235.37" src_port="65365" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360794"/>
        <to usec="0" sec="1418361134"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.136.155" dst_ip="47.135.11.19" src_port="60081" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418360418"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="99.9.149.95" dst_ip="170.157.157.37" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361123"/>
        <to usec="0" sec="1418361129"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.106.15.161"/>
        </slice>
        <from usec="0" sec="1418360772"/>
        <to usec="0" sec="1418360775"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="128.202.225.115" dst_ip="180.85.131.133" src_port="80" dst_port="51031" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361178"/>
        <to usec="0" sec="1418361179"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="105.134.234.78" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360726"/>
        <to usec="0" sec="1418360734"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.130.237" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360692"/>
        <to usec="0" sec="1418361134"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="173.209.109.110" dst_ip="79.150.68.56" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360794"/>
        <to usec="0" sec="1418360807"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.68.137.206" dst_ip="12.174.173.236" src_port="55549" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361193"/>
        <to usec="0" sec="1418361195"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.11.138" src_port="52051" proto="udp"/>
        </slice>
        <from usec="0" sec="1418360580"/>
        <to usec="0" sec="1418361210"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.157.19.198" dst_ip="124.159.35.144" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360855"/>
        <to usec="0" sec="1418360862"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.137.224"/>
        </slice>
        <from usec="0" sec="1418360581"/>
        <to usec="0" sec="1418360583"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.107.149.196" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361144"/>
        <to usec="0" sec="1418361294"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="94.180.30.135" dst_ip="173.209.227.127" src_port="54008" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360975"/>
        <to usec="0" sec="1418360976"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="211.75.74.45" dst_ip="170.157.71.87" src_port="443" dst_port="55407" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360702"/>
        <to usec="0" sec="1418360704"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.157.227.244" dst_ip="12.175.110.22" src_port="61262" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360638"/>
        <to usec="0" sec="1418360640"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.213.168" dst_ip="12.175.252.242" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360422"/>
        <to usec="0" sec="1418360767"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.106.0.85" dst_ip="203.8.253.2" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361018"/>
        <to usec="0" sec="1418361074"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="140.22.212.255" dst_ip="173.209.51.201" src_port="20874" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360889"/>
        <to usec="0" sec="1418360891"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.11.153" dst_ip="12.175.126.161" src_port="49308" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361236"/>
        <to usec="0" sec="1418361260"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.209.5.7" dst_ip="73.201.163.81" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360677"/>
        <to usec="0" sec="1418360744"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="154.68.11.156" dst_ip="218.180.52.149" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360742"/>
        <to usec="0" sec="1418360756"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.136.165" dst_ip="106.94.164.179" src_port="58948" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360654"/>
        <to usec="0" sec="1418360866"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.107.128.44" dst_ip="140.176.179.50" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360930"/>
        <to usec="0" sec="1418361279"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="213.107.64.130" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360719"/>
        <to usec="0" sec="1418360721"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="170.157.214.70" dst_ip="218.209.67.177" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360561"/>
        <to usec="0" sec="1418361247"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="140.92.129.206" dst_ip="180.85.247.115" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360548"/>
        <to usec="0" sec="1418360582"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.209.163.8" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360636"/>
        <to usec="0" sec="1418360782"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="1.145.221.200" dst_ip="173.209.248.122" src_port="3389" dst_port="62075" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360975"/>
        <to usec="0" sec="1418360977"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="122.145.83.215" dst_ip="153.106.248.252" src_port="80" dst_port="17421" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361101"/>
        <to usec="0" sec="1418361103"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.107.150.250" dst_ip="193.121.214.15" src_port="50387" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360429"/>
        <to usec="0" sec="1418361126"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.144.224.238"/>
        </slice>
        <from usec="0" sec="1418360735"/>
        <to usec="0" sec="1418360737"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.137.158" dst_ip="73.202.174.39" src_port="52624" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360999"/>
        <to usec="0" sec="1418361044"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.74.246" dst_ip="73.202.174.136" src_port="50157" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360681"/>
        <to usec="0" sec="1418360708"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.198.171.99" dst_ip="154.68.109.30" src_port="80" dst_port="49679" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361218"/>
        <to usec="0" sec="1418361219"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="111.194.51.217" dst_ip="180.85.7.248" src_port="8777" dst_port="59609" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360601"/>
        <to usec="0" sec="1418360647"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.198.171.108" dst_ip="154.68.109.30" src_port="80" dst_port="50533" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360945"/>
        <to usec="0" sec="1418360946"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.98.226"/>
        </slice>
        <from usec="0" sec="1418361097"/>
        <to usec="0" sec="1418361099"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.107.140.52" dst_ip="112.6.57.132" src_port="60309" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360781"/>
        <to usec="0" sec="1418360950"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.195.232"/>
        </slice>
        <from usec="0" sec="1418360778"/>
        <to usec="0" sec="1418360866"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,malphfl">
        <slice>
            <filter src_ip="41.217.178.184" dst_ip="173.209.194.3" src_port="443" dst_port="59595" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360796"/>
        <to usec="0" sec="1418360797"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="170.157.245.83" dst_ip="73.202.174.225" src_port="4547" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360416"/>
        <to usec="0" sec="1418360418"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.47.51" dst_ip="53.148.184.154" src_port="52771" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360637"/>
        <to usec="0" sec="1418360777"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.141.201.35" dst_ip="203.8.234.67" src_port="36722" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360422"/>
        <to usec="0" sec="1418360424"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.177.192.158" dst_ip="203.8.254.164" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361055"/>
        <to usec="0" sec="1418361272"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="21.208.225.122" dst_ip="180.85.29.162" src_port="50343" dst_port="55717" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360852"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.107.141.255"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360627"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.186.157" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361165"/>
        <to usec="0" sec="1418361205"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.84.111" dst_ip="73.202.174.174" src_port="61210" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360682"/>
        <to usec="0" sec="1418360707"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="94.180.224.19" dst_ip="213.102.103.212" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361190"/>
        <to usec="0" sec="1418361222"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.157.106.14" dst_ip="154.68.186.157" src_port="443" dst_port="63961" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361179"/>
        <to usec="0" sec="1418361181"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="154.68.84.101" dst_ip="73.202.174.73" src_port="63714" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360693"/>
        <to usec="0" sec="1418360701"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.203.230" dst_ip="79.53.204.65" src_port="62950" dst_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361131"/>
        <to usec="0" sec="1418361133"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="212.141.202.142" dst_ip="212.141.202.142"/>
        </slice>
        <from usec="0" sec="1418360423"/>
        <to usec="0" sec="1418361271"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="79.53.192.13"/>
        </slice>
        <from usec="0" sec="1418360590"/>
        <to usec="0" sec="1418360592"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="154.68.137.72" dst_port="443"/>
            <filter dst_ip="79.53.195.233" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360701"/>
        <to usec="0" sec="1418361127"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.106.75.102" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360740"/>
        <to usec="0" sec="1418360743"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="173.88.119.129" dst_ip="34.232.211.38" src_port="49783" dst_port="443"/>
            <filter src_ip="173.106.107.38" dst_ip="34.232.211.38" src_port="51806" dst_port="443"/>
            <filter src_ip="173.106.114.137" dst_ip="34.232.211.38" src_port="54269" dst_port="443"/>
            <filter src_ip="173.106.8.171" dst_ip="34.232.211.38" src_port="51467" dst_port="443"/>
            <filter src_ip="173.106.120.140" dst_ip="34.232.211.38" src_port="45744" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360761"/>
        <to usec="0" sec="1418360775"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="154.68.248.201"/>
        </slice>
        <from usec="0" sec="1418360781"/>
        <to usec="0" sec="1418360927"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="154.68.136.184" dst_ip="53.4.71.99" src_port="51284" dst_port="80"/>
            <filter src_ip="154.68.136.184" dst_ip="53.4.71.99" src_port="51271" dst_port="80"/>
            <filter src_ip="154.68.136.184" dst_ip="53.4.71.99" src_port="51256" dst_port="80"/>
            <filter src_ip="154.68.136.184" dst_ip="53.4.71.99" src_port="51126" dst_port="80"/>
            <filter src_ip="154.68.79.44" dst_ip="53.4.71.99" src_port="58198" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360616"/>
        <to usec="0" sec="1418360953"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="154.68.163.246" dst_port="993"/>
            <filter dst_ip="154.68.163.246" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418361200"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="187.177.166.218" dst_ip="34.232.219.226" src_port="65400" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360681"/>
        <to usec="0" sec="1418360986"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="173.106.120.140" dst_ip="173.106.120.140" src_port="443" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360594"/>
        <to usec="0" sec="1418360657"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="170.157.211.160"/>
        </slice>
        <from usec="0" sec="1418360793"/>
        <to usec="0" sec="1418360806"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.209.50.74" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361237"/>
        <to usec="0" sec="1418361266"/>
    </anomaly>
    <anomaly type="notice" value="0.752630,1.360150,503,1 1 0 1 0 0 0 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.209.50.72" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361275"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="34.232.213.225" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360707"/>
        <to usec="0" sec="1418361255"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="213.102.103.246" dst_port="25"/>
        </slice>
        <from usec="0" sec="1418360681"/>
        <to usec="0" sec="1418360727"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter dst_ip="12.175.120.133"/>
        </slice>
        <from usec="0" sec="1418361264"/>
        <to usec="0" sec="1418361266"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="77.210.109.168"/>
        </slice>
        <from usec="0" sec="1418360510"/>
        <to usec="0" sec="1418360511"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="173.106.107.100" dst_ip="47.90.110.9" dst_port="80"/>
            <filter src_ip="173.209.42.115" dst_ip="47.90.110.9" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360748"/>
        <to usec="0" sec="1418361194"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter dst_ip="218.180.52.149"/>
        </slice>
        <from usec="0" sec="1418360972"/>
        <to usec="0" sec="1418360974"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="53.149.129.110" dst_ip="170.157.173.138" src_port="80"/>
            <filter src_ip="202.174.231.51" dst_ip="170.157.173.138" src_port="80"/>
        </slice>
        <from usec="0" sec="1418360736"/>
        <to usec="0" sec="1418361183"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="2.225.190.89" dst_ip="2.225.190.89" src_port="22" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360561"/>
        <to usec="0" sec="1418360562"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="200.202.93.223" dst_ip="173.209.51.201" dst_port="80"/>
            <filter src_ip="94.161.12.59" dst_ip="173.209.51.201" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418361241"/>
        <to usec="0" sec="1418361243"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="209.237.174.14" dst_ip="154.68.216.73" src_port="80" dst_port="37564" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360545"/>
        <to usec="0" sec="1418360547"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptpla">
        <slice>
            <filter src_ip="213.102.103.157" dst_ip="12.157.96.121" src_port="51515" dst_port="443"/>
            <filter src_ip="170.157.156.141" dst_ip="12.157.96.121" src_port="55371" dst_port="443"/>
            <filter src_ip="170.157.143.169" dst_ip="12.157.96.121" src_port="51761" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360571"/>
        <to usec="0" sec="1418360836"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="212.141.196.32" dst_ip="91.159.18.120" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360896"/>
        <to usec="0" sec="1418361118"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="122.145.82.243" dst_ip="154.68.126.242" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361083"/>
        <to usec="0" sec="1418361086"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="213.103.229.120" dst_ip="173.209.1.197" src_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360443"/>
        <to usec="0" sec="1418360455"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,901,1 0 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="91.124.36.220" dst_ip="91.124.36.220" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360948"/>
        <to usec="0" sec="1418360973"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="154.68.174.173"/>
        </slice>
        <from usec="0" sec="1418360566"/>
        <to usec="0" sec="1418360646"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.138.177" dst_ip="197.91.241.237" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360759"/>
        <to usec="0" sec="1418360773"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="198.34.32.0"/>
        </slice>
        <from usec="0" sec="1418360803"/>
        <to usec="0" sec="1418360805"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.147.167.215"/>
        </slice>
        <from usec="0" sec="1418360608"/>
        <to usec="0" sec="1418360610"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="94.226.37.171" dst_ip="154.68.114.125" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360485"/>
        <to usec="0" sec="1418360665"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="213.107.128.105"/>
        </slice>
        <from usec="0" sec="1418361220"/>
        <to usec="0" sec="1418361230"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.74.181"/>
        </slice>
        <from usec="0" sec="1418360683"/>
        <to usec="0" sec="1418360685"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.88.119.236" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360718"/>
        <to usec="0" sec="1418361214"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="93.112.20.99" dst_port="3389" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360408"/>
        <to usec="0" sec="1418361185"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.135.24" dst_ip="2.214.229.115" dst_port="80" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360691"/>
        <to usec="0" sec="1418360943"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,point_to_point">
        <slice>
            <filter src_ip="94.25.78.66" dst_ip="212.141.196.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418361181"/>
        <to usec="0" sec="1418361185"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.229.197.85" src_port="17660" dst_port="1269"/>
        </slice>
        <from usec="0" sec="1418360916"/>
        <to usec="0" sec="1418360917"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.229.197.69" src_port="29659" dst_port="8088"/>
        </slice>
        <from usec="0" sec="1418360702"/>
        <to usec="0" sec="1418360703"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,999,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="212.141.197.14"/>
        </slice>
        <from usec="0" sec="1418360916"/>
        <to usec="0" sec="1418360922"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.115.102.57" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360945"/>
        <to usec="0" sec="1418360954"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="67.210.70.52" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360998"/>
        <to usec="0" sec="1418361009"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.8.25.157" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361296"/>
        <to usec="0" sec="1418361298"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.252.81.180" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360880"/>
        <to usec="0" sec="1418360890"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.125.100.183"/>
        </slice>
        <from usec="0" sec="1418361011"/>
        <to usec="0" sec="1418361012"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.186.236.152" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361097"/>
        <to usec="0" sec="1418361108"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.41.85.184" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361084"/>
        <to usec="0" sec="1418361106"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.140.74.123" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360969"/>
        <to usec="0" sec="1418360981"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.76.8.110" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360558"/>
        <to usec="0" sec="1418360574"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.23.101.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361190"/>
        <to usec="0" sec="1418361208"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.2.78.80" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361201"/>
        <to usec="0" sec="1418361218"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.203.138.154" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360974"/>
        <to usec="0" sec="1418360976"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.50.101.55" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360648"/>
        <to usec="0" sec="1418360649"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.135.63.54" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360664"/>
        <to usec="0" sec="1418360665"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.19.118.75" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360786"/>
        <to usec="0" sec="1418360794"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.99.131.79" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360518"/>
        <to usec="0" sec="1418360523"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.252.254.240" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361242"/>
        <to usec="0" sec="1418361253"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.206.112.55" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360608"/>
        <to usec="0" sec="1418360610"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.88.95.63" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360614"/>
        <to usec="0" sec="1418360623"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.192.107.133" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361072"/>
        <to usec="0" sec="1418361081"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.144.172.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361169"/>
        <to usec="0" sec="1418361195"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.61.151"/>
        </slice>
        <from usec="0" sec="1418361193"/>
        <to usec="0" sec="1418361196"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.108.248.6" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360864"/>
        <to usec="0" sec="1418360869"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.153.26.31" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360714"/>
        <to usec="0" sec="1418360724"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.247.145.36" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360450"/>
        <to usec="0" sec="1418360462"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.165.210.136" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360968"/>
        <to usec="0" sec="1418360970"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="56.232.60.212" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360598"/>
        <to usec="0" sec="1418360600"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.229.108.228" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360714"/>
        <to usec="0" sec="1418360726"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.234.177.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360577"/>
        <to usec="0" sec="1418360582"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="17.94.93.76" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360693"/>
        <to usec="0" sec="1418360696"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.40.250.163" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361126"/>
        <to usec="0" sec="1418361128"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.16.198.196" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360858"/>
        <to usec="0" sec="1418360866"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.105.16.82" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360717"/>
        <to usec="0" sec="1418360727"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.231.41.131" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361094"/>
        <to usec="0" sec="1418361106"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.52.80.176" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361275"/>
        <to usec="0" sec="1418361276"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.232.223.82" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361135"/>
        <to usec="0" sec="1418361156"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.34.248.125" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360865"/>
        <to usec="0" sec="1418360870"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.45.91.199" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360781"/>
        <to usec="0" sec="1418360792"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.107.132.79" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361078"/>
        <to usec="0" sec="1418361089"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.24.185.200" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360587"/>
        <to usec="0" sec="1418360591"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.93.82.29" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360578"/>
        <to usec="0" sec="1418360590"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="18.169.108.18" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360985"/>
        <to usec="0" sec="1418360987"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="139.252.146.139" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360985"/>
        <to usec="0" sec="1418360987"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.14.67.152" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360863"/>
        <to usec="0" sec="1418360865"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.171.112.214" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361135"/>
        <to usec="0" sec="1418361152"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="142.53.100.163" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361124"/>
        <to usec="0" sec="1418361136"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="83.26.30.112" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361064"/>
        <to usec="0" sec="1418361076"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.22.199.120" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361190"/>
        <to usec="0" sec="1418361205"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="176.212.41.111" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360433"/>
        <to usec="0" sec="1418360449"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.133.135.77" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360751"/>
        <to usec="0" sec="1418360761"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.85.167.179" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360732"/>
        <to usec="0" sec="1418360743"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="103.64.129.62" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360955"/>
        <to usec="0" sec="1418360956"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.129.128.82" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360791"/>
        <to usec="0" sec="1418360795"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="81.233.139.73" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361174"/>
        <to usec="0" sec="1418361194"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.220.36.120" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361248"/>
        <to usec="0" sec="1418361263"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="141.230.53.13" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360890"/>
        <to usec="0" sec="1418360906"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.185.118.195" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418361269"/>
        <to usec="0" sec="1418361271"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="90.235.253.102" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360830"/>
        <to usec="0" sec="1418360845"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,010,1 0 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.242.142.185" dst_port="23" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360567"/>
        <to usec="0" sec="1418360576"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="88.171.153.49" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418361183"/>
        <to usec="0" sec="1418361185"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="85.203.138.154" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360975"/>
        <to usec="0" sec="1418360976"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="88.99.131.79" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360519"/>
        <to usec="0" sec="1418360520"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,504,1 0 0 0 0 0 0 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.209.228.157" proto="tcp"/>
        </slice>
        <from usec="0" sec="1418360863"/>
        <to usec="0" sec="1418360865"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="4.206.112.55" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360607"/>
        <to usec="0" sec="1418360610"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="31.34.248.125" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360866"/>
        <to usec="0" sec="1418360869"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="86.14.67.152" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360863"/>
        <to usec="0" sec="1418360865"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="85.202.49.83" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360943"/>
        <to usec="0" sec="1418360944"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="81.172.58.78" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360920"/>
        <to usec="0" sec="1418360921"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="86.16.198.196" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360858"/>
        <to usec="0" sec="1418360865"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,020,1 0 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="143.252.55.67" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360939"/>
        <to usec="0" sec="1418360941"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="124.217.213.79" dst_ip="212.141.210.56" src_port="113"/>
            <filter src_ip="124.217.213.79" dst_ip="212.141.210.56" dst_port="25"/>
        </slice>
        <from usec="0" sec="1418360683"/>
        <to usec="0" sec="1418360763"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.102.65.228" dst_ip="56.245.100.97" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360418"/>
        <to usec="0" sec="1418361184"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.139.39" dst_ip="158.141.218.57" src_port="52157" dst_port="80"/>
            <filter src_ip="154.68.139.39" dst_ip="158.141.218.57" src_port="52156" dst_port="80"/>
            <filter src_ip="154.68.139.39" dst_ip="158.141.218.57" src_port="52154" dst_port="80"/>
            <filter src_ip="154.68.139.39" dst_ip="158.141.218.57" src_port="52150" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360422"/>
        <to usec="0" sec="1418361298"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="219.120.235.59" dst_ip="173.209.5.195" src_port="80" dst_port="52890"/>
            <filter src_ip="219.120.235.59" dst_ip="173.209.5.195" src_port="80" dst_port="52888"/>
            <filter src_ip="219.120.235.59" dst_ip="173.209.5.195" src_port="80" dst_port="52887"/>
            <filter src_ip="219.120.235.59" dst_ip="173.209.5.195" src_port="80" dst_port="52886"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418360562"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.172.225" dst_ip="47.135.149.64" src_port="49716" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418361292"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="116.67.236.119" dst_ip="180.85.4.113" src_port="80" dst_port="56623"/>
        </slice>
        <from usec="0" sec="1418360567"/>
        <to usec="0" sec="1418360569"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="154.68.11.39" dst_ip="198.30.65.72" src_port="61683" dst_port="80"/>
            <filter src_ip="154.68.11.39" dst_ip="72.47.111.71" src_port="61684" dst_port="80"/>
            <filter src_ip="154.68.11.39" dst_ip="140.92.156.174" src_port="61680" dst_port="80"/>
            <filter src_ip="154.68.11.39" dst_ip="93.141.43.72" src_port="61681" dst_port="80"/>
            <filter src_ip="154.68.11.39" dst_ip="198.30.65.56" src_port="61686" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418361290"/>
        <to usec="0" sec="1418361292"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.198.171.179" dst_ip="154.68.10.122" src_port="80" dst_port="59572"/>
        </slice>
        <from usec="0" sec="1418360577"/>
        <to usec="0" sec="1418361199"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="170.157.130.248" dst_ip="12.157.211.8" src_port="49178" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418360431"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="154.68.10.122" dst_ip="111.198.171.179" src_port="59572" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360418"/>
        <to usec="0" sec="1418361294"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.28.152.102" dst_ip="180.85.221.11" src_port="80" dst_port="8121"/>
        </slice>
        <from usec="0" sec="1418361086"/>
        <to usec="0" sec="1418361088"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,999,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.209.1.73" dst_ip="4.176.54.22" src_port="22222" dst_port="1061"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360756"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="146.181.202.245" dst_ip="173.209.108.13" src_port="80" dst_port="61541"/>
        </slice>
        <from usec="0" sec="1418361174"/>
        <to usec="0" sec="1418361193"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.215.219.225" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360468"/>
        <to usec="0" sec="1418360480"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,504,1 1 0 0 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.68.105.71" dst_port="80"/>
            <filter src_ip="154.68.105.71" dst_ip="47.133.182.171" dst_port="443"/>
            <filter src_ip="154.68.105.71" dst_ip="8.167.210.138" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360751"/>
        <to usec="0" sec="1418360789"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,mptplaHTTP">
        <slice>
            <filter src_ip="154.68.172.47" dst_ip="218.205.208.111" src_port="8914" dst_port="80"/>
            <filter src_ip="154.68.172.47" dst_ip="218.205.208.111" src_port="8907" dst_port="80"/>
            <filter src_ip="173.209.163.24" dst_ip="218.205.208.111" src_port="49336" dst_port="80"/>
            <filter src_ip="173.209.163.24" dst_ip="218.205.208.111" src_port="49334" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360959"/>
        <to usec="0" sec="1418361135"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,504,1 1 0 0 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.107.140.32" dst_ip="16.86.111.120" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360416"/>
        <to usec="0" sec="1418361276"/>
    </anomaly>
    <anomaly type="notice" value="0.676308,1.391810,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="212.141.202.142" dst_ip="212.141.202.142"/>
        </slice>
        <from usec="0" sec="1418360451"/>
        <to usec="0" sec="1418360877"/>
    </anomaly>
    <anomaly type="notice" value="0.676308,1.391810,901,0 1 0 0 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="91.124.36.220" dst_ip="91.124.36.220" proto="icmp"/>
        </slice>
        <from usec="0" sec="1418360948"/>
        <to usec="0" sec="1418360953"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="145.144.164.40" dst_ip="213.102.103.216" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360710"/>
        <to usec="0" sec="1418360721"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt139445">
        <slice>
            <filter src_ip="80.80.118.172" dst_port="139"/>
        </slice>
        <from usec="0" sec="1418360559"/>
        <to usec="0" sec="1418360599"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.229.197.67" src_port="37660" dst_port="9064"/>
        </slice>
        <from usec="0" sec="1418361088"/>
        <to usec="0" sec="1418361089"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.168.108.253" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361200"/>
        <to usec="0" sec="1418361214"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.135.215.132" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361004"/>
        <to usec="0" sec="1418361015"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.113.91.60" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360546"/>
        <to usec="0" sec="1418360560"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="119.252.27.86" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361120"/>
        <to usec="0" sec="1418361132"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.169.8.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361134"/>
        <to usec="0" sec="1418361155"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.7.252.218" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360636"/>
        <to usec="0" sec="1418360648"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.199.226.126" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360628"/>
        <to usec="0" sec="1418360645"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.208.247.53" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360928"/>
        <to usec="0" sec="1418360933"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.253.172.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360760"/>
        <to usec="0" sec="1418360772"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.246.107.102" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361227"/>
        <to usec="0" sec="1418361239"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.200.202.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361023"/>
        <to usec="0" sec="1418361033"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="87.55.215.190" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360880"/>
        <to usec="0" sec="1418360888"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.87.182.162" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360503"/>
        <to usec="0" sec="1418360511"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.171.153.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361183"/>
        <to usec="0" sec="1418361192"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.28.187.182" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360566"/>
        <to usec="0" sec="1418360576"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="76.247.243.203" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361049"/>
        <to usec="0" sec="1418361074"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.175.59.24" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360458"/>
        <to usec="0" sec="1418360470"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.143.183.185" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418360424"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.245.12.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360608"/>
        <to usec="0" sec="1418360616"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.91.225.121" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361180"/>
        <to usec="0" sec="1418361196"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.252.78.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360819"/>
        <to usec="0" sec="1418360831"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.11.43.187" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360557"/>
        <to usec="0" sec="1418360581"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.172.58.78" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360914"/>
        <to usec="0" sec="1418360921"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.4.73.17" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360575"/>
        <to usec="0" sec="1418360580"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="91.124.36.220" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360948"/>
        <to usec="0" sec="1418360973"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.132.170.212" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361086"/>
        <to usec="0" sec="1418361102"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="81.138.151.119" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361131"/>
        <to usec="0" sec="1418361147"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.194.242.226" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360779"/>
        <to usec="0" sec="1418360806"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.19.42.113" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360798"/>
        <to usec="0" sec="1418360823"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.168.227.164" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361205"/>
        <to usec="0" sec="1418361218"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="135.23.29.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360618"/>
        <to usec="0" sec="1418360630"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.53.230.123" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360948"/>
        <to usec="0" sec="1418360962"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="140.73.140.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361082"/>
        <to usec="0" sec="1418361094"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.81.178.28" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361256"/>
        <to usec="0" sec="1418361267"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.140.139.127" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361234"/>
        <to usec="0" sec="1418361248"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.146.93.196" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360747"/>
        <to usec="0" sec="1418360766"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.179.202.79" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360530"/>
        <to usec="0" sec="1418360541"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.160.139.49" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361296"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.209.40.136" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360524"/>
        <to usec="0" sec="1418360549"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.137.28.10" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360699"/>
        <to usec="0" sec="1418360712"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="197.203.33.97" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360721"/>
        <to usec="0" sec="1418360732"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="3.83.126.144" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360774"/>
        <to usec="0" sec="1418360794"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="66.217.225.206" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361077"/>
        <to usec="0" sec="1418361100"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.142.153.94" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361204"/>
        <to usec="0" sec="1418361216"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="92.9.112.222" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360711"/>
        <to usec="0" sec="1418360724"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.97.88.18" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360715"/>
        <to usec="0" sec="1418360727"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.232.63.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361227"/>
        <to usec="0" sec="1418361238"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="2.221.10.47" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361068"/>
        <to usec="0" sec="1418361081"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.245.144.184" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360860"/>
        <to usec="0" sec="1418360870"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="85.193.71.61" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360650"/>
        <to usec="0" sec="1418360656"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.198.29.2" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361271"/>
        <to usec="0" sec="1418361282"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.129.160.8" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360714"/>
        <to usec="0" sec="1418360726"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="89.171.221.3" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360565"/>
        <to usec="0" sec="1418360576"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.226.229.236" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361176"/>
        <to usec="0" sec="1418361201"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.166.12.31" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360443"/>
        <to usec="0" sec="1418360455"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="163.226.103.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360975"/>
        <to usec="0" sec="1418360978"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.181.182.99" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361082"/>
        <to usec="0" sec="1418361083"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="27.245.144.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360803"/>
        <to usec="0" sec="1418360812"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="199.121.87.167" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361081"/>
        <to usec="0" sec="1418361103"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.233.189.250" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360660"/>
        <to usec="0" sec="1418360672"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.236.95.251" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361252"/>
        <to usec="0" sec="1418361263"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="150.216.225.72" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360489"/>
        <to usec="0" sec="1418360514"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="31.4.195.6" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360507"/>
        <to usec="0" sec="1418360520"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="82.187.239.230" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360827"/>
        <to usec="0" sec="1418360850"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="86.235.127.140" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360930"/>
        <to usec="0" sec="1418360941"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="198.2.160.90" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361061"/>
        <to usec="0" sec="1418361073"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="96.144.34.228" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360972"/>
        <to usec="0" sec="1418360973"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="77.112.147.26" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360794"/>
        <to usec="0" sec="1418360805"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="192.244.170.246" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360576"/>
        <to usec="0" sec="1418360580"/>
    </anomaly>
    <anomaly type="notice" value="0.752630,1.360150,010,1 1 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="143.133.37.12" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361057"/>
        <to usec="0" sec="1418361065"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="11.10.215.71" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360469"/>
        <to usec="0" sec="1418360481"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="4.133.41.174" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361204"/>
        <to usec="0" sec="1418361229"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="38.208.67.107" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361203"/>
        <to usec="0" sec="1418361214"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="193.56.224.11" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360945"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="80.100.137.195" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361263"/>
        <to usec="0" sec="1418361275"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="84.230.36.153" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361176"/>
        <to usec="0" sec="1418361190"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="207.151.46.15" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360747"/>
        <to usec="0" sec="1418360758"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="50.215.166.149" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360940"/>
        <to usec="0" sec="1418360951"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="93.141.10.114" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418360783"/>
        <to usec="0" sec="1418360795"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="93.229.197.81" src_port="1202" dst_port="37655"/>
        </slice>
        <from usec="0" sec="1418361147"/>
        <to usec="0" sec="1418361148"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,011,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPRSTACKrp">
        <slice>
            <filter dst_ip="93.229.197.65" src_port="2164" dst_port="31759"/>
        </slice>
        <from usec="0" sec="1418360542"/>
        <to usec="0" sec="1418360543"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="91.125.100.183"/>
        </slice>
        <from usec="0" sec="1418361012"/>
        <to usec="0" sec="1418361022"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="143.192.107.133"/>
        </slice>
        <from usec="0" sec="1418361080"/>
        <to usec="0" sec="1418361081"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="88.181.182.99"/>
        </slice>
        <from usec="0" sec="1418361082"/>
        <to usec="0" sec="1418361083"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="141.230.53.13"/>
        </slice>
        <from usec="0" sec="1418360905"/>
        <to usec="0" sec="1418360906"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="143.133.37.12"/>
        </slice>
        <from usec="0" sec="1418361058"/>
        <to usec="0" sec="1418361061"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="90.235.253.102"/>
        </slice>
        <from usec="0" sec="1418360834"/>
        <to usec="0" sec="1418360835"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="89.171.112.214"/>
        </slice>
        <from usec="0" sec="1418361141"/>
        <to usec="0" sec="1418361152"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="163.226.103.140"/>
        </slice>
        <from usec="0" sec="1418360976"/>
        <to usec="0" sec="1418360978"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,020,1 1 0 0 0 0 0 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="140.191.150.69"/>
        </slice>
        <from usec="0" sec="1418361211"/>
        <to usec="0" sec="1418361219"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,010,1 1 0 0 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="145.64.161.183" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361086"/>
        <to usec="0" sec="1418361097"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="116.73.232.176"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360508"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="82.241.57.161"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360508"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.193.50"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360507"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="193.2.111.126"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360508"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="41.192.83.117"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418360508"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="149.87.82.131"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418360503"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="212.141.204.253"/>
        </slice>
        <from usec="0" sec="1418360404"/>
        <to usec="0" sec="1418360506"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="83.30.243.34"/>
        </slice>
        <from usec="0" sec="1418360407"/>
        <to usec="0" sec="1418360508"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="65.201.17.44"/>
        </slice>
        <from usec="0" sec="1418360450"/>
        <to usec="0" sec="1418360499"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter src_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="130.84.104.154"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360598"/>
    </anomaly>
    <anomaly type="notice" value="0.552631,1.356220,504,1 0 0 1 0 0 0 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="173.209.126.224" dst_port="443"/>
            <filter dst_ip="79.53.195.232" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361183"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="111.198.171.110"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360688"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="133.149.251.28"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418360597"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.203.170"/>
        </slice>
        <from usec="0" sec="1418360404"/>
        <to usec="0" sec="1418360597"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="85.116.229.29"/>
        </slice>
        <from usec="0" sec="1418360417"/>
        <to usec="0" sec="1418360593"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.124.253.248"/>
        </slice>
        <from usec="0" sec="1418360435"/>
        <to usec="0" sec="1418360598"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.209.108.27" dst_ip="155.43.61.223" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361213"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="213.102.87.88"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360688"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.185.163.143"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360686"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="128.220.168.127"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418360685"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="65.100.151.81"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418360682"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.104.89"/>
        </slice>
        <from usec="0" sec="1418360409"/>
        <to usec="0" sec="1418360688"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.209.106.31"/>
        </slice>
        <from usec="0" sec="1418360410"/>
        <to usec="0" sec="1418360688"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,901,0 0 0 1 0 0 0 0 0 0 0 0,empty">
        <slice>
            <filter dst_ip="0.0.0.0"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360778"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.248.196"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360727"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.203.174.105"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360702"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="203.8.235.44"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360773"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.220.169.151"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418360778"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.209.107.152"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418360775"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.209.125.115"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418360774"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="80.42.71.145"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418360777"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.232.102.171"/>
        </slice>
        <from usec="0" sec="1418360414"/>
        <to usec="0" sec="1418360618"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="62.37.251.248"/>
        </slice>
        <from usec="0" sec="1418360415"/>
        <to usec="0" sec="1418360776"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,054,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.228.214.238"/>
        </slice>
        <from usec="0" sec="1418360424"/>
        <to usec="0" sec="1418360751"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.237.46.85"/>
        </slice>
        <from usec="0" sec="1418360478"/>
        <to usec="0" sec="1418360752"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.182.44.69"/>
        </slice>
        <from usec="0" sec="1418360604"/>
        <to usec="0" sec="1418360750"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="53.148.185.196"/>
        </slice>
        <from usec="0" sec="1418360754"/>
        <to usec="0" sec="1418360775"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.160.149.32"/>
        </slice>
        <from usec="0" sec="1418360768"/>
        <to usec="0" sec="1418360775"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="197.19.225.200"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360828"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.209.248.122"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="112.71.79.153"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="173.106.75.105"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360867"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.243.180.199"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.236.50"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.552631,1.356220,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="105.103.71.134" dst_ip="154.68.109.30" src_port="80" dst_port="50363"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="12.171.4.165"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360859"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="129.4.2.150"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360867"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="170.157.63.22"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360854"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="213.107.68.125"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418360867"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="212.141.199.124" dst_ip="84.213.98.49" src_port="22"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="173.205.13.109"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418360868"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="173.209.124.191"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418360704"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="154.68.216.73"/>
        </slice>
        <from usec="0" sec="1418360407"/>
        <to usec="0" sec="1418360847"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="90.228.244.105"/>
        </slice>
        <from usec="0" sec="1418360409"/>
        <to usec="0" sec="1418360866"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="1.177.53.130"/>
        </slice>
        <from usec="0" sec="1418360417"/>
        <to usec="0" sec="1418360813"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.209.101.31"/>
        </slice>
        <from usec="0" sec="1418360418"/>
        <to usec="0" sec="1418360858"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="192.244.182.21"/>
        </slice>
        <from usec="0" sec="1418360445"/>
        <to usec="0" sec="1418360742"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.54.12"/>
        </slice>
        <from usec="0" sec="1418360465"/>
        <to usec="0" sec="1418360714"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="209.203.252.24"/>
        </slice>
        <from usec="0" sec="1418360480"/>
        <to usec="0" sec="1418360816"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="47.163.250.34"/>
        </slice>
        <from usec="0" sec="1418360965"/>
        <to usec="0" sec="1418361200"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.145.32"/>
        </slice>
        <from usec="0" sec="1418360646"/>
        <to usec="0" sec="1418360860"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="47.135.41.121"/>
        </slice>
        <from usec="0" sec="1418360659"/>
        <to usec="0" sec="1418360853"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="12.187.93.43"/>
        </slice>
        <from usec="0" sec="1418360677"/>
        <to usec="0" sec="1418360746"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="87.16.16.139"/>
        </slice>
        <from usec="0" sec="1418360698"/>
        <to usec="0" sec="1418360718"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.194.51.65"/>
        </slice>
        <from usec="0" sec="1418360706"/>
        <to usec="0" sec="1418360738"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.94.181"/>
        </slice>
        <from usec="0" sec="1418360711"/>
        <to usec="0" sec="1418360862"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="210.124.166.17"/>
        </slice>
        <from usec="0" sec="1418360743"/>
        <to usec="0" sec="1418360788"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.194.151.100"/>
        </slice>
        <from usec="0" sec="1418360748"/>
        <to usec="0" sec="1418360817"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="91.251.42.173"/>
        </slice>
        <from usec="0" sec="1418360768"/>
        <to usec="0" sec="1418360839"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="109.142.51.107"/>
        </slice>
        <from usec="0" sec="1418360814"/>
        <to usec="0" sec="1418360823"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="2.159.55.240"/>
        </slice>
        <from usec="0" sec="1418360815"/>
        <to usec="0" sec="1418360840"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="115.89.60.17"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.229.209.248"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361040"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.118.3"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="212.141.207.65"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360957"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="120.181.67.36"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="170.157.145.9"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418360957"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="154.68.186.131" src_port="63559"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.209.210.31"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418360949"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.106.143"/>
        </slice>
        <from usec="0" sec="1418360404"/>
        <to usec="0" sec="1418360953"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,502,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.141.210.92"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.5.255"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418360907"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="170.157.214.66"/>
        </slice>
        <from usec="0" sec="1418360410"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.249.180.39"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418360943"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.165.157"/>
        </slice>
        <from usec="0" sec="1418360432"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="139.254.55.145"/>
        </slice>
        <from usec="0" sec="1418360450"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.107.148.78"/>
        </slice>
        <from usec="0" sec="1418360459"/>
        <to usec="0" sec="1418360940"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.101.63"/>
        </slice>
        <from usec="0" sec="1418360479"/>
        <to usec="0" sec="1418360944"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="173.209.5.225" dst_port="80"/>
            <filter src_ip="173.209.5.225" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360517"/>
        <to usec="0" sec="1418360953"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="180.0.133.49"/>
        </slice>
        <from usec="0" sec="1418360550"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="143.157.58.6"/>
        </slice>
        <from usec="0" sec="1418360727"/>
        <to usec="0" sec="1418360950"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="171.110.246.151"/>
        </slice>
        <from usec="0" sec="1418360763"/>
        <to usec="0" sec="1418360816"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="122.108.69.168"/>
        </slice>
        <from usec="0" sec="1418360798"/>
        <to usec="0" sec="1418360945"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="142.8.50.179"/>
        </slice>
        <from usec="0" sec="1418360917"/>
        <to usec="0" sec="1418360958"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.190.138.43"/>
        </slice>
        <from usec="0" sec="1418360952"/>
        <to usec="0" sec="1418360957"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="145.68.127.100"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="34.232.208.125"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="77.101.139.55"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="1.255.158.89"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="212.141.204.175"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361047"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.209.86.90"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361047"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.77.196"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418361033"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="173.88.125.211"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="128.220.168.123"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418361045"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="92.169.29.6"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="219.141.251.199"/>
        </slice>
        <from usec="0" sec="1418360407"/>
        <to usec="0" sec="1418361042"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.121.169"/>
        </slice>
        <from usec="0" sec="1418360408"/>
        <to usec="0" sec="1418361023"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.194.145.241"/>
        </slice>
        <from usec="0" sec="1418360411"/>
        <to usec="0" sec="1418361044"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.107.66.91"/>
        </slice>
        <from usec="0" sec="1418360414"/>
        <to usec="0" sec="1418361031"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="41.204.194.220"/>
        </slice>
        <from usec="0" sec="1418360423"/>
        <to usec="0" sec="1418361025"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.173.132"/>
        </slice>
        <from usec="0" sec="1418360428"/>
        <to usec="0" sec="1418361043"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="93.82.242.145"/>
        </slice>
        <from usec="0" sec="1418360453"/>
        <to usec="0" sec="1418361042"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.68.135.178"/>
        </slice>
        <from usec="0" sec="1418360468"/>
        <to usec="0" sec="1418361045"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="143.228.232.161"/>
        </slice>
        <from usec="0" sec="1418360490"/>
        <to usec="0" sec="1418361039"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.194.199.123"/>
        </slice>
        <from usec="0" sec="1418360507"/>
        <to usec="0" sec="1418361045"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="77.117.251.180"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418361036"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="211.78.71.180"/>
        </slice>
        <from usec="0" sec="1418360664"/>
        <to usec="0" sec="1418361042"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="8.241.167.10"/>
        </slice>
        <from usec="0" sec="1418360796"/>
        <to usec="0" sec="1418360869"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="12.181.150.176"/>
        </slice>
        <from usec="0" sec="1418360822"/>
        <to usec="0" sec="1418361037"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.99.234.9"/>
        </slice>
        <from usec="0" sec="1418360836"/>
        <to usec="0" sec="1418361042"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="120.168.200.231"/>
        </slice>
        <from usec="0" sec="1418360885"/>
        <to usec="0" sec="1418360893"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="88.81.208.39"/>
        </slice>
        <from usec="0" sec="1418360952"/>
        <to usec="0" sec="1418361039"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="107.95.74.96"/>
        </slice>
        <from usec="0" sec="1418360955"/>
        <to usec="0" sec="1418361040"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="94.111.99.99"/>
        </slice>
        <from usec="0" sec="1418360997"/>
        <to usec="0" sec="1418361008"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.68.104.35"/>
        </slice>
        <from usec="0" sec="1418361000"/>
        <to usec="0" sec="1418361006"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="47.163.250.26"/>
        </slice>
        <from usec="0" sec="1418361023"/>
        <to usec="0" sec="1418361047"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.209.1.150"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361133"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="12.50.10.184"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="154.68.137.118"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361137"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="213.102.96.3"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,ttl_error">
        <slice>
            <filter src_ip="173.194.117.202"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.45.64"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmpHTTP">
        <slice>
            <filter src_ip="109.193.51.244"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418361123"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,010,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.107.148.81"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418361113"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.14.208"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418361131"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="106.135.61.132"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="187.255.177.32"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418361136"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="0.247.150.163"/>
        </slice>
        <from usec="0" sec="1418360408"/>
        <to usec="0" sec="1418361128"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.141.195.13"/>
        </slice>
        <from usec="0" sec="1418360413"/>
        <to usec="0" sec="1418361133"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="47.135.50.105"/>
        </slice>
        <from usec="0" sec="1418360423"/>
        <to usec="0" sec="1418361031"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.125.98"/>
        </slice>
        <from usec="0" sec="1418360506"/>
        <to usec="0" sec="1418361135"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="91.74.116.131"/>
        </slice>
        <from usec="0" sec="1418360509"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="154.68.227.88"/>
        </slice>
        <from usec="0" sec="1418360533"/>
        <to usec="0" sec="1418361066"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.107.128.84"/>
        </slice>
        <from usec="0" sec="1418360535"/>
        <to usec="0" sec="1418361103"/>
    </anomaly>
    <anomaly type="notice" value="0.552631,1.356220,503,1 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="94.89.171.72" dst_ip="154.68.248.197" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360575"/>
        <to usec="0" sec="1418361123"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="94.180.57.148"/>
        </slice>
        <from usec="0" sec="1418360736"/>
        <to usec="0" sec="1418361075"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="8.164.121.202"/>
        </slice>
        <from usec="0" sec="1418360774"/>
        <to usec="0" sec="1418361099"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="68.48.182.73"/>
        </slice>
        <from usec="0" sec="1418360775"/>
        <to usec="0" sec="1418361127"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="77.54.163.43"/>
        </slice>
        <from usec="0" sec="1418360889"/>
        <to usec="0" sec="1418361077"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="8.241.159.26"/>
        </slice>
        <from usec="0" sec="1418360932"/>
        <to usec="0" sec="1418361134"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,icmp_error">
        <slice>
            <filter src_ip="114.19.114.189"/>
        </slice>
        <from usec="0" sec="1418360961"/>
        <to usec="0" sec="1418360972"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="93.252.116.208"/>
        </slice>
        <from usec="0" sec="1418360974"/>
        <to usec="0" sec="1418360979"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="94.161.41.6"/>
        </slice>
        <from usec="0" sec="1418360994"/>
        <to usec="0" sec="1418361076"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,alphflHTTP">
        <slice>
            <filter src_ip="213.139.121.122"/>
        </slice>
        <from usec="0" sec="1418361133"/>
        <to usec="0" sec="1418361138"/>
    </anomaly>
    <anomaly type="notice" value="0.552631,1.356220,999,1 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="144.215.234.178" dst_ip="154.68.11.138" src_port="50872" dst_port="52051"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.143.189.34"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,502,0 0 0 1 0 0 0 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="173.209.126.225"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="154.68.248.201"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.194.24.241"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361220"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ntscUDP">
        <slice>
            <filter src_ip="173.194.119.62"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361226"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.141.195.222" dst_ip="19.72.195.129" dst_port="5667"/>
            <filter src_ip="212.141.195.222" dst_ip="202.53.101.136" dst_port="8140"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361186"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.157.88.195"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418361222"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmp">
        <slice>
            <filter src_ip="170.157.99.34"/>
        </slice>
        <from usec="0" sec="1418360401"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="212.141.193.163" dst_ip="128.249.182.172" src_port="53"/>
            <filter src_ip="212.141.193.163" dst_ip="128.249.182.170" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,999,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="76.107.54.147"/>
        </slice>
        <from usec="0" sec="1418360402"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,010,0 0 0 1 0 0 0 0 0 0 0 0,sntscSYNt">
        <slice>
            <filter src_ip="84.143.188.202"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418361208"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.124.242"/>
        </slice>
        <from usec="0" sec="1418360403"/>
        <to usec="0" sec="1418361225"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="213.107.128.4"/>
        </slice>
        <from usec="0" sec="1418360406"/>
        <to usec="0" sec="1418361227"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="154.68.8.50"/>
        </slice>
        <from usec="0" sec="1418360410"/>
        <to usec="0" sec="1418361219"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="173.88.119.122"/>
        </slice>
        <from usec="0" sec="1418360423"/>
        <to usec="0" sec="1418361219"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,020,0 0 0 1 0 0 0 0 0 0 0 0,sptpDoSIC">
        <slice>
            <filter src_ip="2.196.196.76"/>
        </slice>
        <from usec="0" sec="1418360480"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="194.217.209.33"/>
        </slice>
        <from usec="0" sec="1418360496"/>
        <to usec="0" sec="1418361189"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="80.212.124.0"/>
        </slice>
        <from usec="0" sec="1418360498"/>
        <to usec="0" sec="1418361129"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="213.107.142.241"/>
        </slice>
        <from usec="0" sec="1418360730"/>
        <to usec="0" sec="1418361224"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="170.157.1.71"/>
        </slice>
        <from usec="0" sec="1418360792"/>
        <to usec="0" sec="1418361058"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="202.165.242.179"/>
        </slice>
        <from usec="0" sec="1418360857"/>
        <to usec="0" sec="1418361151"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="163.198.137.17"/>
        </slice>
        <from usec="0" sec="1418360866"/>
        <to usec="0" sec="1418361223"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="170.157.12.220"/>
        </slice>
        <from usec="0" sec="1418360886"/>
        <to usec="0" sec="1418361121"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="113.203.69.163"/>
        </slice>
        <from usec="0" sec="1418360907"/>
        <to usec="0" sec="1418361154"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="82.211.75.93"/>
        </slice>
        <from usec="0" sec="1418360990"/>
        <to usec="0" sec="1418361091"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="53.175.205.182"/>
        </slice>
        <from usec="0" sec="1418361031"/>
        <to usec="0" sec="1418361156"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,503,0 0 0 1 0 0 0 0 0 0 0 0,ptmplaHTTP">
        <slice>
            <filter src_ip="119.126.125.164"/>
        </slice>
        <from usec="0" sec="1418361062"/>
        <to usec="0" sec="1418361187"/>
    </anomaly>
    <anomaly type="notice" value="0.582095,1.381200,504,0 0 0 1 0 0 0 0 0 0 0 0,ptmpla">
        <slice>
            <filter src_ip="173.209.121.55"/>
        </slice>
        <from usec="0" sec="1418361125"/>
        <to usec="0" sec="1418361228"/>
    </anomaly>
    <anomaly type="notice" value="0.552631,1.356220,010,1 0 0 1 0 0 0 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="88.172.178.103" dst_port="23"/>
        </slice>
        <from usec="0" sec="1418361174"/>
        <to usec="0" sec="1418361199"/>
    </anomaly>
    <anomaly type="notice" value="0.651121,1.367030,503,1 1 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="212.141.198.8" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360404"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="214.78.204.245" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360580"/>
        <to usec="0" sec="1418360626"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="154.68.103.232"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,rflatDNS">
        <slice>
            <filter dst_ip="173.198.230.62" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.865306,1.412150,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="211.56.52.141" dst_ip="173.198.230.60"/>
            <filter src_ip="211.56.52.141" dst_ip="153.106.242.196"/>
            <filter src_ip="211.56.52.141" src_port="53"/>
            <filter dst_ip="173.198.230.60" src_port="53"/>
            <filter dst_ip="153.106.242.196" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361134"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.209.48.164" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.209.48.166" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.209.51.6"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.403619,1.363120,503,1 0 0 0 0 0 0 0 0 0 0 0,ntscACK">
        <slice>
            <filter src_ip="212.141.197.6" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360725"/>
        <to usec="0" sec="1418361225"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter src_ip="201.26.103.108" dst_ip="173.88.80.83" dst_port="7"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="192.168.114.56"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.756854,1.394470,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="84.135.63.54"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ptpDoSSYN">
        <slice>
            <filter dst_ip="180.0.79.80"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.865306,1.412150,999,0 0 0 1 0 0 1 0 0 0 0 0,mptmp">
        <slice>
            <filter src_ip="112.238.251.137"/>
            <filter dst_ip="180.85.247.235" dst_port="28131"/>
        </slice>
        <from usec="0" sec="1418360405"/>
        <to usec="0" sec="1418361136"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="213.243.54.154" dst_ip="10.242.45.121" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ptpposcaUDP">
        <slice>
            <filter src_ip="222.10.41.218" dst_ip="212.141.204.166" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.756854,1.394470,020,1 0 0 0 0 0 1 0 0 0 0 0,ntscTCPICdurp">
        <slice>
            <filter dst_ip="85.193.71.61"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.219.146"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.845767,1.387730,999,1 0 0 1 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="173.209.248.122" src_port="3389"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361048"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,504,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="180.85.244.56"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter src_ip="213.102.103.157" dst_ip="135.4.223.249" dst_port="443"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.865306,1.412150,999,0 0 0 1 0 0 1 0 0 0 0 0,salphfl">
        <slice>
            <filter src_ip="173.236.98.73" dst_ip="222.53.64.2" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360400"/>
        <to usec="0" sec="1418361018"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.197.14" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.197.15" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.87.239.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.203.207" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.203.200" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="213.102.85.21" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,053,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.141.196.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.210.57" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.209.51.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.206.84" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.204.233" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360671"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="170.157.203.7"/>
        </slice>
        <from usec="0" sec="1418360715"/>
        <to usec="0" sec="1418360761"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.203.207" src_port="53"/>
            <filter dst_ip="212.141.203.207" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360850"/>
        <to usec="0" sec="1418360896"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.203.203" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418360896"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.209.51.109" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418360850"/>
        <to usec="0" sec="1418360896"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,010,0 0 0 0 0 0 1 0 0 0 0 0,ntscSYNt">
        <slice>
            <filter src_ip="194.185.201.149"/>
        </slice>
        <from usec="0" sec="1418361165"/>
        <to usec="0" sec="1418361211"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.88.116.246"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="180.0.4.133"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.209.111.129" src_port="80"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,053,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="212.141.196.32" dst_port="80"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,504,0 0 0 0 0 0 1 0 0 0 0 0,alphfl">
        <slice>
            <filter dst_ip="12.138.186.243"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,503,0 0 0 0 0 0 1 0 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="180.85.161.99"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.204.208" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.778628,1.418770,999,0 0 0 0 0 0 1 0 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="212.141.204.209" src_port="53"/>
        </slice>
        <from usec="0" sec="1418360625"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.954011,1.486050,999,0 0 0 0 0 0 0 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="209.87.239.111" dst_port="53"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.954011,1.486050,020,0 0 0 0 0 0 0 1 0 0 0 0,ntscUDPUDPrp">
        <slice>
            <filter dst_ip="173.106.67.180"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.954011,1.486050,999,0 0 0 0 0 0 0 1 0 0 0 0,mptpHTTP">
        <slice>
            <filter dst_ip="173.209.108.123"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
    <anomaly type="notice" value="0.954011,1.486050,999,0 0 0 0 0 0 0 1 0 0 0 0,mptp">
        <slice>
            <filter dst_ip="212.141.204.233"/>
        </slice>
        <from usec="0" sec="1418361255"/>
        <to usec="0" sec="1418361301"/>
    </anomaly>
</admd:annotation>
